November 2013 - Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 09 Nov '13

09 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Added suid up/down around "open socket" code. Fixes #473 Alan T. DeKok@2013-11-09T17:32:37Z Files modified: * src/modules/proto_arp/proto_arp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e65f2dde93201e47d65… ====== Merge pull request #470 from herwinw/rlm_perl_mutex Only put the clone_mutex in the rlm_perl struct if using ITHREADS Arran Cudbard-Bell@2013-11-09T10:35:42Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5e320e9192fa558d779… ====== Only put the clone_mutex in the rlm_perl struct if using ITHREADS All the code concerning clone_mutex has been wrapped in ifdef-blocks. This way we don't have lingering variables around. Herwin Weststrate@2013-11-08T19:51:15Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7bd94e858935b3e38c78… ====== -- This commit summary was generated @2013-11-10T00:00:07Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 Nov '13

08 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix typo Alan T. DeKok@2013-11-08T19:26:04Z Files modified: * raddb/sites-available/bfd Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7cfc0a6f5645cf488591… ====== Now we've done completely insane Alan T. DeKok@2013-11-08T18:36:23Z Files modified: * raddb/sites-available/arp * share/dictionary * share/dictionary.arp * src/modules/proto_arp/all.mk * src/modules/proto_arp/proto_arp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/811e735372459fe0e42c… ====== Filter expression is a const Alan T. DeKok@2013-11-07T22:38:52Z Files modified: * src/include/pcap.h * src/lib/pcap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3265dcccdff2fcb0f643… ====== -- This commit summary was generated @2013-11-09T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

