July 2007 - Freeradius-Devel - lists.freeradius.org

files module
by Diana Robert 07 Jul '07

07 Jul '07

hi, My server is using the files module to authenticate a client, but the module is present only in the authorize section and not in the authenticate section in radiusd.conf file, so can anyone comment on this. Wat is my doubt is , Is it enough to have the files [or anyother] module to be present only in authorize section. thank u. Send free SMS to your Friends on Mobile from your Yahoo! Messenger. Download Now! http://messenger.yahoo.com/download.php

1 0

Automatic report from sources (radiusd) between 06.07.2007 - 07.07.2007 GMT
by Automatic cvs log generator 07 Jul '07

07 Jul '07

CVS log entries from 06.07.2007 (Fri) 08:00:01 - 07.07.2007 (Sat) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_perl/configure; Revisions: 1.6 File: radiusd/raddb/sites-available/default; Revisions: 1.4 File: radiusd/src/main/modcall.c; Revisions: 1.87 File: radiusd/src/modules/rlm_perl/configure.in; Revisions: 1.4 ===================================================== Combined list of identical log entries ===================================================== Description: Try to link with libperl, using the command-line flags given by "perl -MExtUtils::Embed -e ldopts". If this doesn't work, your Perl installation is broken. Modified files: File: radiusd/src/modules/rlm_perl/configure; Revision: 1.6; Date: 2007/07/06 12:25:46; Author: aland; Lines: (+2057 -1661) File: radiusd/src/modules/rlm_perl/configure.in; Revision: 1.4; Date: 2007/07/06 12:25:46; Author: aland; Lines: (+14 -2) ===================================================== Log entries ===================================================== Description: Notes on Auth-Type, and instructions to NOT put unlang stuff into the "authenticate" section. Modified files: File: radiusd/raddb/sites-available/default; Revision: 1.4; Date: 2007/07/06 08:38:56; Author: aland; Lines: (+9 -2) ------------------------------- Description: Skip checking return code when the "else" wasn't taken. "update" sections change the return code ONLY if something went wrong Modified files: File: radiusd/src/main/modcall.c; Revision: 1.87; Date: 2007/07/06 10:22:26; Author: aland; Lines: (+12 -7) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/sites-available/default Revisions: 1.4 Authors: aland (+9 -2) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.87 Authors: aland (+12 -7) ------------------------------- File: radiusd/src/modules/rlm_perl/configure Revisions: 1.6 Authors: aland (+2057 -1661) ------------------------------- File: radiusd/src/modules/rlm_perl/configure.in Revisions: 1.4 Authors: aland (+14 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusclient) between 06.07.2007 - 07.07.2007 GMT
by Automatic cvs log generator 07 Jul '07

07 Jul '07

CVS log entries from 06.07.2007 (Fri) 07:00:00 - 07.07.2007 (Sat) 07:00:01 GMT ===================================================== Summary by authors ===================================================== Author: cparker File: radiusclient/lib/ip_util.c; Revisions: 1.12 File: radiusclient/include/freeradius-client.h; Revisions: 1.4 File: radiusclient/configure.in; Revisions: 1.34 ===================================================== Combined list of identical log entries ===================================================== Description: Solaris 8 doesn't have stdint.h so check for it at configure and conditionally include. Modified files: File: radiusclient/configure.in; Revision: 1.34; Date: 2007/07/06 21:49:48; Author: cparker; Lines: (+2 -1) File: radiusclient/include/freeradius-client.h; Revision: 1.4; Date: 2007/07/06 21:49:48; Author: cparker; Lines: (+3 -1) ===================================================== Log entries ===================================================== Description: Updated pre-processor macro wrappers. Modified files: File: radiusclient/lib/ip_util.c; Revision: 1.12; Date: 2007/07/06 21:44:24; Author: cparker; Lines: (+6 -6) ===================================================== Summary of modified files ===================================================== File: radiusclient/configure.in Revisions: 1.34 Authors: cparker (+2 -1) ------------------------------- File: radiusclient/include/freeradius-client.h Revisions: 1.4 Authors: cparker (+3 -1) ------------------------------- File: radiusclient/lib/ip_util.c Revisions: 1.12 Authors: cparker (+6 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/rc-new_makelog.pl

