January 2009 - Freeradius-Devel - lists.freeradius.org

Re: edit RAD_REQUEST_PROXY_REPLY with perl
by Tim.W 22 Jan '09

22 Jan '09

I have been able to use the following to check for multiple items: for my $t0_ (keys %RAD_REQUEST_PROXY_REPLY) { if(UNIVERSAL::isa( $RAD_REQUEST_PROXY_REPLY{$t0_} , "ARRAY" )) { } else {} } and I have been successful in editing the values and sending them to my NAS with: $RAD_REQUEST_PROXY_REPLY{$t0_}[0]="newValue"; but I cannot for the life of me traverse the array in the hash. I've tried all kinds of methods with foreach and for loops, but I cannot get the lenght/size of the array. When I know i've got 3 attributes of a specific kind I can do: $RAD_REQUEST_PROXY_REPLY{$t0_}[0]="newValue1"; $RAD_REQUEST_PROXY_REPLY{$t0_}[1]="newValue2"; $RAD_REQUEST_PROXY_REPLY{$t0_}[2]="newValue3"; but I cannot find the size of $RAD_REQUEST_PROXY_REPLY{$t0_}. Any help in the right direction would be greatly appreciated. Tim. W

2 1

rlm_perl - Can I update RAD_REQUEST?
by James Nedila 22 Jan '09

22 Jan '09

Can I update the RAD_REQUEST hash, and have the changes bubble back up to freeradius once the module has returned? Thanks, James

1 0

Accounting-Request packets
by Mark Dennehy 22 Jan '09

22 Jan '09

Hi guys, Not to waste too much time, but I can't seem to find answers to two quick questions and I was hoping someone might know off the top of their heads: 1) Can a radius accounting session get the Start message from one host and the Stop message from another? 2) I've got wireshark showing incoming radius messages on a box here; but freeradius -X isn't showing them being spotted; if the a-v pairs weren't spot on, would if just silently discard the packets? Would it not even log that malformed packets were received? Thanks for your time, -- Mark Dennehy

3 5

edit RAD_REQUEST_PROXY_REPLY with perl
by Tim.W 22 Jan '09

22 Jan '09

Hi, I'm trying to edit the values in RAD_REQUEST_PROXY_REPLY with perl. I've started with the example.pl file, and I'm able to list the first different attributes but I'm not sure how to list all the values, and how to change them. Specifically I want to edit the values of cisco-avpair attributes (which are multiple), replacing specific strings. I don't want to add a new attribute, but to change one or more of the attributes before they are sent to my NAS. Can anyone help me with an example of how to traverse and change these? (btw, I'm using freeradius version 2.1.3) Thanks, Tim

3 4

Nas-Ip-Address attribute and source IP address of UDP datagram.
by Dmitry V. Krivenok 22 Jan '09

22 Jan '09

Hello! I deal with bad "hand-made" NAS, which doesn't include "Nas-Ip-Address" attribute into the packet. So I can't distinguish packets from different NAS'es. Is there a way to add this attribute (with value of source address of UDP datagram) using standard FreeRadius facilities? We don't use proxies, so this solution seems to be correct. I'm writing my own rlm and I can implement desired functionality if there is no one in FreeRadius. The problem lies in that I can't find the address of client in REQUEST (i.e. auth_req) structure. Comments in "site-enabled/default" say that preprocess module should add "Client-IP-Address" attribute. I printed request->packet->vps, but did't find this attribute in the list. Is source IP address reachable via REQUEST structure passed to authorize callback? -- Sincerely yours, Dmitry V. Krivenok Orange System Co., Ltd. Saint-Petersburg, Russia work phone: +7 812 332-32-40 cellular phone: +7 921 576-70-91 e-mail: krivenok(a)orangesystem.ru web: http://www.orangesystem.ru skype: krivenok_dmitry jabber: krivenok_dmitry(a)jabber.ru icq: 242-526-443

