August 2007 - Freeradius-Devel - lists.freeradius.org

rlm_sqlippool segfaults on wrong/missing rlm_sql instance
by Stephan Jaeger 03 Oct '07

03 Oct '07

Hi, rlm_sqlippool segfaults if you specify a non existing sql module instance. I modified it a bit to behave like rlm_sqlhpwippool, it now throws an error if the specified module instance does not exist: Tue Jul 31 11:23:16 2007 : Error: ERROR: Cannot find a configuration entry for module "foobar". Tue Jul 31 11:23:16 2007 : Error: sqlippool_instantiate: failed to find sql instance named foobar And also throws an error if the specified module is not an instance of rlm_sql: Tue Jul 31 11:28:24 2007 : Error: sqlippool_instantiate: given instance (expr) is not an instance of the rlm_sql module Regards Stephan Jaeger -- Stephan Jaeger <stephan.jaeger(a)ewetel.de> EWE TEL GmbH

2 1

Deleting reply items before post-proxy
by Eddie Stassen 04 Sep '07

04 Sep '07

Could someone please explain to me if there is any specific reasoning behind the following lines right in the beginning of proxy_receive() in proxy.c? (version 1.1.7, similar code in event.c in 2.0) /* * Delete any reply we had accumulated until now. */ pairfree(&request->reply->vps); I was trying to get rid of my 'post-proxy-authorize' dependency and found that any attributes added during the authorize stage are removed when the proxy reply is received. Surely this is not intended behaviour as further down in proxy_receive() we have the following lines: /* * Add the attributes left in the proxy reply to * the reply list. */ pairadd(&request->reply->vps, request->proxy_reply->vps); Removing the initial pairfree() gives me the behaviour I expected, i.e. add some stuff during authorize, proxy, then combine reply and proxy_reply items before responding. Am I missing something? Eddie

7 20

CVS Server
by Arran Cudbard-Bell 01 Sep '07

01 Sep '07

cvs update: Updating . cvs update: failed to create lock directory for `/source/radiusd' (/source/radiusd/#cvs.lock): No space left on device cvs update: failed to obtain dir lock in repository `/source/radiusd' cvs [update aborted]: read lock failed - giving up --- Arran

6 8

Automatic report from sources (radiusd) between 30.08.2007 - 31.08.2007 GMT
by Automatic cvs log generator 31 Aug '07

31 Aug '07

CVS log entries from 30.08.2007 (Thu) 08:00:02 - 31.08.2007 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.186 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/sql_unixodbc.c; Revisions: 1.22, 1.11.2.2.2.2 File: radiusd/src/main/event.c; Revisions: 1.48, 1.47 File: radiusd/src/main/threads.c; Revisions: 1.133 File: radiusd/src/main/mainconfig.c; Revisions: 1.120 File: radiusd/src/lib/valuepair.c; Revisions: 1.125, 1.82.2.1.2.6 ===================================================== Log entries ===================================================== Description: time_t may be 64 bits, so we can't pass &vp->vp_date directly to a function that expects (time_t *) Modified files: File: radiusd/src/lib/valuepair.c; Revision: 1.125; Date: 2007/08/30 08:53:26; Author: aland; Lines: (+24 -7) ------------------------------- Description: Pull time_t fix from CVS head Modified files: File: radiusd/src/lib/valuepair.c; Revision: 1.82.2.1.2.6; Date: 2007/08/30 08:55:06; Author: aland; Lines: (+22 -8) ------------------------------- Description: Moved more code into common section Modified files: File: radiusd/src/main/event.c; Revision: 1.48; Date: 2007/08/30 08:38:05; Author: aland; Lines: (+42 -39) ------------------------------- Description: Moved more paircreate() to radius_paircreate() Modified files: File: radiusd/src/main/event.c; Revision: 1.47; Date: 2007/08/30 08:29:44; Author: aland; Lines: (+7 -15) ------------------------------- Description: Replaced calls to exit(1) with better code Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.120; Date: 2007/08/30 08:46:02; Author: aland; Lines: (+33 -33) ------------------------------- Description: Removed one more call to exit() Modified files: File: radiusd/src/main/threads.c; Revision: 1.133; Date: 2007/08/30 08:42:52; Author: aland; Lines: (+4 -4) ------------------------------- Description: After ldap_authorize, if there's no "known good" password, COMPLAIN. This might help the people who can't be bothered to read the documentation. Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.186; Date: 2007/08/30 12:15:33; Author: aland; Lines: (+12 -1) ------------------------------- Description: Port fix from 1.1.x. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/sql_unixodbc.c; Revision: 1.22; Date: 2007/08/30 09:01:16; Author: aland; Lines: (+3 -3) ------------------------------- Description: SQLNumResultCols takes a "short", not an "int". Use the correct variable type Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/sql_unixodbc.c; Revision: 1.11.2.2.2.2; Date: 2007/08/30 09:00:24; Author: aland; Lines: (+2 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/valuepair.c Revisions: 1.125, 1.82.2.1.2.6 Authors: aland (+24 -7), aland (+22 -8) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.48, 1.47 Authors: aland (+42 -39), aland (+7 -15) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.120 Authors: aland (+33 -33) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.133 Authors: aland (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.186 Authors: aland (+12 -1) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/sql_unixodbc.c Revisions: 1.22, 1.11.2.2.2.2 Authors: aland (+3 -3), aland (+2 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 29.08.2007 - 30.08.2007 GMT
by Automatic cvs log generator 30 Aug '07

30 Aug '07

CVS log entries from 29.08.2007 (Wed) 08:00:01 - 30.08.2007 (Thu) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/event.c; Revisions: 1.46 File: radiusd/src/main/threads.c; Revisions: 1.132 File: radiusd/INSTALL; Revisions: 1.9 ===================================================== Combined list of identical log entries ===================================================== Description: Replaced exit(1) with return -1; Modified files: File: radiusd/src/main/event.c; Revision: 1.46; Date: 2007/08/30 04:15:35; Author: aland; Lines: (+5 -3) File: radiusd/src/main/threads.c; Revision: 1.132; Date: 2007/08/30 04:15:34; Author: aland; Lines: (+13 -13) ===================================================== Log entries ===================================================== Description: Added notes on upgrading Modified files: File: radiusd/INSTALL; Revision: 1.9; Date: 2007/08/29 08:37:45; Author: aland; Lines: (+47 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/INSTALL Revisions: 1.9 Authors: aland (+47 -2) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.46 Authors: aland (+5 -3) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.132 Authors: aland (+13 -13) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 28.08.2007 - 29.08.2007 GMT
by Automatic cvs log generator 29 Aug '07

