February 2013 - Freeradius-Devel - lists.freeradius.org

Commit report for v2.x.x branch
by announce＠freeradius.org 18 Feb '13

18 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Note recent changes Alan T. DeKok@2013-02-18T20:14:10Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97cba57751abb4d77eba… ====== Free modules before main config Now that the modules are cleaned up correctly Alan T. DeKok@2013-02-18T20:07:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8ff8b8b5c9df161eb5d… ====== Call cf_section_parse_free before freeing sub-modules Alan T. DeKok@2013-02-18T20:07:12Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/15b02b937a42bcd2ec85… ====== No longer need to free conf file stuff manually. Alan T. DeKok@2013-02-18T20:07:04Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c9333d89d516fef52d5a… ====== Call cf_section_parse_free before calling the module detach Alan T. DeKok@2013-02-18T20:05:34Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/923b6bdcc2943e91df59… ====== cf_section_parse_free() recurses into sub-sections Alan T. DeKok@2013-02-18T20:05:20Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a77268b32d944fd0fa2… ====== One more check for size > 253 Alan T. DeKok@2013-02-18T19:34:36Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8720e14ab425ecaff56d… ====== Check Ascend Secret length Alan T. DeKok@2013-02-18T19:32:55Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f0c1e7a13e1d4db5763… ====== Free tlv on error condition Alan T. DeKok@2013-02-18T19:25:24Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/71cad0a09d5c6e2a8e0c… ====== mypriority can be -1, too Alan T. DeKok@2013-02-18T15:17:33Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/65b7cd5f01d80b6e15f4… ====== -- This commit summary was generated @2013-02-19T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 18 Feb '13

18 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Older systems don't have strlcpy Alan T. DeKok@2013-02-18T22:15:05Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98d39b2fe150c5b36a7a… ====== Don't free config data manually. Alan T. DeKok@2013-02-18T22:15:04Z Files modified: * src/modules/rlm_sqlcounter/rlm_sqlcounter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/933cb7915c253902e225… ====== Set vp_strvalue to NULL if the pair is marked for xlat Arran Cudbard-Bell@2013-02-18T20:14:54Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ffafa2d38c504e0b913… ====== Call cf_section_parse_free before freeing sub-modules Alan T. DeKok@2013-02-18T20:02:43Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/323f69076d0672f41e2e… ====== No longer need to free conf file stuff manually. Alan T. DeKok@2013-02-18T20:02:15Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eef14e1e6dd68bff87bd… ====== Call cf_section_parse_free before calling the module detach Alan T. DeKok@2013-02-18T20:01:56Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6a62dadb238bbd6ab19e… ====== cf_section_parse_free() recurses into sub-sections Alan T. DeKok@2013-02-18T20:01:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba044534e3efa8faf57a… ====== Fix coverity errors Alan T. DeKok@2013-02-18T19:31:57Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e7df356f97da46855cc… ====== Unlock mutex when we find a matching connection Alan T. DeKok@2013-02-18T19:31:57Z Files modified: * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84fa208a76fc6415d4e5… ====== Free newfd on error Alan T. DeKok@2013-02-18T19:31:57Z Files modified: * src/lib/tcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d300674a738f5c31b8d8… ====== Free correct VP Alan T. DeKok@2013-02-18T19:31:57Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/152071b09c27e8817a92… ====== One more check for size > 253 Alan T. DeKok@2013-02-18T19:31:57Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/caffb59352261c6478bc… ====== Add empty field to struct Alan T. DeKok@2013-02-18T19:31:56Z Files modified: * src/modules/rlm_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/283472f3735ed9eaa0bf… ====== Fix for coverity (missed mutex free) Arran Cudbard-Bell@2013-02-18T19:03:56Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff753daca9d46d6d7b33… ====== More debug macros DEBUGE, DEBUGW, for errors / warnings. RDEBUG*, too. This lets the errors and warnings have a common format, so that the messages don't need to use an explicit "WARNING" string. It also means that they are now colorized: warning = bold + yellow error = bold + red This should hopefully help people who have issues reading the debug output Alan T. DeKok@2013-02-18T18:18:55Z Files modified: * src/include/radiusd.h * src/main/auth.c * src/main/client.c * src/main/command.c * src/main/conffile.c * src/main/detail.c * src/main/evaluate.c * src/main/listen.c * src/main/log.c * src/main/modcall.c * src/main/modules.c * src/main/process.c * src/main/realms.c * src/main/tls.c * src/main/tls_listen.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_dhcp/rlm_dhcp.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/mem.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_radutmp/rlm_radutmp2.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_wimax/rlm_wimax.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0096dafa85bd488efa62… ====== Turn colorize off only if it was one Alan T. DeKok@2013-02-18T18:18:55Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fa07dd2611533680b26… ====== Check return code of pairmark_xlat Arran Cudbard-Bell@2013-02-18T17:45:22Z Files modified: * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d0a7422614a9238d074… ====== Whitespace fixes Arran Cudbard-Bell@2013-02-18T17:45:07Z Files modified: * src/main/evaluate.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/65853e5d2bec71e214e6… ====== value.xlat should be set to NULL after being freed Arran Cudbard-Bell@2013-02-18T17:33:47Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa2cc787f31a5c0a0e9b… ====== Simplify copying of xlat value Alan T. DeKok@2013-02-18T17:31:21Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/186594ebe62985322e75… ====== Remove L_CONS Alan T. DeKok@2013-02-18T17:31:21Z Files modified: * src/include/radiusd.h * src/main/conffile.c * src/main/exec.c * src/main/files.c * src/main/log.c * src/main/modcall.c * src/main/radiusd.c * src/main/realms.c * src/main/session.c * src/modules/rlm_always/rlm_always.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap2/rlm_eap2.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_otp/otp_util.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_securid/rlm_securid.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sometimes/rlm_sometimes.c * src/modules/rlm_sql/drivers/rlm_sql_iodbc/rlm_sql_iodbc.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f37440e79263e5e6c8e5… ====== Remove redundant checks for colourisation Arran Cudbard-Bell@2013-02-18T17:29:50Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/83d955042f743bf683ec… ====== Check whether it's appropriate to output colourised log messages Arran Cudbard-Bell@2013-02-18T16:42:09Z Files modified: * raddb/radiusd.conf.in * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d4790f23dcaaf8e38076… ====== Quick hack for colourising log output to stderr/stdout Arran Cudbard-Bell@2013-02-18T09:02:46Z Files modified: * raddb/radiusd.conf.in * src/include/radiusd.h * src/main/log.c * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6943ea14f1a76933b032… ====== Write newline on buffer truncation too Arran Cudbard-Bell@2013-02-18T08:49:51Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4b2de0cfbd9b9c4ec2f… ====== -- This commit summary was generated @2013-02-19T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Add Attribute inside an Module by Patrick85
by Patrick Ko 18 Feb '13

