December 2009 - Freeradius-Devel - lists.freeradius.org

GIT Log for 2009-12-22 00:33 GMT
by aland＠deployingradius.com 21 Dec '09

21 Dec '09

commit 2800ea81e6c8ea0c188415483ad000ffd7d3a335 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 21 12:07:08 2009 +0100 Add OpenSSL license exception Files changed: src/LICENSE.openssl | 13 +++++++++++++ 1 files changed, 13 insertions(+), 0 deletions(-) ====================================================================== commit a365b83da3bfb61e1b3270fce77de60c90ac121c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 21 10:46:20 2009 +0100 Make integers unsigned 32-bit, rather than signed Files changed: src/main/evaluate.c | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) ======================================================================

1 0

GIT Log for 2009-12-20 00:33 GMT
by aland＠deployingradius.com 19 Dec '09

19 Dec '09

commit 08a849df9500120e72d029ca8002e03b236ce99b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Dec 19 09:33:20 2009 +0100 Move DHCP options to "octets" type share/dictionary.redback | 8 ++++++-- 1 files changed, 6 insertions(+), 2 deletions(-)

1 0

GIT Log for 2009-12-19 00:33 GMT
by aland＠deployingradius.com 18 Dec '09

18 Dec '09

commit 5588c7cec9ec38e1278949d262926b996976ffdf Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 18 14:08:32 2009 +0100 Simplify stats code, and keep track of dropped versus bad authenticators Files changed: src/main/stats.c | 57 ++++++++++++++++++++++------------------------------- 1 files changed, 24 insertions(+), 33 deletions(-) ====================================================================== commit 4c90f5c19de92b7971ad35943bbc83ae7bd36a52 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 18 13:52:50 2009 +0100 Make "dropped packet" message debugging This is so that we don't spam the logs wih a DoS when we get lots of packets with a bad signature Files changed: src/main/event.c | 5 ++--- 1 files changed, 2 insertions(+), 3 deletions(-) ====================================================================== commit 3498878728fa666f19f9ee7195b9328b1f8e2dee Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 18 12:31:38 2009 +0100 Added notes on SQL && packets with zero session time Files changed: raddb/sites-available/default | 16 ++++++++++++++++ 1 files changed, 16 insertions(+), 0 deletions(-) ======================================================================

1 0

how to configure radius server for EAP-AKA authentication?
by Manojkumar Patel 18 Dec '09

18 Dec '09

Hello I would like to test EAP-AKA authentication. So, how to configure radius server for EAP-AKA authentication? Or we need to add patch from external lib. Can you guide me? Thanks Manoj ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

1 0

Usage of Stripped_User_Name in sql.conf
by Tejesh Vijayakumar 18 Dec '09

18 Dec '09

Hi,, I am trying to check authentication of a user after stripping the realm part. I am uncommenting the line "sql_user_name = "%{%{Stripped-User-Name}:-%{%{User-Name}:-none}}" in the file sql/postgresql/dialup.conf and added just the username[suffix] in database. But i am getting "user not found" since "Stripped-User-Name" is incorrect. What other changes i have to make to extract realm and the user part? I am using FreeRadius 2.1.7 version. Regards Tejesh ________________________________ This Email may contain confidential or privileged information for the intended recipient (s) If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system. ______________________________________________________________________

1 0

Usage of Stripped_User_Name in sql.conf
by Tejesh Vijayakumar 18 Dec '09

18 Dec '09

Hi,, I am trying to check authentication of a user after stripping the realm part. I have uncommented the line "sql_user_name = "%{%{Stripped-User-Name}:-%{%{User-Name}:-none}}" in the file : sql/postgresql/dialup.conf and added just the username[suffix] in database. But i am getting "user not found" since "Stripped-User-Name" is incorrect. What other changes i have to make to extract realm and the user part? I am using FreeRadius 2.1.7 version. -- Regards Tejesh ________________________________ This Email may contain confidential or privileged information for the intended recipient (s) If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system. ______________________________________________________________________

