December 2008 - Freeradius-Devel - lists.freeradius.org

Understanding freeradius
by RODOLPHE ANTONIO DE ARAUJO MARQUES 12 Dec '08

12 Dec '08

Hi, I'm currently developing a new 802.11 authentication and association protocol to achieve fast handovers in 802.11 infrastructured networks. I need to add a new module to freeradius to manage new keys that will be derived during the initial 802.1X authentication. What I need from freeradius is to add new attributes in the Access-Request and Access-Accept messages and save some data in a new structure for each user. I've been looking at the code, and reading the wiki trying to understand how freeradius work, but with no success. Can anyone help me getting started by pointing some functions where the freeradius reads and constructs messages, sends and receive and how it choses the authentication method, or any other useful information that may help me achieve my goal? I'm currently using freeradius-server-2.1.1 Thank you Rodolphe Marques

2 2

GIT Log for 2008-12-11 00:33 GMT
by aland＠deployingradius.com 10 Dec '08

10 Dec '08

commit 26ceaca46da3420b3233217ddcd1c4dd47491080 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Dec 10 18:33:59 2008 +0100 Fix stupid bug. Files changed: src/modules/rlm_eap/types/rlm_eap_peap/peap.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit a9f10aa805665b9e6af082b418910a693857864a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 5 07:56:16 2008 +0100 TTLSv0 RFC Files changed: doc/rfc/rfc5281.txt | 2859 --------------------------------------------------- 1 files changed, 0 insertions(+), 2859 deletions(-) ======================================================================

1 0

GIT Log for 2008-12-05 00:33 GMT
by aland＠deployingradius.com 04 Dec '08

04 Dec '08

commit 1afbd314d0207a04606d115607522b3bb45ebd16 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Dec 3 17:29:52 2008 +0100 Allow all ports to be used. Closes #559 Files changed: src/main/listen.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit fcfcb6f657d5b561ce2b21702bb365e2b351d75f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Dec 3 17:27:03 2008 +0100 Corrected VSA types. Closes #617 Files changed: share/dictionary.alteon | 12 ++++++------ 1 files changed, 6 insertions(+), 6 deletions(-) ====================================================================== commit 47448a81dad9e3b0d6517d98eec12da61331b7ec Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 4 10:00:03 2008 +0100 Added Cisco TFTP server option 150. Closes #618 Files changed: share/dictionary.dhcp | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) ======================================================================

1 0

Looking for freelance help to develop freeradius module.
by Joshua Lim 03 Dec '08

03 Dec '08

Hi, i'm looking for freelance help to develop a freeradius module. More info can be found here: http://www.rentacoder.com/RentACoder/misc/BidRequests/ShowBidRequest.asp?ln… Thks. Rgds, Joshua _________________________________________________________________ Manage multiple email accounts with Windows Live Mail effortlessly. http://www.get.live.com/wl/all

1 0

GIT Log for 2008-12-03 00:33 GMT
by aland＠deployingradius.com 02 Dec '08

02 Dec '08

commit 2fb879425040a0ace58cb44dee16cc9a5f66a08e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 2 10:26:29 2008 +0100 Note RedHat build FAQ Files changed: redhat/README | 10 ---------- 1 files changed, 0 insertions(+), 10 deletions(-) ====================================================================== commit 57d9720a48961b55027d50745c74cb23938f1523 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 2 10:11:38 2008 +0100 Fix for CVE-2008-4474 Dialup-admin uses tmp files insecurely. Since it isn't running in a default install, this shouldn't be a major problem. Patch from bug #605 Files changed: dialup_admin/bin/clean_radacct | 14 +++++++------- dialup_admin/bin/log_badlogins | 4 +--- dialup_admin/bin/monthly_tot_stats | 18 +++++++++--------- dialup_admin/bin/tot_stats | 18 +++++++++--------- dialup_admin/bin/truncate_radacct | 16 ++++++++-------- 5 files changed, 34 insertions(+), 36 deletions(-) ====================================================================== commit 1e85251f1014c21f3f2d7525aa8773ee925ef2a8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 2 09:00:52 2008 +0100 Don't leak memory on error conditions. Closes Coverity #74. The program exits anyways on error conditions, but cleaning up is usually good practice. Files changed: src/main/radclient.c | 11 ++++------- 1 files changed, 4 insertions(+), 7 deletions(-) ====================================================================== commit 80ec88fdd77bc419b1185ad8a9c3f7c7d0be4cfe Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 2 08:56:54 2008 +0100 Simplify handling of structs. This closes Coverity #73. Rather than fixing the problem of leaked memory, we avoid it completely by avoiding practices that require complex code to avoid leaking memory. Files changed: src/main/radclient.c | 68 ++++++++++++++++++++++++++++--------------------- 1 files changed, 39 insertions(+), 29 deletions(-) ======================================================================

1 0

Issue with keep server of radius on
by yiyongyun 02 Dec '08

02 Dec '08

When I use "radiusd -X" command in TeraTerm on remote pc to start up the server of radius, If I keep the TeraTerm openning, the radius server can work well, it means that the client can receive response of request well. But if I close the TeraTerm, then the client can not receive response of request any longer. How can I solve this problem or how can I keep the radius server on whenever the TeraTerm is openning or closing.

