May 2010 - Freeradius-Devel - lists.freeradius.org

retry mechanism for radius client 1.1.6
by Lewis Adam-VNQM87 20 May '10

20 May '10

Looking at the retry handling in rc_send_server() in sendserver.c, it appears that "retries" actually means "tries". Lines 325 to 330: /* * Timed out waiting for response. Retry "retry_max" times * before giving up. If retry_max = 0, don't retry at all. */ if (++retries >= retry_max) { ... return TIMEOUT_RC; } After the first time out, retries is pre-incremented to 1 thus being greater than or equal to 0 or 1 (so setting retry_max to 0 or 1 has the same effect). I think the fix is simply to change the line to: if (retries++ >= retry_max)

3 2

GIT Log for 2010-05-19 23:33 GMT
by aland＠deployingradius.com 19 May '10

19 May '10

commit 163f5c108a257ea96c6d380dc8ded0ac0799736e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 19 16:27:04 2010 +0200 Note module return codes Files changed: man/man5/unlang.5 | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) ====================================================================== commit e6fc617b79b3e94547e231cb6a1c8c8c5564bca7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 19 15:14:53 2010 +0200 Source files shouldn't have the executable bit set. Files changed: 0 files changed, 0 insertions(+), 0 deletions(-) ====================================================================== commit 2b03ea3ce077e97b7b4315e84f7e09013b83e3e2 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 19 15:08:16 2010 +0200 As supplied by RedHat. These files are direct copies of the upstream RedHat files, and should work better on most RedHat systems Files changed: redhat/freeradius-logrotate | 56 ++++++++++++++++++++ redhat/freeradius-pam-conf | 6 ++ redhat/freeradius-radiusd-init | 113 ++++++++++++++++++++++++++++++++++++++++ 3 files changed, 175 insertions(+), 0 deletions(-) ====================================================================== commit aca9de4da8b8e78840ae45f2a44cab200cafd35f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 19 14:55:26 2010 +0200 Print out section name for empty sections Files changed: src/main/modules.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ======================================================================

1 0

GIT Log for 2010-05-18 23:33 GMT
by aland＠deployingradius.com 18 May '10

18 May '10

commit 5dd3673eca2f158a37faf053dd157d2b5bc4ff6d Author: Peter Nixon <listuser(a)peternixon.net> Date: Tue May 18 21:00:57 2010 +0300 Remove some warnings Files changed: doc/DIFFS.rst | 10 ++++------ 1 files changed, 4 insertions(+), 6 deletions(-) ====================================================================== commit c3908851721222099e543dd56d2d1c4a08b6cd4a Author: Peter Nixon <listuser(a)peternixon.net> Date: Tue May 18 19:55:28 2010 +0300 Convert some more docs to RST Files changed: doc/DIFFS | 203 ----------------------------------------------- doc/DIFFS.rst | 206 ++++++++++++++++++++++++++++++++++++++++++++++++ doc/aaa.rst | 15 ++-- doc/coding-methods.rst | 162 +++++++++++++++++++++++++++++++++++++ doc/coding-methods.txt | 162 ------------------------------------- doc/index.rst | 6 +- doc/ldap_howto.rst | 96 +++++++++++------------ doc/load-balance.rst | 172 ++++++++++++++++++++++++++++++++++++++++ doc/load-balance.txt | 175 ---------------------------------------- doc/release-method.rst | 7 +- 10 files changed, 600 insertions(+), 604 deletions(-) ====================================================================== commit d810a9eb1faa8c4a8792c8f6cdb97d743d19cf52 Author: Peter Nixon <listuser(a)peternixon.net> Date: Tue May 18 15:17:29 2010 +0300 Checkin some initial work on RSTifying our documentation using sphinx The Makefile needs fixing.. Files changed: doc/Makefile | 121 +++- doc/Makefile.backup | 38 + doc/aaa.rst | 100 +++ doc/aaa.txt | 102 --- doc/conf.py | 280 +++++++ doc/index.rst | 19 + doc/ldap_howto.rst | 1904 ++++++++++++++++++++++++++++++++++++++++++++++++ doc/ldap_howto.txt | 1875 ----------------------------------------------- doc/release-method.rst | 42 ++ doc/release-method.txt | 41 - 10 files changed, 2472 insertions(+), 2050 deletions(-) ======================================================================

1 0

Re: ??: Freeradius-Devel Digest, Vol 61, Issue 12
by Alan DeKok 18 May '10

18 May '10

jacky.wang(a)digimoc.com wrote: > 1 if I use eap-aka, is the dictionary needed to be modified? No. > 2 is there any patch for the aka based on the radius freeserver, instead of > the libeap.so. There's a patch for 1.1.4 floating around. I have no idea where a current copy is located, though. Alan DeKok.

