February 2008 - Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 08.02.2008 - 09.02.2008 GMT
by Automatic cvs log generator 09 Feb '08

09 Feb '08

CVS log entries from 08.02.2008 (Fri) 09:00:01 - 09.02.2008 (Sat) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/configure; Revisions: 1.17 File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revisions: 1.47, 1.46 ===================================================== Log entries ===================================================== Description: Use name2 for debug messages, not name1 Modified files: File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revision: 1.47; Date: 2008/02/09 08:00:55; Author: aland; Lines: (+21 -31) ------------------------------- Description: Corrected debug output Modified files: File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revision: 1.46; Date: 2008/02/09 07:55:21; Author: aland; Lines: (+3 -3) ------------------------------- Description: Re-build from configure.in to add -DLDAP_DEPRECATED, which allows it to work on 64-bit systems Modified files: File: radiusd/src/modules/rlm_ldap/configure; Revision: 1.17; Date: 2008/02/09 07:29:18; Author: aland; Lines: (+2057 -1614) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c Revisions: 1.47, 1.46 Authors: aland (+21 -31), aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_ldap/configure Revisions: 1.17 Authors: aland (+2057 -1614) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

EAP-PEAPv1 in Freeradius 1.1.7
by Martin Gadbois 08 Feb '08

08 Feb '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry for being backwards... is there EAP-PEAPv1 support in FR 1.1.x? I know the wiki talks about it and there is EAP-GTC in the configuration, but I see on the current site that it is available in the eap2 module, in > 2.0.0. Thanks... - -- ============== +---------------------------------------------+ Martin Gadbois | "Please answer by yes or no. | Sr. SW Designer | Uncooperative user waste precious CPU time" | Colubris Networks Inc. | -- The Andromeda Strain, M. Crichton, 1969 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHq2rzMPkSU9icdA0RAu3sAJsGxyNIsv2rCUuzc8UZjOkfW+HR9QCeIGQU hUY1w4N8JgqJQ3ofNDw+Mfg= =d/ES -----END PGP SIGNATURE-----

2 1

authentication failed
by Dharmesh Desai 07 Feb '08

07 Feb '08

Dear All, I am using free radius client. Authenticating with the free radius server. If I am using free radius utility radclient and passing argument as a shared secret then it works fine. With free radius client utility radiusclient application, if I am providing as it in file servers then it is giving me error that unprintable characters in password. Can any suggest where I am wrong? Regards, Dharmesh Desai

1 0

How server_random is generated
by Jagadish 07 Feb '08

07 Feb '08

Hi, I am new to this mailing list. I started using free radius server. I am using EAP-TLS. I want to know how "server_random" is generated in free radius source code. I went through the source code. In eaptls_gen_mppe_keys() function, "client_random " and "server_random" are passed as seed to PRF function. I think "client_random" is obtained from "client Hello" packet from supplicant(client). But where from "server_random" is obtained in the source code? One more thing I found was SSL_read() function is called in tls_handshake_recv() function(In tls.c file). I added debugs to print "client_random" and "server_random " before SSL_read() function and after SSL_read() function. The random values were printed after the SSL_read() function is called. Is this function does fill the server_random variable? Please help me in resolving this. thanks in advance, Jagadish

2 1

Automatic report from sources (radiusd) between 06.02.2008 - 07.02.2008 GMT
by Automatic cvs log generator 07 Feb '08

