October 2007 - Freeradius-Devel - lists.freeradius.org

Please look at my nas_ident passthough patch.
by Matthew Schumacher 05 Nov '07

05 Nov '07

Developers, In my freeradius installation I make some decisions based on what the NAS identifies itself as in the nas-identifier attribute. One of these decisions is which accounting database to use. This has been causing problems for me since the session_zap function is called when we get two start messages in a row. The purpose of the function makes perfect sense: to end the old session so that multiple login detection works, but the problem is that the nas-identifier attribute isn't translated though to the stop message like the username or the nas-ip-Address so it gets logged to the wrong accounting database because there isn't a nas-identifier to match on. The solution is to pass the NAS-Identifier attribute though to the session_zap function and have it output to the accounting modules instead of simply leaving it null. I the attached patch to do this and it works, except my radius server has become less than stable. It crashes here and there, but I can't figure out why. I'm not much of a C programmer so I'm hoping that someone on the list can look at my patch and point out what I did wrong. I suspect it's a typing issue or something. Also, it would be great if the developers would consider this for a production version since passing though the NAS-Identifier won't break or affect anything currently running, but offers the flexibility of changing the Session-Type based on matching something in the NAS-Identifier. Thanks to any that can help, schu diff -ruN freeradius-1.1.7.orig/src/include/radiusd.h freeradius-1.1.7/src/include/radiusd.h --- freeradius-1.1.7.orig/src/include/radiusd.h 2007-06-12 01:31:45.000000000 -0800 +++ freeradius-1.1.7/src/include/radiusd.h 2007-09-20 16:06:57.000000000 -0800 @@ -295,7 +295,7 @@ int session_zap(REQUEST *request, uint32_t nasaddr, unsigned int port, const char *user, const char *sessionid, uint32_t cliaddr, - char proto); + char proto, const char *nas_ident); /* radiusd.c */ #ifndef _LIBRADIUS diff -ruN freeradius-1.1.7.orig/src/main/session.c freeradius-1.1.7/src/main/session.c --- freeradius-1.1.7.orig/src/main/session.c 2007-05-15 01:50:51.000000000 -0800 +++ freeradius-1.1.7/src/main/session.c 2007-09-20 16:08:45.000000000 -0800 @@ -46,7 +46,7 @@ /* End a session by faking a Stop packet to all accounting modules */ int session_zap(REQUEST *request, uint32_t nasaddr, unsigned int port, const char *user, - const char *sessionid, uint32_t cliaddr, char proto) + const char *sessionid, uint32_t cliaddr, char proto, const char *nas_ident) { REQUEST *stopreq; VALUE_PAIR *vp, *userpair; @@ -85,6 +85,7 @@ IPPAIR(PW_NAS_IP_ADDRESS, nasaddr); INTPAIR(PW_ACCT_DELAY_TIME, 0); STRINGPAIR(PW_USER_NAME, user); + STRINGPAIR(PW_NAS_IDENTIFIER, nas_ident); userpair = vp; INTPAIR(PW_NAS_PORT, port); STRINGPAIR(PW_ACCT_SESSION_ID, sessionid); diff -ruN freeradius-1.1.7.orig/src/modules/rlm_radutmp/rlm_radutmp.c freeradius-1.1.7/src/modules/rlm_radutmp/rlm_radutmp.c --- freeradius-1.1.7.orig/src/modules/rlm_radutmp/rlm_radutmp.c 2007-04-07 14:40:00.000000000 -0800 +++ freeradius-1.1.7/src/modules/rlm_radutmp/rlm_radutmp.c 2007-09-20 16:15:18.000000000 -0800 @@ -589,6 +589,7 @@ rlm_radutmp_t *inst = instance; char login[256]; char filename[1024]; + char *nas_ident = NULL; ssize_t read_size; /* @@ -664,6 +665,8 @@ ipno = vp->lvalue; if ((vp = pairfind(request->packet->vps, PW_CALLING_STATION_ID)) != NULL) call_num = vp->strvalue; + if ((vp = pairfind(request->packet->vps, PW_NAS_IDENTIFIER)) != NULL) + nas_ident = vp->strvalue; /* * lock the file while reading/writing. @@ -744,7 +747,7 @@ session_zap(request, u.nas_address, u.nas_port, login, session_id, u.framed_address, - u.proto); + u.proto, nas_ident); } } } diff -ruN freeradius-1.1.7.orig/src/modules/rlm_sql/rlm_sql.c freeradius-1.1.7/src/modules/rlm_sql/rlm_sql.c --- freeradius-1.1.7.orig/src/modules/rlm_sql/rlm_sql.c 2007-07-17 04:59:08.000000000 -0800 +++ freeradius-1.1.7/src/modules/rlm_sql/rlm_sql.c 2007-09-20 16:14:24.000000000 -0800 @@ -1131,6 +1131,7 @@ int ret; uint32_t nas_addr = 0; int nas_port = 0; + char *nas_ident = NULL; /* If simul_count_query is not defined, we don't do any checking */ if (inst->config->simul_count_query[0] == 0) { @@ -1206,6 +1207,8 @@ ipno = vp->lvalue; if ((vp = pairfind(request->packet->vps, PW_CALLING_STATION_ID)) != NULL) call_num = vp->strvalue; + if ((vp = pairfind(request->packet->vps, PW_NAS_IDENTIFIER)) != NULL) + nas_ident = vp->strvalue; while (rlm_sql_fetch_row(sqlsocket, inst) == 0) { @@ -1270,7 +1273,7 @@ session_zap(request, nas_addr,nas_port,row[2],row[1], - framed_addr, proto); + framed_addr, proto, nas_ident); } }

2 1

Testing EAP-TLS session resumption
by sujithsankar 01 Nov '07

01 Nov '07

Hi all, I am working on EAP-TLS client. The normal functionality testing was done by interoperating with FreeRADIUS. Now, I would like to test fast re-authentication feature of my EAP-TLS client. It is learnt that FreeRADIUS does not support this feature. Has anyone of you tried to test such a feature? Does anyone know about any patch for FreeRADIUS to support session resumption? Please throw some light on this. Thanks, -Sujith The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments contained in it. Contact your Administrator for further information.

