February 2007 - Freeradius-Devel - lists.freeradius.org

Re: SecurityTracker Alert ID 1017463
by Alan DeKok 11 Feb '07

11 Feb '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SecurityTracker wrote: > Thanks for notifying us of this. My apologies for the excessive delay > in getting this posting corrected. We've just updated the Alert on our > site to indicate that you dispute that there is a security impact. As > part of our standard dispute resolution process, we have sent e-mail to > the original poster (Michal Bucko (sapheal)) just to see if he has any > other information to indicate security threat exists. Thanks. He hasn't responded to our queries. Maybe you'll have better luck. > The characterization as a remote issue was clearly an error on our part. OK. I was curious as to where it had come from. > BTW, the CVE entry does not yet reflect your position on the dispute, so > you may want to contact CVE (cve(a)mitre.org) It does allude to 3APA3A's > Bugtraq message questioning the claim. But CVE usually has a way of > more clearly indicating a vendor dispute. This is what they say right now: I've been in touch with CVE. The statement should be updated in a few days. Alan DeKok Project Leader The FreeRADIUS Server Project -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQCVAwUBRc7Gi6kul4vkAkl9AQLSlAP/awlC8kjl8LOKw/dfxFQ93ukEDFCQN8mZ 6EeVdcK4rB6bGk/5FhtAfdudBDqQX8kmFj61tAorLsPRxHCUed9X+gdHZ/MEG2r+ md5IvwLsTO96bFVqmeOWfPTNFKEyuhFvw/G4p+kxPhXPAc1gcb1Vr29moAdUy+Ej CpLUh7s5S2E= =1Xee -----END PGP SIGNATURE-----

1 0

Automatic report from sources (radiusd) between 09.02.2007 - 10.02.2007 GMT
by Automatic cvs log generator 10 Feb '07

