February 2007 - Freeradius-Devel - lists.freeradius.org

How does EAP-SIM module decide whether read keys from file or calculate by itself?
by lishuai zhao 06 Feb '07

06 Feb '07

Hi, all After I studied the EAP-SIM and EAP-AKA parts, I have some doubts and questions: 1.I think the function eap_sim_sendchallenge is to calculate keys and send to authenticator, then authenticator forward it to the client. 2.I think the function process_eap_sim_challenge is to check the response and to decide weather to response with EAP-Success. 3.As said in 1, the eap_sim_sendchallenge can calculate keys itself, and also the rlm_sim_file module makes it can read keys from file. How to decide which method to use? Waiting for your replies, thank you! Best wishes! Lanny Zhao

1 0

Segmentation fault when processing SNMP
by Geoffroy Arnoud 06 Feb '07

06 Feb '07

Hi all, I am experiencing FreeRADIUS SNMP with FreeRADIUS CVS snapshot (20070201). I use Net-SNMP. FreeRADIUS makes a segmentation fault when processing the following SNMP request: snmpwalk -Cc -v 1 -m /PATH-TO-MIBs/RADIUS-AUTH-SERVER-MIB.txt -c verysecret 172.26.233.2 radiusAuth I use the configuration "out-of-the-box", except for snmp.conf, that is: smux_password = verysecret snmp_write_access = yes I run radiusd -X. Here is the output: [garnoud@loo sbin]$ ./radiusd -X Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/radiusd.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/proxy.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/clients.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/snmp.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/eap.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/sql.conf Config: including file: /users/garnoud/freeradius/V2-20070201/etc/raddb/sql/mysql-dialup.conf FreeRADIUS Version 2.0.0-pre0, for host i686-pc-linux-gnu, built on Feb 5 2007 at 14:49:12 Starting - reading configuration files ... read_config_files: reading dictionary main: prefix = "/users/garnoud/freeradius/V2-20070201" main: localstatedir = "/users/garnoud/freeradius/V2-20070201/var" main: logdir = "/users/garnoud/freeradius/V2-20070201/var/log/radius" main: libdir = "/users/garnoud/freeradius/V2-20070201/lib" main: radacctdir = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radacct" main: hostname_lookups = no main: snmp = yes main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/users/garnoud/freeradius/V2-20070201/var/run/radiusd/radiusd.pid" main: checkrad = "/users/garnoud/freeradius/V2-20070201/sbin/checkrad" main: debug_level = 0 main: proxy_requests = yes log: syslog_facility = "daemon" proxy: retry_delay = 5 proxy: retry_count = 3 proxy: default_fallback = yes proxy: dead_time = 120 proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no read_config_files: reading realms main: port = 1812 listen: type = "auth" listen: ipaddr = * listen: port = 0 listen: type = "acct" listen: ipaddr = * listen: port = 0 client: secret = "testing123" client: shortname = "localhost" client: nastype = "other" radiusd: entering modules setup Module: Library search path is /users/garnoud/freeradius/V2-20070201/lib Module: Loaded exec exec: wait = yes exec: input_pairs = "request" exec: shell_escape = yes rlm_exec: wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded expiration expiration: reply-message = "Password Has Expired " Module: Instantiated expiration (expiration) Module: Loaded logintime logintime: reply-message = "You are calling outside your allowed timespan " logintime: minimum-timeout = 60 Module: Instantiated logintime (logintime) Module: Loaded PAP pap: encryption_scheme = "auto" pap: auto_header = no Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no Module: Instantiated mschap (mschap) Module: Loaded System unix: radwtmp = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radwtmp" Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/users/garnoud/freeradius/V2-20070201/etc/raddb/huntgroups" preprocess: hints = "/users/garnoud/freeradius/V2-20070201/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/users" files: acctusersfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/acct_users" files: preproxy_usersfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: header = "%t" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no detail: log_packet_header = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/users/garnoud/freeradius/V2-20070201/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Module: Loaded attr_filter attr_filter: attrsfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/attrs.accounting_response" attr_filter: key = "%{User-Name}" Module: Instantiated attr_filter (attr_filter.accounting_response) attr_filter: attrsfile = "/users/garnoud/freeradius/V2-20070201/etc/raddb/attrs.access_reject" attr_filter: key = "%{User-Name}" Module: Instantiated attr_filter (attr_filter.access_reject) main: smux_password = "verysecret" main: snmp_write_access = yes SMUX connect try 1 SMUX open oid: 1.3.6.1.4.1.3317.1.3.1 SMUX open progname: radiusd SMUX open password: verysecret SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 2 SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 2 Initializing the thread pool... Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 12 SMUX message received type: 67 rest len: 4 SMUX_RRSP SMUX_RRSP value: 0 errstat: 0 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 32 SMUX message received type: 161 rest len: 28 SMUX_GETNEXT SMUX GET message parse: len 28 SMUX GET reqid: 33 len: 25 SMUX GET errstat 0 len: 22 SMUX GET errindex 0 len: 19 SMUX var parse: len 19 SMUX var parse: type 48 len 15 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1 SMUX val_type: 5 ASN_NULL SMUX function call index is 1 SMUX GETRSP send SMUX GETRSP reqid: 33 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 128 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 34 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.1.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 1 SMUX function call index is 2 SMUX GETRSP send SMUX GETRSP reqid: 34 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 39 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 35 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.2.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 2 SMUX function call index is 3 SMUX GETRSP send SMUX GETRSP reqid: 35 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 39 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 36 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.3.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 3 SMUX function call index is 4 SMUX GETRSP send SMUX GETRSP reqid: 36 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 37 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.4.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 4 SMUX function call index is 5 SMUX GETRSP send SMUX GETRSP reqid: 37 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 38 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.5.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 5 SMUX function call index is 6 SMUX GETRSP send SMUX GETRSP reqid: 38 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 39 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.6.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 6 SMUX function call index is 7 SMUX GETRSP send SMUX GETRSP reqid: 39 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 40 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.7.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 7 SMUX function call index is 8 SMUX GETRSP send SMUX GETRSP reqid: 40 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 41 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.8.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 8 SMUX function call index is 9 SMUX GETRSP send SMUX GETRSP reqid: 41 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 42 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.9.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 9 SMUX function call index is 10 SMUX GETRSP send SMUX GETRSP reqid: 42 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 43 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.10.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 10 SMUX function call index is 11 SMUX GETRSP send SMUX GETRSP reqid: 43 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 44 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.11.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 11 SMUX function call index is 12 SMUX GETRSP send SMUX GETRSP reqid: 44 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 45 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.12.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 12 SMUX function call index is 13 SMUX GETRSP send SMUX GETRSP reqid: 45 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 46 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.13.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 13 SMUX function call index is 14 SMUX GETRSP send SMUX GETRSP reqid: 46 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 38 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 37 SMUX message received type: 161 rest len: 33 SMUX_GETNEXT SMUX GET message parse: len 33 SMUX GET reqid: 47 len: 30 SMUX GET errstat 0 len: 27 SMUX GET errindex 0 len: 24 SMUX var parse: len 24 SMUX var parse: type 48 len 20 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.14.0 SMUX val_type: 5 ASN_NULL SMUX function call index is 14 SMUX function call index is 2 SMUX GETRSP send SMUX GETRSP reqid: 47 SMUX GETRSP errstat: 0 SMUX GETRSP errindex: 0 SMUX getresp send: 59 Nothing to do. Sleeping until we see a request. SMUX read start SMUX read len: 39 SMUX message received type: 161 rest len: 35 SMUX_GETNEXT SMUX GET message parse: len 35 SMUX GET reqid: 48 len: 32 SMUX GET errstat 0 len: 29 SMUX GET errindex 0 len: 26 SMUX var parse: len 26 SMUX var parse: type 48 len 22 SMUX var parse: type must be 48 Request OID: 1.3.6.1.2.1.67.1.1.1.1.15.1.2.1 SMUX val_type: 5 ASN_NULL SMUX function call index is 2 SMUX function call index is 3 Segmentation fault Has anyone already encountered this issue? Best regards, Geoff. ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

