August 2006 - Freeradius-Devel - lists.freeradius.org

sql_log
by Peter Nixon 04 Sep '06

04 Sep '06

Forgive me if this has been asked before, but shouldn't the sql_log module use the same SQL queries from as the normal sql module? Why does it have it's own set of queries in radiusd.conf? As far as I can tell it should simply ignore connection info and non accounting queries otherwise do exactly the same thing! -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

3 12

RFC compliance in sanitizing Access-Reject responses
by Mike 02 Sep '06

02 Sep '06

All, First, thank you for an excellent server. Within a few hours we went from google-ing for a radius server to having a proxy up which does (almost) everything we needed to make a third party device/server learn many cool new tricks. Unfortunately last night I had to spend 3 hours (maybe "only" 3 hours, attesting to high code quality) in trying to figure out why Access-Reject messages were loosing all but the Reply-Message attribute. Eventually I did find, first a hint on the mailing lists, then the RFC, and then finally after quite a bit of digging, the code in util.c : case PW_AUTHENTICATION_REJECT: pairmove2(&vps, &(packet->vps), PW_EAP_MESSAGE); pairmove2(&vps, &(packet->vps), PW_MESSAGE_AUTHENTICATOR); pairmove2(&vps, &(packet->vps), PW_REPLY_MESSAGE); break; I would like to suggest at least two small changes to make freeradius an even better tool than it already is. The first is really simple and would take practically no work at all: can we please have a log message here that notifies the user of this operation when running with -X? This would have saved me most of the time I've spent digging through mailing lists and the rlm_attr_filter code, and allowed me to quickly find the above culprit. This is actually quite necessary, since any "detail" logs that can be inserted on the proxy reply path happily show all attributes - the attributes magically disappear right before packet is sent. The second request is also trivial to implement: make the above code configurable/optional. Yes, there is a great deal of strength and respect in supporting the RFC to the dot - and without a doubt, that should be the default out-of-the-box configuration. But not all devices are created equal - and in my case, as I'm sure in some others, useful information is passed in the Access-Reject message in attributes other than Reply-Message. Obviously this is not compliant - but all the devices I have are quite happy accepting those "extra" arguments, and a third party server is certainly very happy to send them. Making this code "optional" with a config file switch saves me from hacking the sources. Code change can be achieved simply by moving up case PW_AUTHENTICATION_REJECT: above the default: case and wrapping the 4 line body (including break;) inside of an if statement, so this change is also quite triviail. The third "request" or "option" perhaps, is a bit more complex. I would propose that the above code is actually a hack to comply with RFC, and that the appropriate mechanism of accomplishing this effect is through an appropriate set of attribute filters (enabled by default). This would require extending the attr_filters module to consider the request/response type being filtered. The default configuration can point out the RFC in the comments and filter out everything with the three exceptions. This of course allows for maximal flexibility, while still respecting the standard in the default configuration. I think this one is quite a bit more work, so I do not put too many hopes into it, but I figured I would throw it out on the table. Again, thanks for a great server. The above "hickup" is hardly worth mentioning when compared to the overall experience we've had in setting up the proxy and getting it to do what we want.

3 7

RE: RPM packaging (was: Last set of changes for 1.1.3)
by Sandworm 01 Sep '06

01 Sep '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday, 29 August 2006 7:01 PM, Nicolas Baradakis wrote: > > Thanks for the explanation: I never used rpmbuild myself, so I didn't > know the detailed mechanisms. Then it appears deletion is not really > a problem. The only thing that is strange, is that you redo with > rpmbuild what the Makefile has already done. > The RPM build process does use the Makefile. It does a complete build and install, but does the install in the environment of the "build root", which has a usr, etc, bin, and so on. The built directory is then used to construct the packaged binary RPM (and source RPM, if requested). However, it needs to distinguish between different types of files. This is why files are tagged as "%doc", because these need to be located in what is designated as the documentation directory. So, regardless of the original directory that the Makefile installed them in, they get moved into the documentation directory, sort of relative to the way they are specified in the %doc directives. If you're interested, see "The %doc Directive" at http://www.rpm.org/max-rpm/s1-rpm-inside-files-list- directives.html. Regards SW -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkT1SdEACgkQmw4BJyaatJ0eVgCgoM2ZJElpezgs821HUu6lfa1YUFgA oKWP1VLiIBUuZ3CXU3aiCZwQK74S =i+p9 -----END PGP SIGNATURE-----

