April 2011 - Freeradius-Devel - lists.freeradius.org

compiling freeradius source code
by ash 21 Apr '11

21 Apr '11

I'm a beginner in freeradius and i'm not familiar with the code.i'm setting up 802.1x authentication using freeradius and it works fine.but before authenticating the user based on username and password and assigning to a vlan i have to check one more condition (whether a file is present in client or not.for this i'm sending a bit along with username.if file is present, the bit is set to 1).so to separate the bit from username at the freeradius for authentication i edited the auth.c file.now how should i compile the modified code and install it? is it enough to simple change the code...and give ./build and install thanks for ur time and consideration... -- View this message in context: http://freeradius.1045715.n5.nabble.com/compiling-freeradius-source-code-tp… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

3 3

proxy.conf: no_response_fail
by Josip Almasi 20 Apr '11

20 Apr '11

Hi, there is a scenario that might require "no_response_fail = yes". First, network breaks; power outage, spanking trees, something other but massive. Then clients start comming online, put some heavy load on backend server. Retry, retry, and - clients DoS backend. In that case I might want to send Access-Reject, to get some breathing space. I had one case much like this with a buggy BRAS a few years ago. And I was involved in another, where Access-Reject made things much worse, due to buggy IADs - once rejected, they reset to factory defaults:> So, although I can't really say I need this feature, I know of cases that make it usefull. Regards...

3 3

GIT Log for 2011-04-13 23:33 GMT
by aland＠deployingradius.com 13 Apr '11

13 Apr '11

commit c92c7685c8107e9f1a0e57b87046c3ace441ab9e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Apr 13 09:57:18 2011 +0200 New state machine for 3.0 It's about the same amount of code as the previous one, but is much simpler. Files changed: src/include/detail.h | 3 +- src/include/process.h | 64 + src/include/radiusd.h | 21 +- src/include/realms.h | 1 + src/include/vmps.h | 3 +- src/main/command.c | 52 +- src/main/detail.c | 10 +- src/main/dhcpd.c | 7 +- src/main/listen.c | 129 +- src/main/process.c | 4847 +++++++++++++++++++++++-------------------------- src/main/threads.c | 161 +-- src/main/vmps.c | 8 +- 12 files changed, 2426 insertions(+), 2880 deletions(-) ====================================================================== commit 8ac744242692979e672d5cd64cbad0044d0276b5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Apr 13 09:46:23 2011 +0200 Use paged arrays rather than linked lists There's less memory allocation on every fifo insert/free Files changed: src/lib/fifo.c | 183 ++++++++++++++++++++++++++++---------------------------- 1 files changed, 91 insertions(+), 92 deletions(-) ====================================================================== commit f91aa6d78f202ac09630b30334b73b05954d8877 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Apr 13 09:43:34 2011 +0200 Move source in preparation for new code The new event handler is simpler than the old one, and needs to be in a separate file, to make it clear that it's a major change to the server core. Files changed: src/main/Makefile.in | 2 +- src/main/event.c | 4254 -------------------------------------------------- src/main/process.c | 4254 ++++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 4255 insertions(+), 4255 deletions(-) ======================================================================

1 0

New state machine in the server core.
by Alan DeKok 13 Apr '11

13 Apr '11

I've just pushed a new state machine to the server core. For people doing "git pull", this means editing src/main/Makefile, and changing "event.c" to "process.c". Or, just re-run "configure" The new state machine is about the same amount of code as the old one. The difference is that it's conceptually much simpler. It has all of the functionality of the old one, and hopefully none of the bugs. The old state machine was an inter-connected mess that was getting to be impossible to extend or debug. The new one is much, much, better. I've attached some SVG diagrams of the state machines, taken from an automated analysis of the code. "event.svg" is the old one. "process.svg" is the new one. You'll note that "process.svg" doesn't look a lot simpler... So "process-simplified.svg" removes the "book-keeping" functions, along with the proxy and CoA functions. The result is a state machine that handles authentication / accounting / coa requests, processes them, and replies. That state machine is much simpler. Please test it, and see what you think. I've done a number of tests with all packet types, proxying, etc. I think that the functionality is identical to the old one, or sometimes even better. It also has the ability to debug the internal state machine. Define a flag DEBUG_STATE_MACHINE, and it will then print out every state transition that a request goes through. It's valuable for understanding how it all works. Alan DeKok.

