January 2008 - Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 12.01.2008 - 13.01.2008 GMT
by Automatic cvs log generator 13 Jan '08

13 Jan '08

CVS log entries from 12.01.2008 (Sat) 09:00:01 - 13.01.2008 (Sun) 09:00:03 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c; Revisions: 1.42 ===================================================== Log entries ===================================================== Description: Set operator Modified files: File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c; Revision: 1.42; Date: 2008/01/12 15:06:43; Author: aland; Lines: (+2 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c Revisions: 1.42 Authors: aland (+2 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 11.01.2008 - 12.01.2008 GMT
by Automatic cvs log generator 12 Jan '08

12 Jan '08

CVS log entries from 11.01.2008 (Fri) 09:00:00 - 12.01.2008 (Sat) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c; Revisions: 1.41 File: radiusd/Makefile; Revisions: 1.55 File: radiusd/suse/freeradius.spec; Revisions: 1.23 File: radiusd/redhat/freeradius.spec; Revisions: 1.25 File: radiusd/doc/release-method.txt; Revisions: 1.7 File: radiusd/debian/changelog; Revisions: 1.75 ===================================================== Combined list of identical log entries ===================================================== Description: Update for 2.0.1-pre You can now do "make dist-check", which does some sanity check on the build files Modified files: File: radiusd/Makefile; Revision: 1.55; Date: 2008/01/11 11:03:19; Author: aland; Lines: (+18 -3) File: radiusd/debian/changelog; Revision: 1.75; Date: 2008/01/11 11:03:20; Author: aland; Lines: (+5 -0) File: radiusd/redhat/freeradius.spec; Revision: 1.25; Date: 2008/01/11 11:03:19; Author: aland; Lines: (+1 -1) File: radiusd/suse/freeradius.spec; Revision: 1.23; Date: 2008/01/11 11:03:20; Author: aland; Lines: (+1 -1) ===================================================== Log entries ===================================================== Description: Notes for 2.0 methods Modified files: File: radiusd/doc/release-method.txt; Revision: 1.7; Date: 2008/01/11 11:03:47; Author: aland; Lines: (+39 -132) ------------------------------- Description: Permit Client-IP-Address to work Modified files: File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c; Revision: 1.41; Date: 2008/01/12 08:04:29; Author: aland; Lines: (+19 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/Makefile Revisions: 1.55 Authors: aland (+18 -3) ------------------------------- File: radiusd/debian/changelog Revisions: 1.75 Authors: aland (+5 -0) ------------------------------- File: radiusd/doc/release-method.txt Revisions: 1.7 Authors: aland (+39 -132) ------------------------------- File: radiusd/redhat/freeradius.spec Revisions: 1.25 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c Revisions: 1.41 Authors: aland (+19 -2) ------------------------------- File: radiusd/suse/freeradius.spec Revisions: 1.23 Authors: aland (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

nas table on mysql and new clients.conf structure
by Stefan Winter 11 Jan '08

11 Jan '08

Hi, the nas table structure and the capabilities of stanzas in clients.conf are not in sync. I can make up a patch, but I'm not sure if I can do it *today*. Is it still a plan to get it out today? It could wait for 2.0.1 of course... Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter(a)restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473

3 5

binding on IPv6
by Stefan Winter 11 Jan '08

11 Jan '08

Hi, our production server binds to 0.0.0.0:1812 according to netstat. Now I wanted to add a FR 2.0 on a specific IPv6 address on the same port, but that fails. I used to think these bindings should not conflict, and a netcat session can easily do it. Details: - netcat before start: /usr/local/freeradius/2.0.0-cvs/sbin # netstat -tunelup Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 0.0.0.0:5666 0.0.0.0:* LISTEN 0 209295 9124/xinetd tcp 0 0 0.0.0.0:8525 0.0.0.0:* LISTEN 0 267899 9931/tina_daemon tcp 0 0 :::22 :::* LISTEN 0 5711 2771/sshd udp 0 0 0.0.0.0:1812 0.0.0.0:* 1001 1254100 16368/radiusd udp 0 0 0.0.0.0:1813 0.0.0.0:* 1001 1254101 16368/radiusd udp 0 0 0.0.0.0:8526 0.0.0.0:* 0 267902 9931/tina_daemon udp 0 0 127.0.0.1:123 0.0.0.0:* 0 5741 2778/ntpd udp 0 0 158.64.1.220:123 0.0.0.0:* 0 5738 2778/ntpd udp 0 0 0.0.0.0:123 0.0.0.0:* 0 5732 2778/ntpd udp 0 0 :::123 :::* 0 5733 2778/ntpd Addresses are: # ifconfig eth0 Link encap:Ethernet HWaddr 00:16:35:3C:32:E4 inet addr:158.64.1.220 Bcast:158.64.1.223 Mask:255.255.255.224 inet6 addr: 2001:a18:1:6::220/64 Scope:Global inet6 addr: fe80::216:35ff:fe3c:32e4/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:73884754 errors:0 dropped:0 overruns:0 frame:0 TX packets:113377902 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:23763202028 (22662.3 Mb) TX bytes:50454772482 (48117.4 Mb) Interrupt:25 attempting to start with two listen directives on port 0, once for auth, once for acct: radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipv6addr = 2001:a18:1:6::220 IPv6 address [2001:a18:1:6::220] port = 0 ERROR: Failed to open socket: /usr/local/freeradius/config2//sites-enabled/default[38]: Error binding to port for 2001:a18:1:6::220 port 1812 (which should be fine, according to the binding list of netstat) Using other ports works, here auth configured as 5000, acct as 5001: radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipv6addr = 2001:a18:1:6::220 IPv6 address [2001:a18:1:6::220] port = 5000 } listen { type = "acct" ipv6addr = 2001:a18:1:6::220 IPv6 address [2001:a18:1:6::220] port = 5001 } Listening on authentication address 2001:a18:1:6::220 port 5000 Listening on accounting address 2001:a18:1:6::220 port 5001 Ready to process requests. -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter(a)restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473

