July 2007 - Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 05.07.2007 - 06.07.2007 GMT
by Automatic cvs log generator 06 Jul '07

06 Jul '07

CVS log entries from 05.07.2007 (Thu) 08:00:02 - 06.07.2007 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/realms.c; Revisions: 1.25, 1.24 File: radiusd/src/main/modcall.c; Revisions: 1.86, 1.85 File: radiusd/src/lib/dict.c; Revisions: 1.107 File: radiusd/src/main/client.c; Revisions: 1.65 ===================================================== Log entries ===================================================== Description: Removed strtok. It doesn't matter *too* much, because it's only called when the server starts, and is single threaded. This addresses bug #468 Modified files: File: radiusd/src/lib/dict.c; Revision: 1.107; Date: 2007/07/05 08:52:50; Author: aland; Lines: (+29 -26) ------------------------------- Description: Use new cf_log_err function Modified files: File: radiusd/src/main/client.c; Revision: 1.65; Date: 2007/07/05 09:46:36; Author: aland; Lines: (+18 -18) ------------------------------- Description: Don't permit "ok = 1", etc. in sections. They're only allowed in groups where the name is a module Modified files: File: radiusd/src/main/modcall.c; Revision: 1.86; Date: 2007/07/05 15:01:21; Author: aland; Lines: (+11 -2) ------------------------------- Description: if, else, elsif don't change the module return code Modified files: File: radiusd/src/main/modcall.c; Revision: 1.85; Date: 2007/07/05 14:10:24; Author: aland; Lines: (+7 -4) ------------------------------- Description: Don't just blindly print out the server pool definition, it may be referenced twice. This fixes bug #467 Modified files: File: radiusd/src/main/realms.c; Revision: 1.25; Date: 2007/07/05 08:43:56; Author: aland; Lines: (+22 -14) ------------------------------- Description: Removed use of cf_section_value_find(). We now do better parsing of the config. This also fixes bug #466 Modified files: File: radiusd/src/main/realms.c; Revision: 1.24; Date: 2007/07/05 08:34:51; Author: aland; Lines: (+70 -28) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/dict.c Revisions: 1.107 Authors: aland (+29 -26) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.65 Authors: aland (+18 -18) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.86, 1.85 Authors: aland (+11 -2), aland (+7 -4) ------------------------------- File: radiusd/src/main/realms.c Revisions: 1.25, 1.24 Authors: aland (+22 -14), aland (+70 -28) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

pairadd and pairmake
by suganthi velusamy 06 Jul '07

06 Jul '07

Hi all, Can u explain what pairmake() function will do and what pairadd() function will do. What is the difference? Thank you. Suagnthi Velusamy. --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

2 1

fake requests
by suganthi velusamy 06 Jul '07

06 Jul '07

Hi all. Can u please explain what is a fake request? Thanks. Suganthi Velusamy. Send free SMS to your Friends on Mobile from your Yahoo! Messenger. Download Now! http://messenger.yahoo.com/download.php

1 0

RAD_SNMP_INC
by suganthi velusamy 05 Jul '07

05 Jul '07

Hi... Please explain the "RAD_SNMP_INC" function in "radiusd.c". For what it is used for? Thanks Suganthi.V --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

1 0

Automatic report from sources (radiusd) between 04.07.2007 - 05.07.2007 GMT
by Automatic cvs log generator 05 Jul '07

05 Jul '07

CVS log entries from 04.07.2007 (Wed) 08:00:03 - 05.07.2007 (Thu) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revisions: 1.59.2.3.2.5 File: radiusd/man/man5/unlang.5; Revisions: 1.9 ===================================================== Log entries ===================================================== Description: Updated Modified files: File: radiusd/man/man5/unlang.5; Revision: 1.9; Date: 2007/07/04 13:46:27; Author: aland; Lines: (+36 -27) ------------------------------- Description: Use correct value for inst->auth_type Modified files: File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revision: 1.59.2.3.2.5; Date: 2007/07/04 13:25:21; Author: aland; Lines: (+7 -11) ===================================================== Summary of modified files ===================================================== File: radiusd/man/man5/unlang.5 Revisions: 1.9 Authors: aland (+36 -27) ------------------------------- File: radiusd/src/modules/rlm_mschap/rlm_mschap.c Revisions: 1.59.2.3.2.5 Authors: aland (+7 -11) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

group sensitive per user return attributes with rlm_sql
by Hugh Messenger 04 Jul '07

