March 2006 - Freeradius-Devel - lists.freeradius.org

rlm_eap_tls restrict issuer
by Benjamin Bennett 09 Mar '06

09 Mar '06

Is there already a way to accept certs only from a particular issuer? For example, if we have a root CA (A), that issues another CA cert (B), from which our client certs will be issued, our CA_file must contain both A & B certs to validate our clients. However, certs issued directly from A will then also be valid. I'm about to add a check_cert_issuer (PW_TYPE_STRING_PTR) config option set to the DN of the issuer we want to use, and a string compare in cbtls_verify() just before the check_cert_cn happens. Does that sound about right? --ben

2 2

Automatic report from sources (radiusd) between 08.03.2006 - 09.03.2006 GMT
by Automatic cvs log generator 09 Mar '06

09 Mar '06

CVS log entries from 08.03.2006 (Wed) 09:00:05 - 09.03.2006 (Thu) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.13 File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c; Revisions: 1.15 ===================================================== Log entries ===================================================== Description: Minor re-arrangement Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.13; Date: 2006/03/08 22:39:51; Author: aland; Lines: (+13 -8) ------------------------------- Description: Removed silly use of magic cvs $ Log $ stuff Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c; Revision: 1.15; Date: 2006/03/08 23:14:14; Author: aland; Lines: (+1 -68) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.13 Authors: aland (+13 -8) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Revisions: 1.15 Authors: aland (+1 -68) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

AcctStopDelay
by Peter Nixon 09 Mar '06

09 Mar '06

Does anyone disagree that AcctStopDelay should always equal 0 in these queries? accounting_onoff_query = "UPDATE ${acct_table1} \ SET AcctStopTime = (now() - '%{Acct-Delay-Time:-0}'::interval), \ AcctSessionTime = (EXTRACT(EPOCH FROM(now()::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, \ AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}' \ WHERE AcctSessionTime IS NULL AND AcctStopTime IS NULL AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= now()" accounting_update_query = "UPDATE ${acct_table1} \ SET FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, \ AcctSessionTime = (EXTRACT(EPOCH FROM(now()::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0 }'::interval)))::BIGINT, \ AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), \ AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint) \ WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' \ AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStopTime IS NULL" Note: I am the one who added originally modified the Postgres query to make AcctSessionTime not include Acct-Delay-Time in the first place to save post calculation in reports. (The default queries for other DBs do not do this currently) It also occurs to me that now() should probably be %S as now() will skew if the database is lagged or queries are being relayed somewhere else.. I guess the question is what is it that we want to default DB queries to do. Should they be faithfully logging the received radius accounting as closely as possible or should they be trying to give as correct a CDR as possible (Which is probably what the end user wants) In my opinion doing a little extra arithmetic upon reception of a packet is a fair tradeoff if it lets the user do a simple "select * from radacct" or something to that effect when they need to do reporting (Instead of trying to calculate out delay etc each time they do the report.) -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

1 1

Release 1.1.1 todo
by Alan DeKok 09 Mar '06

09 Mar '06

Hmm... never mind my EAP comments. It looks like I didn't do a "cvs update" Alan DeKok.

1 0

Automatic report from sources (radiusd) between 07.03.2006 - 08.03.2006 GMT
by Automatic cvs log generator 08 Mar '06

