October 2008 - Freeradius-Devel - lists.freeradius.org

eap2 in freeradius
by Chanthearith HUON 04 Apr '11

04 Apr '11

Hi everyone, I am testing eap2 in freeradius. I run "radiusd -X", I got following error message " radiusd: symbol lookup error: /usr/lib/rlm_eap2-2.1.0.so: undefined symbol: eap_server_register_methods " Anyone, have any idea what might be wrong with the configuration? Thank in advance, Thierry

5 10

help:when freeradius is used on 32-bit redhat linux
by yiyongyun 30 Oct '08

30 Oct '08

Dear everyone: I want to fix freeradius on 32-bit redhat linux, but I do not know the memory(8g）on 32-bit redhat linux is enough for freeradius; If not enough, then I'll fix it on 64-bit redhat linux, but this time the source of freeradius is needed to modify?

2 1

Re: Regular expressions support in FreeRadius.
by Dmitry V. Krivenok 30 Oct '08

30 Oct '08

Anatoly S. Zimin wrote: > Hi! > I compiled freeradius by default and I have regexp support. > I believe I have regexp support too. However, I read this in default radiusd.conf: # Regular expressions # # These items are set at configure time. If they're set to "yes", # then setting them to "no" turns off regular expression support. # # If they're set to "no" at configure time, then setting them to "yes" # WILL NOT WORK. It will give you an error. # regular_expressions = yes extended_expressions = yes According to this comment there is possibility to set these options to "no" at configure time (i.e. when I run ./configure). I think the comment is wrong or outdated. > How your testing regexp? > Might you have regexp support too. > > >> Hello! >> >> As doc says I must not activate regular expressions in radiusd.conf >> if server wasn't compiled with regexp support. >> How can I build freeradius with regular expressions support? >> ./configure --help doesn't show any regexp-related options (like >> --with-pcre). >> >> The following command doesn't show options radiusd was compiled with: >> >> krivenok@develop2 10:43:08 /usr/local/fr_211/sbin $ sudo ./radiusd -v >> radiusd: FreeRADIUS Version 2.1.1, for host i686-pc-linux-gnu, built on >> Oct 28 2008 at 13:10:11 >> Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. >> There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A >> PARTICULAR PURPOSE. >> You may redistribute copies of FreeRADIUS under the terms of the >> GNU General Public License. >> For more information about these matters, see the file named COPYRIGHT. >> krivenok@develop2 10:43:25 /usr/local/fr_211/sbin $ >> >> So, how can I check whether radiusd supports regexps? >> >> Thank you beforehand! >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html >> > >

1 0

Regular expressions support in FreeRadius.
by Dmitry V. Krivenok 30 Oct '08

30 Oct '08

Hello! As doc says I must not activate regular expressions in radiusd.conf if server wasn't compiled with regexp support. How can I build freeradius with regular expressions support? ./configure --help doesn't show any regexp-related options (like --with-pcre). The following command doesn't show options radiusd was compiled with: krivenok@develop2 10:43:08 /usr/local/fr_211/sbin $ sudo ./radiusd -v radiusd: FreeRADIUS Version 2.1.1, for host i686-pc-linux-gnu, built on Oct 28 2008 at 13:10:11 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. krivenok@develop2 10:43:25 /usr/local/fr_211/sbin $ So, how can I check whether radiusd supports regexps? Thank you beforehand!

1 0

Segmentation fault after migrating from 2.0.5 to 2.1.1
by Dmitry V. Krivenok 29 Oct '08

29 Oct '08

Hello! I'm developing my own rlm. I copied the code below from rlm_example.c: /* * Look for the 'state' attribute. */ state = pairfind(request->packet->vps, PW_STATE); if (state != NULL) { RDEBUG("Found reply to access challenge"); return RLM_MODULE_OK; } After compiling my module under fr-2.1.1 I got segmentation fault. gdb determined that error occurs in pairfind: Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0xb7ba4ac0 (LWP 9773)] 0xb7b360fa in osb_authorize (inst=0x8179e30, request=0x819c670) at rlm_osb.c:73 73 if(pairfind(request->packet->vps, PW_STATE)) I found that request->packet is NULL. Is it correct request? How should I handle requests with packet field == NULL? Thank you beforehand! P.S. All worked fine with fr-2.0.5.

3 2

who has the registration code for software RadiusTest 2.4.3
by yiyongyun 29 Oct '08

29 Oct '08

hi everyone: Who can provide the registration code for software RadiusTest?

2 1

Help with attr_rewrite
by Hoppál Felicián 28 Oct '08

28 Oct '08

Hello, I have clients that authenticate with username/pw void/void and a Calling-Station-Id. I would like to replace the User-Name attribute with Calling-Station-Id, but only for a specific huntgroup. Is that possible with FreeRADIUS? Thanks, Felician Hoppal

1 0

request->packet == NULL. Possible bug (simple example is provided).
by Dmitry V. Krivenok 27 Oct '08