2 3

subattributes related advice neded
by Cristian Novac 11 Jan '08

11 Jan '08

Hello all, I am using freeradius in a wimax environment(a small network for testing purposes). I made a dictionary(attached below) and used it in tests. But writting my VSAs in the reply lists of my users(in users file) is not very pleasant(as you may see in the users file attached below). So, I want to add some code in freeradius so that I may write my VSAs in the users file using subattributes . Here is what I want : -for user ERTVR, instead of writting : ERTVR User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor = 0x0001041112040303050304060301070313080314, QoS-Descriptor += 0x800103130403050503030606000fa00007060007d00009060000000a0a06000000140c03800d040014, QoS-Descriptor += 0x000103140403050503030606002ee3e80706000fa00009060000000a0a06000000140c0380 -I want to be able to write: .... Service-Flow-Descriptor = 0x00{PacketDataFlowID=1112}{...}{...}..., #where PacketDataFlow is another defined attribute; every content between{} is a TLV .... I haven't written before any piece of code for freeradius,so it's my first time and I thought you may give me advices about how to deal with this problem; maybe what/where changes in the project would be needed to achieve that. Thank you in advance ! Cristian NOVAC. #1232420100000015 Auth-Type := EAP, Autz-Type:=EAP, EAP-Type := SIM # EAP-Sim-Rand1 = 0x30000000000000000000000000000000, # EAP-Sim-SRES1 = 0x30112233, # EAP-Sim-KC1 = 0x445566778899AABB, # EAP-Sim-Rand2 = 0x31000000000000000000000000000000, # EAP-Sim-SRES2 = 0x31112233, # EAP-Sim-KC2 = 0x445566778899AABB, # EAP-Sim-Rand3 = 0x32000000000000000000000000000000, # EAP-Sim-SRES3 = 0x32112233, # EAP-Sim-KC3 = 0x445566778899AABB, #2244070100000001(a)japsim.foo Auth-Type := EAP, Autz-Type:= EAP, EAP-Type := SIM # EAP-Sim-Rand1 = 0x101112131415161718191a1b1c1d1e1f, # EAP-Sim-SRES1 = 0xd1d2d3d4, # EAP-Sim-Rand2 = 0x202122232425262728292a2b2c2d2e2f, # EAP-Sim-SRES2 = 0xe1e2e3e4, # EAP-Sim-Rand3 = 0x303132333435363738393a3b3c3d3e3f, # EAP-Sim-SRES3 = 0xf1f2f3f4, # EAP-Sim-KC1 = 0xa0a1a2a3a4a5a6a7, # EAP-Sim-KC2 = 0xb0b1b2b3b4b5b6b7, # EAP-Sim-KC3 = 0xc0c1c2c3c4c5c6c7, # # Please read the documentation file ../doc/processing_users_file, # or 'man 5 users' (after installing the server) for more information. # # This file contains authentication security and configuration # information for each user. Accounting requests are NOT processed # through this file. Instead, see 'acct_users', in this directory. # # The first field is the user's name and can be up to # 253 characters in length. This is followed (on the same line) with # the list of authentication requirements for that user. This can # include password, comm server name, comm server port number, protocol # type (perhaps set by the "hints" file), and huntgroup name (set by # the "huntgroups" file). # # If you are not sure why a particular reply is being sent by the # server, then run the server in debugging mode (radiusd -X), and # you will see which entries in this file are matched. # # When an authentication request is received from the comm server, # these values are tested. Only the first match is used unless the # "Fall-Through" variable is set to "Yes". # # A special user named "DEFAULT" matches on all usernames. # You can have several DEFAULT entries. All entries are processed # in the order they appear in this file. The first entry that # matches the login-request will stop processing unless you use # the Fall-Through variable. # # If you use the database support to turn this file into a .db or .dbm # file, the DEFAULT entries _have_ to be at the end of this file and # you can't have multiple entries for one username. # # You don't need to specify a password if you set Auth-Type += System # on the list of authentication requirements. The RADIUS server # will then check the system password file. # # Indented (with the tab character) lines following the first # line indicate the configuration values to be passed back to # the comm server to allow the initiation of a user session. # This can include things like the PPP configuration values # or the host to log the user onto. # # You can include another `users' file with `$INCLUDE users.other' # # # For a list of RADIUS attributes, and links to their definitions, # see: # # http://www.freeradius.org/rfc/attributes.html # @asb.com User-Password == "mypass@wd" Framed-MTU = 3795, 3GPP2-Service-Option-Profile = 0x000000100104a501, Fall-Through = Yes myuser User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, 3GPP2-Service-Option-Profile = 0x000000100104a501, Service-Flow-Descriptor = 0x000104008302040083040303050304060301070383080384, QoS-Descriptor += 0x8001038304030206060001f4000c0302, QoS-Descriptor += 0x000103840403020606000fa0000c0302, Fall-Through = Yes #VSA SF #myuser Auth-Type := Local, User-Password == "mypass@wd" # Session-Timeout = 3600, # Termination-Action = 1, # Class = 0x1234567890, # User-Name = "accounting", # Service-Flow-Descriptor += 0x800104111102041112040303050304060301070311080312, # Service-Flow-Descriptor += 0x000104002302040003040303050301060301070304, # QoS-Descriptor += 0x8001031104030206060007d0000c0302, # QoS-Descriptor += 0x800103120403020606001f40000c0302, # QoS-Descriptor += 0x0001030404030606060001d4c0070600015f900906000000140a06000000190c03010d040014 BE2048 User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor = 0x000104008302040083040303050304060301070383080384, QoS-Descriptor += 