September 2006 - Freeradius-Devel - lists.freeradius.org

SQL usergroup table
by Peter Nixon 17 Oct '06

17 Oct '06

Is there any reason why the "usergroup" table is not calle d"radgroup" by default to fit with the other radius tables? -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

4 6

utilities for totaling and booting
by D S 01 Oct '06

01 Oct '06

Hello from the wireless abyss [image: Smile] Some background, I build these jukeboxes, they play videos over a bars Audio Visual system by sending an sms to a cell phone built into to them. it also has ringtones and a system of registering bluetooth users. This is all paid for by a bill acceptor in the front of the machine. Inside your everyday PC, with a hacked apart and soldered keyboard, a jimmy rigged bill acceptor on the lpt port and a cell phone for getting sms's So, you either had to come to the machine and pick your songs, or there had to be printed out some menus or songlists, and I got all exicited cuz they write they are going to come out with WAP over bluetooth (personal area network protocol) and well I was going to have dynamic menus, so I started digging around, stuck myself apache on one of these boxes, got it to serv wap pages and the like. Then, the next thing I know, I think, hey, wouldn't it be cool if I took all this media and made it distributable over wireless. So, I went and ordered a WRT54GL and flashed the sucker. Got it all working, you can log in, it checks FreeRadius.net (windows) and there you are with this little hosted website on a windows box (all the rest of the stuff is C# and mono doesn't run it so I am stuck with the OS) In Ukraine, there are like 2 million credit card about, and , a DSL connection will literally cost you a months wages ever month, about $150 for 2gig of traffic 256k (the average months salary) so, I more or less have everything I need to set up these hotspots, let people use them for free for the local stuff (UAMALLOWED chilli.conf) and I want to let them put money in the bill acceptor to get real internet. I am assuming once I get the radius tables in mysql, I can simply insert new values there for authentication purposes so crediting joe user is easy enough. Now I spent about an hour reading all the posts here but never found a real solid kinda fix that I could squeeze under window (yeah, I know, it sucks, but try to make the killer jukebox in Linux [image: Smile] What I am missing, Or Radius is missing, is the way to kick off users that have download their fair share (like 1/2 their monthly salary) I am assuming that I need some other scripts to add up the various accounting statements that are showing up in the log and to add them to the user account and somewhere another script to kick them off the NAS. Since I am new to all of this ( I got my router the other day ) I am pretty happy I've made such progress, but no cookie for me cuz I will be broke the day I turn it on as every 16 year old will be logged on. The freeradius I am using doesn't include the dial up admin program mentioned either. BTW, I don't know how interesting these machines would be in the US, we have made 3 of them and they are interesting, I am collecting all the soft and configurations in one directory so I can redistribute what I've done so hopefully helping me will help a lots of people:-) Sorry for my bad English, thanking you much for your help and sorry if my post is considered offtopic, I understood if you are installing these servers, this is the list and I hope to have a lot of them installed as I will be using one radius server on each local machine. :-) Have a nice day

2 1

Problem "linking" external library to freeradius module
by kky 30 Sep '06

30 Sep '06

Hi, i need to use the libgcrypt (gnupg.org) witch i have installed in /usr/local/lib for my auth module, usually i just #include <gcrypt.h> and in my Makefile just append a few flags: " -I/usr/local/include -L/usr/local/lib -lgcrypt -L/usr/local/lib -lgpg-error " so i put this line in my makefile (witch I copied from another eap auth module! ): TARGET = rlm_eap_xxx SRCS = rlm_eap_xxx.c eap_xxx.c crypto_xxx.c RLM_CFLAGS = $(INCLTDL) -I../.. -I../../libeap \ -I/usr/local/include -I/usr/local/lib -I/usr/include \ -L/tmp/freeradius-$(VERS)/src/lib \ -L/usr/local/lib -lgcrypt -L/usr/local/lib -lgpg-error HEADERS = eap_xxx.h crypto_xxx.h ../../eap.h ../../rlm_eap.h RLM_INSTALL = RLM_DIR=../../ include ${RLM_DIR}../rules.mak $(LT_OBJS): $(HEADERS) i start freeradiusd -X and when my code calls a libgcrypt function it says : radiusd: symbol lookup error: /usr/local/lib/rlm_eap_xxx-1.1.3.so: undefined symbol: gcry_mpi_powm additionally in the libgrcrypt documentation is telling that if i'm using automake (witch i don't handle at all !!) i can use the defined Autoconf variables in my `Makefile.am' : AM_CPPFLAGS = $(LIBGCRYPT_CFLAGS) LDADD = $(LIBGCRYPT_LIBS) LIBGCRYPT_CFLAGS needed for compilation of the program to find the `gcrypt.h' header file, and LIBGCRYPT_LIBS needed to link the program to the Libgcrypt library. I've tried to put them in a few places but without results ! do you have an advice ?! THANK YOU !! kky

2 1

Automatic report from sources (radiusd) between 29.09.2006 - 30.09.2006 GMT
by Automatic cvs log generator 30 Sep '06