29 Aug '07

CVS log entries from 28.08.2007 (Tue) 08:00:00 - 29.08.2007 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_krb5/configure; Revisions: 1.14 File: radiusd/src/main/realms.c; Revisions: 1.28, 1.27 File: radiusd/raddb/proxy.conf; Revisions: 1.28 File: radiusd/src/modules/rlm_krb5/configure.in; Revisions: 1.11 File: radiusd/src/lib/print.c; Revisions: 1.51, 1.50 ===================================================== Combined list of identical log entries ===================================================== Description: Fail the build if there's no krb5.h Modified files: File: radiusd/src/modules/rlm_krb5/configure; Revision: 1.14; Date: 2007/08/28 08:03:12; Author: aland; Lines: (+3 -0) File: radiusd/src/modules/rlm_krb5/configure.in; Revision: 1.11; Date: 2007/08/28 08:03:14; Author: aland; Lines: (+4 -1) ------------------------------- Description: Removed extraneous "hostname" configuration entry from realms Modified files: File: radiusd/raddb/proxy.conf; Revision: 1.28; Date: 2007/08/28 08:23:21; Author: aland; Lines: (+14 -11) File: radiusd/src/main/realms.c; Revision: 1.27; Date: 2007/08/28 08:23:22; Author: aland; Lines: (+7 -10) ===================================================== Log entries ===================================================== Description: Add check for delimitst < 0 back in. Modified files: File: radiusd/src/lib/print.c; Revision: 1.51; Date: 2007/08/28 13:01:50; Author: aland; Lines: (+6 -2) ------------------------------- Description: Allow valid UTF-8 characters when printing things. Modified files: File: radiusd/src/lib/print.c; Revision: 1.50; Date: 2007/08/28 09:45:56; Author: aland; Lines: (+130 -29) ------------------------------- Description: Updated error message Modified files: File: radiusd/src/main/realms.c; Revision: 1.28; Date: 2007/08/28 08:24:43; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/proxy.conf Revisions: 1.28 Authors: aland (+14 -11) ------------------------------- File: radiusd/src/lib/print.c Revisions: 1.51, 1.50 Authors: aland (+6 -2), aland (+130 -29) ------------------------------- File: radiusd/src/main/realms.c Revisions: 1.28, 1.27 Authors: aland (+3 -3), aland (+7 -10) ------------------------------- File: radiusd/src/modules/rlm_krb5/configure Revisions: 1.14 Authors: aland (+3 -0) ------------------------------- File: radiusd/src/modules/rlm_krb5/configure.in Revisions: 1.11 Authors: aland (+4 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