0x800103830403020606000F40000c0302, QoS-Descriptor += 0x000103840403020606001F40000c0302 UGS1024 User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor = 0x0001041111040303050304060301070311, QoS-Descriptor += 0x000103110403060706000fa0000906000000140a06000000140c03010d040014 UGS3073 User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor = 0x0001041111040303050304060301070312, QoS-Descriptor += 0x000103120403060706002ee3e80906000000140a06000000140c03010d040014 BE_UGS User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x800104008302040083040303050304060301070383080384, Service-Flow-Descriptor += 0x0001041111040303050304060301070312, QoS-Descriptor += 0x800103830403020606000F40000c0302, QoS-Descriptor += 0x800103840403020606001F40000c0302, QoS-Descriptor += 0x000103120403060706002ee3e80906000000140a06000000140c03010d040014 ERTVR User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor = 0x0001041112040303050304060301070313080314, QoS-Descriptor += 0x800103130403050503030606000fa00007060007d00009060000000a0a06000000140c03800d040014, QoS-Descriptor += 0x000103140403050503030606002ee3e80706000fa00009060000000a0a06000000140c0380 ERTVR_BE User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x000104008302040083040303050304060301070383080384, QoS-Descriptor += 0x800103130403050503030606000fa00007060007d00009060000000a0a06000000140c03800d040014, QoS-Descriptor += 0x800103140403050503030606002ee3e80706000fa00009060000000a0a06000000140c0380, QoS-Descriptor += 0x800103830403020606000F40000c0302, QoS-Descriptor += 0x000103840403020606001F40000c0302 ERTVR_UGS User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x0001041111040303050304060301070312, QoS-Descriptor += 0x800103130403050503030606000fa00007060007d00009060000000a0a06000000140c03800d040014, QoS-Descriptor += 0x800103140403050503030606002ee3e80706000fa00009060000000a0a06000000140c0380, QoS-Descriptor += 0x000103120403060706002ee3e80906000000140a06000000140c03010d040014 UGS_ERTVR User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041111040303050304060301070312, Service-Flow-Descriptor += 0x0001041112040303050304060301070313080314, QoS-Descriptor += 0x800103120403060706000fa0000906000000140a06000000140c03010d040014, QoS-Descriptor += 0x800103130403050503030606000fa00007060007d00009060000000a0a06000000140c03800d040014, QoS-Descriptor += 0x000103140403050503030606002ee3e80706000fa00009060000000a0a06000000140c0380 ERTVR_UGS2 User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x0001041111040303050304060301070312, QoS-Descriptor += 0x800103130403050503030606000fa00007060007d00009060000000a0a06000000140c03800d040014, QoS-Descriptor += 0x800103140403050503030606002ee3e80706000fa00009060000000a0a06000000140c0380, QoS-Descriptor += 0x000103120403060706002ee3e80906000000140a06000000140c03010d040014 ERTVR_UGS1 User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x0001041111040303050304060301070311, QoS-Descriptor += 0x800103130403050503030606000fa00007060007d00009060000000a0a06000000140c03800d040014, QoS-Descriptor += 0x800103140403050503030606002ee3e80706000fa00009060000000a0a06000000140c0380, QoS-Descriptor += 0x000103110403060706000fa0000906000000140a06000000140c03010d040014 NRTVR User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x0001041112040303050304060301070313080314, QoS-Descriptor += 0x8001031304030305030107060003e8000c0382, QoS-Descriptor += 0x0001031404030305030107060007d0000c0382 NRTVR1 User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor = 0x0001041112040303050304060301070313080314, QoS-Descriptor += 0x8001031304030305030106060007d00007060007d0000c0382, QoS-Descriptor += 0x000103140403030503010606000fa0000706000fa0000c0382 NRTVR_UGS User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x0001041111040303050304060301070312, QoS-Descriptor += 0x8001031304030305030106060007d00007060007d0000c0382, QoS-Descriptor += 0x800103140403030503010606000fa0000706000fa0000c0382, QoS-Descriptor += 0x000103120403060706002ee3e80906000000140a06000000140c03010d040014 NRTVR_BE User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x000104008302040083040303050304060301070383080384, QoS-Descriptor += 0x8001031304030305030106060007d00007060007d0000c0382, QoS-Descriptor += 0x800103140403030503010606000fa0000706000fa0000c0382, QoS-Descriptor += 0x800103830403020606000F40000c0302, QoS-Descriptor += 0x000103840403020606001F40000c0302 NRTVR_UGS1 User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x0001041111040303050304060301070311, QoS-Descriptor += 0x8001031304030305030106060007d00007060007d0000c0382, QoS-Descriptor += 0x800103140403030503010606000fa0000706000fa0000c0382, QoS-Descriptor += 0x000103110403060706000fa0000906000000140a06000000140c03010d040014 RTVR User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor = 0x0001041112040303050304060301070313080314, QoS-Descriptor += 0x800103130403040503020606000FA00007060007d0000a06000000640c03810f040032, QoS-Descriptor += 0x000103140403040503020606001f40000706000fa0000a06000000640c0381 RTVR_BE User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x000104008302040083040303050304060301070383080384, QoS-Descriptor += 0x800103130403040503020606000FA00007060007d0000a06000000640c03810f040032, QoS-Descriptor += 0x800103140403040503020606001f40000706000fa0000a06000000640c0381, QoS-Descriptor += 0x800103830403020606000F40000c0302, QoS-Descriptor += 0x000103840403020606001F40000c0302 RTVR_UGS1 User-Password == "mypass@wd" Session-Timeout = 3600, Termination-Action = 1, Service-Flow-Descriptor += 0x8001041112040303050304060301070313080314, Service-Flow-Descriptor += 0x0001041111040303050304060301070311, QoS-Descriptor += 0x800103130403040503020606000FA00007060007d0000a06000000640c03810f040032, QoS-Descriptor += 0x800103140403040503020606001f40000706000fa0000a06000000640c0381, QoS-Descriptor += 0x800103140403030503010606000fa0000706000fa0000c0382, QoS-Descriptor += 0x000103110403060706000fa0000906000000140a06000000140c03010d040014 # # Deny access for a specific user. Note that this entry MUST # be before any other 'Auth-Type' attribute which results in the user # being authenticated. # # Note that there is NO 'Fall-Through' attribute, so the user will not # be given any additional resources. # #lameuser Auth-Type := Reject # Reply-Message = "Your account has been disabled." # # Deny access for a group of users. # # Note that there is NO 'Fall-Through' attribute, so the user will not # be given any additional resources. # #DEFAULT Group == "disabled", Auth-Type := Reject # Reply-Message = "Your account has been disabled." # # # This is a complete entry for "steve". Note that there is no Fall-Through # entry so that no DEFAULT entry will be used, and the user will NOT # get any attributes in addition to the ones listed here. # #steve Auth-Type := Local, User-Password == "testing" # Service-Type = Framed-User, # Framed-Protocol = PPP, # Framed-IP-Address = 172.16.3.33, # Framed-IP-Netmask = 255.255.255.0, # Framed-Routing = Broadcast-Listen, # Framed-Filter-Id = "std.ppp", # Framed-MTU = 1500, # Framed-Compression = Van-Jacobsen-TCP-IP # # This is an entry for a user with a space in their name. # Note the double quotes surrounding the name. # #"John Doe" Auth-Type := Local, User-Password == "hello" # Reply-Message = "Hello, %u" # # Dial user back and telnet to the default host for that port # #Deg Auth-Type := Local, User-Password == "ge55ged" # Service-Type = Callback-Login-User, # Login-IP-Host = 0.0.0.0, # Callback-Number = "9,5551212", # Login-Service = Telnet, # Login-TCP-Port = Telnet # # Another complete entry. After the user "dialbk" has logged in, the # connection will be broken and the user will be dialed back after which # he will get a connection to the host "timeshare1". # #dialbk Auth-Type := Local, User-Password == "callme" # Service-Type = Callback-Login-User, # Login-IP-Host = timeshare1, # Login-Service = PortMaster, # Callback-Number = "9,1-800-555-1212" # # user "swilson" will only get a static IP number if he logs in with # a framed protocol on a terminal server in Alphen (see the huntgroups file). # # Note that by setting "Fall-Through", other attributes will be added from # the following DEFAULT entries # #swilson Service-Type == Framed-User, Huntgroup-Name == "alphen" # Framed-IP-Address = 192.168.1.65, # Fall-Through = Yes # # If the user logs in as 'username.shell', then authenticate them # against the system database, give them shell access, and stop processing # the rest of the file. # #DEFAULT Suffix == ".shell", Auth-Type := System # Service-Type = Login-User, # Login-Service = Telnet, # Login-IP-Host = your.shell.machine # # The rest of this file contains the several DEFAULT entries. # DEFAULT entries match with all login names. # Note that DEFAULT entries can also Fall-Through (see first entry). # A name-value pair from a DEFAULT entry will _NEVER_ override # an already existing name-value pair. # # # First setup all accounts to be checked against the UNIX /etc/passwd. # (Unless a password was already given earlier in this file). # DEFAULT Auth-Type = Local # 3GPP2-Service-Option-Profile = 0x000000020104800101048101, # 3GPP2-Service-Option-Profile = 0x000000100104800101048801010490010104A0010104A8010104B0010104C0010104800101048801010490010104A0010104A8010104B0010104C0010104800101048801, # Session-Timeout = 3600, # Termination-Action = 1 # Fall-Through = 1 # # Set up different IP address pools for the terminal servers. # Note that the "+" behind the IP address means that this is the "base" # IP address. The Port-Id (S0, S1 etc) will be added to it. # #DEFAULT Service-Type == Framed-User, Huntgroup-Name == "alphen" # Framed-IP-Address = 192.168.1.32+, # Fall-Through = Yes #DEFAULT Service-Type == Framed-User, Huntgroup-Name == "delft" # Framed-IP-Address = 192.168.2.32+, # Fall-Through = Yes # # Defaults for all framed connections. # #DEFAULT Service-Type == Framed-User # Framed-IP-Address = 255.255.255.254, # Framed-MTU = 576, # Service-Type = Framed-User, # Fall-Through = Yes # # Default for PPP: dynamic IP address, PPP mode, VJ-compression. # NOTE: we do not use Hint = "PPP", since PPP might also be auto-detected # by the terminal server in which case there may not be a "P" suffix. # The terminal server sends "Framed-Protocol = PPP" for auto PPP. # #DEFAULT Framed-Protocol == PPP # Framed-Protocol = PPP, # Framed-Compression = Van-Jacobson-TCP-IP # # Default for CSLIP: dynamic IP address, SLIP mode, VJ-compression. # #DEFAULT Hint == "CSLIP" # Framed-Protocol = SLIP, # Framed-Compression = Van-Jacobson-TCP-IP # # Default for SLIP: dynamic IP address, SLIP mode. # #DEFAULT Hint == "SLIP" # Framed-Protocol = SLIP # # Last default: rlogin to our main server. # #DEFAULT # Service-Type = Login-User, # Login-Service = Rlogin, # Login-IP-Host = shellbox.ispdomain.com # # # # Last default: shell on the local terminal server. # # # DEFAULT # Service-Type = Shell-User # On no match, the user is denied access. VENDOR WIMAX 24757 BEGIN-VENDOR WIMAX ATTRIBUTE Service-Flow-Descriptor 28 octets ATTRIBUTE QoS-Descriptor 29 octets END-VENDOR WIMAX