eapol_test for EAP testing
by kevin kevin 08 Nov '13

08 Nov '13

Hello I'm trying to use eapol_test to test freeradius EAP process. according to http://deployingradius.com/scripts/eapol_test/ I followed the steps to bring up FreeRadius Server version 2.1.12 and eapol_test (wpa_supplicant-2.0)in Ubuntu 10.04.But the authentication process was not success. It was always Access-Reject result. then i followed the website http://www.freesoftwaremagazine.com/articles/howto_incremental_setup_freera… i do the step 4 in the above website,but it still does not work. do some radius configuration files(eg. eap.conf or radiusd.conf) need more modification ? Can anyone help me?Thanks! some important debug informations or file are below for eapol_test(PAP, user name is bob,his password is passbob,the secret is testing123,and the test is localhost environment): *(freeradius server terminal)* # radiusd -X ... adding new socket proxy address * port 48094 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /usr/local/var/run/radiusd/radiusd.sock Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 44726, id=0, length=126 User-Name = "anonymous" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x0200000e01616e6f6e796d6f7573 Message-Authenticator = 0x2f6860f96c26a5453d21db9125aff4e8 # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "anonymous", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 0 length 14 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[files] returns noop [sql] expand: %{User-Name} -> anonymous [sql] sql_set_user escaped user --> 'anonymous' rlm_sql (sql): Reserving sql socket id: 4 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'anonymous' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'anonymous' ORDER BY priority rlm_sql (sql): Released sql socket id: 4 [sql] User anonymous not found ++[sql] returns notfound ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = EAP # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group authenticate {...} [eap] EAP Identity [eap] processing type md5 rlm_eap_md5: Issuing Challenge ++[eap] returns handled Sending Access-Challenge of id 0 to 127.0.0.1 port 44726 EAP-Message = 0x01010016041031c544638527529b08c013be38035e82 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xb81e5489b81f50a4b2d4f9c388430583 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 44726, id=1, length=136 User-Name = "anonymous" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020100060315 State = 0xb81e5489b81f50a4b2d4f9c388430583 Message-Authenticator = 0xbd1047623d98324569e98d518045db81 # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "anonymous", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 1 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[files] returns noop [sql] expand: %{User-Name} -> anonymous [sql] sql_set_user escaped user --> 'anonymous' rlm_sql (sql): Reserving sql socket id: 3 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'anonymous' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'anonymous' ORDER BY priority rlm_sql (sql): Released sql socket id: 3 [sql] User anonymous not found ++[sql] returns notfound ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = EAP # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP NAK [eap] NAK asked for unsupported type EAP-TTLS [eap] No common EAP types found. [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. Using Post-Auth-Type Reject # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> anonymous attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 1 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 1 Sending Access-Reject of id 1 to 127.0.0.1 port 44726 EAP-Message = 0x04010004 Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 3.9 seconds. Cleaning up request 0 ID 0 with timestamp +3 Waking up in 1.0 seconds. Cleaning up request 1 ID 1 with timestamp +3 Ready to process requests. *(eapol_test terminal)* # eapol_test -c eapol_test.conf.pap -s testing123 Reading configuration file 'eapol_test.conf.peap' Line: 4 - start of a new network block key_mgmt: 0x1 eap methods - hexdump(len=16): 00 00 00 00 15 00 00 00 00 00 00 00 00 00 00 00 identity - hexdump_ascii(len=3): 62 6f 62 bob anonymous_identity - hexdump_ascii(len=9): 61 6e 6f 6e 79 6d 6f 75 73 anonymous password - hexdump_ascii(len=7): 70 61 73 73 62 6f 62 passbob phase2 - hexdump_ascii(len=8): 61 75 74 68 3d 50 41 50 auth=PAP Priority group 0 id=0 ssid='' Authentication server 127.0.0.1:1812 RADIUS local address: 127.0.0.1:34535 EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: KEY_RX entering state NO_KEY_RECEIVE EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portValid=0 EAPOL: External notification - portEnabled=1 EAPOL: SUPP_PAE entering state CONNECTING EAPOL: SUPP_BE entering state IDLE EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE Sending fake EAP-Request-Identity EAPOL: Received EAP-Packet frame EAPOL: SUPP_PAE entering state RESTART EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE EAPOL: SUPP_PAE entering state AUTHENTICATING EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=0 method=1 vendor=0 vendorMethod=0 EAP: EAP entering state IDENTITY CTRL-EVENT-EAP-STARTED EAP authentication started EAP: EAP-Request Identity data - hexdump_ascii(len=0): EAP: using anonymous identity - hexdump_ascii(len=9): 61 6e 6f 6e 79 6d 6f 75 73 anonymous EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=14) TX EAP -> RADIUS - hexdump(len=14): 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73 Encapsulating EAP message into a RADIUS packet Learned identity from EAP-Response-Identity - hexdump(len=9): 61 6e 6f 6e 79 6d 6f 75 73 Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=0 length=126 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=16 Value: 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73 Attribute 80 (Message-Authenticator) length=18 Value: c6 18 63 bf 04 9d aa 99 df 2b e6 ae dc 9a 4f 62 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 80 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=0 length=80 Attribute 79 (EAP-Message) length=24 Value: 01 01 00 16 04 10 71 fc 64 70 75 ac c6 10 c6 0a 4d e8 01 aa 41 ee Attribute 80 (Message-Authenticator) length=18 Value: d4 96 61 25 98 3c f3 94 58 65 88 46 9e fd 94 03 Attribute 24 (State) length=18 Value: f1 f3 cc a8 f1 f2 c8 96 aa 0e f0 55 a4 56 38 89 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=1 len=22) from RADIUS server: EAP-Request-MD5 (4) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=1 method=4 vendor=0 vendorMethod=0 EAP: EAP entering state GET_METHOD EAP: configuration does not allow: vendor 0 method 4 EAP: vendor 0 method 4 not allowed CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK EAP: Status notification: refuse proposed method (param=MD5) EAP: Building EAP-Nak (requested type 4 vendor=0 method=0 not allowed) EAP: allowed methods - hexdump(len=1): 15 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 01 00 06 03 15 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=1 length=136 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 02 01 00 06 03 15 Attribute 24 (State) length=18 Value: f1 f3 cc a8 f1 f2 c8 96 aa 0e f0 55 a4 56 38 89 Attribute 80 (Message-Authenticator) length=18 Value: 67 47 36 e8 38 3e 60 c6 cd 13 e5 02 76 cb 50 f8 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 44 bytes from RADIUS server Received RADIUS message RADIUS message: code=3 (Access-Reject) identifier=1 length=44 Attribute 79 (EAP-Message) length=6 Value: 04 01 00 04 Attribute 80 (Message-Authenticator) length=18 Value: ff 62 f1 59 12 84 99 e4 65 8a 03 00 53 97 b9 6b STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.00 sec RADIUS packet matching with station decapsulated EAP packet (code=4 id=1 len=4) from RADIUS server: EAP Failure EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Failure EAP: Status notification: completion (param=failure) EAP: EAP entering state FAILURE CTRL-EVENT-EAP-FAILURE EAP authentication failed EAPOL: SUPP_PAE entering state HELD EAPOL: SUPP_BE entering state RECEIVE EAPOL: SUPP_BE entering state FAIL EAPOL: SUPP_BE entering state IDLE eapol_sm_cb: success=0 EAPOL: EAP key not available MPPE keys OK: 0 mismatch: 1 FAILURE root@lsc-desktop:/opt/wpa_supplicant-2.0/wpa_supplicant# eapol_test -c eapol_test.conf.peap -s testing123 Reading configuration file 'eapol_test.conf.peap' Line: 4 - start of a new network block key_mgmt: 0x1 eap methods - hexdump(len=16): 00 00 00 00 15 00 00 00 00 00 00 00 00 00 00 00 identity - hexdump_ascii(len=3): 62 6f 62 bob anonymous_identity - hexdump_ascii(len=9): 61 6e 6f 6e 79 6d 6f 75 73 anonymous password - hexdump_ascii(len=7): 70 61 73 73 62 6f 62 passbob phase2 - hexdump_ascii(len=8): 61 75 74 68 3d 50 41 50 auth=PAP Priority group 0 id=0 ssid='' Authentication server 127.0.0.1:1812 RADIUS local address: 127.0.0.1:44726 EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: KEY_RX entering state NO_KEY_RECEIVE EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portValid=0 EAPOL: External notification - portEnabled=1 EAPOL: SUPP_PAE entering state CONNECTING EAPOL: SUPP_BE entering state IDLE EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE Sending fake EAP-Request-Identity EAPOL: Received EAP-Packet frame EAPOL: SUPP_PAE entering state RESTART EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE EAPOL: SUPP_PAE entering state AUTHENTICATING EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=0 method=1 vendor=0 vendorMethod=0 EAP: EAP entering state IDENTITY CTRL-EVENT-EAP-STARTED EAP authentication started EAP: EAP-Request Identity data - hexdump_ascii(len=0): EAP: using anonymous identity - hexdump_ascii(len=9): 61 6e 6f 6e 79 6d 6f 75 73 anonymous EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=14) TX EAP -> RADIUS - hexdump(len=14): 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73 Encapsulating EAP message into a RADIUS packet Learned identity from EAP-Response-Identity - hexdump(len=9): 61 6e 6f 6e 79 6d 6f 75 73 Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=0 length=126 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=16 Value: 02 00 00 0e 01 61 6e 6f 6e 79 6d 6f 75 73 Attribute 80 (Message-Authenticator) length=18 Value: 2f 68 60 f9 6c 26 a5 45 3d 21 db 91 25 af f4 e8 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 80 bytes from RADIUS server Received RADIUS message RADIUS message: code=11 (Access-Challenge) identifier=0 length=80 Attribute 79 (EAP-Message) length=24 Value: 01 01 00 16 04 10 31 c5 44 63 85 27 52 9b 08 c0 13 be 38 03 5e 82 Attribute 80 (Message-Authenticator) length=18 Value: b9 f5 cb c9 84 1d 02 3c 4f 4e 6e ef b2 d8 a7 dd Attribute 24 (State) length=18 Value: b8 1e 54 89 b8 1f 50 a4 b2 d4 f9 c3 88 43 05 83 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.00 sec RADIUS packet matching with station decapsulated EAP packet (code=1 id=1 len=22) from RADIUS server: EAP-Request-MD5 (4) EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=1 method=4 vendor=0 vendorMethod=0 EAP: EAP entering state GET_METHOD EAP: configuration does not allow: vendor 0 method 4 EAP: vendor 0 method 4 not allowed CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK EAP: Status notification: refuse proposed method (param=MD5) EAP: Building EAP-Nak (requested type 4 vendor=0 method=0 not allowed) EAP: allowed methods - hexdump(len=1): 15 EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=6) TX EAP -> RADIUS - hexdump(len=6): 02 01 00 06 03 15 Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=1 length=136 Attribute 1 (User-Name) length=11 Value: 'anonymous' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=8 Value: 02 01 00 06 03 15 Attribute 24 (State) length=18 Value: b8 1e 54 89 b8 1f 50 a4 b2 d4 f9 c3 88 43 05 83 Attribute 80 (Message-Authenticator) length=18 Value: bd 10 47 62 3d 98 32 45 69 e9 8d 51 80 45 db 81 Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 44 bytes from RADIUS server Received RADIUS message RADIUS message: code=3 (Access-Reject) identifier=1 length=44 Attribute 79 (EAP-Message) length=6 Value: 04 01 00 04 Attribute 80 (Message-Authenticator) length=18 Value: 03 3b 7f f7 84 de 2c 69 6c 2f fe 4c fd 4e 92 f0 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.00 sec RADIUS packet matching with station decapsulated EAP packet (code=4 id=1 len=4) from RADIUS server: EAP Failure EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Failure EAP: Status notification: completion (param=failure) EAP: EAP entering state FAILURE CTRL-EVENT-EAP-FAILURE EAP authentication failed EAPOL: SUPP_PAE entering state HELD EAPOL: SUPP_BE entering state RECEIVE EAPOL: SUPP_BE entering state FAIL EAPOL: SUPP_BE entering state IDLE eapol_sm_cb: success=0 EAPOL: EAP key not available MPPE keys OK: 0 mismatch: 1 FAILURE *eapol_test.conf.pap file:* # # eapol_test -c eapol_test.conf.pap -s testing123 # network={ key_mgmt=WPA-EAP eap=TTLS identity="bob" anonymous_identity="anonymous" password="passbob" phase2="auth=PAP" # # Uncomment the following to perform server certificate validation. # ca_cert = /usr/local/etc/raddb/certs/ca.pem } two more question : 1.during the above process ,my /usr/local/var/log/radius.log is empty.why? 2.the user is bob,but in the radiusd -X debug information, it is < User-Name = "anonymous">.But if i uncomment the <anonymous_identity="anonymous">in the *eapol_test.conf.pap file, *it will change to be < User-Name = "bob">,so why? Thanks a lot !