2 2

Automatic report from sources (radiusd) between 29.10.2007 - 30.10.2007 GMT
by Automatic cvs log generator 30 Oct '07

30 Oct '07

CVS log entries from 29.10.2007 (Mon) 08:00:00 - 30.10.2007 (Tue) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/event.c; Revisions: 1.68 File: radiusd/src/main/session.c; Revisions: 1.42 File: radiusd/src/modules/rlm_sql/sql.c; Revisions: 1.94 File: radiusd/src/main/exec.c; Revisions: 1.62, 1.61 File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.176 ===================================================== Combined list of identical log entries ===================================================== Description: Remove unused header files Modified files: File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.176; Date: 2007/10/29 12:28:59; Author: aland; Lines: (+2 -4) File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.94; Date: 2007/10/29 12:29:00; Author: aland; Lines: (+2 -5) ------------------------------- Description: More checks for functions on unsupported platforms Modified files: File: radiusd/src/main/exec.c; Revision: 1.61; Date: 2007/10/29 09:32:18; Author: aland; Lines: (+100 -5) File: radiusd/src/main/session.c; Revision: 1.42; Date: 2007/10/29 09:32:18; Author: aland; Lines: (+11 -2) ===================================================== Log entries ===================================================== Description: Re-arrange code into common functions Modified files: File: radiusd/src/main/event.c; Revision: 1.68; Date: 2007/10/29 09:41:22; Author: aland; Lines: (+38 -31) ------------------------------- Description: Use better function Modified files: File: radiusd/src/main/exec.c; Revision: 1.62; Date: 2007/10/29 09:33:15; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/event.c Revisions: 1.68 Authors: aland (+38 -31) ------------------------------- File: radiusd/src/main/exec.c Revisions: 1.62, 1.61 Authors: aland (+3 -3), aland (+100 -5) ------------------------------- File: radiusd/src/main/session.c Revisions: 1.42 Authors: aland (+11 -2) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.176 Authors: aland (+2 -4) ------------------------------- File: radiusd/src/modules/rlm_sql/sql.c Revisions: 1.94 Authors: aland (+2 -5) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 28.10.2007 - 29.10.2007 GMT
by Automatic cvs log generator 29 Oct '07

29 Oct '07

CVS log entries from 28.10.2007 (Sun) 08:00:00 - 29.10.2007 (Mon) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/event.c; Revisions: 1.67 File: radiusd/src/main/threads.c; Revisions: 1.139 File: radiusd/src/main/radiusd.c; Revisions: 1.378 File: radiusd/src/include/missing.h; Revisions: 1.39 File: radiusd/src/main/listen.c; Revisions: 1.106 ===================================================== Combined list of identical log entries ===================================================== Description: Build on systems without pthread (or --without-threads) Modified files: File: radiusd/src/main/event.c; Revision: 1.67; Date: 2007/10/29 07:32:10; Author: aland; Lines: (+8 -6) File: radiusd/src/main/threads.c; Revision: 1.139; Date: 2007/10/29 07:32:10; Author: aland; Lines: (+8 -2) ===================================================== Log entries ===================================================== Description: lockf portability Modified files: File: radiusd/src/include/missing.h; Revision: 1.39; Date: 2007/10/29 02:50:07; Author: aland; Lines: (+13 -2) ------------------------------- Description: Wrap include with #ifdef's Modified files: File: radiusd/src/main/listen.c; Revision: 1.106; Date: 2007/10/29 03:01:28; Author: aland; Lines: (+4 -2) ------------------------------- Description: More #ifdef's for platforms that need them Modified files: File: radiusd/src/main/radiusd.c; Revision: 1.378; Date: 2007/10/29 07:20:21; Author: aland; Lines: (+18 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/missing.h Revisions: 1.39 Authors: aland (+13 -2) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.67 Authors: aland (+8 -6) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.106 Authors: aland (+4 -2) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.378 Authors: aland (+18 -3) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.139 Authors: aland (+8 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 24.10.2007 - 25.10.2007 GMT
by Automatic cvs log generator 25 Oct '07

25 Oct '07

CVS log entries from 24.10.2007 (Wed) 08:00:01 - 25.10.2007 (Thu) 08:00:03 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/threads.c; Revisions: 1.138 File: radiusd/configure.in; Revisions: 1.252 File: radiusd/configure; Revisions: 1.139 File: radiusd/src/include/autoconf.h.in; Revisions: 1.72 ===================================================== Combined list of identical log entries ===================================================== Description: Look for <openssl/evp.h>, for OpenSSL_add_all_algorithms() Modified files: File: radiusd/configure; Revision: 1.139; Date: 2007/10/24 11:00:23; Author: aland; Lines: (+3 -1) File: radiusd/configure.in; Revision: 1.252; Date: 2007/10/24 11:00:25; Author: aland; Lines: (+2 -1) File: radiusd/src/include/autoconf.h.in; Revision: 1.72; Date: 2007/10/24 11:00:26; Author: aland; Lines: (+3 -0) ===================================================== Log entries ===================================================== Description: Call OpenSSL_add_all_algorithms() We still need to call EVP_cleanup() on clean exit, but who's counting? Modified files: File: radiusd/src/main/threads.c; Revision: 1.138; Date: 2007/10/24 11:04:29; Author: aland; Lines: (+13 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/configure Revisions: 1.139 Authors: aland (+3 -1) ------------------------------- File: radiusd/configure.in Revisions: 1.252 Authors: aland (+2 -1) ------------------------------- File: radiusd/src/include/autoconf.h.in Revisions: 1.72 Authors: aland (+3 -0) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.138 Authors: aland (+13 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