27 Oct '08

Hello! Please look at the simplest rlm I wrote to demonstrate strange problem: krivenok@develop2 22:21:06 ~/work/svn/libs/rlm_osb/trunk $ cat rlm_osb.c #include <freeradius-devel/radiusd.h> #include <freeradius-devel/modules.h> /////////////////////////////////////////////////////////////////////////////// static int osb_instantiate(CONF_SECTION *conf, void **instance) { return 0; } /////////////////////////////////////////////////////////////////////////////// static int osb_authorize(void *inst, REQUEST *request) { DEBUG("rlm_osb: REQUEST %p", request); DEBUG("rlm_osb: PACKET %p", request->packet); return RLM_MODULE_NOOP; } /////////////////////////////////////////////////////////////////////////////// static int osb_detach(void *instance) { return 0; } /////////////////////////////////////////////////////////////////////////////// module_t rlm_osb = { RLM_MODULE_INIT, "osb", RLM_TYPE_THREAD_SAFE, /* type */ osb_instantiate, /* instantiation */ osb_detach, /* detach */ { NULL, /* authentication */ osb_authorize, /* authorization */ NULL, /* preaccounting */ NULL, /* accounting */ NULL, /* checksimul */ NULL, /* pre-proxy */ NULL, /* post-proxy */ NULL /* post-auth */ }, }; /////////////////////////////////////////////////////////////////////////////// krivenok@develop2 22:21:10 ~/work/svn/libs/rlm_osb/trunk $ make gcc -g -fPIC -DPIC -c -MD -Wall -I/home/krivenok/dev_builds/freeradius-server-current/src/ rlm_osb.c gcc -g -shared -Wl,-soname,rlm_osb-current.so -o rlm_osb-current.so rlm_osb.o krivenok@develop2 22:21:25 ~/work/svn/libs/rlm_osb/trunk $ sudo make install install rlm_osb-current.so /usr/local/fr_curr/lib ln -fs /usr/local/fr_curr/lib/rlm_osb-current.so /usr/local/fr_curr/lib/rlm_osb.so krivenok@develop2 22:21:37 ~/work/svn/libs/rlm_osb/trunk $ So far, so good. Module was compiled and installed successfully. The latest freeradius version is used (got via git): krivenok@develop2 22:19:03 /usr/local/fr_curr/sbin $ sudo ./radiusd -v radiusd: FreeRADIUS Version 2.1.2, for host i686-pc-linux-gnu, built on Oct 27 2008 at 19:29:35 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. krivenok@develop2 22:19:11 /usr/local/fr_curr/sbin $ Lets start the server in debug mode: krivenok@develop2 22:37:21 /usr/local/fr_curr/sbin $ sudo ./radiusd -X FreeRADIUS Version 2.1.2, for host i686-pc-linux-gnu, built on Oct 27 2008 at 19:29:35 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /usr/local/fr_curr/etc/raddb/radiusd.conf including configuration file /usr/local/fr_curr/etc/raddb/proxy.conf including configuration file /usr/local/fr_curr/etc/raddb/clients.conf including files in directory /usr/local/fr_curr/etc/raddb/modules/ including configuration file /usr/local/fr_curr/etc/raddb/modules/attr_filter including configuration file /usr/local/fr_curr/etc/raddb/modules/ippool including configuration file /usr/local/fr_curr/etc/raddb/modules/expr including configuration file /usr/local/fr_curr/etc/raddb/modules/acct_unique including configuration file /usr/local/fr_curr/etc/raddb/modules/counter including configuration file /usr/local/fr_curr/etc/raddb/modules/osb including configuration file /usr/local/fr_curr/etc/raddb/modules/policy including configuration file /usr/local/fr_curr/etc/raddb/modules/logintime including configuration file /usr/local/fr_curr/etc/raddb/modules/mac2ip including configuration file /usr/local/fr_curr/etc/raddb/modules/sradutmp including configuration file /usr/local/fr_curr/etc/raddb/modules/wimax including configuration file /usr/local/fr_curr/etc/raddb/modules/digest including configuration file /usr/local/fr_curr/etc/raddb/modules/perl including configuration file /usr/local/fr_curr/etc/raddb/modules/mac2vlan including configuration file /usr/local/fr_curr/etc/raddb/modules/krb5 including configuration file /usr/local/fr_curr/etc/raddb/modules/passwd including configuration file /usr/local/fr_curr/etc/raddb/modules/unix including configuration file /usr/local/fr_curr/etc/raddb/modules/detail.log including configuration file /usr/local/fr_curr/etc/raddb/modules/chap including configuration file /usr/local/fr_curr/etc/raddb/modules/radutmp including configuration file /usr/local/fr_curr/etc/raddb/modules/smbpasswd including configuration file /usr/local/fr_curr/etc/raddb/modules/attr_rewrite including configuration file /usr/local/fr_curr/etc/raddb/modules/always including configuration file /usr/local/fr_curr/etc/raddb/modules/realm including configuration file /usr/local/fr_curr/etc/raddb/modules/echo including configuration file /usr/local/fr_curr/etc/raddb/modules/mschap including configuration file /usr/local/fr_curr/etc/raddb/modules/inner-eap including configuration file /usr/local/fr_curr/etc/raddb/modules/files including configuration file /usr/local/fr_curr/etc/raddb/modules/detail.example.com including configuration file /usr/local/fr_curr/etc/raddb/modules/preprocess including configuration file /usr/local/fr_curr/etc/raddb/modules/pam including configuration file /usr/local/fr_curr/etc/raddb/modules/sql_log including configuration file /usr/local/fr_curr/etc/raddb/modules/pap including configuration file /usr/local/fr_curr/etc/raddb/modules/linelog including configuration file /usr/local/fr_curr/etc/raddb/modules/ldap including configuration file /usr/local/fr_curr/etc/raddb/modules/etc_group including configuration file /usr/local/fr_curr/etc/raddb/modules/checkval including configuration file /usr/local/fr_curr/etc/raddb/modules/expiration including configuration file /usr/local/fr_curr/etc/raddb/modules/detail including configuration file /usr/local/fr_curr/etc/raddb/modules/exec including configuration file /usr/local/fr_curr/etc/raddb/eap.conf including configuration file /usr/local/fr_curr/etc/raddb/sql.conf including configuration file /usr/local/fr_curr/etc/raddb/sql/mysql/dialup.conf including configuration file /usr/local/fr_curr/etc/raddb/sql/mysql/counter.conf including configuration file /usr/local/fr_curr/etc/raddb/policy.conf including files in directory /usr/local/fr_curr/etc/raddb/sites-enabled/ including configuration file /usr/local/fr_curr/etc/raddb/sites-enabled/inner-tunnel including configuration file /usr/local/fr_curr/etc/raddb/sites-enabled/default including dictionary file /usr/local/fr_curr/etc/raddb/dictionary main { prefix = "/usr/local/fr_curr" localstatedir = "/usr/local/fr_curr/var" logdir = "/usr/local/fr_curr/var/log/radius" libdir = "/usr/local/fr_curr/lib" radacctdir = "/usr/local/fr_curr/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "/usr/local/fr_curr/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/fr_curr/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/fr_curr/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 2048 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/usr/local/fr_curr/etc/raddb/certs/server.pem" certificate_file = "/usr/local/fr_curr/etc/raddb/certs/server.pem" CA_file = "/usr/local/fr_curr/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/usr/local/fr_curr/etc/raddb/certs/dh" random_file = "/usr/local/fr_curr/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/usr/local/fr_curr/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/fr_curr/etc/raddb/users" acctusersfile = "/usr/local/fr_curr/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/fr_curr/etc/raddb/preproxy_users" compat = "no" } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/fr_curr/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/fr_curr/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } } modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/fr_curr/etc/raddb/huntgroups" hints = "/usr/local/fr_curr/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Linked to module rlm_osb Module: Instantiating osb Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/usr/local/fr_curr/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/fr_curr/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } Listening on auth address * port 1812 Listening on acct address * port 1813 Listening on proxy address * port 1814 Ready to process requests. and then send test packet: krivenok@develop2 22:37:39 /usr/local/fr_curr/bin $ cat ~/radius_test.txt User-Name = "some_user" User-Password = "some_pass" Nas-Ip-Address = "192.168.1.1" krivenok@develop2 22:39:08 /usr/local/fr_curr/bin $ cat ~/radius_test.txt | sudo ./radclient localhost auth testing123 Received response ID 140, code 3, length = 20 krivenok@develop2 22:39:15 /usr/local/fr_curr/bin $ Lets look at daemon's output: rad_recv: Access-Request packet from host 127.0.0.1 port 29966, id=140, length=55 User-Name = "some_user" User-Password = "some_pass" NAS-IP-Address = 192.168.1.1 +- entering group authorize {...} ++[preprocess] returns ok rlm_osb: REQUEST 0x8174730 rlm_osb: PACKET (nil) ++[osb] returns noop ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "some_user", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> some_user attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 140 to 127.0.0.1 port 29966 Waking up in 4.9 seconds. Cleaning up request 0 ID 140 with timestamp +68 Ready to process requests. What about the following output? rlm_osb: REQUEST 0x8174730 rlm_osb: PACKET (nil) ++[osb] returns noop request->packet is NULL. It looks like a bug. Isn't it? According to this output, request was received properly: User-Name = "some_user" User-Password = "some_pass" NAS-IP-Address = 192.168.1.1 However request->packet field is NULL. Any ideas? P.S. All worked fine with freeradius-2.0.5.