07 Feb '08

CVS log entries from 06.02.2008 (Wed) 09:00:00 - 07.02.2008 (Thu) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.82 File: radiusd/src/modules/rlm_eap/mem.c; Revisions: 1.27 File: radiusd/src/main/event.c; Revisions: 1.85, 1.84 File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revisions: 1.54 File: radiusd/raddb/sites-available/proxy-inner-tunnel; Revisions: 1.2 File: radiusd/raddb/sites-available/inner-tunnel; Revisions: 1.4 File: radiusd/src/main/conffile.c; Revisions: 1.100.2.1.2.7 File: radiusd/man/man1/radclient.1; Revisions: 1.10 ===================================================== Combined list of identical log entries ===================================================== Description: Print more on "failed to remember handler" Try harder to keep a unique state. Check return code of eaplist_add Modified files: File: radiusd/src/modules/rlm_eap/mem.c; Revision: 1.27; Date: 2008/02/07 08:51:06; Author: aland; Lines: (+11 -6) File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revision: 1.54; Date: 2008/02/07 08:51:06; Author: aland; Lines: (+13 -12) ===================================================== Log entries ===================================================== Description: Notes on 2.0.2 Modified files: File: radiusd/doc/ChangeLog; Revision: 1.82; Date: 2008/02/06 14:01:22; Author: aland; Lines: (+18 -2) ------------------------------- Description: Corrected documentation Modified files: File: radiusd/man/man1/radclient.1; Revision: 1.10; Date: 2008/02/06 10:36:48; Author: aland; Lines: (+1 -1) ------------------------------- Description: corrected typo Modified files: File: radiusd/raddb/sites-available/inner-tunnel; Revision: 1.4; Date: 2008/02/06 17:06:07; Author: aland; Lines: (+2 -2) ------------------------------- Description: Notes on proxying when "proxy_as_eap = no" Modified files: File: radiusd/raddb/sites-available/proxy-inner-tunnel; Revision: 1.2; Date: 2008/02/06 11:11:48; Author: aland; Lines: (+9 -1) ------------------------------- Description: Allow lines at EOF to not have LF. Patch from colubris Modified files: File: radiusd/src/main/conffile.c; Revision: 1.100.2.1.2.7; Date: 2008/02/06 17:12:40; Author: aland; Lines: (+3 -3) ------------------------------- Description: Clean up detail file handling again Modified files: File: radiusd/src/main/event.c; Revision: 1.85; Date: 2008/02/06 11:06:40; Author: aland; Lines: (+10 -15) ------------------------------- Description: Permit inner tunnel EAP things to be proxied, too Modified files: File: radiusd/src/main/event.c; Revision: 1.84; Date: 2008/02/06 11:05:03; Author: aland; Lines: (+4 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.82 Authors: aland (+18 -2) ------------------------------- File: radiusd/man/man1/radclient.1 Revisions: 1.10 Authors: aland (+1 -1) ------------------------------- File: radiusd/raddb/sites-available/inner-tunnel Revisions: 1.4 Authors: aland (+2 -2) ------------------------------- File: radiusd/raddb/sites-available/proxy-inner-tunnel Revisions: 1.2 Authors: aland (+9 -1) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.100.2.1.2.7 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.85, 1.84 Authors: aland (+10 -15), aland (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_eap/mem.c Revisions: 1.27 Authors: aland (+11 -6) ------------------------------- File: radiusd/src/modules/rlm_eap/rlm_eap.c Revisions: 1.54 Authors: aland (+13 -12) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

[PATCH] Configure file without an empty line
by Martin Gadbois 06 Feb '08

06 Feb '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I had to apply this patch to 1.1.7 to have it read the config files if the configuration does not end with an empty line. diff -ur freeradius-1.1.7-org/src/main/conffile.c freeradius-1.1.7/src/main/conffile.c - --- freeradius-1.1.7-org/src/main/conffile.c 2007-04-07 18:28:17.000000000 -0400 +++ freeradius-1.1.7/src/main/conffile.c 2008-02-01 16:32:36.000000000 -0500 @@ -672,7 +672,7 @@ * We've filled the buffer, and there isn't * a CR in it. Die! */ - - if (cbuf[len - 1] != '\n') { + if (!eof && cbuf[len - 1] != '\n') { radlog(L_ERR, "%s[%d]: Line too long", cf, *lineno); cf_section_free(&cs); Attached is the configuration file that would fail with an Line too long error. Notice that the end of the file is "...blabla\n", not "...blabla\n\n" I have not tried v2.0.1. - -- ============== +---------------------------------------------+ Martin Gadbois | "Please answer by yes or no. | Sr. SW Designer | Uncooperative user waste precious CPU time" | Colubris Networks Inc. | -- The Andromeda Strain, M. Crichton, 1969 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHqcyrMPkSU9icdA0RAuI3AJ9rBf22wvN7VlZPwZb6q5wLGvrG5gCfZlsh pW9i0iwZmnYltWoJdMSGgCE= =+wv9 -----END PGP SIGNATURE----- # # Configuration for the SQL module, when using Postgresql. # # The database schema is available at: # # doc/examples/postgresql.sql # # Updated for using AttributeGroup/AttributeNumber in *reply tables. # server & password must already be defined driver = "rlm_sql_postgresql" login = "postgres" radius_db = "postgres" acct_table1 = "radius.radacct" acct_table2 = "radius.radacct" # Allow for storing data after authentication postauth_table = "radius.radpostauth" authcheck_table = "radius.radcheck" authreply_table = "radius.radreply" groupcheck_table = "radius.radgroupcheck" groupreply_table = "radius.radgroupreply" # Table to keep group info radusergroup_table = "radius.radusergroup" # Where to store a request authorize_radrequest_table = "radius.radrequest" # Remove stale session if checkrad does not see a double login deletestalesessions = yes # Print all SQL statements when in debug mode (-x) sqltrace = no # sqltracefile = ${logdir}/sqltrace.sql # number of sql connections to make to server num_sql_socks = 5 sql_user_name = "%{Stripped-User-Name:-%{User-Name:-DEFAULT}}" group_membership_query = "SELECT GroupName FROM ${radusergroup_table} WHERE UserName='%{SQL-User-Name}'" postauth_query = "SELECT radius.post_authentication('%{SQL-User-Name}', '%{reply:Packet-Type}', '%{Acct-Session-Id}', '%{Colubris-Access-Controlled}', %{Colubris-VSC-Index}, %{Colubris-Active-User-Sessions}, '%{reply:Colubris-Auth-Method}','%{EAP-Type}', '%{request:Freeradius-Proxied-To}' )"

