October 2012 - Freeradius-Devel - lists.freeradius.org

segfault
by Xavi Serra 23 Oct '12

23 Oct '12

Hi, I have an ubuntu 12.04 running with a freeradius that validates against an LDAP. Everything was OK since i installed munin for monitoring, which i assume it installed some libraries that make my freeradius crash. i get this error message freeradius[15646]: segfault at 29 ip 00007fcef673159c sp 00007fff0d2a9e98 error 4 in libc-2.15.so[7fcef66ae000+1b5000] need some light over here. thanks in advanced and sorry for my english. freeradius: FreeRADIUS Version 2.1.10 ubuntu 12.04 LTS

1 0

Commit report for master branch
by announce＠freeradius.org 22 Oct '12

22 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fixup formatting and errors in cui policy and dependencies Include sql cui queries by default, as the cuisql module won't be instantiated in the default config. Change cui_has_key value to make it clear that it should be changed. Use string (yes/no) for bool in cui_require_operator_name for consistancy, ideally the parser would pre-evaluate comparisons between literal strings, but the performance hit does not outweigh consistency. Remove spurious spaces around conditions. Literal strings should be literal (i.e. single quotes). Packet-Type is still provided by a magic xlat expension. Substitute 8 spaces for tabs (config files have same formatting rules as C src) Use outer.request:EAP-Message to check whether were in an inner or outer tunnel, should be forwards compatible. ${} values are pre-expanded, so do not require double quotes. control:Proxy-To-Realm is not a magic attribute, it's a standard attribute in the control list (even when set by rlm_realm). cui virtual module does not have xlat method, should use cuisql. Arran Cudbard-Bell@2012-10-22T11:23:07Z Files modified: * raddb/mods-available/cui * raddb/policy.d/cui * raddb/policy.d/operator-name Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5416720dc8d010f82b5… ====== Merge branch 'master' of github.com:FreeRADIUS/freeradius-server Arran Cudbard-Bell@2012-10-22T10:34:42Z Files modified: * raddb/mods-available/cui * raddb/policy.d/cui * raddb/sites-available/default * raddb/sites-available/inner-tunnel * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ba7b14211b87b086508… ====== Merge pull request #110 from armitasp/master Updated CUI Policy Arran Cudbard-Bell@2012-10-22T10:33:44Z Files modified: * raddb/mods-available/cui * raddb/policy.d/cui * raddb/sites-available/default * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a9eba18a6165ff45086d… ====== Changed sites-available/default. Documented the use of cui Scott Armitage@2012-10-21T18:49:56Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a349045b830d23be9d2… ====== Changed sites-available/inner-tunnel. Documented the use of cui Scott Armitage@2012-10-21T18:28:17Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c465da10b8e51e30fc3… ====== Changed cui policy. Changed the updating of the cui in the database to occur in the cui.post-auth. Changed mods-available/cui module name Scott Armitage@2012-10-21T18:19:37Z Files modified: * raddb/mods-available/cui * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fdb47b332087bacc5f1b… ====== Changed cui policy. Added settings to (optionally) make requirement of operator name a pre-requisite for cui generation Scott Armitage@2012-10-21T17:58:19Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/785950755dab19fa7dd3… ====== Changed cui policy. Added a cui.pre-proxy section to request a cui when proxying authentication requests Scott Armitage@2012-10-21T17:39:54Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8bca3528c18c4e92cec… ====== Changed cui policy. cui.authorize requires a flag is set in client definition. This allows cui request on a per client basis Scott Armitage@2012-10-21T17:28:23Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69887993251e529347d6… ====== Added the cui hash to cui policy Scott Armitage@2012-10-21T17:20:13Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/92ec137fd5a6d4ef8b08… ====== Minor formatting fixes Arran Cudbard-Bell@2012-10-21T18:58:18Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/68040809e841ad745185… ====== -- This commit summary was generated @2012-10-22T18:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 21 Oct '12

21 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Made packet data len "size_t". Only one place needs it to be negative: the read from the socket. For the rest of the code, it is ALWAYS positive. As part of this, changed a few other variables, too. And uses "%zu" for printing "size_t" variables. C99 is everywhere. If you want to build the server on a non-C99 compiler, go away. Alan T. DeKok@2012-10-20T09:40:01Z Files modified: * src/include/libradius.h * src/lib/radius.c * src/lib/tcp.c * src/lib/vqp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/41ae75bf88f17769e6da… ====== Fix compiler warnings Alan T. DeKok@2012-10-20T09:26:22Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/941631859bad00ebfe8d… ====== Merge branch 'master' of github.com:FreeRADIUS/freeradius-server Alan T. DeKok@2012-10-20T09:05:41Z Files modified: * src/include/Makefile * src/include/all.mk * src/include/base64.h * src/include/libradius.h * src/include/radiusd.h * src/lib/Makefile * src/lib/all.mk * src/lib/base64.c * src/lib/dhcp.c * src/lib/radius.c * src/main/command.c * src/main/xlat.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_python/prepaid.py * src/modules/rlm_python/radiusd.py * src/modules/rlm_python/rlm_python.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_sql/drivers/rlm_sql_mysql/all.mk.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/995cfe29007eb98d52dc… ====== -- This commit summary was generated @2012-10-20T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