1 0

答复: Freeradius-Devel Digest, Vol 61, Issue 12
by jacky.wang＠digimoc.com 18 May '10

18 May '10

Hi Alan DeKok. And all, I have two questions, 1 if I use eap-aka, is the dictionary needed to be modified? 2 is there any patch for the aka based on the radius freeserver, instead of the libeap.so. Jacky 2010-5-18 ------------------------------ Message: 5 Date: Tue, 18 May 2010 09:30:02 +0800 From: <jacky.wang(a)digimoc.com> Subject: freeradiuis and eap-aka To: <freeradius-devel(a)lists.freeradius.org> Message-ID: <000001caf629$a34ceca0$e9e6c5e0$@wang@digimoc.com> Content-Type: text/plain; charset="us-ascii" hi all, my freeradius can not work for eap-aka. Freeradius: 2.1.8 Libeap.so : from hostapd0.6.10 Always report error as the following, WARNING: Unknown value specified for Auth-Type. Cannot perform requested action. Failed to authenticate the user. I just want to pass a simple epa-aka test, anyone can give me the configuration ? Thank you. Jacky 2010-5-18

1 0

Re: freeradiuis and eap-aka
by Alan DeKok 18 May '10

18 May '10

jacky.wang(a)digimoc.com wrote: > my freeradius can not work for eap-aka. It doesn't support EAP-AKA> > Freeradius: 2.1.8 > > Libeap.so : from hostapd0.6.10 FreeRADIUS comes with it's own EAP implementation. > I just want to pass a simple epa-aka test, anyone can give me the > configuration ? If you want to use libeap from Hostap, read raddb/experimental.conf. Alan DeKok.

1 0

freeradiuis and eap-aka
by jacky.wang＠digimoc.com 17 May '10

17 May '10

hi all, my freeradius can not work for eap-aka. Freeradius: 2.1.8 Libeap.so : from hostapd0.6.10 Always report error as the following, WARNING: Unknown value specified for Auth-Type. Cannot perform requested action. Failed to authenticate the user. I just want to pass a simple epa-aka test, anyone can give me the configuration ? Thank you. Jacky 2010-5-18

1 0

FW: EAP_TLS
by Harshil Anil Kumar Shah 17 May '10

17 May '10

Dear Friends, I wanted to modify EAP-TLS protocol available in Freeradius. I found two files in src/modules/rlm_eap/libeap directory: eap_tls.c and tls.c. Can you please guide me to understand the code and which file does which functionality? Harshil A. Shah, Systems Engineer(SE), Convergence Labs, SETLabs, Bangalore, Contact#: 09742887966.

2 5

radiusclient documentation?
by Scott Neugroschl 14 May '10

14 May '10

Are there man pages for the FreeRADIUS client library (1.1.6) available? In the tarball, the man directory is empty, and the doc directory doesn't contain anything of use either. Yes, I know, the source is authoritative, but I was hoping that there might be external documentation. Thanks Scott

2 1

FR System Memory usage question
by ziyen 13 May '10

13 May '10

Hi. Strange situation happen at all FR2.1.6,2.1.7,2.1.8, and 2.2.0(git) version the situation is radiusd are use all system available memory radiusd is using about 10 request processing 1Mb system memory "add only not returned memory space" so, at last radiusd is using all system memory..and memory fault and die radiusd. if stop radiusd then using system memory is roll back if restart radiusd then memory roll back and ... very strange, FR2.2.0(git) immediate restart radiusd but roll back is not. whats wrong?(FR 1.X version is not happen situation) My OS is CentOS 5.2, backend mysql Thanks.

2 1