10 Feb '07

CVS log entries from 09.02.2007 (Fri) 09:00:00 - 10.02.2007 (Sat) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/valuepair.c; Revisions: 1.60.2.4.2.1 File: radiusd/src/main/threads.c; Revisions: 1.116, 1.77.2.7.2.1 File: radiusd/src/main/radiusd.c; Revisions: 1.321.2.2.2.4 File: radiusd/src/modules/rlm_chap/rlm_chap.c; Revisions: 1.18 File: radiusd/src/include/radiusd.h; Revisions: 1.214, 1.156.2.4.2.1 File: radiusd/src/main/auth.c; Revisions: 1.160 File: radiusd/src/lib/dict.c; Revisions: 1.97, 1.50.2.4.2.15 File: radiusd/src/lib/hash.c; Revisions: 1.19, 1.9.2.10 File: radiusd/src/main/modules.c; Revisions: 1.113, 1.86.2.1.2.5 File: radiusd/src/main/xlat.c; Revisions: 1.72.2.7.2.4, 1.72.2.7.2.3 File: radiusd/src/main/mainconfig.c; Revisions: 1.99, 1.36.2.6.2.6, 1.36.2.6.2.5, 1.36.2.6.2.4 File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.47 File: radiusd/share/dictionary.garderos; Revisions: 1.5, 1.2.2.1.2.2 File: radiusd/src/modules/rlm_eap/mem.c; Revisions: 1.20, 1.14.4.3 File: radiusd/src/main/nas.c; Revisions: 1.22.4.1 File: radiusd/src/include/libradius.h; Revisions: 1.76.2.2.2.11 File: radiusd/src/main/request_list.c; Revisions: 1.40.2.2.2.2 File: radiusd/src/main/session.c; Revisions: 1.35, 1.21.2.1.2.2 File: radiusd/src/main/exec.c; Revisions: 1.57, 1.42.2.1.2.3 File: radiusd/src/main/conffile.c; Revisions: 1.144, 1.100.2.1.2.3 ===================================================== Combined list of identical log entries ===================================================== Description: Don't start if radius_dir is globally writable Relax the checks on readability Modified files: File: radiusd/src/main/conffile.c; Revision: 1.144; Date: 2007/02/09 13:03:18; Author: aland; Lines: (+3 -3) File: radiusd/src/main/mainconfig.c; Revision: 1.99; Date: 2007/02/09 13:03:18; Author: aland; Lines: (+22 -2) ------------------------------- Description: Don't allow radius_dir to be globally writable Relax the checks on global readability Modified files: File: radiusd/src/main/conffile.c; Revision: 1.100.2.1.2.3; Date: 2007/02/09 13:01:41; Author: aland; Lines: (+3 -3) File: radiusd/src/main/mainconfig.c; Revision: 1.36.2.6.2.4; Date: 2007/02/09 13:01:40; Author: aland; Lines: (+21 -1) ------------------------------- Description: Free memory on detach Modified files: File: radiusd/src/modules/rlm_eap/mem.c; Revision: 1.20; Date: 2007/02/09 15:40:30; Author: aland; Lines: (+3 -2) File: radiusd/src/modules/rlm_eap/mem.c; Revision: 1.14.4.3; Date: 2007/02/09 15:42:03; Author: aland; Lines: (+3 -2) ------------------------------- Description: cleaned up the exec stuff again, and moved the "wait for 10 seconds or give up" code into rad_waitpid, where it's easier to manage Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.214; Date: 2007/02/09 10:29:21; Author: aland; Lines: (+4 -4) File: radiusd/src/main/exec.c; Revision: 1.57; Date: 2007/02/09 10:29:21; Author: aland; Lines: (+16 -21) File: radiusd/src/main/session.c; Revision: 1.35; Date: 2007/02/09 10:29:21; Author: aland; Lines: (+4 -18) File: radiusd/src/main/threads.c; Revision: 1.116; Date: 2007/02/09 10:29:21; Author: aland; Lines: (+34 -26) ------------------------------- Description: Cleaned up exec stuff, to make it more like the CVS head, and to fix other errors (sigh) Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.156.2.4.2.1; Date: 2007/02/09 10:27:57; Author: aland; Lines: (+4 -4) File: radiusd/src/main/exec.c; Revision: 1.42.2.1.2.3; Date: 2007/02/09 10:27:57; Author: aland; Lines: (+15 -4) File: radiusd/src/main/radiusd.c; Revision: 1.321.2.2.2.4; Date: 2007/02/09 10:27:58; Author: aland; Lines: (+13 -3) File: radiusd/src/main/session.c; Revision: 1.21.2.1.2.2; Date: 2007/02/09 10:27:59; Author: aland; Lines: (+4 -18) File: radiusd/src/main/threads.c; Revision: 1.77.2.7.2.1; Date: 2007/02/09 10:27:59; Author: aland; Lines: (+113 -63) ------------------------------- Description: Fix lrad_hash_table_free() Modified files: File: radiusd/src/lib/hash.c; Revision: 1.19; Date: 2007/02/09 15:05:37; Author: aland; Lines: (+18 -11) File: radiusd/src/lib/hash.c; Revision: 1.9.2.10; Date: 2007/02/09 15:06:01; Author: aland; Lines: (+16 -11) ------------------------------- Description: When a duplicate attribute is found, delete the old one Modified files: File: radiusd/src/lib/dict.c; Revision: 1.97; Date: 2007/02/09 15:32:13; Author: aland; Lines: (+10 -2) File: radiusd/src/lib/dict.c; Revision: 1.50.2.4.2.15; Date: 2007/02/09 15:32:24; Author: aland; Lines: (+10 -2) ------------------------------- Description: Be more aggressive about freeing memory on clean exit. This should help track down memory leaks, if any Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.36.2.6.2.6; Date: 2007/02/09 15:56:11; Author: aland; Lines: (+6 -1) File: radiusd/src/main/nas.c; Revision: 1.22.4.1; Date: 2007/02/09 15:56:12; Author: aland; Lines: (+4 -2) File: radiusd/src/main/request_list.c; Revision: 1.40.2.2.2.2; Date: 2007/02/09 15:56:12; Author: aland; Lines: (+8 -2) File: radiusd/src/main/valuepair.c; Revision: 1.60.2.4.2.1; Date: 2007/02/09 15:56:12; Author: aland; Lines: (+14 -2) File: radiusd/src/main/xlat.c; Revision: 1.72.2.7.2.4; Date: 2007/02/09 15:56:13; Author: aland; Lines: (+12 -2) ===================================================== Log entries ===================================================== Description: Updated with new attributes from bug #417 Modified files: File: radiusd/share/dictionary.garderos; Revision: 1.5; Date: 2007/02/09 10:52:32; Author: aland; Lines: (+3 -1) ------------------------------- Description: Added new attributes from bug #417 Modified files: File: radiusd/share/dictionary.garderos; Revision: 1.2.2.1.2.2; Date: 2007/02/09 10:51:46; Author: aland; Lines: (+3 -1) ------------------------------- Description: Define dict_free Modified files: File: radiusd/src/include/libradius.h; Revision: 1.76.2.2.2.11; Date: 2007/02/09 15:33:11; Author: aland; Lines: (+2 -1) ------------------------------- Description: Caching request->password is probably a bad idea Modified files: File: radiusd/src/main/auth.c; Revision: 1.160; Date: 2007/02/09 13:09:10; Author: aland; Lines: (+8 -5) ------------------------------- Description: Free more stuff on exit Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.36.2.6.2.5; Date: 2007/02/09 15:33:21; Author: aland; Lines: (+4 -1) ------------------------------- Description: use correct lineo. We could really us a cf_item_lineno() Modified files: File: radiusd/src/main/modules.c; Revision: 1.113; Date: 2007/02/09 10:38:25; Author: aland; Lines: (+7 -4) ------------------------------- Description: use correct lineno We could really use a cf_item_lineo() Modified files: File: radiusd/src/main/modules.c; Revision: 1.86.2.1.2.5; Date: 2007/02/09 10:39:11; Author: aland; Lines: (+8 -4) ------------------------------- Description: increase size of buffer to allow longer SQL qeuries Thise closes bug #405 Modified files: File: radiusd/src/main/xlat.c; Revision: 1.72.2.7.2.3; Date: 2007/02/09 10:43:52; Author: aland; Lines: (+3 -3) ------------------------------- Description: Use pairfind() to get CHAP-Password, not request->password Modified files: File: radiusd/src/modules/rlm_chap/rlm_chap.c; Revision: 1.18; Date: 2007/02/09 13:05:25; Author: aland; Lines: (+6 -11) ------------------------------- Description: request->password is User-Password or CHAP-Password. That's probably a bad idea Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.47; Date: 2007/02/09 13:09:35; Author: aland; Lines: (+5 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.garderos Revisions: 1.5, 1.2.2.1.2.2 Authors: aland (+3 -1), aland (+3 -1) ------------------------------- File: radiusd/src/include/libradius.h Revisions: 1.76.2.2.2.11 Authors: aland (+2 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.214, 1.156.2.4.2.1 Authors: aland (+4 -4), aland (+4 -4) ------------------------------- File: radiusd/src/lib/dict.c Revisions: 1.97, 1.50.2.4.2.15 Authors: aland (+10 -2), aland (+10 -2) ------------------------------- File: radiusd/src/lib/hash.c Revisions: 1.19, 1.9.2.10 Authors: aland (+18 -11), aland (+16 -11) ------------------------------- File: radiusd/src/main/auth.c Revisions: 1.160 Authors: aland (+8 -5) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.144, 1.100.2.1.2.3 Authors: aland (+3 -3), aland (+3 -3) ------------------------------- File: radiusd/src/main/exec.c Revisions: 1.57, 1.42.2.1.2.3 Authors: aland (+16 -21), aland (+15 -4) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.99, 1.36.2.6.2.6, 1.36.2.6.2.5, 1.36.2.6.2.4 Authors: aland (+22 -2), aland (+6 -1), aland (+4 -1), aland (+21 -1) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.113, 1.86.2.1.2.5 Authors: aland (+7 -4), aland (+8 -4) ------------------------------- File: radiusd/src/main/nas.c Revisions: 1.22.4.1 Authors: aland (+4 -2) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.321.2.2.2.4 Authors: aland (+13 -3) ------------------------------- File: radiusd/src/main/request_list.c Revisions: 1.40.2.2.2.2 Authors: aland (+8 -2) ------------------------------- File: radiusd/src/main/session.c Revisions: 1.35, 1.21.2.1.2.2 Authors: aland (+4 -18), aland (+4 -18) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.116, 1.77.2.7.2.1 Authors: aland (+34 -26), aland (+113 -63) ------------------------------- File: radiusd/src/main/valuepair.c Revisions: 1.60.2.4.2.1 Authors: aland (+14 -2) ------------------------------- File: radiusd/src/main/xlat.c Revisions: 1.72.2.7.2.4, 1.72.2.7.2.3 Authors: aland (+12 -2), aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_chap/rlm_chap.c Revisions: 1.18 Authors: aland (+6 -11) ------------------------------- File: radiusd/src/modules/rlm_eap/mem.c Revisions: 1.20, 1.14.4.3 Authors: aland (+3 -2), aland (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.47 Authors: aland (+5 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 08.02.2007 - 09.02.2007 GMT
by Automatic cvs log generator 09 Feb '07

