January 2013 - Freeradius-Devel - lists.freeradius.org

[PATCH] $selected was not properly reinitialized in dialup_admin
by Octavio Alvarez 15 Jan '13

15 Jan '13

Hello. I'm sending this patch to fix a small bug in dialup_admin. This was making weird behavior when a user was member of multiple groups. The $selected array should be reinitialized on each iteration of i to avoid more than one "selected" operator in the dropdown. -- Octavio. Twitter: @alvarezp2000 -- Identi.ca: @alvarezp

1 0

Failed to link to module 'rlm_ldap': file not found
by Martin Silvero 15 Jan '13

15 Jan '13

Hi there, Ihace the following problem, and I can´t find the solution. In have redhat6.0, and freeradius.2.1.10-5.el6 Any know the solution? Many thanks! /etc/raddb/modules/ldap[29]: Failed to link to module 'rlm_ldap': file not found /etc/raddb/sites-enabled/default[287]: Failed to load module "ldap". /etc/raddb/sites-enabled/default[287]: Failed to parse "ldap" entry. 2013/1/9 Alan DeKok <aland(a)deployingradius.com> > Arran Cudbard-Bell wrote: > >> Can we at least maintain backwards compatibility for one major version > to read the old filenames? Surely it can't be that hard to have a short > lookup table from the old names? > > > > So then you take over maintence of a v3.x system and all the > configurations are in this weird format and you can't really see how it > works and, and... > > The config system has provisions for backwards compatibility. We can > leverage that, but deprecate the old system. > > That being said, there is config in 3.x that is backwards compatible > with config from 0.x. That's wrong, and will be fixed. > > For other things, like "User-Password", it *causes* problems. People > read decade-old "howto's", and create broken configurations. It's a > good idea to get that fixed. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html > -- -- Silvero Martin

2 2

Commit report for master branch
by announce＠freeradius.org 14 Jan '13

14 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #166 from olivierbeytrison/master rlm_cache : Operator not retrieved in cache_verify Arran Cudbard-Bell@2013-01-14T11:51:47Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b978659ab949ae89da9… ====== Add missing cf_pair_operator to cache_verify Olivier Beytrison@2013-01-14T11:48:31Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/64deffd649c095e1acaa… ====== -- This commit summary was generated @2013-01-15T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 12 Jan '13

12 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add index files for module and client Arran Cudbard-Bell@2013-01-12T00:24:48Z Files modified: * doc/source/extra/client.c * doc/source/extra/module.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5afe006e4869326062c3… ====== Move license declarations outside of file descriptions Arran Cudbard-Bell@2013-01-12T00:17:53Z Files modified: * src/include/connection.h * src/include/libradius.h * src/include/md5.h * src/include/modules.h * src/include/radiusd.h * src/include/soh.h * src/include/tcp.h * src/include/tls-h * src/include/token.h * src/include/udpfromto.h * src/include/vmps.h * src/include/vqp.h * src/lib/radius.c * src/main/connection.c * src/main/exec.c * src/main/process.c * src/main/soh.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6474a01c17bd3fece412… ====== -- This commit summary was generated @2013-01-13T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 11 Jan '13

11 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Define HAVE_JSON when generating docs Arran Cudbard-Bell@2013-01-11T21:16:16Z Files modified: * doc/source/Doxyfile * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfa42f2bb2a6bc6d943e… ====== Fix minor formatting issue Arran Cudbard-Bell@2013-01-11T21:01:00Z Files modified: * src/include/modules.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6dfe4f993c23b71cd1… ====== More doxygen tweaking Arran Cudbard-Bell@2013-01-11T20:10:58Z Files modified: * doc/source/Doxyfile * doc/source/extra/freeradius.png Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2decec8bf882b78d17d… ====== Add documentation to modules.h Add proper return code type rlm_rcode_t, and update signatures of all module functions that return rcodes Arran Cudbard-Bell@2013-01-11T16:28:59Z Files modified: * src/include/modules.h * src/main/modules.c * src/modules/rlm_acctlog/rlm_acctlog.c * src/modules/rlm_always/rlm_always.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_checkval/rlm_checkval.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_dbm/rlm_dbm.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_dynamic_clients/rlm_dynamic_clients.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap2/rlm_eap2.c * src/modules/rlm_example/rlm_example.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_fastusers/rlm_fastusers.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_jradius/rlm_jradius.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_policy/rlm_policy.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_radutmp/rlm_radutmp2.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_securid/rlm_securid.c * src/modules/rlm_sim_files/rlm_sim_files.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sometimes/rlm_sometimes.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_unix/rlm_unix.c * src/modules/rlm_utf8/rlm_utf8.c * src/modules/rlm_wimax/rlm_wimax.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5cea788fd3972a584952… ====== -- This commit summary was generated @2013-01-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Multithreaded krb5
by Arran Cudbard-Bell 11 Jan '13