3 2

xlat UTF-8 stuff for 1.1.x backport
by Enrik Berkhan 28 Aug '07

28 Aug '07

Hi, using the attached patch my LDAP-requests returning UTF-8 and embedded commas work now using 1.1.7. This should fix bug #411, too. Enrik Index: src/lib/print.c =================================================================== RCS file: /source/radiusd/src/lib/print.c,v retrieving revision 1.26.2.1.2.2 diff -u -b -r1.26.2.1.2.2 print.c --- src/lib/print.c 15 Mar 2006 15:37:56 -0000 1.26.2.1.2.2 +++ src/lib/print.c 28 Aug 2007 14:26:07 -0000 @@ -33,28 +33,123 @@ #include "libradius.h" /* - * Convert a string to something printable. - * The output string has to be _at least_ 4x the size - * of the input string! + * Checks for utf-8, taken from: + * + * http://www.w3.org/International/questions/qa-forms-utf-8 + * + * Note that we don't care about the length of the input string, + * because '\0' is an invalid UTF-8 character. + */ +static int utf8_char(uint8_t *str) +{ + if (*str < 0x20) return 0; + + if (*str <= 0x7e) return 1; /* 1 */ + + if (*str <= 0xc1) return 0; + + if ((str[0] >= 0xc2) && /* 2 */ + (str[0] <= 0xdf) && + (str[1] >= 0x80) && + (str[1] <= 0xbf)) { + return 2; + } + + if ((str[0] == 0xe0) && /* 3 */ + (str[1] >= 0xa0) && + (str[1] <= 0xbf) && + (str[2] >= 0x80) && + (str[2] <= 0xbf)) { + return 3; + } + + if ((str[0] >= 0xe1) && /* 4a */ + (str[0] <= 0xec) && + (str[1] >= 0x80) && + (str[1] <= 0xbf) && + (str[2] >= 0x80) && + (str[2] <= 0xbf)) { + return 3; + } + + if ((str[0] >= 0xee) && /* 4b */ + (str[0] <= 0xef) && + (str[1] >= 0x80) && + (str[1] <= 0xbf) && + (str[2] >= 0x80) && + (str[2] <= 0xbf)) { + return 3; + } + + if ((str[0] == 0xed) && /* 5 */ + (str[1] >= 0x80) && + (str[1] <= 0x9f) && + (str[2] >= 0x80) && + (str[2] <= 0xbf)) { + return 3; + } + + if ((str[0] == 0xf0) && /* 6 */ + (str[1] >= 0x90) && + (str[1] <= 0xbf) && + (str[2] >= 0x80) && + (str[2] <= 0xbf) && + (str[3] >= 0x80) && + (str[3] <= 0xbf)) { + return 4; + } + + if ((str[0] >= 0xf1) && /* 6 */ + (str[1] <= 0xf3) && + (str[1] >= 0x80) && + (str[1] <= 0xbf) && + (str[2] >= 0x80) && + (str[2] <= 0xbf) && + (str[3] >= 0x80) && + (str[3] <= 0xbf)) { + return 4; + } + + + if ((str[0] == 0xf4) && /* 7 */ + (str[1] >= 0x80) && + (str[1] <= 0x8f) && + (str[2] >= 0x80) && + (str[2] <= 0xbf) && + (str[3] >= 0x80) && + (str[3] <= 0xbf)) { + return 4; + } + + /* + * Invalid UTF-8 Character + */ + return 0; +} + +/* + * Convert a string to something printable. The output string + * has to be larger than the input string by at least 5 bytes. + * If not, the output is silently truncated... */ void librad_safeprint(char *in, int inlen, char *out, int outlen) { unsigned char *str = (unsigned char *)in; - int done = 0; int sp = 0; + int utf8 = 0; if (inlen < 0) inlen = strlen(in); - while (inlen-- > 0 && (done + 3) < outlen) { + /* + * + */ + while ((inlen > 0) && (outlen > 4)) { /* * Hack: never print trailing zero. * Some clients send strings with an off-by-one * length (confused with strings in C). */ - if (inlen == 0 && *str == 0) - break; - - sp = 0; + if ((inlen == 0) && (*str == 0)) break; switch (*str) { case '\\': @@ -69,25 +164,38 @@ case '\t': sp = 't'; break; + case '"': + sp = '"'; + break; default: - if (*str < 32 || (*str >= 128)){ - snprintf(out, outlen, "\\%03o", *str); - done += 4; - out += 4; - outlen -= 4; - } else { - *out++ = *str; - outlen--; - done++; - } + sp = 0; + break; } + if (sp) { *out++ = '\\'; *out++ = sp; outlen -= 2; - done += 2; + str++; + inlen--; + continue; } + + utf8 = utf8_char((uint8_t *)str); + if (!utf8) { + snprintf(out, outlen, "\\%03o", *str); + out += 4; + outlen -= 4; str++; + inlen--; + continue; + } + + do { + *out++ = *str++; + outlen--; + inlen--; + } while (--utf8 > 0); } *out = 0; } @@ -117,18 +225,23 @@ if (vp->attribute == PW_NAS_PORT) a = (char *)vp->strvalue; else { - if (delimitst && vp->flags.has_tag) { + if (delimitst == 1 && vp->flags.has_tag) { /* Tagged attribute: print delimter and ignore tag */ buf[0] = '"'; librad_safeprint((char *)(vp->strvalue), vp->length, buf + 1, sizeof(buf) - 2); strcat(buf, "\""); - } else if (delimitst) { + } else if (delimitst == 1) { /* Non-tagged attribute: print delimter */ buf[0] = '"'; librad_safeprint((char *)vp->strvalue, vp->length, buf + 1, sizeof(buf) - 2); strcat(buf, "\""); + + } else if (delimitst < 0) { /* xlat.c */ + strlcpy(out, vp->strvalue, outlen); + return strlen(out); + } else { /* Non-tagged attribute: no delimiter */ librad_safeprint((char *)vp->strvalue, Index: src/main/xlat.c =================================================================== RCS file: /source/radiusd/src/main/xlat.c,v retrieving revision 1.72.2.7.2.5 diff -u -b -r1.72.2.7.2.5 xlat.c --- src/main/xlat.c 14 Jul 2007 11:07:54 -0000 1.72.2.7.2.5 +++ src/main/xlat.c 28 Aug 2007 14:26:08 -0000 @@ -72,7 +72,7 @@ char buffer[MAX_STRING_LEN * 4]; if (pair != NULL) { - vp_prints_value(buffer, sizeof(buffer), pair, 0); + vp_prints_value(buffer, sizeof(buffer), pair, -1); return func(out, outlen, buffer); }

1 0

Problem with expansion of %{Ldap-UserDn} containing UTF-8 (cf. Bug #411)
by Enrik Berkhan 28 Aug '07

28 Aug '07

Hi, there is a problem at least with LDAP group compares when Ldap-UserDn contains UTF-8 which seems not to be uncommon nowadays :) (see Bug #411) I have a setup where I use Active Directory for authorization via groupmembership_filter. Assume the following: basedn = "dc=example,dc=com" filter = "(userPrincipalName=%{Stripped-User-Name})" base_filter = "(objectclass=user)" groupmembership_filter = "(&(objectClass=group)(member=%{Ldap-UserDn}))" users file: DEFAULT ldap-group == "CN=allow-members-of-this-group,OU=Groups,DC=example,DC=com" The entry in the users file triggers the LDAP group compare function, which in turn first searches for the user (assume Ldap-UserDn has not been set before) and then does a second search using the group DN as base DN and groupmembership_filter as filter. Assume now the first search returns a user_dn containing UTF-8. The %{Ldap-UserDn} in the groupmembership_filter will then be expanded by xlat.c using \ooo (octal) for the 8bit characters. Then, the second search can not match, because the member attribute of the group contains member DNs in UTF-8, but the value to compare has been 'destroyed' by xlat. 1. How can this issue be solved for Ldap-UserDn? Or does a solution already exists that I have overlooked? 2. Is this a general issue for variable expansions handling _all_ 8bit characters as kind of 'non-printable', may be 'unsafe' characters? Remember that most query expansions like in rlm_ldap and rlm_sql have their own notion of unsafe characters and escape again ... Thanks for any ideas. Enrik

2 20

problem with proxy and 2.0pre2
by A.L.M.Buxey＠lboro.ac.uk 28 Aug '07

28 Aug '07

hi, I've been upgrading a few 1.1.7 boxes to 2.0pre2 due to now requiring the extensive new features and fixes ;-) anyway, i am facing an issue with proxying.... leaving the config pretty much as was the default I see the following with rlm_realm in the radiusd -X logging ++[auth_log] returns ok ++[mschap] returns noop rlm_realm: Looking up realm "example.co.uk" for User-Name = "testuser(a)example.co.uk" rlm_realm: No such realm "example.co.uk" ...i have a DEFAULT entry realm in the proxy.conf - as before - but it is not being used or, it seems, detected. a NULL entry is happily used and my locally defined realms and LOCAL realm are also being used. I'll carry on digging to see if theres an assumption or peculiarity being made here. alan

3 5

Automatic report from sources (radiusd) between 24.08.2007 - 25.08.2007 GMT
by Automatic cvs log generator 25 Aug '07

