March 2007 - Freeradius-Devel - lists.freeradius.org

radeapclient
by ashola ashola 04 Apr '07

04 Apr '07

Please, is there any one who can help me to learn how to use radeapclient in order to make EAP-MD5 request Thanks in Advance Ashola --------------------------------- Don't be flakey. Get Yahoo! Mail for Mobile and always stay connected to friends.

2 3

Automatic report from sources (radiusd) between 30.03.2007 - 31.03.2007 GMT
by Automatic cvs log generator 31 Mar '07

31 Mar '07

CVS log entries from 30.03.2007 (Fri) 08:00:01 - 31.03.2007 (Sat) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/raddb/Makefile; Revisions: 1.8.4.4 ===================================================== Log entries ===================================================== Description: otppasswd.sample is no longer used. Modified files: File: radiusd/raddb/Makefile; Revision: 1.8.4.4; Date: 2007/03/30 13:47:05; Author: nbk; Lines: (+7 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/Makefile Revisions: 1.8.4.4 Authors: nbk (+7 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Radius requests
by Manuel Sánchez Cuenca 28 Mar '07

28 Mar '07

Hello all, does anybody knows if it is possible to know if a Radius Access-Request comes directly from an Access Point or from another Radius server? Thanks in advance. -- ----------------------------- Manuel Sanchez Cuenca Departamento de Ingenieria de la Informacion y las Comunicaciones Facultad de Informatica. Universidad de Murcia Campus de Espinardo - 30080 Murcia (SPAIN) Tel.: +34-968-364644 Fax: +34-968-364151 email: msc(a)dif.um.es | manuelsc(a)um.es url: http://libra.inf.um.es/~lolo

2 1

Cleaning up the "realms"
by Alan DeKok 28 Mar '07

28 Mar '07

I'm getting close to being able to commit some of the massive changes I've been talking about. No "magic" features yet, but the code is much better. However... as part of the changes, I think I've got to clean up the handling of realms. With a bit more work, I think I can make the old-style "realms" configurations map to the new method when the server starts up. The more complicated piece is the "realms" module. The whole "ignore_null" and "ignore_default" configuration is wrong. It can probably be done via the new "if/then/else" in the authorize section. I'll see if I can figure out a decent way of getting that to work. I'd also like to move the rlm_realm configs prefix/suffix && "delimiter" to the individual "realms" section in proxy.conf, but that might break things. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog

4 8

FreeSWITCH Core Dump
by Peter Nixon 28 Mar '07

28 Mar '07

Hi Guys I managed to track down the core dump I was seeing. It occurs whenever I use dingaling with mod_cdr loaded. If mod_cdr is not loaded it doesn't crash. I included a backtrace below (without symbols) and will followup with one with symbols included shortly.. Cheers Peter # gdb /opt/freeswitch/bin/freeswitch core.7413 GNU gdb 6.4 Copyright 2005 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i586-suse-linux"...Using host libthread_db library "/lib/libthread_db.so.1". Core was generated by `/opt/freeswitch/bin/freeswitch'. Program terminated with signal 11, Segmentation fault. warning: Can't read pathname for load map: Input/output error. Reading symbols from /opt/freeswitch/lib/libfreeswitch.so.1...Reading symbols from /usr/lib/debug/opt/freeswitch/lib/libfreeswitch.so.1.0.0.debug...done. done. Loaded symbols for /opt/freeswitch/lib/libfreeswitch.so.1 Reading symbols from /usr/lib/libsqlite3.so.0...done. Loaded symbols for /usr/lib/libsqlite3.so.0 Reading symbols from /lib/libm.so.6...done. Loaded symbols for /lib/libm.so.6 Reading symbols from /lib/librt.so.1...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libcrypt.so.1...done. Loaded symbols for /lib/libcrypt.so.1 Reading symbols from /lib/libpthread.so.0...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /opt/freeswitch/mod/mod_console.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_console.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_console.so Reading symbols from /opt/freeswitch/mod/mod_syslog.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_syslog.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_syslog.so Reading symbols from /opt/freeswitch/mod/mod_enum.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_enum.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_enum.so Reading symbols from /opt/freeswitch/mod/mod_xml_rpc.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_xml_rpc.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_xml_rpc.so Reading symbols from /opt/freeswitch/mod/mod_cdr.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_cdr.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_cdr.so Reading symbols from /usr/lib/libstdc++.so.6...done. Loaded symbols for /usr/lib/libstdc++.so.6 Reading symbols from /lib/libgcc_s.so.1...done. Loaded symbols for /lib/libgcc_s.so.1 Reading symbols from /opt/freeswitch/mod/mod_dingaling.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_dingaling.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_dingaling.so Reading symbols from /usr/lib/libgnutls.so.12...done. Loaded symbols for /usr/lib/libgnutls.so.12 Reading symbols from /lib/libz.so.1...done. Loaded symbols for /lib/libz.so.1 Reading symbols from /usr/lib/libgcrypt.so.11...done. Loaded symbols for /usr/lib/libgcrypt.so.11 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /usr/lib/libgpg-error.so.0...done. Loaded symbols for /usr/lib/libgpg-error.so.0 Reading symbols from /opt/freeswitch/mod/mod_sofia.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_sofia.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_sofia.so Reading symbols from /usr/lib/libssl.so.0.9.8...done. Loaded symbols for /usr/lib/libssl.so.0.9.8 Reading symbols from /usr/lib/libcrypto.so.0.9.8...done. Loaded symbols for /usr/lib/libcrypto.so.0.9.8 Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 Reading symbols from /lib/libnss_dns.so.2...done. Loaded symbols for /lib/libnss_dns.so.2 Reading symbols from /lib/libresolv.so.2...done. Loaded symbols for /lib/libresolv.so.2 Reading symbols from /opt/freeswitch/mod/mod_bridgecall.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_bridgecall.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_bridgecall.so Reading symbols from /opt/freeswitch/mod/mod_commands.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_commands.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_commands.so Reading symbols from /opt/freeswitch/mod/mod_conference.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_conference.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_conference.so Reading symbols from /opt/freeswitch/mod/mod_dptools.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_dptools.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_dptools.so Reading symbols from /opt/freeswitch/mod/mod_echo.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_echo.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_echo.so Reading symbols from /opt/freeswitch/mod/mod_playback.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_playback.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_playback.so Reading symbols from /opt/freeswitch/mod/mod_dialplan_xml.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_dialplan_xml.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_dialplan_xml.so Reading symbols from /opt/freeswitch/mod/mod_g711.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_g711.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_g711.so Reading symbols from /opt/freeswitch/mod/mod_gsm.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_gsm.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_gsm.so Reading symbols from /opt/freeswitch/mod/mod_ilbc.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_ilbc.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_ilbc.so Reading symbols from /opt/freeswitch/mod/mod_l16.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_l16.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_l16.so Reading symbols from /opt/freeswitch/mod/mod_speex.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_speex.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_speex.so Reading symbols from /opt/freeswitch/mod/mod_sndfile.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_sndfile.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_sndfile.so Reading symbols from /opt/freeswitch/mod/mod_native_file.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_native_file.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_native_file.so Reading symbols from /opt/freeswitch/mod/mod_softtimer.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_softtimer.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_softtimer.so Reading symbols from /opt/freeswitch/mod/mod_say_en.so...Reading symbols from /usr/lib/debug/opt/freeswitch/mod/mod_say_en.so.debug...done. done. Loaded symbols for /opt/freeswitch/mod/mod_say_en.so #0 0xb7ef5d99 in switch_channel_get_caller_extension () from /opt/freeswitch/lib/libfreeswitch.so.1 (gdb) bt full #0 0xb7ef5d99 in switch_channel_get_caller_extension () from /opt/freeswitch/lib/libfreeswitch.so.1 No symbol table info available. #1 0xb52d76a4 in CDRContainer::add_cdr (this=0x8085538, session=0x80ea910) at cdrcontainer.cpp:217 newchannel = (switch_mod_cdr_newchannel_t *) 0x80adca8 __func__ = "add_cdr" __PRETTY_FUNCTION__ = "void CDRContainer::add_cdr(switch_core_session_t*)" #2 0xb52d7505 in my_on_hangup (session=0x80ea910) at mod_cdr.cpp:119 No locals. #3 0xb7effa4e in switch_core_session_run () from /opt/freeswitch/lib/libfreeswitch.so.1 No symbol table info available. #4 0xb7f00b01 in switch_core_session_thread () from /opt/freeswitch/lib/libfreeswitch.so.1 No symbol table info available. #5 0xb7f370b8 in dummy_worker () from /opt/freeswitch/lib/libfreeswitch.so.1 No symbol table info available. #6 0xb7e0234b in start_thread () from /lib/libpthread.so.0 No symbol table info available. #7 0xb7d9a65e in clone () from /lib/libc.so.6 No symbol table info available. -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

