February 2006 - Freeradius-Devel - lists.freeradius.org

compiling freeradius 1.0.5 : config error: silently not building rlm_ldap
by sumi 19 Feb '06

19 Feb '06

Hi All, Do you any idea?? Please help me in fixing this issue. Im building freeradius-1.0.5. But rlm_ldap module was not built. Im setting the ldap library path correctly( hope so). I checked with the free-radius mailing list for the same issue. But im not able to fix it. Could please reply me if you have any idea?? Thanks in advance. FYI.. config output was.. configuring in src/modules/rlm_ldap running /bin/sh ./configure --prefix=/root/usr --with-kernel-version= 2.4.29-ccb-symbol--with-kernel-headers=/src/kernel/2.4.29-ccb-symbol/linux/include --with-openssl-libraries=/root/usr/lib --with-openssl-inc=/root/usr/include/openssl/ --without-kerberos --without-sql-mysql --enable-ltdl-install --with-rlm-ldap-lib-dir=/root/usr/local/lib --with-rlm-ldap-include-dir=/root/usr/include --with-ldap --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) /i686-linux-gnu/gcc-3.4.1-glibc-2.3.3 /bin/i686-linux-gnu-gcc checking whether the C compiler (/i686-linux-gnu/gcc-3.4.1-glibc-2.3.3/bin/i686-linux-gnu-gcc -I/root/usr/include -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -L/root/usr/lib ) works... yes checking whether the C compiler (/i686-linux-gnu/gcc-3.4.1-glibc-2.3.3/bin/i686-linux-gnu-gcc -I/root/usr/include -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -L/root/usr/lib ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether /i686-linux-gnu/gcc-3.4.1-glibc-2.3.3/bin/i686-linux-gnu-gcc accepts -g... (cached) yes checking for pthread_create in -lpthread... (cached) yes checking for ldap_init in -lldap_r... no checking for ldap.h... yes configure: warning: silently not building rlm_ldap. configure: warning: FAILURE: rlm_ldap requires: libldap_r. updating cache ../../.././config.cache creating ./config.status creating Makefile -- "If u look at what u dont have in life, u dont have anything But if u look at what u have in life, u have everything.....!!"

2 1

Automatic report from sources (radiusd) between 18.02.2006 - 19.02.2006 GMT
by Automatic cvs log generator 19 Feb '06

19 Feb '06

CVS log entries from 18.02.2006 (Sat) 09:00:02 - 19.02.2006 (Sun) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.122.2.8.2.4 ===================================================== Log entries ===================================================== Description: Pull from CVS head: Use mutexes only if we have pthread.h (closes: #333) Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.8.2.4; Date: 2006/02/18 22:54:35; Author: nbk; Lines: (+2 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.122.2.8.2.4 Authors: nbk (+2 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

RE: using stored procedures with freeradius (Urgent help request)
by Murat Mığdısoğlu 18 Feb '06

18 Feb '06

I found it, If u return some variables from the accounting sp with some kind of select, you can encounter this problem. -----Original Message----- From: freeradius-devel-bounces+murat.migdisoglu=superonline.net(a)lists.freeradius.org [mailto:freeradius-devel-bounces+murat.migdisoglu=superonline.net@lists.freeradius.org] On Behalf Of Murat Mığdısoğlu Sent: Saturday, January 28, 2006 3:29 PM To: freeradius-devel(a)lists.freeradius.org Subject: using stored procedures with freeradius (Urgent help request) Hi all, I'm using freeradius with sybase using freetds and unixodbc. For some purposes, i had to use stored procedures and changed sql statements in sql.con to procedure calls like "EXEC -----". I have to question at this point 1) has anyone used this method before?(in the archie, i saw some mails about sp, so i assume freeradius support it) 2) Examining my logs, i found that some sockets getting 'Invalid cursor State' error from unix-odbc driver in some cases and they don't work anymore. What it can be? Bu e-posta mesaji ve ekleri sadece gonderildigi kisi veya kuruma ozeldir. Eger dogru kisiye ulasmadigini dusunuyorsaniz, bu mesajin yonlendirilmesi, kopyalanmasi veya herhangi bir sekilde kullanilmasi yasaktir.Mesaj iceriginde bulunan fikir ve yorumlar, SUPERONLINE'a degil sadece gondericiye aittir. Bu mesaj bilinen tum viruslere karsi test edilmistir. This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are hereby notified that any dissemination, copying or use of the information is prohibited. The opinions expressed in this message belong to sender alone. There is no implied endorsement by SUPERONLINE.This e-mail has been scanned for all known computer viruses. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html Bu e-posta mesaji ve ekleri sadece gonderildigi kisi veya kuruma ozeldir. Eger dogru kisiye ulasmadigini dusunuyorsaniz, bu mesajin yonlendirilmesi, kopyalanmasi veya herhangi bir sekilde kullanilmasi yasaktir.Mesaj iceriginde bulunan fikir ve yorumlar, SUPERONLINE'a degil sadece gondericiye aittir. Bu mesaj bilinen tum viruslere karsi test edilmistir. This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are hereby notified that any dissemination, copying or use of the information is prohibited. The opinions expressed in this message belong to sender alone. There is no implied endorsement by SUPERONLINE.This e-mail has been scanned for all known computer viruses.

