April 2013 - Freeradius-Devel - lists.freeradius.org

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

Patch for updated EAP-TNC support for freeradius from tnc@fhh
by Avesh Agarwal 19 Jul '13

19 Jul '13

Hello Alan, I have created a forked version of latest freeradius v2 branch on github and merged the updated EAP-TNC support from tnch@fhh. The link is here: https://github.com/aveshagarwal/freeradius-server/commit/40104449aa7bce926a… I have tested the patch on a testbed with 802.1x managed switch and wpa_supplicant and freeradius-server with EAP-TTLS as outer tunnel and EAP-MD5 and EAP-TNC as two inner EAP methods. I would appreciate any feedback on this patch to get it merged upstream. Thanks and Regards Avesh On Fri, Feb 1, 2013 at 4:32 PM, Alan DeKok <aland(a)deployingradius.com>wrote: > Avesh Agarwal wrote: > > Thanks for your response. But if you could tell some specific reasons > > why it is not enabled by default that would really help me understand > > what is required to be done. > > Because I don't think it works. I haven't had time to look into it. > > > It is here: https://github.com/trustatfhh/tnc-fhh > > OK. > > > Yes, I agree. But some specifics would really help. > > I don't have many. Make sure it works. Make sure the code is clean, > and formatted correctly. Make sure the patches are readable. > > I know pretty much nothing about EAP-TNC. So all I can give is > general guidelines for getting code into the server. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html >

3 13

Re: Release of Version 2.2.1
by Stefan Winter 15 Jul '13

15 Jul '13

Hi, > I've added the patch to set rcode=1 on clean exit. > > The patch to remove free_mainconfig() is made unnecessary by other > cleanups. The SEGV was a result of mis-ordered free's. There was > conflict between the modules free'ing their data, and the main > configuration code free'ing its data. That was fixed. > > The code was run through valgrind repeatedly until it shows no errors > on exit. Well, this morning's GIT doesn't quite agree. Sending a TERM to the server running -X: Listening on authentication address :: port 1812 Listening on accounting address :: port 1813 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on proxy address :: port 1814 Ready to process requests. Ready to process requests. Signalled to terminate Exiting normally. Speicherzugriffsfehler Speicherzugriffsfehler is my locale for Segmentation fault. gdb during termination time shows that there's something wrong inside free'ing eap types, it seems: Listening on authentication address :: port 1812 Listening on accounting address :: port 1813 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on proxy address :: port 1814 Ready to process requests. Program received signal SIGTERM, Terminated. 0x00007ffff6608623 in select () from /lib64/libc.so.6 (gdb) bt #0 0x00007ffff6608623 in select () from /lib64/libc.so.6 #1 0x00007ffff7bca538 in fr_event_loop (el=0x889640) at event.c:391 #2 0x0000000000429f21 in radius_event_process () at event.c:3800 #3 0x0000000000409f7c in main (argc=<optimized out>, argv=<optimized out>) at radiusd.c:421 (gdb) c Continuing. Ready to process requests. Signalled to terminate Exiting normally. Program received signal SIGSEGV, Segmentation fault. 0x00007ffff65a5634 in free () from /lib64/libc.so.6 (gdb) bt #0 0x00007ffff65a5634 in free () from /lib64/libc.so.6 #1 0x000000000040e2c0 in cf_section_parse_free (cs=0x675240, base=0x8209c0) at conffile.c:344 #2 0x00007ffff56e0d31 in eaptype_free (i=0x8247f0) at mem.c:253 #3 0x00007ffff56de877 in eap_detach (instance=0x823ad0) at rlm_eap.c:69 #4 0x000000000041ad31 in module_instance_free (data=0x823990) at modules.c:385 #5 0x00007ffff7bc3dfd in FreeWalker (tree=0x7f8130, X=0x825a70) at rbtree.c:63 #6 0x00007ffff7bc3dee in FreeWalker (tree=0x7f8130, X=0x81a9c0) at rbtree.c:61 #7 0x00007ffff7bc3ddd in FreeWalker (tree=0x7f8130, X=0x7f9f50) at rbtree.c:60 #8 0x00007ffff7bc3ddd in FreeWalker (tree=0x7f8130, X=0x822d30) at rbtree.c:60 #9 0x00007ffff7bc418d in rbtree_free (tree=0x7f8130) at rbtree.c:74 #10 0x000000000041bc40 in detach_modules () at modules.c:441 #11 0x0000000000409fd4 in main (argc=<optimized out>, argv=<optimized out>) at radiusd.c:465 (gdb) Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473