1 0

status server
by Gabriel Blanchard 22 Jan '09

22 Jan '09

Man I've been bugging you guys all day... Another issue came up when I tried to enable the status server. I used the default settings provided and this is what I get. /usr/local/etc/raddb/sites-enabled/status[20]: Failed to find module "ok". /usr/local/etc/raddb/sites-enabled/status[19]: Errors parsing authorize section. From what I understand "ok" isn't even supposed to be processed by modcall.c I found another thread regarding this pasted below... >> /opt/radius/etc/raddb/sites-enabled/status[63]: Failed to find module >"ok". >> Wed Nov 26 15:53:18 2008 : Error: >> /opt/radius/etc/raddb/sites-enabled/status[61]: Errors parsing authorize >> section. >> Wed Nov 26 15:53:18 2008 : Debug: } >> Wed Nov 26 15:53:18 2008 : Debug: } >> Wed Nov 26 15:53:18 2008 : Error: Errors initializing modules >> >> The same config works fine with REL3 and 32 bit. >> >> Any ideas what could be wrong ? > > Nope. I'll see if I have access to a 64-bit system. > > Alan DeKok. I'm using FreeBSD amd64 so I figured that I'm also affected. After digging for an hour in the source code I pretty much gave up, but I did find a work-around by declaring always okhack { rcode = ok } and then replacing the "ok"s with okhack in the status server. That seems to have fixed it. -Gabriel

2 1

GIT Log for 2009-01-22 00:33 GMT
by aland＠deployingradius.com 21 Jan '09

21 Jan '09

commit 2ce4a036dcb9a5e860462e3f452c2d634cb1efd7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Jan 21 14:40:30 2009 +0100 Look for setuid && set/getresuid Files changed: configure | 6 ------ src/include/autoconf.h.in | 9 --------- 2 files changed, 0 insertions(+), 15 deletions(-) ====================================================================== commit ab8297a0d666c19367717169eba68dc7b3ce6b50 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Jan 21 14:35:40 2009 +0100 Check for setuid, and use those checks Conflicts: configure.in Files changed: configure.in | 3 --- src/main/mainconfig.c | 11 ++++------- 2 files changed, 4 insertions(+), 10 deletions(-) ====================================================================== commit 451d5da93a4f19a37bc5d3ba9fc8d4d97adbeabc Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Jan 21 11:13:24 2009 +0100 If we're at EOF, the socket will never be ready So check for EOF in more places Files changed: src/modules/frs_detail/frs_detail.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-) ======================================================================

1 0

rlm_fastusers
by Gabriel Blanchard 21 Jan '09

21 Jan '09

So I am in the process of upgrading from freeradius 1.x to 2.x. I have scripts that check if my radius configuration is correct before I actually run radiusd. I'm more specifically interested in checking if my fastusers file syntax is correct before loading it. I found out that by running radiusd -n radiusd-test -C -X it wouldn't check my fastusers module at all. Module: Linked to module rlm_fastusers Module: Skipping instantiation of fastusers After some more digging I found that the module needs to have a type flag of "RLM_TYPE_CHECK_CONFIG_SAFE" for it to check. Now I'm not sure if I should just blindly change the source code and add this flag in the module or not. Should I just try it and report back if it works?

2 3

buffered-sql
by Gabriel Blanchard 21 Jan '09

21 Jan '09

I was just trying to implement a buffered-sql server (type detail) using the FreeBSD port 2.1.3 and it was only passing on the first SQL query and any consecutive query would be left out. I found an old thread in the freeradius archive regarding this and you pointed this out (Alan) Copy pasting.. > It looks like it isn't noticing that it's finished reading the file. > > I would suggest going to line 482 of src/main/detail.c, and adding a >new line: > > data->state = STATE_HEADER; > if (feof(data->fp) goto cleanup; // added line > return 0; > > If that fixes it, I'll commit it to CVS. if not then the issue is a > little more complicated. > > The good news is that 2.0 now has the skeleton of a regression test >suite in src/tests. So adding an automated test for this case should be >relatively straightforward. and there was no follow up after it....so I tried it and it appears to work. Now I realize that your latest GIT isn't the same at all from what I can see and honestly I don't really have the time to look at it. Anyway this patch appears to fix the issue on 2.1.3 --- src/main/detail.c 2009-01-20 20:32:05.000000000 -0500 +++ src/main/detail.c 2009-01-20 20:32:27.000000000 -0500 @@ -579,6 +579,7 @@ */ if (!data->vps) { data->state = STATE_HEADER; + if (feof(data->fp)) goto cleanup; return 0; } Unless someone may think that this will cause an issue, I'll be using it on my radius servers for now... -Gabriel

2 1

FreeRadius as a RADIUS server cum GPRS subscriber database
by Sourav Chakraborty 20 Jan '09

20 Jan '09

Thanks for your answer......I understand that on GGSN restarts it handles thousands of msgs per sec......what about sustained handling of say around 3000 msgs/sec?Is that handled? regards Sourav

2 1