July 2014 - Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 20 Jul '14

20 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #737 from herwinw/segfault_invalid_file_perl Added a NULL check to rlm_perl Alan DeKok@2014-07-20T15:22:37Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8df37ad5a8e938d84ec… ====== Added a NULL check to rlm_perl Otherwise, trying to start rlm_perl with an invalid file parameter would cause a segfault. Herwin Weststrate@2014-07-20T10:57:21Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab5a15eb51283727b56c… ====== -- This commit summary was generated @2014-07-21T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 16 Jul '14

16 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== dhcpclient - timeout and decline, release, inform Added receive timeout on socket according to -t option (retries are still not handled). Added commands for "decline", "release" and "inform" messages. Updated usage. Nicolas C (via Arran Cudbard-Bell)@2014-07-16T20:52:27Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/403230d9264fd0e6ce4f… ====== Add description of -P option to man pages Add description of -P option to radtest and radclient man pages. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:51:00Z Files modified: * man/man1/radclient.1 * man/man1/radtest.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55f203ae0898fb702b18… ====== Clarify conditions of limit hit SNMP notifications Use "hit" instead of "reach" in the descriptions of serverMaxRequest and serverMaxThreads SNMP notifications to make it clearer that they trigger upon attempt to exceed the limit, not upon reaching the maximum allowed value. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:56Z Files modified: * mibs/FREERADIUS-NOTIFICATION-MIB.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1970606d45bfd82c143… ====== Switch .cnf files to sha256 message digest Use sha256 as default_md (message digest) in all .cnf files as it is more secure than the previous, now considered weak, sha1. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:53Z Files modified: * raddb/certs/ca.cnf * raddb/certs/client.cnf * raddb/certs/server.cnf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ec21dd0d1772471e34f… ====== Add minimal rlm_krb5 documentation file Add doc/modules/rlm_krb5 - a minimal rlm_krb5 module documentation file, based on the wiki page. Update raddb/mods-available/krb5 comments to point to the actual and proper location. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:50Z Files modified: * doc/modules/rlm_krb5 * raddb/mods-available/krb5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/54b984f780ffafaf93bb… ====== -- This commit summary was generated @2014-07-17T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 16 Jul '14

16 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #732 from nchaigne/v3.0.x dhcpclient - timeout and decline, release, inform Arran Cudbard-Bell@2014-07-16T20:51:30Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eeaca37fd844026e8eff… ====== dhcpclient - timeout and decline, release, inform Added receive timeout on socket according to -t option (retries are still not handled). Added commands for "decline", "release" and "inform" messages. Updated usage. Nicolas C@2014-07-16T16:16:59Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be33e21913803de6d2c3… ====== Merge pull request #734 from spbnick/switch_cnf_to_sha256 Switch .cnf files to sha256 message digest Arran Cudbard-Bell@2014-07-16T20:50:27Z Files modified: * raddb/certs/ca.cnf * raddb/certs/client.cnf * raddb/certs/server.cnf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed2100d9b45ce8440411… ====== Switch .cnf files to sha256 message digest Use sha256 as default_md (message digest) in all .cnf files as it is more secure than the previous, now considered weak, sha1. Nikolai Kondrashov@2014-07-16T19:51:33Z Files modified: * raddb/certs/ca.cnf * raddb/certs/client.cnf * raddb/certs/server.cnf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/515e5e9cf9404d2d80a0… ====== Merge pull request #736 from spbnick/add_rlm_krb5_doc Add minimal rlm_krb5 documentation file Arran Cudbard-Bell@2014-07-16T20:50:08Z Files modified: * doc/modules/rlm_krb5 * raddb/mods-available/krb5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21bfdf44061184c69f74… ====== Add minimal rlm_krb5 documentation file Add doc/modules/rlm_krb5 - a minimal rlm_krb5 module documentation file, based on the wiki page. Update raddb/mods-available/krb5 comments to point to the actual and proper location. Nikolai Kondrashov@2014-07-16T19:50:49Z Files modified: * doc/modules/rlm_krb5 * raddb/mods-available/krb5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d4d0246fa51097840a2… ====== Merge pull request #735 from spbnick/add_P_option_to_man_pages Add description of -P option to man pages Arran Cudbard-Bell@2014-07-16T20:49:51Z Files modified: * man/man1/radclient.1 * man/man1/radtest.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00c97ec743e475f80a4a… ====== Add description of -P option to man pages Add description of -P option to radtest and radclient man pages. Nikolai Kondrashov@2014-07-16T19:52:30Z Files modified: * man/man1/radclient.1 * man/man1/radtest.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4097b0b7a024d223a257… ====== Merge pull request #733 from spbnick/clarify_snmp_trap_conditions Clarify conditions of limit hit SNMP notifications Arran Cudbard-Bell@2014-07-16T20:49:22Z Files modified: * mibs/FREERADIUS-NOTIFICATION-MIB.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a2c7a8d263d5a65cb9c… ====== Clarify conditions of limit hit SNMP notifications Use "hit" instead of "reach" in the descriptions of serverMaxRequest and serverMaxThreads SNMP notifications to make it clearer that they trigger upon attempt to exceed the limit, not upon reaching the maximum allowed value. Nikolai Kondrashov@2014-07-16T19:52:06Z Files modified: * mibs/FREERADIUS-NOTIFICATION-MIB.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ca930d24d51c512075c… ====== -- This commit summary was generated @2014-07-17T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

about that partial copy of radiusclient in pppd/plugins/radius
by Michael Richardson 16 Jul '14

16 Jul '14

This got rejected since I hit send before I had subscribed completely.