What's left before 2.0, and what's not in CVS.
by Alan DeKok 24 Oct '07

24 Oct '07

What's left before 2.0 is released? There has been little feedback about the -pre releases (and -pre2 was unusable for some things I tried). What's not in CVS, and what I will commit shortly: * removal of HUP support. It doesn't work. * move almost all logic to time/fd-based event loop (like libevent, but simpler). This means radiusd.c becomes tiny: start.. while (do_events() == HUP) { // handle HUP } * framework for HUP support is in place. Maybe we can start adding HUP in 2.0.1, etc. * virtual servers for pools of home servers. e.g. a pool can point to a virtual server, just like clients or listeners. The pre-proxy and post-proxy methods for a request are run from that virtual server, rather than the ones in the "client" or "listener" sections. This means that auth/acct packets can be handled by different pre/post proxy methods, which is nice. * rename of "server_pool" to "home_server_pool", as there are too many references to "server" everywhere. * New xlat's: %{client:...} %{home_server:...}, and %{home_server_pool:...} The goal is to enable per-client/home server/whatever policies. Put "foo=bar" into a client, and you can do: if ("%{client:foo}" == "bar") { ... } This enables policies to be per-client, without adding more configuration files to the server. I think that's it. The only thing I'd *like* to add is HUP support. But realistically, there isn't time. And it's WAY past time to release 2.0. Thoughts? Alan DeKok.

6 8

Automatic report from sources (radiusd) between 23.10.2007 - 24.10.2007 GMT
by Automatic cvs log generator 24 Oct '07

24 Oct '07

CVS log entries from 23.10.2007 (Tue) 08:00:00 - 24.10.2007 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/event.c; Revisions: 1.66 File: radiusd/raddb/sites-available/copy-acct-to-home-server; Revisions: 1.2 File: radiusd/raddb/users; Revisions: 1.15, 1.10.6.2 ===================================================== Log entries ===================================================== Description: Corrected name Modified files: File: radiusd/raddb/sites-available/copy-acct-to-home-server; Revision: 1.2; Date: 2007/10/23 13:06:45; Author: aland; Lines: (+2 -2) ------------------------------- Description: Remove Auth-Type example Modified files: File: radiusd/raddb/users; Revision: 1.15; Date: 2007/10/23 13:41:23; Author: aland; Lines: (+2 -2) ------------------------------- Description: Remove all references to System authentication. It's confusing way too many people Modified files: File: radiusd/raddb/users; Revision: 1.10.6.2; Date: 2007/10/24 06:51:11; Author: aland; Lines: (+4 -11) ------------------------------- Description: Corrected typo Modified files: File: radiusd/src/main/event.c; Revision: 1.66; Date: 2007/10/24 07:29:12; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/sites-available/copy-acct-to-home-server Revisions: 1.2 Authors: aland (+2 -2) ------------------------------- File: radiusd/raddb/users Revisions: 1.15, 1.10.6.2 Authors: aland (+2 -2), aland (+4 -11) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.66 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

strange memory corruption(?) in FreeRADIUS/PERL ?
by A.L.M.Buxey＠lboro.ac.uk 23 Oct '07

23 Oct '07

hi, one of our FR servers (2.0.0pre2) dies in the early hours of sunday with an interesting log-file: Sun Oct 21 03:20:06 2007 : Error: rlm_perl: perl_embed:: module = /usr/local/bin/freeradius-vmps.pm , func = post_auth exit status= Can't locate auto/DBI/po st_auth.al in @INC (@INC contains: /usr/local/Roombase3 /usr/lib/perl5/5.8.5/i386-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib/perl5/site_perl/5.8.5/i38 6-linux-thread-multi /usr/lib/perl5/site_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/ 5.8.2/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/s ite_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/si te_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.4/i386-linux-thread-multi /us r/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-t hread-multi /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor _perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl .) at /usr/lib/per l5/vendor_perl/5.8.5/i386-linux-thread-multi/DBI.pm line 648 Sun Oct 21 03:20:06 2007 : Error: rlm_perl: perl_embed:: module = /usr/local/bin/freeradius-vmps.pm , func = post_auth exit status= Can't locate auto/DBI/po st_auth.al in @INC (@INC contains: /usr/local/Roombase3 /usr/lib/perl5/5.8.5/i386-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib/perl5/site_perl/5.8.5/i38 6-linux-thread-multi /usr/lib/perl5/site_perl/5.8.4/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/site_perl/ 5.8.2/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.1/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/s ite_perl/5.8.5 /usr/lib/perl5/site_perl/5.8.4 /usr/lib/perl5/site_perl/5.8.3 /usr/lib/perl5/site_perl/5.8.2 /usr/lib/perl5/site_perl/5.8.1 /usr/lib/perl5/si te_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.4/i386-linux-thread-multi /us r/lib/perl5/vendor_perl/5.8.3/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.2/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.1/i386-linux-t hread-multi /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl/5.8.4 /usr/lib/perl5/vendor _perl/5.8.3 /usr/lib/perl5/vendor_perl/5.8.2 /usr/lib/perl5/vendor_perl/5.8.1 /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl .) at /usr/lib/per l5/vendor_perl/5.8.5/i386-linux-thread-multi/DBI.pm line 648 we dont have a 'post_auth.al' - we simply call the perl in the post_auth section of FR and there is a function in the PERL called post_auth. the server had been running fine beforehand - and a service restart had it ticking along fine (as before). looks like some memory corruption got into this game somewhere? any useful advice or course of action to take? alan

4 4

Automatic report from sources (radiusd) between 22.10.2007 - 23.10.2007 GMT
by Automatic cvs log generator 23 Oct '07