3 3

Re: Duplicate requests in a session
by Peter Nixon 01 Sep '06

01 Sep '06

Good question. Does anyone have anything against changing this? -Peter On Thu 31 Aug 2006 10:11, Santiago Balaguer García wrote: > Thanks James, I don't figure out to use primary key solves the problem of > duplicate keys. > I had in radacct as primary key <<radacctid>> but now I am going to have > <<acctuniqueid>>. > > This proble cause a new thread: why radacctid is the primary key of radacct > table instead od acctuniqueid? > > >From: James Wakefield <jamesw(a)deakin.edu.au> > >Reply-To: FreeRadius users mailing list > ><freeradius-users(a)lists.freeradius.org> > >To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> > >Subject: Re: Duplicate requests in a session > >Date: Wed, 30 Aug 2006 22:07:09 +1000 > > > >Santiago Balaguer García wrote: > >>Hi people, > >> > >>1) > >> In my activity I realize that when the conexion to Internet of a NAS is > >>NOT good (there are some reday in the DSL), the NAS send several Start > >>requests. My problen is my RADIUS server ask for all these requests and > >>they are inserted in my DB. So, when the user or the NAS finalize the > >>session and NAS sends Stop Request, the credit associates to the user > >>account is decremented several times. It happens so because I put a > >> trgger in my DB to decrement the user credit atomatically. > >> > >> Can I avoid the problem of inserting several times the start request? > >> If it is so, how?? > >> > >>2) Is it supposed that the value of acctsessionid and acctuniqueid in > >>radacct table are UNIQUE and they can not be duplicated ? > >> > >>Thanks, > >> Santiago > > > >Hi Santiago, > > > >Does your DBMS enforce primary key constraints? Do you have a primary key > >defined for your radacct table? If I recall correctly, MySQL by default > >doesn't, are you using MySQL? > > > >Cheers, > >-- > >James Wakefield, > >Unix Administrator, Information Technology Services Division > >Deakin University, Geelong, Victoria 3217 Australia. > > > >Phone: 03 5227 8690 International: +61 3 5227 8690 > >Fax: 03 5227 8866 International: +61 3 5227 8866 > >E-mail: james.wakefield(a)deakin.edu.au > >Website: http://www.deakin.edu.au > >- List info/subscribe/unsubscribe? See > >http://www.freeradius.org/list/users.html > > _________________________________________________________________ > Acepta el reto MSN Premium: Protección para tus hijos en internet. > Descárgalo y pruébalo 2 meses gratis. > http://join.msn.com?XAPID=1697&DI=1055&HL=Footer_mailsenviados_proteccionin >fantil > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

3 4

SQL Cleanups (Was: Duplicate requests in a session)
by Peter Nixon 31 Aug '06

31 Aug '06

-Moved to devel list from user list- On Thu 31 Aug 2006 13:12, Alan DeKok wrote: > Peter Nixon <listuser(a)peternixon.net> wrote: > > Good question. Does anyone have anything against changing this? > > They primary key should be a synthetic field, and not something > derived directly from the packet. Calling it 'acctuniqueid' is > awkward, maybe renaming it to 'radiuskey'? > > It can then be used in the SQL queries as > %{Acct-Unique-ID:-%{Acct-Session-id}}, which should be safe for all > configuration. This makes sense to me. I think it should be for 2.0 though as changing the name of fields in a DB schema will break compatibility. I have also been considering a number of other cleanups for 2.0 One of my pet peeves is that the mysql config file is called "sql.conf" which tends to confuse non-mysql users the first time around. This should be renamed to mysql.conf (oraclesql.conf should be renamed to oracle.conf also) I think it may even be a good idea to make a raddb/sql/*.conf structure, either that or maybe we should name the files sql.mysql.conf, sql.postgresl.conf etc. This then allows sqlippool.mysql.conf also. (Alternatively the sqlipool config should go inside the existing sql config files.) Also, before a 2.0 release I would like to sit down and bring the queries for the different SQL variants as close together as possible as they have gradually diverged over the last few years. (Much of it my fault as I have been continually adding new features to the postgresql schema :-) Thoughts? -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

3 7

Automatic report from sources (radiusd) between 30.08.2006 - 31.08.2006 GMT
by Automatic cvs log generator 31 Aug '06

31 Aug '06

CVS log entries from 30.08.2006 (Wed) 08:00:01 - 31.08.2006 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: bjordanov File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.38 ===================================================== Log entries ===================================================== Description: New Future: Modify the operator for VP For example to change Operator for Framed-MTU use code like that. $hash{'Framed-MTU'} = "100"; $hash{'Operator'} = "=="; $RAD_REPLY{'Framed-MTU'} = \%hash; Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.38; Date: 2006/08/30 11:00:05; Author: bjordanov; Lines: (+46 -9) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.38 Authors: bjordanov (+46 -9) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

FreeRADIUS Wiki
by Peter Nixon 30 Aug '06

30 Aug '06

Hi Guys I am making a concerted attempt to get the FAQ and rest of the wiki up to date and add new FAQs as they occur on the mailing list. The FAQ is now at: http://wiki.freeradius.org/index.php/FAQ It would help if other developers would instead of directly answering FAQs on the list, add them to the wiki and reply with the link. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 2

mac os x build of v1.1.3: "Symbol not found: _debug_flag"
by Markus Krause 30 Aug '06

