September 2006 - Freeradius-Devel - lists.freeradius.org

Re: [Bug 345] rlm_syslog.c (syslog support for auth and accounting logging)
by Alan DeKok 21 Sep '06

21 Sep '06

> What is holding this up from going into CVS head? I took a quick look at it, and was more than a little horrified at what it did. I looked into fixing it, but didn't get much of anywhere. That was a few months ago, so I don't recall exactly what was so bad. But any syslog module could really be a copy of rlm_linelog, with the messages going to syslog, and a few extra config options to control facility and level. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog

1 0

Automatic report from sources (radiusd) between 20.09.2006 - 21.09.2006 GMT
by Automatic cvs log generator 21 Sep '06

21 Sep '06

CVS log entries from 20.09.2006 (Wed) 08:00:01 - 21.09.2006 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/doc/rlm_sqlippool; Revisions: 1.3 ===================================================== Log entries ===================================================== Description: Some additional docs Modified files: File: radiusd/doc/rlm_sqlippool; Revision: 1.3; Date: 2006/09/20 22:33:40; Author: pnixon; Lines: (+22 -10) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/rlm_sqlippool Revisions: 1.3 Authors: pnixon (+22 -10) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 19.09.2006 - 20.09.2006 GMT
by Automatic cvs log generator 20 Sep '06

20 Sep '06

CVS log entries from 19.09.2006 (Tue) 08:00:01 - 20.09.2006 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: mgriego File: radiusd/src/main/mainconfig.c; Revisions: 1.95 Author: pnixon File: radiusd/raddb/Makefile; Revisions: 1.14 ===================================================== Log entries ===================================================== Description: add sqlippool.conf Modified files: File: radiusd/raddb/Makefile; Revision: 1.14; Date: 2006/09/19 17:54:36; Author: pnixon; Lines: (+2 -2) ------------------------------- Description: If we're using syslog, we have to parse the log {} section of the config before trying to reference it for the syslog_facility. In addition, check to make sure syslog_facility isn't NULL before using it to compare to avoid a crash condition. Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.95; Date: 2006/09/20 03:09:36; Author: mgriego; Lines: (+17 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/Makefile Revisions: 1.14 Authors: pnixon (+2 -2) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.95 Authors: mgriego (+17 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 18.09.2006 - 19.09.2006 GMT
by Automatic cvs log generator 19 Sep '06