04 Jul '07

I'm trying to work out (in 2.0.0) how to achieve "matching group specific per user reply attributes" using rlm_sql, based on which group(s) matched the authentication request. So, for instance, a user might belong to both DIALUP and WIRELESS groups. But I only want the per-user reply attributes relevant to the access request being processed, for instance Mikrotik-Rate-Limit only gets set if the request matched WIRELESS (via a huntgroup match). As far as I can tell, this would require some surgery to rlm_sql, and an additional (optional) CheckGroup column in the 'radreply' table: UserName,Attribute,op,Value,CheckGroup radiustest,Mikrotik-Rate-Limit,=,512k/512k,WIRELESS radiustest,Some-Dialup-Attribute,=,foo,DIALUP radiustest,Some-Common-Attribute,=,bar, So the authorize_reply_query could then be something like: authorize_reply_query = "\ SELECT id, UserName, Attribute, Value, op \ FROM ${authreply_table} \ WHERE Username = '%{SQL-User-Name}' \ AND (CheckGroup = '' OR CheckGroup IN(%{control:Matched-Groups})) ORDER BY id" Then if the request came from a NAS which has a matching check attribute for the WIRELESS group, only 'radreply' items with CheckGroup of WIRELESS (and those with no CheckGroup) would be returned. So in this case, Mikrotik-Rate-Limit and Some-Common-Attribute. Obviously the surgery to rlm_sql would be in building %{control:Matched-Groups}, which would mean shuffling some code around, as currently the groups aren't looked at till after the per-user reply attributes are processed. Or is there some other way of doing this I'm spacing on? -- hugh

2 4

usage of strtok()
by Enrik Berkhan 04 Jul '07

04 Jul '07

Hi, I've just noticed that strtok() is used in some places in FreeRADIUS, e.g. in rlm_perl for tokenizing the xlat() arguments. IIRC, strtok() is not thread safe. What would be the best and most portable approach to avoid it? Use strtok_r() if available and/or fall back to a strtok_r implementation provided by FreeRADIUS like mystrtok() in src/lib/valuepair.c? Enrik

2 1

logic error in rlm_krb configure script
by Stephen Gran 04 Jul '07

04 Jul '07

Hello all, Without this patch, the rlm_krb configure script first checks to see if -lk5crypto is available and useable, and then immediately overwrites it with a test for -lcrypto. This makes the module link to the wrong crypto library (or at least that's what it looks like here). This patch only tries the second test if the first fails. Thanks, -- -------------------------------------------------------------------------- | Stephen Gran | The bland leadeth the bland and they | | steve(a)lobefin.net | both shall fall into the kitsch. | | http://www.lobefin.net/~steve | | --------------------------------------------------------------------------

1 0

Automatic report from sources (radiusd) between 03.07.2007 - 04.07.2007 GMT
by Automatic cvs log generator 04 Jul '07

04 Jul '07

CVS log entries from 03.07.2007 (Tue) 08:00:00 - 04.07.2007 (Wed) 08:00:03 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/conffile.c; Revisions: 1.176, 1.175 ===================================================== Log entries ===================================================== Description: Added $-INCLUDE, which will include the file only if it exists Modified files: File: radiusd/src/main/conffile.c; Revision: 1.176; Date: 2007/07/04 05:54:17; Author: aland; Lines: (+13 -3) ------------------------------- Description: Double-check use of if/elsif. If they're not in a server{} section, then don't allow them to be used. Note we've now got to fix the vmps sanity checking code, too, as everything is supposed to be in a server{} section Modified files: File: radiusd/src/main/conffile.c; Revision: 1.175; Date: 2007/07/04 05:49:28; Author: aland; Lines: (+21 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/conffile.c Revisions: 1.176, 1.175 Authors: aland (+13 -3), aland (+21 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 02.07.2007 - 03.07.2007 GMT
by Automatic cvs log generator 03 Jul '07