30 Aug '06

Hi all! some days ago (22.8.) i reported success on compiling and running freeradius with mac os x (10.4.7). as i read of someone habving problems to do so in the past few days i just downloaded the release version 1.1.3 and ran into to following problem: just typing "./configure", "make" and "make install" showed no errors, but on trying to start the freeradius server with "freeradius -XAs" i get: radiusd: entering modules setup Module: Library search path is /usr/local/lib radiusd.conf[1585] Failed to link to module 'rlm_exec': dlopen(/usr/local/lib/rlm_exec-1.1.3.so, 9): Symbol not found: _debug_flag Referenced from: /usr/local/lib/rlm_exec-1.1.3.so Expected in: flat namespace i am just using the standard config files with no change at all except a line for a testuser in "users". exactly the same configuration on exactly the same machine with the (also just fresh) compiled cvs-version of 21.8.2006 works without any problems. it is not only related to the rlm_exec module, if i am commenting this out in "instantination" of radiusd.conf i get the error: radiusd: entering modules setup Module: Library search path is /usr/local/lib radiusd.conf[1555] Failed to link to module 'rlm_expr': dlopen(/usr/local/lib/rlm_expr-1.1.3.so, 9): Symbol not found: _debug_flag Referenced from: /usr/local/lib/rlm_expr-1.1.3.so Expected in: flat namespace and if i comment out "expr", the same with the next used module (i assume) "pap". any hints? what changed in the meantime? regards markus -- Markus Krause email: krause(a)biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

3 6

Re: RPM packaging (was: Last set of changes for 1.1.3)
by Sandworm 29 Aug '06

29 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Friday, 25 August 2006 8:17 PM Nicolas Baradakis wrote: > Is it impossible to force rpmbuild to package the files installed by > the Makefile in /usr/share/doc/... with a line the %files section ? > > %files > ... > %{_datadir}/doc/%{name}-%{version}/*/* I don't know what this is supposed to do, but having it generates an error: RPM build errors: create archive failed on file /var/tmp/freeradius- root/usr/share/doc/freeradius-1.1.3/examples/iplanet.ldif: cpio: open failed - Bad file descriptor > I've seen something similar in suse/freeradius.spec, but I think this > is a violation of the packaging rules: files in the *source* directory > should not be deleted while building a package. I don't know if this deletion is so much of a problem. While building via rpmbuild, the source tarball is (normally) in /usr/src/redhat/SOURCES, the tarball is expanded into /usr/src/redhat/BUILD, and the (temporary) build root (which is what the spec variable $RPM_BUILD_ROOT points to) is in /var/tmp/freeradius-root. The deletion happens in this directory, which is supposed to be deleted anyway after the build. The *source* directory then does not get affected by the packaging. SW -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTyZfAACgkQmw4BJyaatJ2eFACfWBunR4gch9vAt8cYONvRYpnOn0MA n0xIo7akUBqU01aSKS8Na50ZR250 =HMgG -----END PGP SIGNATURE-----

2 1

Automatic report from sources (radiusd) between 28.08.2006 - 29.08.2006 GMT
by Automatic cvs log generator 29 Aug '06

29 Aug '06

CVS log entries from 28.08.2006 (Mon) 08:00:02 - 29.08.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.37 ===================================================== Log entries ===================================================== Description: Over-write existing vp's with new ones. This means that the Perl module works more like the other modules, which have absolute power over the VP's, and less like the "users" file, which updates the VP's via operators, etc Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.37; Date: 2006/08/28 17:13:00; Author: aland; Lines: (+26 -15) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.37 Authors: aland (+26 -15) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Oops: wasn't there a "doc" page linked at top level?
by Michael Joosten 28 Aug '06

28 Aug '06

Hello, Currently, there are only direct references to two EAP/TLS Howtos on the main page that reference ./doc/, dated 2002. The page ./doc/ still exists, and ironically contains a link to this certain EAP/MD5 Howto, plus links to all manual pages, which are also from 2002 and thus obsolete... Hmm - No wonder that a certain person could not find his EAP/MD5 info....... Regards, Michael

1 0

broken --prefix=/
by Peter Nixon 26 Aug '06

26 Aug '06

Hi Guys Does anyone know why "--prefix=/" not longer works as expected when fed to configure in the 1.1.x cvs branch? No matter what I do radiusd keeps looking for /usr/local/etc/raddb and I have been forced to symlink it to /etc/raddb is my latest rpms.. -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

11 46

Automatic report from sources (radiusd) between 25.08.2006 - 26.08.2006 GMT
by Automatic cvs log generator 26 Aug '06

26 Aug '06

CVS log entries from 25.08.2006 (Fri) 08:00:01 - 26.08.2006 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/raddb/eap.conf; Revisions: 1.10, 1.9 ===================================================== Log entries ===================================================== Description: Added link to page with certificate requirements Modified files: File: radiusd/raddb/eap.conf; Revision: 1.10; Date: 2006/08/25 18:55:22; Author: aland; Lines: (+5 -3) ------------------------------- Description: Added warnings about MS interoperability Modified files: File: radiusd/raddb/eap.conf; Revision: 1.9; Date: 2006/08/25 18:49:39; Author: aland; Lines: (+27 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/eap.conf Revisions: 1.10, 1.9 Authors: aland (+5 -3), aland (+27 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Need sample config file for EAP-MD5 authentication
by Atif Ikram 25 Aug '06

