August 2006 - Freeradius-Devel - lists.freeradius.org

Re: Last set of changes for 1.1.3
by Sandworm 22 Aug '06

22 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 16 Jul 2006 03:49:44 +1000 Nicolas Baradakis <nbk(a)sitadelle.com> wrote: > >I've added an option --with-docdir to ./configure, so we can chose >the >directory where the documentation files will be installed. It >should be >useful to build a RPM package. > >I'm not using a redhat-based distribution, and I can't be sure >this >solves all the problems. Please get version 1.1.3 from CVS and try >to run rpmbuild. Sorry, it took a while for me to get to this. Got version 1.1.3 from CVS today and ran rpmbuild on Redhat Enterprise Linux 4 (Update 3). Builds OK - very good, and the default setting Nicolas inserted into the spec file for "with-docdir" is fine. One residual issue though (a fix for which I had as part of the patch I had originally submitted to this list) is that /usr/share/doc/freeradius-1.1.3/ gets only "ChangeLog COPYRIGHT INSTALL README todo/". Unless the remining required files in the doc directory are inserted into the redhat spec file as I had done in the patch, those doc files will not (and do not) get copied in. A better fix would be to rename the files that should be copied into the RPM (or into an installation on any other distro) to have a standard prefix (say "doc-" for want of anything better) from the doc directory. In that case, having the line "%doc doc/doc* todo/ COPYRIGHT INSTALL" in the spec file in the %files section will install everything required. What do you think? Regards SW -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTqpkcACgkQmw4BJyaatJ089QCglLKtEH15ltYXLJdgumjyB6v0JIcA oJlIJpVh8eYuKW3YIZu+vKTuON8h =SkZw -----END PGP SIGNATURE-----

2 1

Unexpected Accounting proxy behaviour
by Peter Nixon 22 Aug '06

22 Aug '06

I have the following in "acct_users": peter Called-Station-Id == "myrealm", Proxy-To-Realm := myproxy Now, with this configuration, "myproxy" receives all of the accounting packets (Start, Interim-Update and Stop) as expected, HOWEVER on the radius server doing the proxying in sqltrace.log (and in the SQL table) I only see the "Start" record. For non proxied packets I happily have the 3 different typs of SQL queries show up in sqltrace.log Can anyone tell me what is different about Start records that would cause this behaviour? I am running the 1.1.x branch cvs snapshot from 2006-08-08 on this server. Thanks in Advance -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 2

Re: Last set of changes for 1.1.3
by Sandworm 22 Aug '06

22 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 22 Aug 2006 16:38:00 +1000 Sandworm <sandworm(a)mepd.hush.com> wrote: > >>A better fix would be to rename the files that should be copied >into the RPM (or into an installation on any other distro) to have >a standard prefix (say "doc-" for want of anything better) from >the >doc directory. In that case, having the line "%doc doc/doc* todo/ >COPYRIGHT INSTALL" in the spec file in the %files section will >install everything required. Further to what I just posted - Or what has been done in the Suse SPEC file can be done for the Redhat SPEC file - remove whatever is not required from the doc/ directory (such as doc/00-OLD), and then "%doc doc/* todo/ COPYRIGHT INSTALL" will do the trick. SW -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTqqhMACgkQmw4BJyaatJ16egCfUzcQ9xACHRxg2Slq6NvcrOAS0hMA n3wLtdtZvaDg0sWnE8FUxdbDJxdw =LBC1 -----END PGP SIGNATURE-----

2 1

Automatic report from sources (radiusd) between 21.08.2006 - 22.08.2006 GMT
by Automatic cvs log generator 22 Aug '06

