April 2006 - Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 20.04.2006 - 21.04.2006 GMT
by Automatic cvs log generator 21 Apr '06

21 Apr '06

CVS log entries from 20.04.2006 (Thu) 08:00:01 - 21.04.2006 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/raddb/radiusd.conf.in; Revisions: 1.232, 1.188.2.4.2.11 ===================================================== Combined list of identical log entries ===================================================== Description: updated note about Active Directory Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.232; Date: 2006/04/20 18:40:34; Author: aland; Lines: (+3 -7) File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.11; Date: 2006/04/20 18:40:29; Author: aland; Lines: (+3 -7) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/radiusd.conf.in Revisions: 1.232, 1.188.2.4.2.11 Authors: aland (+3 -7), aland (+3 -7) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Request for consideration in the summer of code
by Alan DeKok 20 Apr '06

20 Apr '06

FreeRADIUS (http://www.freeradius.org) is the premier Open Source RADIUS server. It is used in carrier-class deployments with tens of millions of users. It has more features than any other Open Source server, and more features than most commercial server. That being said, it isn't perfect. We'd like to be considered for the Summer of Code, in order to improve the product. We have a list of project ideas on the web at: http://www.freeradius.org/summerofcode/ We will review the "blue-sky" proposals and incoming student applications publicly on the developers list. As the project lead, I will act as the initial point of contact between Google and the project. Mentors have volunteered to be available for the projects, and there are sufficient people to take over from an assigned mentor if a mentor is unable to provide continuing guidance. We expect that students will join the developers list, and will discuss their ongoing work there with the team of project developers. The mentor (or backup) will provide a written evaluation of the student's work one the project is over. Thank you for your consideration. Alan DeKok.

1 0

Automatic report from sources (radiusd) between 19.04.2006 - 20.04.2006 GMT
by Automatic cvs log generator 20 Apr '06

20 Apr '06

CVS log entries from 19.04.2006 (Wed) 08:00:00 - 20.04.2006 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.170 File: radiusd/src/include/conffile.h; Revisions: 1.29, 1.20.4.1 File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revisions: 1.49, 1.37.2.1.2.1 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.231, 1.230, 1.229, 1.188.2.4.2.10, 1.188.2.4.2.9, 1.188.2.4.2.8 File: radiusd/src/main/conffile.c; Revisions: 1.134, 1.100.2.1.2.1 ===================================================== Combined list of identical log entries ===================================================== Description: less rants Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.231; Date: 2006/04/19 19:14:43; Author: aland; Lines: (+17 -10) File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.10; Date: 2006/04/19 19:14:48; Author: aland; Lines: (+16 -9) ------------------------------- Description: add cf_item_is_pair() for completeness Modified files: File: radiusd/src/include/conffile.h; Revision: 1.29; Date: 2006/04/19 16:14:20; Author: aland; Lines: (+2 -1) File: radiusd/src/main/conffile.c; Revision: 1.134; Date: 2006/04/19 16:14:20; Author: aland; Lines: (+6 -2) ------------------------------- Description: Add configurable suppression of attribute printing Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.229; Date: 2006/04/19 16:24:44; Author: aland; Lines: (+13 -1) File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revision: 1.49; Date: 2006/04/19 16:24:44; Author: aland; Lines: (+70 -24) ------------------------------- Description: Port cf_item_is_pair() from the head Modified files: File: radiusd/src/include/conffile.h; Revision: 1.20.4.1; Date: 2006/04/19 16:21:50; Author: aland; Lines: (+2 -1) File: radiusd/src/main/conffile.c; Revision: 1.100.2.1.2.1; Date: 2006/04/19 16:21:50; Author: aland; Lines: (+6 -2) ------------------------------- Description: Port "suppress" attribute printing from the head Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.8; Date: 2006/04/19 18:35:42; Author: aland; Lines: (+13 -1) File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revision: 1.37.2.1.2.1; Date: 2006/04/19 18:35:41; Author: aland; Lines: (+70 -24) ------------------------------- Description: More comments on EAP and LDAP, in the naive hope that people will read them. Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.230; Date: 2006/04/19 19:09:48; Author: aland; Lines: (+16 -2) File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.9; Date: 2006/04/19 19:09:28; Author: aland; Lines: (+16 -2) ===================================================== Log entries ===================================================== Description: call ldap_escape_func for basedn, etc. too This closes bug #360 Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.170; Date: 2006/04/19 15:56:19; Author: aland; Lines: (+6 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/radiusd.conf.in Revisions: 1.231, 1.230, 1.229, 1.188.2.4.2.10, 1.188.2.4.2.9, 1.188.2.4.2.8 Authors: aland (+17 -10), aland (+16 -2), aland (+13 -1), aland (+16 -9), aland (+16 -2), aland (+13 -1) ------------------------------- File: radiusd/src/include/conffile.h Revisions: 1.29, 1.20.4.1 Authors: aland (+2 -1), aland (+2 -1) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.134, 1.100.2.1.2.1 Authors: aland (+6 -2), aland (+6 -2) ------------------------------- File: radiusd/src/modules/rlm_detail/rlm_detail.c Revisions: 1.49, 1.37.2.1.2.1 Authors: aland (+70 -24), aland (+70 -24) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.170 Authors: aland (+6 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 18.04.2006 - 19.04.2006 GMT
by Automatic cvs log generator 19 Apr '06

