January 2015 - Freeradius-Devel - lists.freeradius.org

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

Commit report for master branch
by announce＠freeradius.org 31 Jan '15

31 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix argument order Arran Cudbard-Bell@2015-01-31T18:44:06Z Files modified: * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cff3c628074beb010196… ====== Move inst->config->xlat_name to inst->name Arran Cudbard-Bell@2015-01-31T18:30:04Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20a4b8d9f687a08b964b… ====== Enhance rlm_sql logging to pull more errors back from mysql, and log as much as possible to the request log Arran Cudbard-Bell@2015-01-31T17:20:19Z Files modified: * src/include/log.h * src/modules/rlm_sql/drivers/rlm_sql_db2/rlm_sql_db2.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/rlm_sql_firebird.c * src/modules/rlm_sql/drivers/rlm_sql_freetds/rlm_sql_freetds.c * src/modules/rlm_sql/drivers/rlm_sql_iodbc/rlm_sql_iodbc.c * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.h * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/rlm_sql_unixodbc.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/474da6cf50dc8b8f9585… ====== Remove junk boilerplate text and whitespace from sql drivers to make future diffs easier to read Arran Cudbard-Bell@2015-01-31T17:10:59Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_db2/rlm_sql_db2.c * src/modules/rlm_sql/drivers/rlm_sql_freetds/rlm_sql_freetds.c * src/modules/rlm_sql/drivers/rlm_sql_iodbc/rlm_sql_iodbc.c * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/rlm_sql_unixodbc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8909c0ef4b98df56a5f3… ====== We now allow unix sockets and other schemes as well Arran Cudbard-Bell@2015-01-31T17:07:04Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7403a87466f17b13e54a… ====== RERROR, RWARN, RINFO should all go to the main server log even if there's no request logging function set This allows us to use those macros to log related error messages with the request id, which can be very useful when running in threaded mode and trying to track down SQL issues which involve multiple errors. Arran Cudbard-Bell@2015-01-31T17:04:58Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7be5116a510aed21a29… ====== Formatting Arran Cudbard-Bell@2015-01-31T17:04:54Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5261a48ec553c72ccd9a… ====== -- This commit summary was generated @2015-02-01T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 31 Jan '15

31 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Move inst->config->xlat_name to inst->name Arran Cudbard-Bell@2015-01-31T18:30:35Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5cca34e3a59967f55680… ====== Enhance rlm_sql logging to pull more errors back from mysql, and log as much as possible to the request log Arran Cudbard-Bell@2015-01-31T16:59:58Z Files modified: * src/include/log.h * src/modules/rlm_sql/drivers/rlm_sql_db2/rlm_sql_db2.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/rlm_sql_firebird.c * src/modules/rlm_sql/drivers/rlm_sql_freetds/rlm_sql_freetds.c * src/modules/rlm_sql/drivers/rlm_sql_iodbc/rlm_sql_iodbc.c * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.h * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/rlm_sql_unixodbc.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c3237e70aea9425acbf7… ====== Remove junk boilerplate text and whitespace from sql drivers to make future diffs easier to read Arran Cudbard-Bell@2015-01-31T16:55:31Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_db2/rlm_sql_db2.c * src/modules/rlm_sql/drivers/rlm_sql_freetds/rlm_sql_freetds.c * src/modules/rlm_sql/drivers/rlm_sql_iodbc/rlm_sql_iodbc.c * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/rlm_sql_unixodbc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd8c73254a5df46465e8… ====== We now allow unix sockets and other schemes as well Arran Cudbard-Bell@2015-01-31T16:55:27Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c57dd02a2d8dce2f18ea… ====== RERROR, RWARN, RINFO should all go to the main server log even if there's no request logging function set This allows us to use those macros to log related error messages with the request id, which can be very useful when running in threaded mode and trying to track down SQL issues which involve multiple errors. Arran Cudbard-Bell@2015-01-31T16:55:23Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7caff736104c582f5766… ====== Formatting Arran Cudbard-Bell@2015-01-31T16:55:19Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a38b3901278c215dea7d… ====== Ignore bad Acct-Delay-time values Arran Cudbard-Bell@2015-01-31T05:50:32Z Files modified: * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd7744dcd862d7736f72… ====== -- This commit summary was generated @2015-02-01T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 30 Jan '15

30 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Disallow creation of 'Vendor-Specific = ..' Fixes #894 They should use 'Attr-26 = ..." instead Alan T. DeKok@2015-01-30T17:12:17Z Files modified: * src/lib/value.c * src/tests/unit/vendor.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ac36ae1beeb453edb06… ====== Ensure output is initialized. Closes CID #1267457 Alan T. DeKok@2015-01-30T03:56:46Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/049eea7c176f1fdb327b… ====== -- This commit summary was generated @2015-01-31T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 30 Jan '15

30 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Ignore bad Acct-Delay-time values Arran Cudbard-Bell@2015-01-30T17:46:05Z Files modified: * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06e2d46dd83fa2242291… ====== Disallow creation of 'Vendor-Specific = ..' Fixes #894 They should use 'Attr-26 = ..." instead Alan T. DeKok@2015-01-30T17:12:57Z Files modified: * src/lib/value.c * src/tests/unit/vendor.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6eab1596f7cb3cb65549… ====== Ensure output is initialized. Closes CID #1267457 Alan T. DeKok@2015-01-30T03:56:54Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75e9f6941b7543f013ea… ====== -- This commit summary was generated @2015-01-31T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 29 Jan '15

