July 2009 - Freeradius-Devel - lists.freeradius.org

rlm_sqlite and sqlite3_step(), sqlite schema
by Ben West 15 Jul '09

15 Jul '09

Apologies for posting on the freeradius-user list about this. I serendipitously happened across this list's sqlite-related thread, and the related bugzilla entry, on very same day I was playing around with sqlite on v2.1.6 myself. https://bugs.freeradius.org/bugzilla/show_bug.cgi?id=3 An issue not addressed in the patch proposed in that bug entry is that the sql_sqlite.c apparently only invokes sqlite3_step() in its function sql_fetch_row(), which AFAIK is only called for SELECT queries. This has the effect of UPDATE, DELETE, INSERT queries being compiled but never executed. Below is the kludge I did to to sql_query() to get around this, but it does not account for lower case or leading spaces in querystr. Since this happened in unwitting parallel, my version of sql_query() is out of step with the patch in bugzilla. static int sql_query(SQLSOCK * sqlsocket, SQL_CONFIG *config, char *querystr) { int status; rlm_sql_sqlite_sock *sqlite_sock = sqlsocket->conn; const char *zTail; if (config->sqltrace) radlog(L_DBG,"rlm_sql_sqlite: query: %s", querystr); if (sqlite_sock->pDb == NULL) { radlog(L_ERR, "rlm_sql_sqlite: Socket not connected"); return SQL_DOWN; } status = sqlite3_prepare(sqlite_sock->pDb, querystr, strlen(querystr), &sqlite_sock->pStmt, &zTail); radlog(L_DBG, "rlm_sql_sqlite: sqlite3_prepare() = %d\n", status); sqlite_sock->columnCount = 0; if (strstr(querystr, "SELECT") == querystr) { return (status == SQLITE_OK) ? 0 : SQL_DOWN; } /* If this is not SELECT statement, must go ahead and invoke sqlite3_step() */ else if (strstr(querystr, "INSERT") == querystr || strstr(querystr, "UPDATE") == querystr || strstr(querystr, "DELETE") == querystr ) { status = sqlite3_step(sqlite_sock->pStmt); radlog(L_DBG, "rlm_sql_sqlite: sqlite3_step = %d\n", status); return (status == SQLITE_DONE) ? 0 : SQL_DOWN; } } I also have versions of the schema and conf files for sqlite (i.e. raddb/sql/sqlite/*) but I wanted to ping the list first to make sure that is not already underway with someone else. -- Ben West westbywest(a)gmail.com

3 2

GIT Log for 2009-07-13 23:33 GMT
by aland＠deployingradius.com 13 Jul '09

13 Jul '09

commit eb0a6f2d9056916837bb76df9c6ab421d43d60c8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Jul 13 16:23:06 2009 +0200 Allow response_window && zombie_period to be smaller. Accept values outside of the recommended range. Also when proxying, skip home servers that are marked zombie. They're not responding, so for *new* requests, we treat them like they're dead src/main/realms.c | 13 ++++++++----- 1 files changed, 8 insertions(+), 5 deletions(-)

1 0

EAP-TLS rfc 5216 support
by Fernando Pereñíguez 10 Jul '09

10 Jul '09

Dear all, I'm interested in testing last version of EAP-TLS defined in RFC 5216, that optionally supports a privacy mode where the client certificate is pushed through the SSL tunnel. Does current FreeRadius version support this version? If it does not, when it's expected to support it? Regards, Fernando.

2 1

GIT Log for 2009-07-09 23:33 GMT
by aland＠deployingradius.com 09 Jul '09

09 Jul '09

commit bae3836b726c3abf6d246bca9c36cb3671bd1466 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Jul 9 15:00:06 2009 +0200 Fix for newer versions of MySQL Files changed: raddb/sql/mysql/wimax.sql | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 9cea08f3927b660102772d4d2dc910e94dd0ea89 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Jul 9 10:46:14 2009 +0200 Use postgresl style comments Based on patch from Wickert Akkerman Files changed: raddb/sql/postgresql/admin.sql | 54 +++++++++++++++++++++------------------ 1 files changed, 29 insertions(+), 25 deletions(-) ======================================================================

1 0

postgres admin.sql fixes
by Wichert Akkerman 09 Jul '09

09 Jul '09

The postgresql/admin.sql that ships in current Debian stable unfortunately does not work: psql does not accept the comment syntax used, host/domain names in roles or database names in columns for GRANT statements. The attached patch below fixes this. There may still be problems with missing GRANTs for the sequences, I'll recheck those tomorrow. This might of course all be fixes in the current sourcetree, in which case I apologize for the noise. Wichert.

