May 2007 - Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 10.05.2007 - 11.05.2007 GMT
by Automatic cvs log generator 11 May '07

11 May '07

CVS log entries from 10.05.2007 (Thu) 08:00:00 - 11.05.2007 (Fri) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/threads.c; Revisions: 1.126 ===================================================== Log entries ===================================================== Description: Now that we have the "self signal" function, there's no need to block signals in the child threads Modified files: File: radiusd/src/main/threads.c; Revision: 1.126; Date: 2007/05/10 08:17:05; Author: aland; Lines: (+2 -23) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/threads.c Revisions: 1.126 Authors: aland (+2 -23) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Freeradius bugs..After restarting server..user still connected..
by durjan hussain 10 May '07

10 May '07

Hi there, My server got hanged i restarted it.After that i tried to login to client machine. I am getting message. You are already logged in - access denied..(hotspotlogin.php) I can see in my radacct table field AccterminateCause is empty..there is no cause of disconnection.. Sometime it works.. Is it a bug???? How can i resolve this issues. Any help appreciated.. Thanks Durjan Hussain --------------------------------- Ahhh...imagining that irresistible "new car" smell? Check outnew cars at Yahoo! Autos.

1 0

HOW CAN I CHANGE ROUTER ESSID BY USING FREERADIUS OR CHILL OR ETC.
by durjan hussain 10 May '07

10 May '07

Hi there, How can i change router ESSID by using freeradius or chillispot with combination php.mysql etc... I have created Web Administrator system (using php,mysql,apache,freeradius,chillispot)..but i also need to change ESSID or restart router through my system.. How can i????????????/ Any help appreciated.. Thanks.. Durjan Hussain M.Sc,SCJP1.4,SCWCD --------------------------------- Ahhh...imagining that irresistible "new car" smell? Check outnew cars at Yahoo! Autos.

2 3

Automatic report from sources (radiusd) between 09.05.2007 - 10.05.2007 GMT
by Automatic cvs log generator 10 May '07

10 May '07

CVS log entries from 09.05.2007 (Wed) 08:00:00 - 10.05.2007 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.181 File: radiusd/src/main/xlat.c; Revisions: 1.120 File: radiusd/mibs/FREERADIUS-SMI.txt; Revisions: 1.1 File: radiusd/raddb/Makefile; Revisions: 1.20 File: radiusd/src/main/listen.c; Revisions: 1.73 File: radiusd/mibs/GNOME-PRODUCT-RADIUSD-MIB; Revisions: 1.2 File: radiusd/mibs/FREERADIUS-PRODUCT-RADIUSD-MIB.txt; Revisions: 1.1 File: radiusd/raddb/snmp.conf; Revisions: 1.3 File: radiusd/src/main/event.c; Revisions: 1.34 File: radiusd/src/main/radius_snmp.c; Revisions: 1.37 Author: pnixon File: radiusd/share/dictionary.mikrotik; Revisions: 1.5, 1.1.4.2 ===================================================== Combined list of identical log entries ===================================================== Description: Re-parent the SNMP MIBs to use our own OID, rather than gnome's OID. Gnome also seems to be using 3317 rather than 3319, which is what IANA says was assigned to them. Modified files: File: radiusd/mibs/FREERADIUS-PRODUCT-RADIUSD-MIB.txt; Revision: 1.1; Date: 2007/05/09 13:41:36; Author: aland; File: radiusd/mibs/FREERADIUS-SMI.txt; Revision: 1.1; Date: 2007/05/09 13:41:36; Author: aland; File: radiusd/mibs/GNOME-PRODUCT-RADIUSD-MIB; Revision: 1.2; Date: 2007/05/09 13:41:35; Author: aland; Lines: (+0 -0) File: radiusd/raddb/snmp.conf; Revision: 1.3; Date: 2007/05/09 13:41:37; Author: aland; Lines: (+3 -3) File: radiusd/src/main/listen.c; Revision: 1.73; Date: 2007/05/09 13:41:36; Author: aland; Lines: (+3 -3) File: radiusd/src/main/radius_snmp.c; Revision: 1.37; Date: 2007/05/09 13:41:36; Author: aland; Lines: (+3 -3) ===================================================== Log entries ===================================================== Description: Don't try to install older SQL configs. They've been moved to the "sql" directory Modified files: File: radiusd/raddb/Makefile; Revision: 1.20; Date: 2007/05/09 13:54:42; Author: aland; Lines: (+3 -3) ------------------------------- Description: Fixed small typo in dict Modified files: File: radiusd/share/dictionary.mikrotik; Revision: 1.5; Date: 2007/05/09 15:18:53; Author: pnixon; Lines: (+2 -2) ------------------------------- Description: Fix typo Modified files: File: radiusd/share/dictionary.mikrotik; Revision: 1.1.4.2; Date: 2007/05/09 16:12:42; Author: pnixon; Lines: (+2 -2) ------------------------------- Description: Initialize timestamp from received Modified files: File: radiusd/src/main/event.c; Revision: 1.34; Date: 2007/05/09 13:09:21; Author: aland; Lines: (+5 -2) ------------------------------- Description: struct timeval->tv_sec may not be time_t on MAC OS, 64-bit. i.e. struct timeval->tv_sec is 64-bit, and localtime_t() etc take a 32-bit pointer. If we need to remove "request->timestamp" in the future, we can update the calls to localtime_r(), etc. to use an intermediate variable, to avoid 32/64-bit issues. Modified files: File: radiusd/src/main/xlat.c; Revision: 1.120; Date: 2007/05/09 13:16:00; Author: aland; Lines: (+11 -10) ------------------------------- Description: print out attributes in a more standard method Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.181; Date: 2007/05/09 12:22:46; Author: aland; Lines: (+8 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/mibs/FREERADIUS-PRODUCT-RADIUSD-MIB.txt Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/mibs/FREERADIUS-SMI.txt Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/mibs/GNOME-PRODUCT-RADIUSD-MIB Revisions: 1.2 Authors: aland (+0 -0) ------------------------------- File: radiusd/raddb/Makefile Revisions: 1.20 Authors: aland (+3 -3) ------------------------------- File: radiusd/raddb/snmp.conf Revisions: 1.3 Authors: aland (+3 -3) ------------------------------- File: radiusd/share/dictionary.mikrotik Revisions: 1.5, 1.1.4.2 Authors: pnixon (+2 -2), pnixon (+2 -2) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.34 Authors: aland (+5 -2) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.73 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/radius_snmp.c Revisions: 1.37 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/xlat.c Revisions: 1.120 Authors: aland (+11 -10) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.181 Authors: aland (+8 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

