February 2009 - Freeradius-Devel - lists.freeradius.org

GIT Log for 2009-02-14 00:33 GMT
by aland＠deployingradius.com 15 Feb '09

15 Feb '09

commit 5ec5315e8b69b6dfcc7edec6a6859496c41d5c93 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Feb 13 21:49:22 2009 +0100 Command to print debugging from a running server. Very useful! Files changed: scripts/Makefile | 1 - scripts/raddebug | 106 ------------------------------------------------------ 2 files changed, 0 insertions(+), 107 deletions(-) ====================================================================== commit a304396710dd348c67f356e5e16e218933682e17 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Feb 13 16:08:27 2009 +0100 Fix handling of "debug file [filename]" Make filename optional, which means "no debug file". Re-arrange how we handle the pointers, to avoid threading issues Files changed: src/main/log.c | 3 +- src/main/mainconfig.c | 2 + src/modules/frs_control/frs_control.c | 37 ++++++++++---------------------- 3 files changed, 15 insertions(+), 27 deletions(-) ====================================================================== commit 87f846f0da715b112c6cce42322a67373347d6dd Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Feb 13 16:06:07 2009 +0100 Suppress LF's if there's no output Files changed: src/main/radmin.c | 8 +++----- 1 files changed, 3 insertions(+), 5 deletions(-) ====================================================================== commit b503aa58292cf7bcecc90b98b2879bd6d208385c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Feb 13 15:08:14 2009 +0100 Change detail polling interval from 1s to 10s This lowers the noise in debugging mode. It shouldn't affect performance. Files changed: src/main/event.c | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) ====================================================================== commit 1424d541fa9e13a09bd8bf464cf5b4e168f31a51 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Feb 11 18:39:21 2009 +0100 Fixed typo Files changed: share/dictionary.xedia | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 4232b637fc9f86dc501a0b928a0d2f270d6f5ed8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 10 09:48:17 2009 +0100 More instructions on DHCP Files changed: raddb/sites-available/dhcp | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) ====================================================================== commit 04a3c32f5cfaa5a80ed96a62fe9b4de3d31b3e5f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 10 09:08:13 2009 +0100 Moved otp.conf to modules/otp Files changed: raddb/modules/otp | 78 ------------------------------------------------- raddb/radiusd.conf.in | 4 ++ 2 files changed, 4 insertions(+), 78 deletions(-) ====================================================================== commit 89d550682c2c78e2f87498325dff277af3b00868 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Feb 5 16:22:10 2009 +0100 Add "require message authenticator" config to home servers Files changed: raddb/proxy.conf | 11 ----------- src/include/realms.h | 1 - src/main/realms.c | 14 -------------- 3 files changed, 0 insertions(+), 26 deletions(-) ====================================================================== commit 144f21d3a892a6999818e2d5f3af570a9df12fb0 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Feb 5 16:11:06 2009 +0100 Move "allocate request->proxy" to home_server_ldb In preparation for other work Files changed: src/main/event.c | 40 ++++++++++++++++++++++++++++++++ src/main/realms.c | 65 +++++++--------------------------------------------- 2 files changed, 49 insertions(+), 56 deletions(-) ====================================================================== commit f4ea2ec42465dacc681af06653f93742022d6ba5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Feb 5 12:05:38 2009 +0100 Moved checks for detail to home_server_ldb Rather than proxying to a home server, and THEN deciding it wasn't a good idea, we simply skip that home server during the process of trying to find one. Files changed: src/main/event.c | 15 +++++++++++++++ src/main/realms.c | 13 ------------- 2 files changed, 15 insertions(+), 13 deletions(-) ======================================================================

4 5

FreeRadius msg processing rate
by Sourav Chakraborty 15 Feb '09

15 Feb '09

Hello, I have configured FreeRadius server with MySQL.I bombarded the server with Radius Accounting START and STOP msgs randomly with 178461 msgs in 1 minute(~3000 msgs/sec).I got response back of 23658 msgs.I have noted the UDP msg stats using (netstat -s).They are as below-- 67137 packets received 0 packets to unknown port received 111680 packet receive errors 23710 packets sent Note that the initial counts were all 0. >From the stats it seems that -- packets received + packet receive errors = ~msgs sent packets sent = ~response msgs received N.B:- the small anomalies in the counts may be due to unprocessed msgs in the socket buffers. In other words though the msg sending rate was ~3000 msgs/sec,the msg processing rate was ~400 msgs/sec. Can you comment on this?We need to process over 3000 msgs/sec.So is FreeRadius with MySQL a right choice?Please suggest. Thanks and Regards Sourav