3 2

GIT Log for 2008-12-02 00:33 GMT
by aland＠deployingradius.com 01 Dec '08

01 Dec '08

commit b74f503ae851e1448119d972bf499cf1bd97dc04 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 16:10:51 2008 +0100 Die if we failed to allocate memory Closes Coverity #63 We don't need to check for "cs->section_tree" twice. Just check for it once, and if we can't allocate it, die. Checking a second time is pointless. Files changed: src/main/conffile.c | 8 +++----- 1 files changed, 3 insertions(+), 5 deletions(-) ====================================================================== commit 0941ba865da2a3a0bdc3355d2f5d1c1847e3f468 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 16:08:09 2008 +0100 "name" cannot be NULL If it's NULL, we can't use it at all. The previous code used it if it was NULL... Closes Coverity #64 Files changed: src/main/conffile.c | 4 +--- 1 files changed, 1 insertions(+), 3 deletions(-) ====================================================================== commit 7cc91bd8c1f4bbf07cfa3fd7f928ad72b7e36e53 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 16:02:15 2008 +0100 log_file may be NULL Closes Coverity #65 Files changed: src/main/log.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 63b91380d6589b016cbf06ff61e63aa0d970f29e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 15:54:01 2008 +0100 Request may be NULL Closes Coverity #66 Files changed: src/main/log.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 289fa1f9aa6902f5e2ef693bb8486164c27c4565 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 14:44:25 2008 +0100 Set "found" to first server. Closes Coverity #67 Files changed: src/main/realms.c | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) ====================================================================== commit c862da5788218a9ebbfa8858f87bfd7da9627caa Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 14:40:00 2008 +0100 secret is NULL for LOCAL realms. Fixes Coverity #68 Files changed: src/main/realms.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 751a09fc7c980940d4776aa8576dcc31c2f54c51 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 14:36:54 2008 +0100 virtual_server can't be NULL If we see "virtual_server = " in a home_server_pool, it's an error. If you want to refer to the default virtual server, don't include a virtual_server configuration entry. Files changed: src/main/realms.c | 9 ++------- 1 files changed, 2 insertions(+), 7 deletions(-) ====================================================================== commit d4ed81e9dedff42ec96d1191ec4cb5e8070af511 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 13:54:35 2008 +0100 One more check for NULL. Closes Coverity #80. Not that we think it's likely... Files changed: src/modules/frs_detail/frs_detail.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit c09ee1fcde0c9fc2df1d79deb02a1cba83d02822 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 13:19:29 2008 +0100 More memory initialization Closes Coverity #83 Files changed: src/lib/misc.c | 2 -- 1 files changed, 0 insertions(+), 2 deletions(-) ====================================================================== commit a6e4ea36bc10ec99d1e85803ef2423179d6a3821 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:50:29 2008 +0100 free structure on error. Closes Coverity #76 Files changed: src/main/listen.c | 3 +-- 1 files changed, 1 insertions(+), 2 deletions(-) ====================================================================== commit 232719a6f7a3744dae1ddd0972f2895ac61c2dd1 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:47:31 2008 +0100 Free fake on unknown packet. This fixes Coverity #77. Files changed: src/main/event.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-) ====================================================================== commit 42cf73caa0e904e045c579f4da9a330d222e4251 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:45:49 2008 +0100 Don't allocate structure twice. This fixes Coverity #78 Files changed: src/modules/rlm_policy/parse.c | 12 ++++++++---- 1 files changed, 8 insertions(+), 4 deletions(-) ====================================================================== commit 0493015e4194fcf94ebeffd8466ca323d859a018 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:40:24 2008 +0100 Ensure there's room for a trailing 0 This address Coverity #70. I don't think it will ever happen due to the way the strings are being handled, but it never hurts to be safe... Files changed: src/main/xlat.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ====================================================================== commit e1605352ffddc90049fb0d1016508640208f547d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:37:21 2008 +0100 Assert that comp < count, not <= count This fixes Coverity #72 Files changed: src/main/modules.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 0290d7c35d43632af84d3c2706656b4f46506f11 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:33:41 2008 +0100 De-reference ptr after checking it. This fixes Coverity #79 Files changed: src/main/evaluate.c | 3 +-- 1 files changed, 1 insertions(+), 2 deletions(-) ====================================================================== commit c608d0214d614060dd7eb3bc1943daa4c2767245 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:27:24 2008 +0100 Initialize stack.start[0]. This should address Coverity issue #104 Files changed: src/main/modcall.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-) ====================================================================== commit 45baf9c4c977e791851291465c8213f978b88b07 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Nov 27 16:14:23 2008 +0100 Include socket code in modules for static builds Files changed: src/main/Makefile.in | 3 --- 1 files changed, 0 insertions(+), 3 deletions(-) ======================================================================

1 0