18 Feb '13

Hello Phil, thanks for your fast Reply. If I add the following the the dictonairy File I got it working: ATTRIBUTE WebPage 4001 string But now I got another Question ;) Why did I not see this Value in the Acces-Dump ? DUMP OF RADIUS PACKET (Net::Radius::Packet=HASH(0x8345f30)) Code: Access-Accept Identifier: 0 Authentic: ... Attributes: Framed-Protocol: PPP Service-Type: Framed END DUMP

2 2

Add Attribute inside an Module
by Patrick Ko 18 Feb '13

18 Feb '13

Hello everybody is it possible to add inside from a Module an Attribute. I have included an C-Modul to my freeradis which works! Now i want do add an individual Attribute like, "Web-Page" = "www.google.de" Which also works it's to change the Attribute-Value if the "State" Attribute, but I also want to have antoher Name like "State". VALUE_PAIR *reply; reply = pairmake("*State*", "*Hello State*", T_OP_EQ); pairadd(&request->reply->vps, reply); This works fine, but If now I want to add an individual Attribute it doens't work. VALUE_PAIR *reply; reply = pairmake("*Web_page*", "*www.google.de*", T_OP_EQ); pairadd(&request->reply->vps, reply); Did everyone know what did I made wrong and could help me please ? Thanks, Greetz Patrick