2 1

Automatic report from sources (radiusd) between 05.02.2008 - 06.02.2008 GMT
by Automatic cvs log generator 06 Feb '08

06 Feb '08

CVS log entries from 05.02.2008 (Tue) 09:00:00 - 06.02.2008 (Wed) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/radius.c; Revisions: 1.216, 1.215 File: radiusd/src/include/radius.h; Revisions: 1.91 File: radiusd/share/dictionary.freeradius.internal; Revisions: 1.24 ===================================================== Combined list of identical log entries ===================================================== Description: Allow raw attributes to be sent if the server was built with debug symbols. This means that the administrator can send *anything* in a packet, including badly formatted attributes Raw-Attribute = 0x050600000001 NAS-Port = 1 Raw-Attribute = 0x0505000001 Badly formatted NAS-Port. (length is 5, not 6) Modified files: File: radiusd/share/dictionary.freeradius.internal; Revision: 1.24; Date: 2008/02/05 10:01:30; Author: aland; Lines: (+2 -6) File: radiusd/src/include/radius.h; Revision: 1.91; Date: 2008/02/05 10:01:30; Author: aland; Lines: (+3 -2) File: radiusd/src/lib/radius.c; Revision: 1.215; Date: 2008/02/05 10:01:30; Author: aland; Lines: (+14 -2) ===================================================== Log entries ===================================================== Description: Don't print out internal attributes when sending packets Modified files: File: radiusd/src/lib/radius.c; Revision: 1.216; Date: 2008/02/05 15:07:17; Author: aland; Lines: (+4 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.freeradius.internal Revisions: 1.24 Authors: aland (+2 -6) ------------------------------- File: radiusd/src/include/radius.h Revisions: 1.91 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.216, 1.215 Authors: aland (+4 -3), aland (+14 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 04.02.2008 - 05.02.2008 GMT
by Automatic cvs log generator 05 Feb '08

05 Feb '08

CVS log entries from 04.02.2008 (Mon) 09:00:00 - 05.02.2008 (Tue) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/detail.c; Revisions: 1.8, 1.7 File: radiusd/src/main/listen.c; Revisions: 1.116 ===================================================== Log entries ===================================================== Description: Corrected typos Modified files: File: radiusd/src/main/detail.c; Revision: 1.8; Date: 2008/02/04 21:37:15; Author: aland; Lines: (+5 -5) ------------------------------- Description: select() returns nothing if we're just before EOF. So, if we've read a complete packet, check if our current position == eof. We can't use feof() for this, because it returns eof only when we've tried to go past eof... Modified files: File: radiusd/src/main/detail.c; Revision: 1.7; Date: 2008/02/04 16:37:08; Author: aland; Lines: (+34 -8) ------------------------------- Description: With -i && -n, also read listen sections from "server <foo>" Modified files: File: radiusd/src/main/listen.c; Revision: 1.116; Date: 2008/02/04 16:30:38; Author: aland; Lines: (+29 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/detail.c Revisions: 1.8, 1.7 Authors: aland (+5 -5), aland (+34 -8) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.116 Authors: aland (+29 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

need an advice
by Ульянов Дмитрий 02 Feb '08

02 Feb '08

Здравствуйте, . Hello I want to use radius-proxy, because don't want to implement radius module and radius server is exists(but not freeradius). Can i add some features while processing proxy requests (add some attributes to the response), while processing rad-response from origin radius server? (I know C/C++ a little, so can you give me an advice what files should i look to make this, if it is possible.) I want to make this: [ radius server ] <-> [freeradius proxy] <-> [NAS] || making some changes with rad-response. Maybe i can use rewrite/filter modules to do this? -- http://www.domokom.ru mailto:ulyanov@domokom.ru

2 1

Porting rlm_python to 2.0.0
by Paul P Komkoff Jr 01 Feb '08

01 Feb '08

Hi! I'm porting my rlm_python to 2.0 right now and have noticed that _init and _destroy functions were removed from the module_t interface. What was the reasoning for that? Can I rely on _instantiate/_detach calls being serialized or I need to build my own locking around them? Thx. P.S. I assume that ideal solution will be to have no static data in the module and put everything into instance struct. However, in the real world real python has very basic support for multiple interpreters and still needs to be globally Py_Initialized.... -- Paul P 'Stingray' Komkoff Jr // http://stingr.net/key <- my pgp key This message represents the official view of the voices in my head

2 2