January 2006 - Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 16.01.2006 - 17.01.2006 GMT
by Automatic cvs log generator 17 Jan '06

17 Jan '06

CVS log entries from 16.01.2006 (Mon) 09:00:00 - 17.01.2006 (Tue) 09:00:03 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/lib/dict.c; Revisions: 1.81, 1.50.2.4.2.3 ===================================================== Log entries ===================================================== Description: Fix a typo in dict_valbyname() Thanks to Razvan Radu. Modified files: File: radiusd/src/lib/dict.c; Revision: 1.81; Date: 2006/01/16 10:21:27; Author: nbk; Lines: (+3 -3) ------------------------------- Description: Pull from CVS head: Fix a typo in dict_valbyname() Modified files: File: radiusd/src/lib/dict.c; Revision: 1.50.2.4.2.3; Date: 2006/01/16 10:21:37; Author: nbk; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/dict.c Revisions: 1.81, 1.50.2.4.2.3 Authors: nbk (+3 -3), nbk (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

rlm_eap.so
by Anton Gorlov 16 Jan '06

16 Jan '06

I'v compiled fresh verison FreeRADIUS (Version 1.1.0) from http://www.freeradius.org/ but i'v got error on program startup: Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no radiusd: symbol lookup error: /usr/lib/freeradius/rlm_eap.so: undefined symbol: eaptype_name2type [root@ring rlm_eap]# uname -a Linux ring.local 2.4.26-std-up-alt13 #1 Mon Nov 14 00:25:14 MSK 2005 i686 unknown unknown GNU/Linux gcc3.3-3.3.3-alt5 -- np: Sentenced - Frozen - The Rain Comes Falling Down

1 0

Automatic report from sources (radiusd) between 15.01.2006 - 16.01.2006 GMT
by Automatic cvs log generator 16 Jan '06

16 Jan '06

CVS log entries from 15.01.2006 (Sun) 09:00:00 - 16.01.2006 (Mon) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/suse/admin-httpd.conf; Revisions: 1.2, 1.1, 1.1.2.1 File: radiusd/suse/lib64.patch; Revisions: 1.1, 1.1.2.1 File: radiusd/suse/rcradiusd; Revisions: 1.3, 1.2.6.1 File: radiusd/suse/edir.patch; Revisions: 1.1, 1.1.2.1 File: radiusd/suse/freeradius.spec; Revisions: 1.17, 1.11.2.6.2.3 File: radiusd/suse/README.SuSE; Revisions: 1.1.2.1 File: radiusd/suse/dialup_admin.patch; Revisions: 1.1, 1.1.2.1 ===================================================== Combined list of identical log entries ===================================================== Description: Add/update the downstream files from Suse. Thanks to Wolfgang Rosenauer <stark(a)suse.de> Modified files: File: radiusd/suse/README.SuSE; Revision: 1.1.2.1; Date: 2006/01/15 15:12:28; Author: nbk; Lines: (+0 -0) File: radiusd/suse/admin-httpd.conf; Revision: 1.2; Date: 2006/01/15 17:37:53; Author: nbk; Lines: (+23 -0) File: radiusd/suse/admin-httpd.conf; Revision: 1.1.2.1; Date: 2006/01/15 15:12:29; Author: nbk; Lines: (+23 -0) File: radiusd/suse/dialup_admin.patch; Revision: 1.1.2.1; Date: 2006/01/15 15:12:29; Author: nbk; Lines: (+139 -0) File: radiusd/suse/edir.patch; Revision: 1.1.2.1; Date: 2006/01/15 15:12:29; Author: nbk; Lines: (+11 -0) File: radiusd/suse/freeradius.spec; Revision: 1.17; Date: 2006/01/15 16:05:34; Author: nbk; Lines: (+82 -42) File: radiusd/suse/freeradius.spec; Revision: 1.11.2.6.2.3; Date: 2006/01/15 15:12:29; Author: nbk; Lines: (+100 -27) File: radiusd/suse/lib64.patch; Revision: 1.1.2.1; Date: 2006/01/15 15:12:30; Author: nbk; Lines: (+44 -0) File: radiusd/suse/rcradiusd; Revision: 1.3; Date: 2006/01/15 16:05:34; Author: nbk; Lines: (+14 -4) File: radiusd/suse/rcradiusd; Revision: 1.2.6.1; Date: 2006/01/15 15:12:30; Author: nbk; Lines: (+14 -4) ===================================================== Log entries ===================================================== Description: file admin-httpd.conf was initially added on branch branch_1_1. Modified files: File: radiusd/suse/admin-httpd.conf; Revision: 1.1; Date: 2006/01/15 15:12:29; Author: nbk; ------------------------------- Description: file dialup_admin.patch was initially added on branch branch_1_1. Modified files: File: radiusd/suse/dialup_admin.patch; Revision: 1.1; Date: 2006/01/15 15:12:29; Author: nbk; ------------------------------- Description: file edir.patch was initially added on branch branch_1_1. Modified files: File: radiusd/suse/edir.patch; Revision: 1.1; Date: 2006/01/15 15:12:29; Author: nbk; ------------------------------- Description: file lib64.patch was initially added on branch branch_1_1. Modified files: File: radiusd/suse/lib64.patch; Revision: 1.1; Date: 2006/01/15 15:12:30; Author: nbk; ===================================================== Summary of modified files ===================================================== File: radiusd/suse/README.SuSE Revisions: 1.1.2.1 Authors: nbk (+0 -0) ------------------------------- File: radiusd/suse/admin-httpd.conf Revisions: 1.2, 1.1, 1.1.2.1 Authors: nbk (+23 -0), nbk, nbk (+23 -0) ------------------------------- File: radiusd/suse/dialup_admin.patch Revisions: 1.1, 1.1.2.1 Authors: nbk, nbk (+139 -0) ------------------------------- File: radiusd/suse/edir.patch Revisions: 1.1, 1.1.2.1 Authors: nbk, nbk (+11 -0) ------------------------------- File: radiusd/suse/freeradius.spec Revisions: 1.17, 1.11.2.6.2.3 Authors: nbk (+82 -42), nbk (+100 -27) ------------------------------- File: radiusd/suse/lib64.patch Revisions: 1.1, 1.1.2.1 Authors: nbk, nbk (+44 -0) ------------------------------- File: radiusd/suse/rcradiusd Revisions: 1.3, 1.2.6.1 Authors: nbk (+14 -4), nbk (+14 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