25 Aug '07

CVS log entries from 24.08.2007 (Fri) 08:00:02 - 25.08.2007 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/include/vmps.h; Revisions: 1.1 File: radiusd/src/main/radiusd.c; Revisions: 1.371 File: radiusd/src/main/listen.c; Revisions: 1.98, 1.97 File: radiusd/README; Revisions: 1.8 File: radiusd/src/main/Makefile.in; Revisions: 1.69 File: radiusd/src/main/detail.c; Revisions: 1.1 File: radiusd/src/main/vmps.c; Revisions: 1.3 File: radiusd/src/include/detail.h; Revisions: 1.1 File: radiusd/src/main/evaluate.c; Revisions: 1.28 ===================================================== Combined list of identical log entries ===================================================== Description: Cleaned up socket print routine moved VMPS stuff from listen.c to its own file Modified files: File: radiusd/src/main/listen.c; Revision: 1.97; Date: 2007/08/25 03:56:43; Author: aland; Lines: (+37 -91) File: radiusd/src/main/radiusd.c; Revision: 1.371; Date: 2007/08/25 03:56:44; Author: aland; Lines: (+4 -21) File: radiusd/src/main/vmps.c; Revision: 1.3; Date: 2007/08/25 03:56:44; Author: aland; Lines: (+86 -2) ------------------------------- Description: Moved detail file handling to its own source file Modified files: File: radiusd/src/include/detail.h; Revision: 1.1; Date: 2007/08/25 04:06:59; Author: aland; File: radiusd/src/main/Makefile.in; Revision: 1.69; Date: 2007/08/25 04:06:59; Author: aland; Lines: (+2 -2) File: radiusd/src/main/detail.c; Revision: 1.1; Date: 2007/08/25 04:06:58; Author: aland; File: radiusd/src/main/listen.c; Revision: 1.98; Date: 2007/08/25 04:06:59; Author: aland; Lines: (+5 -690) ===================================================== Log entries ===================================================== Description: More notes on 2.0 Modified files: File: radiusd/README; Revision: 1.8; Date: 2007/08/24 12:42:03; Author: aland; Lines: (+33 -23) ------------------------------- Description: Referenced from src/main/vmps.c Modified files: File: radiusd/src/include/vmps.h; Revision: 1.1; Date: 2007/08/25 03:58:40; Author: aland; ------------------------------- Description: Expand regular expressions, too Modified files: File: radiusd/src/main/evaluate.c; Revision: 1.28; Date: 2007/08/24 12:42:55; Author: aland; Lines: (+3 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/README Revisions: 1.8 Authors: aland (+33 -23) ------------------------------- File: radiusd/src/include/detail.h Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/include/vmps.h Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.69 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/detail.c Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/main/evaluate.c Revisions: 1.28 Authors: aland (+3 -4) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.98, 1.97 Authors: aland (+5 -690), aland (+37 -91) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.371 Authors: aland (+4 -21) ------------------------------- File: radiusd/src/main/vmps.c Revisions: 1.3 Authors: aland (+86 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 23.08.2007 - 24.08.2007 GMT
by Automatic cvs log generator 24 Aug '07

24 Aug '07

CVS log entries from 23.08.2007 (Thu) 08:00:01 - 24.08.2007 (Fri) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/share/dictionary; Revisions: 1.143 File: radiusd/doc/rlm_python; Revisions: 1.2 ===================================================== Log entries ===================================================== Description: Note changes Modified files: File: radiusd/doc/rlm_python; Revision: 1.2; Date: 2007/08/23 12:27:35; Author: aland; Lines: (+2 -2) ------------------------------- Description: Corrected typo Modified files: File: radiusd/share/dictionary; Revision: 1.143; Date: 2007/08/23 08:40:21; Author: aland; Lines: (+1 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/rlm_python Revisions: 1.2 Authors: aland (+2 -2) ------------------------------- File: radiusd/share/dictionary Revisions: 1.143 Authors: aland (+1 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

client info
by ashola ashola 23 Aug '07

23 Aug '07

Hi, does FreeRadius save any information other than sessionID about the supplicant (such as IP address, authenticator, ...). Ashola --------------------------------- Looking for a deal? Find great prices on flights and hotels with Yahoo! FareChase.

1 0

PERL, stable/experimental and included config
by A.L.M.Buxey＠lboro.ac.uk 23 Aug '07

23 Aug '07

hi, PERL is listed as a 'stable' module for some time now, no longer is --with-experimental-modules required to build the rlm_perl, hence I would propose that we now ship with a perl.conf file that conatins, in essence, the old stanza from experimental.conf - and we have commented out entries for perl in the usual places for the rest of the site-enabled/radiusd configs ready for use by those wanting to use this facility (eg in pre-auth, auth, post-auth, pre-acct, acct and post-acct, pre-proxy and post-proxy etc) alan

2 1

Automatic report from sources (radiusd) between 20.08.2007 - 21.08.2007 GMT
by Automatic cvs log generator 21 Aug '07