03 Jul '07

CVS log entries from 02.07.2007 (Mon) 08:00:00 - 03.07.2007 (Tue) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/raddb/eap.conf; Revisions: 1.15 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h; Revisions: 1.10 File: radiusd/src/main/modcall.c; Revisions: 1.84 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h; Revisions: 1.10 File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revisions: 1.89 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c; Revisions: 1.14 File: radiusd/src/include/radiusd.h; Revisions: 1.240 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revisions: 1.26 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revisions: 1.13 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revisions: 1.37 File: radiusd/src/main/conffile.c; Revisions: 1.174 File: radiusd/man/man5/unlang.5; Revisions: 1.8 File: radiusd/src/main/evaluate.c; Revisions: 1.22 ===================================================== Combined list of identical log entries ===================================================== Description: Added module return codes to conditions in unlang Modified files: File: radiusd/man/man5/unlang.5; Revision: 1.8; Date: 2007/07/02 10:01:37; Author: aland; Lines: (+28 -4) File: radiusd/src/include/radiusd.h; Revision: 1.240; Date: 2007/07/02 10:01:36; Author: aland; Lines: (+3 -3) File: radiusd/src/main/evaluate.c; Revision: 1.22; Date: 2007/07/02 10:01:36; Author: aland; Lines: (+21 -5) File: radiusd/src/main/modcall.c; Revision: 1.84; Date: 2007/07/02 10:01:36; Author: aland; Lines: (+7 -6) ------------------------------- Description: Added and documented "virtual_server" config for PEAP and TTLS. This lets the administrator control which virtual server processes the tunneled request. Modified files: File: radiusd/raddb/eap.conf; Revision: 1.15; Date: 2007/07/03 05:48:43; Author: aland; Lines: (+25 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h; Revision: 1.10; Date: 2007/07/03 05:48:44; Author: aland; Lines: (+3 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revision: 1.26; Date: 2007/07/03 05:48:44; Author: aland; Lines: (+7 -3) File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c; Revision: 1.14; Date: 2007/07/03 05:48:44; Author: aland; Lines: (+11 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h; Revision: 1.10; Date: 2007/07/03 05:48:43; Author: aland; Lines: (+3 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c; Revision: 1.13; Date: 2007/07/03 05:48:43; Author: aland; Lines: (+11 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.37; Date: 2007/07/03 05:48:43; Author: aland; Lines: (+8 -3) ===================================================== Log entries ===================================================== Description: allow '-' in filenames, too Modified files: File: radiusd/src/main/conffile.c; Revision: 1.174; Date: 2007/07/02 21:48:21; Author: aland; Lines: (+3 -2) ------------------------------- Description: Copy inst->xlat_name from module name Set xlat name to inst->xlat_name, and don't set it for "mschap". If the user doesn't configure "mschap", then lots of other things will break. Don't free inst->xlat_name, as we're no longer strdup'ing it. Modified files: File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revision: 1.89; Date: 2007/07/02 22:08:39; Author: aland; Lines: (+7 -13) ===================================================== Summary of modified files ===================================================== File: radiusd/man/man5/unlang.5 Revisions: 1.8 Authors: aland (+28 -4) ------------------------------- File: radiusd/raddb/eap.conf Revisions: 1.15 Authors: aland (+25 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.240 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.174 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/main/evaluate.c Revisions: 1.22 Authors: aland (+21 -5) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.84 Authors: aland (+7 -6) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h Revisions: 1.10 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c Revisions: 1.26 Authors: aland (+7 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c Revisions: 1.14 Authors: aland (+11 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h Revisions: 1.10 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c Revisions: 1.13 Authors: aland (+11 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Revisions: 1.37 Authors: aland (+8 -3) ------------------------------- File: radiusd/src/modules/rlm_mschap/rlm_mschap.c Revisions: 1.89 Authors: aland (+7 -13) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0