4 11

freeradius-client debian files
by Jan Janak 06 Feb '07

06 Feb '07

Hello, Is anyone maintaining the Debian control files in freeradius-client library? I am the original author of the debian packaging files in radiusclient-ng and one of the maintainers of the package in Debian so I thought I could update them for freeradius-client if nobody is working on that. Jan.

3 3

Automatic report from sources (radiusd) between 05.02.2007 - 06.02.2007 GMT
by Automatic cvs log generator 06 Feb '07

06 Feb '07

CVS log entries from 05.02.2007 (Mon) 09:00:01 - 06.02.2007 (Tue) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.21, 1.20 File: radiusd/raddb/sqlippool.conf; Revisions: 1.8 ===================================================== Combined list of identical log entries ===================================================== Description: Added new option sqlippool_log_clear to log when an IP address is deallocated Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.8; Date: 2007/02/05 17:57:27; Author: pnixon; Lines: (+6 -3) File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.21; Date: 2007/02/05 17:57:27; Author: pnixon; Lines: (+10 -4) ===================================================== Log entries ===================================================== Description: On query error, emit the failed query to the log so we can track it down. Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.20; Date: 2007/02/05 12:17:13; Author: pnixon; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/sqlippool.conf Revisions: 1.8 Authors: pnixon (+6 -3) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.21, 1.20 Authors: pnixon (+10 -4), pnixon (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Escaping of User Names
by Peter Nixon 06 Feb '07

