July 2014 - Freeradius-Devel - lists.freeradius.org

tls-psk-identity fix
by Kevin Wasserman 24 Jul '14

24 Jul '14

Currently, the tls-psk-identity attribute is determined while the tls connection is established, but then discarded prior to packet decode. The attached patch makes the tls-psk-identity attribute available during request processing. This is important for implementing constraint enforcement policy in Moonshot. Kevin Wasserman Painless Security, LLC --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com

3 3

Commit report for v3.0.x branch
by announce＠freeradius.org 23 Jul '14

23 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Continue to build functions which don't rely on libpcap, when we don't have libpcap Arran Cudbard-Bell@2014-07-23T18:50:28Z Files modified: * src/include/pcap.h * src/lib/pcap.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c465ce2c6ae1d4d15e16… ====== Fix formatting of switch statements Arran Cudbard-Bell@2014-07-23T18:42:43Z Files modified: * src/lib/dict.c * src/lib/getaddrinfo.c * src/lib/pcap.c * src/lib/print.c * src/lib/radius.c * src/lib/snprintf.c * src/lib/token.c * src/lib/valuepair.c * src/main/acct.c * src/main/auth.c * src/main/collectd.c * src/main/detail.c * src/main/evaluate.c * src/main/modules.c * src/main/radwho.c * src/main/realms.c * src/main/soh.c * src/main/tls.c * src/main/unittest.c * src/main/util.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_couchbase/couchbase.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ippool/rlm_ippool_tool.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_otp/otp_pw_valid.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_unix/rlm_unix.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/907d6227ca0560b47249… ====== -- This commit summary was generated @2014-07-24T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 23 Jul '14

23 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Continue to build functions which don't rely on libpcap, when we don't have libpcap Arran Cudbard-Bell@2014-07-23T18:49:32Z Files modified: * src/include/pcap.h * src/lib/pcap.c * src/main/radsniff.c * src/modules/proto_arp/proto_arp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8be604639e2327998316… ====== Fix formatting of switch statements Arran Cudbard-Bell@2014-07-23T18:40:57Z Files modified: * src/lib/dict.c * src/lib/getaddrinfo.c * src/lib/pcap.c * src/lib/print.c * src/lib/radius.c * src/lib/snprintf.c * src/lib/token.c * src/lib/valuepair.c * src/main/acct.c * src/main/auth.c * src/main/collectd.c * src/main/detail.c * src/main/evaluate.c * src/main/modules.c * src/main/radwho.c * src/main/realms.c * src/main/soh.c * src/main/tls.c * src/main/unittest.c * src/main/util.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_couchbase/couchbase.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_eap/libeap/comp128.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ippool/rlm_ippool_tool.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_otp/otp_pw_valid.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_unix/rlm_unix.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3baf615892d9fa3b365… ====== -- This commit summary was generated @2014-07-24T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Example Moonshot Policies
by Sam Hartman 23 Jul '14

23 Jul '14

Hi. We've been working with Alan to get some changes related to Moonshot (http://www.project-moonshot.org/ ) into FreeRADIUS. Thanks to his work, most of our changes are now in the code base. There's one change not yet integrated related to the support of a trust router for dynamic realm provisioning. We're putting together a number of sample policies. In particular: * Updates to the channel binding virtual server to do correct matching of ABFAB requests information * A policy for an ABFAB IDP (home AAA server) to use to verify that information supplied by the NAS matches what's expected for that NAS according to a database provisioned by the trust router * A policy to run on a proxy near the NAS to verify that the NAS is claiming the correct identity based on client configuration. None of these policies actually depend on the trust router code that isn't yet integrated, although most useful configurations where you'd want to turn on these policies would require that code. we'd like to supply these sample policies to be included. For the most part our preference is to give a policy.d file so that it can be easily updated. would you prefer that we also contribute commented out code to invoke this policy at the right places in sites-available? Should we contribute a sample database module to demonstrate the database we're using Or would you rather us put that in the trust router package? Thanks, --Sam

2 3

Commit report for v3.0.x branch
by announce＠freeradius.org 22 Jul '14

22 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #742 from qnet-herwin/rlm_perl_v3.0.x Fix error in attribute copying to rlm_perl Arran Cudbard-Bell@2014-07-22T19:23:22Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d013d4d7a3d2bd48218c… ====== Fix error in attribute copying to rlm_perl Introduced in commit c225c615760d4c907640ebd249f860d5ab3258dd. It copied the RAD_REPLY hash twice, which had the side effects that some keys dropped out. Herwin Weststrate@2014-07-22T18:06:33Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eca14dcf7b94d69b8ac5… ====== -- This commit summary was generated @2014-07-23T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 21 Jul '14

21 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Debian: Ensure some directories exist This prevents some warnings when installing the package. Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-21T18:36:15Z Files modified: * debian/freeradius.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb9a2fbd065728b94bd1… ====== Other perl formatting Arran Cudbard-Bell@2014-07-21T16:49:23Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c225c615760d4c907640… ====== Fix multivalues attributes in rlm_perl. Addresses #731, Addresses #722 Arran Cudbard-Bell@2014-07-21T16:48:18Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8f4e239539802f329555… ====== Add the gigawords calculation for MSSQL in accounting stop SQL clause root (via Alan T. DeKok)@2014-07-21T14:35:57Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e41443bb6aace79a781b… ====== -- This commit summary was generated @2014-07-22T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 21 Jul '14