22 Aug '06

CVS log entries from 21.08.2006 (Mon) 08:00:02 - 22.08.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/main/Makefile.in; Revisions: 1.27.2.5.2.4 File: radiusd/src/include/Makefile; Revisions: 1.5 Author: pnixon File: radiusd/suse/freeradius.spec; Revisions: 1.11.2.6.2.8 ===================================================== Log entries ===================================================== Description: Install new files hash.h and packet.h too and remove "freeradius-devel" from the #include directives in the copy to be found in the destination directory. An external program could now use the FreeRADIUS libradius with a #include <freeradius/libradius.h> Modified files: File: radiusd/src/include/Makefile; Revision: 1.5; Date: 2006/08/21 09:47:48; Author: nbk; Lines: (+4 -1) ------------------------------- Description: Don't link mainconfig.lo to radrelay, it's not necessary. Thanks to Markus Krause <krause(a)biochem.mpg.de> Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.27.2.5.2.4; Date: 2006/08/21 12:47:46; Author: nbk; Lines: (+3 -3) ------------------------------- Description: Major update the the spec file to with BuildRequires for various linux versions Modified files: File: radiusd/suse/freeradius.spec; Revision: 1.11.2.6.2.8; Date: 2006/08/21 13:12:21; Author: pnixon; Lines: (+108 -40) ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/Makefile Revisions: 1.5 Authors: nbk (+4 -1) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.27.2.5.2.4 Authors: nbk (+3 -3) ------------------------------- File: radiusd/suse/freeradius.spec Revisions: 1.11.2.6.2.8 Authors: pnixon (+108 -40) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: building v.1.1.3(cvs) on different systems
by Markus Krause 21 Aug '06

21 Aug '06

Zitat von Nicolas Baradakis <nbk(a)sitadelle.com>: > Markus Krause wrote: > > > i just tested the building of todays cvs checkout of branch_1_1, here is > > what happend (maybe you want to know ;-)): > > Thanks for the report, your tests are very useful. i am glad to be able to contribute at least this way a bit to this great project! > [...] > > > * mac os x 10.4.7: > > running ./configure and then make leads to: > > > > /usr/bin/ld: multiple definitions of symbol _mainconfig > > .libs/radrelay.o definition of _mainconfig in section (__DATA,__common) > > .libs/mainconfig.o definition of _mainconfig in section (__DATA,__common) > > It seems radrelay doesn't need to link with mainconfig.o anymore. Please > do a "cvs update" and try again with no configure option. ok, i did a "cvs update", then "./configure" and "make" there were no errors and after "make install" i had a running freeradius server ! > > then i tried "./configure --disable-shared" (i remembered something ...) > > and got until: > > > > /usr/bin/ld: Undefined symbols: > > _boot_DynaLoader > > It looks like a problem with rlm_perl. This time please try to build > with "./configure --disable-shared --without-rlm-perl". ok (although the solution above works, but may be it is of some use): make clean ./configure --disable-shared --without-rlm-perl make the build was successful. > Please also post the output of the command "perl -MExtUtils::Embed -e ldopts". here you are: macky-lan:~ krause$ perl -MExtUtils::Embed -e ldopts -L/usr/local/lib /System/Library/Perl/5.8.6/darwin-thread-multi-2level/auto/DynaLoader/DynaLoader.a -L/System/Library/Perl/5.8.6/darwin-thread-multi-2level/CORE -lperl -ldl -lm -lc macky-lan:~ krause$ maybe i should mention that no sql-modules (sqlcounter, mysql, postgresql, oracle, unixODBC) were build due to missing libraries (maybe i can test it at least with mysql next time ...) so, what else is there to test? ;-) regards markus > > -- > Nicolas Baradakis > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html > -- Markus Krause email: krause(a)biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

