October 2006 - Freeradius-Devel - lists.freeradius.org

nologin on 7.x
by Mike 14 Oct '06

14 Oct '06

Can whoever has access to a freshly installed 7.0 box tell me what is going on with the "nologin" shell? Is it not present by default? If it is, does it exist in /sbin or in /usr/sbin? Is it included in /etc/shells by default?

1 0

RE: Capturing ntlm_auth failure reasons in rlm_mschap
by Garber, Neal 13 Oct '06

13 Oct '06

> Please submit the patch on the bugs.freeradius.org site... The rlm_mschap patch is bug 398. I'll post the SSL patch shortly. Thanks Alan.

1 0

Capturing ntlm_auth failure reasons in rlm_mschap
by Garber, Neal 13 Oct '06

13 Oct '06

I would like ntlm_auth failure reasons more visible so our help desk can assist users who are having trouble authenticating. Currently, rlm_ldap creates a request attribute called "Module-Failure-Message" on some types of errors (e.g., user not found). I created a small patch for rlm_mschap that creates the same request attribute with the output from ntlm_auth if authentication fails. (Before someone asks how this lets our help desk see the information, I have written a post-auth perl script that captures this and other attributes and writes them to a custom log file. Our help desk then uses a viewer utility I wrote to search/display the logs.) I have a similar desire to capture SSL negotiation failure reasons in our logs. I have created another patch to capture these failures as well although it is currently against FR 1.1.2. If there's interest, I can integrate this change to CVS head and submit it as well. Below is the rlm_mschap patch for your review and comment. This was made against the CVS head I checked out on Oct. 12. Thanks for your time and consideration. --- src/modules/rlm_mschap/rlm_mschap.c.orig Tue Oct 3 17:46:50 2006 +++ src/modules/rlm_mschap/rlm_mschap.c Thu Oct 12 15:32:04 2006 @@ -786,6 +786,9 @@ } else { /* run ntlm_auth */ int result; char buffer[256]; + VALUE_PAIR *module_fmsg_vp; + char module_fmsg[MAX_STRING_LEN]; + int module_fmsg_lastchr = 0; memset(nthashhash, 0, 16); @@ -798,6 +801,13 @@ NULL, NULL, 1); if (result != 0) { DEBUG2(" rlm_mschap: External script failed."); + snprintf(module_fmsg, sizeof(module_fmsg), "rlm_mschap: %s", buffer); + module_fmsg_lastchr = strlen(module_fmsg)-1; + if (module_fmsg[module_fmsg_lastchr] = '\n') { + module_fmsg[module_fmsg_lastchr] = '\0'; + } + module_fmsg_vp = pairmake("Module-Failure-Message", module_fmsg, T_OP_EQ); + pairadd(&request->packet->vps, module_fmsg_vp); return -1; }

2 1

RE: Capturing ntlm_auth failure reasons in rlm_mschap
by Garber, Neal 13 Oct '06

13 Oct '06

Oops! I pasted the wrong version of the patch in my previous msg. Please ignore the previous as it had a typo in the if stmt. comparing for a newline.. --- src/modules/rlm_mschap/rlm_mschap.c.orig Tue Oct 3 17:46:50 2006 +++ src/modules/rlm_mschap/rlm_mschap.c Thu Oct 12 15:36:04 2006 @@ -786,6 +786,9 @@ } else { /* run ntlm_auth */ int result; char buffer[256]; + VALUE_PAIR *module_fmsg_vp; + char module_fmsg[MAX_STRING_LEN]; + int module_fmsg_lastchr = 0; memset(nthashhash, 0, 16); @@ -798,6 +801,13 @@ NULL, NULL, 1); if (result != 0) { DEBUG2(" rlm_mschap: External script failed."); + snprintf(module_fmsg, sizeof(module_fmsg), "rlm_mschap: %s", buffer); + module_fmsg_lastchr = strlen(module_fmsg)-1; + if (module_fmsg[module_fmsg_lastchr] == '\n') { + module_fmsg[module_fmsg_lastchr] = '\0'; + } + module_fmsg_vp = pairmake("Module-Failure-Message", module_fmsg, T_OP_EQ); + pairadd(&request->packet->vps, module_fmsg_vp); return -1; }

1 0

help
by Bolivar Soriano 13 Oct '06

13 Oct '06

Do you have an step by step how to setup Freeradius software to send the log record to mssql server Thx Bolivar Soriano