23 Oct '07

CVS log entries from 22.10.2007 (Mon) 08:00:01 - 23.10.2007 (Tue) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/valuepair.c; Revisions: 1.89 File: radiusd/configure.in; Revisions: 1.251, 1.250, 1.249 File: radiusd/man/man8/radrelay.8; Revisions: 1.7, 1.6 File: radiusd/raddb/Makefile; Revisions: 1.34, 1.33 File: radiusd/src/include/radiusd.h; Revisions: 1.252 File: radiusd/src/main/auth.c; Revisions: 1.171 File: radiusd/raddb/templates.conf; Revisions: 1.2 File: radiusd/raddb/sql.conf; Revisions: 1.60 File: radiusd/raddb/sites-available/buffered-sql; Revisions: 1.1 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.255 File: radiusd/raddb/eap.conf; Revisions: 1.16 File: radiusd/raddb/sites-available/vmps; Revisions: 1.2, 1.1 File: radiusd/raddb/radrelay.conf.in; Revisions: 1.6, 1.5, 1.4 File: radiusd/raddb/sites-available/copy-acct-to-home-server; Revisions: 1.1 File: radiusd/src/main/event.c; Revisions: 1.65, 1.64 File: radiusd/configure; Revisions: 1.138, 1.137, 1.136 File: radiusd/src/main/conffile.c; Revisions: 1.184 File: radiusd/raddb/sqlippool.conf; Revisions: 1.14 ===================================================== Combined list of identical log entries ===================================================== Description: We no longer need radrelay.conf, as we have virtual servers. Modified files: File: radiusd/configure; Revision: 1.137; Date: 2007/10/23 04:06:02; Author: aland; Lines: (+2 -3) File: radiusd/configure.in; Revision: 1.250; Date: 2007/10/23 04:06:02; Author: aland; Lines: (+2 -3) File: radiusd/raddb/radrelay.conf.in; Revision: 1.6; Date: 2007/10/23 04:06:04; Author: aland; Lines: (+1 -1) ------------------------------- Description: Now that we have virtual servers, we don't need vmpsd.conf Modified files: File: radiusd/configure; Revision: 1.138; Date: 2007/10/23 04:18:01; Author: aland; Lines: (+2 -3) File: radiusd/configure.in; Revision: 1.251; Date: 2007/10/23 04:18:01; Author: aland; Lines: (+2 -3) File: radiusd/raddb/Makefile; Revision: 1.34; Date: 2007/10/23 04:18:03; Author: aland; Lines: (+2 -2) ------------------------------- Description: Changed $INCLUDE ${confdir}/foo to $INCLUDE foo which should be simpler... Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.255; Date: 2007/10/22 13:09:14; Author: aland; Lines: (+11 -11) File: radiusd/raddb/radrelay.conf.in; Revision: 1.4; Date: 2007/10/22 13:09:15; Author: aland; Lines: (+3 -3) File: radiusd/raddb/sql.conf; Revision: 1.60; Date: 2007/10/22 13:09:14; Author: aland; Lines: (+2 -2) File: radiusd/raddb/sqlippool.conf; Revision: 1.14; Date: 2007/10/22 13:09:15; Author: aland; Lines: (+3 -3) File: radiusd/raddb/templates.conf; Revision: 1.2; Date: 2007/10/22 13:09:15; Author: aland; Lines: (+1 -1) ------------------------------- Description: More samples of using radrelay functionality in 2.0 Modified files: File: radiusd/raddb/sites-available/buffered-sql; Revision: 1.1; Date: 2007/10/23 03:53:19; Author: aland; File: radiusd/raddb/sites-available/copy-acct-to-home-server; Revision: 1.1; Date: 2007/10/23 03:53:18; Author: aland; ------------------------------- Description: It's now 2.0.0-beta. We won't have any more pre-releases before 2.0, and I'm not going to do major code hacking. I think we're almost done. Modified files: File: radiusd/configure; Revision: 1.136; Date: 2007/10/22 08:26:59; Author: aland; Lines: (+2 -2) File: radiusd/configure.in; Revision: 1.249; Date: 2007/10/22 08:26:59; Author: aland; Lines: (+2 -2) ------------------------------- Description: radius_pairmake(), to mirror radius_paircreate(). This is in preparation for eventually using memory pools for VALUE_PAIR's, which should save at least 10% of CPU time, from valgrind stats. Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.252; Date: 2007/10/22 08:40:47; Author: aland; Lines: (+5 -6) File: radiusd/src/main/auth.c; Revision: 1.171; Date: 2007/10/22 08:40:48; Author: aland; Lines: (+9 -11) File: radiusd/src/main/event.c; Revision: 1.64; Date: 2007/10/22 08:40:48; Author: aland; Lines: (+10 -34) File: radiusd/src/main/valuepair.c; Revision: 1.89; Date: 2007/10/22 08:40:47; Author: aland; Lines: (+26 -3) ------------------------------- Description: Now that we have virtual servers, we don't need radrelay.conf any more Modified files: File: radiusd/man/man8/radrelay.8; Revision: 1.6; Date: 2007/10/23 04:03:33; Author: aland; Lines: (+34 -1) File: radiusd/raddb/Makefile; Revision: 1.33; Date: 2007/10/23 04:03:33; Author: aland; Lines: (+2 -2) ===================================================== Log entries ===================================================== Description: Update date Modified files: File: radiusd/man/man8/radrelay.8; Revision: 1.7; Date: 2007/10/23 04:06:26; Author: aland; Lines: (+1 -1) ------------------------------- Description: Notes on requiring a client certificate Modified files: File: radiusd/raddb/eap.conf; Revision: 1.16; Date: 2007/10/23 07:57:31; Author: aland; Lines: (+14 -1) ------------------------------- Description: detail file is in ${radacctdir}, not ${confdir} Modified files: File: radiusd/raddb/radrelay.conf.in; Revision: 1.5; Date: 2007/10/22 14:48:15; Author: aland; Lines: (+2 -2) ------------------------------- Description: Updated Modified files: File: radiusd/raddb/sites-available/vmps; Revision: 1.2; Date: 2007/10/23 04:16:12; Author: aland; Lines: (+5 -3) ------------------------------- Description: Copied VMPS stuff to a virtual server Modified files: File: radiusd/raddb/sites-available/vmps; Revision: 1.1; Date: 2007/10/23 04:14:19; Author: aland; ------------------------------- Description: Allow "local" filenames. e.g. $INCLUDE foo.conf is relative to the file that started all of this off. This change should remove much of the "$INCLUDE ${confdir}/foo", and make it "$INCLUDE foo", which is more robust in light of "-d radius_dir" not entirely working... Modified files: File: radiusd/src/main/conffile.c; Revision: 1.184; Date: 2007/10/22 13:05:04; Author: aland; Lines: (+38 -2) ------------------------------- Description: Corrected typos Modified files: File: radiusd/src/main/event.c; Revision: 1.65; Date: 2007/10/22 09:30:40; Author: aland; Lines: (+13 -12) ===================================================== Summary of modified files ===================================================== File: radiusd/configure Revisions: 1.138, 1.137, 1.136 Authors: aland (+2 -3), aland (+2 -3), aland (+2 -2) ------------------------------- File: radiusd/configure.in Revisions: 1.251, 1.250, 1.249 Authors: aland (+2 -3), aland (+2 -3), aland (+2 -2) ------------------------------- File: radiusd/man/man8/radrelay.8 Revisions: 1.7, 1.6 Authors: aland (+1 -1), aland (+34 -1) ------------------------------- File: radiusd/raddb/Makefile Revisions: 1.34, 1.33 Authors: aland (+2 -2), aland (+2 -2) ------------------------------- File: radiusd/raddb/eap.conf Revisions: 1.16 Authors: aland (+14 -1) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.255 Authors: aland (+11 -11) ------------------------------- File: radiusd/raddb/radrelay.conf.in Revisions: 1.6, 1.5, 1.4 Authors: aland (+1 -1), aland (+2 -2), aland (+3 -3) ------------------------------- File: radiusd/raddb/sites-available/buffered-sql Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/raddb/sites-available/copy-acct-to-home-server Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/raddb/sites-available/vmps Revisions: 1.2, 1.1 Authors: aland (+5 -3), aland ------------------------------- File: radiusd/raddb/sql.conf Revisions: 1.60 Authors: aland (+2 -2) ------------------------------- File: radiusd/raddb/sqlippool.conf Revisions: 1.14 Authors: aland (+3 -3) ------------------------------- File: radiusd/raddb/templates.conf Revisions: 1.2 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.252 Authors: aland (+5 -6) ------------------------------- File: radiusd/src/main/auth.c Revisions: 1.171 Authors: aland (+9 -11) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.184 Authors: aland (+38 -2) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.65, 1.64 Authors: aland (+13 -12), aland (+10 -34) ------------------------------- File: radiusd/src/main/valuepair.c Revisions: 1.89 Authors: aland (+26 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 21.10.2007 - 22.10.2007 GMT
by Automatic cvs log generator 22 Oct '07

