May 2013 - Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 24 May '13

24 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== if len==0, buff may be NULL Alan T. DeKok@2013-05-24T16:25:14Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e58905fed2bd3e5177e… ====== The "opaque" data belongs to handler, not to reply Alan T. DeKok@2013-05-24T15:54:26Z Files modified: * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c6bcb93d55501336bb1f… ====== Allow forcible empty expansions Alan T. DeKok@2013-05-24T15:48:49Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2e58bbb94dff280600f… ====== -- This commit summary was generated @2013-05-25T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 23 May '13

23 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #295 from leprechau/master fix compilation error in rlm_ruby Arran Cudbard-Bell@2013-05-23T01:45:57Z Files modified: * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e8ef869ba8b23bfa710… ====== fix compilation error Aaron Hurt@2013-05-22T06:48:07Z Files modified: * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0ddad94652b0b91f7e3f… ====== -- This commit summary was generated @2013-05-24T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

PEAP/EAP-MSCHAPv2 module modification problem
by Ivan Ostres 23 May '13

23 May '13

Hello list, I am using PEAP-EAP-MSCHAPv2 combo with freeradius. I modified EAP-MSCHAPv2 rlm to use a weird password store system and authentication works fine. There is one thing I am missing - I need to add a specific VSA to access-accept (depending on the user) and am trying to do it this way: #define VENDOR_CISCO 9 #define CISCO_SSG_ACCOUNT_INFO 250 VALUE_PAIR *myvsa; myvsa = radius_paircreate(request, &request->reply->vps, CISCO_SSG_ACCOUNT_INFO, VENDOR_CISCO); if (myvsa == NULL) RDEBUG("MYVSA == NULL"); const char *mystr="AINTERNET"; pairmemcpy(myvsa, (const uint8_t *)mystr,4); this is done under case PW_MSCHAP2_SUCCESS: (line ~180) in rlm_eap_mschapv2.c module. There is no error but I never see this output on access-accept sent to BRAS. What am I doing wrong? Is there a better way to achieve this? BR, iostres

3 7

pull request @292 discusstion requirement
by yuanlinyu 23 May '13

23 May '13

hi, all guys and administrators, I have a pull request #292 about ipv6 issue on master brach src/lib/misc.c, fr_ipaddr_cmp() | | #ifdef HAVE_STRUCT_SOCKADDR_IN6 | | case AF_INET6: | | - if (a->scope < b->scope) return -1; | | - if (a->scope > b->scope) return +1; | | - | | return memcmp(&a->ipaddr.ip6addr, | | | this fix according to my test configuration, 1. problem 1.1 /usr/local/etc/raddb/clients.conf, add link local client client fe80::/16 { secret = cameo shortname = atgs950 } 1.2 /usr/local/etc/raddb/sites-available/default, open ipv6 auth and acct: ipv6addr = :: # any. ::1 == localhost 1.3 client send auth request, server debug info as below: Wed May 22 11:18:57 2013 : Error: Ignoring request to auth interface eth0 address :: port 1812 as server default from unknown client fe80::290:c0ff:fe82:1630 port 49153 proto udp 2. I realy think scope is not necessary as a rb-tree key, for ip address will be unique and represent the scope "global", "link", "site", and it's transport issue 3. I also found no place to parse configured address's scope id anyone can tell me if it's code issue or not? please help review pull request, thanks

1 0

Commit report for master branch
by announce＠freeradius.org 21 May '13

21 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Updates Alan T. DeKok@2013-05-21T19:05:13Z Files modified: * share/dictionary.telkom Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5113475ce044b03bbd5b… ====== removed old comment Alan T. DeKok@2013-05-21T17:04:31Z Files modified: * src/tests/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/03783354d0a38aa09e29… ====== Infinite loops are bad. foo { ... } authorize = ${foo} will add "foo" to the parent section, by appending it to the end of the list. But foo is already in the section, so we create a loop inside the linked list of children. That's bad. Alan T. DeKok@2013-05-21T16:49:41Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/41380536131ec10baecf… ====== -- This commit summary was generated @2013-05-22T00:00:08Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 21 May '13

21 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Updates Alan T. DeKok@2013-05-21T19:04:37Z Files modified: * share/dictionary.telkom Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2fa057297c910d0b0eb7… ====== Merge pull request #293 from fajarnugraha/v2.x.x-suse-20130510 Fix suse package to build and run cleanly for current v2.x.x branch Alan DeKok@2013-05-21T15:10:57Z Files modified: * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2706906bd7a0932d753… ====== suse: build fixes * Bump version to 2.2.1 * Only requires sqlite3-devel and libpcap-devel on Suse 11.x and above * README was renamed to README.rst Fajar A. Nugraha@2013-05-21T11:05:48Z Files modified: * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/504f188078e0a58c3720… ====== -- This commit summary was generated @2013-05-22T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 17 May '13

17 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== A better way of getting empty alternations Alan T. DeKok@2013-05-17T17:26:06Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25b6fdd66ac5144610e8… ====== -- This commit summary was generated @2013-05-18T00:00:07Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

More additions to unlang
by Alan DeKok 17 May '13

17 May '13

The changes in today add "compile-time" validation, and evaluation of static values. For example: if (Session-Timeout < blue) { In v2, the server will start, and give run-time errors. In v3, the server will refuse to start, as "blue" is not a valid number. Even better, parts of the virtual servers can now be removed at start time: if (0) { sql ldap } When the contents of a condition are statically equivalent to false (e.g. 0), then the contents of the "if" block are completely ignored. It lets you have conditional parts of the configuration, which have zero run-time CPU or memory cost. Alan DeKok.

3 4

ASSERT FAILED
by Maja Wolniewicz 17 May '13

17 May '13

Hi, When I put something like that into unlang rules: %{%{Operator-Name}:-} my server fails with ASSERT FAILED src/main/xlat.c[1509]: node->alternate != NULL The same is with other attribute names. When I put non empty default value all goes smoothly. I'm testing the current master git version: radiusd: FreeRADIUS Version 3.0.0 (git #6d78b5f) Maja -- Maja Gorecka-Wolniewicz mgw(a)umk.pl Uczelniane Centrum Information & Communication Informatyczne Technology Centre Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574

4 11

Commit report for master branch
by announce＠freeradius.org 16 May '13

16 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== 'A' is a valid base64 character Alan T. DeKok@2013-05-16T16:43:21Z Files modified: * src/lib/base64.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d34c33d2b70e69eeefd4… ====== Tests for xlat output Alan T. DeKok@2013-05-16T15:31:56Z Files modified: * src/include/parser.h * src/main/radattr.c * src/main/xlat.c * src/tests/xlat.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e07b87d38abcb5fa4d3a… ====== Save the parsed array reference Alan T. DeKok@2013-05-16T15:31:38Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf6e5b1c2ea2a13b137c… ====== Allow RHS of xlat alternation to be empty Alan T. DeKok@2013-05-16T15:06:03Z Files modified: * src/main/xlat.c * src/tests/xlat.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d8c42aee4920c792cdfb… ====== Close FD before returning Alan T. DeKok@2013-05-16T00:11:32Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f39d76611b20699a7290… ====== Use correct version of radius_xlat Alan T. DeKok@2013-05-16T00:10:46Z Files modified: * src/modules/rlm_radutmp/rlm_radutmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/655385635dcec39e450a… ====== -- This commit summary was generated @2013-05-17T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0