08 Mar '06

CVS log entries from 07.03.2006 (Tue) 09:00:02 - 08.03.2006 (Wed) 09:00:05 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.168, 1.122.2.8.2.5 File: radiusd/share/dictionary.erx; Revisions: 1.13, 1.9.4.2 File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.12 File: radiusd/src/lib/radius.c; Revisions: 1.179, 1.125.2.5.2.4 File: radiusd/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c; Revisions: 1.11, 1.8.4.1 File: radiusd/src/include/radius.h; Revisions: 1.80, 1.66.4.2 File: radiusd/src/main/radclient.c; Revisions: 1.98, 1.97, 1.72.2.1.2.4 File: radiusd/share/dictionary.freeradius.internal; Revisions: 1.10, 1.6.2.5 ===================================================== Combined list of identical log entries ===================================================== Description: Change CoF-* to CoA-*, because that's the proper name. Update radclient to allow sending coa requests update radius.c to clear the request vector, as per RFC 3576. This closes bug #344 Modified files: File: radiusd/share/dictionary.freeradius.internal; Revision: 1.10; Date: 2006/03/07 18:04:24; Author: aland; Lines: (+8 -4) File: radiusd/src/include/radius.h; Revision: 1.80; Date: 2006/03/07 18:04:24; Author: aland; Lines: (+4 -4) File: radiusd/src/lib/radius.c; Revision: 1.179; Date: 2006/03/07 18:04:25; Author: aland; Lines: (+12 -11) File: radiusd/src/main/radclient.c; Revision: 1.97; Date: 2006/03/07 18:04:26; Author: aland; Lines: (+7 -3) ------------------------------- Description: Pull CoA fixes from the head Modified files: File: radiusd/share/dictionary.freeradius.internal; Revision: 1.6.2.5; Date: 2006/03/07 18:10:09; Author: aland; Lines: (+7 -1) File: radiusd/src/include/radius.h; Revision: 1.66.4.2; Date: 2006/03/07 18:10:08; Author: aland; Lines: (+4 -4) File: radiusd/src/lib/radius.c; Revision: 1.125.2.5.2.4; Date: 2006/03/07 18:10:09; Author: aland; Lines: (+12 -11) File: radiusd/src/main/radclient.c; Revision: 1.72.2.1.2.4; Date: 2006/03/07 18:10:10; Author: aland; Lines: (+8 -4) ------------------------------- Description: Pull fix from the head Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c; Revision: 1.8.4.1; Date: 2006/03/07 18:38:17; Author: aland; Lines: (+6 -1) File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.8.2.5; Date: 2006/03/07 18:46:42; Author: aland; Lines: (+4 -2) ===================================================== Log entries ===================================================== Description: Updated for latest set of changes Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.12; Date: 2006/03/08 00:01:48; Author: aland; Lines: (+6 -1) ------------------------------- Description: Updates for 7.1. Patch from bug #315 Modified files: File: radiusd/share/dictionary.erx; Revision: 1.13; Date: 2006/03/07 23:44:27; Author: aland; Lines: (+28 -3) ------------------------------- Description: Pull fix from CVS head Modified files: File: radiusd/share/dictionary.erx; Revision: 1.9.4.2; Date: 2006/03/07 23:45:02; Author: aland; Lines: (+28 -3) ------------------------------- Description: Document coa Modified files: File: radiusd/src/main/radclient.c; Revision: 1.98; Date: 2006/03/07 18:05:33; Author: aland; Lines: (+4 -4) ------------------------------- Description: Additional sanity checks Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c; Revision: 1.11; Date: 2006/03/07 18:38:04; Author: aland; Lines: (+6 -1) ------------------------------- Description: Added debug message when setting Auth-Type Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.168; Date: 2006/03/07 18:43:47; Author: aland; Lines: (+4 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.12 Authors: aland (+6 -1) ------------------------------- File: radiusd/share/dictionary.erx Revisions: 1.13, 1.9.4.2 Authors: aland (+28 -3), aland (+28 -3) ------------------------------- File: radiusd/share/dictionary.freeradius.internal Revisions: 1.10, 1.6.2.5 Authors: aland (+8 -4), aland (+7 -1) ------------------------------- File: radiusd/src/include/radius.h Revisions: 1.80, 1.66.4.2 Authors: aland (+4 -4), aland (+4 -4) ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.179, 1.125.2.5.2.4 Authors: aland (+12 -11), aland (+12 -11) ------------------------------- File: radiusd/src/main/radclient.c Revisions: 1.98, 1.97, 1.72.2.1.2.4 Authors: aland (+4 -4), aland (+7 -3), aland (+8 -4) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c Revisions: 1.11, 1.8.4.1 Authors: aland (+6 -1), aland (+6 -1) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.168, 1.122.2.8.2.5 Authors: aland (+4 -2), aland (+4 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

"Dropping conflicting packet" and "Rejecting request"
by Takeshi Yoshida 08 Mar '06

