June 2013 - Freeradius-Devel - lists.freeradius.org

Cute trick now in v3:
by Alan DeKok 12 Jun '13

12 Jun '13

update control { Class := 0x7f000001 } update reply { Framed-IP-address := &Class } Access-Accept Framed-IP-Address = 127.0.0.1 It normally requires both sides of an assignment to be the same data type. (e.g. ipaddr). In this case, "octets" can be assigned to "ipaddr" because the octets are 4 bytes in length. This functionality makes it easier to manipulate data. The server previously required that all input data was in printable ASCII form. It can now handle limited forms of binary data, too. The next step is to allow the inverse: Class = &Framed-IP-Address Which will also be helpful. In any case, v3 is pretty much done. Unless there are major roadblocks, it will be released by the end of June, 2013. Alan DeKok.

2 1

Commit report for master branch
by announce＠freeradius.org 11 Jun '13

11 Jun '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Initialize variables correctly Alan T. DeKok@2013-06-11T22:03:03Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75a0fcd76b2f7651bb21… ====== Fixed single character expansion to do only itself, and nothing more Alan T. DeKok@2013-06-11T18:24:02Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8b0dfcbac1f58ea47a5… ====== Allow source for maps to be type octets, and dest to be different So that we can automagically do all kinds of funky things Alan T. DeKok@2013-06-11T15:49:19Z Files modified: * src/main/map.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cae1ea5cd1031a8bfcad… ====== Allow paircopyvpdata() to decode arbitrary data into a new VP Alan T. DeKok@2013-06-11T15:44:08Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf097c9c4f4364db67be… ====== Expose min / max sizes for the data types Alan T. DeKok@2013-06-11T15:23:17Z Files modified: * src/include/libradius.h * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/950fbe9a485de4721de1… ====== Rename "start" to "created" as there's already another "start" Alan T. DeKok@2013-06-11T00:29:29Z Files modified: * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/312dc704ac8f1d6cccdc… ====== -- This commit summary was generated @2013-06-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

invalid variable
by duffy 11 Jun '13

11 Jun '13

hi list, there's something wrong with variable expansion; can someone help us with this? regards, duffy (41) Found Auth-Type = EAP (41) # Executing group from file /etc/raddb/sites-enabled/default (41) group authenticate { (41) - entering group authenticate {...} (41) eap : Expiring EAP session with state 0xbdf36a23b8a07fd1 (41) eap : Finished EAP session with state 0xbdf36a23b8a07fd1 (41) eap : Previous EAP request found for state 0xbdf36a23b8a07fd1, released from the list (41) eap : Peer sent TTLS (21) (41) eap : EAP TTLS (21) (41) eap : Calling eap_ttls to process EAP data (41) eap_ttls : Authenticate (41) eap_ttls : processing EAP-TLS (41) eap_ttls : eaptls_verify returned 7 (41) eap_ttls : Done initial handshake (41) eap_ttls : eaptls_process returned 7 (41) eap_ttls : Session established. Proceeding to decode tunneled attributes. (41) eap_ttls : Got tunneled request User-Name = "test@fr3" MS-CHAP-Challenge = 0x84957d49e3ccb7ccbd30bb106b860eb3 MS-CHAP2-Response = 0x210052f234bbc6cc836c72ed546bc0837d250000000000000000b848ba4232812ff9babc1732f8b9b2921892f0e2a55148a1 (41) eap_ttls : Sending tunneled request User-Name = "test@fr3" MS-CHAP-Challenge = 0x84957d49e3ccb7ccbd30bb106b860eb3 MS-CHAP2-Response = 0x210052f234bbc6cc836c72ed546bc0837d250000000000000000b848ba4232812ff9babc1732f8b9b2921892f0e2a55148a1 server inner-tunnel { (41) # Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel (41) group authorize { (41) - entering group authorize {...} (41) mschap : Found MS-CHAP attributes. Setting 'Auth-Type = mschap' (41) [mschap] = ok (41) suffix : Looking up realm "fr3" for User-Name = "test@fr3" (41) suffix : Found realm "fr3" (41) suffix : Adding Stripped-User-Name = "test" (41) suffix : Adding Realm = "fr3" (41) suffix : Authentication realm is LOCAL. (41) [suffix] = ok (41) update control { (41) Proxy-To-Realm := "LOCAL" (41) } # update control = ok(41) [files] = noop (41) sql : expand: '%{%{Stripped-User-Name}:-%{%{User-Name}:-none}}' -> 'test' (41) sql : SQL-User-Name updated rlm_sql (sql): Reserved connection (41) (41) ERROR: sql : SELECT id, inner_id, attribute, val, op FROM radcheck(COALESCE(NULLIF('%{Event-Timestamp}', ''), '%S')::timestamp with time zone,'%{SQL-User-Name}','%{Realm}','%{Nas-Ip-Address}'::inet,'%{Calling-Station-Id}'::macaddr,parse_bssid(NULLIF('%{WiMAX-BS-Id}', '')),COALESCE(NULLIF('%{WiMAX-PDFID}', ''), '0')::smallint); (41) ERROR: sql : ^ Invalid variable expansion (41) ERROR: sql : Error generating query rlm_sql (sql): Released connection (41) rlm_sql (sql): Opening additional connection (42) rlm_sql (sql): Closing connection (40): Hit idle_timeout, was idle for 90 seconds rlm_sql (sql): You probably need to lower "min" rlm_sql_mysql: Socket destructor called, closing socket (41) [sql] = fail ^C Program received signal SIGINT, Interrupt. 0x00007ffff60084d3 in __select_nocancel () from /lib64/libc.so.6(gdb) bt full#0 0x00007ffff60084d3 in __select_nocancel () from /lib64/libc.so.6 No symbol table info available. #1 0x00007ffff73b8013 in fr_event_loop (el=0xaea650) at src/lib/event.c:390 i = <value optimized out> rcode = <value optimized out> maxfd = 49 when = {tv_sec = 0, tv_usec = 0} wake = <value optimized out> read_fds = {fds_bits = {985162418487296, 0 <repeats 15 times>}} master_fds = {fds_bits = {985162418487296, 0 <repeats 15 times>}} #2 0x000000000041e74c in main (argc=<value optimized out>, argv=<value optimized out>) at src/main/radiusd.c:468 rcode = <value optimized out> argval = <value optimized out> spawn_flag = 0 dont_fork = 1 write_pid = 0 flag = 0 act = {__sigaction_handler = {sa_handler = 0x41eac0 <sig_fatal>, sa_sigaction = 0x41eac0 <sig_fatal>}, sa_mask = {__val = {0 <repeats 16 times>}}, sa_flags = 0, sa_restorer = 0} (gdb)