25 Aug '06

Greetings, I am new to FreeRADIUS and trying to set it up with HostAp and xsupplicant. I have gotten all three components compiled and running. The HostAp and FreeRADIUS are running on Linux box whereas xsupplicant is cross-compiled for an ARM processor and running on an embedded machine but is on the network. The FreeRADIUS and HostAP are talking to each other after when I had the same secret set in clients.conf and wired.conf files in FreeRADIUS and HostAP configuration files respectively. I have xsupplicant trying to authenticate itself and I see it talking to HostAP but since I don't have it configured right, the FreeRADIUS rejects the authentication for this client. I am on a wired network so MD5 type authentication will suffice. I just cannot figure out how to configure the eap.conf file in FreeRADIUS, or syntax where I can provide the user name and password for the client. Can someone help me out with a sample file ? It is a very simple configuration but I couldn't find it on Google search. Thanks in advance, Mike

3 5

Eap-Tls Problem
by Matteo Lazzarini 25 Aug '06

25 Aug '06

Hello I'm a new user, and i'm trying to set an Eap-Tls authentication using freeradius 1.1.2. My system is debian stable. I installed freeradius 1.1.2 (./confidure, make ,make install) and libssl-dev (apt-get install libssl-dev) like here: http://web.archive.org/web/20031206113912/http://www.impossiblereflex.com/8… http://www.alphacore.net/spip/article.php3?id_article=33 When I turn on freeradius I can see this: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/eap.conf Config: including file: /etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = yes main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = yes main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/etc/1x/jagger.pem" tls: certificate_file = "/etc/1x/jagger.pem" tls: CA_file = "/etc/1x/root.pem" tls: private_key_password = "whatever" tls: dh_file = "/etc/1x/dh" tls: random_file = "/etc/1x/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap: Loaded and initialized type tls peap: default_eap_type = "mschapv2" peap: copy_request_to_tunnel = no peap: use_tunneled_reply = no peap: proxy_tunneled_request_as_eap = yes rlm_eap: Loaded and initialized type peap mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (auth_log) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. After I made the certificate and installed in the client I tried to request an authentication but the output show me an error: rad_recv: Access-Request packet from host 192.168.1.5:1217, id=17, length=139 User-Name = "marcello" NAS-IP-Address = 0.0.0.0 NAS-Port = 0 Called-Station-Id = "00-40-05-30-C5-86" Calling-Station-Id = "00-0C-F1-15-17-59" NAS-Identifier = "DLink-900AP+" Framed-MTU = 1380 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020d000d016d617263656c6c6f Message-Authenticator = 0x5cf6d0c113ea537193f632be5324ddac Processing the authorize section of radiusd.conf modcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821 modcall[authorize]: module "auth_log" returns ok for request 8 rlm_eap: EAP packet type response id 13 length 13 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 8 users: Matched entry DEFAULT at line 152 users: Matched entry marcello at line 219 modcall[authorize]: module "files" returns ok for request 8 modcall: leaving group authorize (returns updated) for request 8 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 8 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 8 modcall: leaving group authenticate (returns handled) for request 8 Sending Access-Challenge of id 17 to 192.168.1.5 port 1217 EAP-Message = 0x010e00060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf07c05d2e094204483f4809fce1d0c28 Finished request 8 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.5:1217, id=18, length=224 User-Name = "marcello" NAS-IP-Address = 0.0.0.0 NAS-Port = 0 Called-Station-Id = "00-40-05-30-C5-86" Calling-Station-Id = "00-0C-F1-15-17-59" NAS-Identifier = "DLink-900AP+" Framed-MTU = 1380 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020e00500d800000004616030100410100003d030144e9b43485e72b29db6f1029820e8626f3358dc31aacc52a129ce61689ebe58f00001600040005000a000900640062000300060013001200630100 State = 0xf07c05d2e094204483f4809fce1d0c28 Message-Authenticator = 0x975a5fb5db9745857a408bd7f840d26b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 9 modcall[authorize]: module "preprocess" returns ok for request 9 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821 modcall[authorize]: module "auth_log" returns ok for request 9 rlm_eap: EAP packet type response id 14 length 80 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 9 users: Matched entry DEFAULT at line 152 users: Matched entry marcello at line 219 modcall[authorize]: module "files" returns ok for request 9 modcall: leaving group authorize (returns updated) for request 9 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 9 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 063f], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 009a], CertificateRequest TLS_accept: SSLv3 write certificate request A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 9 modcall: leaving group authenticate (returns handled) for request 9 Sending Access-Challenge of id 18 to 192.168.1.5 port 1217 EAP-Message = 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 EAP-Message = 0x1c06092a864886f70d010901160f63614067727570706f696d692e6974301e170d3036303832313130353231345a170d3037303832313130353231345a30818a310b3009060355040613024954310e300c060355040813054954414c593110300e0603550407130742657267616d6f31123010060355040a130947727570706f696d693110300e060355040b1307494d492073726c310f300d060355040313066a61676765723122302006092a864886f70d01090116136a61676765724067727570706f696d692e697430819f300d06092a864886f70d010101050003818d0030818902818100bbe2fe9126b2b0849877a8b391dda33f98ee5de4a34d EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x040613024954310e300c060355040813054954414c59 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8bfc44c788f3b51de96ef0e08569c6e5 Finished request 9 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 8 ID 17 with timestamp 44e9b492 Cleaning up request 9 ID 18 with timestamp 44e9b492 Nothing to do. Sleeping until we see a request. Can Somebody help me? Thanks Matteo