3 2

Commit report for v2.1.x branch
by announce＠freeradius.org 18 Oct '12

18 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Substitute 'signature' for 'Request Authenticator' or 'Response Authenticator' where appropriate Arran Cudbard-Bell@2012-10-18T12:39:42Z Files modified: * src/lib/radius.c * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7ade8e9e66bbb81ed1d… ====== -- This commit summary was generated @2012-10-18T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 18 Oct '12

18 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Substitute 'signature' for 'Request Authenticator' or 'Response Authenticator' where appropriate Arran Cudbard-Bell@2012-10-18T12:47:48Z Files modified: * src/lib/radius.c * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5dd1011b786da4f59fac… ====== -- This commit summary was generated @2012-10-18T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

problem with radclient
by Vladimir Grujić 18 Oct '12

18 Oct '12

Hi, I have the following setup: freeradius is compiled with udpfromto. The reason is that advertised public service address is on lo:1 interface (because the freeradius is behind load balancer in routed mode not in nat mode). There is also another public ip on the eth interface to receive packets from the load balancer. The freeradius itself works well in that setup. The problem is radclient. When i send the packet of type COA-Disconnect to the nas using Packet-Src-IP-Address in the request with the value of lo:0 public ip address to terminate the user session i get this response: rad_recv: Disconnect-ACK packet from host 1.1.1.1 port 3799, id=110, length=43 rad_verify: Received Disconnect-ACK packet from home server 1.1.1.1 port 3799 with invalid signature! (Shared secret is incorrect.) radclient: no response from server for ID 110 socket 3 user is disconnected properly but radclient does not recognize that response ( I've used just -r 1 in this case, when using -r 3 i see additional packets sent but they of course get a Disconnect-NAK) i traced the communication and only one packet send and one is received. Looks like the problem is in the logic of rad_verify function when using Packet-Src-IP-Address. Thanks, Vladimir

5 14

Commit report for master branch
by announce＠freeradius.org 17 Oct '12

17 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== remove compilation error messages (As noted by Alan Buxey) removes the following at compile time: dhcp.c: In function ‘fr_dhcp_add_arp_entry’: dhcp.c:1561: warning: format ‘%lu’ expects type ‘long unsigned int’, but argument 2 has type ‘unsigned int’ dhcp.c:1561: warning: format ‘%lu’ expects type ‘long unsigned int’, but argument 3 has type ‘size_t’ Arran Cudbard-Bell@2012-10-15T16:07:57Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df5ebfae4e20ad523dd4… ====== Only print out user authorized message if the ldap module is actually being used for user authorization Arran Cudbard-Bell@2012-10-15T10:42:38Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a95de4c77d882c86752… ====== Add option to disable password check Arran Cudbard-Bell@2012-10-15T10:33:38Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fdb3c8e74bd21f40a177… ====== Add base64 encoding/decoding library Add %{base64:} expansion to encode the raw octets of an attribute Add %{strtobase64:} expansion to encode a string to base64 Add %{base64tostr:} expansion to decode a base64 string Arran Cudbard-Bell@2012-10-14T22:10:24Z Files modified: * src/include/Makefile * src/include/all.mk * src/include/base64.h * src/lib/Makefile * src/lib/all.mk * src/lib/base64.c * src/main/xlat.c * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f4d67fe5bd7368c4206… ====== Fixup radius_xlat calls to pass inst (was missed from previous commit) Minor reformatting Arran Cudbard-Bell@2012-10-14T18:31:14Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/538ad07d11ef2098061f… ====== -- This commit summary was generated @2012-10-15T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

6 8

Function Call to Get User's Attribute from Users File?
by jobhunts02＠aol.com 17 Oct '12

17 Oct '12

Is there a function call to get the value of an attribute for a user from the users file?

3 3

Commit report for master branch
by announce＠freeradius.org 17 Oct '12

17 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add base64tohex to allow values to be written to IP addresses, integers etc Remove base64tostr (will add tostring expansion later) Rename strtobase64 to tobase64 Arran Cudbard-Bell@2012-10-17T17:40:01Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ad414a6e258d6b17db76… ====== fixes #108 Add function to convert FR value pair types to network byte order Arran Cudbard-Bell@2012-10-17T16:32:41Z Files modified: * src/include/base64.h * src/include/libradius.h * src/lib/base64.c * src/lib/radius.c * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16ab57dda5092953affe… ====== -- This commit summary was generated @2012-10-17T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.1.x branch
by announce＠freeradius.org 17 Oct '12

17 Oct '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add base64tohex to allow values to be written to IP addresses, integers etc Remove base64tostr (will add tostring expansion later) Rename strtobase64 to tobase64 Arran Cudbard-Bell@2012-10-17T17:52:45Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1c71a4b67aae8d9ab06… ====== fixes #108 Add function to convert FR value pair types to network byte order Arran Cudbard-Bell@2012-10-17T17:52:44Z Files modified: * src/include/base64.h * src/include/libradius.h * src/lib/base64.c * src/lib/radius.c * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ecef18da4eef3e393f6… ====== -- This commit summary was generated @2012-10-17T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0