09 Feb '07

CVS log entries from 08.02.2007 (Thu) 09:00:00 - 09.02.2007 (Fri) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.43, 1.15.2.2.2.3 File: radiusd/src/lib/radius.c; Revisions: 1.193, 1.125.2.5.2.9 File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c; Revisions: 1.71 ===================================================== Combined list of identical log entries ===================================================== Description: If a packet is too long, truncate at the last good attribute Modified files: File: radiusd/src/lib/radius.c; Revision: 1.193; Date: 2007/02/08 14:06:28; Author: aland; Lines: (+15 -14) File: radiusd/src/lib/radius.c; Revision: 1.125.2.5.2.9; Date: 2007/02/08 14:05:52; Author: aland; Lines: (+15 -14) ------------------------------- Description: Don't leave 'vp' pointing to a deleted attribute Modified files: File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.43; Date: 2007/02/08 10:25:09; Author: aland; Lines: (+6 -4) File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.15.2.2.2.3; Date: 2007/02/08 10:24:35; Author: aland; Lines: (+6 -4) ===================================================== Log entries ===================================================== Description: Apply patch from 1.67 to accounting requests, too Modified files: File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c; Revision: 1.71; Date: 2007/02/08 09:38:27; Author: aland; Lines: (+4 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/radius.c Revisions: 1.193, 1.125.2.5.2.9 Authors: aland (+15 -14), aland (+15 -14) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.43, 1.15.2.2.2.3 Authors: aland (+6 -4), aland (+6 -4) ------------------------------- File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c Revisions: 1.71 Authors: aland (+4 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 06.02.2007 - 08.02.2007 GMT
by Automatic cvs log generator 08 Feb '07

