August 2009 - Freeradius-Devel - lists.freeradius.org

Addition of 3gpp vendor specific attributes
by Tejesh Vijayakumar 19 Aug '09

19 Aug '09

Hi, What are the changes to be incorporated in freeradius server to add 3gpp attributes. Where does freeradius process and send Auth Accept for 3gpp sub attributes.[Pls mention the function name if possible] Regards, Tejesh Vijayakumar Software Engineer, Product Engineering Services[PES] Group, This Document is classified as: L&T Infotech Proprietary L&T Infotech Confidential L&T Infotech Internal Use Only L&T Infotech General Business This Email may contain confidential or privileged information for the intended recipient (s) If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system. ______________________________________________________________________

2 1

To send accept for all auth request
by Toledo, Luis Carlos 19 Aug '09

19 Aug '09

Hi, I would like for lab propose to send accept for all auth requests. Is it possible? Are there some config example? Thx

2 1

CISCO_ACCOUNTING_HACK
by Gabriel Blanchard 19 Aug '09

19 Aug '09

in rlm_sql.c this portion of code is causing problems combined with the "buffered_sql/detail" server. I don't actually use Ciscos but Juniper ERXes and this still happens. nevertheless by returning RLM_MODULE_NOOP it causes the buffered sql home server to try to send the packet for ever resulting in the detail file never being processed. I'm not sure what would be appropriate fix here, the only way to disable this section is to go in src/modules/rlm_sql/conf.h and remove the define manually. Maybe a configure script option would be nice. Or maybe returning RLM_MODULE_OK, but in a sense it wouldn't be true since the module did in fact do nothing. #ifdef CISCO_ACCOUNTING_HACK /* * If stop but zero session length AND no previous * session found, drop it as in invalid packet * This is to fix CISCO's aaa from filling our * table with bogus crap */ if ((pair = pairfind(request->packet->vps, PW_ACCT_SESSION_TIME)) != NULL) acctsessiontime = pair->vp_integer; if (acctsessiontime <= 0) { radius_xlat(logstr, sizeof(logstr), "stop packet with zero session length. [user '%{User-Name}', nas '%{NAS-IP-Address}']", request, NULL); radlog_request(L_ERR, 0, request, "%s", logstr); sql_release_socket(inst, sqlsocket); ret = RLM_MODULE_NOOP; } #endif

3 9

GIT Log for 2009-08-18 23:33 GMT
by aland＠deployingradius.com 18 Aug '09

18 Aug '09

commit 05afc2988611effcd09e58ee00ffe9364ce17ec9 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 18 17:23:49 2009 +0200 Fix more typos Files changed: src/lib/packet.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ====================================================================== commit 8478f80966c3a40de116defa21ceb2ac94a9f19c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 18 12:07:40 2009 +0200 Fixed typo Files changed: src/lib/packet.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ====================================================================== commit 967df828d27bfee045393d93120188b6f1b374bf Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 18 10:31:43 2009 +0200 Turn off the DF bit. Files changed: src/lib/packet.c | 24 ++++++++++++++++++++++++ 1 files changed, 24 insertions(+), 0 deletions(-) ====================================================================== commit 3036bb7a3a8fca5ce5b9a67d41e2c31e4d0151a6 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 18 09:47:19 2009 +0200 Fix args to printfy Files changed: src/main/mainconfig.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ======================================================================

1 0

ChangeLog for 2.1.6 question: Make rlm_perl keep tags for tagged attributes in more situations
by Alexandr Kovalenko 18 Aug '09

18 Aug '09

Hello, I've read ChangeLog for FreeRADIUS 2.1.6 and found there: # Make rlm_perl keep tags for tagged attributes in more situations Could anyone please point me to exact commits/diffs so I can see if this will fix my issue with tagged attributes, which I experienced - tagged attributes ERX-Service-Activate, ERX-Service-Statistics and similar were sent back to NAS without tags. I had to switch to rlm_python because of this, which is workaround for me, as long as everything here works using perl, and only this module uses python. Thanks in advance. -- Alexandr Kovalenko http://uafug.org.ua/

2 3

GIT Log for 2009-08-17 23:33 GMT
by aland＠deployingradius.com 17 Aug '09

17 Aug '09

commit 9ce175f1d8fea11bf66cd84b5b2c99f832097786 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Aug 17 14:25:57 2009 +0200 Add notes on SHA1 versus MD5 Files changed: raddb/certs/README | 14 ++++++++++++++ 1 files changed, 14 insertions(+), 0 deletions(-) ====================================================================== commit d56fa223b90a4370d5b6200d97d6373cdb97b36e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Aug 17 12:14:01 2009 +0200 Allow "no response" to DHCPy Files changed: src/modules/frs_dhcp/frs_dhcp.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) ====================================================================== commit 08baab6769fea367bda5dd006b659621bb9aac18 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Aug 17 08:53:47 2009 +0200 Catch non-fatal race conditions Files changed: src/main/event.c | 11 +++++++++++ 1 files changed, 11 insertions(+), 0 deletions(-) ======================================================================

1 0

Seg fault
by Gabriel Blanchard 17 Aug '09

17 Aug '09

Something was committed recently that's causing it to seg fault. Aug 15 21:41:42 rad03 radiusd[62455]: Received conflicting packet from client ERXes port 50000 - ID: 98 due to unfinished request 390. Giving up on old request. Aug 15 21:41:42 rad03 radiusd[62455]: ASSERT FAILED event.c[2730]: request->ev != NULL Aug 15 21:41:42 rad03 kernel: pid 62455 (radiusd), uid 133: exited on signal 6 I'll have to dig up a bit deeper to find the cause, but this definitely doesn't happen with a stable snapshot from a few days ago.

2 3

GIT Log for 2009-08-15 23:33 GMT
by aland＠deployingradius.com 15 Aug '09

15 Aug '09

commit 43bc3e5369c3afc27f7a290cb58d660792729739 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Aug 15 07:45:05 2009 +0200 Fix typo in last commit src/lib/radius.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)

1 0

last commit
by Gabriel Blanchard 15 Aug '09

15 Aug '09

Alan, the last change you did yesterday appears to break shared secrets. commit c5967e80035e4fa2f66c22898a5cb7967e197c65 bsddev# radtest test(a)test.com test 127.0.0.1 1 blah Sending Access-Request of id 25 to 127.0.0.1 port 1812 ..... rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=25, length=56 rad_verify: Received Access-Accept packet from client 127.0.0.1 port 1812 with invalid signature (err=2)! (Shared secret is incorrect.) I then recompiled with the commit just before that 72547c293eb3981747e4dc8baf3849528fb6adcd and...no problem. bsddev# radtest test(a)test.com test 127.0.0.1 1 blah Sending Access-Request of id 228 to 127.0.0.1 port 1812 .... rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=228, length=56 I understand you may not be done yet with the patch...but anyway, that'll teach me for using the latest commit. -Gabe

2 3

GIT Log for 2009-08-14 23:33 GMT
by aland＠deployingradius.com 14 Aug '09

14 Aug '09

commit f29e167bb490404815001756427229d6a7bdf220 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Aug 14 14:53:24 2009 +0200 Chave the hash comparison algorithm to avoid timing attacks src/lib/radius.c | 26 +++++++++++++++++++++++--- 1 files changed, 23 insertions(+), 3 deletions(-)

1 0