2 1

Premature end of paircompare when using !* op on non-present attribute
by Enrik Berkhan 17 Feb '06

17 Feb '06

Hi all, yesterday I've noticed the following when using the '!*' op (T_OP_CMP_FALSE) in the check items. When the attribute to be compared is not found in the list of request attributes, '!*' evaluates to true, which is correct, but further processing of the remaining check items will be skipped. The code responsible for this behaviour comes from paircompare() in src/main/valuepair.c: > /* > * Not found, it's not a match. > */ > if (auth_item == NULL) { > /* > * Didn't find it. If we were *trying* > * to not find it, then we succeeded. > */ > if (check_item->operator == T_OP_CMP_FALSE) > return 0; > else > return -1; > } I believe the `return 0' to be incorrect. I think it should be `continue' instead to evaluate the remaining check items. Or is it correct like it is? Enrik

2 1

Automatic report from sources (radiusd) between 16.02.2006 - 17.02.2006 GMT
by Automatic cvs log generator 17 Feb '06

17 Feb '06

CVS log entries from 16.02.2006 (Thu) 09:00:01 - 17.02.2006 (Fri) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/version.c; Revisions: 1.13.4.2 Author: fcusack File: radiusd/src/modules/rlm_otp/otp_site.c; Revisions: 1.6, 1.5.2.2 ===================================================== Log entries ===================================================== Description: Update date in copyright Modified files: File: radiusd/src/main/version.c; Revision: 1.13.4.2; Date: 2006/02/16 22:17:21; Author: aland; Lines: (+3 -3) ------------------------------- Description: Append first 2 username chars to challenge. The previous routine created a fixed challenge, which led to a fixed response, which was all 0's! Thanks to David Mitchell for spotting this. Modified files: File: radiusd/src/modules/rlm_otp/otp_site.c; Revision: 1.6; Date: 2006/02/17 01:33:18; Author: fcusack; Lines: (+21 -15) ------------------------------- Description: import from HEAD: Append first 2 username chars to challenge. The previous routine created a fixed challenge, which led to a fixed response, which was all 0's! Thanks to David Mitchell for spotting this. Modified files: File: radiusd/src/modules/rlm_otp/otp_site.c; Revision: 1.5.2.2; Date: 2006/02/17 01:33:55; Author: fcusack; Lines: (+21 -15) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/version.c Revisions: 1.13.4.2 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_site.c Revisions: 1.6, 1.5.2.2 Authors: fcusack (+21 -15), fcusack (+21 -15) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