3 2

building v.1.1.3(cvs) on different systems
by Markus Krause 21 Aug '06

21 Aug '06

hi all, i just tested the building of todays cvs checkout of branch_1_1, here is what happend (maybe you want to know ;-)): * debian sarge 3.1a: building worked without problems, except some warnings at the end from "dh_shlibdeps -s: dpkg-shlibdeps: warning: could not find path for libradius-1.1.3.so" (and others), but the installed version works. * suse 10.1: "rpmbuild -bb" said it needs "libapr0", which i could not find in suse 10.1. i changed it in freeradius.spec to "libapr1" instead, which seems to work, at least the build finished without problems and the installed programms seems to run without errors. * mac os x 10.4.7: running ./configure and then make leads to: radrelay.c: In function 'loop': radrelay.c:679: warning: comparison between signed and unsigned radrelay.c: In function 'main': radrelay.c:875: warning: passing argument 1 of 'free' discards qualifiers from pointer target type radrelay.c:930: warning: comparison between signed and unsigned gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DDARWIN -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I../include -DHOSTINFO=\"powerpc-apple-darwin8.7.0\" -DRADIUSD_VERSION=\"1.1.3\" -c radrelay.c -o radrelay.o >/dev/null 2>&1 /Users/krause/downloads/freeradius/radiusd/libtool --mode=link gcc -o radrelay radrelay.lo mainconfig.lo util.lo nas.lo client.lo log.lo conffile.lo files.lo xlat.lo -lresolv -lpthread ../lib/libradius.la gcc -o .libs/radrelay .libs/radrelay.o .libs/mainconfig.o .libs/util.o .libs/nas.o .libs/client.o .libs/log.o .libs/conffile.o .libs/files.o .libs/xlat.o -lresolv -lpthread ../lib/.libs/libradius.dylib /usr/bin/ld: multiple definitions of symbol _mainconfig .libs/radrelay.o definition of _mainconfig in section (__DATA,__common) .libs/mainconfig.o definition of _mainconfig in section (__DATA,__common) collect2: ld returned 1 exit status make[4]: *** [radrelay] Error 1 make[3]: *** [common] Error 2 make[2]: *** [all] Error 2 make[1]: *** [common] Error 2 make: *** [all] Error 2 then i tried "./configure --disable-shared" (i remembered something ...) and got until: gcc .libs/radiusdS.o -o radiusd acct.o auth.o client.o conffile.o exec.o files.o log.o mainconfig.o modules.o modcall.o nas.o proxy.o radiusd.o radius_snmp.o request_list.o session.o smux.o threads.o util.o valuepair.o version.o timestr.o xlat.o ../modules/rlm_acct_unique/.libs/rlm_acct_unique.a ../modules/rlm_always/.libs/rlm_always.a ../modules/rlm_attr_filter/.libs/rlm_attr_filter.a ../modules/rlm_attr_rewrite/.libs/rlm_attr_rewrite.a ../modules/rlm_chap/.libs/rlm_chap.a ../modules/rlm_dbm/.libs/rlm_dbm.a ../modules/rlm_detail/.libs/rlm_detail.a ../modules/rlm_digest/.libs/rlm_digest.a ../modules/rlm_eap/.libs/rlm_eap.a ../modules/rlm_exec/.libs/rlm_exec.a ../modules/rlm_expr/.libs/rlm_expr.a ../modules/rlm_fastusers/.libs/rlm_fastusers.a ../modules/rlm_files/.libs/rlm_files.a ../modules/rlm_krb5/.libs/rlm_krb5.a -lkrb5 -lcom_err ../modules/rlm_ldap/.libs/rlm_ldap.a -lldap_r ../modules/rlm_mschap/.libs/rlm_mschap.a ../modules/rlm_ns_mta_md5/.libs/rlm_ns_mta_md5.a ../modules/rlm_otp/.libs/rlm_otp.a ../modules/rlm_pam/.libs/rlm_pam.a -lpam ../modules/rlm_pap/.libs/rlm_pap.a ../modules/rlm_passwd/.libs/rlm_passwd.a ../modules/rlm_perl/.libs/rlm_perl.a -L/usr/local/lib -L/System/Library/Perl/5.8.6/darwin-thread-multi-2level/CORE -lperl -lm -lc ../modules/rlm_preprocess/.libs/rlm_preprocess.a ../modules/rlm_radutmp/.libs/rlm_radutmp.a ../modules/rlm_realm/.libs/rlm_realm.a ../modules/rlm_sql/.libs/rlm_sql.a ../modules/rlm_sql_log/.libs/rlm_sql_log.a ../modules/rlm_sqlcounter/.libs/rlm_sqlcounter.a ../modules/rlm_unix/.libs/rlm_unix.a ../modules/rlm_checkval/.libs/rlm_checkval.a ../modules/rlm_eap/types/rlm_eap_md5/.libs/rlm_eap_md5.a ../modules/rlm_eap/types/rlm_eap_leap/.libs/rlm_eap_leap.a ../modules/rlm_eap/types/rlm_eap_tls/.libs/rlm_eap_tls.a ../modules/rlm_eap/types/rlm_eap_ttls/.libs/rlm_eap_ttls.a ../modules/rlm_eap/types/rlm_eap_sim/.libs/rlm_eap_sim.a ../modules/rlm_eap/types/rlm_eap_peap/.libs/rlm_eap_peap.a /Users/krause/downloads/freeradius/radiusd/src/modules/rlm_eap/libeap/.libs/libeap.a ../modules/rlm_eap/types/rlm_eap_mschapv2/.libs/rlm_eap_mschapv2.a ../modules/rlm_eap/types/rlm_eap_gtc/.libs/rlm_eap_gtc.a ../modules/rlm_sql/drivers/rlm_sql_iodbc/.libs/rlm_sql_iodbc.a -L/usr/lib -liodbc ../modules/rlm_eap/libeap/.libs/libeap.a /Users/krause/downloads/freeradius/radiusd/src/lib/.libs/libradius.a -lresolv -lpthread -lssl -lcrypto ../lib/.libs/libradius.a /usr/lib/libltdl.3.1.0.dylib -ldl /usr/bin/ld: Undefined symbols: _boot_DynaLoader collect2: ld returned 1 exit status rm -f .libs/radiusdS.o make[4]: *** [radiusd] Error 1 make[3]: *** [common] Error 2 make[2]: *** [all] Error 2 make[1]: *** [common] Error 2 make: *** [all] Error 2 as i am quite new to mac os x programming i do not know how to solve this ... any hints? regards markus -- Markus Krause email: krause(a)biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