3 3

GIT Log for 2009-07-08 23:33 GMT
by aland＠deployingradius.com 08 Jul '09

08 Jul '09

commit 247e27804c732849ca3196fac91f7193b77cf192 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Jul 8 08:46:33 2009 +0200 Fix typos Files changed: src/modules/frs_dhcp/frs_dhcp.c | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) ====================================================================== commit 890026c830f9bcd5f892a47876042fd27ce4e476 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Jul 8 08:44:29 2009 +0200 Fix for newer versions of MySQL Files changed: raddb/sql/mysql/schema.sql | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ======================================================================

1 0

GIT Log for 2009-07-06 23:33 GMT
by aland＠deployingradius.com 06 Jul '09

06 Jul '09

commit 5dded9dc82325ab11403ad0a957ebccd988cf859 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Jul 6 10:18:23 2009 +0200 Added sample radrelay.conf raddb/radrelay.conf.in | 166 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 166 insertions(+), 0 deletions(-)

1 0

GIT Log for 2009-07-05 23:33 GMT
by aland＠deployingradius.com 05 Jul '09

05 Jul '09

commit b6f1ace4b43014a704d6e3d0795a485a1e837b6a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Jul 5 10:02:05 2009 +0200 Made thread pool section optional If it doesn't exist, the server will run single threaded src/include/radiusd.h | 2 +- src/main/event.c | 21 ++++++++----- src/main/threads.c | 74 +++++++++++++++++++++++------------------------- 3 files changed, 49 insertions(+), 48 deletions(-)

1 0

GIT Log for 2009-07-03 23:33 GMT
by aland＠deployingradius.com 03 Jul '09

03 Jul '09

commit e839423eac9b28e09e4e82a0aa5219b63707c893 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jul 3 22:08:18 2009 +0200 Preliminary implementation of DHCP relay For now, it can only relay packets if giaddr = 0. If giaddr != 0, we are required to cache the packet by XID/MAC, so that we can capture the response on the DHCP port, look up the XID/MAC, and respond to the client. We will also need to update the fr_dhcp_encode function, which can currently only respond to clients, and not originate packets. Files changed: share/dictionary.dhcp | 2 + src/modules/frs_dhcp/frs_dhcp.c | 65 ++++++++++++++++++++++++++++++++++++++- 2 files changed, 66 insertions(+), 1 deletions(-) ====================================================================== commit 62eb9d6635f81f4c4624d30e572a72f7306e292e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jul 3 18:16:15 2009 +0200 Use new name Files changed: src/lib/print.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 7749a477fc09d325c8546b7f4b07e26c98795f59 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jul 3 13:13:08 2009 +0200 Suppress more messages in debugging mode Files changed: src/modules/rlm_mschap/rlm_mschap.c | 55 +++++++++++++++------------------- 1 files changed, 24 insertions(+), 31 deletions(-) ====================================================================== commit bda6e7b3b54e16b608dacdcc796801ae6a14e789 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jul 3 09:34:21 2009 +0200 First draft of CUI policies Taken from http://github.com/twoln/freeradius-server/ with edits for consistency and clarity Files changed: raddb/modules/cui | 25 +++++++++++++++++ raddb/policy.conf | 68 ++++++++++++++++++++++++++++++++++++++++++++++ raddb/sql/mysql/cui.conf | 31 +++++++++++++++++++++ raddb/sql/mysql/cui.sql | 9 ++++++ 4 files changed, 133 insertions(+), 0 deletions(-) ====================================================================== commit 483048808a0efea9fea0a99befad3b534d745091 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jul 3 08:57:38 2009 +0200 Allow UTF-8 in SQL log Based on patch from http://github.com/stjaeger/freeradius-server/commit/769d35691ef3adbf4de8460… Files changed: raddb/modules/sql_log | 7 +++ src/include/libradius.h | 1 + src/lib/print.c | 2 +- src/modules/rlm_sql_log/rlm_sql_log.c | 71 ++++++++++++++++++++++++++++++++- 4 files changed, 79 insertions(+), 2 deletions(-) ======================================================================

1 0

GIT Log for 2009-07-02 23:33 GMT
by aland＠deployingradius.com 02 Jul '09

02 Jul '09

commit 67def389dedd9326504a682236af2b7821c3e1ae Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Jul 2 15:55:51 2009 +0200 Document chase_referrals and rebind Files changed: raddb/modules/ldap | 9 +++++++++ 1 files changed, 9 insertions(+), 0 deletions(-) ====================================================================== commit ecdef9c867aea29870737425be8682a8d6f63a1d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Jul 2 15:57:00 2009 +0200 Document msg_* Files changed: raddb/radiusd.conf.in | 12 ++++++++++++ 1 files changed, 12 insertions(+), 0 deletions(-) ====================================================================== commit 68d14df24dd4b07e6f807f0dc88e400d40da11ff Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Jul 2 15:51:24 2009 +0200 Extend the logging capabilities of auth good/badpass Files changed: src/include/radiusd.h | 2 ++ src/main/mainconfig.c | 2 ++ src/modules/frs_auth/frs_auth.c | 39 +++++++++++++++++++++++++-------------- 3 files changed, 29 insertions(+), 14 deletions(-) ======================================================================

1 0