22 Oct '07

CVS log entries from 21.10.2007 (Sun) 08:00:00 - 22.10.2007 (Mon) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/valuepair.c; Revisions: 1.60.2.4.2.2 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revisions: 1.5.4.4 File: radiusd/src/main/auth.c; Revisions: 1.170 ===================================================== Log entries ===================================================== Description: For authentication logging, log if the request came from an inner/outer tunnel session Modified files: File: radiusd/src/main/auth.c; Revision: 1.170; Date: 2007/10/22 02:50:45; Author: aland; Lines: (+7 -5) ------------------------------- Description: Don't return immediately if !*. This fixes bug #472 Modified files: File: radiusd/src/main/valuepair.c; Revision: 1.60.2.4.2.2; Date: 2007/10/22 02:54:30; Author: aland; Lines: (+3 -3) ------------------------------- Description: Pull fix for bug #488 from CVS head Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revision: 1.5.4.4; Date: 2007/10/22 02:32:33; Author: aland; Lines: (+2 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/auth.c Revisions: 1.170 Authors: aland (+7 -5) ------------------------------- File: radiusd/src/main/valuepair.c Revisions: 1.60.2.4.2.2 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c Revisions: 1.5.4.4 Authors: aland (+2 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 20.10.2007 - 21.10.2007 GMT
by Automatic cvs log generator 21 Oct '07

21 Oct '07

CVS log entries from 20.10.2007 (Sat) 08:00:05 - 21.10.2007 (Sun) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/log.c; Revisions: 1.58 ===================================================== Log entries ===================================================== Description: Try to open the log file (and complain on error) ONLY if the log file destination is "files" Modified files: File: radiusd/src/main/log.c; Revision: 1.58; Date: 2007/10/21 06:47:00; Author: aland; Lines: (+26 -24) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/log.c Revisions: 1.58 Authors: aland (+26 -24) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 18.10.2007 - 19.10.2007 GMT
by Automatic cvs log generator 20 Oct '07