30 Sep '06

CVS log entries from 29.09.2006 (Fri) 08:00:01 - 30.09.2006 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: fcusack File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revisions: 1.31, 1.30 Author: pnixon File: radiusd/suse/rcradius-relayd; Revisions: 1.3 ===================================================== Log entries ===================================================== Description: another state->radstate fix Modified files: File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.31; Date: 2006/09/30 01:38:56; Author: fcusack; Lines: (+3 -3) ------------------------------- Description: s/bad state/bad radstate/ to be clear that it's not token state Modified files: File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.30; Date: 2006/09/30 01:36:54; Author: fcusack; Lines: (+7 -7) ------------------------------- Description: Rename to symlink to avoid problems with startproc Modified files: File: radiusd/suse/rcradius-relayd; Revision: 1.3; Date: 2006/09/29 16:12:11; Author: pnixon; Lines: (+1 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_otp/otp_rlm.c Revisions: 1.31, 1.30 Authors: fcusack (+3 -3), fcusack (+7 -7) ------------------------------- File: radiusd/suse/rcradius-relayd Revisions: 1.3 Authors: pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

[PATCH] template_user for pam_radius_auth.so
by Thaddeus Ternes 29 Sep '06

29 Sep '06

After much googling, I was unable to find a solution for Linux like BSD has for it's PAM-Radius module for specifying a system username to use upon a successful authentication. Included is my attempt at adding the "template_user" functionality from the BSD version of to pam_radius_auth. Here's what I've used in my /etc/pam.conf file: login auth required /lib/security/pam_radius_auth.so template_user=myname I haven't been able to do much testing with it yet (as I'm currently involved in other PAM integration efforts), but would definitely appreciate any feedback on this. I'm still rather new to Linux hacking, so all (positive) criticism is most welcomed. Thanks! -Thaddeus diff -Naur pam_radius-1.3.16/pam_radius_auth.c pam_radius-1.3.16-patched/pam_radius_auth.c --- pam_radius-1.3.16/pam_radius_auth.c 2003-02-27 18:01:07.000000000 +0000 +++ pam_radius-1.3.16-patched/pam_radius_auth.c 2006-09-28 19:16:42.000000000 +0000 @@ -67,7 +67,7 @@ /* internal data */ static CONST char *pam_module_name = "pam_radius_auth"; static char conf_file[BUFFER_SIZE]; /* configuration file */ - +static char template_user[BUFFER_SIZE]; /* we need to save these from open_session to close_session, since * when close_session will be called we won't be root anymore and * won't be able to access again the radius server configuration file @@ -137,7 +137,11 @@ } else if (!strcmp(*argv, "debug")) { ctrl |= PAM_DEBUG_ARG; conf->debug = 1; - + + } else if (!strncmp(*argv, "template_user=", 14)) { + ctrl |= PAM_TEMPLATE_USER; + strcpy(template_user, (*argv)+14); + } else { _pam_log(LOG_WARNING, "unrecognized option '%s'", *argv); } @@ -1223,6 +1227,8 @@ *pret = retval; pam_set_data( pamh, "rad_setcred_return", (void *) pret, _int_free ); } + if(retval == PAM_SUCCESS && (ctrl & PAM_TEMPLATE_USER)) + pam_set_item(pamh, PAM_USER, template_user); return retval; } diff -Naur pam_radius-1.3.16/pam_radius_auth.h pam_radius-1.3.16-patched/pam_radius_auth.h --- pam_radius-1.3.16/pam_radius_auth.h 2003-09-19 14:41:32.000000000 +0000 +++ pam_radius-1.3.16-patched/pam_radius_auth.h 2006-09-28 19:14:02.000000000 +0000 @@ -82,6 +82,7 @@ #define PAM_SKIP_PASSWD 2 #define PAM_USE_FIRST_PASS 4 #define PAM_TRY_FIRST_PASS 8 +#define PAM_TEMPLATE_USER 16 #define PAM_RETRY 0x30

2 1

rlm_policy compile error cvs 20060929
by Joe Maimon 29 Sep '06

29 Sep '06

/usr/bin/libtool --mode=compile gcc -Wall -g -O2 -I/home/joe/download/radius/debian9/freeradius-2.0.0/src -c parse.c gcc -Wall -g -O2 -I/home/joe/download/radius/debian9/freeradius-2.0.0/src -c parse.c -fPIC -DPIC -o .libs/parse.o parse.c: In function 'parse_module': parse.c:1174: warning: passing argument 1 of 'compile_modgroup' makes pointer from integer without a cast parse.c:1174: warning: passing argument 2 of 'compile_modgroup' makes integer from pointer without a cast parse.c:1174: warning: passing argument 3 of 'compile_modgroup' from incompatible pointer type parse.c:1174: error: too few arguments to function 'compile_modgroup' make[7]: *** [parse.lo] Error 1 make[7]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src/modules/rlm_policy' make[6]: *** [common] Error 2 make[6]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src/modules' make[5]: *** [all] Error 2 make[5]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src/modules' make[4]: *** [common] Error 2 make[4]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src' make[3]: *** [all] Error 2 make[3]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src' make[2]: *** [common] Error 2 make[2]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0' make[1]: *** [all] Error 2 make[1]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0' make: *** [stamp-build] Error 2 I am not familiar with this function, so I would appreciate a couple pointers on what went wrong. No other module seems to call this function.

