May 2015 - Freeradius-Devel - lists.freeradius.org

rlm_cache_redis
by Arran Cudbard-Bell 27 Aug '15

27 Aug '15

Hi all, There's now a rlm_cache_redis driver that supports caching information in a Redis k/v store in the v3.1.x branch. It behaves pretty much how you'd expect in terms of Redis. The cache entry format is a list built with RPUSH made up of map/op/value triplets. I did experiment with HMSET, but in the end figured it wasn't hugely useful, and that the overhead of building the hash wasn't worth the small functionality increase. In terms of marshalling/unmarshalling: - Octet strings stay as raw binary strings instead of getting converted to hex. - Integers are... weird. I tried writing a mini implementation of the redis protocol so I could insert them (hiredis doesn't allow it with redisCommandArgv) but the Redis server kept throwing back errors. So for now, integers are strings. - Everything else is the string form you'd see in the debug logs. As part of this work rlm_cache was modified to use vp_map_t as its internal cached attribute storage struct, with the LHS being a TMPL_TYPE_ATTR and the RHS being TMPL_TYPE_DATA. This exposes the full range of lists (including CoA/DM) and request refs (outer.) as destinations. It also exposes all the filtering operators. The behaviour of the cache module is now also more consistent with how you'd expect it to operate. The RHS of the update section is evaluated to create the cache entry, and the LHS is evaluated when merging the cache entry. That's it. No partial merges, no other crazy logic. The next few bits of development work related to this are: - Implement redis 3.0 clustering support. This is a priority. - Expose the session state blobs as attributes (couldn't do this in v2.x.x as the attribute buffers weren't large enough) - Remove the code from rlm_eap that deals with storing the session state blobs on disk. - Write a rlm_cache_files driver (to provide similar functionality to that which rlm_eap previously provided) Once that's complete, ultra scalable EAP-TLS/TTLS/PEAP deployments become a possibility. Feel free to play with/break it, and let me know if you have any feature requests. -Arran radiusd -Xx Wed May 20 17:55:43 2015 : Debug: (0) cache: EXPAND TMPL XLAT Wed May 20 17:55:43 2015 : Debug: %{User-Name} Wed May 20 17:55:43 2015 : Debug: Parsed xlat tree: Wed May 20 17:55:43 2015 : Debug: attribute --> User-Name Wed May 20 17:55:43 2015 : Debug: (0) cache: EXPAND %{User-Name} Wed May 20 17:55:43 2015 : Debug: (0) cache: --> foo Wed May 20 17:55:43 2015 : Debug: rlm_cache (cache): Reserved connection (0) Wed May 20 17:55:43 2015 : Debug: (0) cache: LRANGE foo 0 -1 Wed May 20 17:55:43 2015 : Debug: (0) cache: No cache entry found for "foo" Wed May 20 17:55:43 2015 : Debug: (0) cache: Creating new cache entry Wed May 20 17:55:43 2015 : Debug: Cache last updated at %t Wed May 20 17:55:43 2015 : Debug: Parsed xlat tree: Wed May 20 17:55:43 2015 : Debug: literal --> Cache last updated at Wed May 20 17:55:43 2015 : Debug: percent --> t Wed May 20 17:55:43 2015 : Debug: (0) cache: EXPAND Cache last updated at %t Wed May 20 17:55:43 2015 : Debug: (0) cache: --> Cache last updated at Wed May 20 17:55:43 2015 Wed May 20 17:55:43 2015 : Debug: (0) cache: reply:Reply-Message += Cache last updated at Wed May 20 17:55:43 2015 Wed May 20 17:55:43 2015 : Debug: %{randstr:ssssssssssssssssssssssssssssssss} Wed May 20 17:55:43 2015 : Debug: Parsed xlat tree: Wed May 20 17:55:43 2015 : Debug: xlat --> randstr Wed May 20 17:55:43 2015 : Debug: { Wed May 20 17:55:43 2015 : Debug: literal --> ssssssssssssssssssssssssssssssss Wed May 20 17:55:43 2015 : Debug: } Wed May 20 17:55:43 2015 : Debug: (0) cache: EXPAND %{randstr:ssssssssssssssssssssssssssssssss} Wed May 20 17:55:43 2015 : Debug: (0) cache: --> es/uaTeD0fk3Up8mSgUMDCMJfWgDQAxt Wed May 20 17:55:43 2015 : Debug: (0) cache: reply:Class := 0x65732f756154654430666b335570386d5367554d44434d4a6657674451417874 Wed