2 1

Radiusd-radrelayd config file naming
by Peter Nixon 11 Oct '06

11 Oct '06

Hi Guys The attached 2 line patch makes radiusd load the config file matching the name that it is called with making the -n option unnecessary in many cases. This makes things simpler and makes "startproc" and family much simpler to use with radiusd. Example use: symlink radiusd to radrelay and then run radrelay and it will autoload radrelay.conf The -n command line option still overrides config file so everyone should be happy. If no-one has any complaints I plan to apply this to cvs head. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

6 10

Not restricting access to indicated huntgroup-name
by Jenny Ngo Gui 11 Oct '06

11 Oct '06

I don't know why, but for some reason, when the eap.tls.cn_check option in rad.conf is set to 0 (off), it could not restrict the access of users as stated in the users and huntgroups file. Despite the fact that certain users are set such that it would only be able to connect through one specific AP (Huntgroup-name = "Buffalo", as opposed to the other one having Huntgroup-name = "Cisco"), it seems to bypass this restriction when the eap.tls.cn_check option is turned off.. I'm not sure if this is a problem with freeradius, so I hope someone could shed some light on this matter.. Thanks

1 0

Not restricting access to indicated huntgroup-name
by Jenny Ngo Gui 11 Oct '06

11 Oct '06

I don't know why, but for some reason, when the eap.tls.cn_check option in rad.conf is set to 0 (off), it could not restrict the access of users as stated in the users and huntgroups file. Despite the fact that certain users are set such that it would only be able to connect through one specific AP (Huntgroup-name = "Buffalo", as opposed to the other one having Huntgroup-name = "Cisco"), it seems to bypass this restriction when the eap.tls.cn_check option is turned on.. I'm not sure if this is a problem with freeradius, so I hope someone could shed some light on this matter.. Thanks

1 0

Automatic report from sources (radiusd) between 09.10.2006 - 10.10.2006 GMT
by Automatic cvs log generator 10 Oct '06

10 Oct '06

CVS log entries from 09.10.2006 (Mon) 08:00:01 - 10.10.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/modcall.c; Revisions: 1.55, 1.54 ===================================================== Log entries ===================================================== Description: re-arrange the "apply priority" code so that it does so properly Update the debug printing so that it prints the childs name, and not the parents name Modified files: File: radiusd/src/main/modcall.c; Revision: 1.55; Date: 2006/10/09 21:01:50; Author: aland; Lines: (+33 -27) ------------------------------- Description: print out module return code, too. This appears to have been accidentally deleted Modified files: File: radiusd/src/main/modcall.c; Revision: 1.54; Date: 2006/10/09 20:39:37; Author: aland; Lines: (+6 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/modcall.c Revisions: 1.55, 1.54 Authors: aland (+33 -27), aland (+6 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

radrelay (mode) from cvs head
by Peter Nixon 10 Oct '06

10 Oct '06

Hi Guys I am testing radrelay from current cvs on a production server in the hope it will smooth out the traffic "bumps" however it seems to make them worse due to the way ot reads and sends huge chunks of packets to the backend (sql) at the same time. What happens when the following is logged? Is the packet deleted from the spool and dropped completely or is it sent again a little later? Wed Oct 4 10:05:37 2006 : Error: Dropping request (1024 is too many): from client UNKNOWN-CLIENT port 27272 - ID: 161 Wed Oct 4 10:05:37 2006 : Info: WARNING: Please check the radrelay.conf file. The value for 'max_requests' is probably set too low. I have set max_outstanding = 1 in an attempt to limit the number is requests but it doesn't seem to work. Basically I dont care is accounting requests are a few seconds late but they should always get to the sql server, and having > 1024 SQL sockets is unrealistic (Currently running with 50 but for this type of queued situation the fastest config SHOULD be 1-5 sockets depending on number of cpus and disks in the DB server). I am also running radrelay in single threaded mode in an attempt to slow it down. (That and the fact it crashes with "Error: Assertion failed in listen.c, line 620" when running threaded) Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

3 6

Automatic report from sources (radiusd) between 08.10.2006 - 09.10.2006 GMT
by Automatic cvs log generator 09 Oct '06