19 Sep '06

CVS log entries from 18.09.2006 (Mon) 08:00:01 - 19.09.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/rfc/Makefile; Revisions: 1.10 File: radiusd/src/lib/radius.c; Revisions: 1.189 File: radiusd/doc/rfc/per-rfc.pl; Revisions: 1.1 File: radiusd/doc/rfc/genref.pl; Revisions: 1.2 File: radiusd/doc/rfc/attributes.html; Revisions: 1.2 File: radiusd/doc/rfc/update.sh; Revisions: 1.1 File: radiusd/doc/rfc/rewrite.pl; Revisions: 1.2 Author: pnixon File: radiusd/doc/examples/postgresql.sql; Revisions: 1.6 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.c; Revisions: 1.45 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.h; Revisions: 1.9 ===================================================== Combined list of identical log entries ===================================================== Description: Update the list of RFC's we handle, and update the creation scripts to work a little better Modified files: File: radiusd/doc/rfc/Makefile; Revision: 1.10; Date: 2006/09/18 17:43:47; Author: aland; Lines: (+9 -3) File: radiusd/doc/rfc/attributes.html; Revision: 1.2; Date: 2006/09/18 17:43:47; Author: aland; Lines: (+32 -41) File: radiusd/doc/rfc/genref.pl; Revision: 1.2; Date: 2006/09/18 17:43:47; Author: aland; Lines: (+8 -1) File: radiusd/doc/rfc/per-rfc.pl; Revision: 1.1; Date: 2006/09/18 17:43:47; Author: aland; File: radiusd/doc/rfc/rewrite.pl; Revision: 1.2; Date: 2006/09/18 17:43:47; Author: aland; Lines: (+6 -2) File: radiusd/doc/rfc/update.sh; Revision: 1.1; Date: 2006/09/18 17:43:48; Author: aland; ------------------------------- Description: Update to check the error codes properly so we only reconnect on errors that actually require a reconnect. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.c; Revision: 1.45; Date: 2006/09/18 10:30:46; Author: pnixon; Lines: (+114 -87) File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.h; Revision: 1.9; Date: 2006/09/18 10:30:46; Author: pnixon; Lines: (+237 -38) ===================================================== Log entries ===================================================== Description: Add radippool Modified files: File: radiusd/doc/examples/postgresql.sql; Revision: 1.6; Date: 2006/09/18 10:28:49; Author: pnixon; Lines: (+17 -1) ------------------------------- Description: Calculate reply digest for Disconnect && CoA packets, too Modified files: File: radiusd/src/lib/radius.c; Revision: 1.189; Date: 2006/09/18 17:47:10; Author: aland; Lines: (+6 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/examples/postgresql.sql Revisions: 1.6 Authors: pnixon (+17 -1) ------------------------------- File: radiusd/doc/rfc/Makefile Revisions: 1.10 Authors: aland (+9 -3) ------------------------------- File: radiusd/doc/rfc/attributes.html Revisions: 1.2 Authors: aland (+32 -41) ------------------------------- File: radiusd/doc/rfc/genref.pl Revisions: 1.2 Authors: aland (+8 -1) ------------------------------- File: radiusd/doc/rfc/per-rfc.pl Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/doc/rfc/rewrite.pl Revisions: 1.2 Authors: aland (+6 -2) ------------------------------- File: radiusd/doc/rfc/update.sh Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.189 Authors: aland (+6 -2) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.c Revisions: 1.45 Authors: pnixon (+114 -87) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.h Revisions: 1.9 Authors: pnixon (+237 -38) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

RE: rfc4590
by Alexander Schrab 18 Sep '06

18 Sep '06

I think I have a working version. But I can't test it with the old version of digest (I had a test program, but it expired). How do you usually test freeradius? /Alex > -----Original Message----- > From: > freeradius-devel-bounces+alexander.schrab=axis.com(a)lists.freer > adius.org > [mailto:freeradius-devel-bounces+alexander.schrab=axis.com@lis > ts.freeradius.org] On Behalf Of Alan DeKok > Sent: den 15 september 2006 16:34 > To: FreeRadius developers mailing list > Subject: Re: rfc4590 > > > "Alexander Schrab" <Alexander.Schrab(a)axis.com> wrote: > > Well, the thing is that my patch only replaces the > attributes from the > > draft version. So it's an either or situation. It seems > like the draft > > version has some momentum already, but the rfc should really be the > > way to go (no strange subattributes and such). > > There's no harm in having both. > > > It's more of a political decision, should freeradius > suppotr only the > > rfc, only the draft or both? Maybe you can point me in the > direction > > of the people/person who made the digest module? > > That was me. > > I haven't looked at RFC 4590, but if the old digest > attributes can be modified to look like the new ones, that > would appear to be a solution. i.e. > > authorize: if old-style, re-format, and make check items as old > authenticate: do new-style. If check item is marked as old, > send response in old format. > > Alan DeKok. > > -- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html >

2 1

radclient (CVS HEAD) segfault from exec
by Peter Nixon 18 Sep '06

18 Sep '06

Hi Guys I have a program called radsqlkill.pl which I am calling from exec like the following: exec radsqlkill { wait = no program = "radsqlkill.pl %{Calling-Station-Id}" input_pairs = request shell_escape = yes output = none } I have it defined in "instantiate" and "authorize" The idea being that it searches for active sessions in the radacct table and kills them using a Disconnect-Request if the same user trys a new connection. This is different to similtaneous use as due to my network setup it is not possible for the same Calling-Station-Id to actually connect twice, which means that they have been disconnected without the NAS noticing if there is a new Auth request from the same Calling-Station-Id. When run from the command line everything works great, however when run from exec I get the following segfault in syslog: Sep 18 17:00:05 server radsqlkill.pl[12254]: Sending Disconnect-Request for 021211111111 to 1.1.1.1 Sep 18 17:00:05 server kernel: radclient[12255]: segfault at 0000000000000058 rip 00002aaaaaf0d869 rsp 00007fffffccbf90 error 4 Does anyone know why this would be a problem? -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

