August 2015 - Freeradius-Devel - lists.freeradius.org

Commit report for v3.1.x branch
by announce＠freeradius.org 18 Aug '15

18 Aug '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add OCSP caching Arran Cudbard-Bell@2015-08-18T03:35:12Z Files modified: * raddb/mods-available/eap * share/dictionary.freeradius.internal * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/baac1bae067522be0231… ====== -- This commit summary was generated @2015-08-19T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

rlm_ldap with pre and post proxy
by Peter Lambrechtsen 17 Aug '15

17 Aug '15

Hello I was wondering if there would be any complaints if the PRE_PROXY and POST_PROXY methods in the rlm_ldap module were added to call mod_authorize in rlm_ldap.c extern module_t rlm_ldap; module_t rlm_ldap = { .magic = RLM_MODULE_INIT, .name = "ldap", .inst_size = sizeof(rlm_ldap_t), .config = module_config, .bootstrap = mod_bootstrap, .instantiate = mod_instantiate, .detach = mod_detach, .methods = { [MOD_AUTHENTICATE] = mod_authenticate, [MOD_AUTHORIZE] = mod_authorize, [MOD_ACCOUNTING] = mod_accounting, [MOD_POST_AUTH] = mod_post_auth, #ifdef WITH_PROXY [MOD_PRE_PROXY] = mod_authorize, [MOD_POST_PROXY] = mod_authorize, #endif }, }; As that means I can inject some extra VSA's in a Access-Accept back to the Client. I'm currently rebuilding a hosted Radius Proxy service that sends a very stripped down list of attributes to the end customer which rlm_attr_filter deals nicely to in pre-proxy, but based on the accept I want to inject a whole lot of L2TP realm specific VSAs before the response goes back to the NAS that the end customer has no idea of. I had thought if I had added in the valuepair_attribute I could add proxy-reply: but in the authorize section I get an error as it's invalid in this context: (1) ldap: control:Proxy-To-Realm := "Group1" (1) ldap: WARNING: List "proxy-reply" is not available (1) ldap: ERROR: Mapping "L2TP" -> "proxy-reply:Tunnel-Type:2" invalid in this context (1) ldap: WARNING: Failed adding "proxy-reply:Tunnel-Type:2 = L2TP" to request, skipping... But in post-proxy it's happy with that attribute: (1) # Executing section post-proxy from file /appl/freeradius/30x/etc/raddb/sites-enabled/default (1) post-proxy { rlm_ldap (ldap): Reserved connection (3) (1) ldap: EXPAND (cn=%{Realm}) (1) ldap: --> (cn=customer) (1) ldap: Performing search in "o=identities" with filter "(cn=customer)", scope "sub" (1) ldap: Waiting for search result... (1) ldap: User object found at DN "cn=customer,ou=Realms,ou=Proxy,o=Identities" (1) ldap: Processing user attributes (1) ldap: control:Proxy-To-Realm := "Group1" (1) ldap: proxy-reply:Tunnel-Type:2 = L2TP Adding the MOD_PRE/POST_PROXY works for me pointing to mod_authorize, but not sure it's generally an acceptable way to achieve it. Cheers Peter

2 1

Commit report for v3.0.x branch
by announce＠freeradius.org 17 Aug '15

17 Aug '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Print out code, too Alan T. DeKok@2015-08-17T22:13:02Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/edf5476b2fba14268679… ====== Merge pull request #1192 from jpereira/devel/pair1 be 'NOT NULL' to prevent SEGV Arran Cudbard-Bell@2015-08-17T19:28:51Z Files modified: * src/main/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d9d3223bafcaba6adaae… ====== be 'NOT NULL' to prevent SEGV Jorge Pereira@2015-08-17T19:21:12Z Files modified: * src/main/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48ed4bf3a114aaa022db… ====== Set packet->proto Alan T. DeKok@2015-08-17T10:48:05Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c134ab844b5b0610a704… ====== Print out packet code by name Alan T. DeKok@2015-08-17T10:48:05Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3de8ef3c4c5eaf49aecd… ====== We don't need these messages in normal debug mode Alan T. DeKok@2015-08-17T10:48:04Z Files modified: * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87093d7795027770176a… ====== -- This commit summary was generated @2015-08-18T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 17 Aug '15

