April 2007 - Freeradius-Devel - lists.freeradius.org

Re: rlm_sql: %{sql:<long query>} - length limit
by Kostas Kalevras 22 Apr '07

22 Apr '07

O/H Alan DeKok έγραψε: > Milan Holub wrote: > >> ==> I've increased the value of MAX_STRING_LEN to 1024. Here is a patch: >> > > It will break almost everything in the server. > Moved to freeradius-devel... The problem still stands that we cannot have xlat strings more than MAX_STRING_LEN. freeradius should impose a string length restriction on the xlat output, not on the input. Maybe we could dynamically allocate an input string if we see backquotes and store the xlated output in VALUE_PAIR->data? > >> My query works now but I'm not sure whether this change might not have >> some unwanted impact somewhere else since the constant is used on many >> places... Alan? >> > > It's used all over the place, for things other than queries. Do NOT > change it! > > Alan DeKok. > -- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > Kostas Kalevras - Network Operations Center, NTUA http://kkalev.wordpress.com/

4 5

rlm_sqlippool's %I
by Paul TBBle Hampson 22 Apr '07

22 Apr '07

Hi, (Been a while since I last checked this list, nearly 12 months...) I was just having a look at moving to rlm_sqlippool, and noticed the use of %I in allocate_update to interpolate the Framed IP Address returned by the allocate_find query. Is there a reason I'm overlooking for not just adding the Framed-IP-Address valuepair to the reply packet before calling the allocate_update query, allowing %{Framed-IP-Address} to be used instead? -- ----------------------------------------------------------- Paul "TBBle" Hampson, B.Sc, LPI, MCSE On-hiatus Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) Paul.Hampson(a)Pobox.Com Of course Pacman didn't influence us as kids. If it did, we'd be running around in darkened rooms, popping pills and listening to repetitive music. -- Kristian Wilson, Nintendo, Inc, 1989 License: http://creativecommons.org/licenses/by/2.1/au/ -----------------------------------------------------------

1 0

Automatic report from sources (radiusd) between 20.04.2007 - 21.04.2007 GMT
by Automatic cvs log generator 21 Apr '07