08 Mar '06

I am moving FreeRadius(1.1.0 Sparc Solaris9) by the following compositions. (Target is "* Proxy *") ------------ --------------- | Radius-1 |--> -->| HomeRadius1 |---RDB ------------ | ----------- | --------------- |-->|* Proxy *|-->| ------------ | ----------- | --------------- | Radius-2 |--> -->| HomeRadius2 |---RDB ------------ --------------- The role of this server is only a Proxy server. The occasionally following errors are output by "radius.log" Wed Feb 22 11:53:38 2006 : Error: Dropping conflicting packet from client Radus-1:1039 - ID: 246 due to unfinished request 7101301 and Wed Feb 22 11:53:38 2006 : Error: Rejecting request 7101299 due to lack of any response from home server Radius-1:1039 Why are these messages output? The number of requests that *Proxy* receive is AUTH=10 and ACCT=15 in about one second. It is a setting as follows. --- radiusd.conf --- max_request_time = 12 delete_blocked_requests = no cleanup_delay = 6 max_requests = 20480 hostname_lookups = no reject_delay = 3 proxy_requests = yes --- proxy.conf --- proxy server { synchronous = no retry_delay = 0 retry_count = 0 dead_time = 60 default_fallback = yes post_proxy_authorize = no } When the examination on which I put the load is done, this error is fully output. However, it is output when the load is low. There is always one kind of UDP transmission Port of "Radius-1" and "Radius-2". (It is not unique at each request. ) Because this server is being operated, it is not possible to do in debug mode. Please give something a good idea to me. I'm sorry in strange English. My best regards. ######################################### # # # Takeshi Yoshida # # # ######################################### --------------------------------- TSUKAME EIKOU! KAGAYAKE EGAO! Yahoo! JAPAN JPC OFFICIAL PARTNER INTERNET PORTAL SITE

1 0

RE: Tagged VSAs
by Chris Hellberg 07 Mar '06

07 Mar '06

Tagged VSAs seem to work ok in 1.0.5 from what I've been testing so far - just setting the has_tag field seems to work ok. I'll log an entry on bugs.freeradius.org once I can release the changes to the latest dictionary file. Cheers, Chris -----Original Message----- From: freeradius-devel-bounces+chellberg=juniper.net(a)lists.freeradius.org [mailto:freeradius-devel-bounces+chellberg=juniper.net@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Monday, 6 March 2006 7:26 p.m. To: FreeRadius developers mailing list Subject: Re: Tagged VSAs "Chris Hellberg" <chellberg(a)juniper.net> wrote: > I notice between 1.0.5 and 1.1.0 there was a check put in dict.c to > prevent tagged VSAs from being added to the dictionary. What's the > idea behind this check? Additional sanity checks. There are no tagged VSA's in the dictionaries, and I'd have to double-check the code to be sure it handles them properly. But there's no real reason why we couldn't have tagged VSA's. If you have dictionary updates with tagged VSA's, send them over, and we'll include them, and patches to enable them in the next release. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 268.1.2/274 - Release Date: 3/03/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 268.1.2/274 - Release Date: 3/03/2006

2 1

Automatic report from sources (radiusd) between 06.03.2006 - 07.03.2006 GMT
by Automatic cvs log generator 07 Mar '06

