March 2006 - Freeradius-Devel - lists.freeradius.org

"Dropping conflicting packet" and "Rejecting request"
by Takeshi Yoshida 08 Mar '06

08 Mar '06

I am moving FreeRadius(1.1.0 Sparc Solaris9) by the following compositions. (Target is "* Proxy *") ------------ --------------- | Radius-1 |--> -->| HomeRadius1 |---RDB ------------ | ----------- | --------------- |-->|* Proxy *|-->| ------------ | ----------- | --------------- | Radius-2 |--> -->| HomeRadius2 |---RDB ------------ --------------- The role of this server is only a Proxy server. The occasionally following errors are output by "radius.log" Wed Feb 22 11:53:38 2006 : Error: Dropping conflicting packet from client Radus-1:1039 - ID: 246 due to unfinished request 7101301 and Wed Feb 22 11:53:38 2006 : Error: Rejecting request 7101299 due to lack of any response from home server Radius-1:1039 Why are these messages output? The number of requests that *Proxy* receive is AUTH=10 and ACCT=15 in about one second. It is a setting as follows. --- radiusd.conf --- max_request_time = 12 delete_blocked_requests = no cleanup_delay = 6 max_requests = 20480 hostname_lookups = no reject_delay = 3 proxy_requests = yes --- proxy.conf --- proxy server { synchronous = no retry_delay = 0 retry_count = 0 dead_time = 60 default_fallback = yes post_proxy_authorize = no } When the examination on which I put the load is done, this error is fully output. However, it is output when the load is low. There is always one kind of UDP transmission Port of "Radius-1" and "Radius-2". (It is not unique at each request. ) Because this server is being operated, it is not possible to do in debug mode. Please give something a good idea to me. I'm sorry in strange English. My best regards. ######################################### # # # Takeshi Yoshida # # # ######################################### --------------------------------- TSUKAME EIKOU! KAGAYAKE EGAO! Yahoo! JAPAN JPC OFFICIAL PARTNER INTERNET PORTAL SITE

1 0

RE: Tagged VSAs
by Chris Hellberg 07 Mar '06

07 Mar '06

Tagged VSAs seem to work ok in 1.0.5 from what I've been testing so far - just setting the has_tag field seems to work ok. I'll log an entry on bugs.freeradius.org once I can release the changes to the latest dictionary file. Cheers, Chris -----Original Message----- From: freeradius-devel-bounces+chellberg=juniper.net(a)lists.freeradius.org [mailto:freeradius-devel-bounces+chellberg=juniper.net@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Monday, 6 March 2006 7:26 p.m. To: FreeRadius developers mailing list Subject: Re: Tagged VSAs "Chris Hellberg" <chellberg(a)juniper.net> wrote: > I notice between 1.0.5 and 1.1.0 there was a check put in dict.c to > prevent tagged VSAs from being added to the dictionary. What's the > idea behind this check? Additional sanity checks. There are no tagged VSA's in the dictionaries, and I'd have to double-check the code to be sure it handles them properly. But there's no real reason why we couldn't have tagged VSA's. If you have dictionary updates with tagged VSA's, send them over, and we'll include them, and patches to enable them in the next release. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 268.1.2/274 - Release Date: 3/03/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 268.1.2/274 - Release Date: 3/03/2006

2 1

Automatic report from sources (radiusd) between 06.03.2006 - 07.03.2006 GMT
by Automatic cvs log generator 07 Mar '06