3 3

sun c 5.8 compiling freeradius-1.1.7 issue in solaris 10
by Ping Chen C 11 Jan '08

11 Jan '08

hi, i want to compile freeradius with mysql in solaris 10, then i do like this, ./configure CC=cc --prefix=/usr/local/freeradius-1.1.7-mysql --with-mysql-dir=/usr/local/mysql configure seems ok, but during making the src code, error occured, see the info below, /freeradius-1.1.7/libtool --mode=link cc -export-dynamic -dlopen self \ -L/usr/local/mysql/lib -R/usr/local/mysql/lib -pie -o radiusd acct.lo auth.lo client.lo conffile.lo exec.lo files.lo log.lo mainconfig.lo modules.lo modcall.lo nas.lo proxy.lo radiusd.lo radius_snmp.lo request_list.lo session.lo smux.lo threads.lo util.lo valuepair.lo version.lo timestr.lo xlat.lo \ -lnsl -lresolv -lsocket -lposix4 -lpthread ../lib/libradius.la \ -lltdl rm -f .libs/radiusd.nm .libs/radiusd.nmS .libs/radiusd.nmT creating .libs/radiusdS.c (cd .libs && cc -g -c "radiusdS.c") rm -f .libs/radiusdS.c .libs/radiusd.nm .libs/radiusd.nmS .libs/radiusd.nmT cc .libs/radiusdS.o -pie -o .libs/radiusd .libs/acct.o .libs/auth.o .libs/client.o .libs/conffile.o .libs/exec.o .libs/files.o .libs/log.o .libs/mainconfig.o .libs/modules.o .libs/modcall.o .libs/nas.o .libs/proxy.o .libs/radiusd.o .libs/radius_snmp.o .libs/request_list.o .libs/session.o .libs/smux.o .libs/threads.o .libs/util.o .libs/valuepair.o .libs/version.o .libs/timestr.o .libs/xlat.o -L/usr/local/mysql/lib -lnsl -lresolv -lsocket -lposix4 -lpthread ../lib/.libs/libradius.so -lcrypt /usr/local/lib/libltdl.so -L/usr/local/lib -L/usr/local/ssl/lib -L/usr/openwin/lib -L/usr/lib -L/usr/local/BerkeleyDB.4.2/lib -L/usr/X11R6/lib -ldl -R/usr/local/freeradius-1.1.7-mysql/lib -R/usr/local/lib -R/usr/local/mysql/lib ld: fatal: file .libs/radiusd: open failed: No such file or directory ld: fatal: File processing errors. No output written to a.out gmake[4]: *** [radiusd] Error 1 gmake[4]: Leaving directory `/localhome/echepin/AAA/freeradius-1.1.7/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/localhome/echepin/AAA/freeradius-1.1.7/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/localhome/echepin/AAA/freeradius-1.1.7/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/localhome/echepin/AAA/freeradius-1.1.7' make: *** [all] Error 2 then i manually run the command: /freeradius-1.1.7/libtool --mode=link cc -export-dynamic -dlopen self \ -L/usr/local/mysql/lib -R/usr/local/mysql/lib -pie -o radiusd acct.lo auth.lo client.lo conffile.lo exec.lo files.lo log.lo mainconfig.lo modules.lo modcall.lo nas.lo proxy.lo radiusd.lo radius_snmp.lo request_list.lo session.lo smux.lo threads.lo util.lo valuepair.lo version.lo timestr.lo xlat.lo \ -lnsl -lresolv -lsocket -lposix4 -lpthread ../lib/libradius.la \ -lltdl libtool: link: `acct.lo' is not a valid libtool object it prompts the acct.lo is not a valid libtool object! and i tried to disable libtool ,but not found any hints how to do? anybody know how to fix this issue? could you give me some hints, thanks BRs/peter

1 0

Automatic report from sources (radiusd) between 10.01.2008 - 11.01.2008 GMT
by Automatic cvs log generator 11 Jan '08