6 23

Re: Last set of changes for 1.1.3
by Sandworm 25 Aug '06

25 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 23 Aug 2006 03:29:45 +1000 Peter Nixon wrote: > > I changed the RedHat spec file to match the suse spec file > with regards %doc > Actually, that gets a lot of unnecessary stuff in (including README.suse, etc), as well as Makefiles, as Nicolas pointed out. The following patch to the 1.1.3 CVS redhat directory file freeradius.spec simplifies this. I've tested it and appears to restore the doc install behaviour that FR used to have a few releases ago. - --- freeradius.spec.orig 2006-08-23 15:24:59.000000000 +1000 +++ freeradius.spec 2006-08-23 16:29:12.000000000 +1000 @@ -56,6 +56,9 @@ # remove unneeded stuff rm -f $RPM_BUILD_ROOT%{_mandir}/man8/builddbm.8 rm -f $RPM_BUILD_ROOT%{_prefix}/sbin/rc.radiusd +rm -rf doc/00-OLD doc/CVS doc/Makefile +rm -rf doc/examples/CVS doc/examples/Makefile +rm -rf doc/rfc/CVS doc/rfc/Makefile cd redhat install -m 755 rc.radiusd-redhat $RPM_BUILD_ROOT/etc/rc.d/init.d/radiusd @@ -98,7 +101,8 @@ %files %defattr(-,root,root) - -%doc doc/ChangeLog doc/README* todo/ COPYRIGHT INSTALL +%doc doc/* todo/ COPYRIGHT INSTALL +%doc doc/examples/ doc/rfc/ %config /etc/pam.d/radius %config /etc/logrotate.d/radiusd %config /etc/rc.d/init.d/radiusd -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTr7XoACgkQmw4BJyaatJ0F0wCfZDK5nd6wjKMfSwlRr4WblJwBaQgA oJBx4q1Fq8Q3PCGnNPfjsXOdBs0Y =LU+g -----END PGP SIGNATURE-----

2 1

Automatic report from sources (radiusd) between 24.08.2006 - 25.08.2006 GMT
by Automatic cvs log generator 25 Aug '06

25 Aug '06

CVS log entries from 24.08.2006 (Thu) 08:00:00 - 25.08.2006 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/auth.c; Revisions: 1.158 File: radiusd/src/main/mainconfig.c; Revisions: 1.93 File: radiusd/src/lib/valuepair.c; Revisions: 1.112 File: radiusd/src/modules/rlm_files/rlm_files.c; Revisions: 1.77 ===================================================== Log entries ===================================================== Description: In pairmove(), do NOT blindly move all of the attributes over if *to == NULL. We still have to pay attention to the operators. If the operators are comparison ones, then do NOT move them to the "*to" list, as they're not needed. Modified files: File: radiusd/src/lib/valuepair.c; Revision: 1.112; Date: 2006/08/24 23:49:47; Author: aland; Lines: (+25 -8) ------------------------------- Description: Don't copy User-Password to Cleartext-Password, if the User-Password already exists. Modified files: File: radiusd/src/main/auth.c; Revision: 1.158; Date: 2006/08/24 23:27:20; Author: aland; Lines: (+8 -2) ------------------------------- Description: If debugging, set output to stdout. Print server version on startup update text for reloading configuration files Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.93; Date: 2006/08/24 18:57:01; Author: aland; Lines: (+6 -2) ------------------------------- Description: Corrected comment Modified files: File: radiusd/src/modules/rlm_files/rlm_files.c; Revision: 1.77; Date: 2006/08/24 23:50:13; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/valuepair.c Revisions: 1.112 Authors: aland (+25 -8) ------------------------------- File: radiusd/src/main/auth.c Revisions: 1.158 Authors: aland (+8 -2) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.93 Authors: aland (+6 -2) ------------------------------- File: radiusd/src/modules/rlm_files/rlm_files.c Revisions: 1.77 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 23.08.2006 - 24.08.2006 GMT
by Automatic cvs log generator 24 Aug '06