09 Oct '06

CVS log entries from 08.10.2006 (Sun) 08:00:01 - 09.10.2006 (Mon) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/doc/rlm_sqlippool; Revisions: 1.4 ===================================================== Log entries ===================================================== Description: spelling error Modified files: File: radiusd/doc/rlm_sqlippool; Revision: 1.4; Date: 2006/10/08 18:02:42; Author: pnixon; Lines: (+1 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/rlm_sqlippool Revisions: 1.4 Authors: pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: sqlippool error
by Peter Nixon 08 Oct '06

08 Oct '06

On Thu 05 Oct 2006 15:06, you wrote: > Hi Peter! > > I read your answer anywhere: sqlippool works fine, but my version > not work. i using debian sarge and > i downloaded and compiled freerdius 1.1.3 with mysql support and sqlippool > module. the output of radiusd -X ok, not error. > i use pppoe-server with radius, and if test user connecting to server, the > radius.log: > > Thu Oct 5 15:49:39 2006 : Error: sqlippool_command: database query error > Thu Oct 5 15:49:39 2006 : Error: sqlippool_query1: database query error > Thu Oct 5 15:49:39 2006 : Info: rlm_sqlippool: ip=[] len=0 > Thu Oct 5 15:49:39 2006 : Error: sqlippool_command: database query error > Thu Oct 5 15:49:42 2006 : Error: sqlippool_command: database query error > > what i do wrong? I believe the Debian packages need to be recompiled to enable Postgresql support. As the documentation says, sqlippool is currently only tested on Postgresql so if you are trying to use MySQL you will have to do a bit more work. http://wiki.freeradius.org/Rlm_sqlippool Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

1 0

Automatic report from sources (radiusd) between 06.10.2006 - 07.10.2006 GMT
by Automatic cvs log generator 07 Oct '06

07 Oct '06

CVS log entries from 06.10.2006 (Fri) 08:00:01 - 07.10.2006 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/exec.c; Revisions: 1.42.2.1.2.2 ===================================================== Log entries ===================================================== Description: Pull code from CVS head to split argv BEFORE radius_xlat, not before Modified files: File: radiusd/src/main/exec.c; Revision: 1.42.2.1.2.2; Date: 2006/10/06 23:39:21; Author: aland; Lines: (+224 -40) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/exec.c Revisions: 1.42.2.1.2.2 Authors: aland (+224 -40) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 05.10.2006 - 06.10.2006 GMT
by Automatic cvs log generator 06 Oct '06

06 Oct '06

CVS log entries from 05.10.2006 (Thu) 08:00:04 - 06.10.2006 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/packet.c; Revisions: 1.7, 1.6 Author: pnixon File: radiusd/suse/rcradius-relayd; Revisions: 1.5 ===================================================== Log entries ===================================================== Description: use struct sockaddr_storage, not struct sockaddr. Modified files: File: radiusd/src/lib/packet.c; Revision: 1.7; Date: 2006/10/05 22:01:47; Author: aland; Lines: (+10 -8) ------------------------------- Description: don't call librad_log Modified files: File: radiusd/src/lib/packet.c; Revision: 1.6; Date: 2006/10/05 21:35:18; Author: aland; Lines: (+2 -4) ------------------------------- Description: rename to radrelay Modified files: File: radiusd/suse/rcradius-relayd; Revision: 1.5; Date: 2006/10/05 13:19:08; Author: pnixon; Lines: (+1 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/packet.c Revisions: 1.7, 1.6 Authors: aland (+10 -8), aland (+2 -4) ------------------------------- File: radiusd/suse/rcradius-relayd Revisions: 1.5 Authors: pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Radius-Client Access Request Password
by Johannes Luther 04 Oct '06

04 Oct '06

Hi all, I'm pretty new in that "Radius Business", so forgive me if I ask dumb questions. I see no chance, that someone could answer me my question in a Forum or in the normal mailing-list. I'm currenty developing a radius client class (Open-Source) in c#. I couldn't find something like that, but I need it to do certain things. Everything works fine and is clear regarding the construction of a radius paket, EXCEPT the ugly part of encrypting the user-password. I'm not talking about CHAP. The RFC's (http://www.freeradius.org/rfc/rfc2865.html#User-Password) sais the following: b1 = MD5(S + RA) c(1) = p1 xor b1 S is the Shared Secret RA is the random 16byte Request Authenticator and p1 is the first octet of the user password. For this example, the user password only has one byte (1 char) and the Shared Secret consists only of one char, too. Example: S = a (ASCII) p = b (ASCII) RA = EFB585C9F8CFB480B4F4B083B481E78E (HEX) 1.) How to do the operation (S+RA) ??? Do I have to convert the String a to a hex value (ASCII Table) ?? 2.) How to XOR the user password with b? OK ... the b is the easy part, because it's already a 16byte hex value... but how do I have to convert the user password (in this case "b") ? Is it a ASCII Conversion? if this would be the case, the char b is 0x62 hex. Could someone please explain that stuff to me? Kind regards, Joe