4 5

change Access-Reject to Access-Accept after proxy
by Andrey kotrekhov 13 Feb '09

13 Feb '09

Hello, All! The task is: to proxy the request to the next radiusd, and if reply is reject to change it to access-accept and to add some avpairs during local authorization process. Is it possible? I see that I can modify in request->reply->code in own module. But is it right way? -- Andrey

2 1

Online Data(Radius Server)
by Stephen Alistoun 10 Feb '09

10 Feb '09

Hi all, I'm busy working with a Radius Server and want to get the data while the person is online but the problem is that I can only get the data while the person logs off. The Data is stored in the Radacct Table and the two columns are AcctInputOctets and AcctOutputOctets. Is it still possible to get the data of the uploaded and downloaded data while the person is online. Regards, Stephen Alistoun -- View this message in context: http://www.nabble.com/Online-Data%28Radius-Server%29-tp21931094p21931094.ht… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

2 4

FW: FreeRadius Data Accounting
by Andrew Paternoster 10 Feb '09

10 Feb '09

HI I was wondering if I could get some insight to how people are doing daily data accounting for users that stay connected for days. E.g. Adsl's or dial ups. The problem seems to be that the records in radacct only get a time stamp on a stop or a start. And the session time is updated at every interval. Could I find out if others have managed to get around this problem and how. Thank you Andrew Paternoster

2 2

Authentication
by Scott Pinhorne 09 Feb '09

09 Feb '09

Good Morning I am receiving authentication requests from clients GPRS devices. The problem I have is the user/pass are not unique only the call-station-id is so I need to have free radius client authenticate on calling-station-id and not take in to account the user/pass. So if the calling-station-id matches the request I would like to then return the appropriate information. I am using MySQL to authenticate. Any pointers would be appreciated. Example Request Access-Request packet from host 192.168.71.1:4358, id=172, length=118 NAS-IP-Address = 192.168.71.1 NAS-Identifier = "GRN-J20" Called-Station-Id = "domain.com" Framed-Protocol = GPRS-PDP-Context Service-Type = Framed-User NAS-Port-Type = Virtual User-Name = "void" User-Password = "void" Calling-Station-Id = "4412345678912" 3GPP-IMSI-MCC-MNC = "12345" Best Regards Scott Pinhorne Tel: 0845 862 0371 http://www.voxit.co.uk <http://www.voxit.co.uk> P Please consider the environment before printing this email. PRIVACY AND CONFIDENTIALITY NOTICE The information in this email is for the named addressee only. As this email may contain confidential or privileged information if you are not, or suspect that you are not, the named addressee other person responsible for delivering the message to the named addressee, please contact us immediately. Please note that we cannot guarantee that this message has not been intercepted and amended. The views of the author may not necessarily reflect those of VoxIT Ltd. VIRUS NOTICE The contents of any attachment may contain software viruses, which could damage your own computer. While VoxIT Ltd has taken reasonable precautions to minimise the risk of software viruses, it cannot accept liability for any damage, which you may suffer as a result of such viruses. We recommend that you carry out your own virus checks before opening any attachment. -- This message has been scanned for viruses and dangerous content by VOXIT Limited, and is believed to be clean.

1 0

Re: Authentication
by Scott Pinhorne 09 Feb '09

09 Feb '09

Thank you for contacting VoxIT Limited If your email is with regards to support of any kind please resend your email to: support(a)voxit.co.uk A ticket will be automatically created and the ID sent to you by return However if this is not support related I will reply as soon as possible but if your email is urgent please call us on: 0845 862 0371 Many Thanks

1 0

..::Dictionary::..
by Alfonso Reyes 09 Feb '09

09 Feb '09

Hi list Im trying to setup the connection to our 3com 3012 router to handle the connections, it has the following instructions that I dont fully understand could you please help me? Create a user on the Radius Server "admin" DONE Under "return list attributes" tab select "Ins" WHATS THIS? Scroll the attribute list for "User-Privilege" (this should now be listed if the dictionary file was successfully edited and loaded per Radius Server instructions) AND THIS? Select "User-Privilege" attribute, then "Admin" then select the "add" button WE DONT HAVE THAT BUTTON. The thing here is that I think that the server they are talking about is a Microsoft based or something like that, but Im not sure if I have to do something else with the freeradius right now I have the username and the password, The values of the router are on the dictionary file. Heres all the information about it. Solution ID: 3KB10331 Router 3000/5000 Series - Admin Login with Radius Authentication Problem: How to configure Radius Fix: To login to a 3Com Router using Radius Authentication perform the following: On the Radius server edit the Radius Server Dictionary file and add the lines below (refer to you Radius Server manual for details) ATTRIBUTE User-Privilege 107 integer VALUE User-Privilege Guest 0 VALUE User-Privilege Operator 1 VALUE User-Privilege Admin 2 Create a user on the Radius Server "admin" Under "return list attributes" tab select "Ins" Scroll the attribute list for "User-Privilege" (this should now be listed if the dictionary file was successfully edited and loaded per Radius Server instructions) Select "User-Privilege" attribute, then "Admin" then select the "add" button On the 3Com Router execute the following commands [Router_5231]local-user admin service-type administrator password simple admin local user database entry in the event Radius Servers are unavailable [Router_5231]radius server 10.210.2.250 IP Address of the Radius Server [Router_5231]radius shared-key 1234abcd Radius Server shared secret [Router_5231]aaa-enable Enable AAA Authentication, Authorization and Accounting [Router_5231]aaa authentication-scheme login default radius local Configures the Router to authenticate login via Radius first then the local user database Any Ideas? Thanks for your help