2 3

Commit report for master branch
by announce＠freeradius.org 17 Feb '13

17 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Be explicit about why were not building rlm_rest Arran Cudbard-Bell@2013-02-17T21:55:11Z Files modified: * src/modules/rlm_rest/configure * src/modules/rlm_rest/configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a9039c6a2555f7e4093… ====== Update autoconf.h.in Arran Cudbard-Bell@2013-02-17T21:45:15Z Files modified: * src/include/autoconf.h.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6b7e8f6594602b5aa474… ====== Check for libcurl >= 17.9.1 Disable definitions for ancient code depending on libcurl Arran Cudbard-Bell@2013-02-17T21:45:15Z Files modified: * src/modules/rlm_rest/configure * src/modules/rlm_rest/configure.in * src/modules/rlm_rest/rest.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e31d57ae947785dea5ee… ====== dir can't be NULL Alan T. DeKok@2013-02-17T21:38:52Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb53413fc918049a2491… ====== Check pointers before using them Alan T. DeKok@2013-02-17T21:37:32Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ce5c62d41dd921e83de… ====== Check length of ascend secrets Alan T. DeKok@2013-02-17T21:35:22Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5cea200145a381064cff… ====== Remove finger functionality from radwho. No one uses it (or should) Alan T. DeKok@2013-02-17T21:22:30Z Files modified: * man/man1/radwho.1 * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7d9e39991f505a65d09e… ====== Check for NULL before incrementing Alan T. DeKok@2013-02-17T21:19:03Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e731205fd21eb8534d17… ====== Check array[0], not array Alan T. DeKok@2013-02-17T21:16:18Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c009f3b4890c0b7f956… ====== Error if the dictionaries weren't initialized Alan T. DeKok@2013-02-17T21:15:25Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10f7b6463ead59d654a2… ====== Correct args to memset Alan T. DeKok@2013-02-17T21:14:22Z Files modified: * src/modules/rlm_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ead7a00c9376c3b6932… ====== Use strlcpy instead of strcpy Alan T. DeKok@2013-02-17T21:13:19Z Files modified: * src/modules/rlm_mschap/smbencrypt.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b49c9e223f0893248f7… ====== Use sizeof instead of strlen Alan T. DeKok@2013-02-17T21:12:32Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6f6cec324ec9d4f7e95… ====== Return on error Alan T. DeKok@2013-02-17T21:11:31Z Files modified: * src/lib/tcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d53bb68b1dc9e169d10b… ====== EOL is EOL Alan T. DeKok@2013-02-17T21:09:16Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8847b3b9073b605da2c9… ====== EOL is EOL Alan T. DeKok@2013-02-17T21:06:49Z Files modified: * src/include/base64.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59f270b46e7273bb9440… ====== Fix build error Alan T. DeKok@2013-02-17T21:00:15Z Files modified: * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56e4d2e36b806fc1ec73… ====== d_namlen is BSD, not posix Alan T. DeKok@2013-02-17T20:52:05Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cac4dd549c3f258d6f50… ====== Fix for coverity (printf of non null terminated string) Arran Cudbard-Bell@2013-02-17T20:41:20Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/098e1103ec3f7b3f161a… ====== Clean up and sanitize pairread() Should fix a number of coverity issues Alan T. DeKok@2013-02-17T20:37:29Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ac7a8091a8c90b2080c8… ====== Fix for coverity (potential buffer overflow in radlog_request) Arran Cudbard-Bell@2013-02-17T20:23:43Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b1083ae919bd7bc1de4… ====== Fix race condition in conf file Closes Coverity #720457 Alan T. DeKok@2013-02-17T19:32:03Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7632754dab591a26b8a6… ====== Fix typo Alan T. DeKok@2013-02-17T19:30:39Z Files modified: * src/modules/rlm_otp/otp_radstate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/612feb2ca22e061c1767… ====== Check for =~ and !~ Fixes Coverity #982075 Alan T. DeKok@2013-02-17T19:24:10Z Files modified: * src/modules/rlm_expr/paircmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/770d15d95dd2d5408eaa… ====== Check for no challenge/response in packet Closes Coverity #720480 Alan T. DeKok@2013-02-17T19:23:00Z Files modified: * src/modules/rlm_otp/otp_mppe.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a596c76d59f86473d5b6… ====== Remove unused variables Alan T. DeKok@2013-02-17T19:23:00Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/832f93ced43743bc7e36… ====== Remove unused variable Alan T. DeKok@2013-02-17T19:23:00Z Files modified: * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3d72b7c772b2755a139… ====== Fix for coverity (redundant default statement) Arran Cudbard-Bell@2013-02-17T19:12:52Z Files modified: * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fbecea6756016f3ef651… ====== Fix for coverity (redundant condition) Arran Cudbard-Bell@2013-02-17T19:10:36Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c219f1699c50f7733270… ====== Fix for coverity (duplicate case statements) Arran Cudbard-Bell@2013-02-17T19:07:38Z Files modified: * src/main/acct.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2029c2d5a14e503c3bba… ====== Fix for coverity (remove redundant default statement) Arran Cudbard-Bell@2013-02-17T19:04:15Z Files modified: * src/lib/filters.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/68d25bb44c2280f29bf3… ====== Output proper error messages for prthread_setspecific failure in rlm_perl.c and lib/log.c Arran Cudbard-Bell@2013-02-17T19:02:59Z Files modified: * src/lib/log.c * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1e3d3d20ee161a7f09c3… ====== Fix for coverity (verify we parsed the proxy config section ok) Arran Cudbard-Bell@2013-02-17T18:53:50Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82395d4dd28b4af8bea6… ====== Fix for covertiy Arran Cudbard-Bell@2013-02-17T18:49:57Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/17a4a389bce8aea4bf99… ====== Fix for coverity (check setsockopt in listen.c) Arran Cudbard-Bell@2013-02-17T18:48:31Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef8306e091e2fa104671… ====== Fix for coverity (check return of ip_hton in detail.c) Arran Cudbard-Bell@2013-02-17T18:41:00Z Files modified: * src/main/detail.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c53bbff9685fb051dcce… ====== Check return code of dup() Closes Coverity #720380, 81, 82 Alan T. DeKok@2013-02-17T18:21:31Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c0a721f842216058097… ====== Don't check array for existence. Closes Coverity #720384 Alan T. DeKok@2013-02-17T18:21:31Z Files modified: * src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4dd0b168c4fea9c1c1a5… ====== Don't check an array for existence Closes Coverity #720389 Alan T. DeKok@2013-02-17T18:21:31Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfc45c05af3f39462950… ====== Fix for coverity (bail if we can't stat the file in detail_recv) Arran Cudbard-Bell@2013-02-17T18:17:37Z Files modified: * src/main/detail.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fccbe02926a506bced3b… ====== Fix for coverity (more radrecv stuff) Arran Cudbard-Bell@2013-02-17T18:17:36Z Files modified: * src/lib/vqp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a888bada6b5a43b669fb… ====== Fix for coverity Arran Cudbard-Bell@2013-02-17T18:17:36Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bb9dfc704c80efed9b2… ====== Use strlcpy, and check sizeof module name Closes Covierty #720447 Alan T. DeKok@2013-02-17T18:12:34Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef206734051919569f79… ====== Use strlcpy Alan T. DeKok@2013-02-17T18:12:34Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5148102e2cbc4ed3f4a… ====== Fail safely if the directory exists in rad_mkdir Maybe another thread is making the directory. If so, it's OK Closes Coverity #720459 Alan T. DeKok@2013-02-17T18:12:33Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be1cb3220b42cc71129b… ====== Initialize IPaddr Closes Coverity #720462 Alan T. DeKok@2013-02-17T18:12:33Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd22b98fbc41550d0af4… ====== Sign error Closes Coverity #720436 Alan T. DeKok@2013-02-17T18:12:32Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df26f8e3092b4b2d9812… ====== Clear memory using correct size Closes Coverity #720439, 40, 41 Alan T. DeKok@2013-02-17T18:12:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c4090f6fb22bb65f3b3… ====== Don't expand variables if cs==NULL Closes Coverity #720373 Alan T. DeKok@2013-02-17T18:12:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fff985ef94b3dddf009d… ====== Fix for coverity (don't need to check recvfrom return in rad_recv_discard) Arran Cudbard-Bell@2013-02-17T18:06:27Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/acb0e4f38da4d68c0ae3… ====== Fix for coverity (check return value of setsockopt) Arran Cudbard-Bell@2013-02-17T18:00:19Z Files modified: * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a85825bf328e7c18e60d… ====== Fix for coverity