1 0

RE: rfc4590
by Alexander Schrab 18 Sep '06

18 Sep '06

Well, the thing is that my patch only replaces the attributes from the draft version. So it's an either or situation. It seems like the draft version has some momentum already, but the rfc should really be the way to go (no strange subattributes and such). It's more of a political decision, should freeradius suppotr only the rfc, only the draft or both? Maybe you can point me in the direction of the people/person who made the digest module? /Alex -----Original Message----- From: freeradius-devel-bounces+alexander.schrab=axis.com(a)lists.freeradius.org [mailto:freeradius-devel-bounces+alexander.schrab=axis.com@lists.freerad ius.org] On Behalf Of Alan DeKok Sent: den 14 september 2006 17:34 To: FreeRadius developers mailing list Subject: Re: rfc4590 "Alexander Schrab" <Alexander.Schrab(a)axis.com> wrote: > I have been looking at the rfc 4590 (http digest) and done some tests > with freeradius. As I userstand it implements a similar but > uncompatible draft. Is anyone looking into this issue? No. > I have done a quick-n-dirty patch against 1.1.3 to support the > attributes defined in rfc4590, but I havn't looked into it in more > detail. Sure, submit a patch on bugs.freeradius.org. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html

2 3

radclient in cvs head
by Peter Nixon 17 Sep '06

17 Sep '06

Does anyone know why radclient in cvs head gives the following error message after successfully disconnecting a user? Sending Disconnect-Request of id 214 to 1.1.1.1 port 1700 Acct-Session-Id = "11111" User-Name = "user" X-Ascend-Session-Svr-Key = "4235DAD8" NAS-IP-Address = 1.1.1.1 rad_recv: Disconnect-ACK packet from host 1.1.1.1 port 1700, id=214, length=20 rad_verify: Received Unknown packet code 41from client 1.1.1.1 port 1700: Cannot validate signature The stable version does not give this error message: rad_verify: Received Unknown packet code 41from client 1.1.1.1 port 1700: Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 1

Automatic report from sources (radiusd) between 15.09.2006 - 16.09.2006 GMT
by Automatic cvs log generator 16 Sep '06

16 Sep '06

CVS log entries from 15.09.2006 (Fri) 08:00:01 - 16.09.2006 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/suse/rcradius-relayd; Revisions: 1.2 ===================================================== Log entries ===================================================== Description: Fix service name Modified files: File: radiusd/suse/rcradius-relayd; Revision: 1.2; Date: 2006/09/15 15:05:10; Author: pnixon; Lines: (+1 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/suse/rcradius-relayd Revisions: 1.2 Authors: pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 13.09.2006 - 14.09.2006 GMT
by Automatic cvs log generator 15 Sep '06

15 Sep '06

CVS log entries from 13.09.2006 (Wed) 08:00:00 - 14.09.2006 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/modules.c; Revisions: 1.109 Author: bjordanov File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.39 Author: pnixon File: radiusd/raddb/sqlippool.conf; Revisions: 1.3 ===================================================== Log entries ===================================================== Description: Major cleanup of the queries (To match what we are running in production) Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.3; Date: 2006/09/13 12:49:37; Author: pnixon; Lines: (+40 -26) ------------------------------- Description: When walking over a section, handle the case of CONF_DATA existing Modified files: File: radiusd/src/main/modules.c; Revision: 1.109; Date: 2006/09/13 18:55:23; Author: aland; Lines: (+5 -3) ------------------------------- Description: Fixed bug id #390 Removed pairfree and Updated to use pairmove. Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.39; Date: 2006/09/13 08:36:53; Author: bjordanov; Lines: (+7 -12) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/sqlippool.conf Revisions: 1.3 Authors: pnixon (+40 -26) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.109 Authors: aland (+5 -3) ------------------------------- File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.39 Authors: bjordanov (+7 -12) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

3 2