1 0

patch: GMT timestamp
by Alexander Kolesnik 24 Oct '08

24 Oct '08

Hello, Please include the following patch for version 1.1.3 and futhers (gmt_timestamp.patch): --- src/main/xlat.c.orig 2006-07-13 20:40:54.000000000 +0400 +++ src/main/xlat.c 2006-10-23 18:16:11.733950598 +0400 @@ -782,6 +782,15 @@ } p++; break; + case 'G': /* request GMT timestamp in SQL format*/ + TM = gmtime_r(&request->timestamp, &s_TM); + len = strftime(tmpdt, sizeof(tmpdt), "%Y-%m-%d %H:%M:%S", TM); + if (len > 0) { + strNcpy(q, tmpdt, freespace); + q += strlen(q); + } + p++; + break; case 'H': /* request hour */ TM = localtime_r(&request->timestamp, &s_TM); len = strftime(tmpdt, sizeof(tmpdt), "%H", TM); Description: This patch introduces %G macro to be used in radius config files (mostly, in sql queries). It behaves like %S but unlike puts a GMT timestamp. -- Regards, Alexander

1 0

Reg Fingerprint Authentication in Radius Server
by Nagarjuna Bandi 24 Oct '08

24 Oct '08

Hi All, I was newly joined in freeradius developers mailing list, first i will introduce my self briefly, i have to develop a radius server which authenticate the users with their finger print, so please tell me what i have to do for that now i am going through some examples how the authentication is made with username and passwords but i was unable to find how to integrate this finger print authentication in radius server, so please help me regarding this. Thanks in advance. Regards, Nagarjuna Bandi. Connect with friends all over the world. Get Yahoo! India Messenger at http://in.messenger.yahoo.com/?wm=n/