11 Jan '08

CVS log entries from 10.01.2008 (Thu) 09:00:01 - 11.01.2008 (Fri) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revisions: 1.52 File: radiusd/raddb/eap.conf; Revisions: 1.23, 1.22, 1.21, 1.20 File: radiusd/configure.in; Revisions: 1.256, 1.255 File: radiusd/src/main/radiusd.c; Revisions: 1.388 File: radiusd/src/lib/misc.c; Revisions: 1.82, 1.81 File: radiusd/raddb/certs/README; Revisions: 1.6 File: radiusd/man/man5/vmpsd.conf.5; Revisions: 1.4 File: radiusd/Makefile; Revisions: 1.54, 1.53, 1.52 File: radiusd/src/modules/rules.mak; Revisions: 1.70, 1.69, 1.68 File: radiusd/configure; Revisions: 1.142, 1.141 ===================================================== Combined list of identical log entries ===================================================== Description: Added notes on self-signed certificates Modified files: File: radiusd/raddb/eap.conf; Revision: 1.21; Date: 2008/01/10 10:15:12; Author: aland; Lines: (+9 -1) File: radiusd/raddb/certs/README; Revision: 1.6; Date: 2008/01/10 10:15:12; Author: aland; Lines: (+14 -4) ===================================================== Log entries ===================================================== Description: bz2 is -j, not -z Modified files: File: radiusd/Makefile; Revision: 1.54; Date: 2008/01/10 16:39:51; Author: aland; Lines: (+2 -3) ------------------------------- Description: Added targets: dist = checkout clean tree && create tar files dist-tag = print out commands to tag (don't actually do it...) dist-sign = sign the tar files publish: scp to freeradius.org Modified files: File: radiusd/Makefile; Revision: 1.53; Date: 2008/01/10 13:34:47; Author: aland; Lines: (+41 -1) ------------------------------- Description: Add top-level "tests" target Modified files: File: radiusd/Makefile; Revision: 1.52; Date: 2008/01/10 09:05:48; Author: aland; Lines: (+5 -1) ------------------------------- Description: Update configure script, too Modified files: File: radiusd/configure; Revision: 1.142; Date: 2008/01/10 16:41:25; Author: aland; Lines: (+2 -2) ------------------------------- Description: And it's 2.0.0 Modified files: File: radiusd/configure; Revision: 1.141; Date: 2008/01/10 10:38:42; Author: aland; Lines: (+2 -2) ------------------------------- Description: CVS head is now 2.0.1-pre Modified files: File: radiusd/configure.in; Revision: 1.256; Date: 2008/01/10 16:40:19; Author: aland; Lines: (+2 -2) ------------------------------- Description: BEWARE! It's 2.0.0! Modified files: File: radiusd/configure.in; Revision: 1.255; Date: 2008/01/10 10:37:54; Author: aland; Lines: (+2 -2) ------------------------------- Description: We don't need this any more Modified files: File: radiusd/man/man5/vmpsd.conf.5; Revision: 1.4; Date: 2008/01/10 11:02:18; Author: aland; Lines: (+0 -0) ------------------------------- Description: Notes on how to use CA's if CA_file is NULL Modified files: File: radiusd/raddb/eap.conf; Revision: 1.23; Date: 2008/01/10 10:28:35; Author: aland; Lines: (+7 -1) ------------------------------- Description: Notes on CA_file being NULL Modified files: File: radiusd/raddb/eap.conf; Revision: 1.22; Date: 2008/01/10 10:26:36; Author: aland; Lines: (+10 -1) ------------------------------- Description: Additional notes on CA_path Modified files: File: radiusd/raddb/eap.conf; Revision: 1.20; Date: 2008/01/10 10:02:08; Author: aland; Lines: (+3 -4) ------------------------------- Description: One more for -Wunused Modified files: File: radiusd/src/lib/misc.c; Revision: 1.82; Date: 2008/01/10 10:13:04; Author: aland; Lines: (+3 -2) ------------------------------- Description: Fix compile warnings on some platforms Modified files: File: radiusd/src/lib/misc.c; Revision: 1.81; Date: 2008/01/10 