21 Aug '07

CVS log entries from 20.08.2007 (Mon) 08:00:00 - 21.08.2007 (Tue) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/debian/patches/00list; Revisions: 1.3 File: radiusd/debian/freeradius.examples; Revisions: 1.3, 1.1.2.1.2.1 File: radiusd/debian/patches/01-radiusd-to-freeradius.dpatch; Revisions: 1.1 File: radiusd/debian/freeradius-iodbc.install; Revisions: 1.1 File: radiusd/debian/freeradius-ldap.install; Revisions: 1.1 File: radiusd/debian/freeradius.docs; Revisions: 1.1 File: radiusd/debian/control; Revisions: 1.48 File: radiusd/debian/compat; Revisions: 1.3 File: radiusd/debian/freeradius-dialupadmin.install; Revisions: 1.1 File: radiusd/debian/freeradius.manpages; Revisions: 1.1 File: radiusd/debian/patches/02-dialupadmin-help.dpatch; Revisions: 1.1 File: radiusd/debian/changelog; Revisions: 1.73 File: radiusd/debian/rules; Revisions: 1.66 File: radiusd/debian/freeradius-dialupadmin.examples; Revisions: 1.2 File: radiusd/debian/freeradius.init; Revisions: 1.9 File: radiusd/debian/freeradius.install; Revisions: 1.1 File: radiusd/debian/freeradius-krb5.install; Revisions: 1.1 File: radiusd/debian/freeradius-postgresql.install; Revisions: 1.1 File: radiusd/debian/freeradius-mysql.install; Revisions: 1.1 ===================================================== Combined list of identical log entries ===================================================== Description: Update the list of files that debhelper should install into the "examples" directory. Modified files: File: radiusd/debian/freeradius.examples; Revision: 1.3; Date: 2007/08/20 13:01:50; Author: nbk; Lines: (+10 -1) File: radiusd/debian/freeradius.examples; Revision: 1.1.2.1.2.1; Date: 2007/08/20 13:02:04; Author: nbk; Lines: (+13 -1) ------------------------------- Description: List the files that debhelper should install into each package. Modified files: File: radiusd/debian/freeradius-dialupadmin.install; Revision: 1.1; Date: 2007/08/20 13:07:40; Author: nbk; File: radiusd/debian/freeradius-iodbc.install; Revision: 1.1; Date: 2007/08/20 13:07:40; Author: nbk; File: radiusd/debian/freeradius-krb5.install; Revision: 1.1; Date: 2007/08/20 13:07:40; Author: nbk; File: radiusd/debian/freeradius-ldap.install; Revision: 1.1; Date: 2007/08/20 13:07:41; Author: nbk; File: radiusd/debian/freeradius-mysql.install; Revision: 1.1; Date: 2007/08/20 13:07:41; Author: nbk; File: radiusd/debian/freeradius-postgresql.install; Revision: 1.1; Date: 2007/08/20 13:07:41; Author: nbk; File: radiusd/debian/freeradius.install; Revision: 1.1; Date: 2007/08/20 13:07:40; Author: nbk; ===================================================== Log entries ===================================================== Description: Note main changes to the Debian scripts for 2.0.0-pre2. Modified files: File: radiusd/debian/changelog; Revision: 1.73; Date: 2007/08/20 16:47:54; Author: nbk; Lines: (+34 -84) ------------------------------- Description: Upgrade debhelper compatibility to version 5. This breaks the build on Sarge, which is no longer in stable. Modified files: File: radiusd/debian/compat; Revision: 1.3; Date: 2007/08/20 09:02:23; Author: nbk; Lines: (+1 -1) ------------------------------- Description: Update almost everything... Note new dependences not in Sarge, which means you can't build anymore a package for the old versions of Debian. Modified files: File: radiusd/debian/control; Revision: 1.48; Date: 2007/08/20 09:37:20; Author: nbk; Lines: (+21 -24) ------------------------------- Description: Rename dialup_admin.cron -> freeradius-dialupadmin.cron Modified files: File: radiusd/debian/freeradius-dialupadmin.examples; Revision: 1.2; Date: 2007/08/20 13:50:45; Author: nbk; Lines: (+1 -1) ------------------------------- Description: List the files that debhelper should install as documentation. Modified files: File: radiusd/debian/freeradius.docs; Revision: 1.1; Date: 2007/08/20 13:15:54; Author: nbk; ------------------------------- Description: New initscript that use the LSB start_daemon, killproc and log_* functions instead of calling directly the start-stop-daemon utility from Debian. Force Depends on lsb-base (>= 3.1-23.2) for bug #434756. Modified files: File: radiusd/debian/freeradius.init; Revision: 1.9; Date: 2007/08/20 14:02:52; Author: nbk; Lines: (+84 -43) ------------------------------- Description: List the files that debhelper should install as man pages. Modified files: File: radiusd/debian/freeradius.manpages; Revision: 1.1; Date: 2007/08/20 13:15:36; Author: nbk; ------------------------------- Description: Edit files (for Debian policy) with patches instead of running sed from debian/rules. Modified files: File: radiusd/debian/patches/00list; Revision: 1.3; Date: 2007/08/20 11:35:09; Author: nbk; Lines: (+2 -0) ------------------------------- Description: Change the debian binary name from "radiusd" to "freeradius". Patch from Mark Hymers <mark(a)hymers.org.uk> Modified files: File: radiusd/debian/patches/01-radiusd-to-freeradius.dpatch; Revision: 1.1; Date: 2007/08/20 11:33:30; Author: nbk; ------------------------------- Description: Fix README location. Patch from Mark Hymers <mark(a)hymers.org.uk> Modified files: File: radiusd/debian/patches/02-dialupadmin-help.dpatch; Revision: 1.1; Date: 2007/08/20 11:34:35; Author: nbk; ------------------------------- Description: Rewrite large parts of the Makefile based on the changes from the downstream debian package. (use dpatches and debhelper files where possible) Also add the possibility to make binary-distributable packages by writing "openssl = no" at the beginning of the file. Modified files: File: radiusd/debian/rules; Revision: 1.66; Date: 2007/08/20 14:47:21; Author: nbk; Lines: (+123 -165) ===================================================== Summary of modified files ===================================================== File: radiusd/debian/changelog Revisions: 1.73 Authors: nbk (+34 -84) ------------------------------- File: radiusd/debian/compat Revisions: 1.3 Authors: nbk (+1 -1) ------------------------------- File: radiusd/debian/control Revisions: 1.48 Authors: nbk (+21 -24) ------------------------------- File: radiusd/debian/freeradius-dialupadmin.examples Revisions: 1.2 Authors: nbk (+1 -1) ------------------------------- File: radiusd/debian/freeradius-dialupadmin.install Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/freeradius-iodbc.install Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/freeradius-krb5.install Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/freeradius-ldap.install Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/freeradius-mysql.install Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/freeradius-postgresql.install Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/freeradius.docs Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/freeradius.examples Revisions: 1.3, 1.1.2.1.2.1 Authors: nbk (+10 -1), nbk (+13 -1) ------------------------------- File: radiusd/debian/freeradius.init Revisions: 1.9 Authors: nbk (+84 -43) ------------------------------- File: radiusd/debian/freeradius.install Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/freeradius.manpages Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/patches/00list Revisions: 1.3 Authors: nbk (+2 -0) ------------------------------- File: radiusd/debian/patches/01-radiusd-to-freeradius.dpatch Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/patches/02-dialupadmin-help.dpatch Revisions: 1.1 Authors: nbk ------------------------------- File: radiusd/debian/rules Revisions: 1.66 Authors: nbk (+123 -165) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 19.08.2007 - 20.08.2007 GMT
by Automatic cvs log generator 20 Aug '07