08 Feb '07

CVS log entries from 06.02.2007 (Tue) 09:00:01 - 08.02.2007 (Thu) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/packet.c; Revisions: 1.10, 1.9 File: radiusd/src/main/mainconfig.c; Revisions: 1.98 File: radiusd/src/main/radius_snmp.c; Revisions: 1.29 File: radiusd/src/main/conffile.c; Revisions: 1.143 File: radiusd/src/main/listen.c; Revisions: 1.52 File: radiusd/src/lib/md5.c; Revisions: 1.20 Author: pnixon File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.23, 1.22 File: radiusd/raddb/sqlippool.conf; Revisions: 1.9 ===================================================== Combined list of identical log entries ===================================================== Description: Add non-mandatory pool-check statement to allow detection of whether the Pool does not exist or rather is simply full Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.9; Date: 2007/02/06 16:37:13; Author: pnixon; Lines: (+29 -37) File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.22; Date: 2007/02/06 16:37:12; Author: pnixon; Lines: (+51 -15) ===================================================== Log entries ===================================================== Description: Build on systems without IPv6 addresses Modified files: File: radiusd/src/lib/md5.c; Revision: 1.20; Date: 2007/02/06 12:50:14; Author: aland; Lines: (+3 -2) ------------------------------- Description: Don't copy too much data && crash the client Modified files: File: radiusd/src/lib/packet.c; Revision: 1.10; Date: 2007/02/06 14:06:32; Author: aland; Lines: (+4 -5) ------------------------------- Description: Build on non-IPv6 aware systems Modified files: File: radiusd/src/lib/packet.c; Revision: 1.9; Date: 2007/02/06 13:02:10; Author: aland; Lines: (+3 -2) ------------------------------- Description: Return -1 on error, not NULL The file permission checks here are probably too strong.. Modified files: File: radiusd/src/main/conffile.c; Revision: 1.143; Date: 2007/02/06 13:57:09; Author: aland; Lines: (+3 -3) ------------------------------- Description: Support Status-Server on accounting ports, too Modified files: File: radiusd/src/main/listen.c; Revision: 1.52; Date: 2007/02/06 14:06:55; Author: aland; Lines: (+47 -17) ------------------------------- Description: One more check Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.98; Date: 2007/02/06 13:46:37; Author: aland; Lines: (+3 -3) ------------------------------- Description: Check for existence of c->shortname before dereferencing it Modified files: File: radiusd/src/main/radius_snmp.c; Revision: 1.29; Date: 2007/02/06 10:12:20; Author: aland; Lines: (+6 -6) ------------------------------- Description: Change BEGIN to SQL99 conformant START TRANSACTION Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.23; Date: 2007/02/06 20:06:08; Author: pnixon; Lines: (+8 -8) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/sqlippool.conf Revisions: 1.9 Authors: pnixon (+29 -37) ------------------------------- File: radiusd/src/lib/md5.c Revisions: 1.20 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/lib/packet.c Revisions: 1.10, 1.9 Authors: aland (+4 -5), aland (+3 -2) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.143 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.52 Authors: aland (+47 -17) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.98 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/radius_snmp.c Revisions: 1.29 Authors: aland (+6 -6) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.23, 1.22 Authors: pnixon (+8 -8), pnixon (+51 -15) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Bug in radclient when parsing long value from file (FreeRADIUS 1.1.3)
by Geoffroy Arnoud 07 Feb '07

07 Feb '07

Hi all, There a bug in radclient when reading a valuepair from a file, when the value is to long to be read, when written in hexadecimal. Actually, when a value can be at most 253 bytes (on the network), when expressed in hexadecimal, it requires 253x2 + 2 (0x) characters. Here is a sample request that shows the issue. NAS-IP-Address = 10.194.96.114 Framed-IP-Address = 192.168.100.69 Event-Timestamp = "Dec 18 2006 08:42:08 CET" Acct-Status-Type = Stop WISPr-Location-Name = "Something" Acct-Output-Octets = 32411 Acct-Terminate-Cause = Session-Timeout Acct-Session-Id = "00000743" NAS-Identifier = "SomethingNAS" Acct-Output-Gigawords = 0 NAS-Port-Type = Virtual User-Name = "user@company" Acct-Session-Time = 600 Acct-Input-Gigawords = 0 Class = 0x53425232434cc383c2a6c382c2b4c383efbfbdc383c2adc383c2a7c383c2acc383c5b8c383e280b9c383c2b7c3a2e2809ac2ac11c3a2e2809ac2ac3901c3a2e2809ac2ac08c3afc2bfc2bdc385c2bec3a2e282acc2bac383c2acc383c2a7c3a2e282acc593c383e280b0c383c5bec382c2be02c3a2e2809ac2ac17c3afc2bfc2bdc385e2809cc385e28099c383c2a6c3a2e282acc593c3af Acct-Input-Octets = 324352 The bug is located in file src/lib/valuepair.c in function pairread. A patch is attached that increases the size of the "value" buffer to 512 bytes. Does anyone see side effects? Best regards, Geoff. ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

2 1

How does EAP-SIM module decide whether read keys from file or calculate by itself?
by lishuai zhao 06 Feb '07

06 Feb '07

Hi, all After I studied the EAP-SIM and EAP-AKA parts, I have some doubts and questions: 1.I think the function eap_sim_sendchallenge is to calculate keys and send to authenticator, then authenticator forward it to the client. 2.I think the function process_eap_sim_challenge is to check the response and to decide weather to response with EAP-Success. 3.As said in 1, the eap_sim_sendchallenge can calculate keys itself, and also the rlm_sim_file module makes it can read keys from file. How to decide which method to use? Waiting for your replies, thank you! Best wishes! Lanny Zhao