5 29

EAP-SIM on Radius 3.0 (devel)
by Rodney Machado 07 Jun '13

07 Jun '13

Hi All, I'm testing EAP-SIM support on the latest version of freeradius (got it via git). <command> git clone git://git.freeradius.org/freeradius-server.git </command> After I have compiled and installed it, I have modified the configuration files, as I have done on the older versions (v2.2.0). But, when I try to run the daemon i got this error: <error> /usr/local/etc/raddb/radiusd.conf[613]: Failed to link to module 'rlm_sim_file': rlm_sim_file.so: cannot open shared object file: No such file or directory </error> <modified files> in /usr/local/etc/raddb/radiusd.conf: <changes_in_radiusd.conf> sim_files { simtriplets = "/usr/local/etc/raddb/simtriplets.dat" } </changes_in_radiusd.conf> in /usr/local/etc/raddb/sites-enabled/default <changes_in_default> In authorized {} sim_files </changes_in_default> in /usr/local/etc/raddb/mods-enabled/eap <changes_in_eap> sim{ } </changes_in_eap> What have changed on the 3.0 version (devel) of the freeradius?, perhaps rlm_sim_file is not needed anymore? Or there is a new configuration structure for supporting eap-sim? Please advice. Regards, --RM

5 8

Commit report for master branch
by announce＠freeradius.org 15 May '13

15 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More doxygen warnings Arran Cudbard-Bell@2013-04-09T22:18:10Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d46e233fa9dfa23522… ====== Fix doxygen documentation Arran Cudbard-Bell@2013-04-09T21:19:23Z Files modified: * src/main/xlat.c * src/modules/rlm_rest/rest.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a0015b19255051a851c0… ====== doxygen updates Alan T. DeKok@2013-04-09T21:01:40Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26ec9984f97d4846715b… ====== Fix typo Alan T. DeKok@2013-04-09T21:00:56Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97002a4776741ed0d4af… ====== Brand new xlat functions. All xlat's are now run through the new routines. The old (i.e. horrific) routines are gone. The result is more functionality, simpler debugging, better errors, and ~400 lines fewer code. The downside is that (for the next day or so), calling a module xlat routine MAY mean that it gets expanded twice. i.e. the old code would do %{mod: foo} and pass "foo" to module "mod". The new code (for reasons of simplicity) xlat's "foo" before passing it to module "mod". Some modules (i.e. expr) call radius_xlat again. This is now wrong. The fix is to update the signature of the xlat functions so that "fmt" is no longer a "const char*", as it is now a talloc'd string. Once that's done, all of the modules will need a visual pass-through to remove the extra recursive calls to xlat. We've also deleted xlat registration for %{1} and %[request:..} The regex and attribute parsing is now done by the xlat core. In the future, it should be passed to a module-specific "parse" or "validate" routine. That routine would ensure that the RHS of an xlat expansion is valid Alan T. DeKok@2013-04-09T21:00:56Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5deec98232056e3fdff9… ====== Fix network / host byte order issue Alan T. DeKok@2013-04-09T21:00:56Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2a2fb7e465f597fa3e0… ====== Remove radiusd.pid on failed kill Alan T. DeKok@2013-04-09T20:39:10Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8aace8a6e3f19f73e503… ====== Clean radius.log and gdb.log only when re-starting the server Alan T. DeKok@2013-04-09T20:31:50Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6a14f05101eb318bc87e… ====== Do a better job of cleanin up before running the tests Alan T. DeKok@2013-04-09T20:22:33Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab919e91228c273ad188… ====== Don't shadow globals Alan T. DeKok@2013-04-09T18:10:00Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d4f7aed442584fe58e82… ====== Added vp_asprintf() for VPs prints the string value of a VP to a talloc'd buffer, and returns the buffer Alan T. DeKok@2013-04-09T14:43:32Z Files modified: * src/include/libradius.h * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22628b7ebbbe440b1188… ====== -- This commit summary was generated @2013-04-10T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