2 1

Re: Freeradius-Devel Digest, Vol 18, Issue 3
by Mike 04 Oct '06

04 Oct '06

> My next suggestion for 2.0 was actually going to be that we > rename "radiusd.conf" to "freeradius.conf" (or freeradiusd.conf) > and "etc/raddb" to "etc/freeradius" as default. Does this suit you? (A simple > rename of radiusd.conf on upgrade is not particularly difficult, given that > many options on the config file have also changed) > > Our default prefix should probably change from /usr/local to /opt/freeradius/ > also in keeping with LSB. (Although I understand that this may be a slightly > controversal change) In case no one else decides to chime in here with sanity and reason... /usr/local is the "right" place for default installation - not only because it's the right place (and it definitely is), but because that is where it's been thus far and people have gotten used to it. If some third party decides to repackage freeradius to confirm to their own fly-by-night naming convension, they should be the ones responsible for apologizing to their userbase and fixing the bugs that arise as a result of the transition. Developer time is never well spent on fixing bugs associated with such useless operations as renaming config files or moving paths. Plus, there are plenty of Solaris, FreeBSD, OpenBSD, and NetBSD boxes out there that very happily run freeradius out of /usr/local, why force some stupid linux convention on them? <rant> lsb / fhs - Just because some people with no clue, no experience, and too much free time decided to put out a "standard" doesn't mean that the rest of the world must follow such idiocy. </rant>

4 3

Automatic report from sources (radiusd) between 03.10.2006 - 04.10.2006 GMT
by Automatic cvs log generator 04 Oct '06