2 1

Development Roadmap
by Peter Nixon 29 Sep '06

29 Sep '06

http://wiki.freeradius.org/Development_Roadmap I have created a page in the wiki for features that people would like to see in FreeRADIUS and bugs that people would like to see the end of. I hope we can put up a list of things we plan to have for 2.0 in the near future also. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

3 2

Automatic report from sources (radiusd) between 28.09.2006 - 29.09.2006 GMT
by Automatic cvs log generator 29 Sep '06

29 Sep '06

CVS log entries from 28.09.2006 (Thu) 08:00:01 - 29.09.2006 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/modules.c; Revisions: 1.110 File: radiusd/src/main/modcall.c; Revisions: 1.52 File: radiusd/share/dictionary.lucent; Revisions: 1.4 File: radiusd/share/dictionary.ascend; Revisions: 1.20 Author: pnixon File: radiusd/doc/RADIUS-SQL.schema; Revisions: 1.6 ===================================================== Combined list of identical log entries ===================================================== Description: Set component and module when processing a request, and unset them when done a component section. Modified files: File: radiusd/src/main/modcall.c; Revision: 1.52; Date: 2006/09/28 16:25:32; Author: aland; Lines: (+2 -3) File: radiusd/src/main/modules.c; Revision: 1.110; Date: 2006/09/28 16:25:32; Author: aland; Lines: (+15 -8) ------------------------------- Description: Added a few more 16-bit vsa's Added note that 16-bit Ascend VSA's are really Lucent ones Modified files: File: radiusd/share/dictionary.ascend; Revision: 1.20; Date: 2006/09/28 16:32:19; Author: aland; Lines: (+9 -8) File: radiusd/share/dictionary.lucent; Revision: 1.4; Date: 2006/09/28 16:32:20; Author: aland; Lines: (+3 -1) ===================================================== Log entries ===================================================== Description: Update paths to new doc/examples dir Modified files: File: radiusd/doc/RADIUS-SQL.schema; Revision: 1.6; Date: 2006/09/28 10:03:57; Author: pnixon; Lines: (+4 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/RADIUS-SQL.schema Revisions: 1.6 Authors: pnixon (+4 -4) ------------------------------- File: radiusd/share/dictionary.ascend Revisions: 1.20 Authors: aland (+9 -8) ------------------------------- File: radiusd/share/dictionary.lucent Revisions: 1.4 Authors: aland (+3 -1) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.52 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.110 Authors: aland (+15 -8) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 27.09.2006 - 28.09.2006 GMT
by Automatic cvs log generator 28 Sep '06

28 Sep '06

CVS log entries from 27.09.2006 (Wed) 08:00:00 - 28.09.2006 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/listen.c; Revisions: 1.49 Author: mgriego File: radiusd/src/main/request_list.c; Revisions: 1.79 ===================================================== Log entries ===================================================== Description: Call proxy_listener->send, not listener->send Modified files: File: radiusd/src/main/listen.c; Revision: 1.49; Date: 2006/09/27 17:03:38; Author: aland; Lines: (+2 -2) ------------------------------- Description: Fix a race condition when running in threaded mode. request->finished was not being checked for requests that are non-duplicatable (ie accounting requests). This was leading to a race condition where the list cleanup code might get to the request before the responder was done processing it, subsequently leading to an assertion failure on line 508. Modified files: File: radiusd/src/main/request_list.c; Revision: 1.79; Date: 2006/09/27 14:15:56; Author: mgriego; Lines: (+10 -10) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/listen.c Revisions: 1.49 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/request_list.c Revisions: 1.79 Authors: mgriego (+10 -10) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

sqlcounter patch
by Graham Beneke 27 Sep '06

27 Sep '06

Hi Dev Team This my first venture into OS development so please excuse my ignorance. I am not a rookie to coding in general though. I have recently been using the sqlcounter module on my freeradius implementation and it is very useful for my needs. I has one shortcoming however and that is the fact that the reply-item that it returns is hard coded in the module. I would like to provide a patch that would make the reply-item one of the options that can be set in the relevant radiusd.conf section. I have managed to get anon access to the CVS and i'm busy figuring my way through the code... What is the next step? -- Graham Beneke Apolix Internet Services E-Mail: graham(a)apolix.co.za <mailto:graham@apolix.co.za> Cell: 082-432-1873 <callto://+27824321873> Skype: grbeneke <callto://grbeneke> WEB: www.apolix.co.za <http://www.apolix.co.za/>

2 1