December 2012 - Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 10 Dec '12

10 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== datum.dptr should really be const... Arran Cudbard-Bell@2012-12-10T23:44:09Z Files modified: * src/modules/rlm_dbm/rlm_dbm.c * src/modules/rlm_dbm/rlm_dbm_parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/275ba9737e2784a47611… ====== Compare character to zero, not to NULL Alan T. DeKok@2012-12-10T23:02:51Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5401d66df78f1da9a4f6… ====== One less build warning Alan T. DeKok@2012-12-10T23:02:50Z Files modified: * src/modules/rlm_dbm/rlm_dbm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b339a27c3a78e8640db8… ====== Add increment operator for LDAP Arran Cudbard-Bell@2012-12-10T20:16:57Z Files modified: * raddb/mods-available/ldap * src/include/token.h * src/lib/token.c * src/main/conffile.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e421de584dd2819e093… ====== cf_reference_item should return the current item if passed '.' get_userdn should not leave the rcode at FAIL if it actually finds the userdn user_modify needs two arrays, one of structs, one of pointers to those structs Arran Cudbard-Bell@2012-12-10T20:16:57Z Files modified: * src/main/conffile.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/559bb3fbd235142d6106… ====== user_dn should be initialised to NULL Need to use memcpy to copy pointer to array element into value field in mods struct, because OpenLDAP doesn't use const anywhere Arran Cudbard-Bell@2012-12-10T17:05:09Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9248f16ed8bee98d335d… ====== Move eDir autz code into authorize, freeing post-auth for accounting Fix small memory leak on eDir failure Update LDAP configuration Arran Cudbard-Bell@2012-12-10T12:38:45Z Files modified: * raddb/mods-available/ldap * raddb/sites-available/default * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ccb60f4ce502cf8fa37f… ====== Don't pass presult Arran Cudbard-Bell@2012-12-10T11:45:54Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dca3e01a99f795c0b1c2… ====== Fix typo Arran Cudbard-Bell@2012-12-10T09:35:33Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f2eae31d12f97c2c4e06… ====== Rename cfree to rad_cfree Arran Cudbard-Bell@2012-12-10T09:29:23Z Files modified: * src/include/radiusd.h * src/main/util.c * src/main/valuepair.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_policy/rlm_policy.c * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/951457a6fcacb8076ee6… ====== Remove duplicate error message Arran Cudbard-Bell@2012-12-10T01:37:55Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16ecc5b5ebd3a3c5ed8a… ====== Remove old edir code Arran Cudbard-Bell@2012-12-10T01:36:50Z Files modified: * src/modules/rlm_ldap/edir_ldapext.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/05b1ffb0e3698fe53c20… ====== Fix over zealous whitespace replacement Arran Cudbard-Bell@2012-12-10T01:22:06Z Files modified: * src/modules/rlm_opendirectory/rlm_opendirectory.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/471447b47ae4843cc346… ====== More style fixes Arran Cudbard-Bell@2012-12-10T01:21:37Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87ee32fe6beffe6041da… ====== Add basic accounting support to LDAP Arran Cudbard-Bell@2012-12-10T01:21:21Z Files modified: * raddb/mods-available/ldap * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a62cce4a224c03b5b5f… ====== -- This commit summary was generated @2012-12-11T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Compilation fail on cfree
by Olivier Beytrison 10 Dec '12

10 Dec '12

Hello, After Arran's commit e16570e455 compilation fails on the first module (rlm_acctlog) CC src/modules/rlm_acctlog/rlm_acctlog.c In file included from src/modules/rlm_acctlog/rlm_acctlog.c:28:0: /opt/src/FR3/repositories/freeradius-server/src/freeradius-devel/radiusd.h:544:7: error: conflicting types for ‘cfree’ /usr/include/stdlib.h:493:13: note: previous declaration of ‘cfree’ was here make[1]: *** [build/objs/src/modules/rlm_acctlog/rlm_acctlog.lo] Error 1 Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier(a)heliosnet.org