building freeradius 1.1.0 suse rpm
by Markus Krause 15 Jan '06

15 Jan '06

hi all! first: sorry for not testing the build of suse rpms before the release date .. building freeradius 1.1.0 rpms under suse enterprise server 9 i encountered the follwing problems: 1) freeradius.spec mentions some config files that are (or at least seem for me to be) not present: x99.conf x99passwd.sample commenting them out in freeradius.spec solves the problem on the other hand three files are missing: example.pl otp.conf otppasswd.conf adding the following lines (seems to) fix the problem: %attr(640,-,radiusd) %config(noreplace) /etc/raddb/example.pl %attr(640,-,radiusd) %config(noreplace) /etc/raddb/otp.conf %attr(640,-,radiusd) %config(noreplace) /etc/raddb/otppasswd.sample 2) the next question may be quite stupid so please be patient but i a do not have much "insider knowledge": are all these packages listed in "BuildRequires" in freeradius.spec really nedded?? at least i deleteted "postgresql" (i do not want/need mysql and postgresql server installed on the same machine), "perl-devel" (there is not such package available for suse). i am also wondering why e.g. packages like python and ncurses/ncurses-devel are needed for building. don't get me wrong, i just want to keep the system with as few packages as possible. and the packages libzio and libnscd are also not available in the suse distribution, only via rpmfind.net. 3) i am not sure what is responsible for this: during the bild (rpmbuild -bb freeradius.spec) i got an error that the file "/usr/lib/mysql/libmysqlclient_r.so" is missing. a link (ln -s) to the existing file "/usr/lib/libmysqlclient_r.so.12" solves this problem. after these fixes the building of the rpms runs without problem (at least at the end i got a freeradius-1.1.0-1.suse.i586.rpm which can be installed and runs without problems. sorry again for not testing this before the release date :-( regards, markus -- Markus Krause email: krause(a)biochem.mpg.de Computing Center Tel.: 089 - 89 40 85 99 Group Lottspeich / Proteomics Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

4 13

Automatic report from sources (radiusd) between 14.01.2006 - 15.01.2006 GMT
by Automatic cvs log generator 15 Jan '06

15 Jan '06

CVS log entries from 14.01.2006 (Sat) 09:00:01 - 15.01.2006 (Sun) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.122.2.8.2.3 ===================================================== Log entries ===================================================== Description: Pull from CVS head: Fix ldap_pairget() to copy the whole string from LDAP (closes: #261) and add support for xlat expansion, too. Many thanks to Markus Krause for his help to test the fixes. Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.8.2.3; Date: 2006/01/14 16:38:26; Author: nbk; Lines: (+116 -45) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.122.2.8.2.3 Authors: nbk (+116 -45) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