07 Mar '06

CVS log entries from 06.03.2006 (Mon) 09:00:03 - 07.03.2006 (Tue) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/tests/digest-auth_int-MD5; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest-auth-noalgo; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest-md5-sess; Revisions: 1.1.2.2 File: radiusd/src/tests/digest-auth-MD5_Sess; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest; Revisions: 1.1.2.2 File: radiusd/src/tests/digest-auth-MD5; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest-auth_int-noalgo; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest-auth-int; Revisions: 1.1.2.2 File: radiusd/share/dictionary.bay; Revisions: 1.9, 1.4.10.2 File: radiusd/src/tests/digest-auth_int-MD5_Sess; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revisions: 1.20, 1.5.4.4 Author: fcusack File: radiusd/src/modules/rlm_otp/otp_state.c; Revisions: 1.26, 1.23.2.4 ===================================================== Combined list of identical log entries ===================================================== Description: Added tests and updated digest code from Phillippe Sultan Modified files: File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revision: 1.20; Date: 2006/03/06 18:57:02; Author: aland; Lines: (+15 -8) File: radiusd/src/tests/digest-auth-MD5; Revision: 1.1; Date: 2006/03/06 18:57:02; Author: aland; File: radiusd/src/tests/digest-auth-MD5_Sess; Revision: 1.1; Date: 2006/03/06 18:57:02; Author: aland; File: radiusd/src/tests/digest-auth-noalgo; Revision: 1.1; Date: 2006/03/06 18:57:02; Author: aland; File: radiusd/src/tests/digest-auth_int-MD5; Revision: 1.1; Date: 2006/03/06 18:57:01; Author: aland; File: radiusd/src/tests/digest-auth_int-MD5_Sess; Revision: 1.1; Date: 2006/03/06 18:57:01; Author: aland; File: radiusd/src/tests/digest-auth_int-noalgo; Revision: 1.1; Date: 2006/03/06 18:57:01; Author: aland; ------------------------------- Description: Pull patches from the head Modified files: File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revision: 1.5.4.4; Date: 2006/03/06 19:02:58; Author: aland; Lines: (+15 -8) File: radiusd/src/tests/digest; Revision: 1.1.2.2; Date: 2006/03/06 19:02:54; Author: aland; Lines: (+9 -0) File: radiusd/src/tests/digest-auth-MD5; Revision: 1.1.2.2; Date: 2006/03/06 19:02:57; Author: aland; Lines: (+24 -0) File: radiusd/src/tests/digest-auth-MD5_Sess; Revision: 1.1.2.2; Date: 2006/03/06 19:02:57; Author: aland; Lines: (+24 -0) File: radiusd/src/tests/digest-auth-int; Revision: 1.1.2.2; Date: 2006/03/06 19:02:55; Author: aland; Lines: (+21 -0) File: radiusd/src/tests/digest-auth-noalgo; Revision: 1.1.2.2; Date: 2006/03/06 19:02:57; Author: aland; Lines: (+22 -0) File: radiusd/src/tests/digest-auth_int-MD5; Revision: 1.1.2.2; Date: 2006/03/06 19:02:55; Author: aland; Lines: (+24 -0) File: radiusd/src/tests/digest-auth_int-MD5_Sess; Revision: 1.1.2.2; Date: 2006/03/06 19:02:56; Author: aland; Lines: (+23 -0) File: radiusd/src/tests/digest-auth_int-noalgo; Revision: 1.1.2.2; Date: 2006/03/06 19:02:56; Author: aland; Lines: (+23 -0) File: radiusd/src/tests/digest-md5-sess; Revision: 1.1.2.2; Date: 2006/03/06 19:02:58; Author: aland; Lines: (+19 -0) ===================================================== Log entries ===================================================== Description: Passport 8000 attributes Modified files: File: radiusd/share/dictionary.bay; Revision: 1.9; Date: 2006/03/06 18:43:46; Author: aland; Lines: (+12 -0) ------------------------------- Description: Pull attributes from the head Modified files: File: radiusd/share/dictionary.bay; Revision: 1.4.10.2; Date: 2006/03/06 18:45:21; Author: aland; Lines: (+12 -0) ------------------------------- Description: add stdlib.h Modified files: File: radiusd/src/modules/rlm_otp/otp_state.c; Revision: 1.26; Date: 2006/03/06 21:40:00; Author: fcusack; Lines: (+3 -2) ------------------------------- Description: import from HEAD: add stdlib.h Modified files: File: radiusd/src/modules/rlm_otp/otp_state.c; Revision: 1.23.2.4; Date: 2006/03/06 21:40:56; Author: fcusack; Lines: (+3 -2) ------------------------------- Description: file digest-auth-MD5 was added on branch branch_1_1 on 2006-03-06 19:02:56 +0000 Modified files: File: radiusd/src/tests/digest-auth-MD5; Revision: 1.1.2.1; Date: 2006/03/06 18:57:02; Author: aland; Lines: (+0 -24) ------------------------------- Description: file digest-auth-MD5_Sess was added on branch branch_1_1 on 2006-03-06 19:02:57 +0000 Modified files: File: radiusd/src/tests/digest-auth-MD5_Sess; Revision: 1.1.2.1; Date: 2006/03/06 18:57:02; Author: aland; Lines: (+0 -24) ------------------------------- Description: file digest-auth-noalgo was added on branch branch_1_1 on 2006-03-06 19:02:57 +0000 Modified files: File: radiusd/src/tests/digest-auth-noalgo; Revision: 1.1.2.1; Date: 2006/03/06 18:57:02; Author: aland; Lines: (+0 -22) ------------------------------- Description: file digest-auth_int-MD5 was added on branch branch_1_1 on 2006-03-06 19:02:55 +0000 Modified files: File: radiusd/src/tests/digest-auth_int-MD5; Revision: 1.1.2.1; Date: 2006/03/06 18:57:01; Author: aland; Lines: (+0 -24) ------------------------------- Description: file digest-auth_int-MD5_Sess was added on branch branch_1_1 on 2006-03-06 19:02:56 +0000 Modified files: File: radiusd/src/tests/digest-auth_int-MD5_Sess; Revision: 1.1.2.1; Date: 2006/03/06 18:57:01; Author: aland; Lines: (+0 -23) ------------------------------- Description: file digest-auth_int-noalgo was added on branch branch_1_1 on 2006-03-06 19:02:56 +0000 Modified files: File: radiusd/src/tests/digest-auth_int-noalgo; Revision: 1.1.2.1; Date: 2006/03/06 18:57:01; Author: aland; Lines: (+0 -23) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.bay Revisions: 1.9, 1.4.10.2 Authors: aland (+12 -0), aland (+12 -0) ------------------------------- File: radiusd/src/modules/rlm_digest/rlm_digest.c Revisions: 1.20, 1.5.4.4 Authors: aland (+15 -8), aland (+15 -8) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_state.c Revisions: 1.26, 1.23.2.4 Authors: fcusack (+3 -2), fcusack (+3 -2) ------------------------------- File: radiusd/src/tests/digest Revisions: 1.1.2.2 Authors: aland (+9 -0) ------------------------------- File: radiusd/src/tests/digest-auth-MD5 Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+24 -0), aland (+0 -24) ------------------------------- File: radiusd/src/tests/digest-auth-MD5_Sess Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+24 -0), aland (+0 -24) ------------------------------- File: radiusd/src/tests/digest-auth-int Revisions: 1.1.2.2 Authors: aland (+21 -0) ------------------------------- File: radiusd/src/tests/digest-auth-noalgo Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+22 -0), aland (+0 -22) ------------------------------- File: radiusd/src/tests/digest-auth_int-MD5 Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+24 -0), aland (+0 -24) ------------------------------- File: radiusd/src/tests/digest-auth_int-MD5_Sess Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+23 -0), aland (+0 -23) ------------------------------- File: radiusd/src/tests/digest-auth_int-noalgo Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+23 -0), aland (+0 -23) ------------------------------- File: radiusd/src/tests/digest-md5-sess Revisions: 1.1.2.2 Authors: aland (+19 -0) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