1 0

Segmentation fault when processing SNMP
by Geoffroy Arnoud 06 Feb '07

06 Feb '07

Hi all, I am experiencing FreeRADIUS SNMP with FreeRADIUS CVS snapshot (20070201). I use Net-SNMP. FreeRADIUS makes a segmentation fault when processing the following SNMP request: snmpwalk -Cc -v 1 -m /PATH-TO-MIBs/RADIUS-AUTH-SERVER-MIB.txt -c verysecret 172.26.233.2 radiusAuth I use the configuration "out-of-the-box", except for snmp.conf, that is: smux_password = verysecret snmp_write_access = yes I run radiusd -X. Here is the output: [garnoud@loo sbin]$ ./radiusd -X Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/radiusd.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/proxy.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/clients.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/snmp.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/eap.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/sql.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/sql/mysql-dialup.conf FreeRADIUS Version 2.0.0-pre0, for host i686-pc-linux-gnu, built on Feb 5 2007 at 14:49:12 Starting - reading configuration files ... read_config_files: reading dictionary main: prefix = "/users/garnoud/freeradius/V2-20070201" main: localstatedir = "/users/garnoud/freeradius/V2-20070201/var" main: logdir = "/users/garnoud/freeradius/V2-20070201/var/log/radius" main: libdir = "/users/garnoud/freeradius/V2-20070201/lib" main: radacctdir = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radacct" main: hostname_lookups = no main: snmp = yes main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/users/garnoud/freeradius/V2-20070201/var/run/radiusd/radiusd.pid" main: checkrad = "/users/garnoud/freeradius/V2-20070201/sbin/checkrad" main: debug_level = 0 main: proxy_requests = yes log: syslog_facility = "daemon" proxy: retry_delay = 5 proxy: retry_count = 3 proxy: default_fallback = yes proxy: dead_time = 120 proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no read_config_files: reading realms main: port = 1812 listen: type = "auth" listen: ipaddr = * listen: port = 0 listen: type = "acct" listen: ipaddr = * listen: port = 0 client: secret = "testing123" client: shortname = "localhost" client: nastype = "other" radiusd: entering modules setup Module: Library search path is /users/garnoud/freeradius/V2-20070201/lib Module: Loaded exec exec: wait = yes exec: input_pairs = "request" exec: shell_escape = yes rlm_exec: wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded expiration expiration: reply-message = "Password Has Expired " Module: Instantiated expiration (expiration) Module: Loaded logintime logintime: reply-message = "You are calling outside your allowed timespan " logintime: minimum-timeout = 60 Module: Instantiated logintime (logintime) Module: Loaded PAP pap: encryption_scheme = "auto" pap: auto_header = no Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no Module: Instantiated mschap (mschap) Module: Loaded System unix: radwtmp = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radwtmp" Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/users/garnoud/freeradius/V2-20070201/etc/raddb/huntgroups" preprocess: hints = "/users/garnoud/freeradius/V2-20070201/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/users" files: acctusersfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/acct_users" files: preproxy_usersfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: header = "%t" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no detail: log_packet_header = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Module: Loaded attr_filter attr_filter: attrsfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/attrs.accounting_response" attr_filter: key = "%{User-Name}" Module: Instantiated attr_filter (attr_filter.accounting_response) attr_filter: attrsfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/attrs.access_reject" attr_filter: key = "%{User-Name}" Module: Instantiated attr_filter (attr_filter.access_reject) main: smux_password = "verysecret" main: snmp_write_access = yes SMUX connect try 1 SMUX open oid: 1.3.6.1.4.1.3317.1.3.1 SMUX open progname: radiusd SMUX open password: verysecret SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 2 SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 2 Initializing the thread pool... Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 12 SMUX message received type: 67 rest len: 4 SMUX_RRSP SMUX_RRSP value: 0 errstat: 0 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 32 SMUX message received type: 161 rest len: 28 SMUX_GETNEXT SMUX GET message parse: len 28 SMUX GET reqid: 33 len: 25 SMUX GET errstat 0 len: 22 SMUX GET errindex 0 len: 19 SMUX var parse: len 19 SMUX var parse: type 48 len 15 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1 SMUX val_type: 5 ASN_NULL SMUX function call index is 1 SMUX GETRSP send SMUX GETRSP reqid: 33 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 128 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 34 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.1.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 1 SMUX function call index is 2 SMUX GETRSP send SMUX GETRSP reqid: 34 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 39 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 35 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.2.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 2 SMUX function call index is 3 SMUX GETRSP send SMUX GETRSP reqid: 35 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 39 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 36 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.3.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 3 SMUX function call index is 4 SMUX GETRSP send SMUX GETRSP reqid: 36 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 37 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.4.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 4 SMUX function call index is 5 SMUX GETRSP send SMUX GETRSP reqid: 37 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 38 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.5.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 5 SMUX function call index is 6 SMUX GETRSP send SMUX GETRSP reqid: 38 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 39 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.6.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 6 SMUX function call index is 7 SMUX GETRSP send SMUX GETRSP reqid: 39 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 40 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.7.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 7 SMUX function call index is 8 SMUX GETRSP send SMUX GETRSP reqid: 40 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 41 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.8.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 8 SMUX function call index is 9 SMUX GETRSP send SMUX GETRSP reqid: 41 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 42 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.9.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 9 SMUX function call index is 10 SMUX GETRSP send SMUX GETRSP reqid: 42 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 43 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.10.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 10 SMUX function call index is 11 SMUX GETRSP send SMUX GETRSP reqid: 43 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 44 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.11.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 11 SMUX function call index is 12 SMUX GETRSP send SMUX GETRSP reqid: 44 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 45 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.12.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 12 SMUX function call index is 13 SMUX GETRSP send SMUX GETRSP reqid: 45 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 46 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.13.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 13 SMUX function call index is 14 SMUX GETRSP send SMUX GETRSP reqid: 46 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 47 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.14.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 14 SMUX function call index is 2 SMUX GETRSP send SMUX GETRSP reqid: 47 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 59 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 39 SMUX message received type: 161 rest len: 35 SMUX_GETNEXT SMUX GET message parse: len 35 SMUX GET reqid: 48 len: 32 SMUX GET errstat 0 len: 29 SMUX GET errindex 0 len: 26 SMUX var parse: len 26 SMUX var parse: type 48 len 22 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.15.1.2.1 SMUX val_type: 5 ASN_NULL SMUX function call index is 2 SMUX function call index is 3 Segmentation fault Has anyone already encountered this issue? Best regards, Geoff. ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

4 11

freeradius-client debian files
by Jan Janak 06 Feb '07

06 Feb '07

Hello, Is anyone maintaining the Debian control files in freeradius-client library? I am the original author of the debian packaging files in radiusclient-ng and one of the maintainers of the package in Debian so I thought I could update them for freeradius-client if nobody is working on that. Jan.