19 Apr '06

CVS log entries from 18.04.2006 (Tue) 08:00:01 - 19.04.2006 (Wed) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.122.2.8.2.6 File: radiusd/share/dictionary.acc; Revisions: 1.7, 1.2.4.1.2.2 File: radiusd/src/main/mainconfig.c; Revisions: 1.36.2.6.2.2 File: radiusd/configure.in; Revisions: 1.198.2.15.2.6 ===================================================== Combined list of identical log entries ===================================================== Description: close bug #361 Set dumpable after uid switch, if allow core dumps is set Modified files: File: radiusd/configure.in; Revision: 1.198.2.15.2.6; Date: 2006/04/18 17:26:26; Author: aland; Lines: (+2 -1) File: radiusd/src/main/mainconfig.c; Revision: 1.36.2.6.2.2; Date: 2006/04/18 17:26:26; Author: aland; Lines: (+15 -1) ===================================================== Log entries ===================================================== Description: Add one more attribute. Closes bug #352 Modified files: File: radiusd/share/dictionary.acc; Revision: 1.7; Date: 2006/04/18 17:19:04; Author: aland; Lines: (+1 -0) ------------------------------- Description: Port fix from the head for #352 Modified files: File: radiusd/share/dictionary.acc; Revision: 1.2.4.1.2.2; Date: 2006/04/18 17:20:12; Author: aland; Lines: (+1 -0) ------------------------------- Description: call ldap_escape_func for basedn, etc, too. This closes bug #360 Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.8.2.6; Date: 2006/04/18 21:37:42; Author: aland; Lines: (+6 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/configure.in Revisions: 1.198.2.15.2.6 Authors: aland (+2 -1) ------------------------------- File: radiusd/share/dictionary.acc Revisions: 1.7, 1.2.4.1.2.2 Authors: aland (+1 -0), aland (+1 -0) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.36.2.6.2.2 Authors: aland (+15 -1) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.122.2.8.2.6 Authors: aland (+6 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 17.04.2006 - 18.04.2006 GMT
by Automatic cvs log generator 18 Apr '06

18 Apr '06

CVS log entries from 17.04.2006 (Mon) 08:00:00 - 18.04.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_files/rlm_files.c; Revisions: 1.75 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.228 File: radiusd/man/man5/rlm_files.5; Revisions: 1.2, 1.1.4.1 ===================================================== Combined list of identical log entries ===================================================== Description: Allow the "users" file to have keys other than User-Name. This allows the "users" file (or variants) to be used for group checks, too. Modified files: File: radiusd/man/man5/rlm_files.5; Revision: 1.2; Date: 2006/04/17 18:56:32; Author: aland; Lines: (+21 -1) File: radiusd/raddb/radiusd.conf.in; Revision: 1.228; Date: 2006/04/17 18:56:31; Author: aland; Lines: (+6 -1) File: radiusd/src/modules/rlm_files/rlm_files.c; Revision: 1.75; Date: 2006/04/17 18:56:32; Author: aland; Lines: (+21 -6) ===================================================== Log entries ===================================================== Description: Corrected typo Modified files: File: radiusd/man/man5/rlm_files.5; Revision: 1.1.4.1; Date: 2006/04/17 18:13:10; Author: aland; Lines: (+1 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/man/man5/rlm_files.5 Revisions: 1.2, 1.1.4.1 Authors: aland (+21 -1), aland (+1 -1) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.228 Authors: aland (+6 -1) ------------------------------- File: radiusd/src/modules/rlm_files/rlm_files.c Revisions: 1.75 Authors: aland (+21 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

hide password from accounting logs
by Angelica Delgado 17 Apr '06

17 Apr '06

Hello, How can we hide the password from the detail logs? Thanks. Angelica

2 1

Post-Auth not called correctly with Access-Challenge requests
by Chris Parker 17 Apr '06