new eap method: eap-ikev2
by sdfsdv sdfdsf 14 Jan '06

14 Jan '06

Hello all, We're currently working on new eap method for freeradius and wpa_supplicant: eap-ikev2 (http://tools.ietf.org/wg/eap/draft- tschofenig-eap-ikev2-07.txt). Method is able: mutual uthentication (certificate or shared secret based), cryptographic suit negotiation, fast rekeying (fast reconnect), channel binding and so on. We currently have some working implementation but without fast rekeying, channel binding and some other minor things. I would to ask You for some help. Some thing regarding freeradius are unclear to us. First, we can't find any kind of fast rekeying code in reeradius. Is freeradius supporting anyhow such thing? Any other eap method is using fast rekeying? eap-ikev2 is using it's own id data to identify supplicant and sever, it can be different than eap id. And we have a problem with users authorization, in a situation when eap id is different than internal ikev2 id, freeradius is giving access to user data (gathered in users.conf) only for users described by an eap id. Can eap method somehow access other users data? I would appreciate any help. Regards, Rafal Mijal ---------------------------------------------------- Wybierz Książkę Roku, wygraj nagrody! http://klik.wp.pl/?adr=http%3A%2F%2Fadv.reklama.wp.pl%2Fas%2Fksiazka_roku.h…

2 1

FreeRadius not responding to a remote machine
by Shan T 13 Jan '06

13 Jan '06

Hi, I am trying to setup freeradius server (ver 1.0.5). I have installed the server and tested it successfully from the local machine using RADCLIENT utility. But I am not able to connect to the freeradius from a remote machine runs on Linux. I have configured the remote machine in the clients.conf file and ran the server on debug mode. But the server is not showing any trace of getting a connection from the server. I even tried to connnect to the server from a windows XP machine using a utility called NTRadPing. But it also behaves the same way. Here are the trace from my Server and the Client consoles. Can anyone please suggest a solution? [root@99Y69F3 root]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 9.22.81.109:32780 , id=244, length=44 User-Name = "root" User-Password = "ibmlinux1" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "root", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 modcall[authenticate]: module "unix" returns ok for request 0 modcall: group authenticate returns ok for request 0 Sending Access-Accept of id 244 to 9.22.81.109:32780 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 244 with timestamp 43c7c359 Nothing to do. Sleeping until we see a request. -------------------------------------------------------- Radclient:Response : Local Client ---------------------------------------------------------- [root@99Y69F3 root]# echo "User-Name=root, User-Password = ibmlinux1" | \radclient -x 9.22.81.109:1812 auth testing123 Sending Access-Request of id 244 to 9.22.81.109:1812 User-Name = "root" User-Password = "ibmlinux1" rad_recv: Access-Accept packet from host 9.22.81.109:1812, id=244, length=20 ---------------------------------------------------------------- Radclient:Response : Remote Client (Linux Machine) The machine is already configured in the clients.conf file with a secret key testing234 ---------------------------------------------------------------- [root@99Y69G3 root]# echo "User-Name=root, User-Password = ibmlinux1" | \radclient -x 9.22.81.109 auth testing234 Sending Access-Request of id 14 to 9.22.81.109:1812 User-Name = "root" User-Password = "ibmlinux1" Re-sending Access-Request of id 14 to 9.22.81.109:1812 User-Name = "root" User-Password = "\355\371*\025uD\007\221\2476C\330\356\2621\316" Re-sending Access-Request of id 14 to 9.22.81.109:1812 User-Name = "root" User-Password = "\355\371*\025uD\007\221\2476C\330\356\2621\316" Re-sending Access-Request of id 14 to 9.22.81.109:1812 User-Name = "root" User-Password = "\355\371*\025uD\007\221\2476C\330\356\2621\316"

5 7

Re: Last patches for 1.1.0?
by Fabio Pedretti 13 Jan '06

13 Jan '06

I see that in 1.1.0-pre0 there isn't the complete documentation on some options of peap module of eap.conf, while I see it in the CVS: http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/raddb/eap.conf?rev=1.5… Fabio

3 4

Windows Client for freeRadius
by shan t 13 Jan '06

13 Jan '06

Hi, I want to write a client for freeRadius which runs on Windows. This application sends an authentication request to freeRadius and process the output send by the server. I can write it it using VC++ or C#. Please let me know if anyone have any idea about Radius APIs in windows platform, and how to use them.. Regards, Shan

1 0

Automatic report from sources (radiusd) between 12.01.2006 - 13.01.2006 GMT
by Automatic cvs log generator 13 Jan '06

13 Jan '06

CVS log entries from 12.01.2006 (Thu) 09:00:00 - 13.01.2006 (Fri) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.167 ===================================================== Log entries ===================================================== Description: Fix a SEGV in back-quote expansion. Problem found by Markus Krause <krause(a)biochem.mpg.de> Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.167; Date: 2006/01/12 14:19:34; Author: nbk; Lines: (+4 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.167 Authors: nbk (+4 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0