04 Oct '06

CVS log entries from 03.10.2006 (Tue) 08:00:01 - 04.10.2006 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/threads.c; Revisions: 1.112 File: radiusd/src/main/radiusd.c; Revisions: 1.359 File: radiusd/src/main/listen.c; Revisions: 1.50 File: radiusd/src/include/radiusd.h; Revisions: 1.209 File: radiusd/src/modules/rlm_expr/rlm_expr.c; Revisions: 1.14 File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revisions: 1.29 File: radiusd/src/modules/rlm_counter/rlm_counter.c; Revisions: 1.53 File: radiusd/src/lib/hmacsha1.c; Revisions: 1.10 File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.41 File: radiusd/src/main/modules.c; Revisions: 1.111 File: radiusd/src/modules/rlm_checkval/rlm_checkval.c; Revisions: 1.18 File: radiusd/src/lib/radius.c; Revisions: 1.190 File: radiusd/src/main/mainconfig.c; Revisions: 1.96 File: radiusd/src/main/modcall.c; Revisions: 1.53 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.12 File: radiusd/src/modules/rlm_expiration/rlm_expiration.c; Revisions: 1.9 File: radiusd/src/modules/rlm_cram/rlm_cram.c; Revisions: 1.11 File: radiusd/src/modules/rlm_exec/rlm_exec.c; Revisions: 1.22 File: radiusd/man/man8/radiusd.8; Revisions: 1.12 File: radiusd/src/include/token.h; Revisions: 1.15 File: radiusd/src/main/conffile.c; Revisions: 1.140 File: radiusd/src/modules/rlm_logintime/rlm_logintime.c; Revisions: 1.9 File: radiusd/src/lib/hmac.c; Revisions: 1.11 File: radiusd/src/modules/rlm_linelog/rlm_linelog.c; Revisions: 1.10 File: radiusd/src/modules/rlm_sql/sql.c; Revisions: 1.89 File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revisions: 1.38 File: radiusd/src/modules/rlm_chap/rlm_chap.c; Revisions: 1.15 File: radiusd/src/modules/rlm_example/rlm_example.c; Revisions: 1.32 File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revisions: 1.79 File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revisions: 1.23 File: radiusd/src/modules/rlm_sql_log/rlm_sql_log.c; Revisions: 1.6 File: radiusd/src/modules/rlm_always/rlm_always.c; Revisions: 1.18 File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.43 File: radiusd/src/main/client.c; Revisions: 1.49 File: radiusd/src/main/radwho.c; Revisions: 1.64 File: radiusd/src/main/radius_snmp.c; Revisions: 1.27 File: radiusd/src/modules/rlm_protocol_filter/rlm_protocol_filter.c; Revisions: 1.8 Author: pnixon File: radiusd/doc/examples/postgresql.sql; Revisions: 1.8 File: radiusd/src/modules/rlm_sqlippool/doc/schema_sqlippool_pgsql.sql; Revisions: 1.2 File: radiusd/src/modules/rlm_acctlog/Makefile.in; Revisions: 1.1 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.11 File: radiusd/suse/rcradius-relayd; Revisions: 1.4 File: radiusd/src/modules/rlm_acctlog/configure.in; Revisions: 1.1 File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c; Revisions: 1.1 File: radiusd/raddb/experimental.conf; Revisions: 1.34 File: radiusd/suse/rcradiusd; Revisions: 1.4 File: radiusd/raddb/sqlippool.conf; Revisions: 1.5 ===================================================== Combined list of identical log entries ===================================================== Description: Add new module to do configurable logging of accounting packets to radiusd.log Modified files: File: radiusd/src/modules/rlm_acctlog/Makefile.in; Revision: 1.1; Date: 2006/10/03 14:03:08; Author: pnixon; File: radiusd/src/modules/rlm_acctlog/configure.in; Revision: 1.1; Date: 2006/10/03 14:03:08; Author: pnixon; File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c; Revision: 1.1; Date: 2006/10/03 14:03:08; Author: pnixon; ------------------------------- Description: radiusd is currently crashing for us in threaded mode (especially with proxied requests) so setting the startup scripts to single threaded until the problem is solved Modified files: File: radiusd/suse/rcradius-relayd; Revision: 1.4; Date: 2006/10/03 15:38:04; Author: pnixon; Lines: (+1 -1) File: radiusd/suse/rcradiusd; Revision: 1.4; Date: 2006/10/03 15:38:04; Author: pnixon; Lines: (+1 -1) ------------------------------- Description: ./scripts/min-includes +n <files listed here> Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.209; Date: 2006/10/03 21:46:43; Author: aland; Lines: (+1 -3) File: radiusd/src/lib/hmac.c; Revision: 1.11; Date: 2006/10/03 21:46:43; Author: aland; Lines: (+0 -1) File: radiusd/src/lib/hmacsha1.c; Revision: 1.10; Date: 2006/10/03 21:46:44; Author: aland; Lines: (+0 -1) File: radiusd/src/lib/radius.c; Revision: 1.190; Date: 2006/10/03 21:46:44; Author: aland; Lines: (+2 -4) File: radiusd/src/main/client.c; Revision: 1.49; Date: 2006/10/03 21:46:44; Author: aland; Lines: (+2 -3) File: radiusd/src/main/conffile.c; Revision: 1.140; Date: 2006/10/03 21:46:44; Author: aland; Lines: (+2 -4) File: radiusd/src/main/listen.c; Revision: 1.50; Date: 2006/10/03 21:46:45; Author: aland; Lines: (+1 -3) File: radiusd/src/main/mainconfig.c; Revision: 1.96; Date: 2006/10/03 21:46:45; Author: aland; Lines: (+1 -6) File: radiusd/src/main/modcall.c; Revision: 1.53; Date: 2006/10/03 21:46:45; Author: aland; Lines: (+1 -3) File: radiusd/src/main/modules.c; Revision: 1.111; Date: 2006/10/03 21:46:46; Author: aland; Lines: (+2 -5) File: radiusd/src/main/radius_snmp.c; Revision: 1.27; Date: 2006/10/03 21:46:46; Author: aland; Lines: (+2 -3) File: radiusd/src/main/radiusd.c; Revision: 1.359; Date: 2006/10/03 21:46:46; Author: aland; Lines: (+2 -3) File: radiusd/src/main/radwho.c; Revision: 1.64; Date: 2006/10/03 21:46:47; Author: aland; Lines: (+2 -3) File: radiusd/src/main/threads.c; Revision: 1.112; Date: 2006/10/03 21:46:47; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_always/rlm_always.c; Revision: 1.18; Date: 2006/10/03 21:46:47; Author: aland; Lines: (+1 -2) File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revision: 1.38; Date: 2006/10/03 21:46:48; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_chap/rlm_chap.c; Revision: 1.15; Date: 2006/10/03 21:46:48; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_checkval/rlm_checkval.c; Revision: 1.18; Date: 2006/10/03 21:46:48; Author: aland; Lines: (+1 -2) File: radiusd/src/modules/rlm_counter/rlm_counter.c; Revision: 1.53; Date: 2006/10/03 21:46:48; Author: aland; Lines: (+2 -4) File: radiusd/src/modules/rlm_cram/rlm_cram.c; Revision: 1.11; Date: 2006/10/03 21:46:48; Author: aland; Lines: (+1 -3) File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revision: 1.23; Date: 2006/10/03 21:46:49; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_example/rlm_example.c; Revision: 1.32; Date: 2006/10/03 21:46:49; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_exec/rlm_exec.c; Revision: 1.22; Date: 2006/10/03 21:46:49; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_expiration/rlm_expiration.c; Revision: 1.9; Date: 2006/10/03 21:46:49; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_expr/rlm_expr.c; Revision: 1.14; Date: 2006/10/03 21:46:49; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_linelog/rlm_linelog.c; Revision: 