20 Aug '07

CVS log entries from 19.08.2007 (Sun) 08:00:00 - 20.08.2007 (Mon) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/debian/freeradius.postinst; Revisions: 1.11, 1.10, 1.5.2.2.2.3 File: radiusd/debian/freeradius.postrm; Revisions: 1.5, 1.3.4.2 File: radiusd/debian/README.Debian; Revisions: 1.2, 1.1.6.1 File: radiusd/raddb/certs/bootstrap; Revisions: 1.3 File: radiusd/raddb/Makefile; Revisions: 1.31 File: radiusd/debian/copyright; Revisions: 1.7, 1.4.4.2.2.1 File: radiusd/dialup_admin/Makefile; Revisions: 1.2 File: radiusd/debian/freeradius.dirs; Revisions: 1.3, 1.2.6.1 ===================================================== Combined list of identical log entries ===================================================== Description: Only do user creation, group addition, chmod and chown stuff on an initial install to avoid clobbering local changes. Modified files: File: radiusd/debian/freeradius.postinst; Revision: 1.10; Date: 2007/08/19 16:18:59; Author: nbk; Lines: (+23 -12) File: radiusd/debian/freeradius.postinst; Revision: 1.5.2.2.2.3; Date: 2007/08/19 16:19:12; Author: nbk; Lines: (+23 -12) ------------------------------- Description: Debian has changed its position and provide a freeradius-postgresql package now. Modified files: File: radiusd/debian/copyright; Revision: 1.7; Date: 2007/08/19 22:47:34; Author: nbk; Lines: (+3 -9) File: radiusd/debian/copyright; Revision: 1.4.4.2.2.1; Date: 2007/08/19 22:48:00; Author: nbk; Lines: (+3 -9) ------------------------------- Description: Add the directory for detail files. Modified files: File: radiusd/debian/freeradius.dirs; Revision: 1.3; Date: 2007/08/19 17:49:24; Author: nbk; Lines: (+1 -0) File: radiusd/debian/freeradius.dirs; Revision: 1.2.6.1; Date: 2007/08/19 17:49:34; Author: nbk; Lines: (+1 -0) ------------------------------- Description: Document runlevel changes. Modified files: File: radiusd/debian/README.Debian; Revision: 1.2; Date: 2007/08/19 18:00:44; Author: nbk; Lines: (+10 -0) File: radiusd/debian/README.Debian; Revision: 1.1.6.1; Date: 2007/08/19 18:00:58; Author: nbk; Lines: (+10 -0) ------------------------------- Description: Don't leave behind files owned by a non-existant user. Modified files: File: radiusd/debian/freeradius.postrm; Revision: 1.5; Date: 2007/08/19 17:44:37; Author: nbk; Lines: (+17 -0) File: radiusd/debian/freeradius.postrm; Revision: 1.3.4.2; Date: 2007/08/19 17:44:52; Author: nbk; Lines: (+17 -0) ===================================================== Log entries ===================================================== Description: Create default certificates to enable the EAP modules (tls, ttls, and peap) when the server starts for the first time. Reported by Humberto Diogenes <humberto(a)digi.com.br> Modified files: File: radiusd/debian/freeradius.postinst; Revision: 1.11; Date: 2007/08/19 16:22:12; Author: nbk; Lines: (+7 -0) ------------------------------- Description: Oops, a few files from dialup_admin/bin were missing. Modified files: File: radiusd/dialup_admin/Makefile; Revision: 1.2; Date: 2007/08/19 22:32:59; Author: nbk; Lines: (+3 -3) ------------------------------- Description: No longer use realms and naspasswd. Modified files: File: radiusd/raddb/Makefile; Revision: 1.31; Date: 2007/08/19 22:28:50; Author: nbk; Lines: (+8 -9) ------------------------------- Description: Add "umask 027" to prevent the certificates from being world-readable. Modified files: File: radiusd/raddb/certs/bootstrap; Revision: 1.3; Date: 2007/08/19 16:08:14; Author: nbk; Lines: (+2 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/debian/README.Debian Revisions: 1.2, 1.1.6.1 Authors: nbk (+10 -0), nbk (+10 -0) ------------------------------- File: radiusd/debian/copyright Revisions: 1.7, 1.4.4.2.2.1 Authors: nbk (+3 -9), nbk (+3 -9) ------------------------------- File: radiusd/debian/freeradius.dirs Revisions: 1.3, 1.2.6.1 Authors: nbk (+1 -0), nbk (+1 -0) ------------------------------- File: radiusd/debian/freeradius.postinst Revisions: 1.11, 1.10, 1.5.2.2.2.3 Authors: nbk (+7 -0), nbk (+23 -12), nbk (+23 -12) ------------------------------- File: radiusd/debian/freeradius.postrm Revisions: 1.5, 1.3.4.2 Authors: nbk (+17 -0), nbk (+17 -0) ------------------------------- File: radiusd/dialup_admin/Makefile Revisions: 1.2 Authors: nbk (+3 -3) ------------------------------- File: radiusd/raddb/Makefile Revisions: 1.31 Authors: nbk (+8 -9) ------------------------------- File: radiusd/raddb/certs/bootstrap Revisions: 1.3 Authors: nbk (+2 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Bugs installing 2.0pre1
by Humberto Diogenes 19 Aug '07