21 Apr '07

CVS log entries from 20.04.2007 (Fri) 08:00:01 - 21.04.2007 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/valuepair.c; Revisions: 1.83 File: radiusd/src/main/listen.c; Revisions: 1.63 File: radiusd/src/include/radiusd.h; Revisions: 1.227, 1.226 File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revisions: 1.37 File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revisions: 1.28 File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c; Revisions: 1.36 File: radiusd/src/modules/rlm_counter/rlm_counter.c; Revisions: 1.61 File: radiusd/src/modules/rlm_expr/paircmp.c; Revisions: 1.13 File: radiusd/src/main/xlat.c; Revisions: 1.118 File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.51 File: radiusd/src/modules/rlm_realm/rlm_realm.c; Revisions: 1.66, 1.65 File: radiusd/raddb/eap.conf; Revisions: 1.11, 1.4.4.5 File: radiusd/src/lib/radius.c; Revisions: 1.202, 1.201 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revisions: 1.41, 1.21.4.14 File: radiusd/src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c; Revisions: 1.7 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.28 File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revisions: 1.59 File: radiusd/src/modules/rlm_expiration/rlm_expiration.c; Revisions: 1.15 File: radiusd/src/modules/rlm_ippool/rlm_ippool.c; Revisions: 1.45 File: radiusd/src/main/event.c; Revisions: 1.23, 1.22 File: radiusd/src/include/libradius.h; Revisions: 1.137, 1.136, 1.135, 1.134 File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c; Revisions: 1.76 File: radiusd/src/modules/rlm_logintime/rlm_logintime.c; Revisions: 1.15 ===================================================== Combined list of identical log entries ===================================================== Description: RADCLIENT is not const, as it gets updated for SNMP stats Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.226; Date: 2007/04/20 09:21:41; Author: aland; Lines: (+3 -3) File: radiusd/src/main/event.c; Revision: 1.23; Date: 2007/04/20 09:21:41; Author: aland; Lines: (+7 -6) ------------------------------- Description: Added rad_recv_header() function, which calls MSG_PEEK on the socket to get the header, and the source IP. This allows us to perform some basic sanity checks, like "known client" before we allocate memory for the packet. This slows the server down slightly for normal cases, but can greatly improve its robustness to DoS attacks. As of now, it logs *nothing* and allocates *no* memory on a DoS, so it should be able to deal with them pretty well. The rad_recv_header() function also returns the size of the packet (taken from the header), which can permit us in the future to minimize the number of memory allocations we make. Modified files: File: radiusd/src/include/libradius.h; Revision: 1.135; Date: 2007/04/20 08:48:54; Author: aland; Lines: (+4 -2) File: radiusd/src/lib/radius.c; Revision: 1.201; Date: 2007/04/20 08:48:54; Author: aland; Lines: (+86 -5) File: radiusd/src/main/listen.c; Revision: 1.63; Date: 2007/04/20 08:48:54; Author: aland; Lines: (+69 -45) ------------------------------- Description: Removed the "verified" field from RADIUS_PACKET, as we no longer accept old-style accounting packets Modified files: File: radiusd/src/include/libradius.h; Revision: 1.136; Date: 2007/04/20 09:26:00; Author: aland; Lines: (+3 -4) File: radiusd/src/lib/radius.c; Revision: 1.202; Date: 2007/04/20 09:26:00; Author: aland; Lines: (+18 -28) File: radiusd/src/main/xlat.c; Revision: 1.118; Date: 2007/04/20 09:26:01; Author: aland; Lines: (+3 -6) File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revision: 1.59; Date: 2007/04/20 09:26:02; Author: aland; Lines: (+7 -6) ------------------------------- Description: Note warnings if there's no DH, and how to fix it. Modified files: File: radiusd/raddb/eap.conf; Revision: 1.4.4.5; Date: 2007/04/20 11:58:45; Author: aland; Lines: (+8 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.41; Date: 2007/04/20 11:59:10; Author: aland; Lines: (+8 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.21.4.14; Date: 2007/04/20 11:58:46; Author: aland; Lines: (+7 -1) ------------------------------- Description: Use new radius_paircreate() function. also cleaned up wrong code in Novell's eDir solution, that put strings into vp_strvalue for integer types Modified files: File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c; Revision: 1.36; Date: 2007/04/20 14:31:32; Author: aland; Lines: (+6 -10) File: radiusd/src/modules/rlm_counter/rlm_counter.c; Revision: 1.61; Date: 2007/04/20 14:31:32; Author: aland; Lines: (+4 -12) File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revision: 1.28; Date: 2007/04/20 14:31:31; Author: aland; Lines: (+5 -12) File: radiusd/src/modules/rlm_expiration/rlm_expiration.c; Revision: 1.15; Date: 2007/04/20 14:31:32; Author: aland; Lines: (+5 -8) File: radiusd/src/modules/rlm_expr/paircmp.c; Revision: 1.13; Date: 2007/04/20 14:31:30; Author: aland; Lines: (+11 -9) File: radiusd/src/modules/rlm_ippool/rlm_ippool.c; Revision: 1.45; Date: 2007/04/20 14:31:32; Author: aland; Lines: (+8 -15) File: radiusd/src/modules/rlm_logintime/rlm_logintime.c; Revision: 1.15; Date: 2007/04/20 14:31:31; Author: aland; Lines: (+6 -7) File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.51; Date: 2007/04/20 14:31:29; Author: aland; Lines: (+7 -10) File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c; Revision: 1.76; Date: 2007/04/20 14:31:30; Author: aland; Lines: (+24 -41) File: radiusd/src/modules/rlm_realm/rlm_realm.c; Revision: 