1.10; Date: 2006/10/03 21:46:50; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_logintime/rlm_logintime.c; Revision: 1.9; Date: 2006/10/03 21:46:50; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revision: 1.79; Date: 2006/10/03 21:46:50; Author: aland; Lines: (+2 -4) File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.41; Date: 2006/10/03 21:46:50; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.43; Date: 2006/10/03 21:46:51; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_protocol_filter/rlm_protocol_filter.c; Revision: 1.8; Date: 2006/10/03 21:46:51; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.89; Date: 2006/10/03 21:46:51; Author: aland; Lines: (+1 -3) File: radiusd/src/modules/rlm_sql_log/rlm_sql_log.c; Revision: 1.6; Date: 2006/10/03 21:46:51; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.29; Date: 2006/10/03 21:46:52; Author: aland; Lines: (+2 -4) File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.12; Date: 2006/10/03 21:46:52; Author: aland; Lines: (+2 -6) ===================================================== Log entries ===================================================== Description: Add some indexes for sqlippool Modified files: File: radiusd/doc/examples/postgresql.sql; Revision: 1.8; Date: 2006/10/03 18:19:59; Author: pnixon; Lines: (+6 -1) ------------------------------- Description: Removed references to Livingston Modified files: File: radiusd/man/man8/radiusd.8; Revision: 1.12; Date: 2006/10/03 18:33:20; Author: aland; Lines: (+0 -6) ------------------------------- Description: Add acctlog config section Modified files: File: radiusd/raddb/experimental.conf; Revision: 1.34; Date: 2006/10/03 15:21:58; Author: pnixon; Lines: (+12 -1) ------------------------------- Description: Add config options for configurable logging Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.5; Date: 2006/10/03 13:04:13; Author: pnixon; Lines: (+13 -1) ------------------------------- Description: margin notes on which tokens have what numbers Modified files: File: radiusd/src/include/token.h; Revision: 1.15; Date: 2006/10/03 18:34:14; Author: aland; Lines: (+6 -6) ------------------------------- Description: Moved schema to main sql files Modified files: File: radiusd/src/modules/rlm_sqlippool/doc/schema_sqlippool_pgsql.sql; Revision: 1.2; Date: 2006/10/03 18:24:30; Author: pnixon; Lines: (+0 -0) ------------------------------- Description: so that we dont leak on a HUP Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.11; Date: 2006/10/03 10:59:06; Author: pnixon; Lines: (+13 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/examples/postgresql.sql Revisions: 1.8 Authors: pnixon (+6 -1) ------------------------------- File: radiusd/man/man8/radiusd.8 Revisions: 1.12 Authors: aland (+0 -6) ------------------------------- File: radiusd/raddb/experimental.conf Revisions: 1.34 Authors: pnixon (+12 -1) ------------------------------- File: radiusd/raddb/sqlippool.conf Revisions: 1.5 Authors: pnixon (+13 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.209 Authors: aland (+1 -3) ------------------------------- File: radiusd/src/include/token.h Revisions: 1.15 Authors: aland (+6 -6) ------------------------------- File: radiusd/src/lib/hmac.c Revisions: 1.11 Authors: aland (+0 -1) ------------------------------- File: radiusd/src/lib/hmacsha1.c Revisions: 1.10 Authors: aland (+0 -1) ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.190 Authors: aland (+2 -4) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.49 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.140 Authors: aland (+2 -4) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.50 Authors: aland (+1 -3) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.96 Authors: aland (+1 -6) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.53 Authors: aland (+1 -3) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.111 Authors: aland (+2 -5) ------------------------------- File: radiusd/src/main/radius_snmp.c Revisions: 1.27 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.359 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/main/radwho.c Revisions: 1.64 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.112 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_acctlog/Makefile.in Revisions: 1.1 Authors: pnixon ------------------------------- File: radiusd/src/modules/rlm_acctlog/configure.in Revisions: 1.1 Authors: pnixon ------------------------------- File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c Revisions: 1.1 Authors: pnixon ------------------------------- File: radiusd/src/modules/rlm_always/rlm_always.c Revisions: 1.18 Authors: aland (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c Revisions: 1.38 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_chap/rlm_chap.c Revisions: 1.15 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_checkval/rlm_checkval.c Revisions: 1.18 Authors: aland (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_counter/rlm_counter.c Revisions: 1.53 Authors: aland (+2 -4) ------------------------------- File: radiusd/src/modules/rlm_cram/rlm_cram.c Revisions: 1.11 Authors: aland (+1 -3) ------------------------------- File: radiusd/src/modules/rlm_digest/rlm_digest.c Revisions: 1.23 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_example/rlm_example.c Revisions: 1.32 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_exec/rlm_exec.c Revisions: 1.22 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_expiration/rlm_expiration.c Revisions: 1.9 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_expr/rlm_expr.c Revisions: 1.14 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_linelog/rlm_linelog.c Revisions: 1.10 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_logintime/rlm_logintime.c Revisions: 1.9 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_mschap/rlm_mschap.c Revisions: 1.79 Authors: aland (+2 -4) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.41 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.43 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_protocol_filter/rlm_protocol_filter.c Revisions: 1.8 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_sql/sql.c Revisions: 1.89 Authors: aland (+1 -3) ------------------------------- File: radiusd/src/modules/rlm_sql_log/rlm_sql_log.c Revisions: 1.6 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c Revisions: 1.29 Authors: aland (+2 -4) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/doc/schema_sqlippool_pgsql.sql Revisions: 1.2 Authors: pnixon (+0 -0) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.12, 1.11 Authors: aland (+2 -6), pnixon (+13 -3) ------------------------------- File: radiusd/suse/rcradius-relayd Revisions: 1.4 Authors: pnixon (+1 -1) ------------------------------- File: radiusd/suse/rcradiusd Revisions: 1.4 Authors: pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 02.10.2006 - 03.10.2006 GMT
by Automatic cvs log generator 03 Oct '06