1 0

GIT Log for 2009-12-18 00:33 GMT
by aland＠deployingradius.com 17 Dec '09

17 Dec '09

commit b8770aca7c0d05dc4135dfe65d9d874fae595e0e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 17 11:42:03 2009 +0100 Fix typo in c0d32bd24 Files changed: Make.inc.in | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit bf227982b9f6e1208a1c40b9aa3ba20a805c4ce7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 17 11:28:12 2009 +0100 Removed unnecessary debug message Files changed: src/main/xlat.c | 2 -- 1 files changed, 0 insertions(+), 2 deletions(-) ====================================================================== commit 26a92918f3867069302d2db1ba655ca015de07c8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 17 09:35:35 2009 +0100 Simplified use of llvm checker Files changed: Make.inc.in | 9 ++++----- src/lib/Makefile | 4 ---- src/main/Makefile.in | 4 ---- src/modules/Makefile | 4 ---- src/modules/rules.mak | 4 ---- 5 files changed, 4 insertions(+), 21 deletions(-) ======================================================================

1 0

Free Radius performance variation
by Tejesh Vijayakumar 16 Dec '09

16 Dec '09

Hi, I am testing for performance of FreeRadius Server 2.1.7 with the radclient utility. With 1000 users i am getting 125 Auths/sec and with 10000 users it is 80 Auths/sec. Why this drastic variation when the no of users is just a tenfold increase... Regards, Tejesh ________________________________ This Email may contain confidential or privileged information for the intended recipient (s) If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system. ______________________________________________________________________

6 9

GIT Log for 2009-12-16 00:33 GMT
by aland＠deployingradius.com 15 Dec '09

15 Dec '09

commit b4e55d83418ec08d36f586c43455745bf7875258 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 15 16:01:20 2009 +0100 Ensure that len > 0 Files changed: src/lib/valuepair.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 94cb56facdbae4fa07a3499c1e1ffcea9ba9f637 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 15 14:23:47 2009 +0100 Catch possible NULL pointer on editing attribute list Files changed: src/main/evaluate.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit e18c80dde608ca2150ce6c6c14ea6b42a5a3370c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 15 14:17:52 2009 +0100 Catch situations where COA may be NULL Files changed: src/main/event.c | 14 +++++++++++--- 1 files changed, 11 insertions(+), 3 deletions(-) ====================================================================== commit 0bf84a54e751fa4e1e5828b37fb697e7ddafe318 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 15 11:52:03 2009 +0100 If we have "user=foo", and we're ALREADY running as that user, ignore it. This prevents us from complaining when "initgroups" is run as non-root Files changed: src/main/mainconfig.c | 18 ++++++++++++------ 1 files changed, 12 insertions(+), 6 deletions(-) ======================================================================

1 0

Access-Request Identifier field
by Peter Molnar 12 Dec '09

12 Dec '09

Hello! First of all, sorry for posting to the devel list, but my question is quite technical, I think this list suits better than "freeradius-users". I'm developing a limited, minimalistic "implementation" of a RADIUS client for an embedded system. (Basically it's just sending an Access-Request, receiving a reply, and acting upon it) I have a question about the Identifier field of the Access-Request packet. According to RFC 2865: "The Identifier field MUST be changed whenever the content of the Attributes field changes, and whenever a valid reply has been received for a previous request. For retransmissions, the Identifier MUST remain unchanged." OK, that means I have to generate a random octet for this field, that is different from the Identifier of the previous request. But, do I have to preserve the value of the last Identifier between client reboots? What happens, if the server receives a packet, with the same Identifier, as the previous, but with different authentication data (the random number generator gives the same value as the previous Identifier)? It gets treated as a retransmission, without actually processing the new data? Does the official freeradius client preserve the previous Identifier value between server restarts? I'm using freeradius version 2.0.4. regards, Peter

2 1