May 20 17:55:43 2015 : Debug: (0) cache: Pipelining commands Wed May 20 17:55:43 2015 : Debug: (0) cache: MULTI Wed May 20 17:55:43 2015 : Debug: (0) cache: DEL "foo" Wed May 20 17:55:43 2015 : Debug: (0) cache: argv command Wed May 20 17:55:43 2015 : Debug: (0) cache: RPUSH Wed May 20 17:55:43 2015 : Debug: (0) cache: foo Wed May 20 17:55:43 2015 : Debug: (0) cache: &Cache-Created Wed May 20 17:55:43 2015 : Debug: (0) cache: := Wed May 20 17:55:43 2015 : Debug: (0) cache: May 20 2015 17:55:43 EDT Wed May 20 17:55:43 2015 : Debug: (0) cache: &Cache-Expires Wed May 20 17:55:43 2015 : Debug: (0) cache: := Wed May 20 17:55:43 2015 : Debug: (0) cache: May 20 2015 17:55:53 EDT Wed May 20 17:55:43 2015 : Debug: (0) cache: &reply:Reply-Message Wed May 20 17:55:43 2015 : Debug: (0) cache: += Wed May 20 17:55:43 2015 : Debug: (0) cache: Cache last updated at Wed May 20 17:55:43 2015 Wed May 20 17:55:43 2015 : Debug: (0) cache: &reply:Class Wed May 20 17:55:43 2015 : Debug: (0) cache: := Wed May 20 17:55:43 2015 : Debug: (0) cache: es/uaTeD0fk3Up8mSgUMDCMJfWgDQAxt Wed May 20 17:55:43 2015 : Debug: (0) cache: EXPIREAT "foo" 1432158953 Wed May 20 17:55:43 2015 : Debug: (0) cache: EXEC Wed May 20 17:55:43 2015 : Debug: (0) cache: Command results Wed May 20 17:55:43 2015 : Debug: (0) cache: (0) status : OK Wed May 20 17:55:43 2015 : Debug: (0) cache: (1) status : QUEUED Wed May 20 17:55:43 2015 : Debug: (0) cache: (2) status : QUEUED Wed May 20 17:55:43 2015 : Debug: (0) cache: (3) status : QUEUED Wed May 20 17:55:43 2015 : Debug: (0) cache: (4) array[3] Wed May 20 17:55:43 2015 : Debug: (0) cache: (0) integer : 0 Wed May 20 17:55:43 2015 : Debug: (0) cache: (1) integer : 12 Wed May 20 17:55:43 2015 : Debug: (0) cache: (2) integer : 1 Wed May 20 17:55:43 2015 : Debug: (0) cache: Commited entry, TTL 10 seconds Wed May 20 17:55:43 2015 : Debug: rlm_cache (cache): Released connection (0) Wed May 20 17:55:47 2015 : Debug: (1) modsingle[authorize]: calling cache (rlm_cache) for request 1 Wed May 20 17:55:47 2015 : Debug: (1) cache: EXPAND TMPL XLAT Wed May 20 17:55:47 2015 : Debug: %{User-Name} Wed May 20 17:55:47 2015 : Debug: Parsed xlat tree: Wed May 20 17:55:47 2015 : Debug: attribute --> User-Name Wed May 20 17:55:47 2015 : Debug: (1) cache: EXPAND %{User-Name} Wed May 20 17:55:47 2015 : Debug: (1) cache: --> foo Wed May 20 17:55:47 2015 : Debug: rlm_cache (cache): Reserved connection (1) Wed May 20 17:55:47 2015 : Debug: (1) cache: LRANGE foo 0 -1 Wed May 20 17:55:47 2015 : Debug: (1) cache: Got key : &Cache-Created Wed May 20 17:55:47 2015 : Debug: (1) cache: Got op : := Wed May 20 17:55:47 2015 : Debug: (1) cache: Got value : May 20 2015 17:55:43 EDT Wed May 20 17:55:47 2015 : Debug: (1) cache: Got key : &Cache-Expires Wed May 20 17:55:47 2015 : Debug: (1) cache: Got op : := Wed May 20 17:55:47 2015 : Debug: (1) cache: Got value : May 20 2015 17:55:53 EDT Wed May 20 17:55:47 2015 : Debug: (1) cache: Got key : &reply:Reply-Message Wed May 20 17:55:47 2015 : Debug: (1) cache: Got op : += Wed May 20 17:55:47 2015 : Debug: (1) cache: Got value : Cache last updated at Wed May 20 17:55:43 2015 Wed May 20 17:55:47 2015 : Debug: (1) cache: Got key : &reply:Class Wed May 20 17:55:47 2015 : Debug: (1) cache: Got op : := Wed May 20 17:55:47 2015 : Debug: (1) cache: Got value : es/uaTeD0fk3Up8mSgUMDCMJfWgDQAxt Wed May 20 17:55:47 2015 : Debug: (1) cache: Found entry for "foo" Wed May 20 17:55:47 2015 : Debug: (1) cache: Merging cache entry into request Wed May 20 17:55:47 2015 : Debug: (1) cache: &reply:Reply-Message += Cache last updated at Wed May 20 17:55:43 2015 Wed May 20 17:55:47 2015 : Debug: (1) cache: &reply:Class := 0x65732f756154654430666b335570386d5367554d44434d4a6657674451417874 Wed May 20 17:55:47 2015 : Debug: rlm_cache (cache): Released connection (1) Wed May 20 17:55:47 2015 : Debug: (1) modsingle[authorize]: returned from cache (rlm_cache) for request 1 Wed May 20 17:55:47 2015 : Debug: (1) [cache] = updated