Arran Cudbard-Bell@2013-02-17T18:00:18Z Files modified: * src/lib/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/17cab809506a036384c1… ====== Remove dead code Closes Coverity #982076 Alan T. DeKok@2013-02-17T17:40:32Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a77d3f53e3bc9d8027a3… ====== Remove dead code. Closes Coverity #982077 Alan T. DeKok@2013-02-17T17:40:32Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c19336641925e3cfd8c8… ====== Use correct flag for check Closes Coverity #982078 Alan T. DeKok@2013-02-17T17:40:32Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb8ad4bf91dac9b0452b… ====== Don't free data returned from gdbm_fetch Closes Coverity #982067, 982068, 982069 Alan T. DeKok@2013-02-17T17:40:32Z Files modified: * src/modules/rlm_ippool/rlm_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1cc2f03df968dbb83938… ====== Remove dead code. Closes Coverity #982080, 982079 Alan T. DeKok@2013-02-17T17:40:32Z Files modified: * src/modules/rlm_ippool/rlm_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f04478426b17856ad696… ====== Check for NULL da. Only if dictionary files are broken. Closes Coverity #982081 Alan T. DeKok@2013-02-17T17:40:31Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd769d812e24d13b1a5c… ====== value may be NULL. Only for admin mistake. Closes Coverity #982082 Alan T. DeKok@2013-02-17T17:40:31Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20f742385b733860352e… ====== Check for NULL. Closes Coverity #982083 (false positive) Alan T. DeKok@2013-02-17T17:40:31Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e84e123c05efcabbb847… ====== Limit attrlen to 128K. Closes Coverity #982085 Alan T. DeKok@2013-02-17T17:40:31Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/91a9f1cfa530e5efb80e… ====== Fix for coverity Arran Cudbard-Bell@2013-02-17T17:39:09Z Files modified: * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5696d1fb433ec3763446… ====== Fix for coverity Arran Cudbard-Bell@2013-02-17T17:35:40Z Files modified: * src/modules/rlm_radutmp/rlm_radutmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8281a5a3b7e14d5b3635… ====== Fix for coverity Arran Cudbard-Bell@2013-02-17T17:27:01Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/83e49a1650032f04d3a1… ====== Fix for coverity Arran Cudbard-Bell@2013-02-17T17:23:09Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f62f2cda675e037155d… ====== Fix for coverity (don't segv if the ruby function returns an array during intiialisation) Arran Cudbard-Bell@2013-02-17T17:17:12Z Files modified: * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a4b978a3a2a216145178… ====== Fix for coverity (assign return from recvfrom to a local signed variable so we can check for error conditions) Arran Cudbard-Bell@2013-02-17T16:58:22Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5fd9379b53d992e37c9… ====== Unlock on error Closes Coverity #982086 Alan T. DeKok@2013-02-17T16:44:06Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06f8f31406011a683c4b… ====== Add missing break Closes Coverity #982087 Alan T. DeKok@2013-02-17T16:44:06Z Files modified: * src/modules/rlm_dbm/rlm_dbm_parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42e4d3f8f4106dde0096… ====== Add missing break Closes Coverity #982088 Alan T. DeKok@2013-02-17T16:44:06Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d21249cdc0a3c6fa24af… ====== Note fall-through Closes Coverity #982089 Alan T. DeKok@2013-02-17T16:44:06Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3e46e68c4009c95863b… ====== Add missing break closes Coverity #982090 Alan T. DeKok@2013-02-17T16:44:06Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b24bded5a3698cace087… ====== Remove unnecessary check Closes Coverity #982093 Alan T. DeKok@2013-02-17T16:44:05Z Files modified: * src/modules/rlm_counter/rlm_counter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/24c3fbff4b37bfebdde9… ====== Use sizeof(struct) not sizeof(*struct) Closes Coverity #982094 Alan T. DeKok@2013-02-17T16:44:05Z Files modified: * src/modules/rlm_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be2b69a0a88f7b39ecd8… ====== There's no need to memset data to zero Closes Coverity #982095 Alan T. DeKok@2013-02-17T16:44:05Z Files modified: * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f31806e62c31860e52f6… ====== Check size of raw attributes in TTLS Closes Coverity #982096 Alan T. DeKok@2013-02-17T16:44:05Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8079cb3ae0dfb41635d4… ====== Free vp on error Closes Coverity #982097 Alan T. DeKok@2013-02-17T16:44:05Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da3cef52927de4db7b4e… ====== Fix for coverity (check return value of cf_section_parse) Arran Cudbard-Bell@2013-02-17T05:15:17Z Files modified: * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a56a79b379b851985b3f… ====== Fix for coverity (potential segv for very long libpaths in run_mode) Arran Cudbard-Bell@2013-02-17T05:06:58Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/153acd39b134e124d81d… ====== Fix for coverity (potential segv for argument names over 49 bytes in jlibtool) Arran Cudbard-Bell@2013-02-17T05:01:53Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6694d004a789fdd26ab… ====== Fix for coverity (fix potential buffer overflow in cleanup_tmp_dir) Arran Cudbard-Bell@2013-02-17T04:58:28Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3f89fc68cb4ba022925c… ====== Fix for coverity (zero out sizeof(*fi) not sizeof(fi) in fr_fifo_free) Arran Cudbard-Bell@2013-02-17T04:49:08Z Files modified: * src/lib/fifo.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1165b126e74f6f88ad50… ====== Fix for coverity (zero out sizeof(*packet) not sizeof(packet) in fr_dhcp_rcv) Arran Cudbard-Bell@2013-02-17T04:47:17Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99d4186dd12f3b731b0c… ====== Fix const warning in jlibtool Arran Cudbard-Bell@2013-02-17T04:44:36Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0add5a2b425a2fa6e076… ====== Fix for coverity (ensure inst is not NULL before dereferencing it in eap_pwd_initiate) Arran Cudbard-Bell@2013-02-17T04:44:36Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d921cfe4deb2e725379… ====== Fix for covertiy (ensure we have a home_server when insert_into_proxy_hash is called) Arran Cudbard-Bell@2013-02-17T04:44:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc2627498bbc9a18caff… ====== Fix for coverity (don't leak memory on run_mode) Arran Cudbard-Bell@2013-02-17T04:33:42Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e99511fe7a105e4d177… ====== Fix for coverity (fix run command so it doesn't leak memory allocated for the command) Arran Cudbard-Bell@2013-02-17T04:29:58Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2fdf68bb24f3019d717a… ====== Fix for coverity (fix load_install_path so it doesn't leak memory if passed a non absolute path) Arran Cudbard-Bell@2013-02-17T04:23:14Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/91f76e5c5f58a93c8d3f… ====== Fix for coverity (fix cleanup_tmp_dir so it doesn't leak directory handles) Arran Cudbard-Bell@2013-02-17T04:20:35Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98e02023b4295d8266d8… ====== Fix for coverity (don't leak memory if the object doesn't exist) Arran Cudbard-Bell@2013-02-17T04:17:53Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5230679ff0153fff00a… ====== Fix for coverity (don't leak memory if we can't find the library) Arran Cudbard-Bell@2013-02-17T04:16:22Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a14c46cd8b8bfa85408e… ====== Fix for coverity (don't leak memory in add_rpath_noinstall) Arran Cudbard-Bell@2013-02-17T04:06:41Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fd80b6bade74e77970f… ====== Fix for coverity (should use zu for sizeof) Arran Cudbard-Bell@2013-02-17T04:04:07Z Files modified: * src/lib/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/78fecf9ca90a6c180654… ====== Fix for coverity (don't segfault if rlm_realm is called in the recv-coa section and Operator-Name isn't present) Arran Cudbard-Bell@2013-02-17T03:58:22Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f470232910c2d1893fa6… ====== Fix for coverity (may pass NULL char pointer to strstr) Arran Cudbard-Bell@2013-02-17T03:52:22Z Files modified: * scripts/jlibtool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/58f508192ca42f7ded2e… ====== Fix for coverity (array will always decompose to a pointer which will always be true) Arran Cudbard-Bell@2013-02-17T03:46:37Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ee893b30fe37ed1f878… ====== Fix for coverity (fall-through is intentional) Arran Cudbard-Bell@2013-02-17T03:43:30Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb6cb54f7099577779f3… ====== For for coverity (don't segfault in cf_log_err if we get a NULL ci) Arran Cudbard-Bell@2013-02-17T03:38:07Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d1e442601d80f7e87b36… ====== Fix for coverity (fr_server_domain_socket should check is path is NULL) Arran Cudbard-Bell@2013-02-17T03:29:45Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c2df4e13d40fa90b03e… ====== -- This commit summary was generated @2013-02-18T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 17 Feb '13

