September 2012 - Freeradius-Devel - lists.freeradius.org

Adding Access-Challenge support for rlm_pam
by Kenny Root 20 Sep '12

20 Sep '12

I wanted to use google-authenticator's PAM module on my FreeRADIUS server. It seemed to work fine with authentication from Apache, but also making that work with PAM was problematic. I probably could have hacked around it to make it work like I wanted, but I'd rather have my familiar "Verification code: " prompt from google-authenticator. Instead I've worked a bit to enable Access-Challenge support in rlm_pam. This is done in terms of PAM_CONV_AGAIN which allows rlm_pam to send Access-Challenge and keep state in a structure similar to how rlm_securid works. This is the first time I've looked at the source code for FreeRADIUS, so I'd welcome any review of my code as it currently stands. It doesn't currently behave like the existing rlm_pam. For instance, it doesn't try to submit the first password it sees as the reponse to the first pam_conv message. However, I should be able to fix that soon. The initial commit is here: https://github.com/kruton/freeradius-server/commit/0df7c053e1a10a49a5e9af13… Thanks, Kenny Root

2 1

Commit report for master branch
by announce＠freeradius.org 19 Sep '12

19 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Quiet the compiler Arran Cudbard-Bell@2012-09-19T16:00:36Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/alandekok/freeradius-server/commit/758603e44fd88170b51dd… ====== Add dictionary for BSkyB Arran Cudbard-Bell@2012-09-19T15:30:01Z Files modified: * share/dictionary * share/dictionary.bskyb Commit diff: https://github.com/alandekok/freeradius-server/commit/9ae99472a3ee768583290… ====== remove compilation warnings 2 "warning: format '%ld' expects type 'long int', but argument 3 has type 'ssize_t'" messages removed Alan Buxeyvia (Arran Cudbard-Bell)@2012-09-18T23:44:00Z Files modified: * src/lib/tcp.c * src/main/radclient.c Commit diff: https://github.com/alandekok/freeradius-server/commit/15e88fcdd3e797b528cc1… ====== removed 2 compilation warnings macaddr->length and sizeof are unsigned longs Alan Buxeyvia (Arran Cudbard-Bell)@2012-09-18T23:44:00Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/alandekok/freeradius-server/commit/c9cf9be7745bc11ac8aa6… ====== -- This commit summary was generated @2012-09-19T18:00:06Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.1.x branch
by announce＠freeradius.org 19 Sep '12

19 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Quiet the compiler Arran Cudbard-Bell@2012-09-19T16:00:16Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/alandekok/freeradius-server/commit/e27961e1e68f31b7ef846… ====== Add dictionary for BSkyB Arran Cudbard-Bell@2012-09-19T15:31:15Z Files modified: * share/dictionary * share/dictionary.bskyb Commit diff: https://github.com/alandekok/freeradius-server/commit/6922c4d250908fc84268e… ====== -- This commit summary was generated @2012-09-19T18:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

freeradius: failed linking to rlm_eap2
by Tatiana DIBANDA 18 Sep '12

18 Sep '12

hi, I'have tried to configure eap-psk on freeradius-server v2.1.x (http://git.freeradius.org/) I have used this hostap version to have libeap.so (git clone git://w1.fi/srv/git/hostap-06.git). I followed the steps below for the compilation of freeradius: I edited the rlm_eap2/Makefile and indicates the hostapd path and the target. # ./configure --with-experimental-modules --with-rlm_eap2 # make and make install does not provide errors I commented all the line of eap.conf and add the end : eap2{ psk{} } I replaced allow eap in the site-enabled/default by eap2. when I want to start my server with this command : export LD_PRELOAD=~/eap_example/libeap.so && radiusd -x I got this message error: /usr/local/etc/raddb/eap.conf[17]: Failed linking to rlm_eap2 structure: /usr/local/lib/rlm_eap2-2.2.0.so: undefined symbol: rlm_eap2 /usr/local/etc/raddb/sites-enabled/default[310]: Failed to find "eap2" in the "modules" section. /usr/local/etc/raddb/sites-enabled/default[252]: Errors parsing authenticate section. Does any one have any ideas on how to resolve this problem? Thanks in advance.