3 8

Eap-Tls Problem
by Matteo Lazzarini 21 Aug '06

21 Aug '06

Hello I'm a new user, and i'm trying to set an Eap-Tls authentication using freeradius 1.1.2. My system is debian stable. I installed freeradius 1.1.2 (./confidure, make ,make install) and libssl-dev (apt-get install libssl-dev) like here: http://web.archive.org/web/20031206113912/http://www.impossiblereflex.com/8… http://www.alphacore.net/spip/article.php3?id_article=33 When I turn on freeradius I can see this: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/eap.conf Config: including file: /etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = yes main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = yes main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/etc/1x/jagger.pem" tls: certificate_file = "/etc/1x/jagger.pem" tls: CA_file = "/etc/1x/root.pem" tls: private_key_password = "whatever" tls: dh_file = "/etc/1x/dh" tls: random_file = "/etc/1x/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap: Loaded and initialized type tls peap: default_eap_type = "mschapv2" peap: copy_request_to_tunnel = no peap: use_tunneled_reply = no peap: proxy_tunneled_request_as_eap = yes rlm_eap: Loaded and initialized type peap mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (auth_log) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. After I made the certificate and installed in the client I tried to request an authentication but the output show me an error: rad_recv: Access-Request packet from host 192.168.1.5:1217, id=17, length=139 User-Name = "marcello" NAS-IP-Address = 0.0.0.0 NAS-Port = 0 Called-Station-Id = "00-40-05-30-C5-86" Calling-Station-Id = "00-0C-F1-15-17-59" NAS-Identifier = "DLink-900AP+" Framed-MTU = 1380 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020d000d016d617263656c6c6f Message-Authenticator = 0x5cf6d0c113ea537193f632be5324ddac Processing the authorize section of radiusd.conf modcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821 modcall[authorize]: module "auth_log" returns ok for request 8 rlm_eap: EAP packet type response id 13 length 13 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 8 users: Matched entry DEFAULT at line 152 users: Matched entry marcello at line 219 modcall[authorize]: module "files" returns ok for request 8 modcall: leaving group authorize (returns updated) for request 8 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 8 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 8 modcall: leaving group authenticate (returns handled) for request 8 Sending Access-Challenge of id 17 to 192.168.1.5 port 1217 EAP-Message = 0x010e00060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf07c05d2e094204483f4809fce1d0c28 Finished request 8 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.5:1217, id=18, length=224 User-Name = "marcello" NAS-IP-Address = 0.0.0.0 NAS-Port = 0 Called-Station-Id = "00-40-05-30-C5-86" Calling-Station-Id = "00-0C-F1-15-17-59" NAS-Identifier = "DLink-900AP+" Framed-MTU = 1380 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020e00500d800000004616030100410100003d030144e9b43485e72b29db6f1029820e8626f3358dc31aacc52a129ce61689ebe58f00001600040005000a000900640062000300060013001200630100 State = 0xf07c05d2e094204483f4809fce1d0c28 Message-Authenticator = 0x975a5fb5db9745857a408bd7f840d26b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 9 modcall[authorize]: module "preprocess" returns ok for request 9 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821 modcall[authorize]: module "auth_log" returns ok for request 9 rlm_eap: EAP packet type response id 14 length 80 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 9 users: Matched entry DEFAULT at line 152 users: Matched entry marcello at line 219 modcall[authorize]: module "files" returns ok for request 9 modcall: leaving group authorize (returns updated) for request 9 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 9 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 063f], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 009a], CertificateRequest TLS_accept: SSLv3 write certificate request A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 9 modcall: leaving group authenticate (returns handled) for request 9 Sending Access-Challenge of id 18 to 192.168.1.5 port 1217 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x068ea99f5b2f42aec356b15d82d4cf4d925dc611c0a4037aec9c5743625600038530820381308202eaa003020102020900ede70675d53a5467300d06092a864886f70d0101040500308188310b3009060355040613024954310e300c060355040813054954414c593110300e0603550407130742657267616d6f31123010060355040a130947727570706f696d693110300e060355040b1307494d492073726c3111300f060355040313084341726164697573311e301c06092a864886f70d010901160f63614067727570706f696d692e6974301e170d3036303832313130353035345a170d3036303932303130353035345a308188310b3009060355 EAP-Message = 0x040613024954310e300c060355040813054954414c59 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8bfc44c788f3b51de96ef0e08569c6e5 Finished request 9 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 8 ID 17 with timestamp 44e9b492 Cleaning up request 9 ID 18 with timestamp 44e9b492 Nothing to do. Sleeping until we see a request. Can Somebody help me? Thanks Matteo

1 0

EAP-AKA support
by bphaneuf＠reefpoint.com 21 Aug '06

21 Aug '06

I have a need for FreeRadius to support EAP-AKA and did not see it available, so I copied/extended the FreeRadius EAP-SIM module to support it. I noticed a number of requests for it in the past so I would like to contribute my modification/extensions to freeradius.org, My implementation relies on some EAP-SIM module infrastructure such as the EAP-SIM header file as well as some EAP-SIM routines. It also relied on a number of EAP-SIM attributes defined in dictionary.freeradius.internal. FreeRadius starts up and runs with or without the EAP-SIM module loaded. Is this a suitable approach or should it be completely stand-alone? What is the procedure to actually submit my extensions for consideration?

2 1

CVS build fails on rlm_policy
by A.L.M.Buxey＠lboro.ac.uk 21 Aug '06

21 Aug '06

hi, quick note : building the latest CVS head (aka 2.0.0-pre0) fails at the rlm_policy building stage - the compile_modgroup is fed too few arguments it claims.. parse.c: In function 'parse_module': parse.c:1084: warning: passing argument 1 of 'compile_modgroup' makes pointer from integer without a cast parse.c:1084: warning: passing argument 2 of 'compile_modgroup' makes integer from pointer without a cast parse.c:1084: warning: passing argument 3 of 'compile_modgroup' from incompatible pointer type parse.c:1084: error: too few arguments to function 'compile_modgroup' make: *** [parse.lo] Error 1 alan