17 Apr '06

This is CVS head as of the 9th. Seeing an issue with 'post-auth' not being called correctly when an Access-Challenge is sent back to the NAS ( using EAP leap as the authtype ). If I send a regular 'radtest', post-auth is called, and the request is logged. If I send an EAP test 'eapol_test', post-auth is only called when the Access-Challenge is sent back, and is not called again when the Access-Accept/Reject is sent back. I'm trying to use the sql module to do post-auth logging, and it's only inserting the Access-Challenges, since it's not being called on the second go-round. Any thoughts? -Chris -- Chris Parker Director, Engineering StarNet A Service of US LEC (888)212-0099 Fax (847)963-1302 Wholesale Internet Services http://www.megapop.net VoiceEclipse, The Fresh Alternative http://www.voiceeclipse.com NOTICE: Message is sent IN CONFIDENCE to addressees. It may contain information that is privileged, proprietary or confidential.

1 0

Automatic report from sources (radiusd) between 14.04.2006 - 15.04.2006 GMT
by Automatic cvs log generator 15 Apr '06

15 Apr '06

CVS log entries from 14.04.2006 (Fri) 08:00:01 - 15.04.2006 (Sat) 08:00:03 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/valuepair.c; Revisions: 1.105, 1.104 File: radiusd/src/lib/dict.c; Revisions: 1.85 ===================================================== Log entries ===================================================== Description: Don't do as many copies Modified files: File: radiusd/src/lib/dict.c; Revision: 1.85; Date: 2006/04/14 16:32:19; Author: aland; Lines: (+19 -17) ------------------------------- Description: If ':' is the last character of an attribute name, don't allow it in pairmake. If ':' is the last character of an attribute name in pairread(), back up so we don't read too much. If we didn't make a pair, return an error. We didn't do this before... WTF? Modified files: File: radiusd/src/lib/valuepair.c; Revision: 1.105; Date: 2006/04/14 21:45:54; Author: aland; Lines: (+26 -5) ------------------------------- Description: Speed up parsing by doing a little more by hand Modified files: File: radiusd/src/lib/valuepair.c; Revision: 1.104; Date: 2006/04/14 16:29:01; Author: aland; Lines: (+55 -14) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/dict.c Revisions: 1.85 Authors: aland (+19 -17) ------------------------------- File: radiusd/src/lib/valuepair.c Revisions: 1.105, 1.104 Authors: aland (+26 -5), aland (+55 -14) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Send information to the Radius Client
by Carlos Peñafiel 15 Apr '06

15 Apr '06

Hello, I want to be able to send certain information (such a name, address, phone number ...) from the Radius Server to the Radius Client after the Radius client has been authenticated. I am not sure if I have to create a module ( I do not know if it is necessary). But I do not know what files I must change. Can you help me? I am using freeradius-1.1.1 and the client is Hostap-0.4.8. Thank you in advance.

1 0

rlm_fastusers?
by Alan DeKok 14 Apr '06

14 Apr '06

I checked in some code yesterday to rlm_files that gets rid of 99.9% of the linked list walking. In my tests with 200k entries in a "users" file, the CPU time goes from large to negligible. The code changes are pretty trivial, which is a little surprising. It's based on the new growable hash functions, so most of the magic is hidden from the module. Is there any need for rlm_fastusers any more? It was always a bit of a hack, and with rlm_files being fast now, there doesn't appear to be much need for rlm_fastusers. I don't even know if anyone is using it... About the only difference is the reload support. I think the solution is to add a "need_reload" entry to each module, or maybe a "reload". The idea would be either that on HUP, the module would be able to say "no files change, I don't need a reload", or the module would be able to selectively reload the files that have changed. Comments? Alan DeKok.

2 2