5 8

Commit report for master branch
by announce＠freeradius.org 18 Sep '12

18 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Don't use ci to iterate over subsections if we might need to use it for logging later Arran Cudbard-Bell@2012-09-18T15:15:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/alandekok/freeradius-server/commit/c2e26c70bc6d3d3bd98cc… ====== -- This commit summary was generated @2012-09-18T18:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.1.x branch
by announce＠freeradius.org 18 Sep '12

18 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Don't use ci to iterate over subsections if we might need to use it for logging later Arran Cudbard-Bell@2012-09-18T15:15:33Z Files modified: * src/main/modcall.c Commit diff: https://github.com/alandekok/freeradius-server/commit/02567cf3c5aa758d7153c… ====== -- This commit summary was generated @2012-09-18T18:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

MS-MPPE keys in proxy
by M Arif 18 Sep '12

18 Sep '12

Hi, I am having trouble understanding the EAP-TLS authentication when requests are proxied. I want to know how MS-MPPE-Send-Key and MS-MPPE-Recv-Keys are transferred in proxy.. since these keys contain values calculated with EAP-Messages exchanged hashed with shared secret bla bla. Does the proxy keep its own EAP state and varialbe and calculates the Message Authenticator. or free-radius ignores these keys when exchanging EAP messages. regards

2 1

Crash / exit of master when proxying
by Phil Mayers 18 Sep '12

18 Sep '12

All, FYI our testing server running "master" died today when the upstream UK eduroam servers became briefly unavailable. Unfortunately I'd mistakenly disabled generation of core dumps when porting the config to the new 3.0 structure, so all I've got is the logs. It seems to have become confused Proxy: Marking home server 194.83.56.249 port 1812 as zombie (it looks like it is dead). Proxy: Marking home server 194.83.56.249 port 1812 as dead. Proxy: (47522) Received response to status check 47522 (1 in current sequence) Proxy: (47521) Failed to insert entry into proxy list. Proxy: (47521) Failed to insert retransmission into the proxy list. Proxy: No outstanding request was found for reply from host 194.83.56.249 port 1812 - ID 83 Error: Request 47521 has been waiting in the processing queue for 10 seconds. Check that all databases are running properly! Proxy: (47531) Received response to status check 47531 (2 in current sequence) Proxy: Marking home server 194.82.174.185 port 1812 as zombie (it looks like it is dead). Error: No response to status check 47533 for home server 194.82.174.185 port 1812 Proxy: (47542) Received response to status check 47542 (3 in current sequence) Proxy: (47542) Marking home server 194.83.56.249 port 1812 alive Proxy: Marking home server 194.83.56.249 port 1812 as zombie (it looks like it is dead). Proxy: Marking home server 194.83.56.249 port 1812 as dead. Proxy: (47544) Received response to status check 47544 (1 in current sequence) Proxy: No outstanding request was found for reply from host 194.83.56.249 port 1812 - ID 197 Proxy: Marking home server 194.82.174.185 port 1812 as dead. Proxy: (47545) Received response to status check 47545 (1 in current sequence) Error: Request 47543 has been waiting in the processing queue for 14 seconds. Check that all databases are running properly! ...and then it stops. It had been up for a few days at this point. Config is normal UDP proxying. I've enabled core dumps and will try to reproduce it.

2 1

Commit report for v2.1.x branch
by announce＠freeradius.org 17 Sep '12

17 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update links that point to wiki pages Arran Cudbard-Bell@2012-09-17T14:53:04Z Files modified: * redhat/README * redhat/freeradius.spec * src/modules/rlm_eap/mem.c Commit diff: https://github.com/alandekok/freeradius-server/commit/482ade2ad808a7020e976… ====== Add bounds check for max_queue_size Arran Cudbard-Bell@2012-09-17T14:42:51Z Files modified: * src/main/threads.c Commit diff: https://github.com/alandekok/freeradius-server/commit/80148701a784b0fd8385b… ====== -- This commit summary was generated @2012-09-17T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 17 Sep '12

17 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update links that point to wiki pages Arran Cudbard-Bell@2012-09-17T14:52:45Z Files modified: * redhat/README * redhat/freeradius.spec * src/modules/rlm_eap/mem.c Commit diff: https://github.com/alandekok/freeradius-server/commit/ba12340436b917fb43d8c… ====== Add bounds check for max_queue_size Arran Cudbard-Bell@2012-09-17T14:45:14Z Files modified: * src/main/threads.c Commit diff: https://github.com/alandekok/freeradius-server/commit/dc95384e2752b1f1d5301… ====== Use max_queue_size when initializing the queues Alan T. DeKok@2012-09-17T14:01:01Z Files modified: * src/main/threads.c Commit diff: https://github.com/alandekok/freeradius-server/commit/35df325528a3eb4217592… ====== -- This commit summary was generated @2012-09-17T18:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0