1.66; Date: 2007/04/20 14:31:30; Author: aland; Lines: (+5 -8) File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.37; Date: 2007/04/20 14:31:31; Author: aland; Lines: (+6 -7) File: radiusd/src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c; Revision: 1.7; Date: 2007/04/20 14:31:31; Author: aland; Lines: (+4 -14) File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.28; Date: 2007/04/20 14:31:30; Author: aland; Lines: (+4 -8) ------------------------------- Description: New radius_paircreate() function that takes a REQUEST* and a VALUE_PAIR**, along with the attr & type of paircreate(). It creates the pair (or exits if it can't, because it's OOM). then adds the pair to the VP**. This ends up removing a fair amount of code in the modules && server core, that did: vp = pairmake() if (!vp) { oom ... } pairadd() Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.227; Date: 2007/04/20 14:30:11; Author: aland; Lines: (+4 -2) File: radiusd/src/main/valuepair.c; Revision: 1.83; Date: 2007/04/20 14:30:11; Author: aland; Lines: (+28 -2) ===================================================== Log entries ===================================================== Description: Note command to create DH file Modified files: File: radiusd/raddb/eap.conf; Revision: 1.11; Date: 2007/04/20 11:48:40; Author: aland; Lines: (+7 -1) ------------------------------- Description: Can't remove lvalue completely until we've audited the code for all locations that assume they can write data to vp_strvalue of an integer/date/ipaddr type Modified files: File: radiusd/src/include/libradius.h; Revision: 1.137; Date: 2007/04/20 14:08:44; Author: aland; Lines: (+17 -5) ------------------------------- Description: Removed "lvalue" from the VALUE_PAIR structure. This will break many third-party modules. However, it enables us to pass the VALUE_PAIR_DATA structure around, and do comparisons on it, which should permit greater flexibility in the configuration. Modified files: File: radiusd/src/include/libradius.h; Revision: 1.134; Date: 2007/04/20 08:43:21; Author: aland; Lines: (+5 -6) ------------------------------- Description: run "can_handle_new_request" on all packets, not just ones which are completely new (i.e. for which there is no request in the request hash) Update "received_retransmit" to handle duplicate accounting packets. These should NOT happen, but the code now handles them. Modified files: File: radiusd/src/main/event.c; Revision: 1.22; Date: 2007/04/20 08:41:28; Author: aland; Lines: (+28 -6) ------------------------------- Description: IPv6 is now supported Modified files: File: radiusd/src/modules/rlm_realm/rlm_realm.c; Revision: 1.65; Date: 2007/04/20 13:19:27; Author: aland; Lines: (+2 -7) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/eap.conf Revisions: 1.11, 1.4.4.5 Authors: aland (+7 -1), aland (+8 -1) ------------------------------- File: radiusd/src/include/libradius.h Revisions: 1.137, 1.136, 1.135, 1.134 Authors: aland (+17 -5), aland (+3 -4), aland (+4 -2), aland (+5 -6) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.227, 1.226 Authors: aland (+4 -2), aland (+3 -3) ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.202, 1.201 Authors: aland (+18 -28), aland (+86 -5) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.23, 1.22 Authors: aland (+7 -6), aland (+28 -6) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.63 Authors: aland (+69 -45) ------------------------------- File: radiusd/src/main/valuepair.c Revisions: 1.83 Authors: aland (+28 -2) ------------------------------- File: radiusd/src/main/xlat.c Revisions: 1.118 Authors: aland (+3 -6) ------------------------------- File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c Revisions: 1.36 Authors: aland (+6 -10) ------------------------------- File: radiusd/src/modules/rlm_counter/rlm_counter.c Revisions: 1.61 Authors: aland (+4 -12) ------------------------------- File: radiusd/src/modules/rlm_detail/rlm_detail.c Revisions: 1.59 Authors: aland (+7 -6) ------------------------------- File: radiusd/src/modules/rlm_digest/rlm_digest.c Revisions: 1.28 Authors: aland (+5 -12) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Revisions: 1.41, 1.21.4.14 Authors: aland (+8 -2), aland (+7 -1) ------------------------------- File: radiusd/src/modules/rlm_expiration/rlm_expiration.c Revisions: 1.15 Authors: aland (+5 -8) ------------------------------- File: radiusd/src/modules/rlm_expr/paircmp.c Revisions: 1.13 Authors: aland (+11 -9) ------------------------------- File: radiusd/src/modules/rlm_ippool/rlm_ippool.c Revisions: 1.45 Authors: aland (+8 -15) ------------------------------- File: radiusd/src/modules/rlm_logintime/rlm_logintime.c Revisions: 1.15 Authors: aland (+6 -7) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.51 Authors: aland (+7 -10) ------------------------------- File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c Revisions: 1.76 Authors: aland (+24 -41) ------------------------------- File: radiusd/src/modules/rlm_realm/rlm_realm.c Revisions: 1.66, 1.65 Authors: aland (+5 -8), aland (+2 -7) ------------------------------- File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c Revisions: 1.37 Authors: aland (+6 -7) ------------------------------- File: radiusd/src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c Revisions: 1.7 Authors: aland (+4 -14) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.28 Authors: aland (+4 -8) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Patch to enhance Heimdal support in rlm_krb5
by Thomas Kula 20 Apr '07