21 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #738 from sylphlin/v2.x.x Add the gigawords calculation for MSSQL in accounting stop SQL clause Arran Cudbard-Bell@2014-07-21T12:57:12Z Files modified: * raddb/sql/mssql/dialup.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ce82f2ed5db48be5823… ====== Add the gigawords calculation for MSSQL in accounting stop SQL clause root@2014-07-21T08:30:19Z Files modified: * raddb/sql/mssql/dialup.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e36035ced6f98bc2d266… ====== -- This commit summary was generated @2014-07-22T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 21 Jul '14

21 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #740 from qnet-herwin/debian_var_run_freeradius Debian: Ensure some directories exist Arran Cudbard-Bell@2014-07-21T18:35:59Z Files modified: * debian/freeradius.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a761a4fbce0914dd9c4… ====== Debian: Ensure some directories exist This prevents some warnings when installing the package. Herwin Weststrate@2014-07-21T18:29:59Z Files modified: * debian/freeradius.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fed5bcbb59c3471bddc3… ====== Other perl formatting Arran Cudbard-Bell@2014-07-21T16:54:44Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/316a7c96b780d94e4a61… ====== Fix multivalues attributes in rlm_perl Arran Cudbard-Bell@2014-07-21T16:54:01Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bdf7a9d99a80c7fc90b… ====== Merge pull request #739 from sylphlin/master Add the gigawords calculation for MSSQL in accounting stop SQL clause Alan DeKok@2014-07-21T14:35:35Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ca9068e03aaa62430be… ====== Add the gigawords calculation for MSSQL in accounting stop SQL clause root@2014-07-21T08:42:42Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/83a0e34fcdb86dbf05b8… ====== -- This commit summary was generated @2014-07-22T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

MEMORY LEAK IN RADEAPCLIENT
by roshith 21 Jul '14

21 Jul '14

Hi, Iam setting up a freeradius server in my ubuntu12.04 . freeradius: *FreeRADIUS Version 2.1.10*, for host i686-pc-linux-gnu, built on Feb 24 2014 at 15:16:51 I installed freeradius using : apt-get install freeradius. I tested my server using radtest (both radclient and radeapclient) thats provided along with it. This works fine... I tested radclient and radeapclient using valgrind to check the memory usages. Radclient didnt show any memory leak, but *Radeapclient shows memory leakage!!*..* *Is it something to worry about? Is this issue been fixed? Please help me asap. Any help is much appreciated. valgrind out for radeapclient: ==8675== HEAP SUMMARY: ==8675== in use at exit: 791,034 bytes in 20,950 blocks ==8675== total heap usage: 21,238 allocs, 288 frees, 888,567 bytes allocated ==8675== ==8675== Searching for pointers to 20,950 not-freed blocks ==8675== Checked 1,262,820 bytes ==8675== ==8675== 31 bytes in 2 blocks are definitely lost in loss record 4 of 46 ==8675== at 0x402BE68: malloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==8675== by 0x4058F71: eap_wireformat (in /usr/lib/freeradius/libfreeradius-eap-2.1.10.so) ==8675== by 0x4059112: eap_basic_compose (in /usr/lib/freeradius/libfreeradius-eap-2.1.10.so) ==8675== by 0x8049B84: ??? (in /usr/bin/radeapclient) ==8675== by 0x41094D2: (below main) (libc-start.c:226) ==8675== ==8675== 2,544 (104 direct, 2,440 indirect) bytes in 1 blocks are definitely lost in loss record 32 of 46 ==8675== at 0x402BE68: malloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==8675== by 0x4044B29: rad_alloc (in /usr/lib/freeradius/libfreeradius-radius-2.1.10.so) ==8675== by 0x41094D2: (below main) (libc-start.c:226) ==8675== ==8675== 8,324 (208 direct, 8,116 indirect) bytes in 2 blocks are definitely lost in loss record 37 of 46 ==8675== at 0x402BE68: malloc (in /usr/lib/valgrind/vgpreload_memcheck-x86-linux.so) ==8675== by 0x4044D1F: rad_recv (in /usr/lib/freeradius/libfreeradius-radius-2.1.10.so) ==8675== by 0x804B530: ??? (in /usr/bin/radeapclient) ==8675== by 0x8049C2B: ??? (in /usr/bin/radeapclient) ==8675== by 0x41094D2: (below main) (libc-start.c:226) ==8675== ==8675== LEAK SUMMARY: ==8675== definitely lost: 343 bytes in 5 blocks ==8675== indirectly lost: 10,556 bytes in 38 blocks ==8675== possibly lost: 0 bytes in 0 blocks ==8675== still reachable: 780,135 bytes in 20,907 blocks ==8675== suppressed: 0 bytes in 0 blocks

7 8

Commit report for v3.0.x branch
by announce＠freeradius.org 20 Jul '14

20 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Added a NULL check to rlm_perl Otherwise, trying to start rlm_perl with an invalid file parameter would cause a segfault. Herwin Weststrate (via Alan T. DeKok)@2014-07-20T15:22:57Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd0acc6f1812ea1d7c16… ====== -- This commit summary was generated @2014-07-21T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0