3 3

Automatic report from sources (radiusd) between 05.02.2007 - 06.02.2007 GMT
by Automatic cvs log generator 06 Feb '07

06 Feb '07

CVS log entries from 05.02.2007 (Mon) 09:00:01 - 06.02.2007 (Tue) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.21, 1.20 File: radiusd/raddb/sqlippool.conf; Revisions: 1.8 ===================================================== Combined list of identical log entries ===================================================== Description: Added new option sqlippool_log_clear to log when an IP address is deallocated Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.8; Date: 2007/02/05 17:57:27; Author: pnixon; Lines: (+6 -3) File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.21; Date: 2007/02/05 17:57:27; Author: pnixon; Lines: (+10 -4) ===================================================== Log entries ===================================================== Description: On query error, emit the failed query to the log so we can track it down. Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.20; Date: 2007/02/05 12:17:13; Author: pnixon; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/sqlippool.conf Revisions: 1.8 Authors: pnixon (+6 -3) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.21, 1.20 Authors: pnixon (+10 -4), pnixon (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Escaping of User Names
by Peter Nixon 06 Feb '07

06 Feb '07

Hi Guys Well, my lovely users have managed to find a bug. I am trying to figure out at present if I am doing something wrong in sqlippool or if there is a general problem with rlm_sql or more specifically rlm_sql_postgresql. I have 2 users sending me weird usernames. One is "?AZq?/?" and the other is "*?Z?�?-�" Now, I authorise my users on this system based on other attributes, and do no actual authentication so the username is ignored. I could just delete the username part from the queries and it would solve the problem for me, but thats beside the point. The main sql auth and acct s working fine, however sqlippool is throwing the following error: Error: sqlippool_command: database query error in: 'UPDATE radippool SET expiry_time = 'now'::timestamp(0) + '3600 seconds'::interval WHERE nasipaddress = '217.31.232.36' AND pool_key = '038153' AND username = '?AZq?/?'' AND callingstationid = 'username' AND framedipaddress = '10.11.10.28'' The errors Postgresql shows in the log are: 2007-02-05 14:22:59 EET saaas raduser ERROR: invalid byte sequence for encoding "UTF8": 0x85 2007-02-05 14:23:26 EET saaas raduser ERROR: invalid byte sequence for encoding "UTF8": 0x87 The actual query in question is: alive-update = "UPDATE radippool \ SET expiry_time = 'now'::timestamp(0) + '${lease-duration} seconds'::interval \ WHERE nasipaddress = '%{Nas-IP-Address}' AND pool_key = '${pool-key}' AND username = '%{SQL-User-Name}' \ AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'" Does anyone know what is going wrong? -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 4

Is CVS snapshot (20070201) a minimal stable?
by Geoffroy Arnoud 05 Feb '07

05 Feb '07

Hi again, I am trying to test the new features of FreeRADIUS V2 and I'am getting a seg fault, when sending just an Access-Request to FreeRADIUS. The only configuration change is that I set snmp = no. Here is the request I send: User-Name = "geoffroy@pc_gao" User-Password = "gaogreiogeriogjeriog" Framed-IP-Address = 10.0.0.1 NAS-Port = 0 Here is the ouput with radiusd -Xxx Mon Feb 5 16:54:29 2007 : Info: Ready to process requests. Mon Feb 5 16:54:29 2007 : Debug: Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 172.26.233.2 port 16385, id=162, length=83 User-Name = "geoffroy@pc_gao" User-Password = "gaogreiogeriogjeriog" Framed-IP-Address = 10.0.0.1 NAS-Port = 0 Mon Feb 5 16:54:33 2007 : Debug: Processing the authorize section of radiusd.conf Mon Feb 5 16:54:33 2007 : Debug: modcall: entering group authorize for request 0 Mon Feb 5 16:54:33 2007 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0 Does anyone have tested this snapshot? Thanks Geoff. ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

2 2

How doed eap-sim module obtain the triplets?
by lishuai zhao 05 Feb '07

05 Feb '07

Hi, all: I want to analyze the source code eap-sim part in FreeRADIUS. As we know, the eap-sim needs server triplets. My questions are? (1) How the triplets were obtained? (2) The place that the triplets were obtained in the source code? (3) Can triplets obtained from exterior? Thank you!!!!