17 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix bug in unused addport functionality Alan T. DeKok@2013-02-17T23:45:06Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d5f31e6558df27181ee… ====== No socket filename is a startup error Alan T. DeKok@2013-02-17T23:43:05Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f51ba12267c97bd14bb7… ====== uint for array checks Alan T. DeKok@2013-02-17T23:33:36Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c244d587654f4170d905… ====== Check for NULL string Alan T. DeKok@2013-02-17T23:32:07Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/76c530631573bbbe8bbc… ====== Check for more NULL Alan T. DeKok@2013-02-17T23:31:08Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d4fa062d3dffc29bf33… ====== Ensure pointer is initialized Alan T. DeKok@2013-02-17T23:29:03Z Files modified: * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a3b4abe5361d364d4e8… ====== Don't check for array existence Alan T. DeKok@2013-02-17T23:25:24Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d4940d7889a8ca94c55a… ====== Fix typo Alan T. DeKok@2013-02-17T19:36:44Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/981d6de2c2ae011f86f8… ====== Fix race condition in conf file Closes Coverity #720457 Alan T. DeKok@2013-02-17T19:32:36Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47317e77d90e6ec634e1… ====== Check fro =~ and !~ Alan T. DeKok@2013-02-17T19:27:16Z Files modified: * src/modules/rlm_expr/paircmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/31018af86c6b025eabe5… ====== Clear memory using correct size Closes Coverity #720439, 40, 41 Alan T. DeKok@2013-02-17T17:58:42Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7fe059b7dcf118bb4351… ====== Don't expand variables if cs==NULL Closes Coverity #720373 Alan T. DeKok@2013-02-17T17:58:39Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4e809da76ef5da88630b… ====== value may be NULL If the admin misconfigures things, oh well Alan T. DeKok@2013-02-17T17:11:30Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82f82ddcef02a7874303… ====== add missing break Alan T. DeKok@2013-02-17T03:39:06Z Files modified: * src/modules/rlm_dbm/rlm_dbm_parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9dedef2aa8f58b43d4f5… ====== Check size of buffer for raw attributes Alan T. DeKok@2013-02-17T03:24:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e847dfc57c0b85f52555… ====== -- This commit summary was generated @2013-02-18T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Removing attribute/vendor/type from valuepairs
by Arran Cudbard-Bell 17 Feb '13