2 1

Automatic report from sources (radiusd) between 18.08.2006 - 19.08.2006 GMT
by Automatic cvs log generator 19 Aug '06

19 Aug '06

CVS log entries from 18.08.2006 (Fri) 08:00:00 - 19.08.2006 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.26 File: radiusd/raddb/sqlippool.conf; Revisions: 1.2 Author: nbk File: radiusd/debian/freeradius.postinst; Revisions: 1.9, 1.5.2.2.2.2 Author: pnixon File: radiusd/doc/examples/postgresql.sql; Revisions: 1.1.2.6 File: radiusd/debian/freeradius.init; Revisions: 1.1.2.3.2.2 File: radiusd/suse/rcradiusd; Revisions: 1.2.6.3, 1.2.6.2 File: radiusd/raddb/postgresql.conf; Revisions: 1.16.2.2.2.3 ===================================================== Combined list of identical log entries ===================================================== Description: The patch in the downstream Debian package to run radclient with a non-privileged user removes the permissions again on upgrade. Instead, we always leave the file /etc/freeradius/dictionary with the default permissions. Modified files: File: radiusd/debian/freeradius.postinst; Revision: 1.9; Date: 2006/08/18 11:57:53; Author: nbk; Lines: (+7 -7) File: radiusd/debian/freeradius.postinst; Revision: 1.5.2.2.2.2; Date: 2006/08/18 11:58:04; Author: nbk; Lines: (+7 -7) ===================================================== Log entries ===================================================== Description: Add LSB compatible init info Modified files: File: radiusd/debian/freeradius.init; Revision: 1.1.2.3.2.2; Date: 2006/08/18 13:23:57; Author: pnixon; Lines: (+8 -0) ------------------------------- Description: Updated with latest changes Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.26; Date: 2006/08/18 18:47:07; Author: aland; Lines: (+6 -2) ------------------------------- Description: Add XAscendSessionSvrKey to allow Packet of Disconnect Modified files: File: radiusd/doc/examples/postgresql.sql; Revision: 1.1.2.6; Date: 2006/08/18 10:22:36; Author: pnixon; Lines: (+3 -2) ------------------------------- Description: Add X-Ascend-Session-Svr-Key so Packet of Disconnect works Modified files: File: radiusd/raddb/postgresql.conf; Revision: 1.16.2.2.2.3; Date: 2006/08/18 10:50:30; Author: pnixon; Lines: (+7 -7) ------------------------------- Description: Pulled from branch_1_1 Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.2; Date: 2006/08/18 16:23:22; Author: aland; Lines: (+95 -0) ------------------------------- Description: added a couple of extra services that should start b4 radiusd Modified files: File: radiusd/suse/rcradiusd; Revision: 1.2.6.3; Date: 2006/08/18 13:27:50; Author: pnixon; Lines: (+1 -1) ------------------------------- Description: update to start AFTER db backends Modified files: File: radiusd/suse/rcradiusd; Revision: 1.2.6.2; Date: 2006/08/18 12:24:09; Author: pnixon; Lines: (+2 -0) ===================================================== Summary of modified files ===================================================== File: radiusd/debian/freeradius.init Revisions: 1.1.2.3.2.2 Authors: pnixon (+8 -0) ------------------------------- File: radiusd/debian/freeradius.postinst Revisions: 1.9, 1.5.2.2.2.2 Authors: nbk (+7 -7), nbk (+7 -7) ------------------------------- File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.26 Authors: aland (+6 -2) ------------------------------- File: radiusd/doc/examples/postgresql.sql Revisions: 1.1.2.6 Authors: pnixon (+3 -2) ------------------------------- File: radiusd/raddb/postgresql.conf Revisions: 1.16.2.2.2.3 Authors: pnixon (+7 -7) ------------------------------- File: radiusd/raddb/sqlippool.conf Revisions: 1.2 Authors: aland (+95 -0) ------------------------------- File: radiusd/suse/rcradiusd Revisions: 1.2.6.3, 1.2.6.2 Authors: pnixon (+1 -1), pnixon (+2 -0) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0