November 2011 - Freeradius-Devel - lists.freeradius.org

git version make error are only happen when --with-dhcp option
by ziyen 19 Nov '11

19 Nov '11

git version make error are only happen when additional options are ./configure --with-dhcp only but ./configure are not happen. Thanks listen.c: In function 'client_listener_find': listen.c:237: warning: assignment discards qualifiers from pointer target type In file included from listen.c:1365: dhcpd.c:158:2: error: #error "DHCP as a Relay requires WITH_UDPFROMTO compilation flag" In file included from listen.c:1365: dhcpd.c: In function 'dhcp_socket_parse': dhcpd.c:497: warning: assignment discards qualifiers from pointer target type In file included from listen.c:1367: command.c: In function 'command_socket_parse': command.c:1947: warning: comparison between signed and unsigned integer expressions command.c:1947: warning: comparison between signed and unsigned integer expressions gmake[4]: *** [listen.lo] Error 1 gmake[4]: Leaving directory `/home/admin/FR/SVN/20111118/freeradius-server/src/main'

1 0

git version make error...
by ziyen 19 Nov '11

19 Nov '11

Hi when using git version have some error like below... listen.c: In function 'client_listener_find': listen.c:237: warning: assignment discards qualifiers from pointer target type In file included from listen.c:1365: dhcpd.c:158:2: error: #error "DHCP as a Relay requires WITH_UDPFROMTO compilation flag" In file included from listen.c:1365: dhcpd.c: In function 'dhcp_socket_parse': dhcpd.c:497: warning: assignment discards qualifiers from pointer target type In file included from listen.c:1367: command.c: In function 'command_socket_parse': command.c:1947: warning: comparison between signed and unsigned integer expressions command.c:1947: warning: comparison between signed and unsigned integer expressions gmake[4]: *** [listen.lo] Error 1 Thanks

2 1

How to install freeradius2.1.12 ? Warnings are generated at ./configure time
by artaxerxe 18 Nov '11

18 Nov '11

Hello! Here is my issue: Anytime when I try to install freeradius, I get the following warnings (this are only the warnings without the rest of output): configure: WARNING: snmpget not found - Simultaneous-Use and checkrad.pl may not work configure: WARNING: snmpwalk not found - Simultaneous-Use and checkrad.pl may not work configure: WARNING: pcap library not found, silently disabling the RADIUS sniffer. configure: WARNING: silently not building rlm_counter. configure: WARNING: FAILURE: rlm_counter requires: libgdbm. configure: WARNING: FAILURE: rlm_dbm requires: (ndbm.h or gdbm/ndbm.h or gdbm-ndbm.h) (libndbm or libgdbm or libgdbm_compat). configure: WARNING: silently not building rlm_dbm. configure: WARNING: silently not building rlm_eap_peap. configure: WARNING: FAILURE: rlm_eap_peap requires: OpenSSL. configure: WARNING: silently not building rlm_eap_ttls. configure: WARNING: FAILURE: rlm_eap_ttls requires: OpenSSL. configure: WARNING: silently not building rlm_eap_tls. configure: WARNING: FAILURE: rlm_eap_tls requires: OpenSSL. configure: WARNING: silently not building rlm_eap_ikev2. configure: WARNING: FAILURE: rlm_eap_ikev2 requires: libeap-ikev2 EAPIKEv2/connector.h. configure: WARNING: the TNCS library isn't found! configure: WARNING: silently not building rlm_eap_tnc. configure: WARNING: FAILURE: rlm_eap_tnc requires: -lTNCS. configure: WARNING: silently not building rlm_ippool. configure: WARNING: FAILURE: rlm_ippool requires: libgdbm. configure: WARNING: neither krb5 'k5crypto' nor 'crypto' libraries are found! configure: WARNING: the comm_err library isn't found! configure: WARNING: silently not building rlm_krb5. configure: WARNING: FAILURE: rlm_krb5 requires: krb5.h krb5. configure: WARNING: silently not building rlm_ldap. configure: WARNING: FAILURE: rlm_ldap requires: libldap_r ldap.h. configure: WARNING: silently not building rlm_otp. configure: WARNING: FAILURE: rlm_otp requires: openssl-libs openssl-includes openssl-includes openssl-includes openssl-includes openssl-includes. configure: WARNING: silently not building rlm_pam. configure: WARNING: FAILURE: rlm_pam requires: libpam. configure: WARNING: silently not building rlm_perl. configure: WARNING: FAILURE: rlm_perl requires: libperl.so libperl.so. configure: WARNING: silently not building rlm_python. configure: WARNING: FAILURE: rlm_python requires: Python.h libpython2.7. configure: WARNING: silently not building rlm_sql_iodbc. configure: WARNING: FAILURE: rlm_sql_iodbc requires: libiodbc isql.h. configure: WARNING: MySQL libraries not found. Use --with-mysql-lib-dir=<path>. configure: WARNING: MySQL headers not found. Use --with-mysql-include-dir=<path>. configure: WARNING: silently not building rlm_sql_mysql. configure: WARNING: FAILURE: rlm_sql_mysql requires: libmysqlclient_r mysql.h. configure: WARNING: silently not building rlm_sql_postgresql. configure: WARNING: FAILURE: rlm_sql_postgresql requires: libpq-fe.h libpq. configure: WARNING: oracle headers not found. Use --with-oracle-include-dir=<path>. configure: WARNING: silently not building rlm_sql_oracle. configure: WARNING: FAILURE: rlm_sql_oracle requires: oci.h. configure: WARNING: silently not building rlm_sql_unixodbc. configure: WARNING: FAILURE: rlm_sql_unixodbc requires: libodbc sql.h. If I install it (make and make install) I get an error when I try to run radius.d Can anybody give me some help on this? Thanks in advance! -- View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-install-freeradius2-1-12-War… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