1 0

Automatic report from sources (radiusd) between 04.02.2007 - 05.02.2007 GMT
by Automatic cvs log generator 05 Feb '07

05 Feb '07

CVS log entries from 04.02.2007 (Sun) 09:00:01 - 05.02.2007 (Mon) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/suse/radiusd-pam; Revisions: 1.4, 1.2.4.1.2.1 File: radiusd/src/main/Makefile.in; Revisions: 1.63, 1.27.2.5.2.5 File: radiusd/src/modules/rlm_acctlog/configure; Revisions: 1.1 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.19 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.239, 1.188.2.4.2.16 File: radiusd/src/modules/stable; Revisions: 1.17 ===================================================== Combined list of identical log entries ===================================================== Description: Add -pie patch thanks to SUSE Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.63; Date: 2007/02/04 14:39:46; Author: pnixon; Lines: (+2 -2) File: radiusd/src/main/Makefile.in; Revision: 1.27.2.5.2.5; Date: 2007/02/04 14:39:50; Author: pnixon; Lines: (+2 -2) ------------------------------- Description: Applied radiusd-pamd.diff. thanks to SUSE Modified files: File: radiusd/suse/radiusd-pam; Revision: 1.4; Date: 2007/02/04 15:10:08; Author: pnixon; Lines: (+1 -1) File: radiusd/suse/radiusd-pam; Revision: 1.2.4.1.2.1; Date: 2007/02/04 15:10:11; Author: pnixon; Lines: (+1 -1) ------------------------------- Description: Apply SUSE's edir.patch to explicitly set edir_account_policy_check=no. Wont affect no edir users and saves a patch for SUSE Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.239; Date: 2007/02/04 15:28:56; Author: pnixon; Lines: (+2 -2) File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.16; Date: 2007/02/04 15:28:46; Author: pnixon; Lines: (+2 -2) ===================================================== Log entries ===================================================== Description: Add configure to the tree Modified files: File: radiusd/src/modules/rlm_acctlog/configure; Revision: 1.1; Date: 2007/02/05 08:43:32; Author: pnixon; ------------------------------- Description: Change the order back. Turns out that we get unwanted No Pool-Name defined logs even with static ips. oops Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.19; Date: 2007/02/04 23:04:30; Author: pnixon; Lines: (+9 -9) ------------------------------- Description: Add sqlippool and acctlog to the list of stable modules Modified files: File: radiusd/src/modules/stable; Revision: 1.17; Date: 2007/02/04 17:12:06; Author: pnixon; Lines: (+3 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/radiusd.conf.in Revisions: 1.239, 1.188.2.4.2.16 Authors: pnixon (+2 -2), pnixon (+2 -2) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.63, 1.27.2.5.2.5 Authors: pnixon (+2 -2), pnixon (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_acctlog/configure Revisions: 1.1 Authors: pnixon ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.19 Authors: pnixon (+9 -9) ------------------------------- File: radiusd/src/modules/stable Revisions: 1.17 Authors: pnixon (+3 -1) ------------------------------- File: radiusd/suse/radiusd-pam Revisions: 1.4, 1.2.4.1.2.1 Authors: pnixon (+1 -1), pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 03.02.2007 - 04.02.2007 GMT
by Automatic cvs log generator 04 Feb '07

04 Feb '07

CVS log entries from 03.02.2007 (Sat) 09:00:01 - 04.02.2007 (Sun) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c; Revisions: 1.3 File: radiusd/src/main/log.c; Revisions: 1.54 File: radiusd/raddb/experimental.conf; Revisions: 1.36 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.18, 1.17, 1.16 File: radiusd/src/include/radiusd.h; Revisions: 1.213 ===================================================== Combined list of identical log entries ===================================================== Description: Add new log type (L_ACCT) and use it in rlm_acctlog Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.213; Date: 2007/02/03 23:09:52; Author: pnixon; Lines: (+3 -2) File: radiusd/src/main/log.c; Revision: 1.54; Date: 2007/02/03 23:09:52; Author: pnixon; Lines: (+6 -2) File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c; Revision: 1.3; Date: 2007/02/03 23:09:52; Author: pnixon; Lines: (+2 -2) ===================================================== Log entries ===================================================== Description: Add Acct-Session-Time to Stop logs and adjust other queries slightly Modified files: File: radiusd/raddb/experimental.conf; Revision: 1.36; Date: 2007/02/03 23:08:44; Author: pnixon; Lines: (+3 -3) ------------------------------- Description: Fix spelling in comments Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.18; Date: 2007/02/03 22:13:43; Author: pnixon; Lines: (+3 -3) ------------------------------- Description: Return RLM_MODULE_FAIL instead of RLM_MODULE_NOOP if there is no SQL socket Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.17; Date: 2007/02/03 19:19:04; Author: pnixon; Lines: (+3 -3) ------------------------------- Description: Switch the order of Framed-IP-Address and Pool-Name check. May make a small speed increase for those with a mix of static and dynamic addresses Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.16; Date: 2007/02/03 19:03:52; Author: pnixon; Lines: (+9 -9) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/experimental.conf Revisions: 1.36 Authors: pnixon (+3 -3) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.213 Authors: pnixon (+3 -2) ------------------------------- File: radiusd/src/main/log.c Revisions: 1.54 Authors: pnixon (+6 -2) ------------------------------- File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c Revisions: 1.3 Authors: pnixon (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.18, 1.17, 1.16 Authors: pnixon (+3 -3), pnixon (+3 -3), pnixon (+9 -9) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Question about rad_fork
by Garber, Neal 01 Feb '07

01 Feb '07

While reviewing rad_fork, as part of an enhancement I'm working on, I found something questionable. After the call to fork, it tests if child_pid != 0 (to see if the parent is the process executing, I presume). If true, then, the child_pid is added to the thread pool and the thread pool mutex is unlocked. However, if the fork failed, -1 is returned (and stored in child_pid), which I believe will then be added to the thread pool (because -1 != 0 and there isn't an explicit test for fork success/failure). Shouldn't there be a test for fork success (child_pid > 0) before adding to the thread pool? Perhaps this isn't a big deal because fork probably doesn't fail that often. But, it isn't clear to me what would happen in reap_children when it calls waitpid with -1 as this tells waitpid to return status for any child. Am I missing something? If not, and you want me to submit a bug report with the minor code change, let me know..