2 1

GIT Log for 2009-02-04 00:33 GMT
by aland＠deployingradius.com 03 Feb '09

03 Feb '09

commit 8ce15abf9d56ce2d535fb0b95d8672d2f3ba8aa8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 3 15:15:03 2009 +0100 Corrected typo. Noted by Chris Moules Files changed: man/man5/unlang.5 | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit a00afbdb8ac20729fa5826daeb992f0ede0c89da Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 3 14:39:41 2009 +0100 Fixed name Files changed: src/modules/rlm_smsotp/rlm_smsotp.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 7563be4618ae362ebf7ea039bc8f173b7f4f303a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 3 14:33:53 2009 +0100 Note issue as reported in bug #622 Files changed: src/main/listen.c | 6 +----- 1 files changed, 1 insertions(+), 5 deletions(-) ====================================================================== commit 55f2dea1d9fc8ff709fb3f5f93835fb9fbff42c3 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 3 14:33:29 2009 +0100 Free insthandle if there's no detach function Files changed: src/main/modules.c | 2 -- 1 files changed, 0 insertions(+), 2 deletions(-) ====================================================================== commit 7293ef685d6d3495f6eac973b72a0efe13522627 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 3 14:22:03 2009 +0100 Cleaned up source code && updated "configure" Files changed: raddb/modules/smsotp | 50 - src/modules/rlm_smsotp/Makefile.clean | 11 + src/modules/rlm_smsotp/Makefile.in | 26 + src/modules/rlm_smsotp/config.h.in | 9 +- src/modules/rlm_smsotp/configure | 4069 ++++++++++++++++----------------- src/modules/rlm_smsotp/configure.in | 19 +- src/modules/rlm_smsotp/rlm_smsotp.c | 960 ++++---- src/modules/rlm_smsotp/rlm_smsotp.h | 68 +- 8 files changed, 2508 insertions(+), 2704 deletions(-) ====================================================================== commit 8861e30f07aa2360c4a4ddbd6654969b89ea8753 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 3 11:26:34 2009 +0100 New module as supplied by Siemens Files changed: src/modules/rlm_smsotp/Makefile.clean | 11 - src/modules/rlm_smsotp/Makefile.in | 37 - src/modules/rlm_smsotp/config.h.in | 52 - src/modules/rlm_smsotp/configure | 4312 --------------------------------- src/modules/rlm_smsotp/configure.in | 51 - src/modules/rlm_smsotp/rlm_smsotp.c | 480 ---- src/modules/rlm_smsotp/rlm_smsotp.h | 34 - 7 files changed, 0 insertions(+), 4977 deletions(-) ====================================================================== commit 690bfc454caf94b165b17084c6a11c546261613e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Feb 3 10:54:32 2009 +0100 Revert "Change default hash function to SHA1. MD5 is broken." This reverts commit 340f01028f6f2dc8fa18336c9448f2787fc8de0f. However, many versions of OpenSSL don't include SHA support, so doing this would break the default install. <sigh> Files changed: raddb/certs/ca.cnf | 2 +- raddb/certs/client.cnf | 2 +- raddb/certs/server.cnf | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) ======================================================================

1 0

unlang parsing
by Chris Moules 03 Feb '09

03 Feb '09

I have just come across an oddity in the unlang parsing. I though that I had some form of logic error, but it turned out to be white space. I had some unlang code, like the following: --- if (condition) { update control { Attrib1 := "value1" } } else { update control { Attrib2 := "value2" } } --- Starting FreeRADIUS in debug gave me the error: --- /etc/freeradius/sites-enabled/radius3[91]: Too many closing braces Errors reading /etc/freeradius/radiusd.conf --- Restructuring the code the to following, however, works fine. --- if (condition) { update control { Attrib1 := "value1" } } else { update control { Attrib2 := "value2" } } --- The difference is just the newline after the closing 'if' brace. I had a look for this being mentioned in the man page but did not see anything, except my previous micro-patch. If this known and/or documented? Chris

2 1