24 Aug '06

CVS log entries from 23.08.2006 (Wed) 08:00:01 - 24.08.2006 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/log.c; Revisions: 1.51 File: radiusd/src/main/mainconfig.c; Revisions: 1.92 File: radiusd/src/main/radiusd.c; Revisions: 1.357 ===================================================== Combined list of identical log entries ===================================================== Description: Until we read radiusd.conf, all errors should go to stderr. Once we read radiusd.conf, we've initialized the logging destination, and all errors should go there. Modified files: File: radiusd/src/main/log.c; Revision: 1.51; Date: 2006/08/23 20:37:15; Author: aland; Lines: (+35 -19) File: radiusd/src/main/mainconfig.c; Revision: 1.92; Date: 2006/08/23 20:37:14; Author: aland; Lines: (+53 -39) File: radiusd/src/main/radiusd.c; Revision: 1.357; Date: 2006/08/23 20:37:14; Author: aland; Lines: (+9 -6) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/log.c Revisions: 1.51 Authors: aland (+35 -19) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.92 Authors: aland (+53 -39) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.357 Authors: aland (+9 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Help to debugging the server using GDb
by Shankar Ganesh C 24 Aug '06

24 Aug '06

Hi I was trying to debug the radiusd through gbb.But the program is exiting out below are the logs Pls let me know any debugging flags needs to be set, when i need to debug using GDB Rgds, Shankar ganesh Wed Aug 23 16:13:26 2006 : Info: Starting - reading configuration files ... n947 if ((mainconfig.allow_core_dumps == FALSE) && (debug_flag == 0)) { (gdb) n 959 DEBUG2("radiusd: entering modules setup"); (gdb) n 950 act.sa_handler = sig_fatal; (gdb) n 951 sigaction(SIGSEGV, &act, NULL); (gdb) n 959 DEBUG2("radiusd: entering modules setup"); (gdb) n 960 if (setup_modules() < 0) { (gdb) n n 971 if (strcmp(radlog_dir, "syslog") == 0) { (gdb) n 972 openlog(progname, LOG_PID, syslog_facility); (gdb) n 977 if (strcmp(radlog_dir, "stdout") == 0) { (gdb) n 978 radlog_dest = RADLOG_STDOUT; (gdb) n 979 } else if (strcmp(radlog_dir, "stderr") == 0) { (gdb) n 980 radlog_dest = RADLOG_STDERR; (gdb) n 984 rl_init(); (gdb) n 989 pair_builtincompare_init(); (gdb) n 998 if (debug_flag == 0 && dont_fork == FALSE) { (gdb) n 999 pid = fork(); (gdb) n 1000 if(pid < 0) { (gdb) n 1001 radlog(L_ERR|L_CONS, "Couldn't fork"); (gdb) n 1008 if(pid > 0) { (gdb) n 1009 exit(0); (gdb) n Program exited normally.

4 3

Automatic report from sources (radiusd) between 22.08.2006 - 23.08.2006 GMT
by Automatic cvs log generator 23 Aug '06

