November 2010 - Freeradius-Devel - lists.freeradius.org

Authentication by domain of company
by zouzou 08 Nov '10

08 Nov '10

Hi, I am new to FreeRADIUS. I have two users: test1 test2 I would like to grant test1 access by this syntax of username ; Username: test1@domaine1 ( exp: domaine1= DRH) I would like to grant test2 access by this syntax of username; Username: test2@domaine2 ( exp: domaine1=DG) And I would not like to grant test1 access by this syntax of username Username: test1@domaine2 ( exp: domaine2= DG) Same for user test2 I wonder if FreeRADIUS is capable of handling , if freeradius handle it , please could you tell me how??? Best Regard. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Authentication-by-domain-of-company… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

1 0

Module-Failure-Message creation in rlm_mschap
by Garber, Neal 08 Nov '10

08 Nov '10

The rlm_mschap change to create the Module-Failure-Message attribute creates it on the request chain. I notice that the original commit on 2010-09-10 (35ee205d4e2dcb4fe5e3<http://github.com/alandekok/freeradius-server/commit/35ee205d4e2dcb4fe5e341…>) had it in the reply. Then, a subsequent commit intentionally changed it to the request (401dcce982f9a9972bc7<http://github.com/alandekok/freeradius-server/commit/401dcce982f9a9972bc7bb…>). Would you be opposed to putting it back on the reply chain? I ask because of the pending change to save the reply attributes upon failure to survive the final eap round trip. If it's not in the reply chain, then it gets lost. If you're opposed to this, should the request chain be saved as well (or perhaps just save Module-Failure-Message if it exists)?

2 4

radiusd -d help
by Rashard Roberts 08 Nov '10

08 Nov '10

I have installed freeradius successfully under /etc. I was inform by supervise to install under /opt/freeradius instead. I was informed to use radiusd -d to tell the freeradius server where to look for the configuration files, but I am not familar with the handle -d. I am just doing authentication against an AD server. I know that I am going to need sbm.conf and krb5.conf files in order to run freeradius succesfully, but they are in the /etc directory and freeradius is in the /opt directory. So how do I tell freeradius where to find these files if freeradius is install in a completely different directory using radiusd -d?

2 1

Patch for memory leak in valuepair.c
by James Ballantine 08 Nov '10

08 Nov '10

Hi, We have been experiencing a memory leak in radiusd which the attached patch to valuepair.c appears to fix: When a VALUE_PAIR with the 'Fall-Through' attribute is skipped over in pairxlatmove(), 'tailfrom' is not updated. This means that the pair is orphaned if the subsequent pair is moved. (This is similar to the memory leak in valuepair.c fixed in 2.1.10, but in a different part of the loop. This patch is against the 2.1.x branch from git.) Thanks, James

2 1

[PATCH] check rlm_detail writes
by John Morrissey 03 Nov '10

03 Nov '10

I've modified rlm_detail to check its writes and return RLM_MODULE_FAIL on short writes. I believe this should cause FreeRADIUS to avoid sending an Accounting-Response to the NAS, so the NAS will retry on disk-full/error situations. A while ago, I noticed rlm_detail writes were unchecked[1], causing FreeRADIUS to exit on an assertion in the detail reader due to the partial detail entries. Alan kindly fixed the detail reader's behavior in this situation[2], and I also wanted to have the detail writer check its writes. Truncating the detail file on error to remove the partial detail entry isn't strictly necessary, but it seems like good form and is straightforward. I haven't yet gotten rid of the vp_print() calls (its write is unchecked, too) and this patch is untested (though it compiles), but I wanted to get feedback and see if it's worthwhile for me to finish and test it. john [1] https://lists.freeradius.org/pipermail/freeradius-devel/2010-May/013826.html [2] http://github.com/alandekok/freeradius-server/commit/73fe4311083eb684b3d7f8… -- John Morrissey _o /\ ---- __o jwm(a)horde.net _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__

2 2

Building freeradius from source
by Nirmal Guhan 01 Nov '10

01 Nov '10

Hi, Am trying to compile freeradius (freeradius-server-2.1.10) for my own distro (based on 2.6.32 kernel from kernel.org) and running into compilation errors. : libtool: link: `rlm_eap_md5.lo' is not a valid libtool object gmake[9]: *** [rlm_eap_md5.la] Error 1 Please let me know a way to fix this. Also, radiusd seems to be pulling in many shared libraries. Do I need to compile them from source myself or are there any short cuts (if someone has tried this before) ? I know compiling it for Fedora or a similar distro is easier but unfortunately that won't help me. Note that I just need simple password (cleartext) based authentication leaving out the crypto stuff. Thanks, Nirmal

1 0