PATCH: lib install bug
by Curtis Doty 06 Mar '06

06 Mar '06

Minor bug in HEAD whereby libs don't get installed properly when using a test prefix that needs to create libdir. ../C Index: Makefile =================================================================== RCS file: /source/radiusd/src/lib/Makefile,v retrieving revision 1.28 diff -u -r1.28 Makefile --- Makefile 22 Jan 2006 21:46:35 -0000 1.28 +++ Makefile 6 Mar 2006 17:51:34 -0000 @@ -48,6 +48,6 @@ rm -rf .libs install: all - $(LIBTOOL) --mode=install $(INSTALL) -c $(TARGET).la $(R)$(libdir) + $(LIBTOOL) --mode=install $(INSTALL) -c $(TARGET).la $(R)$(libdir)/$(TARGET).la rm -f $(R)$(libdir)/$(TARGET)-$(RADIUSD_VERSION).la; ln -s $(TARGET).la $(R)$(libdir)/$(TARGET)-$(RADIUSD_VERSION).la

1 0

Tagged VSAs
by Chris Hellberg 06 Mar '06

06 Mar '06

Hi, I notice between 1.0.5 and 1.1.0 there was a check put in dict.c to prevent tagged VSAs from being added to the dictionary. What's the idea behind this check? Cheers, Chris -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 268.1.2/274 - Release Date: 3/03/2006

2 1

Special Characters in Passwords using LDAP authentication method
by Angelica Delgado 06 Mar '06

06 Mar '06

Hello all, We configured freeradius with ldap authentication. The setup is working ok. The problem is that passwords with special characters such as "$" sign are replaced by "%24". What variable that we need to change in order to allow special characters in passwords? Thanks. Angelica

1 1

eap-fast
by Herisanu Ioan 05 Mar '06

05 Mar '06

Hello to all, I am writting this email as i want to get some feedback on my thoughts on implementing eap-fast in freeRadius. At the time of writting, i am still a student in UPB, bucharest, final year. This work would be my graduation diploma. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

rlm_php
by Pezhman Lali 04 Mar '06

04 Mar '06

Hi I belive PHP has powerful features and stable core, and it's good idea to add rlm_php to freeradius's project. I want to do it, if anybody likes to help me to realize this dream, tell me. also if this project or anything similar it, was done, tell me again. Best Regards Pezhman --------------------------------- Yahoo! Mail Bring photos to life! New PhotoMail makes sharing a breeze.

2 1

Automatic report from sources (radiusd) between 03.03.2006 - 04.03.2006 GMT
by Automatic cvs log generator 04 Mar '06

04 Mar '06

CVS log entries from 03.03.2006 (Fri) 09:00:02 - 04.03.2006 (Sat) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/doc/examples/postgresql.sql; Revisions: 1.2 File: radiusd/doc/examples/postgresql_update_radacct_group_trigger.sql; Revisions: 1.1 File: radiusd/doc/examples/oracle.sql; Revisions: 1.2 File: radiusd/doc/examples/mysql.sql; Revisions: 1.2 File: radiusd/doc/examples/mssql.sql; Revisions: 1.2 ===================================================== Combined list of identical log entries ===================================================== Description: This schema change and trigger updates fills in the groupname field (which doesnt come in Accounting packets) by querying the usergroup table. This makes it easier to do group summary reports, however note that it does add some extra database load to 50% of your SQL accounting queries. Note: Triggers to databases other than PostgreSQL still need to be written but I have updated all DB schemas for consistency Modified files: File: radiusd/doc/examples/mssql.sql; Revision: 1.2; Date: 2006/03/03 14:40:03; Author: pnixon; Lines: (+3 -0) File: radiusd/doc/examples/mysql.sql; Revision: 1.2; Date: 2006/03/03 14:40:04; Author: pnixon; Lines: (+3 -0) File: radiusd/doc/examples/oracle.sql; Revision: 1.2; Date: 2006/03/03 14:40:04; Author: pnixon; Lines: (+2 -1) File: radiusd/doc/examples/postgresql.sql; Revision: 1.2; Date: 2006/03/03 14:40:04; Author: pnixon; Lines: (+2 -1) File: radiusd/doc/examples/postgresql_update_radacct_group_trigger.sql; Revision: 1.1; Date: 2006/03/03 14:40:04; Author: pnixon; ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/doc/examples/mssql.sql Revisions: 1.2 Authors: pnixon (+3 -0) ------------------------------- File: radiusd/doc/examples/mysql.sql Revisions: 1.2 Authors: pnixon (+3 -0) ------------------------------- File: radiusd/doc/examples/oracle.sql Revisions: 1.2 Authors: pnixon (+2 -1) ------------------------------- File: radiusd/doc/examples/postgresql.sql Revisions: 1.2 Authors: pnixon (+2 -1) ------------------------------- File: radiusd/doc/examples/postgresql_update_radacct_group_trigger.sql Revisions: 1.1 Authors: pnixon -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 02.03.2006 - 03.03.2006 GMT
by Automatic cvs log generator 03 Mar '06