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 07 Nov '13

07 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add the efficient IP vendor dictionary Some guy sent over the ACS definitions, so why not... Arran Cudbard-Bell@2013-11-07T16:43:44Z Files modified: * share/dictionary * share/dictionary.efficientip Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e842a696164e48858248… ====== -- This commit summary was generated @2013-11-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 07 Nov '13

07 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More docs Alan T. DeKok@2013-11-07T20:01:14Z Files modified: * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5247e92c57e3fb000be2… ====== Add example of limit section copied from "default" Alan T. DeKok@2013-11-07T18:44:01Z Files modified: * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1ad9350dbc82a0b36b5… ====== Write until we write all of the data Alan T. DeKok@2013-11-07T01:18:12Z Files modified: * src/modules/proto_bfd/bfd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c93751388d4a9049675f… ====== More sanity checks when reading packets To keep Coverity happy Alan T. DeKok@2013-11-07T00:58:32Z Files modified: * src/modules/proto_bfd/bfd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fe116ba3fef2f5acd2d… ====== -- This commit summary was generated @2013-11-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 07 Nov '13

07 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More docs Alan T. DeKok@2013-11-07T18:52:01Z Files modified: * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/abcf2a375913d0977e89… ====== Add example of limit section copied from "default" Alan T. DeKok@2013-11-07T18:43:40Z Files modified: * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cbde2cbb287b32ec6903… ====== -- This commit summary was generated @2013-11-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 06 Nov '13

06 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add the efficient IP vendor dictionary Some guy sent over the ACS definitions, so why not... Arran Cudbard-Bell@2013-11-06T18:39:44Z Files modified: * share/dictionary * share/dictionary.efficientip Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8cfe45b502bfb4262274… ====== -- This commit summary was generated @2013-11-07T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 06 Nov '13