1 1

Automatic report from sources (radiusd) between 27.03.2007 - 28.03.2007 GMT
by Automatic cvs log generator 28 Mar '07

28 Mar '07

CVS log entries from 27.03.2007 (Tue) 08:00:01 - 28.03.2007 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ippool/rlm_ippool_tool.c; Revisions: 1.16 File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.164 ===================================================== Log entries ===================================================== Description: with strlcpy, we don't need an extra -1 Modified files: File: radiusd/src/modules/rlm_ippool/rlm_ippool_tool.c; Revision: 1.16; Date: 2007/03/27 08:35:26; Author: aland; Lines: (+6 -8) ------------------------------- Description: use sizeof(), rather than hard-coded number Modified files: File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.164; Date: 2007/03/27 08:39:15; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_ippool/rlm_ippool_tool.c Revisions: 1.16 Authors: aland (+6 -8) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.164 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Failed to link to module "rlm_name" : file not found
by lishuai zhao 28 Mar '07

28 Mar '07

Hi, everyone: I added a new module named rlm_name to FreeRADIUS and produced makefile as rlm_example, also I add rlm_name to src/modules/stable. When I do ./configure; make; make install, all the process are sucessful. If I do not use module rlm_name, the radius sever can run normally. But when I add rlm_name in the modules {} of radiusd.conf and run ./radiusd -X, it says Failed to link to module "rlm_name" : file not found. All the .la .lo and .a files generated can be found in /usr/local/lib. I have been searching mailing list for a long time, but every method is useless to me. Any one can help me? Thank you very much!

2 2

Automatic report from sources (radiusd) between 26.03.2007 - 27.03.2007 GMT
by Automatic cvs log generator 27 Mar '07

27 Mar '07

CVS log entries from 26.03.2007 (Mon) 08:00:01 - 27.03.2007 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.38 File: radiusd/configure.in; Revisions: 1.198.2.15.2.13 File: radiusd/src/modules/rlm_sql/sql.c; Revisions: 1.92, 1.79.2.3.2.2, 1.79.2.3.2.1 File: radiusd/debian/changelog; Revisions: 1.60.2.18.2.7 File: radiusd/configure; Revisions: 1.95.2.12.2.11 ===================================================== Combined list of identical log entries ===================================================== Description: Update version number Modified files: File: radiusd/configure; Revision: 1.95.2.12.2.11; Date: 2007/03/26 12:58:17; Author: aland; Lines: (+2 -2) File: radiusd/configure.in; Revision: 1.198.2.15.2.13; Date: 2007/03/26 12:58:16; Author: aland; Lines: (+2 -2) File: radiusd/debian/changelog; Revision: 1.60.2.18.2.7; Date: 2007/03/26 12:58:16; Author: aland; Lines: (+6 -0) File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.38; Date: 2007/03/26 12:58:40; Author: aland; Lines: (+12 -0) ===================================================== Log entries ===================================================== Description: port fix from branch_1_1 Modified files: File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.92; Date: 2007/03/26 09:49:19; Author: aland; Lines: (+8 -4) ------------------------------- Description: corrected typo Modified files: File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.79.2.3.2.2; Date: 2007/03/26 09:46:28; Author: aland; Lines: (+3 -3) ------------------------------- Description: close socket only if it's unconnected Modified files: File: radiusd/src/modules/rlm_sql/sql.c; Revision: 1.79.2.3.2.1; Date: 2007/03/26 09:45:04; Author: aland; Lines: (+7 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/configure Revisions: 1.95.2.12.2.11 Authors: aland (+2 -2) ------------------------------- File: radiusd/configure.in Revisions: 1.198.2.15.2.13 Authors: aland (+2 -2) ------------------------------- File: radiusd/debian/changelog Revisions: 1.60.2.18.2.7 Authors: aland (+6 -0) ------------------------------- File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.38 Authors: aland (+12 -0) ------------------------------- File: radiusd/src/modules/rlm_sql/sql.c Revisions: 1.92, 1.79.2.3.2.2, 1.79.2.3.2.1 Authors: aland (+8 -4), aland (+3 -3), aland (+7 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

