February 2013 - Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 07 Feb '13

07 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Free modules before mainconfig some modules may have pointer to CONF_SECTIONS buried. If the order is different, then the CONF_SECTION is free'd out from under the module Alan T. DeKok@2013-02-07T19:36:21Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be6877043126cfa8fbf1… ====== map -> vpm, to use the loop variable Alan T. DeKok@2013-02-07T19:23:33Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b6e3f3171901e865e7cf… ====== fix typo Arran Cudbard-Bell@2013-02-07T18:19:15Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/57f8fdb20b83821b7286… ====== Always send Message-Authenticator for proxied Access-Requests It's 2013. There's no reason avoid security Alan T. DeKok@2013-02-07T04:41:26Z Files modified: * raddb/proxy.conf * src/include/realms.h * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a0693c72e4c54539ae2… ====== -- This commit summary was generated @2013-02-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 06 Feb '13

06 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Limit the number of entries in the cache. Closes #156 Alan T. DeKok@2013-02-06T19:07:13Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/837e3c726d1126190872… ====== Fix typo Alan T. DeKok@2013-02-06T18:57:17Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7b29e2ba2c1291df160… ====== Update sections inherit actions *and* priority Closs #107 Alan T. DeKok@2013-02-06T18:50:31Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c004b8e922cb993a44b… ====== Startup check for mismatched OpenSSL library versions Print OpenSSL version in debug output Conflicts: src/main/version.c Arran Cudbard-Bell@2013-02-06T02:23:40Z Files modified: * src/include/radiusd.h * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3c0a14730aa27028645f… ====== -- This commit summary was generated @2013-02-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 06 Feb '13

06 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Limit the number of entries in the cache. Closes #156 Alan T. DeKok@2013-02-06T19:09:35Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a11dc034b469bc73427b… ====== Fix typo Alan T. DeKok@2013-02-06T18:59:35Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d26b7ab3fb453b5b5e6e… ====== Update sections inherit actions *and* priority Closs #107 Alan T. DeKok@2013-02-06T18:59:34Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9a3f76fed4534c9f215… ====== Startup check for mismatched OpenSSL library versions Print OpenSSL version in debug output Arran Cudbard-Bell@2013-02-06T02:20:32Z Files modified: * src/include/radiusd.h * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6913b3ccd19c613ac3e5… ====== -- This commit summary was generated @2013-02-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

OpenSSL warnings on OSX
by Arran Cudbard-Bell 06 Feb '13

06 Feb '13

Just in case anyone was wondering... http://stackoverflow.com/questions/7406946/why-is-apple-deprecating-openssl… -Arran

2 1

User Session & accounting management
by Suresh Kumar Subramanian 05 Feb '13

05 Feb '13

Hi, I am newbie and I have couple of questions in the free radius. 1) How do we maintain the session time in free radius? For example, a given user the session time is configured for 1 hour. After 1 hour, radius server should initiate "Session disconnect message" for the user to the NAS. I understand that, Freeradius does support "session disconnect message", but we can achieve this with radclient utility. Ref: http://wiki.freeradius.org/protocol/Disconnect-Messages Here my problem is, how the session timeout is identified to trigger this disconnect message? Please help. 2) where freeradius logs the accounting information? I have not configured the mysql. Does freeradius supports flat file for storing accounting records.? Thanks Suresh.

2 1

Commit report for v2.x.x branch
by announce＠freeradius.org 04 Feb '13

04 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update to match last commit Alan T. DeKok@2013-02-04T14:50:15Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c8cabe0efabc8adff07… ====== Updated EAP types to match IANA Alan T. DeKok@2013-02-04T14:45:23Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1dd0b5797951a88a26fa… ====== -- This commit summary was generated @2013-02-05T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 04 Feb '13

04 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update to match last commit Alan T. DeKok@2013-02-04T14:50:37Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/65fa6ce48361cdca4280… ====== Updated EAP types to match IANA Alan T. DeKok@2013-02-04T14:46:11Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9648fd84064fff3d14e6… ====== -- This commit summary was generated @2013-02-05T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 03 Feb '13

03 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Run post-auth on Access-Challenge if there's a Post-Auth-Type Challenge {} section Arran Cudbard-Bell@2013-02-03T02:17:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a67c3bb8401a8ab2fd6… ====== -- This commit summary was generated @2013-02-04T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Changing "radlog" calls to RDEBUG & setting Module-Failure-Message
by Phil Mayers 03 Feb '13

03 Feb '13

I run a small local patch that changes a few irritating calls to radlog into RDEBUG and sets the Module-Failure-Message inside rlm_eap; these are useful for logging per-request failure causes. See here: https://github.com/philmayers/freeradius-server/commit/baab30d0f16dc449c47a… More generally - I personally think that radlog calls are appropriate for whole-server events (e.g. upstream proxy down) but not per-request events (except possibly very, very fatal errors) as a "radius.log" can grow surprisingly large when a client is banging away at you. What do others think?

3 2

freeradius and EAP-TNC
by Avesh Agarwal 01 Feb '13

01 Feb '13

Hello, I am interested in using EAP_TNC feature with Freeradius server. I know that Freeradius code base includes EAP_TNC and TNC server functionality. Specifically, I am interested in making it work by default in Fedora distribution. I have a working setup that uses a patched version of Freeradius and patches are from Trust@FHH group. I have a few questions regarding this: 1. TNC functionality in Freeradius does not seem to be enabled by default currently. I would like to understand what is needed to be done so that it can be enabled by default. I am willing to work on this if I can get some help to understand what is missing. 2. As per my understanding the existing TNC functionality in Freeradius was contributed by Trust@FHH group. I found that Trust@FHH group has some updated patches for this but those are not yet merged with current Freeradius. If someone can tell the reasons behind this, then I can try to coordinate with Trust@FHH group in case any changes are needed in the patches or a totally new approach is required. I have read a thread about it that was sometimes back in 2008 but I have not found anything after that, so does not seem very helpful after so many years. So any effort in taking TNC functionality in Freeradius further to production level would be really appreciated. Thanks Avesh

2 3