4 17

Commit report for master branch
by announce＠freeradius.org 09 Jun '13

09 Jun '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use sqlite for CUI by default Arran Cudbard-Bell@2013-06-09T19:07:31Z Files modified: * raddb/mods-available/cui * raddb/mods-available/sql * raddb/sql/cui/sqlite/queries.conf * raddb/sql/cui/sqlite/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ced02ee12aaa93b4b95c… ====== Retrieve instance name earlier in instantiation Arran Cudbard-Bell@2013-06-09T19:06:37Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e53b5edefc1019d84b27… ====== Fix defaults and formatting Arran Cudbard-Bell@2013-06-09T18:01:49Z Files modified: * raddb/sql/cui/mysql/queries.conf * raddb/sql/cui/mysql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f2907bf0b9861cfcf12e… ====== Merge pull request #301 from armitasp/master cui module minor change Arran Cudbard-Bell@2013-06-09T17:36:12Z Files modified: * raddb/mods-available/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/41350628f50c1c83c736… ====== cui module changed to use dialect in driver by default Scott Armitage@2013-06-09T17:20:27Z Files modified: * raddb/mods-available/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d91e773cc880857b8a18… ====== Merge pull request #300 from duchscherd/master Infoblox, Inc dictionary file Alan DeKok@2013-06-09T17:03:12Z Files modified: * share/dictionary.infoblox Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6766d2341d0f1b1462e0… ====== Add dictionary for Infoblox, Inc VSAs Dave Duchscher@2013-06-09T16:21:09Z Files modified: * share/dictionary.infoblox Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a38765e79da2e916101d… ====== Remove extraneous line Alan T. DeKok@2013-06-09T15:20:08Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1462b186fe63ff4f3a19… ====== Fix to use new directory layout Alan T. DeKok@2013-06-09T15:20:08Z Files modified: * raddb/mods-available/dhcp_sqlippool Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dbda9b293fd6637dbda3… ====== Fix abort/segv wheen inserting at the end of a list that has already been iterated over Arran Cudbard-Bell@2013-06-09T08:43:11Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6495d112f68dfa5e621… ====== -- This commit summary was generated @2013-06-10T00:00:07Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 Jun '13