11 Jan '13

A while back there was some discussion about the current krb5 module in FreeRADIUS being single threaded, and that it may no longer be necessary for it to be single threaded. It transpires that both MIT and Heimdal libraries are now thread safe, MIT since either 1.4.x or 1.4.4 (unsure) and Heimdal since around 0.7 (documentation is fuzzy). I can't test beyond compiling the code against the kerberos library, and maybe setting up a test KDC/TGS. But for this to be put into the stable branch it really needs to be tested under load, against a range of keberos implementations. Were looking for volunteers, preferably a mix of deployments using either MIT or Heimdal. The new module should just drop in for any v2.1.x deployment once compiled, as it doesn't use any new core API functions. Change list: * Both - Check that krb5 library was compiled with threading support on startup. * Both - Clone context on each request to ensure thread safety. * Both - Move service principal parsing so it's done at intialisation only (instead of on every request). * Both - Improved return codes, will now reflect revoked access/password expiry (USERLOCK), Uknown client principal (NOTFOUND), as well as bad password (REJECT), and other errors (FAIL). Before the module returned REJECT for almost everything. * Both - Mark module as thread safe, config check safe (will be validated on -C), and hup safe (config will be reloaded on SIGHUP) * Both - Switch more messages to use RDEBUG so they'll be printed in conditional debug (useful for production servers with radmin enabled). * MIT - Move service principal string to service principal conversion so that it's done at initialisation only (instead of on every request). * MIT - Move options configuration so they're done at initialisation only (instead of on every request). * MIT - Switch to using krb5_get_init_creds_password and krb5_verify_init_creds to validate TGT instead of old twisty logic. * MIT - Cache option removed as krb5_verify_init_creds disables the replay cache on its own. For those wanting to test: git clone git@github.com:arr2036/freeradius-server.git cd freeradius-server git checkout threaded_krb5 Report issues on: http://bugs.freeradius.org, and send feedback to either the list or me directly. -Arran

1 0

Commit report for master branch
by announce＠freeradius.org 10 Jan '13

10 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #163 from alanbuxey/master CUI MD5 shouldnt change if User plays with format of their identity , new F5 dictionary entry Arran Cudbard-Bell@2013-01-10T00:25:17Z Files modified: * raddb/policy.d/cui * share/dictionary.f5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a1222a570d73f784bfbe… ====== added new dictionary entry as per http://support.f5.com/kb/en-us/solutions/public/11000/400/sol11431.html Alan Buxey@2013-01-10T00:19:50Z Files modified: * share/dictionary.f5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc62f61bc121af7d3290… ====== make CUI MD5 not reliant on case of User-Name MD5 for CUI would change if User put their name in different case Alan Buxey@2013-01-10T00:19:35Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a2aeaf5c0e81355d09c5… ====== -- This commit summary was generated @2013-01-11T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 Jan '13

08 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add stats on last packet sent / recv for home server Alan T. DeKok@2013-01-08T19:14:49Z Files modified: * share/dictionary.freeradius * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9aabc03ae49c5633e9c8… ====== Updates for new changes Alan T. DeKok@2013-01-08T00:44:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f87ee5c96cb2f4ed102c… ====== Be more graceful about reporting home server state Alan T. DeKok@2013-01-08T00:44:52Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d29207bd76805fe7eea1… ====== Add "unknown" for home server state Alan T. DeKok@2013-01-08T00:44:52Z Files modified: * share/dictionary.freeradius Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e61e676948803dda7cfb… ====== -- This commit summary was generated @2013-01-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Proxy fixes
by Alan DeKok 08 Jan '13

08 Jan '13

I managed to find an hour or two in between various things. I've taken a look at the proxy code, and added some fixes in "master". To be polite, I didn't quite understand the previous code. So... I've deleted things, and simplified other things. The result is that the "zombie" home server detection should be better. I don't know if it fixes the "crash on dead home server" issue that people were seeing. I wasn't able to reproduce that. But, the relevant code is now different. So I hope it's fixed. As always, blame Arran for any bugs. :) Alan DeKok.

3 8

Commit report for master branch
by announce＠freeradius.org 07 Jan '13

07 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add documentation for the connection pool API Update some weird argument names and field names so they make more sense. Arran Cudbard-Bell@2013-01-07T20:54:14Z Files modified: * src/include/connection.h * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e1d0a7e6e7d50830dec… ====== Merge pull request #161 from philmayers/sqlnull specify TARGET for rlm_sql_null Arran Cudbard-Bell@2013-01-07T17:52:53Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/863462358446d21faa6d… ====== specify TARGET for rlm_sql_null Phil Mayers@2013-01-07T17:45:50Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb62d23905d4603f4dae… ====== Don't include references they're too verbose Define multivalued TAGs properly Arran Cudbard-Bell@2013-01-07T12:55:39Z Files modified: * doc/source/Doxyfile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab45f01e306b522597cf… ====== Enable additional doxygen features Arran Cudbard-Bell@2013-01-07T11:52:11Z Files modified: * doc/source/Doxyfile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56ad8b89b16d8a453bf8… ====== -- This commit summary was generated @2013-01-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0