2 2

Commit report for master branch
by announce＠freeradius.org 09 Dec '12

09 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== malloc sections at runtime Arran Cudbard-Bell@2012-12-09T19:26:38Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cb6771112db0911fafb… ====== Use correct type of free in rlm_policy Arran Cudbard-Bell@2012-12-09T17:19:24Z Files modified: * src/modules/rlm_policy/rlm_policy.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c288b7e2050a770d9b4… ====== Fix warnings in rlm_cram Arran Cudbard-Bell@2012-12-09T17:17:48Z Files modified: * src/modules/rlm_cram/rlm_cram.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c381951cf82073ffeeb2… ====== Reformatting Arran Cudbard-Bell@2012-12-09T17:06:44Z Files modified: * src/modules/rlm_opendirectory/rlm_opendirectory.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/db8e2938a2fb91524035… ====== Get rid of warnings in rlm_counter Arran Cudbard-Bell@2012-12-09T16:59:44Z Files modified: * src/modules/rlm_counter/rlm_counter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94008ca086879878a78b… ====== Add cfree for freeing consts Arran Cudbard-Bell@2012-12-09T16:59:15Z Files modified: * src/include/radiusd.h * src/main/util.c * src/main/valuepair.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_policy/rlm_policy.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e16570e4552108d7eaec… ====== -- This commit summary was generated @2012-12-10T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

FR3 HEAD/MASTER segmentation fault
by Alan Buxey 09 Dec '12

09 Dec '12

hi, with latest GIT sync/checkout - http://pastebin.com/CMzaA60y (also reported on bugs.freeradius.org for complete capture). seems to be the only thing that is killing FR3 now. alan

2 1

Commit report for master branch
by announce＠freeradius.org 08 Dec '12

08 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update docs and suse/rhel specs for attrs Arran Cudbard-Bell@2012-12-08T18:37:28Z Files modified: * man/man5/rlm_attr_filter.5 * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a0bfbe9ebd883b88c870… ====== Merge pull request #148 from olivierbeytrison/master edir documentation, fix all.mk.in for edir.c, fix typo in edir.c Arran Cudbard-Bell@2012-12-08T11:58:47Z Files modified: * raddb/mods-available/ldap * raddb/sites-available/default * src/modules/rlm_ldap/all.mk.in * src/modules/rlm_ldap/edir.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c3334e040d7882a992e… ====== fix typo, add doc for ldap-edir, build edir.c with boilermake Olivier Beytrison@2012-12-08T11:48:09Z Files modified: * raddb/mods-available/ldap * raddb/sites-available/default * src/modules/rlm_ldap/all.mk.in * src/modules/rlm_ldap/edir.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3319957f84cb8d2cff13… ====== Merge pull request #146 from olivierbeytrison/master Fix Makefile and debian for new attr filter directory Arran Cudbard-Bell@2012-12-08T11:13:17Z Files modified: * debian/freeradius.install * debian/freeradius.postinst * debian/freeradius.prerm * raddb/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/89f39994322014966717… ====== fix debian and Makefile for new filters Olivier Beytrison@2012-12-08T11:10:32Z Files modified: * debian/freeradius.install * debian/freeradius.postinst * debian/freeradius.prerm * raddb/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0adcf75809db73a42c5… ====== Fix more typos Arran Cudbard-Bell@2012-12-08T10:51:52Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d831f9aed59a014c321… ====== Merge pull request #145 from mcnewton/master few small issues Arran Cudbard-Bell@2012-12-08T00:33:00Z Files modified: * debian/rules * src/main/process.c * src/main/valuepair.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_policy/rlm_policy.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ce720ea9ab6470eb782… ====== fix typo Matthew Newton@2012-12-08T00:23:20Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a4648024e705623de20… ====== quiet some compiler warnings Matthew Newton@2012-12-08T00:14:51Z Files modified: * src/main/process.c * src/main/valuepair.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_policy/rlm_policy.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a48a0b3db753260f2fd1… ====== debian packages shouldn't be developer build Matthew Newton@2012-12-08T00:14:19Z Files modified: * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/88552d02a7887b1f41f2… ====== -- This commit summary was generated @2012-12-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

