June 2010 - Freeradius-Devel - lists.freeradius.org

Challenge/response in client 1.1.6
by Scott Neugroschl 17 Jun '10

17 Jun '10

Hi guys, It looks like the FreeRADIUS client library 1.1.6 doesn't handle challenge/response (code == PW_ACCESS_CHALLENGE). At the end of rc_send_server(), around line 390, only PW_ACCESS_ACCEPT, PW_PASSWORD_ACK, PW_ACCOUNTING_RESPONSE,PW_ACCESS_REJECT, and PW_PASSWORD_REJECT are valid responses. I'm working on a project that may require this functionality, so I'll look into adding it. I'll post what I can when I've got it. Unless I'm horribly wrong and there is already Access-Challenge support, in which case, please feel free to tell me how stupid I am and show me how to use it. Side note: Are PW_PASSWORD_{REQUEST,ACK,REJECT} experimental or extensions? I couldn't find them in RFC 2865. Thanks, ScottN

2 5

Client 1.1.7 release schedule
by Scott Neugroschl 16 Jun '10

16 Jun '10

Hi Alan and devs Is there a roadmap/projected date for the Client 1.1.7 release? Just curious. Thanks, Scott Neugroschl (ScottN)

2 2

bugs.freeradius.org - expired cert
by Scott Neugroschl 15 Jun '10

15 Jun '10

Hi guys, The cert for bugs.freeradius.org expired this morning. >From my Firefox session: bugs.freeradius.org uses an invalid security certificate. The certificate expired on 6/15/2010 4:47 AM. (Error code: sec_error_expired_certificate) Just a heads up.

2 1

[PATCH] rlm_caching module configure.in
by Nathaniel McCallum 15 Jun '10

15 Jun '10

It appears that although the rlm_caching module was merged, its configure.in was never merged. I've attached a patch which creates a basic configure.in for the module. --- /dev/null +++ b/src/modules/rlm_caching/configure.in @@ -0,0 +1,18 @@ +AC_PREREQ([2.53]) +AC_INIT(rlm_caching.c) +AC_REVISION($Revision$) +AC_DEFUN(modname,[rlm_caching]) + +if test x$with_[]modname != xno && test ; then + AC_CHECK_HEADERS(gdbm.h) + targetname=modname + caching_ldflags=-lgdbm +else + targetname= + echo \*\*\* module modname is disabled. +fi + +AC_SUBST(caching_ldflags) +AC_SUBST(caching_cflags) +AC_SUBST(targetname) +AC_OUTPUT(Makefile) --- a/src/modules/rlm_caching/rlm_caching.c +++ b/src/modules/rlm_caching/rlm_caching.c @@ -30,8 +30,6 @@ RCSID("$Id$") #include <ctype.h> -#include "config.h" - #include <gdbm.h> #include <time.h>

1 2

Patches
by Scott Neugroschl 15 Jun '10

15 Jun '10

Hi Alan (and the rest of the list), Should freeradius-client patches submitted to this list be against the 1.1.6 baseline, or against the current snapshot? If the latter, may I ask where I can obtain the current snapshot? Thanks, Scott Neugroschl (ScottN)

3 3

Proposed patch for "embedded" freeradius-client library
by Scott Neugroschl 14 Jun '10

14 Jun '10

I'm working in a rather oddball environment, and have come up with a patch to allow freeradius-client 1.1.6 usage in an "embedded" environment -- without any config files at all. I started from the example radembedded.c and noted that it still needed a dictionary file. I have a patch to dict.c and freeradius-client.h to allow the dictionary data to be loaded from an in-memory table, instead of a disk file. If anyone is interested, I'll post the patch. Scott Neugroschl

2 3

[URGENT question] AAA implementation ㅜㅜ
by 권란 07 Jun '10

07 Jun '10

I'm implementing a WiFi AAA server with PEAP(mschapv2) method over radius stack. and I test AAA server through PC with windows xp, vista, and also through iphone and smart phone(nokia - symbian). It succeed with iphone and smart phone , they can access internet after authenticated by my AAA server. But the problem is windows client. AAA server authenticated client successfully and answered with encrypted auth_string (rfc2759 : Microsoft PPP CHAP Extensions, Version 2). but the client (windows pc) does not answer. 1. I confirmed the success string (S=40byte string) is correct. 2. encryption key is also used at the previous step(challenge, response) and successfully passed. 3. then what could be the problem? I have only one more day for this implementation, but I can't find the problem. Pelease somebody help me. I'm waiting for answer all day and all night. thank you.

1 0