17 Feb '13

Hi All, A number of commits have been pushed to master branch to remove the attribute, vendor, type and flags fields from the VLAUE_PAIR struct. When VALUE_PAIRs are created, the attribute number and vendor are resolved to a DICT_ATTR, the DICT_ATTR is then used as the source of type information for the VALUE_PAIR. For attributes not found in the FreeRADIUS dictionary, instances of DICT_ATTR are dynamically allocated, then freed when the VALUE_PAIR is freed. Alan has also rewritten the RADIUS protocol decoder to better support nested attributes, which should be fully supported before 3.0 is released. Next week work will begin on integrating talloc. talloc is a hierachical memory allocator which can dramatically simplify memory management for trees of dynamically allocated objects. This is in preparation for adding request chaining* and nested TLVs. As talloc is small (3K LoC) we plan to bundle it with the server, and integrate it into the new build system in a similar way to jlibtool. As always testing is appreciated. -Arran * Initially this will be for proxying between multiple virtual servers internally, but will make it easier to implement request trees, where a single incoming request spawns multiple child requests.

3 3

Commit report for master branch
by announce＠freeradius.org 16 Feb '13

16 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove jradius dictionary file Arran Cudbard-Bell@2013-02-16T23:28:06Z Files modified: * share/dictionary.jradius Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1b63c40f38d37785887… ====== Fixup Doxygen comments Arran Cudbard-Bell@2013-02-16T23:26:07Z Files modified: * src/lib/dict.c * src/lib/valuepair.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3144fc769cc287cd5ab… ====== Remove redundant flags and fields from VALUE_PAIR Arran Cudbard-Bell@2013-02-16T23:26:07Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d7282b656fa1d4e80ed… ====== Use DICT_ATTR for attribute number and vendor number Arran Cudbard-Bell@2013-02-16T23:26:07Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2f6b3dd0a5781f6f691… ====== Fixup remaining calls to old xlat functions in evaluate.c and main/valuepair.c Arran Cudbard-Bell@2013-02-16T23:26:07Z Files modified: * src/main/evaluate.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b24e431522646d197ac7… ====== Copy xlat source values when copying attributes Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10cc9d5fee534f63a306… ====== Misc whitespace fixes in libradius.h Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93ae43b11b6036cf9ad7… ====== Remove pairmake_xlat Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/include/libradius.h * src/lib/valuepair.c * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5360c851e0a44607b285… ====== Modify pair read so that it parses values into a more generic structure, and update it to use the new xlat functions Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ab05193697bff4b660e… ====== Fixup rlm_sql to use the new xlat functions Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/68bf990b72c09c868f59… ====== Update pairmake_any to call dict_attrunknown Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a3cd4ac6a83d2880313… ====== Rename some arguments to be more consistent in pair compare Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/include/radiusd.h * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfcae5a58019b69783e9… ====== Use da->name in pair compare Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f7d5379bd68e5c536f8… ====== Use da attribute and vendor in paircompare Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59a4271f2a06c4923e7b… ====== Add radius_xlat_do and rename pairxlatmove to radius_xlat_move Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/include/radiusd.h * src/main/valuepair.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d822166298afea19f067… ====== Remove dependency on pairxlatmove in rlm_rest (it never really needed to use it anyway) Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d35d8f7a74880d99097… ====== Fixup dict_valbyattr call in rlm_rediswho Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/373fdba96711cb660e61… ====== Add pairmark_xlat Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/408ef6b777bf3224b973… ====== White space changes in rlm_sql Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/752f6f986d2d28a016fb… ====== Fixup some function documentation in main/valuepair.c Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2cd5d7fe642642fb3d58… ====== Our implementation of DHCP assumes DHCP-Client-Identifier is always a MAC Address Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * share/dictionary.dhcp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed0802c25638f7c90087… ====== Don't bother checking for truncation in rlm_rest, it doesn't work for xlat expanded values anyway Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff9cf031423116d8bd4a… ====== Use type int for boolean values, apparently json-c no longer defines it. Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98403c70248bba801395… ====== Remove rlm_policy from the red hat spec file Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25a1ca234acf06f24b46… ====== Remove rlm_jradius documentation and dictionaries Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * doc/rlm_jradius * share/dictionary Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/40ca9399fb8f9259e130… ====== -- This commit summary was generated @2013-02-17T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

[mschap] No Cleartext-Password configured. Cannot create LM-Password.
by Grzegorz Cimochowski 16 Feb '13