20 Oct '07

CVS log entries from 18.10.2007 (Thu) 08:00:00 - 19.10.2007 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/xlat.c; Revisions: 1.131 File: radiusd/src/main/mainconfig.c; Revisions: 1.130 File: radiusd/src/main/modcall.c; Revisions: 1.90 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revisions: 1.15 File: radiusd/src/main/Makefile.in; Revisions: 1.70 File: radiusd/src/main/event.c; Revisions: 1.63 File: radiusd/src/main/detail.c; Revisions: 1.3 File: radiusd/raddb/sites-available/inner-tunnel; Revisions: 1.2 File: radiusd/src/main/conffile.c; Revisions: 1.183 File: radiusd/man/man5/unlang.5; Revisions: 1.12 File: radiusd/src/main/evaluate.c; Revisions: 1.31 ===================================================== Combined list of identical log entries ===================================================== Description: Allow "update" sections to update outer request, config, and reply directly. This should simplify many configurations Modified files: File: radiusd/src/main/evaluate.c; Revision: 1.31; Date: 2007/10/18 14:12:49; Author: aland; Lines: (+19 -7) File: radiusd/src/main/modcall.c; Revision: 1.90; Date: 2007/10/18 14:12:49; Author: aland; Lines: (+6 -3) ------------------------------- Description: Document outer.request and outer.reply Modified files: File: radiusd/man/man5/unlang.5; Revision: 1.12; Date: 2007/10/18 14:31:59; Author: aland; Lines: (+9 -3) File: radiusd/raddb/sites-available/inner-tunnel; Revision: 1.2; Date: 2007/10/18 14:31:59; Author: aland; Lines: (+36 -1) ===================================================== Log entries ===================================================== Description: Removed -pie, as it's a GCC-ism, and isn't necessarily portable. If it's needed, it can be added via configure checks, etc. Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.70; Date: 2007/10/18 09:32:37; Author: aland; Lines: (+2 -2) ------------------------------- Description: Check for NULL Modified files: File: radiusd/src/main/conffile.c; Revision: 1.183; Date: 2007/10/18 16:15:51; Author: aland; Lines: (+6 -2) ------------------------------- Description: Made a fake client for each detail file Modified files: File: radiusd/src/main/detail.c; Revision: 1.3; Date: 2007/10/18 11:59:29; Author: aland; Lines: (+17 -23) ------------------------------- Description: Check SNMP pointers, too. Increment accounting counters, rather than auth counters for accounting packets Modified files: File: radiusd/src/main/event.c; Revision: 1.63; Date: 2007/10/18 11:59:03; Author: aland; Lines: (+17 -7) ------------------------------- Description: Parse clients from the main config section, which initializes things so that clients can be read from SQL Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.130; Date: 2007/10/18 12:27:05; Author: aland; Lines: (+4 -2) ------------------------------- Description: Add %{outer.request:Attribute-Name} and %{outer.reply:Attribute-Name} This should make it easier to handle tunneled EAP types Modified files: File: radiusd/src/main/xlat.c; Revision: 1.131; Date: 2007/10/18 14:11:24; Author: aland; Lines: (+18 -2) ------------------------------- Description: t may be NULL. This fixes bug #488 Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revision: 1.15; Date: 2007/10/18 11:06:41; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/man/man5/unlang.5 Revisions: 1.12 Authors: aland (+9 -3) ------------------------------- File: radiusd/raddb/sites-available/inner-tunnel Revisions: 1.2 Authors: aland (+36 -1) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.70 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.183 Authors: aland (+6 -2) ------------------------------- File: radiusd/src/main/detail.c Revisions: 1.3 Authors: aland (+17 -23) ------------------------------- File: radiusd/src/main/evaluate.c Revisions: 1.31 Authors: aland (+19 -7) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.63 Authors: aland (+17 -7) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.130 Authors: aland (+4 -2) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.90 Authors: aland (+6 -3) ------------------------------- File: radiusd/src/main/xlat.c Revisions: 1.131 Authors: aland (+18 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c Revisions: 1.15 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

2 1

rlm_sqlippool load failure on Version 2.0.0-pre2 with MYSQL
by rsg 18 Oct '07

18 Oct '07

Hi, I get the following error when try to load rlm_sqlippool module with MYSQL. OS: Debian -Etch freeradius: symbol lookup error: /usr/lib/freeradius/rlm_sqlippool-2.0.0-pre2.so: undefined symbol: sql_get_socket Please help. Thanks in advance. Santhish.

1 0

seg fault when error in proxy.conf
by A.L.M.Buxey＠lboro.ac.uk 18 Oct '07

18 Oct '07

hi, noted an issue with the reading of proxy.conf, if details are omitted from home_server section then it segfaults eg home_server test0 { Segmentation fault when proxy.conf contains home_server test0 { ipaddr = secret = "super-secret" port = 1812 type = auth+acct strip } A quick check shows similar problem if secret or port is absent but not sure where else the parser breaks with a similar fault. alan

2 1

another cvs SNMP compile problem
by A.L.M.Buxey＠lboro.ac.uk 18 Oct '07

18 Oct '07

hi, error now reads Making all in main... gmake[4]: Entering directory `/usr/src/radiusd/src/main' /usr/src/radiusd/libtool --mode=compile gcc -g -O2 -I/usr/src/radiusd/src -DHOSTINFO=\"i686-pc-linux-gnu\" -DRADIUSD_VERSION=\"2.0.0-pre2\" -DOPENSSL_NO_KRB5 -c radius_snmp.c gcc -g -O2 -I/usr/src/radiusd/src -DHOSTINFO=\"i686-pc-linux-gnu\" -DRADIUSD_VERSION=\"2.0.0-pre2\" -DOPENSSL_NO_KRB5 -c radius_snmp.c -fPIC -DPIC -o .libs/radius_snmp.o radius_snmp.c: In function 'radius_snmp_init': radius_snmp.c:594: error: 'do_snmp' undeclared (first use in this function) radius_snmp.c:594: error: (Each undeclared identifier is reported only once radius_snmp.c:594: error: for each function it appears in.) radius_snmp.c:599: warning: passing argument 1 of 'smux_init' discards qualifiers from pointer target type radius_snmp.c:602: warning: passing argument 5 of 'smux_register_mib' discards qualifiers from pointer target type radius_snmp.c:603: warning: passing argument 5 of 'smux_register_mib' discards qualifiers from pointer target type gmake[4]: *** [radius_snmp.lo] Error 1 gmake[4]: Leaving directory `/usr/src/radiusd/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/usr/src/radiusd/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/usr/src/radiusd/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/usr/src/radiusd' make: *** [all] Error 2

4 9

-pie in src/main/Makefile.in radiusd target
by Enrik Berkhan 18 Oct '07

18 Oct '07

Hi, in current HEAD, radiusd is built using the -pie option. It's not configurable, but hardcoded in src/main/Makefile.in. I think this is not very portable. Further, it keeps poor Debian users like me from debugging and core analyzing using gdb, because pie support is only available as gdb patch. Enrik

2 1

Automatic report from sources (radiusd) between 16.10.2007 - 17.10.2007 GMT
by Automatic cvs log generator 17 Oct '07