06 Feb '07

Hi Guys Well, my lovely users have managed to find a bug. I am trying to figure out at present if I am doing something wrong in sqlippool or if there is a general problem with rlm_sql or more specifically rlm_sql_postgresql. I have 2 users sending me weird usernames. One is "?AZq?/?" and the other is "*?Z?�?-�" Now, I authorise my users on this system based on other attributes, and do no actual authentication so the username is ignored. I could just delete the username part from the queries and it would solve the problem for me, but thats beside the point. The main sql auth and acct s working fine, however sqlippool is throwing the following error: Error: sqlippool_command: database query error in: 'UPDATE radippool SET expiry_time = 'now'::timestamp(0) + '3600 seconds'::interval WHERE nasipaddress = '217.31.232.36' AND pool_key = '038153' AND username = '?AZq?/?'' AND callingstationid = 'username' AND framedipaddress = '10.11.10.28'' The errors Postgresql shows in the log are: 2007-02-05 14:22:59 EET saaas raduser ERROR: invalid byte sequence for encoding "UTF8": 0x85 2007-02-05 14:23:26 EET saaas raduser ERROR: invalid byte sequence for encoding "UTF8": 0x87 The actual query in question is: alive-update = "UPDATE radippool \ SET expiry_time = 'now'::timestamp(0) + '${lease-duration} seconds'::interval \ WHERE nasipaddress = '%{Nas-IP-Address}' AND pool_key = '${pool-key}' AND username = '%{SQL-User-Name}' \ AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'" Does anyone know what is going wrong? -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 4

Is CVS snapshot (20070201) a minimal stable?
by Geoffroy Arnoud 05 Feb '07

05 Feb '07

Hi again, I am trying to test the new features of FreeRADIUS V2 and I'am getting a seg fault, when sending just an Access-Request to FreeRADIUS. The only configuration change is that I set snmp = no. Here is the request I send: User-Name = "geoffroy@pc_gao" User-Password = "gaogreiogeriogjeriog" Framed-IP-Address = 10.0.0.1 NAS-Port = 0 Here is the ouput with radiusd -Xxx Mon Feb 5 16:54:29 2007 : Info: Ready to process requests. Mon Feb 5 16:54:29 2007 : Debug: Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 172.26.233.2 port 16385, id=162, length=83 User-Name = "geoffroy@pc_gao" User-Password = "gaogreiogeriogjeriog" Framed-IP-Address = 10.0.0.1 NAS-Port = 0 Mon Feb 5 16:54:33 2007 : Debug: Processing the authorize section of radiusd.conf Mon Feb 5 16:54:33 2007 : Debug: modcall: entering group authorize for request 0 Mon Feb 5 16:54:33 2007 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0 Does anyone have tested this snapshot? Thanks Geoff. ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

2 2

How doed eap-sim module obtain the triplets?
by lishuai zhao 05 Feb '07

05 Feb '07

Hi, all: I want to analyze the source code eap-sim part in FreeRADIUS. As we know, the eap-sim needs server triplets. My questions are? (1) How the triplets were obtained? (2) The place that the triplets were obtained in the source code? (3) Can triplets obtained from exterior? Thank you!!!!

1 0

Automatic report from sources (radiusd) between 04.02.2007 - 05.02.2007 GMT
by Automatic cvs log generator 05 Feb '07