16 Feb '13

Hi i have big problem whit my freeradius 2.2.0 whit mysql log from freeradius -X FreeRADIUS Version 2.2.0, for host i386-portbld-freebsd9.0, built on Dec 18 2012 at 15:56:50 Copyright (C) 1999-2012 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /usr/local/etc/raddb/radiusd.conf including configuration file /usr/local/etc/raddb/clients.conf including files in directory /usr/local/etc/raddb/modules/ including configuration file /usr/local/etc/raddb/modules/wimax including configuration file /usr/local/etc/raddb/modules/always including configuration file /usr/local/etc/raddb/modules/attr_filter including configuration file /usr/local/etc/raddb/modules/attr_rewrite including configuration file /usr/local/etc/raddb/modules/cache including configuration file /usr/local/etc/raddb/modules/chap including configuration file /usr/local/etc/raddb/modules/checkval including configuration file /usr/local/etc/raddb/modules/counter including configuration file /usr/local/etc/raddb/modules/cui including configuration file /usr/local/etc/raddb/modules/detail including configuration file /usr/local/etc/raddb/modules/detail.example.com including configuration file /usr/local/etc/raddb/modules/detail.log including configuration file /usr/local/etc/raddb/modules/dhcp_sqlippool including configuration file /usr/local/etc/raddb/sql/mysql/ippool-dhcp.conf including configuration file /usr/local/etc/raddb/modules/digest including configuration file /usr/local/etc/raddb/modules/dynamic_clients including configuration file /usr/local/etc/raddb/modules/echo including configuration file /usr/local/etc/raddb/modules/etc_group including configuration file /usr/local/etc/raddb/modules/exec including configuration file /usr/local/etc/raddb/modules/expiration including configuration file /usr/local/etc/raddb/modules/expr including configuration file /usr/local/etc/raddb/modules/files including configuration file /usr/local/etc/raddb/modules/inner-eap including configuration file /usr/local/etc/raddb/modules/ippool including configuration file /usr/local/etc/raddb/modules/krb5 including configuration file /usr/local/etc/raddb/modules/ldap including configuration file /usr/local/etc/raddb/modules/linelog including configuration file /usr/local/etc/raddb/modules/otp including configuration file /usr/local/etc/raddb/modules/logintime including configuration file /usr/local/etc/raddb/modules/mac2ip including configuration file /usr/local/etc/raddb/modules/mac2vlan including configuration file /usr/local/etc/raddb/modules/mschap including configuration file /usr/local/etc/raddb/modules/ntlm_auth including configuration file /usr/local/etc/raddb/modules/opendirectory including configuration file /usr/local/etc/raddb/modules/pam including configuration file /usr/local/etc/raddb/modules/pap including configuration file /usr/local/etc/raddb/modules/passwd including configuration file /usr/local/etc/raddb/modules/perl including configuration file /usr/local/etc/raddb/modules/policy including configuration file /usr/local/etc/raddb/modules/preprocess including configuration file /usr/local/etc/raddb/modules/radrelay including configuration file /usr/local/etc/raddb/modules/radutmp including configuration file /usr/local/etc/raddb/modules/realm including configuration file /usr/local/etc/raddb/modules/redis including configuration file /usr/local/etc/raddb/modules/rediswho including configuration file /usr/local/etc/raddb/modules/replicate including configuration file /usr/local/etc/raddb/modules/smbpasswd including configuration file /usr/local/etc/raddb/modules/smsotp including configuration file /usr/local/etc/raddb/modules/soh including configuration file /usr/local/etc/raddb/modules/sql_log including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login including configuration file /usr/local/etc/raddb/modules/sradutmp including configuration file /usr/local/etc/raddb/modules/unix including configuration file /usr/local/etc/raddb/modules/acct_unique including configuration file /usr/local/etc/raddb/eap.conf including configuration file /usr/local/etc/raddb/sql.conf including configuration file /usr/local/etc/raddb/sql/mysql/dialup.conf including configuration file /usr/local/etc/raddb/sql/mysql/counter.conf including configuration file /usr/local/etc/raddb/policy.conf including files in directory /usr/local/etc/raddb/sites-enabled/ including configuration file /usr/local/etc/raddb/sites-enabled/default including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel including configuration file /usr/local/etc/raddb/sites-enabled/control-socket main { user = "freeradius" group = "freeradius" allow_core_dumps = no } including dictionary file /usr/local/etc/raddb/dictionary main { name = "radiusd" prefix = "/usr/local" localstatedir = "/var" sbindir = "/usr/local/sbin" logdir = "/var/log" run_dir = "/var/run/radiusd" libdir = "/usr/local/lib/freeradius-2.2.0" radacctdir = "/var/log/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating module "exec" from file /usr/local/etc/raddb/modules/exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating module "expr" from file /usr/local/etc/raddb/modules/expr Module: Linked to module rlm_expiration Module: Instantiating module "expiration" from file /usr/local/etc/raddb/modules/expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating module "logintime" from file /usr/local/etc/raddb/modules/logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server { # from file /usr/local/etc/raddb/radiusd.conf modules { Module: Creating Auth-Type = digest Module: Creating Post-Auth-Type = REJECT Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_mschap Module: Instantiating module "mschap" from file /usr/local/etc/raddb/modules/mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no allow_retry = yes } Module: Linked to module rlm_digest Module: Instantiating module "digest" from file /usr/local/etc/raddb/modules/digest Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating module "preprocess" from file /usr/local/etc/raddb/modules/preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } reading pairlist file /usr/local/etc/raddb/huntgroups reading pairlist file /usr/local/etc/raddb/hints Module: Linked to module rlm_chap Module: Instantiating module "chap" from file /usr/local/etc/raddb/modules/chap Module: Linked to module rlm_realm Module: Instantiating module "suffix" from file /usr/local/etc/raddb/modules/realm realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_eap Module: Instantiating module "eap" from file /usr/local/etc/raddb/eap.conf eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 4096 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 CA_path = "/usr/local/etc/raddb/certs" pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" CA_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/usr/local/etc/raddb/certs/dh" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" ecdh_curve = "prime256v1" cache { enable = no lifetime = 24 max_entries = 255 } verify { } ocsp { enable = no override_cert_url = yes url = "http://127.0.0.1/ocsp/" use_nonce = yes timeout = 0 softfail = no } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no send_error = no } Module: Linked to module rlm_sql Module: Instantiating module "sql" from file /usr/local/etc/raddb/sql.conf sql { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "root" password = "diablo" radius_db = "radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/sqltrace.sql" readclients = yes deletestalesessions = yes num_sql_socks = 5 lifetime = 0 max_queries = 0 sql_user_name = "%{User-Name}" default_user_profile = "" nas_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' AND status = '1' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" accounting_onoff_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = unix_timestamp('%S') - unix_timestamp(acctstarttime), acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = %{%{Acct-Delay-Time}:-0} WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= '%S'" accounting_update_query = " UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_update_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctsessiontime, acctauthentic, connectinfo_start, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, servicetype, framedprotocol, framedipaddress, acctstartdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_start_query = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{%{Acct-Delay-Time}:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_start_query_alt = " UPDATE radacct SET acctstarttime = '%S', acctstartdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_start = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_stop_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_stop_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{%{Acct-Delay-Time}:-0}')" group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" connect_failure_retry_delay = 60 simul_count_query = "" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): Processing generate_sql_clients rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Read entry nasname=192.168.30.1,shortname=batorego,secret=test rlm_sql (sql): Adding client 192.168.30.1 (batorego, server=<none>) to clients list rlm_sql (sql): Released sql socket id: 4 Module: Linked to module rlm_pap Module: Instantiating module "pap" from file /usr/local/etc/raddb/modules/pap pap { encryption_scheme = "auto" auto_header = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating module "acct_unique" from file /usr/local/etc/raddb/modules/acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, NAS-Identifier, NAS-Port" } Module: Linked to module rlm_files Module: Instantiating module "files" from file /usr/local/etc/raddb/modules/files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } reading pairlist file /usr/local/etc/raddb/users reading pairlist file /usr/local/etc/raddb/acct_users reading pairlist file /usr/local/etc/raddb/preproxy_users Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating module "detail" from file /usr/local/etc/raddb/modules/detail detail { detailfile = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating module "radutmp" from file /usr/local/etc/raddb/modules/radutmp radutmp { filename = "/var/log/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_sql_log Module: Instantiating module "sql_log" from file /usr/local/etc/raddb/modules/sql_log sql_log { path = "/var/log/radacct/sql-relay" Post-Auth = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', '%S');" sql_user_name = "%{%{User-Name}:-DEFAULT}" utf8 = no safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } Module: Linked to module rlm_attr_filter Module: Instantiating module "attr_filter.access_reject" from file /usr/local/etc/raddb/modules/attr_filter attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" relaxed = no } reading pairlist file /usr/local/etc/raddb/attrs.access_reject } # modules } # server server inner-tunnel { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_unix Module: Instantiating module "unix" from file /usr/local/etc/raddb/modules/unix unix { radwtmp = "/var/log/radwtmp" } Module: Checking authorize {...} for more modules to load Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "control" listen { socket = "/var/run/radiusd/radiusd.sock" } } listen { type = "auth" ipaddr = 127.0.0.1 port = 18120 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 192.168.30.25 port 56465, id=93, length=192 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 52088 NAS-Port-Type = Ethernet User-Name = "makowska_t" Calling-Station-Id = "00:02:72:72:AC:26" Called-Station-Id = "osiedle" NAS-Port-Id = "anteny2.4" MS-CHAP-Challenge = 0xb141e7a2b9fa3b6ce38853fca0b840ab MS-CHAP2-Response = 0x0100fd95e527bf09943e54f4835baa4684ae0000000000000000e19fa7e004fd1ff998159565eacaeb94f1b53d4e89db66e1 NAS-Identifier = "OSIEDLE" NAS-IP-Address = 192.168.30.25 # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' ++[mschap] returns ok [suffix] No '@' in User-Name = "makowska_t", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [sql] expand: %{User-Name} -> makowska_t [sql] sql_set_user escaped user --> 'makowska_t' rlm_sql (sql): Reserving sql socket id: 3 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' AND status = '1' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'makowska_t' AND status = '1' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'makowska_t' ORDER BY priority rlm_sql (sql): Released sql socket id: 3 [sql] User makowska_t not found ++[sql] returns notfound [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = MSCHAP # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group MS-CHAP {...} [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Creating challenge hash with username: makowska_t [mschap] Client is using MS-CHAPv2 for makowska_t, we need NT-Password [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject Failed to authenticate the user. Using Post-Auth-Type REJECT # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group REJECT {...} [sql] expand: %{User-Name} -> makowska_t [sql] sql_set_user escaped user --> 'makowska_t' [sql] expand: %{User-Password} -> [sql] ... expanding second conditional [sql] expand: %{Chap-Password} -> [sql] expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'makowska_t', '', 'Access-Reject', '2013-01-31 14:34:41') rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'makowska_t', '', 'Access-Reject', '2013-01-31 14:34:41') rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 ++[sql] returns ok [attr_filter.access_reject] expand: %{User-Name} -> makowska_t attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request When a combination of coding mschapv1 everything works ok all options in :/sites-enabled (defoult and inner-tunnel) whot 'sql' enabled.