08 Jun '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Slightly easier to type Arran Cudbard-Bell@2013-06-08T22:47:44Z Files modified: * configure * configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da78bad06ff08ed53efd… ====== Unpick some of the rats nest that is the OpenSSL autoconf tests Arran Cudbard-Bell@2013-06-08T22:45:19Z Files modified: * configure * configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e03cf2b02c2fb6c2d200… ====== -- This commit summary was generated @2013-06-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Bad OpenSSL headers OSX 10.8.4
by Arran Cudbard-Bell 08 Jun '13

08 Jun '13

This is to preempt the complaints. I just unpicked some of the OpenSSL tests in configure.in, and added a header/library version consistency check to fail on this early. radiusd won't start unless libssl version matches the value it got from the headers during compilation, so it seems like a good idea to check this as part of the build process. checking openssl/engine.h presence... yes checking for openssl/engine.h... yes checking for OpenSSL version >= 0.9.7... yes checking OpenSSL library and header version consistency... library: 90818f header: 90812f... no configure: error: in `/Users/arr2036/Documents/Repositories/freeradius-server-master': configure: error: OpenSSL library version does not match header version See `config.log' for more details Apple broke OpenSSL in the latest software update (10.8.4) by updating the library version to 90818f but not updating the headers (leaving them at 90812f). Given that it's the same version of openssl 0.9.8 (just different internal revisions) it's probably safe just to edit /usr/include/openssl/opensslv.h. 28 */ 29 #define OPENSSL_VERSION_NUMBER 0x0090812fL 30 #ifdef OPENSSL_FIPS Alternatively you can use something like homebrew to install a newer version, it also had the added bonus that Apple hasn't sprinkled DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER throughout the headers. -Arran Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS Development Team

1 0

EAP-SIM on Radius 3.0 (devel)
by Rodney Machado 07 Jun '13

07 Jun '13

Hi All, I'm testing EAP-SIM support on the latest version of freeradius (got it via git). <command> git clone git://git.freeradius.org/freeradius-server.git </command> After I have compiled and installed it, I have modified the configuration files, as I have done on the older versions (v2.2.0). But, when I try to run the daemon i got this error: <error> /usr/local/etc/raddb/radiusd.conf[613]: Failed to link to module 'rlm_sim_file': rlm_sim_file.so: cannot open shared object file: No such file or directory </error> <modified files> in /usr/local/etc/raddb/radiusd.conf: <changes_in_radiusd.conf> sim_files { simtriplets = "/usr/local/etc/raddb/simtriplets.dat" } </changes_in_radiusd.conf> in /usr/local/etc/raddb/sites-enabled/default <changes_in_default> In authorized {} sim_files </changes_in_default> in /usr/local/etc/raddb/mods-enabled/eap <changes_in_eap> sim{ } </changes_in_eap> What have changed on the 3.0 version (devel) of the freeradius?, perhaps rlm_sim_file is not needed anymore? Or there is a new configuration structure for supporting eap-sim? Please advice. Regards, --RM

5 8

Commit report for v2.x.x branch
by announce＠freeradius.org 06 Jun '13

06 Jun '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Do the lookups only for client certificates Alan T. DeKok@2013-06-06T18:48:52Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e64acdc2912c450d1652… ====== Port TLS-Client-Cert-X509v3* from "master" branch Alan T. DeKok@2013-06-06T18:40:44Z Files modified: * share/dictionary.freeradius.internal * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0fe0208363e8fd0c6b79… ====== -- This commit summary was generated @2013-06-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 06 Jun '13

06 Jun '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Do the lookups only for client certificates Alan T. DeKok@2013-06-06T18:50:26Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f774e6d9a431b0fef15… ====== Add X509 attributes from the client certificate Alan T. DeKok@2013-06-06T17:52:22Z Files modified: * share/dictionary.freeradius.internal * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e049ed061be89346597b… ====== Ensure user_msg is initialized Alan T. DeKok@2013-06-06T16:44:14Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4750b833c934906945f4… ====== -- This commit summary was generated @2013-06-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 05 Jun '13

05 Jun '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update log.h Arran Cudbard-Bell@2013-06-05T17:10:25Z Files modified: * src/include/log.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f466eb13828dd0eca823… ====== -- This commit summary was generated @2013-06-06T00:00:06Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0