19 Aug '07

Hi, guys! After successfully building a FreeRadius 2.0pre1 package with "dpkg-buildpackage -us -uc", I had many errors installing and running it. In the end it worked, but I decided to document every error so that they won't appear again when I try 2.0pre2. :) # "freeradius -x" should be "freeradius -X" root@caju-test:/etc# dpkg -i /usr/local/src/freeradius- postgresql_2.0.0-pre0_i386.deb Selecting previously deselected package freeradius-postgresql. (Reading database ... 49070 files and directories currently installed.) Unpacking freeradius-postgresql (from .../freeradius-postgresql_2.0.0- pre0_i386.deb) ... Setting up freeradius-postgresql (2.0.0-pre0) ... Restarting FreeRADIUS daemon... Stopping FreeRADIUS daemon: freeradius. Starting FreeRADIUS daemon: (failed! run '/usr/sbin/freeradius -x' to find out why.) # No exec permission Exec-Program output: Exec-Program: FAILED to execute /etc/freeradius/ certs/bootstrap: Permission denied Exec-Program-Wait: plaintext: Exec-Program: FAILED to execute /etc/ freeradius/certs/bootstrap: Permission denied root@caju-test:/etc# ls freeradius/certs/ -l -rw-r----- 1 root freerad 297 2007-08-18 02:22 bootstrap (...) # chmod +x certs/bootstrap # After that: Generating a 2048 bit RSA private key ........................................................................ .................................................+++ ......................+++ unable to write 'random state' writing new private key to 'ca.key' # Fixing it: chmod g+w certs freeradius -X # Creates certificates OK # After that, wrong permissions for new files: root@caju-test:/etc/freeradius/certs# ls -la total 54 drwxr-s--x 2 root freerad 1024 2007-08-18 02:37 . drwxr-s--x 4 root freerad 1024 2007-08-18 02:33 .. -rw-r--r-- 1 freerad freerad 4210 2007-08-18 02:36 01.pem -rwxr-x--- 1 root freerad 297 2007-08-18 02:22 bootstrap -rw-r----- 1 root freerad 1155 2007-08-18 02:22 ca.cnf (...) -rw-r--r-- 1 freerad freerad 5120 2007-08-18 02:37 random -rw-r----- 1 root freerad 4063 2007-08-18 02:22 README -rw-r--r-- 1 freerad freerad 3 2007-08-18 02:36 serial -rw-r--r-- 1 freerad freerad 3 2007-08-18 02:36 serial.old -rw-r----- 1 root freerad 1123 2007-08-18 02:22 server.cnf (...) -rw-r--r-- 1 freerad freerad 3503 2007-08-18 02:36 server.pem # Fixing permissions: root@caju-test:/etc/freeradius/certs# chown root * root@caju-test:/etc/freeradius/certs# chmod o= * # /doc/examples/postgresql.sql # radusergroup comes without primary key CREATE TABLE radusergroup ( id SERIAL PRIMARY KEY, -- this line is missing UserName VARCHAR(64) NOT NULL DEFAULT '', GroupName VARCHAR(64) NOT NULL DEFAULT '', priority INTEGER NOT NULL DEFAULT 0 ); # What does this mean? # (output of freeradius -X after simple authentication with radtest) !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!! !!! Replacing User-Password in config items with Cleartext- Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User- Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!! And that's all. -- Humberto Diógenes http://humberto.digi.com.br

4 5

Automatic report from sources (radiusd) between 18.08.2007 - 19.08.2007 GMT
by Automatic cvs log generator 19 Aug '07

19 Aug '07

CVS log entries from 18.08.2007 (Sat) 08:00:00 - 19.08.2007 (Sun) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/debian/freeradius.init; Revisions: 1.8 File: radiusd/INSTALL; Revisions: 1.8 File: radiusd/raddb/certs/bootstrap; Revisions: 1.2 ===================================================== Log entries ===================================================== Description: Updated for new methods of doing stuff Modified files: File: radiusd/INSTALL; Revision: 1.8; Date: 2007/08/18 13:29:46; Author: aland; Lines: (+31 -38) ------------------------------- Description: Recommend -X, not -x Modified files: File: radiusd/debian/freeradius.init; Revision: 1.8; Date: 2007/08/18 13:17:46; Author: aland; Lines: (+1 -1) ------------------------------- Description: More notes Modified files: File: radiusd/raddb/certs/bootstrap; Revision: 1.2; Date: 2007/08/18 13:34:31; Author: aland; Lines: (+5 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/INSTALL Revisions: 1.8 Authors: aland (+31 -38) ------------------------------- File: radiusd/debian/freeradius.init Revisions: 1.8 Authors: aland (+1 -1) ------------------------------- File: radiusd/raddb/certs/bootstrap Revisions: 1.2 Authors: aland (+5 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

checkrad && naspasswd
by Alan DeKok 18 Aug '07

18 Aug '07

I've nuked naspasswd from CVS head. It's been marked deprecated for a while, and it's time to get rid of it. I also don't like checkrad.pl... it's awkward, and complicated. My $0.02 for a different way is to split "checkrad" into nas-specific scripts. They can use Perl's "require" statement to include common libraries. e.g. /usr/share/freeradius/nas/common.pl /usr/share/freeradius/nas/<nastype> The idea is that "nastype" field in clients.conf maps *directly* to an executable file. The "login" and "password" fields in clients.conf are then used by the server core, and fed to the per-nas script via stdin. This is a bit of a change from what's there now, but more integrated, and better laid out. *Or* use the Perl module, as suggested by Kostas in: http://lists.freeradius.org/pipermail/freeradius-devel/2005-April/008293.ht… Either way, I think splitting "checkrad" into multiple files is still a good idea. Alan DeKok.

1 0

Automatic report from sources (radiusd) between 17.08.2007 - 18.08.2007 GMT
by Automatic cvs log generator 18 Aug '07