eDir Universal password implementation.
by Olivier Beytrison 08 Dec '12

08 Dec '12

Hi, I've been working this morning in bringing back the eDirectory Universal Password feature into the new rlm_ldap module. I'm only talking about Universal Password, not the NMAS two-factor auth, as this is something we don't have here so there's no way for me to test. What have been done and is working : - reformatting edir_ldapext.c for the universal password code into a new file, some code cleanup - implementing the "edir=yes/no" options for rlm_ldap - retrieve the password in ldap_authorize and add the corresponding Cleartext-Password attribute Actually I can successfully connect using an eDir account with pap/. What has to be done, and where I need some hints : - Now that we have the cleartext-password, we're not going in the ldap_authenticate anymore. In the past with Auth-Type=LDAP it was possible, but setting Auth-Type=LDAP triggers a module_fail after the rewrite. In order to enforce eDir account policy, we have to bind to the LDAP server. how would you recommend me to implement it ? - add the IFDEF NOVELL around the added code (i can do it that's ok) - adapt the Makefile in order to compile edir_upwd.c only if configure has --with-edir (need help on that point) - return an error in the debug if universal password is not found, but do not fail the module (or should I ?) Initial commit in my fork is visible here : https://github.com/olivierbeytrison/freeradius-server/commits/rlm_ldap_add_… Btw, it has been some years since the last time I wrote C. Be gentle and advise, I'll try to make it as clean as possible. Any advice are welcome ! Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier(a)heliosnet.org

5 21

boilermake not quite right still
by Alan Buxey 08 Dec '12

08 Dec '12

hi, using latest GIT HEAD 3.x pull with boilermake , then install.... # service radiusd start Starting radiusd: /usr/sbin/radiusd: error while loading shared libraries: build/lib/.libs/rlm_acctlog.so: cannot open shared object file: No such file or directory [FAILED] running from the build directory radiusd -fxx -l stdout - works. running whilst in another directory (eg top level or root home) # radiusd -fxx -l stdout radiusd: error while loading shared libraries: build/lib/.libs/rlm_acctlog.so: cannot open shared object file: No such file or directory alan

3 8

Commit report for v2.x.x branch
by announce＠freeradius.org 07 Dec '12

07 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== New checkrad version patch (Juniper) I would like to submit a new version of this Patch for FR 2.20, which uses snmpget instead of snmpwalk (to increase performance). It also fixes a problem with checkrad complaining about lack of $ in the "out" variable. dragon9k (via Arran Cudbard-Bell)@2012-12-07T21:04:09Z Files modified: * src/main/checkrad.pl.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2960b5b68132c08079a… ====== -- This commit summary was generated @2012-12-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 07 Dec '12

07 Dec '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Move attrs filters into their own directory, rename attrsfile to file Arran Cudbard-Bell@2012-12-07T23:02:08Z Files modified: * raddb/attrs * raddb/attrs.access_challenge * raddb/attrs.access_reject * raddb/attrs.accounting_response * raddb/attrs.pre-proxy * raddb/filter/access_challenge * raddb/filter/access_reject * raddb/filter/accounting_response * raddb/filter/post-proxy * raddb/filter/pre-proxy * raddb/mods-available/attr_filter * src/modules/rlm_attr_filter/rlm_attr_filter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f9f47f5dbc1d72d0cf88… ====== Merge pull request #144 from dragon9k/master New version: checkrad patch to support Juniper's BRAS Arran Cudbard-Bell@2012-12-07T21:00:37Z Files modified: * src/main/checkrad.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69810aa5f59265158505… ====== New checkrad version patch (Juniper) I would like to submit a new version of this Patch for FR 2.20, which uses snmpget instead of snmpwalk (to increase performance). It also fixes a problem with checkrad complaining about lack of $ in the "out" variable. dragon9k@2012-12-07T18:29:01Z Files modified: * src/main/checkrad.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/139a090875be16594620… ====== Added ldap_postauth for edir Olivier Beytrison (via Alan T. DeKok)@2012-12-07T20:38:56Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/81d167c02138e61374e3… ====== Glue edir into the authorization module. Alan T. DeKok@2012-12-07T20:35:51Z Files modified: * src/modules/rlm_ldap/Makefile.in * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7f504dfb078264e73ad… ====== Fix typo Alan T. DeKok@2012-12-07T17:54:22Z Files modified: * src/modules/rlm_ldap/edir.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0f523e76663463e48f0… ====== Added preliminary WITH_EDIR again. Based on a patch from Olivier Beytrison Alan T. DeKok@2012-12-07T16:10:05Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.in * src/modules/rlm_ldap/edir.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ad67ec0eba46d07d17f… ====== -- This commit summary was generated @2012-12-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Any commercial product that support Radius EAP-PSK?
by RuiQiang Huang 06 Dec '12

06 Dec '12

Hi, all We want to test our supplicant. Unfortunately freeRadius doesn't build in EAP-PSK. At the beginning we was thinking to code a module that support EAP-PSK. But we have a timeline on our project that also looking for commercial alternative, also, a software running on windows with good UI is ideal for us. Thanks.

1 0