09:57:33; Author: aland; Lines: (+4 -2) ------------------------------- Description: Updated copyright Modified files: File: radiusd/src/main/radiusd.c; Revision: 1.388; Date: 2008/01/10 09:06:56; Author: aland; Lines: (+3 -3) ------------------------------- Description: If no ca_file, don't set CA list for client certificates Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.52; Date: 2008/01/10 10:26:12; Author: aland; Lines: (+3 -3) ------------------------------- Description: Don't use mkdir -p Modified files: File: radiusd/src/modules/rules.mak; Revision: 1.70; Date: 2008/01/10 10:12:01; Author: aland; Lines: (+2 -2) ------------------------------- Description: Make directory before copying files to it Modified files: File: radiusd/src/modules/rules.mak; Revision: 1.69; Date: 2008/01/10 10:08:55; Author: aland; Lines: (+2 -1) ------------------------------- Description: Allow in-tree tests Modified files: File: radiusd/src/modules/rules.mak; Revision: 1.68; Date: 2008/01/10 09:07:43; Author: aland; Lines: (+2 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/Makefile Revisions: 1.54, 1.53, 1.52 Authors: aland (+2 -3), aland (+41 -1), aland (+5 -1) ------------------------------- File: radiusd/configure Revisions: 1.142, 1.141 Authors: aland (+2 -2), aland (+2 -2) ------------------------------- File: radiusd/configure.in Revisions: 1.256, 1.255 Authors: aland (+2 -2), aland (+2 -2) ------------------------------- File: radiusd/man/man5/vmpsd.conf.5 Revisions: 1.4 Authors: aland (+0 -0) ------------------------------- File: radiusd/raddb/certs/README Revisions: 1.6 Authors: aland (+14 -4) ------------------------------- File: radiusd/raddb/eap.conf Revisions: 1.23, 1.22, 1.21, 1.20 Authors: aland (+7 -1), aland (+10 -1), aland (+9 -1), aland (+3 -4) ------------------------------- File: radiusd/src/lib/misc.c Revisions: 1.82, 1.81 Authors: aland (+3 -2), aland (+4 -2) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.388 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Revisions: 1.52 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rules.mak Revisions: 1.70, 1.69, 1.68 Authors: aland (+2 -2), aland (+2 -1), aland (+2 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Version 2.0.0 has been released
by Alan T DeKok 10 Jan '08

10 Jan '08

January 10, 2007 - Version 2.0.0 has been released. We are pleased to announce that Version 2.0.0 has been released. This version is a tremendous step forward in functionality for the server. See http://freeradius.org for more information, including downloads, and major updates to the web site. Feature Improvements * simple policy language (see "man unlang") * virtual servers ("raddb/sites-available/README") * IPv6 support * better proxy support ("raddb/proxy.conf") * More EAP types * Debugging output should be <em>much</em> easier to understand * VMPS support * More modules have been moved to "stable" status (python, etc.) * SQL configuration has been cleaned up (see "raddb/sql/*") * limited support for HUP. (The configuration for some modules is re-loaded on HUP. Nothing else is reloaded.) * check configuration and exit ("radiusd -C") * Server core is now event based (simpler, more powerful) Bug Fixes * The server re-design has resulted in simple fixes for many issues that were too difficult to correct in Version 1.1.x. Alan DeKok.

3 2

I think we're good to go for tomorrow.
by Alan DeKok 10 Jan '08

10 Jan '08

Alan Buxey ran into an issue with an infinite loop when a home server was marked down. I've just tracked it down and committed a fix. I've also run the server through valgrind, and corrected one or two other memory leaks on exit. They're not critical, but it's useful to fix. Alan DeKok.