2 1

failure to compile 2.1.1 on Redhat ES3
by A.L.M.Buxey＠lboro.ac.uk 23 Oct '08

23 Oct '08

hi, just tried to compile FR 2.1.1 on a more vintage system than what I normally find myself on - RedHat ES 3 Theres a compile issue with Python module which didnt exist on the same platform with 2.0.5 - but I'll ignore that one for now - the important part is the base daemon itself: /usr/src/freeradius-server-2.1.1/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/usr/src/freeradius-server-2.1.1/src -DHOSTINFO=\"i686-pc-linux-gnu\" -DRADIUSD_VERSION=\"2.1.1\" -DOPENSSL_NO_KRB5 -c listen.c gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/usr/src/freeradius-server-2.1.1/src -DHOSTINFO=\"i686-pc-linux-gnu\" -DRADIUSD_VERSION=\"2.1.1\" -DOPENSSL_NO_KRB5 -c listen.c -fPIC -DPIC -o .libs/listen.o listen.c:99:1: directives may not be used inside a macro argument listen.c:98:54: unterminated argument list invoking macro "rad_assert" listen.c: In function `client_listener_find': listen.c:100: `rad_assert' undeclared (first use in this function) listen.c:100: (Each undeclared identifier is reported only once listen.c:100: for each function it appears in.) listen.c:111: syntax error before ')' token listen.c:141: warning: passing arg 1 of pointer to function discards qualifiers from pointer target type listen.c:220: warning: assignment discards qualifiers from pointer target type In file included from listen.c:1024: command.c: In function `command_show_client_config': command.c:805: warning: passing arg 2 of `cf_section2file' discards qualifiers from pointer target type gmake[4]: *** [listen.lo] Error 1 gmake[4]: Leaving directory `/usr/src/freeradius-server-2.1.1/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/usr/src/freeradius-server-2.1.1/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/usr/src/freeradius-server-2.1.1/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/usr/src/freeradius-server-2.1.1' make: *** [all] Error 2 $gcc -v Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/3.2.3/specs Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --enable-shared --enable-threads=posix --disable-checking --with-system-zlib --enable-__cxa_atexit --host=i386-redhat-linux Thread model: posix gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-59) any more info needed? alan

2 1

New RADIUS book - Nuevo libro de RADIUS
by nanotech＠terra.es 21 Oct '08

21 Oct '08

Saludos a todos (Hi everybody) He descubierto el lanzamiento de un nuevo libro de RADIUS en la Web: www.radiusdoc.com (Parece muy interesante) I've discovered a new RADIUS book in the website: www.radiusdoc.com (It appears to be very interesting and helpful). Francisco Montes Ahora también puedes acceder a tu correo Terra desde el móvil. Infórmate pinchando aquí.

1 0

DB connection reestablished
by andreiv 17 Oct '08

17 Oct '08

hy everybody, i have some questions: Does freeradius sense when a connetion to a DB ,previously lost is reestablished ? Which files i have to modify to tell the radius server to execute a stored procedure when that happens ? -- View this message in context: http://www.nabble.com/DB-connection-reestablished-tp20032247p20032247.html Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

2 2

checksimul callback
by Dmitry V. Krivenok 16 Oct '08

16 Oct '08

Hello! I'm writing my own module. What is the purpose of checksimul callback? When is it called? The prototype of this function is static int rlm_myrlm_checksimul(void *instance, REQUEST * request); hence it should modify something in request. Likely simul_count field. What function checks this (or maybe another) field? How can I set the maximum number of simultaneous sessions? Thank you beforehand! -- Sincerely yours, Dmitry V. Krivenok Orange System Company Saint-Petersburg, Russia work phone: +7 812 332-32-40 cellular phone: +7 921 576-70-91 e-mail: krivenok(a)orangesystem.ru web: http://www.orangesystem.ru skype: krivenok_dmitry jabber: krivenok_dmitry(a)jabber.ru icq: 242-526-443

2 3

GIT Log for 2008-10-15 23:33 GMT
by aland＠deployingradius.com 15 Oct '08

15 Oct '08

commit 39cb829aba4098fc702890234f9b4bc1cdec3ef2 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Oct 15 07:50:03 2008 +0200 Removed thread pool from Perl module. Also moved configuration from experimental.conf to it's own module, and removed configuration for thread pool Files changed: raddb/experimental.conf | 66 ++++++ raddb/modules/perl | 56 ----- src/modules/rlm_perl/rlm_perl.c | 446 +++++++++++++++++++++++++++++++++++---- 3 files changed, 470 insertions(+), 98 deletions(-) ====================================================================== commit 44687762395d7f82cba138ed3a620aecfd232c49 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Oct 13 17:27:11 2008 +0200 It's not 2.1.1 Files changed: VERSION | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ======================================================================

1 0

RE: Clone Function Called with each Authentication Request
by dave＠voicenotice.com 15 Oct '08

15 Oct '08

1 0

RE: Clone Function Called with each Authentication Request
by dave＠voicenotice.com 15 Oct '08

15 Oct '08

2 1

RE: Clone Function Called with each Authentication Request
by dave＠voicenotice.com 15 Oct '08

15 Oct '08

2 1

GIT Log for 2008-10-12 23:33 GMT
by aland＠deployingradius.com 12 Oct '08

12 Oct '08

commit 2bcf2d394697702ad07ee345e2db9bd4a0675d2f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Oct 12 09:37:16 2008 +0200 libreadline is a library, not a dependency src/main/Makefile.in | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)