4 13

Commit report for master branch
by announce＠freeradius.org 30 Apr '13

30 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Hack for stupid GCC warnings Arran Cudbard-Bell@2013-04-30T18:54:25Z Files modified: * src/include/log.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b581970127d0bd9185ba… ====== Fix -Werror causing test scripts to fail Arran Cudbard-Bell@2013-04-30T18:40:05Z Files modified: * .travis.yml * configure * configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1193ea1ba6c30b9617c… ====== Fix warnings from GCC 4.8 Arran Cudbard-Bell@2013-04-30T18:19:33Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ad2d6d97cc8461313134… ====== -Werror Arran Cudbard-Bell@2013-04-30T18:14:42Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/35fd63fbd603aa768633… ====== Add missing parenthesies Arran Cudbard-Bell@2013-04-30T18:08:09Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/574ae78b7b210f1a4575… ====== -- This commit summary was generated @2013-05-01T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 29 Apr '13

29 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== >From Runcom Alan T. DeKok@2013-04-29T20:20:17Z Files modified: * share/dictionary * share/dictionary.sg Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cff62a9141998518425d… ====== -- This commit summary was generated @2013-04-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 29 Apr '13

29 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== >From Runcom Alan T. DeKok@2013-04-29T20:21:57Z Files modified: * share/dictionary * share/dictionary.sg Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a9281c9ac3044e374de… ====== -- This commit summary was generated @2013-04-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

API Status for 3.0.0
by Aaron Hurt 29 Apr '13

29 Apr '13

I am currently developing a module to store accounting data directly into Couchbase as JSON documents and noticed a fairly large difference between the release_3_0_0_beta0 tag and latest master. That being said I understand the beta tag is over 8 months old at this point and there is a milestone in approximately 20 days for 3.0.0 release. Would it be safe to assume that the module API structure currently in master is fairly fixed for the 3.0.0 release at this point? Thank You, Aaron

2 2

EAP-AKA with freeradius
by Simon Bryden 29 Apr '13

29 Apr '13

Hi, I'm trying to get this to work and after having read everything I can find on the subject I have the following setup: freeradius 2.2.0 with libeap.so compiled from hostapd v0.6. EAP type aka, and hlr_auc_gw to provide milenage data. I am at the stage where I am getting a request from freeradius into libeap.so which then outputs the error "EAP-AKA: eap_sim_db not configured" which is presumably coming from eap_aka_init(): if (sm->eap_sim_db_priv == NULL) { wpa_printf(MSG_WARNING, "EAP-AKA: eap_sim_db not configured"); return NULL; } Presumably there is some initialisation which is not happening, and my main question is whether this configuration is supported by the freeradius eap2 wrapper - most information that I have seen on freeradius + EAP refers to other EAP methods, not AKA. All configs available on request. Thanks for any info, Regards, Simon. --- *** Please note that this message and any attachments may contain confidential and proprietary material and information and are intended only for the use of the intended recipient(s). If you are not the intended recipient, you are hereby notified that any review, use, disclosure, dissemination, distribution or copying of this message and any attachments is strictly prohibited. If you have received this email in error, please immediately notify the sender and destroy this e-mail and any attachments and all copies, whether electronic or printed. Please also note that any views, opinions, conclusions or commitments expressed in this message are those of the individual sender and do not necessarily reflect the views of Fortinet, Inc., its affiliates, and emails are not binding on Fortinet and only a writing manually signed by Fortinet's General Counsel can be a binding commitment of Fortinet to Fortinet's customers or partners. Thank you. ***

2 1