4 9

RFC 3748 compliancy
by Geoffroy Arnoud 01 Feb '07

01 Feb '07

hi all, I took a look at EAP method source code (even if crypto is not my speciality), and I'm wondering if all EAP methods shipped into freeRADIUS are compliant with RFC3748, regarding MSK and EMSK generation? This RFC states that "EAP method supporting key derivation MUST export a Master Session Key (MSK) of at least 64 octets, and an Extended Master Session Key (EMSK) of at least 64 octets." (§ 7.10) Which are the EAP methods that supports key derivation? And regarding other EAP methods, is there a way to add EMSK generation (maybe this is a stupid question)? I need those answers to see if FreeRADIUS would be able to act as a EAP RADIUS server compliant with WiMAX NWG stage 3. Many thanks for your answers Geoff. ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

2 2

Automatic report from sources (radiusd) between 30.01.2007 - 01.02.2007 GMT
by Automatic cvs log generator 01 Feb '07

01 Feb '07

CVS log entries from 30.01.2007 (Tue) 09:00:00 - 01.02.2007 (Thu) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.32 File: radiusd/src/lib/valuepair.c; Revisions: 1.82.2.1.2.5 File: radiusd/share/dictionary.asn; Revisions: 1.1.2.2 File: radiusd/share/dictionary; Revisions: 1.93.2.5.2.8 File: radiusd/src/main/conffile.c; Revisions: 1.142, 1.100.2.1.2.2 File: radiusd/src/lib/dict.c; Revisions: 1.96, 1.50.2.4.2.14 File: radiusd/redhat/freeradius.spec; Revisions: 1.23 ===================================================== Combined list of identical log entries ===================================================== Description: Add ASN dictionary, and include it Modified files: File: radiusd/share/dictionary; Revision: 1.93.2.5.2.8; Date: 2007/01/30 10:55:00; Author: aland; Lines: (+2 -1) File: radiusd/share/dictionary.asn; Revision: 1.1.2.2; Date: 2007/01/30 10:55:00; Author: aland; Lines: (+93 -0) ===================================================== Log entries ===================================================== Description: Updated for latest changes Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.32; Date: 2007/01/30 13:11:54; Author: aland; Lines: (+15 -2) ------------------------------- Description: List include files as being OK to install Modified files: File: radiusd/redhat/freeradius.spec; Revision: 1.23; Date: 2007/01/30 15:46:57; Author: aland; Lines: (+1 -0) ------------------------------- Description: Don't allow globally writable dictionaries. This allows any user to control the behavior of the server. Modified files: File: radiusd/src/lib/dict.c; Revision: 1.96; Date: 2007/01/30 13:02:05; Author: aland; Lines: (+14 -2) ------------------------------- Description: Die if we see globally writable dictionaries. That lets any user control the server Modified files: File: radiusd/src/lib/dict.c; Revision: 1.50.2.4.2.14; Date: 2007/01/30 13:00:44; Author: aland; Lines: (+14 -2) ------------------------------- Description: Increase the size of the value buffer to allow parsing octet strings of "0x" + (253 * 2) bytes Modified files: File: radiusd/src/lib/valuepair.c; Revision: 1.82.2.1.2.5; Date: 2007/01/30 12:58:23; Author: aland; Lines: (+3 -3) ------------------------------- Description: Don't allow globally readable or writeable configuration files. Modified files: File: radiusd/src/main/conffile.c; Revision: 1.142; Date: 2007/01/30 13:10:02; Author: aland; Lines: (+23 -12) ------------------------------- Description: Don't start if the config files are globally readable or writable. Writable means that anyone can execute programs as the server. Readable means that anyone can read the shared secrets, and spoof the server Modified files: File: radiusd/src/main/conffile.c; Revision: 1.100.2.1.2.2; Date: 2007/01/30 13:04:40; Author: aland; Lines: (+32 -16) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.32 Authors: aland (+15 -2) ------------------------------- File: radiusd/redhat/freeradius.spec Revisions: 1.23 Authors: aland (+1 -0) ------------------------------- File: radiusd/share/dictionary Revisions: 1.93.2.5.2.8 Authors: aland (+2 -1) ------------------------------- File: radiusd/share/dictionary.asn Revisions: 1.1.2.2 Authors: aland (+93 -0) ------------------------------- File: radiusd/src/lib/dict.c Revisions: 1.96, 1.50.2.4.2.14 Authors: aland (+14 -2), aland (+14 -2) ------------------------------- File: radiusd/src/lib/valuepair.c Revisions: 1.82.2.1.2.5 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.142, 1.100.2.1.2.2 Authors: aland (+23 -12), aland (+32 -16) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Acct-Status-Type block
by Peter Nixon 01 Feb '07

01 Feb '07

It just occurred to me that it would be pretty cool to be able to do: accounting { Acct-Status-Type Stop { ## Log stop packets to disk stop_log } } In the same manner as: post-auth { Post-Auth-Type REJECT { ## Log authentication rejects to disk reply_log } } Is there any way to do this at present (short of writing a custom module)? Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 2