1 0

GIT Log for 2008-10-11 23:33 GMT
by aland＠deployingradius.com 11 Oct '08

11 Oct '08

commit 014cba46cf608a176aafeb6b08c2185371e78822 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Oct 11 08:08:29 2008 +0200 Add WITH_DHCP wrappers This allows the server to build without DHCP Files changed: src/modules/frs_dhcp/frs_dhcp.c | 3 +-- 1 files changed, 1 insertions(+), 2 deletions(-) ====================================================================== commit e4cd667caf23e6191a52ae0467fc33e4adb6d033 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Oct 10 10:27:33 2008 +0200 Add API to see if realms are alive or dead Files changed: src/include/realms.h | 14 +-------- src/main/realms.c | 40 ------------------------ src/modules/frs_control/frs_control.c | 54 --------------------------------- 3 files changed, 1 insertions(+), 107 deletions(-) ====================================================================== commit 536778abece3bef453e246de5bec35eec48a5b40 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Oct 10 12:06:38 2008 +0200 start sending Status-Server messages earlier We now start sending them at the START of the zombie period, which means that a "live" home server is marked "dead" less often. i.e. an upstream proxy is responsible for realms A && B. We're currently proxying packets for realm A only... and their upstream is down. If our upstream doesn't respond, we might think that it's down, when really it's being stupid. So, we start pinging it with Status-Server. If it responds, we keep sending it packets, including packets for realm B. Files changed: raddb/proxy.conf | 14 ++------ src/main/event.c | 105 +++++++++++++++++++----------------------------------- 2 files changed, 40 insertions(+), 79 deletions(-) ====================================================================== commit a52eff669b389fca11ead1edcf06dfcd34f3e706 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Oct 10 10:56:39 2008 +0200 Updated as per recent docs Files changed: share/dictionary.3gpp | 17 ----------------- 1 files changed, 0 insertions(+), 17 deletions(-) ====================================================================== commit 23df7f69017e3041cc8623df5298cb01cadc87ef Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Oct 6 17:30:40 2008 +0200 Moved Status-Server handling to frs_* This is even less code in the mainstream, and fewer global functions. Files changed: src/include/smodule.h | 2 + src/main/listen.c | 70 +++++++++++++++++++++++++++++++++++ src/modules/frs_acct/frs_acct.c | 31 +--------------- src/modules/frs_auth/frs_auth.c | 38 +------------------ src/modules/frs_status/frs_status.c | 32 +--------------- 5 files changed, 76 insertions(+), 97 deletions(-) ====================================================================== commit 6ed482af6829a47a239134d379054309a2462e49 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Oct 6 17:29:52 2008 +0200 We don't need this prototype any more Files changed: src/main/conffile.c | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) ====================================================================== commit 4eaec30c243b2d76031b2e9ae8437da6ee45b78b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Oct 6 16:53:06 2008 +0200 Cache handles for multiple methods in a module Files changed: src/main/listen.c | 70 +++++++++++++++------------------------------------- 1 files changed, 20 insertions(+), 50 deletions(-) ====================================================================== commit 2df34c53d733bc8ca97fa3760e203d9498c7d53f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Oct 6 14:47:54 2008 +0200 No longer need so many ifdef's Files changed: src/main/listen.c | 43 ++++++++++++++++++++++++++++++++++++++++++- 1 files changed, 42 insertions(+), 1 deletions(-) ======================================================================

1 0

RE: Clone Function Called with each Authentication Request
by dave＠voicenotice.com 11 Oct '08

11 Oct '08

1 0

Please Help!
by niel m 10 Oct '08

10 Oct '08

Hello Guys Im new in radius, I am using CentOS 5 in my radius server. Where I can find the scripts in generating various Certificates? This is for my Server-(Access Point)-Client connections. Any help would be appreciated. Thanks, Niel

