October 2006 - Freeradius-Devel - lists.freeradius.org

radeapclient won't build from cvs head
by Garber, Neal 20 Oct '06

20 Oct '06

I'm getting Undefined references to va_start in src/modules/rlm_eap/radeapclient.c because stdarg.h is no longer included (previously, it was included via radeapclient.c->eap_types.h->radiusd.h).

3 2

patch - support for stored procedures (MySQL 5.0.25 and later)
by Nenad Kljajic 20 Oct '06

20 Oct '06

This patch adds support for stored procedures for those who use MySQL 5.0.25+ (http://bugs.mysql.com/bug.php?id=15752) eg. in sql.conf you can do: authorize_check_query = "CALL Pradcheck('%{SQL-User-Name}');" with procedure declaration: SET AUTOCOMMIT=0; DELIMITER | DROP PROCEDURE IF EXISTS Pradcheck | CREATE PROCEDURE Pradcheck ( `SQL-User-Name` varchar(256) )BEGIN START TRANSACTION; SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = `SQL-User-Name` ORDER BY id; COMMIT; END; | DELIMITER ; etc. Tested on FreeBSD 6.1 freeradius port 1.1.2

1 0

Automatic report from sources (radiusd) between 19.10.2006 - 20.10.2006 GMT
by Automatic cvs log generator 20 Oct '06

20 Oct '06

CVS log entries from 19.10.2006 (Thu) 08:00:01 - 20.10.2006 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: fcusack File: radiusd/src/modules/rlm_otp/otp_mppe.h; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/ident.h; Revisions: 1.1 File: radiusd/src/modules/rlm_otp/otp_radstate.c; Revisions: 1.8 File: radiusd/src/modules/rlm_otp/extern.h; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revisions: 1.32 File: radiusd/src/modules/rlm_otp/otp_pw_valid.h; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp_pwe.c; Revisions: 1.11 File: radiusd/src/modules/rlm_otp/otp_util.c; Revisions: 1.16 File: radiusd/src/modules/rlm_otp/otp_mppe.c; Revisions: 1.2 File: radiusd/src/modules/rlm_otp/otp.h; Revisions: 1.36 File: radiusd/src/modules/rlm_otp/otp_pw_valid.c; Revisions: 1.3 ===================================================== Combined list of identical log entries ===================================================== Description: prevent rcsid from being optimized out Modified files: File: radiusd/src/modules/rlm_otp/extern.h; Revision: 1.2; Date: 2006/10/20 05:12:07; Author: fcusack; Lines: (+4 -1) File: radiusd/src/modules/rlm_otp/ident.h; Revision: 1.1; Date: 2006/10/20 05:12:08; Author: fcusack; File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.36; Date: 2006/10/20 05:12:08; Author: fcusack; Lines: (+3 -4) File: radiusd/src/modules/rlm_otp/otp_mppe.c; Revision: 1.2; Date: 2006/10/20 05:12:08; Author: fcusack; Lines: (+3 -2) File: radiusd/src/modules/rlm_otp/otp_mppe.h; Revision: 1.2; Date: 2006/10/20 05:12:08; Author: fcusack; Lines: (+4 -1) File: radiusd/src/modules/rlm_otp/otp_pw_valid.c; Revision: 1.3; Date: 2006/10/20 05:12:08; Author: fcusack; Lines: (+3 -2) File: radiusd/src/modules/rlm_otp/otp_pw_valid.h; Revision: 1.2; Date: 2006/10/20 05:12:08; Author: fcusack; Lines: (+4 -1) File: radiusd/src/modules/rlm_otp/otp_pwe.c; Revision: 1.11; Date: 2006/10/20 05:12:09; Author: fcusack; Lines: (+3 -2) File: radiusd/src/modules/rlm_otp/otp_radstate.c; Revision: 1.8; Date: 2006/10/20 05:12:09; Author: fcusack; Lines: (+3 -2) File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.32; Date: 2006/10/20 05:12:09; Author: fcusack; Lines: (+3 -2) File: radiusd/src/modules/rlm_otp/otp_util.c; Revision: 1.16; Date: 2006/10/20 05:12:09; Author: fcusack; Lines: (+3 -2) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_otp/extern.h Revisions: 1.2 Authors: fcusack (+4 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/ident.h Revisions: 1.1 Authors: fcusack ------------------------------- File: radiusd/src/modules/rlm_otp/otp.h Revisions: 1.36 Authors: fcusack (+3 -4) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_mppe.c Revisions: 1.2 Authors: fcusack (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_mppe.h Revisions: 1.2 Authors: fcusack (+4 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_pw_valid.c Revisions: 1.3 Authors: fcusack (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_pw_valid.h Revisions: 1.2 Authors: fcusack (+4 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_pwe.c Revisions: 1.11 Authors: fcusack (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_radstate.c Revisions: 1.8 Authors: fcusack (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_rlm.c Revisions: 1.32 Authors: fcusack (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_util.c Revisions: 1.16 Authors: fcusack (+3 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