1 0

possibly acceptable workaround for rlm_perl/dlopen problem on Debian
by Enrik Berkhan 06 Jul '07

06 Jul '07

Hi, after thinking over the libperl.so/dlopen problem with rlm_perl on Debian, I have found the following workaround: Just dlopen(libperl.so, RTLD_LAZY|RTLD_GLOBAL) from rlm_perl again. This will have no effect but making the symbols globally visible since the library has been opened already during the load of rlm_perl. Advantages: - no change on other packages needed at the moment - change stays local to rlm_perl - no portability loss as rlm_perl already uses dlfcn.h / dlclose() I have attached a proof-of-concept patch that is missing at least autotools integration and hardcodes the library name. What do you think about this compromise? Enrik

2 9

dictionary
by Diana Robert 06 Jul '07

06 Jul '07

hi, i m using freeradius 1.1.6. there are lot of dictionary files under, /usr/local/share/freeradius. i want to know which dictionary file is being used when the radius server is running, thank u. Send free SMS to your Friends on Mobile from your Yahoo! Messenger. Download Now! http://messenger.yahoo.com/download.php

2 1

"files" module
by Diana Robert 06 Jul '07

06 Jul '07

hi, My server is using the files module to authenticate a client, but the module is present only in the authorize section and not in the authenticate section in radiusd.conf file, so can anyone comment on this. Wat is my doubt is , Is it enough to have the files [or anyother] module to be present only in authorize section. thank u. --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

1 0

synchronous proxying
by suganthi velusamy 06 Jul '07

06 Jul '07

Hi all What is meant by synchronous proxying? Thanx Suganthi Velusamy. --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

1 0

unlang question
by Enrik Berkhan 06 Jul '07

06 Jul '07

Hi, Currently, I'm playing with freeradius 2 to evaluate the new unlang features (using CVS source from today). I figured out the following setup for an unlang if-else construct matching on a module return. I'm just wondering if this is the most elegant solution currently possible. Comments welcome. > server { > > authorize { > if ("%{NAS-IP-Address}" == '') { > update request { > NAS-IP-Address = "%{Client-IP-Address}" > } > } > auth_log > users > pap > } > > authenticate { > Auth-Type PAP { > pap { > ok = 1 # don't stop processing > reject = 1 > } > if (reject) { > ok = 1 # preserve PAP result in case the if-clause evaluates to false > update reply { > Reply-Message := "Wrong PAP password." > } > } > elsif (ok) { > update reply { > Reply-Message := "Welcome." > } > } > } > } > > } Enrik

3 15

server - without listening to the socket
by Diana Robert 06 Jul '07

06 Jul '07

hi if listening to the socket is unnecessary in the server means, then how it wil receive the requests. thank u. [excuse me if the question sounds stupid] Send free SMS to your Friends on Mobile from your Yahoo! Messenger. Download Now! http://messenger.yahoo.com/download.php

1 0

freeradius: rlm_perl has symbol lookup errors when loading additional perl modules
by Enrik Berkhan 06 Jul '07

06 Jul '07

Hi, I've investigated this bug and found the reason why perl .so's won't load via shared rlm_perl on Debian. rlm_perl will be loaded by freeradius via lt_dlopenext() which proxies to dlopen(). rlm_perl depends on libperl. Thus, libperl will be loaded indirectly by dlopen() using the same flags specified to dlopen() by lt_dlopenext(). On debian, this means, libperl will be loaded _without_ RTDL_GLOBAL being set. On the other hand, when the embedded script tries to load a shared perl extension like Data::Dumper, perl's extension mechanisms will load Dumper.so. But Dumper.so does _not_ depend on libperl, so the dlopen() used to load Dumper.so will 1. not search for symbols in libperl explicitly and 2. not see the symbols from libperl loaded earlier indirectly by lt_dlopenext(), because RTLD_GLOBAL is disabled on debian for valid reasons (see bug #195821). I'm not sure, but I think the correct solution would be to have a shared library dependency from all perl extension modules like Dumper.so on libperl. BTW, a workaround is to start radiusd with LD_PRELOAD=...libperl... pointing to the correct libperl. Of course, this is not feasible for packaging ... Enrik

3 8