29 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== MySQL error messages contain single quotes, so don't wrap them in more... Arran Cudbard-Bell@2015-01-29T13:38:11Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2b861ae89293080f9ff… ====== Print the user/group we were using when we tried to open input files and failed It's actually pretty useful to know. Especially as we do different things running with -X. Arran Cudbard-Bell@2015-01-29T08:26:26Z Files modified: * src/include/radiusd.h * src/main/conffile.c * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7bd25053c566ca4c2a49… ====== Error out if we can't set LDAP options Arran Cudbard-Bell@2015-01-29T07:28:44Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cc42990b0fb23c8e49e… ====== Add notes on disabling peercred auth Arran Cudbard-Bell@2015-01-29T05:10:23Z Files modified: * raddb/sites-available/control-socket Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/416cee1416461042efa5… ====== -- This commit summary was generated @2015-01-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 29 Jan '15

29 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== MySQL error messages contain single quotes, so don't wrap them in more... Arran Cudbard-Bell@2015-01-29T13:38:19Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc9df88e594c340de7eb… ====== Print the user/group we were using when we tried to open input files and failed It's actually pretty useful to know. Especially as we do different things running with -X. Arran Cudbard-Bell@2015-01-29T08:26:48Z Files modified: * src/include/radiusd.h * src/main/conffile.c * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5abc45470ffba70b0ce9… ====== Error out if we can't set LDAP options Arran Cudbard-Bell@2015-01-29T07:28:51Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2e870ab39c7dae44a630… ====== Add notes on disabling peercred auth Arran Cudbard-Bell@2015-01-29T05:09:39Z Files modified: * raddb/sites-available/control-socket Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/871d42633800db8701a1… ====== -- This commit summary was generated @2015-01-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

authenticating a guest domain/ntlm_auth in a different AD
by Rui Ribeiro 29 Jan '15

29 Jan '15

Hi, I would like to authenticate a guest domain in a different AD in FR3. I setup up with quite success the guest domain, however when it comes to configure chap, somewhat I cannot get it how to make mschap have too different configurations depending how the domain is called. I tried mschap.newdomain as I saw in some post over here, and it did not work out. The ideia of having to mschap configurations is for calling ntlm_auth with a different Windows DOMAIN. most specifically, this not works. Is it wiser to build a new FR to the guest domain. unlang if (domain == "xxxx" ) { domain.xxxx } mschap module mschap.xxxx -- Regards, -- Rui Ribeiro Senior Sysadm ISCTE-IUL https://www.linkedin.com/pub/rui-ribeiro/16/ab8/434

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 28 Jan '15

28 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Filter out EAP-Message, too. Fixes #893 Alan T. DeKok@2015-01-28T19:53:10Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc0a2062d081c94df834… ====== Notes on new tests Alan T. DeKok@2015-01-28T18:07:09Z Files modified: * src/tests/README Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/feb216136933b714b925… ====== doc cleanups Alan T. DeKok@2015-01-28T17:57:07Z Files modified: * src/tests/xlat/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2649770cc1d05cb45a18… ====== Added simple dynamic xlat tests for stand-alone expansions Alan T. DeKok@2015-01-28T17:54:35Z Files modified: * Makefile * src/main/unittest.c * src/tests/all.mk * src/tests/keywords/all.mk * src/tests/xlat/all.mk * src/tests/xlat/expr.txt * src/tests/xlat/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c053ffc0f55036f66760… ====== We don't need to check for a User-Name in the request to authorize users in rlm_ldap It's not used by the rlm_ldap code, we use a filter to locate the user. Arran Cudbard-Bell@2015-01-28T13:09:22Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ce582dcfce6de15c3d3e… ====== Fix -Winitialize in ippool tool Arran Cudbard-Bell@2015-01-28T11:21:30Z Files modified: * src/modules/rlm_ippool/rlm_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a8784e348c8b966bf0e… ====== Because GCC 4.4.7 apparently doesn't support the 'noreturn' pragma Arran Cudbard-Bell@2015-01-28T11:21:30Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/297137eef626e179d1f3… ====== Normalise indentation in rlm_ldap configure script Arran Cudbard-Bell@2015-01-28T10:52:58Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/491936873f9e1bff2e46… ====== Link to libldap instead of libldap_r This change may be reverted if it causes issues. Arran Cudbard-Bell@2015-01-28T10:52:57Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b46a0b7547a0b1457ace… ====== -- This commit summary was generated @2015-01-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 28 Jan '15

28 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Filter out EAP-Message, too. Fixes #893 Alan T. DeKok@2015-01-28T19:53:38Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9c050461916761d99e15… ====== Added simple dynamic xlat tests for stand-alone expansions Alan T. DeKok@2015-01-28T17:55:07Z Files modified: * Makefile * src/main/unittest.c * src/tests/all.mk * src/tests/keywords/all.mk * src/tests/xlat/all.mk * src/tests/xlat/expr.txt * src/tests/xlat/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6b88722f2b0a1cf46906… ====== We don't need to check for a User-Name in the request to authorize users in rlm_ldap It's not used by the rlm_ldap code, we use a filter to locate the user. Arran Cudbard-Bell@2015-01-28T13:09:15Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c98b59dc11141fac639… ====== Fix -Winitialize in ippool tool Arran Cudbard-Bell@2015-01-28T11:21:17Z Files modified: * src/modules/rlm_ippool/rlm_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/18ac221b81f4b42ee383… ====== Because GCC 4.4.7 apparently doesn't support the 'noreturn' pragma Arran Cudbard-Bell@2015-01-28T11:21:17Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d340256740d2e25e20c… ====== Normalise indentation in rlm_ldap configure script Arran Cudbard-Bell@2015-01-28T10:53:22Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d118901a6dca768759f6… ====== Link to libldap instead of libldap_r This change may be reverted if it causes issues. Arran Cudbard-Bell@2015-01-28T10:53:22Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a7454cae9f837ea03b5… ====== -- This commit summary was generated @2015-01-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0