07 Mar '06

CVS log entries from 06.03.2006 (Mon) 09:00:03 - 07.03.2006 (Tue) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/tests/digest-auth_int-MD5; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest-auth-noalgo; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest-md5-sess; Revisions: 1.1.2.2 File: radiusd/src/tests/digest-auth-MD5_Sess; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest; Revisions: 1.1.2.2 File: radiusd/src/tests/digest-auth-MD5; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest-auth_int-noalgo; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/tests/digest-auth-int; Revisions: 1.1.2.2 File: radiusd/share/dictionary.bay; Revisions: 1.9, 1.4.10.2 File: radiusd/src/tests/digest-auth_int-MD5_Sess; Revisions: 1.1, 1.1.2.2, 1.1.2.1 File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revisions: 1.20, 1.5.4.4 Author: fcusack File: radiusd/src/modules/rlm_otp/otp_state.c; Revisions: 1.26, 1.23.2.4 ===================================================== Combined list of identical log entries ===================================================== Description: Added tests and updated digest code from Phillippe Sultan Modified files: File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revision: 1.20; Date: 2006/03/06 18:57:02; Author: aland; Lines: (+15 -8) File: radiusd/src/tests/digest-auth-MD5; Revision: 1.1; Date: 2006/03/06 18:57:02; Author: aland; File: radiusd/src/tests/digest-auth-MD5_Sess; Revision: 1.1; Date: 2006/03/06 18:57:02; Author: aland; File: radiusd/src/tests/digest-auth-noalgo; Revision: 1.1; Date: 2006/03/06 18:57:02; Author: aland; File: radiusd/src/tests/digest-auth_int-MD5; Revision: 1.1; Date: 2006/03/06 18:57:01; Author: aland; File: radiusd/src/tests/digest-auth_int-MD5_Sess; Revision: 1.1; Date: 2006/03/06 18:57:01; Author: aland; File: radiusd/src/tests/digest-auth_int-noalgo; Revision: 1.1; Date: 2006/03/06 18:57:01; Author: aland; ------------------------------- Description: Pull patches from the head Modified files: File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revision: 1.5.4.4; Date: 2006/03/06 19:02:58; Author: aland; Lines: (+15 -8) File: radiusd/src/tests/digest; Revision: 1.1.2.2; Date: 2006/03/06 19:02:54; Author: aland; Lines: (+9 -0) File: radiusd/src/tests/digest-auth-MD5; Revision: 1.1.2.2; Date: 2006/03/06 19:02:57; Author: aland; Lines: (+24 -0) File: radiusd/src/tests/digest-auth-MD5_Sess; Revision: 1.1.2.2; Date: 2006/03/06 19:02:57; Author: aland; Lines: (+24 -0) File: radiusd/src/tests/digest-auth-int; Revision: 1.1.2.2; Date: 2006/03/06 19:02:55; Author: aland; Lines: (+21 -0) File: radiusd/src/tests/digest-auth-noalgo; Revision: 1.1.2.2; Date: 2006/03/06 19:02:57; Author: aland; Lines: (+22 -0) File: radiusd/src/tests/digest-auth_int-MD5; Revision: 1.1.2.2; Date: 2006/03/06 19:02:55; Author: aland; Lines: (+24 -0) File: radiusd/src/tests/digest-auth_int-MD5_Sess; Revision: 1.1.2.2; Date: 2006/03/06 19:02:56; Author: aland; Lines: (+23 -0) File: radiusd/src/tests/digest-auth_int-noalgo; Revision: 1.1.2.2; Date: 2006/03/06 19:02:56; Author: aland; Lines: (+23 -0) File: radiusd/src/tests/digest-md5-sess; Revision: 1.1.2.2; Date: 2006/03/06 19:02:58; Author: aland; Lines: (+19 -0) ===================================================== Log entries ===================================================== Description: Passport 8000 attributes Modified files: File: radiusd/share/dictionary.bay; Revision: 1.9; Date: 2006/03/06 18:43:46; Author: aland; Lines: (+12 -0) ------------------------------- Description: Pull attributes from the head Modified files: File: radiusd/share/dictionary.bay; Revision: 1.4.10.2; Date: 2006/03/06 18:45:21; Author: aland; Lines: (+12 -0) ------------------------------- Description: add stdlib.h Modified files: File: radiusd/src/modules/rlm_otp/otp_state.c; Revision: 1.26; Date: 2006/03/06 21:40:00; Author: fcusack; Lines: (+3 -2) ------------------------------- Description: import from HEAD: add stdlib.h Modified files: File: radiusd/src/modules/rlm_otp/otp_state.c; Revision: 1.23.2.4; Date: 2006/03/06 21:40:56; Author: fcusack; Lines: (+3 -2) ------------------------------- Description: file digest-auth-MD5 was added on branch branch_1_1 on 2006-03-06 19:02:56 +0000 Modified files: File: radiusd/src/tests/digest-auth-MD5; Revision: 1.1.2.1; Date: 2006/03/06 18:57:02; Author: aland; Lines: (+0 -24) ------------------------------- Description: file digest-auth-MD5_Sess was added on branch branch_1_1 on 2006-03-06 19:02:57 +0000 Modified files: File: radiusd/src/tests/digest-auth-MD5_Sess; Revision: 1.1.2.1; Date: 2006/03/06 18:57:02; Author: aland; Lines: (+0 -24) ------------------------------- Description: file digest-auth-noalgo was added on branch branch_1_1 on 2006-03-06 19:02:57 +0000 Modified files: File: radiusd/src/tests/digest-auth-noalgo; Revision: 1.1.2.1; Date: 2006/03/06 18:57:02; Author: aland; Lines: (+0 -22) ------------------------------- Description: file digest-auth_int-MD5 was added on branch branch_1_1 on 2006-03-06 19:02:55 +0000 Modified files: File: radiusd/src/tests/digest-auth_int-MD5; Revision: 1.1.2.1; Date: 2006/03/06 18:57:01; Author: aland; Lines: (+0 -24) ------------------------------- Description: file digest-auth_int-MD5_Sess was added on branch branch_1_1 on 2006-03-06 19:02:56 +0000 Modified files: File: radiusd/src/tests/digest-auth_int-MD5_Sess; Revision: 1.1.2.1; Date: 2006/03/06 18:57:01; Author: aland; Lines: (+0 -23) ------------------------------- Description: file digest-auth_int-noalgo was added on branch branch_1_1 on 2006-03-06 19:02:56 +0000 Modified files: File: radiusd/src/tests/digest-auth_int-noalgo; Revision: 1.1.2.1; Date: 2006/03/06 18:57:01; Author: aland; Lines: (+0 -23) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.bay Revisions: 1.9, 1.4.10.2 Authors: aland (+12 -0), aland (+12 -0) ------------------------------- File: radiusd/src/modules/rlm_digest/rlm_digest.c Revisions: 1.20, 1.5.4.4 Authors: aland (+15 -8), aland (+15 -8) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_state.c Revisions: 1.26, 1.23.2.4 Authors: fcusack (+3 -2), fcusack (+3 -2) ------------------------------- File: radiusd/src/tests/digest Revisions: 1.1.2.2 Authors: aland (+9 -0) ------------------------------- File: radiusd/src/tests/digest-auth-MD5 Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+24 -0), aland (+0 -24) ------------------------------- File: radiusd/src/tests/digest-auth-MD5_Sess Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+24 -0), aland (+0 -24) ------------------------------- File: radiusd/src/tests/digest-auth-int Revisions: 1.1.2.2 Authors: aland (+21 -0) ------------------------------- File: radiusd/src/tests/digest-auth-noalgo Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+22 -0), aland (+0 -22) ------------------------------- File: radiusd/src/tests/digest-auth_int-MD5 Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+24 -0), aland (+0 -24) ------------------------------- File: radiusd/src/tests/digest-auth_int-MD5_Sess Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+23 -0), aland (+0 -23) ------------------------------- File: radiusd/src/tests/digest-auth_int-noalgo Revisions: 1.1, 1.1.2.2, 1.1.2.1 Authors: aland, aland (+23 -0), aland (+0 -23) ------------------------------- File: radiusd/src/tests/digest-md5-sess Revisions: 1.1.2.2 Authors: aland (+19 -0) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