1 0

GIT Log for 2011-04-12 23:33 GMT
by aland＠deployingradius.com 12 Apr '11

12 Apr '11

commit 9209b7c206316116cabe7b9e1e18cf2ed929fdd5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Apr 12 11:03:59 2011 +0200 Fix arguments for 3.0 API Files changed: .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 30d731c60b2e60e4434e9771477b9383b2d5e894 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Apr 10 16:28:27 2011 +0200 Fix arguments to pairmove2 Files changed: .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ======================================================================

1 0

GIT Log for 2011-04-10 23:33 GMT
by aland＠deployingradius.com 10 Apr '11

10 Apr '11

commit a6a1064ae86fb775f1d83077423dee88e16a6eec Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Apr 10 08:02:05 2011 +0200 Don't set "EAP Failure" when sending error message back .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-)

1 0

GIT Log for 2011-04-08 23:33 GMT
by aland＠deployingradius.com 08 Apr '11

08 Apr '11

commit f3e3212b70e81da6f54d979912a17cd82f3dadc8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Apr 8 13:04:25 2011 +0200 The file may be closed when there are no VPs Files changed: src/main/detail.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 899024045aecf72adfbd48c386c1f722e129940f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Apr 8 09:36:49 2011 +0200 Make error sending configurable Files changed: raddb/modules/eap | 17 +++++++++++++++++ .../rlm_eap/types/rlm_eap_mschapv2/eap_mschapv2.h | 2 -- .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 12 ++++++++++-- 3 files changed, 27 insertions(+), 4 deletions(-) ====================================================================== commit 84fe588bf11671f0ef3b01c7ea5b3a1d87edce21 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 7 16:29:20 2011 +0200 Handle failures Files changed: .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 29 +++++++++++++------ 1 files changed, 20 insertions(+), 9 deletions(-) ====================================================================== commit e35f3fce3f0ee84fd9c61b7f39b8f03e33ac6690 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 7 16:18:27 2011 +0200 Add allow_retry and retry_msg functionality Based on a patch from John Hayward. Setting "allow_retry=0" and "retry_msg = hello" seems to help with EAP-MSCHAPv2 and cached passwords... Files changed: raddb/modules/mschap | 7 +++++++ src/modules/rlm_mschap/rlm_mschap.c | 33 +++++++++++++++++++++++++++------ 2 files changed, 34 insertions(+), 6 deletions(-) ====================================================================== commit 3f1d4a562c63bffc89b35b9c0720b04225792925 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 7 16:11:58 2011 +0200 Allow MS-CHAP-Error in Access-Reject Files changed: raddb/attrs.access_reject | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) ====================================================================== commit c2e8b249ecc1bda362cd766292afa37394f971cd Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 7 09:44:26 2011 +0200 Don't over-write a fail code with a success code. Closes bug #152 Files changed: src/main/valuepair.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 36fd25dbd57899eb03ae653d4bffeae9ae55256a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Apr 6 16:06:18 2011 +0200 Fix prototype Files changed: src/include/radiusd.h | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ======================================================================

1 0

Re: multi language support question?
by ziyen 07 Apr '11

07 Apr '11

> > Hi > When i auth request not english username then > "Invalid user: [\261\342\274\372\301\366\277\370/test01]" happen > when "\261\342\274\372\301\366\277\370" is not englist string > is it a method to solve this? > > Thanks. > > >