06 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make listen types dynamically allocated for new protocols. Existing protocols are still hard-coded Alan T. DeKok@2013-11-06T19:38:39Z Files modified: * share/dictionary.freeradius.internal * src/include/radiusd.h * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d7854d8a81d8ca507a2… ====== vqp -> vmps Alan T. DeKok@2013-11-06T19:38:39Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72196c5f09036ea6d3f0… ====== Add the efficient IP vendor dictionary Some guy sent over the ACS definitions, so why not... Arran Cudbard-Bell@2013-11-06T18:38:13Z Files modified: * share/dictionary * share/dictionary.efficientip Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d89e553f3b9b9ebf6f24… ====== Merge pull request #469 from jdenoy/master fix NAS-Port-Id sql error Arran Cudbard-Bell@2013-11-06T16:42:50Z Files modified: * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/mysql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb3816c448f1ec158755… ====== fix NAS-Port-Id sql error queries.conf : NAS-Port-Id not updated correctly in mysql because the value inserted was %{NAS-Port} instead of %{NAS-Port-Id} (if sent by NAS) or %{NAS-Port} (if NAS-Port-Id not sent by NAS) schema.sql : altered column nasportid from varchar(15) to varchar(50) to allow bigger NAS-Port-ID information (maximum from RFC 2869 is 253 octets, but 50 should be enough) Johan Denoyer@2013-11-06T16:37:00Z Files modified: * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/mysql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00db818f05e67c4b8860… ====== -- This commit summary was generated @2013-11-07T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 05 Nov '13

05 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Rename gettime to fr_get_time and move into misc.c Arran Cudbard-Bell@2013-11-05T13:29:49Z Files modified: * src/include/libradius.h * src/lib/misc.c * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee058519d27e865178f3… ====== Useful to have this Alan T. DeKok@2013-11-05T03:19:37Z Files modified: * share/dictionary.alcatel-lucent.aaa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/894d2848107eb3048ea2… ====== As sent via email Alan T. DeKok@2013-11-05T03:19:03Z Files modified: * share/dictionary Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1f0de2b7a839d221c53… ====== -- This commit summary was generated @2013-11-06T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 05 Nov '13

05 Nov '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update license Alan T. DeKok@2013-11-05T22:39:07Z Files modified: * src/modules/proto_bfd/bfd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1651146368444bb81c01… ====== Fix use of sizeof() Alan T. DeKok@2013-11-05T21:38:08Z Files modified: * src/modules/proto_bfd/bfd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/832dcda58b3099c6a711… ====== Don't allocate things on -C Alan T. DeKok@2013-11-05T21:32:53Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa5821aa20c3b27115e3… ====== First pass at making all protocols dynamically loadable. Alan T. DeKok@2013-11-05T21:27:43Z Files modified: * share/dictionary.freeradius.internal * src/include/radiusd.h * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/271d04eb587c5a7db617… ====== Need this, too Alan T. DeKok@2013-11-05T21:15:37Z Files modified: * src/modules/proto_bfd/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0bc39207dee7b855396d… ====== Added bidirectional forwarding detection (RFC 5880) Alan T. DeKok@2013-11-05T21:05:47Z Files modified: * raddb/sites-available/bfd * src/include/features-h * src/include/radiusd.h * src/main/listen.c * src/modules/proto_bfd/bfd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/44b88a63234050b187fb… ====== Add status Arran Cudbard-Bell@2013-11-05T19:12:04Z Files modified: * debian/freeradius.init Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e85431df305b6468c971… ====== Merge pull request #467 from arturmalinowski/master Date formatting module Arran Cudbard-Bell@2013-11-05T17:48:41Z Files modified: * raddb/mods-available/date * share/dictionary.freeradius.internal * src/modules/rlm_date/all.mk * src/modules/rlm_date/rlm_date.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dce85f55a1d868a7941a… ====== Date formatting module Artur Malinowski@2013-11-05T17:37:45Z Files modified: * raddb/mods-available/date * share/dictionary.freeradius.internal * src/modules/rlm_date/all.mk * src/modules/rlm_date/rlm_date.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0e63bdd23e8705256ef… ====== Rename gettime to fr_get_time and move into misc.c Arran Cudbard-Bell@2013-11-05T13:28:37Z Files modified: * src/include/libradius.h * src/lib/misc.c * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5589722a99ae82dc969… ====== Useful to have this Alan T. DeKok@2013-11-05T03:19:55Z Files modified: * share/dictionary.alcatel-lucent.aaa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aefc6d5744cd8a2265e0… ====== As sent via email Alan T. DeKok@2013-11-05T03:19:54Z Files modified: * share/dictionary Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1daeab4b758ef068dc4b… ====== -- This commit summary was generated @2013-11-06T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0