PATCH: lib install bug
by Curtis Doty 06 Mar '06

06 Mar '06

Minor bug in HEAD whereby libs don't get installed properly when using a test prefix that needs to create libdir. ../C Index: Makefile =================================================================== RCS file: /source/radiusd/src/lib/Makefile,v retrieving revision 1.28 diff -u -r1.28 Makefile --- Makefile 22 Jan 2006 21:46:35 -0000 1.28 +++ Makefile 6 Mar 2006 17:51:34 -0000 @@ -48,6 +48,6 @@ rm -rf .libs install: all - $(LIBTOOL) --mode=install $(INSTALL) -c $(TARGET).la $(R)$(libdir) + $(LIBTOOL) --mode=install $(INSTALL) -c $(TARGET).la $(R)$(libdir)/$(TARGET).la rm -f $(R)$(libdir)/$(TARGET)-$(RADIUSD_VERSION).la; ln -s $(TARGET).la $(R)$(libdir)/$(TARGET)-$(RADIUSD_VERSION).la

1 0

Tagged VSAs
by Chris Hellberg 06 Mar '06

06 Mar '06

Hi, I notice between 1.0.5 and 1.1.0 there was a check put in dict.c to prevent tagged VSAs from being added to the dictionary. What's the idea behind this check? Cheers, Chris -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 268.1.2/274 - Release Date: 3/03/2006

2 1

Special Characters in Passwords using LDAP authentication method
by Angelica Delgado 06 Mar '06

06 Mar '06

Hello all, We configured freeradius with ldap authentication. The setup is working ok. The problem is that passwords with special characters such as "$" sign are replaced by "%24". What variable that we need to change in order to allow special characters in passwords? Thanks. Angelica

1 1

eap-fast
by Herisanu Ioan 05 Mar '06

05 Mar '06

Hello to all, I am writting this email as i want to get some feedback on my thoughts on implementing eap-fast in freeRadius. At the time of writting, i am still a student in UPB, bucharest, final year. This work would be my graduation diploma. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

rlm_php
by Pezhman Lali 04 Mar '06

04 Mar '06

Hi I belive PHP has powerful features and stable core, and it's good idea to add rlm_php to freeradius's project. I want to do it, if anybody likes to help me to realize this dream, tell me. also if this project or anything similar it, was done, tell me again. Best Regards Pezhman --------------------------------- Yahoo! Mail Bring photos to life! New PhotoMail makes sharing a breeze.