17 Aug '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Print out code, too Alan T. DeKok@2015-08-17T22:13:16Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/58e7537abca30fd55058… ====== Fix example Arran Cudbard-Bell@2015-08-17T19:45:41Z Files modified: * src/include/tmpl.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1154b96e6fea10505c4… ====== Define UDP/ETH header sizes if we have raw packets or pcap Arran Cudbard-Bell@2015-08-17T19:37:05Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7464d382b15f13b02bbd… ====== Formatting Arran Cudbard-Bell@2015-08-17T19:36:37Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5896aa680b9f06bae1d3… ====== be 'NOT NULL' to prevent SEGV Jorge Pereira (via Arran Cudbard-Bell)@2015-08-17T19:31:24Z Files modified: * src/main/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1a2b2ca89bef5a61ad1… ====== Set packet->proto Alan T. DeKok@2015-08-17T10:48:20Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1510d07241355cb32824… ====== Print out packet code by name Alan T. DeKok@2015-08-17T10:48:19Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e878aae0f4cfe773603… ====== We don't need these messages in normal debug mode Alan T. DeKok@2015-08-17T10:48:18Z Files modified: * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea836fb81a9a52509457… ====== Unused assignment Arran Cudbard-Bell@2015-08-17T03:36:27Z Files modified: * src/modules/rlm_cache/drivers/rlm_cache_redis/rlm_cache_redis.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3583c92791ad4174c0f7… ====== Add function to simplifying pipeline draining Arran Cudbard-Bell@2015-08-17T03:22:42Z Files modified: * src/modules/rlm_cache/drivers/rlm_cache_redis/rlm_cache_redis.c * src/modules/rlm_redis/cluster.c * src/modules/rlm_redis/cluster.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2970e93516db7f58b518… ====== Add support for identifying NOSCRIPT errors We'll likely have more code that relies on server side lua scripts in future Arran Cudbard-Bell@2015-08-17T02:31:03Z Files modified: * src/modules/rlm_redis/redis.c * src/modules/rlm_redis/redis.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3211b96f1b44c3c032d5… ====== Wrap Arran Cudbard-Bell@2015-08-17T02:26:35Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0075b39bcb6812d408a… ====== -- This commit summary was generated @2015-08-18T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Adding Dictionaries?
by Peter Lambrechtsen 17 Aug '15

17 Aug '15

Is there a policy about which git tag should be used when submitting a pull request for a new dictionary. I have some updates for the Alcatel Lucent SR Dictionary (6527) from the ALU site. Plus have built my own version of the Bridgwater Radius server (3631) for their own radius server I'm busy replacing with FreeRadius that has format=2,1 VSAs that mucked up the Wireshark decode until I figured it out. Since I know that Wireshark use the FreeRadius dictionaries as a souch I thought it would be a good place to have as many dictionaries as possible even though those VSAs would not typically ever be used in FreeRadius. So do I just a select the master branch and send a pull request for the updated dictionaries? Or is there another process such as you not wanting to taint the library with 3rd party dictionaries that wouldn't get used :) Cheers Peter

3 3

Issue with VSA Attributes with Tags and 3.0x
by Peter Lambrechtsen 16 Aug '15

16 Aug '15

Hi I'm trying to pass a number of Tunnel-Type VSAs from RFC2868 back that have multiple tags to a NAS using LDAP generic mapping attributes. This used to work in 2.x, but no longer works in 3.0.x In LDAP I have a multi-valued attribute that contains all the VSAs I want to return: Tunnel-Type:1 = L2TP Tunnel-Type:2 = L2TP Tunnel-Medium-Type:1 = IP Tunnel-Medium-Type:2 = IP Tunnel-Server-Endpoint:1 = 1.2.3.4 Tunnel-Server-Endpoint:2 = 2.3.4.5 Previously in 2.x I had the ldap.attrmap to set the $GENERIC$ point to the ldap attribute I have defined replyItem $GENERIC$ ReplyProfile Received Access-Accept Service-Type = Outbound-User Tunnel-Type:1 = L2TP Tunnel-Type:2 = L2TP Tunnel-Medium-Type:1 = IPv4 Tunnel-Medium-Type:2 = IPv4 Tunnel-Server-Endpoint:1 = "1.2.3.4" Tunnel-Server-Endpoint:2 = "2.3.4.5" Doing the same thing in 3.0.x I have set the update reply to the same LDAP Attribute. update { reply: += 'ReplyProfile' } Received Access-Accept Service-Type = Outbound-User Tunnel-Type:0 = L2TP Tunnel-Type:0 = L2TP Tunnel-Medium-Type:0 = IPv4 Tunnel-Medium-Type:0 = IPv4 Tunnel-Server-Endpoint:0 = "1.2.3.4" Tunnel-Server-Endpoint:0 = "2.3.4.5" The issue I can see is in rlm_ldap it is calling map_to_vp to convert the map into a Value Pair, but the tag never gets added to the VP. In main/map.c under map_to_vp case TMPL_TYPE_LITERAL: Needs to pass back the tag new->tag = map->lhs->tmpl_tag; I've created a pull request here: https://github.com/FreeRADIUS/freeradius-server/pull/1191 Hopefully that's all correct? Cheers Peter