20 Apr '07

Included is a patch that adds two enhancements to the Heimdal support in rlm_krb5: - Logging of the parsed name is changed so that if a user is using an instance the instance is logged. This threw me off when I was first setting up rlm_krb5, since I was using the kula/wireless(a)TPROA.NET and it was logging the parsed name as kula(a)TPROA.NET. - I've switched to using krb5_verify_user_opt and set up the options so that you can supply something other than the default service principal and can specify to use a keytab for verification that isn't the system default keytab. This patch has undergone some light testing with radclient, using all combinations of default/non-default service name and keytab. It was tested on a NetBSD 3.1 system using Heimdal 0.72. I suspect more recent versions of Heimdal would work with this just fine, but have not verified that. The patch is also located at http://kula.tproa.net/code/rlm_krb5.diff ##### begin patch ###### --- src/modules/rlm_krb5/rlm_krb5.c.orig 2005-12-19 17:21:37.000000000 -0500 +++ src/modules/rlm_krb5/rlm_krb5.c 2007-04-20 21:43:21.000000000 -0400 @@ -323,16 +323,41 @@ #else /* HEIMDAL_KRB5 */ /* validate user/pass, heimdal krb5 way */ -static int krb5_auth(void *instance, REQUEST *request) +static int krb5_auth(rlm_krb5_t *instance, REQUEST *request) { int r; - krb5_error_code ret; + krb5_error_code ret, ret2; krb5_ccache id; krb5_principal userP; krb5_context context = *((rlm_krb5_t *)instance)->context; /* copy data */ const char *user, *pass; + /* arbitrary 64-byte limit on service names; I've never seen a + service name this long, and hope never to. -srl */ + /* stolen from the above mit kerb stuff -- kula */ + + char service[64] = "host"; + char *servername = NULL; + char *princ_name; + + krb5_verify_opt krb_verify_options; + krb5_keytab keytab; + + if (instance->service_princ != NULL) { + servername = strchr(instance->service_princ, '/'); + if (servername != NULL) { + *servername = '\0'; + } + + strncpy(service,instance->service_princ,sizeof(service)); + service[sizeof(service)-1] = '\0'; + if (servername != NULL) { + *servername = '/'; + servername++; + } + } + /* * We can only authenticate user requests which HAVE * a User-Name attribute. @@ -375,26 +400,71 @@ /* * Heimdal krb5 verification */ - radlog(L_AUTH, "rlm_krb5: Parsed name is: %s@%s\n", - *userP->name.name_string.val, - userP->realm); + + + /* + * The following bit allows us to also log user/instance@REALM if someone + * logs in using an instance + */ + + ret = krb5_unparse_name(context, userP, &princ_name); + if ( ret != 0 ) { + radlog(L_AUTH, "rlm_krb5: krb5_unparse_name unparsable name\n"); + } else { + radlog(L_AUTH, "rlm_krb5: Parsed name is: %s\n", princ_name); + free(princ_name); + } krb5_cc_default(context, &id); - ret = krb5_verify_user(context, - userP, - id, - pass, 1, "radius"); - - if (ret == 0) - return RLM_MODULE_OK; - - radlog(L_AUTH, "rlm_krb5: failed verify_user: %s (%s@%s )", - error_message(ret), - *userP->name.name_string.val, - userP->realm); + /* Set up krb5_verify_user options */ + krb5_verify_opt_init(&krb_verify_options); + + krb5_verify_opt_set_ccache(&krb_verify_options, id); + + /* + * Resolve keytab name. This allows us to use something other than + * the default system keytab + */ + + if (instance->keytab != NULL) + { + ret = krb5_kt_resolve(context, instance->keytab, &keytab); + + if ( ret ) + { + radlog(L_AUTH, "rlm_krb: unable to resolve keytab %s: %s", + instance->keytab, error_message(ret)); + krb5_kt_close(context, keytab); + return RLM_MODULE_REJECT; + } + krb5_verify_opt_set_keytab(&krb_verify_options, keytab); + } + + /* Verify aquired credentials against the keytab */ + + krb5_verify_opt_set_secure(&krb_verify_options, 1); + + /* Allow us to use an arbitrary service name */ + + krb5_verify_opt_set_service(&krb_verify_options, service); + + + /* Verify the user, using the above set options */ + ret = krb5_verify_user_opt(context, userP, pass, &krb_verify_options); + + /* We are done with the keytab, close it */ + ret2 = krb5_kt_close(context, keytab); + + if (ret == 0) + return RLM_MODULE_OK; + + radlog(L_AUTH, "rlm_krb5: failed verify_user: %s (%s@%s )", + error_message(ret), + *userP->name.name_string.val, + userP->realm); - return RLM_MODULE_REJECT; + return RLM_MODULE_REJECT; } #endif /* HEIMDAL_KRB5 */ ##### end patch ##### -- Thomas L. Kula | kula(a)tproa.net