2 3

Commit report for v2.x.x branch
by announce＠freeradius.org 31 May '15

31 May '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Note recent changes Alan T. DeKok@2015-05-31T16:46:39Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fbaa3226256543fc5d0… ====== Allow post-auth to return reject If so, return Access-Reject Alan T. DeKok@2015-05-31T14:11:42Z Files modified: * src/main/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba502e11ec85a0e23006… ====== -- This commit summary was generated @2015-06-01T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 29 May '15

29 May '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Assert not required and causes warnings with NDEBUG Arran Cudbard-Bell@2015-05-29T22:07:49Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc932a70b6668ff4dd23… ====== Typo Arran Cudbard-Bell@2015-05-29T21:41:21Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3ba668ab3007b2842a2d… ====== Check we've not reached the end of the result set Arran Cudbard-Bell@2015-05-29T21:36:58Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4e6572b736fa8a69fd3… ====== Make sql_fetch_row codes and behaviour consistent Arran Cudbard-Bell@2015-05-29T21:26:00Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_firebird/rlm_sql_firebird.c * src/modules/rlm_sql/drivers/rlm_sql_iodbc/rlm_sql_iodbc.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/rlm_sql_unixodbc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6842ae4df428406880af… ====== Fix abort in rlm_sql map Arran Cudbard-Bell@2015-05-29T21:18:52Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6b43ce62f131a95b8ae… ====== Merge pull request #1024 from jpereira/develop-bugfix-radmin1-v3.1.x bugfix a SIGSEGV during 'show debug condition' in radmin Arran Cudbard-Bell@2015-05-29T21:01:28Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3aad3297c1d087177978… ====== bugfix a SIGSEGV during 'show debug condition' in radmin Jorge Pereira@2015-05-29T20:56:52Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8fbca681507210ffd847… ====== nitgroups only when changing UIDs Alan T. DeKok@2015-05-29T18:10:47Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/603b519902b1f80dc56f… ====== Parent may be NULL Arran Cudbard-Bell@2015-05-29T17:37:53Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20274efcf309b9746554… ====== Allow the server to start as "radiusd" with "user = radiusd" Alan T. DeKok@2015-05-29T16:55:50Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a13dfa32c196ce6f91f2… ====== send packet as the last thing in a thread Alan T. DeKok@2015-05-29T02:49:08Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd6fc66744096dfa22db… ====== -- This commit summary was generated @2015-05-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 29 May '15

29 May '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Assert not required and causes warnings with NDEBUG Arran Cudbard-Bell@2015-05-29T22:07:24Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8f3f8d494ac3a08ccfd… ====== Typo Arran Cudbard-Bell@2015-05-29T21:41:39Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/28ccbfdce1922d50eab5… ====== bugfix a SIGSEGV during 'show debug condition' in radmin Jorge Pereira (via Arran Cudbard-Bell)@2015-05-29T21:04:26Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb25ebd6e5f17b681db9… ====== note recent changes Alan T. DeKok@2015-05-29T18:10:37Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/240d55c7e62b403e58b5… ====== nitgroups only when changing UIDs Alan T. DeKok@2015-05-29T18:10:37Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4e206697f78dd920b36… ====== Parent may be NULL Arran Cudbard-Bell@2015-05-29T17:26:17Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b443d3ed112da68caecd… ====== Allow the server to start as "radiusd" with "user = radiusd" Alan T. DeKok@2015-05-29T16:55:25Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3a632446ed2644eb0c6… ====== send packet as the last thing in a thread Alan T. DeKok@2015-05-29T02:48:50Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06c1a8e826ef41640e42… ====== -- This commit summary was generated @2015-05-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Information about branch v3.0.x
by Geaaru 29 May '15