2 1

Clone Function Called with each Authentication Request
by David D 10 Oct '08

10 Oct '08

Hi, I'm testing an Authentication script and it's working great. I need to optimize the performance and move some data stored in files into memory. To accomplish this, we planned on placing the routine to read the data into memory in the clone function, so it would load once. >From reading the documentation and the posts I could find. It's my understanding that the CLONE function will only be called once for each new thread created. In my testing I've noticed that the CLONE function get's called for each Authentication request, so it appears the thread is initialized for each call, even though I see it load up all 32 threads when radiusd initializes. The debug output shows all 32 threads calling the clone function and then it shows the clone function called again when an authentication request comes in. Any ideas on what I could check or change? VERSION: radius0-dev:/etc/raddb # radiusd -v radiusd: FreeRADIUS Version 1.1.3, for host x86_64-unknown-linux-gnu, built on May 8 2007 at 19:12:20 Copyright (C) 2000-2006 The FreeRADIUS server project. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matte PERL THREAD INFO: perl -V | grep thread osname=linux, osvers=2.6.18, archname=x86_64-linux-thread-multi config_args='-ds -e -Dprefix=/usr -Dvendorprefix=/usr -Dinstallusrbinperl -Dusethreads -Di_db -Di_dbm -Di_ndbm -Di_gdbm -Duseshrplib=true -Doptimize=-O2 -fmessage-length=0 -Wall -D_FORTIFY_SOURCE=2 -g -Wall -pipe' usethreads=define use5005threads=undef useithreads=define usemultiplicity=define libs=-lm -ldl -lcrypt -lpthread perllibs=-lm -ldl -lcrypt -lpthread dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-Wl,-E -Wl,-rpath,/usr/lib/perl5/5.8.8/x86_64-linux-thread-multi/CORE' /usr/lib/perl5/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi radius0-dev:~ # RADIUSD -X LOADING radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/clients.conf-db000 Config: including file: /etc/raddb/clients.conf-db001 Config: including file: /etc/raddb/clients.conf-db002 Config: including file: /etc/raddb/clients.conf-db003 Config: including file: /etc/raddb/clients.conf-db004 Config: including file: /etc/raddb/clients.conf-db005 Config: including file: /etc/raddb/clients.conf-db006 Config: including file: /etc/raddb/clients.conf-db007 Config: including file: /etc/raddb/clients.conf-db008 Config: including file: /etc/raddb/clients.conf-db009 Config: including file: /etc/raddb/clients.conf-db010 Config: including file: /etc/raddb/clients.conf-db011 Config: including file: /etc/raddb/clients.conf-db012 Config: including file: /etc/raddb/clients.conf-db013 Config: including file: /etc/raddb/clients.conf-db014 Config: including file: /etc/raddb/clients.conf-db015 Config: including file: /etc/raddb/clients.conf-db016 Config: including file: /etc/raddb/clients.conf-db017 Config: including file: /etc/raddb/clients.conf-db018 Config: including file: /etc/raddb/clients.conf-db019 Config: including file: /etc/raddb/clients.conf-db020 Config: including file: /etc/raddb/clients.conf-db021 Config: including file: /etc/raddb/clients.conf-db022 Config: including file: /etc/raddb/clients.conf-db023 Config: including file: /etc/raddb/clients.conf-db024 Config: including file: /etc/raddb/clients.conf-db025 Config: including file: /etc/raddb/clients.conf-db026 Config: including file: /etc/raddb/clients.conf-db027 Config: including file: /etc/raddb/clients.conf-db028 Config: including file: /etc/raddb/clients.conf-db029 Config: including file: /etc/raddb/clients.conf-db030 Config: including file: /etc/raddb/clients.conf-db031 Config: including file: /etc/raddb/clients.conf-db032 main: prefix = "/" main: localstatedir = "/var" main: logdir = "/var/log" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 15 main: cleanup_delay = 5 main: max_requests = 453000 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/radiusd/radiusd.pid" main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded perl perl: module = "/etc/raddb/autocutoffv4.pl" perl: func_authorize = "authorize" perl: func_authenticate = "authenticate" perl: func_accounting = "accounting" perl: func_preacct = "preacct" perl: func_checksimul = "checksimul" perl: func_detach = "detach" perl: func_xlat = "xlat" perl: func_pre_proxy = "pre_proxy" perl: func_post_proxy = "post_proxy" perl: func_post_auth = "post_auth" perl: perl_flags = "(null)" perl: func_start_accounting = "(null)" perl: func_stop_accounting = "(null)" perl: max_clones = 32 perl: start_clones = 32 perl: min_spare_clones = 0 perl: max_spare_clones = 32 perl: cleanup_delay = 5 perl: max_request_per_clone = 0 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 IN CLONE FUNCTION 2 Module: Instantiated perl (perl) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded detail detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail" detail: detailperm = 416 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 198.144.213.39:21646, id=113, length=95 User-Name = "74.167.228.5" User-Password = "cisco" Cisco-AVPair = "h323-ivr-out=transactionID:55" NAS-IP-Address = 197.144.217.39 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_realm: No '@' in User-Name = "74.167.228.5", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 users: Matched entry DEFAULT at line 156 