1 0

Status of changes
by Alan DeKok 20 Apr '07

20 Apr '07

I started to remove 'lvalue' from VALUE_PAIR, in the theory that we can use the union of data types for something else. It turns out we can't, at least until we audit the code for things that print to vp_strvalue for integer/date/ipaddr types. I've also started removing the references to "paircreate" from the server source, and replacing them with a wrapper function. It turns out that all of the calls in the core && modules did the same thing: vp = paircreate() if (!vp) OOM pairadd(...) So replacing all that with 1 line of code makes a difference. Plus, it centralizes the place where VP's are allocated (one function). It also passes the REQUEST* to that function, which lets us move to memory pools later. According to callgrind, memory free/alloc is a significant cost in the server (~15%). So fixing that will make a big difference. I plan on doing the same thing with pairmake(). Almost all of the calls to pairmake() are with fixed attribute names. So they should be replaced with calls to paircreate(), with the attribute number hard-coded in. It's a lot of repetitive grunt work, but it's laying the foundation for some useful changes in the future. I think I also have an idea for how HUP can be handled without killing the server, and without large amounts of complexity. More later, as I flesh it out. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog

1 0

eap.conf : Selection of TLS ciphersuite does not work
by Thomas Otto 20 Apr '07

20 Apr '07

Hi all, My question concerns the option in eap.conf that you can specify TLS ciphersuite(s) that the Server chooses for his ServerHello handshake message. But apparently I cant use all ciphersuites, for example the following one (found with 'man ciphers') TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA EDH-RSA-DES-CBC3-SHA I insert the line cipher_list = 'EDH-RSA-DES-CBC3-SHA' but freeradius (v.1.1.6) complains rlm_eap_tls: <<< TLS 1.0 Handshake [length 0060], ClientHello rlm_eap_tls: >>> TLS 1.0 Alert [length 0002], fatal handshake_failure TLS Alert write:fatal:handshake failure TLS_accept:error in SSLv3 read client hello C rlm_eap: SSL error error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Note that the ClientHello of wpa_supplicant contains this ciphersuite, see this snip from ethereal trace: Cipher Suites (26 suites) Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039) Cipher Suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x0038) Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035) ---> Cipher Suite: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x0016) What ciphersuites does Freeradius support? Why doesnt ciphersuite 0x0016 work? (I also tried 0x0039, DHE-RSA-AES256-SHA, it also produces the same error) I hope you can help me Thanks in advance Thomas Otto

2 1

proposed patch for radwho
by Stefan Winter 20 Apr '07

20 Apr '07

Hi, just created bug #445 against radwho .c of version 1.1.6: option -D allows to specify the radutmp file directly. AFAICT, this is the only information that is actually used by reading radiusd.conf, so specifying -D would make reading config file and/or -d obsolete. Has the additional advantage that multiple radutmp instances can be read without pain (i.e. creating different raddb-like directories to tell radwho where to look) and that radwho can be executed as non-root respectively non-sticky bit: only the permissions of radutmp have to be taken into account, not the entire raddb directory. Greetings, Stefan Winter -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter(a)restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473

1 0

Problem with creation of new users
by Stefano 20 Apr '07

20 Apr '07

Hi, bye freeradius web interface I add a new user and password. For example I create : user walter pass walter This user is inserted into mysql database with the crypted password. When I check via web interface the password, It shows me that password walter is incorrect. If I try to insert crypted password It works fine. I do not understand this thing. My problem is that the incoming user is not authenticated, with this message: Fri Apr 20 10:45:42 2007 : Auth: rlm_unix: [walter]: invalid password Can you help me please? Thank you Stefano Carbonera

2 1

Automatic report from sources (radiusd) between 19.04.2007 - 20.04.2007 GMT
by Automatic cvs log generator 20 Apr '07