23 Aug '06

CVS log entries from 22.08.2006 (Tue) 08:00:01 - 23.08.2006 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.15.2.2.2.1 File: radiusd/src/modules/rlm_dbm/rlm_dbm_parser.c; Revisions: 1.13, 1.9.4.1 File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.28, 1.57.2.31.2.27 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revisions: 1.35, 1.34, 1.21.4.10, 1.21.4.9 File: radiusd/src/lib/hash.c; Revisions: 1.16, 1.9.2.8 File: radiusd/src/lib/dict.c; Revisions: 1.92, 1.50.2.4.2.11 Author: pnixon File: radiusd/redhat/freeradius.spec; Revisions: 1.19.2.5.2.8 ===================================================== Combined list of identical log entries ===================================================== Description: Be a little more paranoid about initialization. Modified files: File: radiusd/src/lib/dict.c; Revision: 1.92; Date: 2006/08/22 23:02:15; Author: aland; Lines: (+30 -2) File: radiusd/src/lib/dict.c; Revision: 1.50.2.4.2.11; Date: 2006/08/22 23:02:38; Author: aland; Lines: (+30 -2) File: radiusd/src/lib/hash.c; Revision: 1.16; Date: 2006/08/22 23:02:15; Author: aland; Lines: (+7 -4) File: radiusd/src/lib/hash.c; Revision: 1.9.2.8; Date: 2006/08/22 23:02:36; Author: aland; Lines: (+7 -4) ===================================================== Log entries ===================================================== Description: One more bug fix Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.28; Date: 2006/08/22 23:09:20; Author: aland; Lines: (+3 -2) ------------------------------- Description: Latest updates Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.27; Date: 2006/08/22 16:25:41; Author: aland; Lines: (+2 -1) ------------------------------- Description: add some extra stuff to %doc to bring inline with suse Modified files: File: radiusd/redhat/freeradius.spec; Revision: 1.19.2.5.2.8; Date: 2006/08/22 17:25:59; Author: pnixon; Lines: (+6 -1) ------------------------------- Description: Allow empty check lines. This closes bug #380. Modified files: File: radiusd/src/modules/rlm_dbm/rlm_dbm_parser.c; Revision: 1.13; Date: 2006/08/22 18:19:56; Author: aland; Lines: (+4 -4) ------------------------------- Description: Allow empty check lines. This closes bug #380. Modified files: File: radiusd/src/modules/rlm_dbm/rlm_dbm_parser.c; Revision: 1.9.4.1; Date: 2006/08/22 18:19:31; Author: aland; Lines: (+4 -4) ------------------------------- Description: Be a little more aggressive about shrinking the TLS fragment size when given a Framed-MTU. This closes bug #383. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.35; Date: 2006/08/22 16:20:26; Author: aland; Lines: (+25 -5) ------------------------------- Description: Free more entries in the config. This closes bug #385 Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.34; Date: 2006/08/22 16:08:49; Author: aland; Lines: (+14 -11) ------------------------------- Description: Be a little more aggressive about shrinking the TLS fragment size when given a Framed-MTU. This closes bug #383. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.21.4.10; Date: 2006/08/22 16:20:41; Author: aland; Lines: (+25 -5) ------------------------------- Description: Free more entries in the config. This closes bug #385. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.21.4.9; Date: 2006/08/22 16:09:16; Author: aland; Lines: (+14 -11) ------------------------------- Description: Corrected typo in debugging message Modified files: File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.15.2.2.2.1; Date: 2006/08/22 20:19:22; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.28, 1.57.2.31.2.27 Authors: aland (+3 -2), aland (+2 -1) ------------------------------- File: radiusd/redhat/freeradius.spec Revisions: 1.19.2.5.2.8 Authors: pnixon (+6 -1) ------------------------------- File: radiusd/src/lib/dict.c Revisions: 1.92, 1.50.2.4.2.11 Authors: aland (+30 -2), aland (+30 -2) ------------------------------- File: radiusd/src/lib/hash.c Revisions: 1.16, 1.9.2.8 Authors: aland (+7 -4), aland (+7 -4) ------------------------------- File: radiusd/src/modules/rlm_dbm/rlm_dbm_parser.c Revisions: 1.13, 1.9.4.1 Authors: aland (+4 -4), aland (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Revisions: 1.35, 1.34, 1.21.4.10, 1.21.4.9 Authors: aland (+25 -5), aland (+14 -11), aland (+25 -5), aland (+14 -11) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.15.2.2.2.1 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: Last set of changes for 1.1.3
by Sandworm 22 Aug '06

22 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 16 Jul 2006 03:49:44 +1000 Nicolas Baradakis <nbk(a)sitadelle.com> wrote: > >I've added an option --with-docdir to ./configure, so we can chose >the >directory where the documentation files will be installed. It >should be >useful to build a RPM package. > >I'm not using a redhat-based distribution, and I can't be sure >this >solves all the problems. Please get version 1.1.3 from CVS and try >to run rpmbuild. Sorry, it took a while for me to get to this. Got version 1.1.3 from CVS today and ran rpmbuild on Redhat Enterprise Linux 4 (Update 3). Builds OK - very good, and the default setting Nicolas inserted into the spec file for "with-docdir" is fine. One residual issue though (a fix for which I had as part of the patch I had originally submitted to this list) is that /usr/share/doc/freeradius-1.1.3/ gets only "ChangeLog COPYRIGHT INSTALL README todo/". Unless the remining required files in the doc directory are inserted into the redhat spec file as I had done in the patch, those doc files will not (and do not) get copied in. A better fix would be to rename the files that should be copied into the RPM (or into an installation on any other distro) to have a standard prefix (say "doc-" for want of anything better) from the doc directory. In that case, having the line "%doc doc/doc* todo/ COPYRIGHT INSTALL" in the spec file in the %files section will install everything required. What do you think? Regards SW -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTqpkcACgkQmw4BJyaatJ089QCglLKtEH15ltYXLJdgumjyB6v0JIcA oJlIJpVh8eYuKW3YIZu+vKTuON8h =SkZw -----END PGP SIGNATURE-----

2 1

Unexpected Accounting proxy behaviour
by Peter Nixon 22 Aug '06

22 Aug '06

I have the following in "acct_users": peter Called-Station-Id == "myrealm", Proxy-To-Realm := myproxy Now, with this configuration, "myproxy" receives all of the accounting packets (Start, Interim-Update and Stop) as expected, HOWEVER on the radius server doing the proxying in sqltrace.log (and in the SQL table) I only see the "Start" record. For non proxied packets I happily have the 3 different typs of SQL queries show up in sqltrace.log Can anyone tell me what is different about Start records that would cause this behaviour? I am running the 1.1.x branch cvs snapshot from 2006-08-08 on this server. Thanks in Advance -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 2