FreeRadius - NIS
by Dagoberto Carvalio Junior 19 Oct '06

19 Oct '06

Expensive friends, I am with authentication problem, being that I opted to using the FreeRadius. I ask for the gentility you to answer if the FreeRadius has support to catch the base of users of a server NIS. It forgives for my English, therefore I am Brazilian. Until more, and thanks. Dagoberto Carvalio Junior Analyst Systems - Universidade de São Paulo. -- ######################################################## Dagoberto Carvalio Junior - CCNA/CCAI/FCPF/FCPM/SCS Analista de Sistemas Instituto de Ciencias Matematicas e de Computacao UNIVERSIDADE DE SAO PAULO USER LINUX #417157 EMail : dago(a)icmc.usp.br Tel : 55 16 3373-9652 ########################################################

1 0

Automatic report from sources (radiusd) between 18.10.2006 - 19.10.2006 GMT
by Automatic cvs log generator 19 Oct '06

19 Oct '06

CVS log entries from 18.10.2006 (Wed) 08:00:02 - 19.10.2006 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revisions: 1.9, 1.5.4.1 File: radiusd/raddb/eap.conf; Revisions: 1.4.4.4 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c; Revisions: 1.1, 1.1.2.1 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/configure; Revisions: 1.1, 1.1.2.1 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revisions: 1.28, 1.17.2.2.2.3 File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revisions: 1.59.2.3.2.3 File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revisions: 1.24 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_firebird.c; Revisions: 1.1, 1.1.2.1 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.h; Revisions: 1.1, 1.1.2.1 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/configure.in; Revisions: 1.1, 1.1.2.1 Author: fcusack File: radiusd/raddb/otppasswd.sample; Revisions: 1.6 File: radiusd/raddb/otp.conf; Revisions: 1.6 ===================================================== Combined list of identical log entries ===================================================== Description: Send MS-CHAP2-Success, which makes EAP-TTLS/MSCHAP work This closes bug #402 Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revision: 1.5.4.1; Date: 2006/10/18 21:49:47; Author: aland; Lines: (+9 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.17.2.2.2.3; Date: 2006/10/18 21:49:47; Author: aland; Lines: (+1 -11) ------------------------------- Description: Added preliminary code to support Firebird. Untested! This closes bug #378 Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/configure; Revision: 1.1.2.1; Date: 2006/10/18 21:03:11; Author: aland; Lines: (+3575 -0) File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/configure.in; Revision: 1.1.2.1; Date: 2006/10/18 21:03:12; Author: aland; Lines: (+103 -0) File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c; Revision: 1.1.2.1; Date: 2006/10/18 21:03:12; Author: aland; Lines: (+404 -0) File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.h; Revision: 1.1.2.1; Date: 2006/10/18 21:03:13; Author: aland; Lines: (+53 -0) File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_firebird.c; Revision: 1.1.2.1; Date: 2006/10/18 21:03:13; Author: aland; Lines: (+276 -0) ------------------------------- Description: Send MS-CHAP2-Success, which makes EAP-TTLS/MSCHAP work. This closes bug #402 Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revision: 1.9; Date: 2006/10/18 21:51:16; Author: aland; Lines: (+9 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.28; Date: 2006/10/18 21:51:16; Author: aland; Lines: (+1 -11) ===================================================== Log entries ===================================================== Description: Pull notes from CVS head Modified files: File: radiusd/raddb/eap.conf; Revision: 1.4.4.4; Date: 2006/10/18 19:15:14; Author: aland; Lines: (+29 -1) ------------------------------- Description: typo Modified files: File: radiusd/raddb/otp.conf; Revision: 1.6; Date: 2006/10/19 07:55:56; Author: fcusack; Lines: (+1 -1) ------------------------------- Description: no longer appropriate Modified files: File: radiusd/raddb/otppasswd.sample; Revision: 1.6; Date: 2006/10/19 07:56:10; Author: fcusack; Lines: (+0 -0) ------------------------------- Description: Check return codes. This fixes bug #394 Modified files: File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revision: 1.24; Date: 2006/10/18 19:12:20; Author: aland; Lines: (+10 -4) ------------------------------- Description: Print ntlm_auth failure reason in Module-Failure-Message This closes bug #398, in this branch Modified files: File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revision: 1.59.2.3.2.3; Date: 2006/10/18 21:11:09; Author: aland; Lines: (+17 -2) ------------------------------- Description: file configure was initially added on branch branch_1_1. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/configure; Revision: 1.1; Date: 2006/10/18 21:03:11; Author: aland; ------------------------------- Description: file configure.in was initially added on branch branch_1_1. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/configure.in; Revision: 1.1; Date: 2006/10/18 21:03:11; Author: aland; ------------------------------- Description: file sql_fbapi.c was initially added on branch branch_1_1. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c; Revision: 1.1; Date: 2006/10/18 21:03:12; Author: aland; ------------------------------- Description: file sql_fbapi.h was initially added on branch branch_1_1. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.h; Revision: 1.1; Date: 2006/10/18 21:03:12; Author: aland; ------------------------------- Description: file sql_firebird.c was initially added on branch branch_1_1. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_firebird.c; Revision: 1.1; Date: 2006/10/18 21:03:13; Author: aland; ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/eap.conf Revisions: 1.4.4.4 Authors: aland (+29 -1) ------------------------------- File: radiusd/raddb/otp.conf Revisions: 1.6 Authors: fcusack (+1 -1) ------------------------------- File: radiusd/raddb/otppasswd.sample Revisions: 1.6 Authors: fcusack (+0 -0) ------------------------------- File: radiusd/src/modules/rlm_digest/rlm_digest.c Revisions: 1.24 Authors: aland (+10 -4) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c Revisions: 1.9, 1.5.4.1 Authors: aland (+9 -1), aland (+9 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Revisions: 1.28, 1.17.2.2.2.3 Authors: aland (+1 -11), aland (+1 -11) ------------------------------- File: radiusd/src/modules/rlm_mschap/rlm_mschap.c Revisions: 1.59.2.3.2.3 Authors: aland (+17 -2) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/configure Revisions: 1.1, 1.1.2.1 Authors: aland, aland (+3575 -0) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/configure.in Revisions: 1.1, 1.1.2.1 Authors: aland, aland (+103 -0) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c Revisions: 1.1, 1.1.2.1 Authors: aland, aland (+404 -0) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.h Revisions: 1.1, 1.1.2.1 Authors: aland, aland (+53 -0) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_firebird.c Revisions: 1.1, 1.1.2.1 Authors: aland, aland (+276 -0) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