php and freeradius
by Pezhman Lali 16 Feb '06

16 Feb '06

this is my complete output of debug mode, as you can see the bottom of debug output, I 've tried two times for auth, at first php script exit(1) and second exit(0), [root@radius raddb]# radiusd -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded System Module: Instantiated unix (unix) Module: Loaded eap rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Loaded and initialized type gtc rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess Module: Instantiated preprocess (preprocess) Module: Loaded realm Module: Instantiated realm (suffix) Module: Loaded files Module: Instantiated files (files) Module: Instantiated exec (authphp) Module: Loaded Acct-Unique-Session-Id Module: Instantiated acct_unique (acct_unique) Module: Loaded detail Module: Instantiated detail (detail) Module: Loaded radutmp Module: Instantiated radutmp (radutmp) Initializing the thread pool... Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:37644, id=137, length=56 User-Name = "reza" User-Password = "12349" NAS-IP-Address = 255.255.255.255 NAS-Port = 12 Exec-Program: /usr/local/etc/raddb/test.php Exec-Program-Wait: plaintext: Content-type: text/html X-Powered-By: PHP/4.3.4 Exec-Program: returned: 0 Login incorrect: [reza/12349] (from client radius port 12) rad_recv: Access-Request packet from host 127.0.0.1:37644, id=137, length=56 Sending Access-Reject of id 137 to 127.0.0.1:37644 rad_recv: Access-Request packet from host 127.0.0.1:37644, id=142, length=56 User-Name = "reza" User-Password = "12349" NAS-IP-Address = 255.255.255.255 NAS-Port = 12 Exec-Program: /usr/local/etc/raddb/test.php Exec-Program-Wait: plaintext: Content-type: text/html X-Powered-By: PHP/4.3.4 Exec-Program: returned: 1 rlm_exec (authphp): External script failed best __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

php and freeradius
by Pezhman Lali 15 Feb '06

15 Feb '06

hi this is my php test file: #!/usr/bin/php <?php $u="root"; $p=""; $h="radius"; $con=mysql_connect($h,$u,$p); mysql_select_db('radius'); $query=""; mysql_close($con); $f = fopen('./php.log','w'); fwrite($f,print_r($_ENV,TRUE)); fclose($f); exit(0); ?> and php exec module: exec authphp { wait = yes program = "${raddbdir}/test.php " input_pairs = request output_pairs = request } because of exit(0) in php script I believe every one must be accepted, but the freeradius reject everyone, and this is my debug mode output: User-Name = "reza" User-Password = "1234" NAS-IP-Address = 255.255.255.255 NAS-Port = 12 Exec-Program: /usr/local/etc/raddb/test.php Exec-Program-Wait: plaintext: Content-type: text/html X-Powered-By: PHP/4.3.4 Exec-Program: returned: 0 Login incorrect: [reza/1234] (from client radius port 12) rad_recv: Access-Request packet from host 127.0.0.1:37157, id=224, length=56 Sending Access-Reject of id 224 to 127.0.0.1:37157 let me know where is problem? best __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

Automatic report from sources (radiusd) between 14.02.2006 - 15.02.2006 GMT
by Automatic cvs log generator 15 Feb '06

15 Feb '06

CVS log entries from 14.02.2006 (Tue) 09:00:01 - 15.02.2006 (Wed) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/share/dictionary; Revisions: 1.126, 1.93.2.5.2.2 File: radiusd/share/dictionary.quintum; Revisions: 1.2.10.2 ===================================================== Log entries ===================================================== Description: Include fortinet dictionary, too. Modified files: File: radiusd/share/dictionary; Revision: 1.126; Date: 2006/02/14 15:28:37; Author: nbk; Lines: (+2 -1) ------------------------------- Description: Pull from CVS head: Include fortinet and nortel dictionaries, too. Modified files: File: radiusd/share/dictionary; Revision: 1.93.2.5.2.2; Date: 2006/02/14 15:43:53; Author: nbk; Lines: (+3 -1) ------------------------------- Description: Pull from CVS head: More attributes. Modified files: File: radiusd/share/dictionary.quintum; Revision: 1.2.10.2; Date: 2006/02/14 15:49:47; Author: nbk; Lines: (+4 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary Revisions: 1.126, 1.93.2.5.2.2 Authors: nbk (+2 -1), nbk (+3 -1) ------------------------------- File: radiusd/share/dictionary.quintum Revisions: 1.2.10.2 Authors: nbk (+4 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

freeradius and php
by Pezhman Lali 14 Feb '06

14 Feb '06

how I can send Username,password,.... to exec program, and in php script, how return access-accept back to freeradius. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 2