Re: Last set of changes for 1.1.3
by Sandworm 22 Aug '06

22 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 22 Aug 2006 16:38:00 +1000 Sandworm <sandworm(a)mepd.hush.com> wrote: > >>A better fix would be to rename the files that should be copied >into the RPM (or into an installation on any other distro) to have >a standard prefix (say "doc-" for want of anything better) from >the >doc directory. In that case, having the line "%doc doc/doc* todo/ >COPYRIGHT INSTALL" in the spec file in the %files section will >install everything required. Further to what I just posted - Or what has been done in the Suse SPEC file can be done for the Redhat SPEC file - remove whatever is not required from the doc/ directory (such as doc/00-OLD), and then "%doc doc/* todo/ COPYRIGHT INSTALL" will do the trick. SW -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTqqhMACgkQmw4BJyaatJ16egCfUzcQ9xACHRxg2Slq6NvcrOAS0hMA n3wLtdtZvaDg0sWnE8FUxdbDJxdw =LBC1 -----END PGP SIGNATURE-----

2 1

Automatic report from sources (radiusd) between 21.08.2006 - 22.08.2006 GMT
by Automatic cvs log generator 22 Aug '06

22 Aug '06

CVS log entries from 21.08.2006 (Mon) 08:00:02 - 22.08.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/main/Makefile.in; Revisions: 1.27.2.5.2.4 File: radiusd/src/include/Makefile; Revisions: 1.5 Author: pnixon File: radiusd/suse/freeradius.spec; Revisions: 1.11.2.6.2.8 ===================================================== Log entries ===================================================== Description: Install new files hash.h and packet.h too and remove "freeradius-devel" from the #include directives in the copy to be found in the destination directory. An external program could now use the FreeRADIUS libradius with a #include <freeradius/libradius.h> Modified files: File: radiusd/src/include/Makefile; Revision: 1.5; Date: 2006/08/21 09:47:48; Author: nbk; Lines: (+4 -1) ------------------------------- Description: Don't link mainconfig.lo to radrelay, it's not necessary. Thanks to Markus Krause <krause(a)biochem.mpg.de> Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.27.2.5.2.4; Date: 2006/08/21 12:47:46; Author: nbk; Lines: (+3 -3) ------------------------------- Description: Major update the the spec file to with BuildRequires for various linux versions Modified files: File: radiusd/suse/freeradius.spec; Revision: 1.11.2.6.2.8; Date: 2006/08/21 13:12:21; Author: pnixon; Lines: (+108 -40) ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/Makefile Revisions: 1.5 Authors: nbk (+4 -1) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.27.2.5.2.4 Authors: nbk (+3 -3) ------------------------------- File: radiusd/suse/freeradius.spec Revisions: 1.11.2.6.2.8 Authors: pnixon (+108 -40) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: building v.1.1.3(cvs) on different systems
by Markus Krause 22 Aug '06

22 Aug '06

Zitat von Nicolas Baradakis <nbk(a)sitadelle.com>: > Markus Krause wrote: > > > i just tested the building of todays cvs checkout of branch_1_1, here is > > what happend (maybe you want to know ;-)): > > Thanks for the report, your tests are very useful. i am glad to be able to contribute at least this way a bit to this great project! > [...] > > > * mac os x 10.4.7: > > running ./configure and then make leads to: > > > > /usr/bin/ld: multiple definitions of symbol _mainconfig > > .libs/radrelay.o definition of _mainconfig in section (__DATA,__common) > > .libs/mainconfig.o definition of _mainconfig in section (__DATA,__common) > > It seems radrelay doesn't need to link with mainconfig.o anymore. Please > do a "cvs update" and try again with no configure option. ok, i did a "cvs update", then "./configure" and "make" there were no errors and after "make install" i had a running freeradius server ! > > then i tried "./configure --disable-shared" (i remembered something ...) > > and got until: > > > > /usr/bin/ld: Undefined symbols: > > _boot_DynaLoader > > It looks like a problem with rlm_perl. This time please try to build > with "./configure --disable-shared --without-rlm-perl". ok (although the solution above works, but may be it is of some use): make clean ./configure --disable-shared --without-rlm-perl make the build was successful. > Please also post the output of the command "perl -MExtUtils::Embed -e ldopts". here you are: macky-lan:~ krause$ perl -MExtUtils::Embed -e ldopts -L/usr/local/lib /System/Library/Perl/5.8.6/darwin-thread-multi-2level/auto/DynaLoader/DynaLoader.a -L/System/Library/Perl/5.8.6/darwin-thread-multi-2level/CORE -lperl -ldl -lm -lc macky-lan:~ krause$ maybe i should mention that no sql-modules (sqlcounter, mysql, postgresql, oracle, unixODBC) were build due to missing libraries (maybe i can test it at least with mysql next time ...) so, what else is there to test? ;-) regards markus > > -- > Nicolas Baradakis > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html > -- Markus Krause email: krause(a)biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

3 2