03 Mar '06

CVS log entries from 02.03.2006 (Thu) 09:00:02 - 03.03.2006 (Fri) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: fcusack File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revisions: 1.27, 1.19.2.9 File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revisions: 1.63, 1.62.2.2 File: radiusd/src/modules/rlm_otp/otp.h; Revisions: 1.30, 1.28.2.3 ===================================================== Combined list of identical log entries ===================================================== Description: Make the site transform optional (leave undocumented!). From Dave Mitchell. Modified files: File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.30; Date: 2006/03/03 00:54:44; Author: fcusack; Lines: (+2 -1) File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revision: 1.63; Date: 2006/03/03 00:54:44; Author: fcusack; Lines: (+13 -9) File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.27; Date: 2006/03/03 00:54:44; Author: fcusack; Lines: (+4 -2) ------------------------------- Description: import from HEAD: Make the site transform optional (leave undocumented!). From Dave Mitchell. Modified files: File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.28.2.3; Date: 2006/03/03 00:58:31; Author: fcusack; Lines: (+2 -1) File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revision: 1.62.2.2; Date: 2006/03/03 00:58:32; Author: fcusack; Lines: (+13 -9) File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.19.2.9; Date: 2006/03/03 00:58:32; Author: fcusack; Lines: (+4 -2) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_otp/otp.h Revisions: 1.30, 1.28.2.3 Authors: fcusack (+2 -1), fcusack (+2 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_cardops.c Revisions: 1.63, 1.62.2.2 Authors: fcusack (+13 -9), fcusack (+13 -9) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_rlm.c Revisions: 1.27, 1.19.2.9 Authors: fcusack (+4 -2), fcusack (+4 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 01.03.2006 - 02.03.2006 GMT
by Automatic cvs log generator 02 Mar '06

02 Mar '06

CVS log entries from 01.03.2006 (Wed) 09:00:02 - 02.03.2006 (Thu) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/raddb/oraclesql.conf; Revisions: 1.7 File: radiusd/raddb/sql.conf; Revisions: 1.53 File: radiusd/raddb/mssql.conf; Revisions: 1.10 ===================================================== Combined list of identical log entries ===================================================== Description: Bring Oracle and MySQL inline with Postgresl by setting all instances of Acct-Delay-Time to Acct-Delay-Time:-0 so that it defaults to 0 when some stupid NAS don't send it. (Otherwise the query fails) Modified files: File: radiusd/raddb/oraclesql.conf; Revision: 1.7; Date: 2006/03/02 07:47:42; Author: pnixon; Lines: (+6 -6) File: radiusd/raddb/sql.conf; Revision: 1.53; Date: 2006/03/02 07:47:42; Author: pnixon; Lines: (+6 -6) ===================================================== Log entries ===================================================== Description: Opps. Missed MS SQL. Update it to match Postgresql also (Along with previous commit for MySQL and Oracle) Modified files: File: radiusd/raddb/mssql.conf; Revision: 1.10; Date: 2006/03/02 07:56:06; Author: pnixon; Lines: (+6 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/mssql.conf Revisions: 1.10 Authors: pnixon (+6 -6) ------------------------------- File: radiusd/raddb/oraclesql.conf Revisions: 1.7 Authors: pnixon (+6 -6) ------------------------------- File: radiusd/raddb/sql.conf Revisions: 1.53 Authors: pnixon (+6 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: syslog patch to rlm_detail in 1.1.0
by Geoff Silver 01 Mar '06

01 Mar '06

Alan DeKok wrote: >> I'd be much happier if the syslog functionality was in a separate >> module, that didn't touch the "detail" module. The functionality is >> really quite separate, even if there is some overlap in the code. >> >> I'd be OK with adding a "rlm_syslog" to the server, especially if it >> could log authentication success/fail, etc. in place of what's >> currently in the server core. The current syslog functionality is >> pretty bad, so replacing it with a module is a big win. Seems perfectly reasonable. I'll see if I can create an rlm_syslog that'll work. How would you like to receive it (I presume sending a 10k diff to the mailing list probably isn't preferred)? Thanks.

2 1