17 Oct '07

CVS log entries from 16.10.2007 (Tue) 08:00:02 - 17.10.2007 (Wed) 08:00:03 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/event.c; Revisions: 1.62 File: radiusd/src/main/mainconfig.c; Revisions: 1.129 File: radiusd/src/main/radius_snmp.c; Revisions: 1.43, 1.42 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.254 File: radiusd/raddb/certs/Makefile; Revisions: 1.7 File: radiusd/src/include/radiusd.h; Revisions: 1.251 ===================================================== Combined list of identical log entries ===================================================== Description: Moved do_snmp back into mainconfig Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.251; Date: 2007/10/16 09:18:50; Author: aland; Lines: (+3 -2) File: radiusd/src/main/radius_snmp.c; Revision: 1.42; Date: 2007/10/16 09:18:51; Author: aland; Lines: (+3 -5) ===================================================== Log entries ===================================================== Description: Corrected typo Modified files: File: radiusd/raddb/certs/Makefile; Revision: 1.7; Date: 2007/10/16 09:14:27; Author: aland; Lines: (+2 -2) ------------------------------- Description: Reformatted and clarified text Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.254; Date: 2007/10/16 09:31:47; Author: aland; Lines: (+58 -64) ------------------------------- Description: Print "Ready to process requests" at L_INFO when starting, and after a HUP Modified files: File: radiusd/src/main/event.c; Revision: 1.62; Date: 2007/10/16 11:50:24; Author: aland; Lines: (+12 -3) ------------------------------- Description: Print that core dumps are enabled Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.129; Date: 2007/10/16 11:49:50; Author: aland; Lines: (+5 -2) ------------------------------- Description: Reference mainconfig again Modified files: File: radiusd/src/main/radius_snmp.c; Revision: 1.43; Date: 2007/10/16 15:24:01; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/certs/Makefile Revisions: 1.7 Authors: aland (+2 -2) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.254 Authors: aland (+58 -64) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.251 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.62 Authors: aland (+12 -3) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.129 Authors: aland (+5 -2) ------------------------------- File: radiusd/src/main/radius_snmp.c Revisions: 1.43, 1.42 Authors: aland (+3 -3), aland (+3 -5) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

logging changes
by Enrik Berkhan 16 Oct '07

16 Oct '07

Hi, the "Ready to process requests." message has changed its loglevel from INFO to DEBUG in src/main/event.c between rev 1.59 and 1.60 (where the message was moved in the code). Did the level change happen intentionally? I've always liked seeing in the logs that the server has really startet :) Further, with yesterday's changes in src/main/mainconfig.c, the "Core dumps enabled" message vanished, too. May be it would be a good idea to remind the admin of enabled core dumps even if he should know what he's doing. Enrik

2 2

Problem building HEAD because of do_snmp inconsistency
by Enrik Berkhan 16 Oct '07

16 Oct '07

Hi, currently, I can't build plain HEAD because do_snmp is expected to be part of the main_config_t struct for src/include/radius_snmp.h and src/main/event.c but a static variable in src/main/radius_snmp.c. Looks like a missing commit or something ... ? Enrik

3 3

Typo in raddb/certs/Makefile
by Enrik Berkhan 16 Oct '07

16 Oct '07

Hi, a typo in raddb/certs/Makefile inhibits the installation of a Debian package built from HEAD. See attached patch. Enrik

2 1

Automatic report from sources (radiusd) between 15.10.2007 - 16.10.2007 GMT
by Automatic cvs log generator 16 Oct '07

16 Oct '07

CVS log entries from 15.10.2007 (Mon) 08:00:00 - 16.10.2007 (Tue) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/mainconfig.c; Revisions: 1.128 File: radiusd/configure.in; Revisions: 1.248 File: radiusd/configure; Revisions: 1.135 File: radiusd/src/include/autoconf.h.in; Revisions: 1.71 ===================================================== Combined list of identical log entries ===================================================== Description: Look for <sys/prctl.h>. Checks for prctl() will come later Modified files: File: radiusd/configure; Revision: 1.135; Date: 2007/10/15 15:43:47; Author: aland; Lines: (+3 -1) File: radiusd/configure.in; Revision: 1.248; Date: 2007/10/15 15:43:50; Author: aland; Lines: (+2 -1) File: radiusd/src/include/autoconf.h.in; Revision: 1.71; Date: 2007/10/15 15:43:51; Author: aland; Lines: (+3 -0) ===================================================== Log entries ===================================================== Description: Clarify code allowing core dumps Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.128; Date: 2007/10/15 15:38:38; Author: aland; Lines: (+55 -32) ===================================================== Summary of modified files ===================================================== File: radiusd/configure Revisions: 1.135 Authors: aland (+3 -1) ------------------------------- File: radiusd/configure.in Revisions: 1.248 Authors: aland (+2 -1) ------------------------------- File: radiusd/src/include/autoconf.h.in Revisions: 1.71 Authors: aland (+3 -0) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.128 Authors: aland (+55 -32) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

excluding users from being processed by pam_radius_auth.so ?
by Jim Colten 15 Oct '07

15 Oct '07

What do folks think of this feature idea? We use a Two Factor Authentication product that provides a PAM agent. The PAM agent supports an option "xusers=/filename/" where /filename /names a file containing a list of userids which are excluded from being authenticated by the agent. Here would be an example pam.conf stack for authenticating ftp using this feature (Solaris 10's PAM): # for FTP ftp auth binding pam_safeword.so.1 *xusers=/etc/pam_excluded_users* ftp auth requisite pam_authtok_get.so.1 ftp auth required pam_dhkeys.so.1 ftp auth required pam_unix_cred.so.1 ftp auth required pam_unix_auth.so.1 Excluded users fall thru to get authenticated in the same manner they would be if we weren't using the two factor auth product. There is no Solaris 8 version of the pam_safeword.so.1 module used above, so we'd like to use pam_radius_auth.so .... but have a strong need for that xusers= option or something that'll accomplish the same effect. However, we have few C development skills in our shop and those we have are rusty. And then there's the problem that we aren't very familiar with PAM internals! Does the community see value in this enhancement? Anyone interested in working on it? Or is it already there and I haven't found it in the doc?