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type Perl auth: type "Perl" Processing the authenticate section of radiusd.conf modcall: entering group Perl for request 0 perl_pool: item 0x555555922ad0 asigned new request. Handled so far: 1 found interpetator at address 0x555555922ad0 rlm_perl: RAD_REQUEST: Client-IP-Address = 197.144.217.39 rlm_perl: RAD_REQUEST: Cisco-AVPair = h323-ivr-out=transactionID:55 rlm_perl: RAD_REQUEST: User-Name = 74.167.228.5 rlm_perl: RAD_REQUEST: User-Password = cisco rlm_perl: RAD_REQUEST: NAS-IP-Address = 197.144.217.39 IN CLONE FUNCTION 2 <==================CALLED AGAIN ON AUTHENTICATION REQUEST In Authenticate In Authenticate 4 In Authenticate rlm_perl: Added pair Auth-Type = Perl perl_pool total/active/spare [32/0/32] Unreserve perl at address 0x555555922ad0 modcall[authenticate]: module "perl" returns reject for request 0 modcall: leaving group Perl (returns reject) for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 113 to 198.144.213.39 port 21646 Waking up in 4 seconds... rad_recv: Accounting-Request packet from host 198.144.213.39:21646, id=114, length=888 Acct-Session-Id = "000000A7" Calling-Station-Id = "david" Called-Station-Id = "11" Cisco-AVPair = "call-id=bd06bf19b46a803a@RFNUZWxlY29t" Cisco-AVPair = "iphop=count:1" Cisco-AVPair = "iphop=hop1:74.167.228.5" h323-setup-time = "h323-setup-time=05:58:35.039 UTC Fri Oct 10 2008" h323-gw-id = "h323-gw-id=cisco2691-0." h323-conf-id = "h323-conf-id=4F2CF580 95C711DD 8070BD8A E0E2182D" h323-call-origin = "h323-call-origin=answer" h323-call-type = "h323-call-type=VoIP" Cisco-AVPair = "h323-incoming-conf-id=4F2CF580 95C711DD 8070BD8A E0E2182D" Cisco-AVPair = "subscriber=Unknown" Cisco-AVPair = "session-protocol=sipv2" Cisco-AVPair = "gw-rxd-cdn=ton:0,npi:0,#:11" Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Input-Packets = 0 Acct-Output-Packets = 0 Acct-Session-Time = 0 h323-connect-time = "h323-connect-time=05:58:37.172 UTC Fri Oct 10 2008" h323-disconnect-time = "h323-disconnect-time=05:58:37.172 UTC Fri Oct 10 2008" h323-disconnect-cause = "h323-disconnect-cause=39" h323-remote-address = "h323-remote-address=74.167.228.5" Cisco-AVPair = "release-source=7" h323-voice-quality = "h323-voice-quality=0" Cisco-AVPair = "remote-media-address=74.167.228.5" Cisco-AVPair = "gw-rxd-cgn=ton:0,npi:0,pi:0,si:0,#:david" User-Name = "david" Acct-Status-Type = Stop Service-Type = Login-User NAS-IP-Address = 197.144.217.39 Acct-Delay-Time = 0 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 1 rlm_realm: No '@' in User-Name = "david", looking up realm NULL rlm_realm: No such realm "NULL" modcall[preacct]: module "suffix" returns noop for request 1 modcall[preacct]: module "files" returns noop for request 1 modcall[preacct]: module "preprocess" returns noop for request 1 modcall: leaving group preacct (returns noop) for request 1 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 1 radius_xlat: '/var/log/radius/radacct/198.144.213.39/detail' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail expands to /var/log/radius/radacct/197.144.217.39/detail modcall[accounting]: module "detail" returns ok for request 1 modcall: leaving group accounting (returns ok) for request 1 Sending Accounting-Response of id 114 to 197.144.217.39 port 21646 Finished request 1 Going to the next request Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 113 with timestamp 48eeef0b Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 1 ID 114 with timestamp 48eeef0d Nothing to do. Sleeping until we see a request. PERL SECTION OF RADIUSD.CONF perl { # # The Perl script to execute on authorize, authenticate, # accounting, xlat, etc. This is very similar to using # 'rlm_exec' module, but it is persistent, and therefore # faster. # module = /etc/raddb/autocutoffv4.pl # # The following hashes are given to the module and # filled with value-pairs (Attribute names and values) # # %RAD_CHECK Read-only Check items # %RAD_REQUEST Read-only Attributes from the request # %RAD_REPLY Read-write Attributes for the reply # # The return codes from functions in the perl_script # are passed directly back to the server. These # codes are defined in doc/configurable_failover, # src/include/modules.h (RLM_MODULE_REJECT, etc), # and are pre-defined in the 'example.pl' program # which is included. # # # List of functions in the module to call. # Comment out and change if you want to use other # function names than the defaults. # func_authenticate = authenticate #func_authorize = authorize #func_preacct = preacct #func_accounting = accounting #func_checksimul = checksimul #func_pre_proxy = pre_proxy #func_post_proxy = post_proxy #func_post_auth = post_auth #func_xlat = xlat #func_detach = detach # # Comment out the following line if you whish # to use seperate functions for Start and Stop # accounting packets. In that case, the # func_accounting function is not called. # #func_start_accounting = accounting_start #func_stop_accounting = accounting_stop # Uncomment the following lines if your perl is # compiled with ithreads support. # the settings bellow are the default one. # max_clones = 32 start_clones = 32 min_spare_clones = 0 max_spare_clones = 32 cleanup_delay = 5 max_request_per_clone = 0 } -- View this message in context: http://www.nabble.com/Clone-Function-Called-with-each-Authentication-Reques… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