05 Feb '07

CVS log entries from 04.02.2007 (Sun) 09:00:01 - 05.02.2007 (Mon) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/suse/radiusd-pam; Revisions: 1.4, 1.2.4.1.2.1 File: radiusd/src/main/Makefile.in; Revisions: 1.63, 1.27.2.5.2.5 File: radiusd/src/modules/rlm_acctlog/configure; Revisions: 1.1 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.19 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.239, 1.188.2.4.2.16 File: radiusd/src/modules/stable; Revisions: 1.17 ===================================================== Combined list of identical log entries ===================================================== Description: Add -pie patch thanks to SUSE Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.63; Date: 2007/02/04 14:39:46; Author: pnixon; Lines: (+2 -2) File: radiusd/src/main/Makefile.in; Revision: 1.27.2.5.2.5; Date: 2007/02/04 14:39:50; Author: pnixon; Lines: (+2 -2) ------------------------------- Description: Applied radiusd-pamd.diff. thanks to SUSE Modified files: File: radiusd/suse/radiusd-pam; Revision: 1.4; Date: 2007/02/04 15:10:08; Author: pnixon; Lines: (+1 -1) File: radiusd/suse/radiusd-pam; Revision: 1.2.4.1.2.1; Date: 2007/02/04 15:10:11; Author: pnixon; Lines: (+1 -1) ------------------------------- Description: Apply SUSE's edir.patch to explicitly set edir_account_policy_check=no. Wont affect no edir users and saves a patch for SUSE Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.239; Date: 2007/02/04 15:28:56; Author: pnixon; Lines: (+2 -2) File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.16; Date: 2007/02/04 15:28:46; Author: pnixon; Lines: (+2 -2) ===================================================== Log entries ===================================================== Description: Add configure to the tree Modified files: File: radiusd/src/modules/rlm_acctlog/configure; Revision: 1.1; Date: 2007/02/05 08:43:32; Author: pnixon; ------------------------------- Description: Change the order back. Turns out that we get unwanted No Pool-Name defined logs even with static ips. oops Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.19; Date: 2007/02/04 23:04:30; Author: pnixon; Lines: (+9 -9) ------------------------------- Description: Add sqlippool and acctlog to the list of stable modules Modified files: File: radiusd/src/modules/stable; Revision: 1.17; Date: 2007/02/04 17:12:06; Author: pnixon; Lines: (+3 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/radiusd.conf.in Revisions: 1.239, 1.188.2.4.2.16 Authors: pnixon (+2 -2), pnixon (+2 -2) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.63, 1.27.2.5.2.5 Authors: pnixon (+2 -2), pnixon (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_acctlog/configure Revisions: 1.1 Authors: pnixon ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.19 Authors: pnixon (+9 -9) ------------------------------- File: radiusd/src/modules/stable Revisions: 1.17 Authors: pnixon (+3 -1) ------------------------------- File: radiusd/suse/radiusd-pam Revisions: 1.4, 1.2.4.1.2.1 Authors: pnixon (+1 -1), pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 03.02.2007 - 04.02.2007 GMT
by Automatic cvs log generator 04 Feb '07

04 Feb '07

CVS log entries from 03.02.2007 (Sat) 09:00:01 - 04.02.2007 (Sun) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c; Revisions: 1.3 File: radiusd/src/main/log.c; Revisions: 1.54 File: radiusd/raddb/experimental.conf; Revisions: 1.36 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.18, 1.17, 1.16 File: radiusd/src/include/radiusd.h; Revisions: 1.213 ===================================================== Combined list of identical log entries ===================================================== Description: Add new log type (L_ACCT) and use it in rlm_acctlog Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.213; Date: 2007/02/03 23:09:52; Author: pnixon; Lines: (+3 -2) File: radiusd/src/main/log.c; Revision: 1.54; Date: 2007/02/03 23:09:52; Author: pnixon; Lines: (+6 -2) File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c; Revision: 1.3; Date: 2007/02/03 23:09:52; Author: pnixon; Lines: (+2 -2) ===================================================== Log entries ===================================================== Description: Add Acct-Session-Time to Stop logs and adjust other queries slightly Modified files: File: radiusd/raddb/experimental.conf; Revision: 1.36; Date: 2007/02/03 23:08:44; Author: pnixon; Lines: (+3 -3) ------------------------------- Description: Fix spelling in comments Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.18; Date: 2007/02/03 22:13:43; Author: pnixon; Lines: (+3 -3) ------------------------------- Description: Return RLM_MODULE_FAIL instead of RLM_MODULE_NOOP if there is no SQL socket Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.17; Date: 2007/02/03 19:19:04; Author: pnixon; Lines: (+3 -3) ------------------------------- Description: Switch the order of Framed-IP-Address and Pool-Name check. May make a small speed increase for those with a mix of static and dynamic addresses Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.16; Date: 2007/02/03 19:03:52; Author: pnixon; Lines: (+9 -9) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/experimental.conf Revisions: 1.36 Authors: pnixon (+3 -3) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.213 Authors: pnixon (+3 -2) ------------------------------- File: radiusd/src/main/log.c Revisions: 1.54 Authors: pnixon (+6 -2) ------------------------------- File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c Revisions: 1.3 Authors: pnixon (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.18, 1.17, 1.16 Authors: pnixon (+3 -3), pnixon (+3 -3), pnixon (+9 -9) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Question about rad_fork
by Garber, Neal 01 Feb '07

01 Feb '07

While reviewing rad_fork, as part of an enhancement I'm working on, I found something questionable. After the call to fork, it tests if child_pid != 0 (to see if the parent is the process executing, I presume). If true, then, the child_pid is added to the thread pool and the thread pool mutex is unlocked. However, if the fork failed, -1 is returned (and stored in child_pid), which I believe will then be added to the thread pool (because -1 != 0 and there isn't an explicit test for fork success/failure). Shouldn't there be a test for fork success (child_pid > 0) before adding to the thread pool? Perhaps this isn't a big deal because fork probably doesn't fail that often. But, it isn't clear to me what would happen in reap_children when it calls waitpid with -1 as this tells waitpid to return status for any child. Am I missing something? If not, and you want me to submit a bug report with the minor code change, let me know..

4 9