August 2012 - Freeradius-Devel - lists.freeradius.org

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

Complete authorize & accounting redis module
by Manuel Guesdon 31 Oct '12

31 Oct '12

Hi, I've adapted rlm_sql to REDIS (http://redis.io/) key-store database. It handle authorize, accounting, checksimul and post-auth (only authorize is deeply tested). Authorize works like rlm_sql with groups, etc... Files are here: http://free.oxymium.net/freeradius/rlm_redisn/ Available as .tgz here: http://free.oxymium.net/freeradius/rlm_redisn-20111112-001.tgz Manuel -- ______________________________________________________________________ Manuel Guesdon - OXYMIUM

4 11

New build system
by Alan DeKok 21 Sep '12

21 Sep '12

OK, I've fixed a bug with dependencies, where it wouldn't re-build a C file if a header changed. I've also added some "configure" support. So modules like rlm_pam, python, perl, etc. only get built if their prerequisites are found. One benefit is that "make -j 8" now works. On my quad-core system I get this: $ time make -j 8 clean all ... real 0m4.357s user 0m24.702s sys 0m3.580s A complete build in less than 5 seconds. Very nice! Alan DeKok.

4 6

freeradius and DHCP
by Wegener, Norbert 28 Aug '12

28 Aug '12

http://freeradius.org/features/dhcp.html states: Support for the DHCP protocol is experimental on the other hand I find: http://lists.freeradius.org/pipermail/freeradius-devel/2012-January/006666.… which says: It's time for everyone to toss the ISC server. Is the last statement the more recent one? Can freeradius completely substitute ISC dhcp and are there (greater) real life FR-DHCP installations around? With best regards, ________________________________ Norbert Wegener <https://scd.siemens.de/db4/v3/suche.d4w?lang=de&sn=&gn=&cn=&o=&ou=&c=&l=&de…>

2 1

Radsec auth and acct on same port
by Вячеслав Адаманов 21 Aug '12

21 Aug '12

In the specification port 2083/tcp use for authentication and accounting. But in config i can set only one type: home_server tls { ipaddr = 127.0.0.1 port = 2083 type = auth secret = testing123 proto = tcp status_check = none .... } Hi, there are any ideas how to implement it? Best regards, Vyacheslav

3 17

Two memory leaks in freeradius-client library - patch attached
by William King 21 Aug '12

21 Aug '12

After writing a radius module for FreeSWITCH and using freeradius-client as the client library I've located two memory leaks. One in when the radius handle is created, and another when it is freed. Attached is a patch that resolves both. -- William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king(a)quentustech.com

1 0

Acct Tunnel (link) start and stop
by Vladimir Grujić 20 Aug '12

20 Aug '12

Hi, I've noticed that freeradius is missing implementation on acct tunnel (link) start or stop packages). I have implemented the handlers in rlm_sql . Where can i post the patches for that? Best Regards, Vladimir

2 1

rlm_acct_unique
by Brian Candler 20 Aug '12

20 Aug '12

A couple of minor comments about raddb/modules/acct_unique (in the v2.1.x branch at least) (1) "See doc/rlm_acct_unique for more information" That file doesn't exist. But there is man/man5/rlm_acct_unique.5 (2) The default setting of acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } could be dangerous, because if you are receiving accounting via a network of proxies, you'll get different session IDs depending on which proxy each packet came through. In my opinion, it would be better to drop Client-IP-Address - and that would be consistent with the example in the rlm_acct_unique.5 manpage. Regards, Brian.

3 2

zeromq module thread safety
by Alex Massover 16 Aug '12

16 Aug '12

Hello, We're using mod_event_zmq module (slightly modified, we use different socket type and IPC instead of TCP), and experience crashes. As far as I understood the module it creates ZMQ context and all event sent by using same context. Events callback is called from different threads, isn't it? And can be a situation when different threads access send() api on this context simultaneously. ZMQ guide strongly prohibits doing that: " You MUST NOT share ØMQ sockets between threads." And when I do a mutex around send() there're no more crashes (at least today). Am I missing something or mod_event_zmq is potentially dangerous? -- Best Regards, Alex Massover

2 2

pam_radius feature request: configurable password prompt (with patch)
by David Richardson 15 Aug '12

15 Aug '12

Hi, In my environment, I need to change the password prompt pam_radius gives (I have two different pam modules using "Password: " as their prompt; it's rather confusing). I would like to make a feature request to allow configuration of the password prompt via a config file. I have attached a patch providing this feature (via the parameter "password_prompt" in the pam config). This patch is against pam_radius 1.3.17. It compiles and works on CentOS 6 x86_64. Thanks, DR -- David Richardson <david.richardson(a)utah.edu> Center for High Performance Computing at the University of Utah

1 0