2 1

Startdate for sessions in FreeRadius with MySql?
by Bladan2000 08 Oct '08

08 Oct '08

Hello! We're using FreeRadius 1.1.7 along with MySql on an Ubuntu server. We have a web application to create users for FreeRadius and administrators can set the expire date for when a session should expire. This is achieved with the "Expiration" attribute in the table called RadCheck in the MySql database. However, a customer would like to be able to also set a "start"-date for when the session should become valid i.e. if I set 2008-10-06 it won't be possible to log in before that date. I haven't found a way to do this in FreeRadius. Does anyone have a solution for this? I thought that it might exist an attribute for "Start" as well when there is one for "Expire" but I haven't found any. The only solution I can come up with is some kind of own customized que handling for this altough I would prefer a simple attribute. Any thoughts? Johan -- View this message in context: http://www.nabble.com/Startdate-for-sessions-in-FreeRadius-with-MySql--tp19… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

1 0

GIT Log for 2008-10-06 23:33 GMT
by aland＠deployingradius.com 06 Oct '08

06 Oct '08

commit 738b0152abd6562520e087070ddc79446507e5cb Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Oct 6 11:33:41 2008 +0200 Move socket listening code to plugin modules. This makes the server core a fair bit simpler, and allows for the creation of many new kinds of listening sockets. The next step is to delete the RAD_LISTEN_TYPE_* names, as they're no longer really needed. The goal is to move much of src/main/event.c into the plugin modules, so that the server core isn't are of the underlying protocols. Files changed: src/include/dhcp.h | 71 + src/include/libradius.h | 2 + src/include/radiusd.h | 87 ++- src/include/smodule.h | 130 -- src/include/stats.h | 5 +- src/include/vmps.h | 20 + src/include/vqp.h | 35 + src/lib/Makefile | 4 +- src/lib/dhcp.c | 1185 ++++++++++++++++ src/lib/vqp.c | 684 +++++++++ src/main/Makefile.in | 11 +- src/main/acct.c | 183 +++ src/main/auth.c | 692 +++++++++ src/main/command.c | 1856 ++++++++++++++++++++++++ src/main/detail.c | 836 +++++++++++ src/main/dhcpd.c | 177 +++ src/main/event.c | 54 +- src/main/listen.c | 699 +++++++++- src/main/session.c | 53 +- src/main/stats.c | 447 ++++++- src/main/threads.c | 57 +- src/main/vmps.c | 115 ++ src/modules/Makefile | 3 +- src/modules/frs_acct/Makefile | 11 - src/modules/frs_acct/frs_acct.c | 324 ----- src/modules/frs_auth/Makefile | 11 - src/modules/frs_auth/frs_auth.c | 857 ------------ src/modules/frs_control/Makefile | 11 - src/modules/frs_control/frs_control.c | 1863 ------------------------- src/modules/frs_detail/Makefile | 11 - src/modules/frs_detail/frs_detail.c | 989 ------------- src/modules/frs_dhcp/Makefile | 11 - src/modules/frs_dhcp/dhcp.c | 1185 ---------------- src/modules/frs_dhcp/dhcp.h | 71 - src/modules/frs_dhcp/frs_dhcp.c | 188 --- src/modules/frs_proxy/Makefile | 11 - src/modules/frs_proxy/frs_proxy.c | 130 -- src/modules/frs_status/Makefile | 11 - src/modules/frs_status/frs_status.c | 628 --------- src/modules/frs_vmps/Makefile | 11 - src/modules/frs_vmps/frs_vmps.c | 122 -- src/modules/frs_vmps/vqp.c | 691 --------- src/modules/frs_vmps/vqp.h | 35 - src/modules/rlm_eap/types/rlm_eap_peap/peap.c | 2 +- src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c | 2 +- 45 files changed, 7093 insertions(+), 7488 deletions(-) ====================================================================== commit 2bf8033089c0e67dd6d9b0529e70cbd5f405e631 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Sep 28 09:07:22 2008 +0200 Temporarily drop permissions See "suid demystified" paper. We drop permissions, but keep a saved UID. Then we restore permissions while binding to sockets. This lets us run as an unprivileged user, but still bind to privileged ports. TO DO: add '-u user -g group -R chroot' to command-line options, and switch UIDs *immediately* on start. This minimizes the amount of code that runs as root. TO DO: move suidup/down calls to wrap the bind() calls, and the BINDTODEVICE calls, to even further minimize the code. Files changed: src/main/event.c | 59 ------------------------------------------------- src/main/mainconfig.c | 26 ++++----------------- 2 files changed, 5 insertions(+), 80 deletions(-) ====================================================================== commit 85359d03d71adf0c118dc72240f2f5de2616b0ca Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Oct 4 10:39:52 2008 +0200 Use SUN_LEN, which fixes portability issues Files changed: src/main/command.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ====================================================================== commit 4c547eab62f5b42cad5c41831c9bfbdc24ea562d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Oct 5 10:38:19 2008 +0200 Moved to libtool 2.2.4 Lots of weird changes, including stupid things... Files changed: Makefile | 2 +- acinclude.m4 | 60 - aclocal.m4 | 112 +- config.guess | 24 +- config.sub | 38 +- configure |17362 ++++++++++++++++++---------------- configure.in | 10 +- libltdl/Makefile.am | 172 +- libltdl/Makefile.in | 520 +- libltdl/README | 27 - libltdl/acinclude.m4 | 6818 ++++++++++++++ libltdl/aclocal.m4 | 6814 +------------- libltdl/argz.c | 254 - libltdl/argz_.h | 71 - libltdl/config-h.in | 108 +- libltdl/config.guess | 1471 +++ libltdl/config.sub | 1599 ++++ libltdl/config/compile | 142 - libltdl/config/config.guess | 1526 --- libltdl/config/config.sub | 1658 ---- libltdl/config/depcomp | 589 -- libltdl/config/install-sh | 519 - libltdl/config/ltmain.sh | 7874 ---------------- libltdl/config/missing | 367 - libltdl/configure |20823 +++++++++++++++++++++++++++++------------ libltdl/configure.ac | 90 +- libltdl/install-sh | 401 + libltdl/libltdl/lt__alloc.h | 58 - libltdl/libltdl/lt__dirent.h | 87 - libltdl/libltdl/lt__glibc.h | 83 - libltdl/libltdl/lt__private.h | 148 - libltdl/libltdl/lt__strl.h | 53 - libltdl/libltdl/lt_dlloader.h | 90 - libltdl/libltdl/lt_error.h | 85 - libltdl/libltdl/lt_system.h | 154 - libltdl/libltdl/slist.h | 94 - libltdl/loaders/dld_link.c | 158 - libltdl/loaders/dlopen.c | 242 - libltdl/loaders/dyld.c | 511 - libltdl/loaders/load_add_on.c | 167 - libltdl/loaders/loadlibrary.c | 251 - libltdl/loaders/preopen.c | 375 - libltdl/loaders/shl_load.c | 222 - libltdl/lt__alloc.c | 95 - libltdl/lt__dirent.c | 107 - libltdl/lt__strl.c | 127 - libltdl/lt_dlloader.c | 210 - libltdl/lt_error.c | 110 - libltdl/ltdl.c | 4033 ++++++-- libltdl/ltdl.h | 388 +- libltdl/ltmain.sh | 6863 ++++++++++++++ libltdl/m4/argz.m4 | 79 - libltdl/m4/libtool.m4 | 7309 --------------- libltdl/m4/ltdl.m4 | 824 -- libltdl/m4/ltoptions.m4 | 368 - libltdl/m4/ltsugar.m4 | 123 - libltdl/m4/ltversion.m4 | 23 - libltdl/m4/lt~obsolete.m4 | 92 - libltdl/missing | 353 + libltdl/slist.c | 375 - ltmain.sh | 7907 +++++++--------- src/include/autoconf.h.in | 108 - 62 files changed, 48680 insertions(+), 53043 deletions(-) ======================================================================

1 0