FreeRadius performance requirements
by Arnnei Speiser 10 May '07

10 May '07

Hi Guys, Any recommendations on the Server minimum configuration - memory, cpu etc for using FR with 10k, 20k, 50k users ? What would be the main configuration parameters that we have to select/set in order to handle a high volume of authentication requests. Thanks, Arnnei

2 1

FreeRadius performance requirements
by Arnnei Speiser 10 May '07

10 May '07

Hi Guys, Any recommendations on the Server minimum configuration - memory, cpu etc for using FR with 10k, 20k, 50k users ? What would be the main configuration parameters that we have to select/set in order to handle a high volume of authentication requests. Thanks, Arnnei

1 0

What Freeradius Can do?????Can i get or change my SSID from AP.
by durjan hussain 09 May '07

09 May '07

Hi there, Could anybody please tell me the list what freeradius can do? Can i get/change ESSID or restart router using freeradius with chillispot(mysql,php,apache2) One more think..How i can get the AP IP if more than one AP has been running, so i will know from which AP this user came. Thanks for help. Regards, Durjan Hussain --------------------------------- Ahhh...imagining that irresistible "new car" smell? Check outnew cars at Yahoo! Autos.

1 0

Automatic report from sources (radiusd) between 08.05.2007 - 09.05.2007 GMT
by Automatic cvs log generator 09 May '07

09 May '07

CVS log entries from 08.05.2007 (Tue) 08:00:04 - 09.05.2007 (Wed) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revisions: 1.44 ===================================================== Log entries ===================================================== Description: We're copying ranges of bytes fed to us from a regex parse. We need to use memcpy, not strlcpy. Modified files: File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revision: 1.44; Date: 2007/05/08 14:00:06; Author: aland; Lines: (+11 -8) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c Revisions: 1.44 Authors: aland (+11 -8) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

HUP handling: a thought
by Alan DeKok 08 May '07

08 May '07

Let's give up on HUP entirely. Instead, we can implement something like: http://www.linuxappliancedesign.com/projects/rta/ I like the idea of configuration via SQL, but I don't like the idea of a fast server doing SQL queries for configuration. And caching the results of the SQL queries just adds more complexity. The solution, I think, is to invert the problem. Instead of making the server do SQL queries to get its configuration, have the SQL queries get the configuration from the internal data structures of the server. The "rta" project above does this. It's only about 1k LoC, which is nice. On the downside, it's not thread-safe, and only supports UPDATE and SELECT, it requires that the rows be in arrays (for the most part), and it has hard-coded limits on the number of rows, columns, name lengths, etc. My thought was to have a look at doing something similar, but with support for INSERT, DELETE, and removing the hard-coded limitations. e.g. have each table as a balanced red-black tree. Each leaf is a "row". Each row is a data structure, with accessor functions. The server code can just access the data structures directly, without worrying about the whole SQL overhead. The SQL code can use the accessor functions to get the actual data. It may take a bit of magic to handle insertions && deletions in a thread-safe way, but it could work... Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog

12 38

Solving the SSL problem in CVS head
by Alan DeKok 08 May '07

08 May '07

I had an idea on the way home last night. It's now implemented, and it's pretty cool. In eap.conf, the tls, ttls, and peap sections are now enabled in the default install. The EAP module ignores them if OpenSSL wasn't found during the build. The tls module now has a configuration entry "make_cert_command". raddb/certs/bootstrap is a shell script that runs "make". On initial boot in debugging mode after "make install", the server loads the tls module (if OpenSSL was found). The TLS module sees that there's a "make_cert_command", and it's in debugging mode, and no server certificate exists. It then runs the "make_cert_command" to create the certificates, and continues with its normal startup. This means that all of the annoying fighting with stupid certificates to get EAP-TLS to work is *gone*. Just install OpenSSL, install the server, and start the server. EAP-TLS, TTLS, and PEAP will Just Work. This makes me happy. It should make the server MUCH easier to deploy. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog

4 7