Fwd: Realm proxy HOW-TO??
by Danai Chudthong 14 Feb '06

14 Feb '06

Dear all I sent this mail to freeradius user group and think I should forward to develope group too. Thanks Danai ----------------------------------------------------------------- Dear all I setup freeradius for my EAP-TLS with realm configuration and everything is fine. But I have some problem about database. The realm name is shown in table raddpostauth but it's not shown in table radacct which is more important. I checked in debug mode and found that freeradius send username with out realm to AP during post-auth process then AP send only username to freeradius for accounting. How to set freeradius to send user@realm to AP in post-auth? I'm not sure what I miss.. Any idea please? For more information, please review in sql query below. Thanks Danai mysql> select username, Realm, NASIPAddress, AcctStartTime, AcctStopTime from radacct where AcctStartTime >= 20060212; +----------+-------+--------------+---------------------+---------------------+ | username | Realm | NASIPAddress | AcctStartTime | AcctStopTime | +----------+-------+--------------+---------------------+---------------------+ | danai | | 192.168.1.2 | 2006-02-12 12:29:47 | 2006-02-12 12:44:32 | | danai | | 192.168.1.2 | 2006-02-12 12:44:34 | 2006-02-12 12:52:33 | | danai | | 192.168.1.2 | 2006-02-12 12:52:35 | 2006-02-12 16:23:09 | | danai | | 192.168.1.2 | 2006-02-12 16:23:10 | 2006-02-12 17:27:56 | | danai | | 192.168.1.2 | 2006-02-12 17:28:01 | 2006-02-12 17:30:48 | | danai | | 192.168.1.2 | 2006-02-12 17:30:52 | 2006-02-12 17:32:58 | | danai | | 192.168.1.2 | 2006-02-12 17:35:39 | 2006-02-12 17:35:45 | | danai | | 192.168.1.2 | 2006-02-12 17:35:46 | 2006-02-12 17:36:58 | | danai | | 192.168.1.2 | 2006-02-12 17:37:33 | 2006-02-12 21:56:37 | | danai | | 192.168.1.2 | 2006-02-12 17:53:49 | 2006-02-12 17:54:09 | | danai | | 192.168.1.2 | 2006-02-12 17:54:16 | 2006-02-12 18:03:05 | | danai | | 192.168.1.2 | 2006-02-12 18:03:09 | 0000-00-00 00:00:00 | | danai | | 192.168.1.2 | 2006-02-12 21:54:47 | 2006-02-12 21:55:06 | | danai | | 192.168.1.2 | 2006-02-12 21:55:39 | 2006-02-12 21:56:10 | | danai | | 192.168.1.2 | 2006-02-12 21:56:39 | 2006-02-12 22:25:04 | | danai | | 192.168.1.2 | 2006-02-12 22:12:11 | 2006-02-12 22:18:44 | | danai | | 192.168.1.2 | 2006-02-12 22:19:01 | 2006-02-12 22:19:23 | | danai | | 192.168.1.2 | 2006-02-12 22:20:01 | 0000-00-00 00:00:00 | | danai | | 192.168.1.2 | 2006-02-12 22:26:12 | 2006-02-12 22:26:34 | | danai | | 192.168.1.2 | 2006-02-12 22:26:35 | 0000-00-00 00:00:00 | +----------+-------+--------------+---------------------+---------------------+ 20 rows in set (0.00 sec) mysql> select user, NASIPAddress, date from radpostauth where date >= 20060212; +--------------------+--------------+---------------------+ | user | NASIPAddress | date | +--------------------+--------------+---------------------+ | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 12:29:47 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 12:44:33 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 12:52:34 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 16:23:10 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:28:01 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:30:51 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:35:39 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:35:46 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:37:33 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 17:53:49 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 17:54:15 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 18:03:09 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 21:54:47 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 21:55:39 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 21:56:39 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:12:11 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:19:01 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:20:01 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:26:12 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:26:35 | +--------------------+--------------+---------------------+ 20 rows in set (0.00 sec) __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0