1 0

Useless setrlimit(RLIMIT_CORE, ...) and typo in mainconfig.c
by Enrik Berkhan 15 Oct '07

15 Oct '07

Hi, when coredumps are enabled in the config file, the code in mainconfig.c does an setrlimit(RLIMIT_CORE, ...) using the core limits retrieved by an earlier getrlimit(RLIMIT_CORE, ...). This looks useless to me. I think the original intention of the setrlimit() was to actually enable core dumping in case the server is started with core dump limit set to 0 but coredumps enabled in the config file. Further, a prctl() call to set the dumpable flag of the process is protected by HAVE_SYS_PRTCL_H which should be HAVE_SYS_PRCTL_H. Even with the typo fixed, the code will never be run, because configure does not check for prctl.h yet. I have attached a suggested patch (not including configure / prctl.h). Enrik Index: src/main/mainconfig.c =================================================================== RCS file: /source/radiusd/src/main/mainconfig.c,v retrieving revision 1.127 diff -u -r1.127 mainconfig.c --- src/main/mainconfig.c 9 Oct 2007 14:45:59 -0000 1.127 +++ src/main/mainconfig.c 15 Oct 2007 14:41:07 -0000 @@ -42,7 +42,7 @@ #include <grp.h> #endif -#ifdef HAVE_SYS_PRTCL_H +#ifdef HAVE_SYS_PRCTL_H #include <sys/prctl.h> #endif @@ -577,7 +577,7 @@ #endif if (allow_core_dumps) { -#ifdef HAVE_SYS_PRTCL_H +#ifdef HAVE_SYS_PRCTL_H #ifdef PR_SET_DUMPABLE if (prctl(PR_SET_DUMPABLE, 1) < 0) { radlog(L_ERR,"Cannot enable core dumps: prctl(PR_SET_DUMPABLE) failed: '%s'", @@ -587,6 +587,7 @@ #endif #ifdef HAVE_SYS_RESOURCE_H + core_limits.rlim_cur = core_limits.rlim_max; if (setrlimit(RLIMIT_CORE, &core_limits) < 0) { radlog(L_ERR, "Cannot update core dump limit: %s", strerror(errno));

2 1

Automatic report from sources (radiusd) between 14.10.2007 - 15.10.2007 GMT
by Automatic cvs log generator 15 Oct '07

15 Oct '07

CVS log entries from 14.10.2007 (Sun) 08:00:00 - 15.10.2007 (Mon) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/modules.c; Revisions: 1.148, 1.147, 1.146 File: radiusd/src/main/event.c; Revisions: 1.61 File: radiusd/src/main/modcall.c; Revisions: 1.89 File: radiusd/src/main/client.c; Revisions: 1.72, 1.71 ===================================================== Log entries ===================================================== Description: remove dumb assert Modified files: File: radiusd/src/main/client.c; Revision: 1.72; Date: 2007/10/14 15:38:11; Author: aland; Lines: (+2 -3) ------------------------------- Description: Update clients from root_clients, if possible Modified files: File: radiusd/src/main/client.c; Revision: 1.71; Date: 2007/10/14 14:03:46; Author: aland; Lines: (+8 -6) ------------------------------- Description: request->proxy may be set for requests with inner tunnel sessions Modified files: File: radiusd/src/main/event.c; Revision: 1.61; Date: 2007/10/14 19:11:25; Author: aland; Lines: (+4 -3) ------------------------------- Description: Add "method" to modcallable, so that we can call different module methods under administrator control Modified files: File: radiusd/src/main/modcall.c; Revision: 1.89; Date: 2007/10/14 13:22:58; Author: aland; Lines: (+49 -9) ------------------------------- Description: Define ALL types first, so that config in one section can reference types defined in another section Modified files: File: radiusd/src/main/modules.c; Revision: 1.148; Date: 2007/10/15 07:43:33; Author: aland; Lines: (+74 -39) ------------------------------- Description: Define dynamic types (Autz-type foo) etc. before trying to load the rest of the sections Modified files: File: radiusd/src/main/modules.c; Revision: 1.147; Date: 2007/10/15 07:35:11; Author: aland; Lines: (+29 -12) ------------------------------- Description: Cleaned up warning and error messages Modified files: File: radiusd/src/main/modules.c; Revision: 1.146; Date: 2007/10/14 17:36:05; Author: aland; Lines: (+5 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/client.c Revisions: 1.72, 1.71 Authors: aland (+2 -3), aland (+8 -6) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.61 Authors: aland (+4 -3) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.89 Authors: aland (+49 -9) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.148, 1.147, 1.146 Authors: aland (+74 -39), aland (+29 -12), aland (+5 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Bus Error when loading SQL clients
by Arran Cudbard-Bell 15 Oct '07

15 Oct '07

rlm_sql (sql_clients): Attempting to connect rlm_sql_mysql #19 rlm_sql_mysql: Starting connect to MySQL server for #19 rlm_sql (sql_clients): Connected new DB handle, #19 rlm_sql (sql_clients): Processing generate_sql_clients rlm_sql (sql_clients) in generate_sql_clients: query is SELECT master.netreg_id, CONCAT(ip1,'.',ip2,'.',ip3,'.',ip4),master.name, master.nas_type,master.nas_secret FROM master WHERE master.nas_secret != '' rlm_sql (sql_clients): Reserving sql socket id: 19 rlm_sql (sql_clients): Read entry nasname=139.184.9.43,shortname=hp-e-artc-3-sw1,secret=zzz rlm_sql (sql_clients): Adding client 139.184.9.43 (hp-e-artc-3-sw1) to clients list rlm_sql (sql_clients): Read entry nasname=139.184.8.160,shortname=hp-e-russ-1-sw3,secret=xxx rlm_sql (sql_clients): Adding client 139.184.8.160 (hp-e-russ-1-sw3) to clients list Program received signal EXC_BAD_ACCESS, Could not access memory. Reason: KERN_PROTECTION_FAILURE at address: 0x00000080 0x00003584 in client_add (clients=0x0, client=0x3cdb80) at client.c:215 215 if (!clients->trees[client->prefix]) { GDB Backtrace shows #0 0x00003584 in client_add (clients=0x0, client=0x3cdb80) at client.c:215 #1 0x00206d5c in rlm_sql_instantiate (conf=0x27090, instance=0x3cad74) at rlm_sql.c:337 #2 0x0000b3f8 in find_module_instance (modules=0x1, instname=0x311e40 "sql_clients") at modules.c:302 #3 0x0000beb8 in setup_modules (reload=1, config=0x300b50) at modules.c:807 #4 0x0000ae24 in read_mainconfig (reload=0) at mainconfig.c:917 #5 0x0000e7c4 in main (argc=4, argv=0xbffffa48) at radiusd.c:287 This has broken since cvs build date 21/09/07 and is broken in cvs build 12/10/07 Thanks, Arran

2 5