03 Oct '06

CVS log entries from 02.10.2006 (Mon) 08:00:01 - 03.10.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/Makefile; Revisions: 1.49 File: radiusd/scripts/min-includes.pl; Revisions: 1.1 Author: pnixon File: radiusd/doc/examples/oracle.sql; Revisions: 1.5 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.10, 1.9, 1.8 ===================================================== Combined list of identical log entries ===================================================== Description: Perl script (hokey as heck) to minimize the number of includes that we have in C files. It finds duplicate includes, and prints them out for user verification. It optionally will also go through & nuke the duplicates Modified files: File: radiusd/Makefile; Revision: 1.49; Date: 2006/10/02 23:53:38; Author: aland; Lines: (+5 -1) File: radiusd/scripts/min-includes.pl; Revision: 1.1; Date: 2006/10/02 23:53:38; Author: aland; ===================================================== Log entries ===================================================== Description: RFC 2865: The String field is one or more octets. The NAS may limit the maximum length of the User-Name but the ability to handle at least 63 octets is recommended. Modified files: File: radiusd/doc/examples/oracle.sql; Revision: 1.5; Date: 2006/10/02 09:45:00; Author: pnixon; Lines: (+2 -2) ------------------------------- Description: New patch for configurable logging Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.10; Date: 2006/10/03 07:26:37; Author: pnixon; Lines: (+55 -21) ------------------------------- Description: Rollback this patch. Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.9; Date: 2006/10/03 07:25:31; Author: pnixon; Lines: (+12 -27) ------------------------------- Description: Logging update Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.8; Date: 2006/10/03 06:48:20; Author: pnixon; Lines: (+29 -14) ===================================================== Summary of modified files ===================================================== File: radiusd/Makefile Revisions: 1.49 Authors: aland (+5 -1) ------------------------------- File: radiusd/doc/examples/oracle.sql Revisions: 1.5 Authors: pnixon (+2 -2) ------------------------------- File: radiusd/scripts/min-includes.pl Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.10, 1.9, 1.8 Authors: pnixon (+55 -21), pnixon (+12 -27), pnixon (+29 -14) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Development TODO
by Peter Nixon 02 Oct '06