3 7

Patch to fix shadows password expiration
by Tomi Leppikangas 14 Nov '11

14 Nov '11

Hi, I discovered that freeradius doesn't handle shadow password expiration correctly. It only looks for account expiration date, not password expiration. Also log entry for account expiration says incorrectly "password expired". I reported bug to RedHat bugzilla, but bug seems to be in master tree also. Bugzilla link: https://bugzilla.redhat.com/show_bug.cgi?id=753764 -- Tomi Leppikangas

1 0

Standardised JSON VP list format
by Arran Cudbard-Bell 11 Nov '11

11 Nov '11

Hi All, I'm proposing the following JSON structures for VP lists being sent from and parsed by FreeRADIUS. If anyone has any suggestions regarding other fields they'd like to see included, let me know. Outbound (request): { "<attribute>":{ type:"<type>" , # RADIUS or internal attribute type value:[<values>] # Always an array, may contain string, integer, float, JSON object (nested VP) }, "User-Name":{ type:"string", value:["user(a)example.org"] } } Inbound (response): { "[qualifiers:]<attribute>":{ op:"<operator>", # One of the standard update construct operators value:<value> # May be array (multivalued, or nested vps (JSON object)), value or JSON object (nested VP) }, # Alternative "[qualifiers:]<attribute>":<value> # Value may be anything but a JSON object, array values may still hold multiple JSON objects } All values will be XLATd. I'm thinking for the response, maybe two optional bools (for the expanded JSON object format): no_xlat - where no_xlat:true disables xlat expansion is_json - where is_json:true disables JSON parsing of the value (you can write JSON structure to an attribute for later parsing) Thoughts? If we can decide on a standard format, future modules will be required to implement it if they're just bridges to an external service (and the external service does not have predefined JSON structures). Note: The outbound request will only use attributes from the request list. If you think attributes should be included from multiple lists, please explain why. -Arran Arran Cudbard-Bell a.cudbardb(a)networkradius.com Technical consultant and solutions architect 15 Ave. du Granier, Meylan, France +33 4 69 66 54 50

6 24

Crash of "master"
by Phil Mayers 04 Nov '11

04 Nov '11

All, The copy of "master" we have running on our development radius server died last night, logging: Thu Nov 3 11:48:50 2011 : Error: Discarding duplicate request from client 51net port 42138 - ID: 210 due to unfinished request 2646 Thu Nov 3 11:49:23 2011 : Error: WARNING: Unresponsive child for request 2646, in component authorize module Thu Nov 3 11:49:23 2011 : Error: ASSERT FAILED process.c[436]: request->child_pid == NO_SUCH_CHILD_PID This particular process is a relatively simple one - all it does is mac-based vlans. The server is not getting any traffic except monitoring / test auths from our nagios system every 5 minutes. Sorry I don't have more info, but I thought I should mention it.

2 1

freeradius and google protocol buffers.
by Ruslan Shevchenko 03 Nov '11

03 Nov '11

Good day, community. 1. I need to organize interaction of freeradius with java-based backend, running as web service. So, I wrote small module, which packed received radius packet into google protocol buffer message and submit one to web service via persistent http connection: https://github.com/rssh/rlm_protobuf Interaction is done via next 'idl': https://github.com/rssh/rlm_protobuf/blob/master/src/vsa.proto freeradius give to service request_reply, then return with allow_reply_request set of actions, which we do need with pairs (add new one or remove or change) I want submit this module to freeradius, when It will be mature, but not sure: will one be generally useful and are you will be happy with 2 new optional dependencies (curl and protobuf-c) [?]. If yes -- I will start submit path requests after achieving working state. (now I assured that requests flow works, but yet not test all possible issues with authorization and service restart) 2. Yet one question for community -- it's about how people prefer to see representation of radius attributes in protocol buffers IDL. In present 'zero' version all nontrivial attributes are stored as array of bytes. In my task this is enough, but potentially such choice can cause issues with byte ordering, so may be better to create special message types for each type of attribute. So, I will be happy to see community opinion: (especially for #define PW_TYPE_ETHERNET and PW_TYPE_IFID) At last, I will be glad to see any feedback about this idea and thanks for great software. Regards !

2 2