20 Apr '07

CVS log entries from 19.04.2007 (Thu) 08:00:01 - 20.04.2007 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_eap/eap.c; Revisions: 1.62 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revisions: 1.40 File: radiusd/src/main/smux.c; Revisions: 1.24 File: radiusd/src/modules/rlm_eap/libeap/eapcommon.c; Revisions: 1.13 File: radiusd/src/modules/rlm_eap/radeapclient.c; Revisions: 1.26 File: radiusd/src/main/client.c; Revisions: 1.59, 1.58 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revisions: 1.22 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revisions: 1.33 File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revisions: 1.41 File: radiusd/src/modules/rlm_eap/libeap/eapsimlib.c; Revisions: 1.17 File: radiusd/src/main/conffile.c; Revisions: 1.154 File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c; Revisions: 1.19 ===================================================== Combined list of identical log entries ===================================================== Description: more lvalue to vp_* changes Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revision: 1.22; Date: 2007/04/19 15:36:14; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c; Revision: 1.19; Date: 2007/04/19 15:36:15; Author: aland; Lines: (+8 -8) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.40; Date: 2007/04/19 15:36:15; Author: aland; Lines: (+5 -5) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.33; Date: 2007/04/19 15:36:15; Author: aland; Lines: (+8 -9) ------------------------------- Description: vp->lvalue to vp->vp_integer changes Modified files: File: radiusd/src/modules/rlm_eap/eap.c; Revision: 1.62; Date: 2007/04/19 15:30:54; Author: aland; Lines: (+7 -7) File: radiusd/src/modules/rlm_eap/radeapclient.c; Revision: 1.26; Date: 2007/04/19 15:30:55; Author: aland; Lines: (+10 -10) File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revision: 1.41; Date: 2007/04/19 15:30:54; Author: aland; Lines: (+3 -3) ------------------------------- Description: More lvalue to vp_integer changes Modified files: File: radiusd/src/modules/rlm_eap/libeap/eapcommon.c; Revision: 1.13; Date: 2007/04/19 15:32:09; Author: aland; Lines: (+6 -6) File: radiusd/src/modules/rlm_eap/libeap/eapsimlib.c; Revision: 1.17; Date: 2007/04/19 15:32:10; Author: aland; Lines: (+6 -6) ===================================================== Log entries ===================================================== Description: Set tree_num to NULL after freeing it Modified files: File: radiusd/src/main/client.c; Revision: 1.59; Date: 2007/04/19 08:37:13; Author: aland; Lines: (+3 -2) ------------------------------- Description: If free'ing mainconfig.clients, set it to NULL. If allocating a client and mainconfig.clients is NULL, allocate mainconfig.clients Modified files: File: radiusd/src/main/client.c; Revision: 1.58; Date: 2007/04/19 08:26:31; Author: aland; Lines: (+19 -5) ------------------------------- Description: cf_data_add() sends us a static string. cf_data_add_internal() sends us a dynamically allocated string Modified files: File: radiusd/src/main/conffile.c; Revision: 1.154; Date: 2007/04/19 08:46:49; Author: aland; Lines: (+3 -3) ------------------------------- Description: Use brackets Modified files: File: radiusd/src/main/smux.c; Revision: 1.24; Date: 2007/04/19 10:26:58; Author: aland; Lines: (+4 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/client.c Revisions: 1.59, 1.58 Authors: aland (+3 -2), aland (+19 -5) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.154 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/smux.c Revisions: 1.24 Authors: aland (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_eap/eap.c Revisions: 1.62 Authors: aland (+7 -7) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/eapcommon.c Revisions: 1.13 Authors: aland (+6 -6) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/eapsimlib.c Revisions: 1.17 Authors: aland (+6 -6) ------------------------------- File: radiusd/src/modules/rlm_eap/radeapclient.c Revisions: 1.26 Authors: aland (+10 -10) ------------------------------- File: radiusd/src/modules/rlm_eap/rlm_eap.c Revisions: 1.41 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c Revisions: 1.22 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Revisions: 1.19 Authors: aland (+8 -8) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Revisions: 1.40 Authors: aland (+5 -5) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Revisions: 1.33 Authors: aland (+8 -9) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Value Pair
by ashola ashola 19 Apr '07

19 Apr '07

is there any one who can explain to mean what a Value Pair is ? Thanks in advance Ashola --------------------------------- Ahhh...imagining that irresistible "new car" smell? Check outnew cars at Yahoo! Autos.

2 1