2 1

Automatic report from sources (radiusd) between 03.03.2006 - 04.03.2006 GMT
by Automatic cvs log generator 04 Mar '06

04 Mar '06

CVS log entries from 03.03.2006 (Fri) 09:00:02 - 04.03.2006 (Sat) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/doc/examples/postgresql.sql; Revisions: 1.2 File: radiusd/doc/examples/postgresql_update_radacct_group_trigger.sql; Revisions: 1.1 File: radiusd/doc/examples/oracle.sql; Revisions: 1.2 File: radiusd/doc/examples/mysql.sql; Revisions: 1.2 File: radiusd/doc/examples/mssql.sql; Revisions: 1.2 ===================================================== Combined list of identical log entries ===================================================== Description: This schema change and trigger updates fills in the groupname field (which doesnt come in Accounting packets) by querying the usergroup table. This makes it easier to do group summary reports, however note that it does add some extra database load to 50% of your SQL accounting queries. Note: Triggers to databases other than PostgreSQL still need to be written but I have updated all DB schemas for consistency Modified files: File: radiusd/doc/examples/mssql.sql; Revision: 1.2; Date: 2006/03/03 14:40:03; Author: pnixon; Lines: (+3 -0) File: radiusd/doc/examples/mysql.sql; Revision: 1.2; Date: 2006/03/03 14:40:04; Author: pnixon; Lines: (+3 -0) File: radiusd/doc/examples/oracle.sql; Revision: 1.2; Date: 2006/03/03 14:40:04; Author: pnixon; Lines: (+2 -1) File: radiusd/doc/examples/postgresql.sql; Revision: 1.2; Date: 2006/03/03 14:40:04; Author: pnixon; Lines: (+2 -1) File: radiusd/doc/examples/postgresql_update_radacct_group_trigger.sql; Revision: 1.1; Date: 2006/03/03 14:40:04; Author: pnixon; ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/doc/examples/mssql.sql Revisions: 1.2 Authors: pnixon (+3 -0) ------------------------------- File: radiusd/doc/examples/mysql.sql Revisions: 1.2 Authors: pnixon (+3 -0) ------------------------------- File: radiusd/doc/examples/oracle.sql Revisions: 1.2 Authors: pnixon (+2 -1) ------------------------------- File: radiusd/doc/examples/postgresql.sql Revisions: 1.2 Authors: pnixon (+2 -1) ------------------------------- File: radiusd/doc/examples/postgresql_update_radacct_group_trigger.sql Revisions: 1.1 Authors: pnixon -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 02.03.2006 - 03.03.2006 GMT
by Automatic cvs log generator 03 Mar '06

03 Mar '06

CVS log entries from 02.03.2006 (Thu) 09:00:02 - 03.03.2006 (Fri) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: fcusack File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revisions: 1.27, 1.19.2.9 File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revisions: 1.63, 1.62.2.2 File: radiusd/src/modules/rlm_otp/otp.h; Revisions: 1.30, 1.28.2.3 ===================================================== Combined list of identical log entries ===================================================== Description: Make the site transform optional (leave undocumented!). From Dave Mitchell. Modified files: File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.30; Date: 2006/03/03 00:54:44; Author: fcusack; Lines: (+2 -1) File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revision: 1.63; Date: 2006/03/03 00:54:44; Author: fcusack; Lines: (+13 -9) File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.27; Date: 2006/03/03 00:54:44; Author: fcusack; Lines: (+4 -2) ------------------------------- Description: import from HEAD: Make the site transform optional (leave undocumented!). From Dave Mitchell. Modified files: File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.28.2.3; Date: 2006/03/03 00:58:31; Author: fcusack; Lines: (+2 -1) File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revision: 1.62.2.2; Date: 2006/03/03 00:58:32; Author: fcusack; Lines: (+13 -9) File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.19.2.9; Date: 2006/03/03 00:58:32; Author: fcusack; Lines: (+4 -2) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_otp/otp.h Revisions: 1.30, 1.28.2.3 Authors: fcusack (+2 -1), fcusack (+2 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_cardops.c Revisions: 1.63, 1.62.2.2 Authors: fcusack (+13 -9), fcusack (+13 -9) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_rlm.c Revisions: 1.27, 1.19.2.9 Authors: fcusack (+4 -2), fcusack (+4 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0