18 Aug '07

CVS log entries from 17.08.2007 (Fri) 08:00:00 - 18.08.2007 (Sat) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.185 File: radiusd/src/modules/rlm_mschap/opendir.c; Revisions: 1.3 File: radiusd/share/dictionary.nokia.conflict; Revisions: 1.1 File: radiusd/share/dictionary.nokia; Revisions: 1.6, 1.5 File: radiusd/share/dictionary; Revisions: 1.142 ===================================================== Combined list of identical log entries ===================================================== Description: Moved conflicting attributes to dictionary.nokia.conflict, and include dictionary.nokia in the main set. Modified files: File: radiusd/share/dictionary; Revision: 1.142; Date: 2007/08/17 12:05:05; Author: aland; Lines: (+4 -1) File: radiusd/share/dictionary.nokia; Revision: 1.5; Date: 2007/08/17 12:05:05; Author: aland; Lines: (+6 -21) File: radiusd/share/dictionary.nokia.conflict; Revision: 1.1; Date: 2007/08/17 12:05:05; Author: aland; ===================================================== Log entries ===================================================== Description: Added new attributes from bug #456 Modified files: File: radiusd/share/dictionary.nokia; Revision: 1.6; Date: 2007/08/17 12:06:46; Author: aland; Lines: (+5 -2) ------------------------------- Description: Corrected typos. Fixes bug #469 Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.185; Date: 2007/08/17 11:55:22; Author: aland; Lines: (+11 -11) ------------------------------- Description: Patch to fix bug #474 Modified files: File: radiusd/src/modules/rlm_mschap/opendir.c; Revision: 1.3; Date: 2007/08/17 11:50:59; Author: aland; Lines: (+14 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary Revisions: 1.142 Authors: aland (+4 -1) ------------------------------- File: radiusd/share/dictionary.nokia Revisions: 1.6, 1.5 Authors: aland (+5 -2), aland (+6 -21) ------------------------------- File: radiusd/share/dictionary.nokia.conflict Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.185 Authors: aland (+11 -11) ------------------------------- File: radiusd/src/modules/rlm_mschap/opendir.c Revisions: 1.3 Authors: aland (+14 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Question about freeradius+mssql's empty radacct table
by fzhuxl 18 Aug '07

18 Aug '07

Dear all, I have setup my AAA(freeradius+mssql).Fortunately,everything goes ok（I can dialup now）,except the table named "radacct" in my radius datatabse(sqlserver 2k) is empty. What I have done： 1.installed: freeradius<->unixODBC+freeTDS<->SQL SERVER 2K 2.configure the radiusd.conf 　$INCLUDE ${confdir}/mssql.conf authorize { 　　… 　　sql 　　… 　　} 　　accouting { 　　… 　　sql 　　… 　　} 3. configure the mssql.conf driver = "rlm_sql_unixodbc" # Connect info server = "blackboardDSN" login = "tester" password = "letmein" # Database table configuration radius_db = "radius" # Print all SQL statements when in debug mode (-x) sqltrace = no sqltracefile = ${logdir}/sqltrace.sql 4. sql server2k database "radius" tables created: usergroup,radcheck,redreply,radgroupcheck,radgroupreply,radacct,radreply,usergroup create user: "radius" grant "db_datareader","db_datawriter","public" to the new user--"radius". finally test: the dialing authentication is ok,but the dial-up log is not recorded in radacct table.It is totally empty! How can I get the dial-up log in radacct? I am appreciating help from you. Thanks and Regards 　　　　　　　　a55567(a)21cn.com 　　　　　　　　　　2007-08-18

1 0

NAS-Identifier
by Peter Nixon 17 Aug '07

17 Aug '07

Is there any particular reason why we don't by default store NAS-Identifier in the SQL db? -- Peter Nixon http://peternixon.net/

4 5

multiple database usage...
by A.L.M.Buxey＠lboro.ac.uk 16 Aug '07

16 Aug '07

hi, quick question: is it possible to use multiple databases at the same time with rlm_sql - eg MySQL *and* PostgreSQL. from my looking at the configs and a brief skim of the code it appears that rlm_sql can only instantiate one of the drivers...but not both correct? alan

2 1

Automatic report from sources (radiusd) between 15.08.2007 - 16.08.2007 GMT
by Automatic cvs log generator 16 Aug '07

16 Aug '07

CVS log entries from 15.08.2007 (Wed) 08:00:00 - 16.08.2007 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_sqlippool/Makefile.in; Revisions: 1.6 File: radiusd/src/main/session.c; Revisions: 1.41 File: radiusd/man/man5/rlm_sql.5; Revisions: 1.3 File: radiusd/doc/RADIUS-SQL.schema; Revisions: 1.8 ===================================================== Log entries ===================================================== Description: Point to correct places Modified files: File: radiusd/doc/RADIUS-SQL.schema; Revision: 1.8; Date: 2007/08/16 00:41:53; Author: aland; Lines: (+4 -7) ------------------------------- Description: More updates Modified files: File: radiusd/man/man5/rlm_sql.5; Revision: 1.3; Date: 2007/08/16 00:45:12; Author: aland; Lines: (+3 -3) ------------------------------- Description: Set stopreq->listener Modified files: File: radiusd/src/main/session.c; Revision: 1.41; Date: 2007/08/15 13:14:10; Author: aland; Lines: (+3 -2) ------------------------------- Description: Reference ltdl include directory Modified files: File: radiusd/src/modules/rlm_sqlippool/Makefile.in; Revision: 1.6; Date: 2007/08/15 13:16:57; Author: aland; Lines: (+2 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/RADIUS-SQL.schema Revisions: 1.8 Authors: aland (+4 -7) ------------------------------- File: radiusd/man/man5/rlm_sql.5 Revisions: 1.3 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/session.c Revisions: 1.41 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/Makefile.in Revisions: 1.6 Authors: aland (+2 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

session_zap, rlm_detail segfault
by Stephan Jaeger 15 Aug '07

15 Aug '07

Hello, in session_zap there is no listener set for the generated request and in rlm_detail.c in detail_accounting() there is a check for request->listener->type == RAD_LISTEN_DETAIL which lets the server segfault. Regards Stephan Jaeger -- Stephan Jaeger <stephan.jaeger(a)ewetel.de> EWE TEL GmbH

2 2

Problem in starting Free Radius after installation. Please reply urgent
by Akhnukh Bashir Khan 15 Aug '07

15 Aug '07

Hi, I have installed free radius on Linux machine. I have changed Free Radius configuration parameter using flag with ./configure -flags command . I set the following path /radius/log /radius/radacct /radius/raddb But when I try to start it radiusd it gives me following error. radiusd Info: Starting - reading configuration files ... Error: Configuration directory /radius/raddb/ is globally writable. Refusing to start due to insecure configuration. Error: Errors reading radiusd.conf Please tell me what is issue and how to solve this issue. Urgently. Thanks. Regards, ------------------------ Akhnukh Bashir Khan Cell: +973 36 730 283

2 1