PAM Module Patch and Feature
by David Mitchell 26 Mar '07

26 Mar '07

Greetings, I am working on using FreeRadius with token authentication and ran into a small snag. Under Linux, attempts to authenticate 'su' result in a query to the Radius server for the user 'root'. What we would like to happen is for the query to be for the requesting user. This is how the 'sudo' application handles it's PAM requests. I of course do not want to change the default behavior of the module, so I added an option. I named it 'ruser' since it works by causing the PAM module to authenticate using the value of PAM_RUSER (requesting user). The 'su' application provides this value, so that's an easy place to grab it from. I expect that this patch may need more work. It doesn't do much sanity checking on the values of PAM_RUSER. There may be applications which don't fill it in properly. I haven't checked extensively. Also, I worked from the Debian source version which includes a patch for CVE-2005-0108: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0108 I'm not sure who maintains the PAM portion of FreeRadius, so I'm throwing this out for discussion. Does this seem like something which could be included in the distribution? Or should I plan on using a locally patched version for the foreseeable future? -- ----------------------------------------------------------------- | David Mitchell (mitchell(a)ucar.edu) Network Engineer IV | | Tel: (303) 497-1845 National Center for | | FAX: (303) 497-1818 Atmospheric Research | ----------------------------------------------------------------- --- ./pam_radius_auth.c 2007-03-12 10:18:18.000000000 -0600 +++ ./libpam-radius-auth-1.3.16/pam_radius_auth.c 2007-03-15 13:43:45.000000000 -0600 @@ -134,6 +134,9 @@ } else if (!strcmp(*argv, "accounting_bug")) { conf->accounting_bug = TRUE; + } else if (!strcmp(*argv, "ruser")) { + ctrl |= PAM_RUSER_ARG; + conf->ruser = 1; } else if (!strcmp(*argv, "debug")) { ctrl |= PAM_DEBUG_ARG; conf->debug = 1; @@ -1051,6 +1054,7 @@ pam_sm_authenticate(pam_handle_t *pamh,int flags,int argc,CONST char **argv) { CONST char *user; + CONST char **userinfo; char *password = NULL; CONST char *rhost; char *resp2challenge = NULL; @@ -1084,6 +1088,24 @@ DPRINT(LOG_DEBUG, "Got user name %s", user); + + retval = pam_get_item(pamh, PAM_USER, (CONST void **) &userinfo); + PAM_FAIL_CHECK; + DPRINT(LOG_DEBUG, "Got PAM_USER name %s", userinfo); + retval = pam_get_item(pamh, PAM_RUSER, (CONST void **) &userinfo); + PAM_FAIL_CHECK; + DPRINT(LOG_DEBUG, "Got PAM_RUSER name %s", userinfo); + if (ctrl & PAM_RUSER_ARG) { + if (!strncmp("root",user,5)) { + user = userinfo; + DPRINT(LOG_DEBUG, "Username now %s from ruser", user); + } else { + DPRINT(LOG_DEBUG, "Skipping ruser for non-root auth"); + }; + }; + + + /* * Get the IP address of the authentication server * Then, open a socket, and bind it to a port @@ -1176,6 +1198,9 @@ goto error; } + if (a_reply->length < 2 || a_state->length < 2) + goto error; + memcpy(challenge, a_reply->data, a_reply->length - 2); challenge[a_reply->length - 2] = 0; --- ./pam_radius_auth.h 2007-03-12 10:18:11.000000000 -0600 +++ ./libpam-radius-auth-1.3.16/pam_radius_auth.h 2007-03-13 13:44:09.000000000 -0600 @@ -51,6 +51,7 @@ int accounting_bug; int sockfd; int debug; + int ruser; } radius_conf_t; @@ -82,6 +83,7 @@ #define PAM_SKIP_PASSWD 2 #define PAM_USE_FIRST_PASS 4 #define PAM_TRY_FIRST_PASS 8 +#define PAM_RUSER_ARG 16 #define PAM_RETRY 0x30

4 26

Re: Re: Firebird sql driver
by Vitaly Bodzhgua 26 Mar '07

26 Mar '07

2 Nicolas Baradakis Thanks for your instructions. I'll try them. Sorry, if this answer starts as new message - I do not know how to answer to a certain letter in a digest yet.

1 0