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 15 Jul '14

15 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More changes Alan T. DeKok@2014-07-15T14:11:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d257e796f9ad1c62075c… ====== Note recent changes Alan T. DeKok@2014-07-15T14:06:01Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b707d3a44c8e2ba8d48f… ====== Check BN_rand_range return value CVE-2014-4733. In practice, the function should never fail. jvoisin (via Alan T. DeKok)@2014-07-15T01:34:42Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c3e8546f1057754dabdb… ====== Constant time memory comparison. CVE-2014-4731. Non-constant time comparisons usually require millions of packets in order to get enough statistics. This is VERY hard to do with WiFi or wired 802.1X. The delays on switch port open / close are on the order of seconds. jvoisin (via Alan T. DeKok)@2014-07-15T01:31:02Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0e01ff9a9df52ab0270… ====== Use *_clear_free instead of *_free. CVE-2014-4732 jvoisin (via Alan T. DeKok)@2014-07-15T01:29:06Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22297d7bff6f1d5517eb… ====== -- This commit summary was generated @2014-07-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 15 Jul '14

15 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Check BN_rand_range return value CVE-2014-4733. In practice, the function should never fail. jvoisin (via Alan T. DeKok)@2014-07-15T01:37:05Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52328081b0afb6b756c2… ====== Constant time memory comparison. CVE-2014-4731. Non-constant time comparisons usually require millions of packets in order to get enough statistics. This is VERY hard to do with WiFi or wired 802.1X. The delays on switch port open / close are on the order of seconds. jvoisin (via Alan T. DeKok)@2014-07-15T01:37:03Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/403722205996c5d53692… ====== Use *_clear_free instead of *_free. CVE-2014-4732 jvoisin (via Alan T. DeKok)@2014-07-15T01:37:02Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c272a5cd9cc6c9ba420a… ====== -- This commit summary was generated @2014-07-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 13 Jul '14

13 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== dhcpclient - store xid when encoding request Fixes the incorrect debug message "Encoding DHCP-Discover of id ffffffff". And this will allow to correlate xid from response (should be done by the client, but not yet). Nicolas C (via Alan T. DeKok)@2014-07-13T19:29:07Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/227a946b2c35efebad26… ====== -- This commit summary was generated @2014-07-14T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 12 Jul '14

12 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update ChangeLog Arran Cudbard-Bell@2014-07-12T21:02:20Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4a382ca4f9342cb3d160… ====== Add module type sanity check Arran Cudbard-Bell@2014-07-12T19:43:07Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8b7756dd63a536099bd… ====== Add support for connection pool reuse Arran Cudbard-Bell@2014-07-12T19:43:07Z Files modified: * src/include/conffile.h * src/include/connection.h * src/include/modpriv.h * src/main/conffile.c * src/main/connection.c * src/main/modules.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93a297a98b16e60dbe2e… ====== Convert another argument to bool Arran Cudbard-Bell@2014-07-12T19:43:06Z Files modified: * src/include/modpriv.h * src/main/command.c * src/main/modcall.c * src/main/modules.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ccffc8631184606a9b5… ====== Merge pull request #730 from nchaigne/v3.0.x dhcpclient - store xid when encoding request Alan DeKok@2014-07-12T15:40:30Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b85d952a0c10afe4d01e… ====== dhcpclient - store xid when encoding request Fixes the incorrect debug message "Encoding DHCP-Discover of id ffffffff". And this will allow to correlate xid from response (should be done by the client, but not yet). Nicolas C@2014-07-11T18:16:46Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69bfb4d61b5de4f672f8… ====== -- This commit summary was generated @2014-07-13T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 12 Jul '14

12 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add module type sanity check Arran Cudbard-Bell@2014-07-12T19:41:47Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7911d9dd94c0afd8b215… ====== Add support for connection pool reuse Arran Cudbard-Bell@2014-07-12T16:53:34Z Files modified: * src/include/conffile.h * src/include/connection.h * src/include/modpriv.h * src/main/conffile.c * src/main/connection.c * src/main/modules.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/05740186b3a30d9bab81… ====== Convert another argument to bool Arran Cudbard-Bell@2014-07-12T16:28:21Z Files modified: * src/include/modpriv.h * src/main/command.c * src/main/modcall.c * src/main/modules.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0a203fab54b3524d461… ====== -- This commit summary was generated @2014-07-13T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Monthly traffic limit
by MegaHostZone Santu Roy 11 Jul '14

11 Jul '14

Hello I have setup freeradius with mikrotik as NAS. I am working on a ISP project where i need to make some package like traffic limit per month for example one user can use 4GB of traffic with speed of 1mbps after the 4GB we will be disconnect automatically... i configure counter.conf sqlcounter monthlytraffic { counter-name = Monthly-Traffic check-name = Max-Monthly-Traffic reply-name = Mikrotik-Xmit-Limit-Gigawords sqlmod-inst = sql key = User-Name reset = monthly query = "SELECT SUM(AcctInputOctets - GREATEST((%b - UNIX_TIMESTAMP(AcctStartTime)), 0))+ SUM(AcctOutputOctets -GREATEST((%b - >UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{%k}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime '%b'" } And added following in mysql database table radcheck | username | attribute | op | value || user | Cleartext-Password | := | internet | | user | Mikrotik-Xmit-Limit-Gigawords | := | 2 | | user | Expiration | := | 08 Aug 2014 | but this is not working kindly help to solve this problem -- *Regards*Santu Roy www.megahostzone.com

1 0