02 Oct '06

Hi Guys I just copied the toto list from cvs head into: http://wiki.freeradius.org/Development_Roadmap#URGENT It seems that this list is a bit out of date. Can everyone have a look at this and help update it please? Also should we add a section for the 1.1.x branch or have we decided the 2.0 will definately be the next release. (ie. Should we continue to apply patches to sqlippool in 1.1.x or just in cvs head) Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 1

Query
by Chew, Heng Hui (Andy) FORNATL, SN 02 Oct '06

02 Oct '06

If I want to add in another attribute e.g. location coordinate as part of the authentication via PEAP, how may I do it? With Regards, Chew Heng Hui Andy

1 0

utilities for totaling and booting
by D S 01 Oct '06

01 Oct '06

Hello from the wireless abyss [image: Smile] Some background, I build these jukeboxes, they play videos over a bars Audio Visual system by sending an sms to a cell phone built into to them. it also has ringtones and a system of registering bluetooth users. This is all paid for by a bill acceptor in the front of the machine. Inside your everyday PC, with a hacked apart and soldered keyboard, a jimmy rigged bill acceptor on the lpt port and a cell phone for getting sms's So, you either had to come to the machine and pick your songs, or there had to be printed out some menus or songlists, and I got all exicited cuz they write they are going to come out with WAP over bluetooth (personal area network protocol) and well I was going to have dynamic menus, so I started digging around, stuck myself apache on one of these boxes, got it to serv wap pages and the like. Then, the next thing I know, I think, hey, wouldn't it be cool if I took all this media and made it distributable over wireless. So, I went and ordered a WRT54GL and flashed the sucker. Got it all working, you can log in, it checks FreeRadius.net (windows) and there you are with this little hosted website on a windows box (all the rest of the stuff is C# and mono doesn't run it so I am stuck with the OS) In Ukraine, there are like 2 million credit card about, and , a DSL connection will literally cost you a months wages ever month, about $150 for 2gig of traffic 256k (the average months salary) so, I more or less have everything I need to set up these hotspots, let people use them for free for the local stuff (UAMALLOWED chilli.conf) and I want to let them put money in the bill acceptor to get real internet. I am assuming once I get the radius tables in mysql, I can simply insert new values there for authentication purposes so crediting joe user is easy enough. Now I spent about an hour reading all the posts here but never found a real solid kinda fix that I could squeeze under window (yeah, I know, it sucks, but try to make the killer jukebox in Linux [image: Smile] What I am missing, Or Radius is missing, is the way to kick off users that have download their fair share (like 1/2 their monthly salary) I am assuming that I need some other scripts to add up the various accounting statements that are showing up in the log and to add them to the user account and somewhere another script to kick them off the NAS. Since I am new to all of this ( I got my router the other day ) I am pretty happy I've made such progress, but no cookie for me cuz I will be broke the day I turn it on as every 16 year old will be logged on. The freeradius I am using doesn't include the dial up admin program mentioned either. BTW, I don't know how interesting these machines would be in the US, we have made 3 of them and they are interesting, I am collecting all the soft and configurations in one directory so I can redistribute what I've done so hopefully helping me will help a lots of people:-) Sorry for my bad English, thanking you much for your help and sorry if my post is considered offtopic, I understood if you are installing these servers, this is the list and I hope to have a lot of them installed as I will be using one radius server on each local machine. :-) Have a nice day

2 1

Automatic report from sources (radiusd) between 30.09.2006 - 01.10.2006 GMT
by Automatic cvs log generator 01 Oct '06

01 Oct '06

CVS log entries from 30.09.2006 (Sat) 08:00:01 - 01.10.2006 (Sun) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: mgriego File: radiusd/src/main/exec.c; Revisions: 1.54 ===================================================== Log entries ===================================================== Description: Sleep for 1 second if the child hasn't returned yet before starting the next iteration of the loop. Modified files: File: radiusd/src/main/exec.c; Revision: 1.54; Date: 2006/09/30 22:21:56; Author: mgriego; Lines: (+7 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/exec.c Revisions: 1.54 Authors: mgriego (+7 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0