1 0

GIT Log for 2011-04-05 23:33 GMT
by aland＠deployingradius.com 05 Apr '11

05 Apr '11

commit ee85d5dd440df5f6ebf4d46748f2336a0f977713 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Apr 5 16:56:33 2011 +0200 Add -4 and -6 options These force NAS-IP-Address or NAS-IPv6-Address Files changed: man/man1/radtest.1 | 12 +++++++++++- src/main/radtest.in | 15 ++++++++++++++- 2 files changed, 25 insertions(+), 2 deletions(-) ====================================================================== commit 8147ce1304531e62804d249f7554e15073891acf Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Apr 2 18:17:50 2011 +0200 Revert "Make event timer callback take el pointer" As it turns out, this isn't a good idea. This reverts commit 21d97638c32c7619994ca521e4c4f01e420c9a5b. Files changed: src/include/event.h | 2 +- src/lib/event.c | 2 +- src/main/command.c | 2 +- src/main/event.c | 62 +++++++++++++++++++++++++------------------------- 4 files changed, 34 insertions(+), 34 deletions(-) ====================================================================== commit bb1eebb0f767abc7eb97b6c4db20a6975738938d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Apr 1 10:04:12 2011 +0200 Skip zero-length attributes rather than looping forvever trying to encode them Files changed: src/lib/radius.c | 34 ++++++++++++++++++++++++++-------- 1 files changed, 26 insertions(+), 8 deletions(-) ====================================================================== commit 7cb2317510dddca9cdce8df1deba0a93c5f3b93d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Mar 30 08:37:00 2011 +0200 Accept accounting packets via TCP Files changed: src/main/listen.c | 22 ++++++++++++++++------ 1 files changed, 16 insertions(+), 6 deletions(-) ====================================================================== commit bd6b7163a98cad9da3faaa5c3e5559c79ce1d251 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Mar 30 08:27:54 2011 +0200 Fix build/run errors when not using proxying Files changed: src/modules/rlm_realm/rlm_realm.c | 8 +++++--- 1 files changed, 5 insertions(+), 3 deletions(-) ====================================================================== commit 45ae14194ee3170e31dcad7fd2a1c43642ceaa81 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 29 15:53:01 2011 +0200 Fix handling of "-l stdout" Files changed: src/main/log.c | 8 +------- src/main/radiusd.c | 14 ++++++++------ 2 files changed, 9 insertions(+), 13 deletions(-) ====================================================================== commit 08258a6193ef076139b346efbdd2c34528a9d8f5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 29 12:50:08 2011 +0200 More build fixes Files changed: src/main/modules.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ====================================================================== commit 26e0f27d0552771479655d5d9b479393d4a79e5c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 29 09:46:30 2011 +0200 Build with various compile flags. The WITH/WITHOUT_FOO features allow us to build the server with or without certain features. However, setting the flags to various values *should* allow the server to build. This patch fixes that. Files changed: src/include/radiusd.h | 38 ++++++++++++++++++-------------------- src/main/log.c | 4 ++-- src/main/realms.c | 2 +- 3 files changed, 21 insertions(+), 23 deletions(-) ====================================================================== commit 987d003328a7b005c833e66a719c3e454e2c14cc Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 29 09:08:00 2011 +0200 Fix function prototype Files changed: src/include/radiusd.h | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit b8d635b65de272e5e5dfaa360d7e6ec096eb9413 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Mar 27 21:00:10 2011 +0200 Cap response_window at max_request_time Files changed: src/main/realms.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) ====================================================================== commit e97630f6da3d813a6a1af0d3586b7a4da812b68d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 16:06:40 2011 +0100 Set min/max for max_request_time, cleanup_delay, and reject_delay Files changed: src/main/mainconfig.c | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) ====================================================================== commit 21d97638c32c7619994ca521e4c4f01e420c9a5b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 15:44:57 2011 +0100 Make event timer callback take el pointer It's just too useful to ignore Files changed: src/include/event.h | 2 +- src/lib/event.c | 2 +- src/main/command.c | 2 +- src/main/event.c | 62 +++++++++++++++++++++++++------------------------- 4 files changed, 34 insertions(+), 34 deletions(-) ======================================================================

1 0

eap2 in freeradius
by Chanthearith HUON 04 Apr '11

04 Apr '11

Hi everyone, I am testing eap2 in freeradius. I run "radiusd -X", I got following error message " radiusd: symbol lookup error: /usr/lib/rlm_eap2-2.1.0.so: undefined symbol: eap_server_register_methods " Anyone, have any idea what might be wrong with the configuration? Thank in advance, Thierry

5 10