How to configure multi nas
by Enkhbat.N 18 Oct '06

18 Oct '06

Hi All I have those problems. Please help to solve the problems 1. How to configure many NASes on one RADIUS? 2. How to setting user's connection NAS. Example Special users are connected on Primary NAS and other users are connected on Secondary NAS. Is it possibility? Best Regard, E.N

2 1

How to obtain username and User-Password in a module
by Juan Luis Perez Perez 18 Oct '06

18 Oct '06

Hi, I'm coding a basic authorization module for FreeRadius, and i have a problem. When FreeRadius tries to authenticate says that: rlm_digest: Configuration item "User-Password" is required for authentication. Here is the function that do athorization in the module: static int xml_rpc_auth(void *instance, REQUEST *request) { int result; VALUE_PAIR **input_pairs, **output_pairs; VALUE_PAIR *answer, *check_pairs; rlm_xml_rpc_t *inst = (rlm_xml_rpc_t *) instance; int accept; const char username[1000], password[1000], realm[1000]; char cadena[1000]; char usrn[1000], pw[1000], rm[1000]; VALUE_PAIR *vpr, *vpd; DICT_ATTR *dict_attr; result = vp_prints(cadena, 1000, request->config_items); if ( result ) radlog(L_ERR, "En vp_prints config_items: %s", cadena); if ( request->config_items->next != NULL ) result = vp_prints(cadena, 1000, request->config_items->next); if ( result ) radlog(L_ERR, "En vp_prints config_items->next: %s", cadena); radlog(L_ERR, "En vp_prints_value request->packet->code: %d", request->packet->code); strcpy(username, request->username->strvalue); radlog(L_ERR, "En vp_prints_value username: %s", username); if ( request->password ){ strcpy(password, request->password->strvalue); radlog(L_ERR, "En vp_prints_value password: %s", password); //result = vp_prints_value(password, 1000, request->password, 254); } radlog(L_ERR, "Atribute del password: %s", request->password->name); /* * We require access to the plain-text password. */ if( request->packet->vps ){ vpr = pairfind(request->packet->vps, PW_DIGEST_REALM); if (!vpr) { radlog(L_AUTH, "rlm_xml_rpc: Configuration item\"Realm\" is required for" "authentication."); } } if ( vpr ){ strcpy(realm, vpr->strvalue); radlog(L_ERR, "rlm_xml_rpc: XML-RPC %d %p %p %p\n",accept, username, password, realm); result = xml_rpc_call(inst, request, &accept, username, password, realm, usrn, pw, rm); radlog(L_ERR, "rlm_xml_rpc: XML-RPC %d %s %s %s\n",accept, username, password, realm); radlog(L_ERR, "PW segun xml_rpc_call es %s\n", pw); vpr = rad_malloc(sizeof(VALUE_PAIR)); dict_attr = rad_malloc(sizeof(DICT_ATTR)); if(vpr && dict_attr){ dict_attr = dict_attrbyname("User-Password"); strcpy(vpr->name, "User-Password"); vpr->attribute = dict_attr->attr; vpr->type = dict_attr->type; vpr->length = strlen(pw); strcpy(vpr->strvalue, pw); vpr->flags = dict_attr->flags; vpr->operator = T_OP_EQ; radlog(L_ERR, "rlm_xml_rpc: creando el VALUE_PAIR con el password para meterlo en request->config" "y requerido para la authenticacion" "vpr->name = %s\n" "vpr->attribute = %d\n" "vpr->type = %d\n" "vpr->length = %d\n" "vpr->strvalue = %s\n", vpr->name, vpr->attribute, vpr->type, vpr->length, vpr->strvalue); } radlog(L_ERR, "rlm_xml_rpc: qué hay? %s %s %s", username, password, realm); if ( accept ) request->config_items = vpr; return RLM_MODULE_OK; } }

2 1

Re: proxy DEFAULT realm bug-o-feature?
by Mike 18 Oct '06

18 Oct '06

> > I placed the following into my preproxy_users file: > > > > DEFAULT Realm != "NULL" > > NAS-IP-Address := `%{Realm}` > > > > But instead of the expected result, I am observing: > > Could you please explain wat the "expected result" is? > > Realm is a string. NAS-IP-Address is an IP address. What do you > expect it to do, and why? Why are you trying to configure it this > way? What are you trying to do? Alan, Stefan, My RADIUS server is a third party POS that relies on NAS-IP-Address to match up the origin of the RADIUS request with the Realm it belongs to. This presents an obvious problem when one device needs to be used from multiple Realms. To further complicate the issue, the originating device has no way to convey the Realm outside of the User-Name field. I am using FreeRADIUS as a proxy between the device that has control over User-Name and RADIUS server that decies what Realm to use based on NAS-IP-Address. The configuration on the device allows me to put: some_user1(a)10.0.0.1 and some_user1(a)10.0.0.2 FreeRADIUS receives this request, strips off the Realm, and substitues the Realm (10.0.0.x) into the NAS-IP-Address field. When RADIUS server receives the request, it is able to properly handle it in the appropriate Realm by finding the realm with the correct IP address. The above example has two Realms. In reality I have 40+ and growing. I can solve it by copying and pasting: realm 10.0.0.1 { ... } realm 10.0.0.2 { ... } ... realm 10.0.0.40 { ... } 40 times and update in the future when I need more. Instead, I tried to be "smarter" by using the default realm, that way I need to only have a single realm statement in config and it will work "forever". When I did this, I find that the suffix module is actually returning the string DEFAULT instead of actual Realm name, so the real Realm name is lost and can not be used in the preproxy_user rules (in my case to put it into the NAS-IP-Address field.) I hope the explanation above makes sense. Thanks in advance for your help (and a great RADIUS proxy server: it works (seemingly) flawlessly as long as DEFAULT is not used.)

3 2

proxy DEFAULT realm bug-o-feature?
by Mike 17 Oct '06

17 Oct '06

I placed the following into my preproxy_users file: DEFAULT Realm != "NULL" NAS-IP-Address := `%{Realm}` But instead of the expected result, I am observing: NAS-IP-Address := 255.255.255.255 in the proxied requests. This seems hardly intuitive, but I can't quite figure out if this is a bug or a feature. If this is a feature, how can I "save" the Realm from being clobbered by the word DEFAULT? If this is a bug, a fix would certainly be nice...

3 2

SQL usergroup table
by Peter Nixon 17 Oct '06

17 Oct '06

Is there any reason why the "usergroup" table is not calle d"radgroup" by default to fit with the other radius tables? -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

4 6