29 May '15

Hi, a stupid question... I see that on branch v3.0.x modules use new syntax for export symbol (with MOD_POST_AUTH,etc.). Instead in freeradius-3.0.8 it is used old syntax: extern module_t rlm_sqlippool; module_t rlm_sqlippool = { >-RLM_MODULE_INIT, >-"sqlippool", >-RLM_TYPE_THREAD_SAFE,>>-/* type */ >-sizeof(rlm_sqlippool_t), >-module_config, >-mod_instantiate,>->-/* instantiation */ >-NULL,>>->->-/* detach */ >-{ >->-NULL,>>->-/* authentication */ >->-NULL,>>->-/* authorization */ >->-NULL,>>->-/* preaccounting */ >->-mod_accounting,>>-/* accounting */ >->-NULL,>>->-/* checksimul */ >->-NULL,>>->-/* pre-proxy */ >->-NULL,>>->-/* post-proxy */ >->-mod_post_auth>>-/* post-auth */ >-}, }; This means that release 3.0.9 will use new syntax like this: extern module_t rlm_sqlippool; module_t rlm_sqlippool = { .magic = RLM_MODULE_INIT, .name = "sqlippool", .type = RLM_TYPE_THREAD_SAFE, .inst_size = sizeof(rlm_sqlippool_t), .config = module_config, .instantiate = mod_instantiate, .methods = { [MOD_ACCOUNTING] = mod_accounting, [MOD_POST_AUTH] = mod_post_auth }, }; Thank you very much in advance. Geaaru

2 2

Commit report for v3.1.x branch
by announce＠freeradius.org 28 May '15

28 May '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Be more careful when originating CoA requests And document the process a bit more Alan T. DeKok@2015-05-28T18:08:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/28982c422c247069858b… ====== Allow sendign CoA packets from post-auth Alan T. DeKok@2015-05-28T17:51:36Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99eeaa152e25323163fd… ====== cp filename may be NULL Alan T. DeKok@2015-05-28T17:50:03Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d23f0ebff01f00432425… ====== -- This commit summary was generated @2015-05-29T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 28 May '15

28 May '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Be more careful when originating CoA requests And document the process a bit more Alan T. DeKok@2015-05-28T18:07:46Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2429ea3b5613706a7bb6… ====== Allow sendign CoA packets from post-auth Alan T. DeKok@2015-05-28T17:49:46Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/370d2516456963ab84ab… ====== cp filename may be NULL Alan T. DeKok@2015-05-28T17:29:26Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/893ee8add2d476a8da63… ====== -- This commit summary was generated @2015-05-29T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Regression in freeradius-3.0.8 with dynamic clients
by Ge＠＠ru 28 May '15

28 May '15

Hi, I don't know if it is an issue or a change on handle configuration files, but if I upgrade to freeradius-3.0.8 and I try to send an Authentication Request (with radclient) to a server with dynamic client I receive error: ERROR: (0) ERROR: Cannot add client x.x.x.x: No secret was specified If I execute radiusd in debug mode all works fine. If I downgrade to freeradius-3.0.7 with same configuration files all works fine with or without debug mode. I will investigate in the code. Can you confirm that there isn't a change on configure dynamic clients on freeradius-3.0.8? Any suggestions ? Thanks in advance D.

4 5

Commit report for v3.0.x branch
by announce＠freeradius.org 27 May '15

27 May '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use correct data types for TLS fields Alan T. DeKok@2015-05-27T17:01:28Z Files modified: * src/include/tls-h * src/main/cb.c * src/main/tls.c * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5bd39b3e9f964371bce6… ====== note recent changes Alan T. DeKok@2015-05-27T16:05:48Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a7424266acde578ac6b… ====== Use allow_retry for expired passwords, too Alan T. DeKok@2015-05-27T16:04:56Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47f7bef434ce1927491f… ====== More debugging Alan T. DeKok@2015-05-27T14:50:30Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1946285b08b7c6c9f01b… ====== -- This commit summary was generated @2015-05-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 27 May '15

27 May '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use correct data types for TLS fields Alan T. DeKok@2015-05-27T17:01:42Z Files modified: * src/include/tls-h * src/main/cb.c * src/main/tls.c * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08f0af28c7ad2db6580f… ====== Use allow_retry for expired passwords, too Alan T. DeKok@2015-05-27T16:06:25Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d6efccbe05fcace39bcd… ====== More debugging Alan T. DeKok@2015-05-27T16:06:24Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef4effe6c567134297c4… ====== -- This commit summary was generated @2015-05-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0