4 7

Commit report for master branch
by announce＠freeradius.org 15 Feb '13

15 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix segv in rlm_otp Arran Cudbard-Bell@2013-02-15T23:53:17Z Files modified: * src/modules/rlm_otp/otp_pwe.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1e273aebe1ccfc32087… ====== Cast challenge string as unsigned Arran Cudbard-Bell@2013-02-15T23:43:26Z Files modified: * src/modules/rlm_otp/otp_radstate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98597849f3ab00c0ffa9… ====== Disable EAP caching. Doesn't seem to work Alan T. DeKok@2013-02-15T23:22:44Z Files modified: * raddb/policy.d/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/875aa768ae457dbc540c… ====== mypriority can be -1, too Alan T. DeKok@2013-02-15T23:21:47Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4addc8a0b7bf30ba57df… ====== Merge pull request #190 from candlerb/candlerb/redis_fixes_master Broken rlm_redis in master branch Arran Cudbard-Bell@2013-02-15T06:27:21Z Files modified: * raddb/mods-available/rediswho * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3ea978c9efb4e616b6f6… ====== Remove unnecessary variable Brian Candler@2013-02-14T17:31:34Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/feefac8eb4000b17e042… ====== rlm_rediswho: allow insert/trim/expire to be configured independently For example you might want to do SET and EXPIRE on a start record, and just EXPIRE on interim and stop. Brian Candler@2013-02-14T17:31:34Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf32337cfa6da5f1c50c… ====== rlm_rediswho: return RLM_MODULE_FAIL on failure (including failed Expire) Brian Candler@2013-02-14T17:31:34Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d2a4302e7049e4e5eb2… ====== rlm_rediswho: fix trim functionality (note: query result is not available after redis_finish_query has been called) Brian Candler@2013-02-14T17:31:34Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddd1e9e278d36b2e4fa4… ====== rlm_rediswho: fix unlang conditional expansion Brian Candler@2013-02-14T17:31:34Z Files modified: * raddb/mods-available/rediswho Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d620998d0968c2311721… ====== rlm_redis: fix segfaults on connect Brian Candler@2013-02-14T17:02:53Z Files modified: * src/modules/rlm_redis/rlm_redis.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ffeac33b4f21e45fb53… ====== -- This commit summary was generated @2013-02-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0