6 13

Automatic report from sources (radiusd) between 09.01.2008 - 10.01.2008 GMT
by Automatic cvs log generator 10 Jan '08

10 Jan '08

CVS log entries from 09.01.2008 (Wed) 09:00:01 - 10.01.2008 (Thu) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.36, 1.3.2.7 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c; Revisions: 1.13 File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revisions: 1.99 File: radiusd/src/main/event.c; Revisions: 1.82, 1.81, 1.80 File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c; Revisions: 1.82 File: radiusd/src/lib/event.c; Revisions: 1.17 File: radiusd/src/main/realms.c; Revisions: 1.43 File: radiusd/src/main/conffile.c; Revisions: 1.197, 1.196 File: radiusd/man/man5/unlang.5; Revisions: 1.14 ===================================================== Log entries ===================================================== Description: Corrected typo in "redundant-load-balance" Modified files: File: radiusd/man/man5/unlang.5; Revision: 1.14; Date: 2008/01/09 22:02:52; Author: aland; Lines: (+2 -2) ------------------------------- Description: Update calling pointer to be NULL, too Modified files: File: radiusd/src/lib/event.c; Revision: 1.17; Date: 2008/01/09 14:44:13; Author: aland; Lines: (+3 -2) ------------------------------- Description: When we have attributes in the config files, AND the value is a bare word, AND the attr is string, AND the value is '0x', then make the type OCTETS, so that we can easily send opaque data containing embedded NUL's. This is a work-around for the problem that parsing a string does NOT return a string length. Instead, the length is implicit based on \0... Modified files: File: radiusd/src/main/conffile.c; Revision: 1.197; Date: 2008/01/09 22:37:58; Author: aland; Lines: (+14 -4) ------------------------------- Description: Comment out code that isn't used, and doesn't do anything. Modified files: File: radiusd/src/main/conffile.c; Revision: 1.196; Date: 2008/01/09 13:24:25; Author: aland; Lines: (+9 -4) ------------------------------- Description: Audit the code for other uses of 'now' where it might not be updated. Modified files: File: radiusd/src/main/event.c; Revision: 1.82; Date: 2008/01/09 15:59:26; Author: aland; Lines: (+3 -2) ------------------------------- Description: Update 'now' in the function. This means that if the proxy id expiry time is in the past, we'll have the correct time. if we don't update "now", then it stays in the past, and we never notice that it's time to clean up. Modified files: File: radiusd/src/main/event.c; Revision: 1.81; Date: 2008/01/09 15:55:57; Author: aland; Lines: (+3 -2) ------------------------------- Description: Remember the listen head in mainconfig, so it's not leaked, and so everyone else can access it for sanity checks. Modified files: File: radiusd/src/main/event.c; Revision: 1.80; Date: 2008/01/09 13:29:47; Author: aland; Lines: (+4 -2) ------------------------------- Description: Free alloc'd memory Modified files: File: radiusd/src/main/realms.c; Revision: 1.43; Date: 2008/01/09 13:39:13; Author: aland; Lines: (+4 -2) ------------------------------- Description: Ensure that EAP-TNC can only run AFTER the user has been authenticated. This prevents people from using it as an authentication method. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c; Revision: 1.13; Date: 2008/01/09 10:34:40; Author: aland; Lines: (+13 -2) ------------------------------- Description: xlat_name = cf_section_name*() means that it's free'd BEFORE the module "detach" routine is called. So we have to remember it ourselves, to that we can un-register the xlat Modified files: File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revision: 1.99; Date: 2008/01/09 13:20:56; Author: aland; Lines: (+4 -2) ------------------------------- Description: Match "hints" on DEFAULT or on matching User-Name. Modified files: File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c; Revision: 1.82; Date: 2008/01/09 22:01:10; Author: aland; Lines: (+5 -3) ------------------------------- Description: Removed dead code Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.36; Date: 2008/01/09 14:10:46; Author: aland; Lines: (+2 -13) ------------------------------- Description: Remove dead code Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.3.2.7; Date: 2008/01/09 14:11:25; Author: aland; Lines: (+2 -13) ===================================================== Summary of modified files ===================================================== File: radiusd/man/man5/unlang.5 Revisions: 1.14 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/lib/event.c Revisions: 1.17 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.197, 1.196 Authors: aland (+14 -4), aland (+9 -4) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.82, 1.81, 1.80 Authors: aland (+3 -2), aland (+3 -2), aland (+4 -2) ------------------------------- File: radiusd/src/main/realms.c Revisions: 1.43 Authors: aland (+4 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c Revisions: 1.13 Authors: aland (+13 -2) ------------------------------- File: radiusd/src/modules/rlm_mschap/rlm_mschap.c Revisions: 1.99 Authors: aland (+4 -2) ------------------------------- File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c Revisions: 1.82 Authors: aland (+5 -3) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.36, 1.3.2.7 Authors: aland (+2 -13), aland (+2 -13) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0