2 5

Commit report for v3.0.x branch
by announce＠freeradius.org 16 Aug '15

16 Aug '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Typo Arran Cudbard-Bell@2015-08-16T19:52:58Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/902ec4320bb76cbf5098… ====== Fix some confusing documentation around ldap profile Arran Cudbard-Bell@2015-08-16T19:49:59Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ad640057168fbd737932… ====== Fix capitalization for sha1_ctx Arran Cudbard-Bell@2015-08-16T19:34:25Z Files modified: * src/include/sha1.h * src/lib/hmacsha1.c * src/lib/sha1.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_eap/libeap/eapcrypto.c * src/modules/rlm_eap/libeap/fips186prf.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_mschap/mschap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4812755123d96bcaeeb1… ====== Move message to debug only. Fixes #1182 Alan T. DeKok@2015-08-16T18:35:50Z Files modified: * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a3d261c650b76dae490… ====== Typo Arran Cudbard-Bell@2015-08-16T01:47:46Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a40b3b599f5fdd09f0e… ====== Fix tags in map_exec_to_vp too Addresses #1191 Arran Cudbard-Bell@2015-08-16T00:59:11Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd714d31da8e7945a69d… ====== Wrap Arran Cudbard-Bell@2015-08-16T00:56:11Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec74804b89620fc380d9… ====== Merge pull request #1191 from plambrechtsen/v3.0.x Added tag to map Arran Cudbard-Bell@2015-08-16T00:55:46Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4a7e748bfd28ad109c0f… ====== Added tag to map plambrechtsen@2015-08-16T00:12:06Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ce35b0f2f682b5539704… ====== -- This commit summary was generated @2015-08-17T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 16 Aug '15

16 Aug '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Typo Arran Cudbard-Bell@2015-08-16T19:53:06Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26e66cda7a99420d5a65… ====== Fix some confusing documentation around ldap profile Arran Cudbard-Bell@2015-08-16T19:49:46Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7d2f6ef2113cfbf37c17… ====== Fix capitalization of sha1 ctx Arran Cudbard-Bell@2015-08-16T19:34:36Z Files modified: * src/include/sha1.h * src/lib/hmacsha1.c * src/lib/sha1.c * src/modules/proto_bfd/bfd.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_eap/libeap/eapcrypto.c * src/modules/rlm_eap/libeap/fips186prf.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_mschap/mschap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2be2df7dbc4924c97203… ====== ETH_HDR_SIZE is only used by Linux code Alan T. DeKok@2015-08-16T18:38:42Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3b1a4c1b98784f1fb0d2… ====== Move message to debug only. Fixes #1182 Alan T. DeKok@2015-08-16T18:37:59Z Files modified: * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da0660710bcd9fc84797… ====== Typo Arran Cudbard-Bell@2015-08-16T01:47:39Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/077c57c956cf69dc403b… ====== Fix tags in map_exec_to_vp too Addresses #1191 Arran Cudbard-Bell@2015-08-16T00:59:04Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/07a7da34f212d71c4458… ====== Added tag to map plambrechtsen (via Arran Cudbard-Bell)@2015-08-16T00:56:27Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/294fdaaf54e2aecacb07… ====== -- This commit summary was generated @2015-08-17T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 15 Aug '15

15 Aug '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #1189 from jpereira/man/rlm_detail1 Fixing the rlm_detail manual Arran Cudbard-Bell@2015-08-15T16:01:40Z Files modified: * man/man5/rlm_detail.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1e66bebc9954900495c… ====== Fixing the rlm_detail manual Jorge Pereira@2015-08-13T21:47:43Z Files modified: * man/man5/rlm_detail.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb164a8b9915ffc2b085… ====== Merge pull request #1134 from jpereira/bug/debian-fix-package-dhcp Fix problems with freeradius-dhcp*.deb, refs #1125 Arran Cudbard-Bell@2015-08-15T15:51:52Z Files modified: * debian/freeradius.install * debian/patches/disable-dhcp-bydefault.diff * debian/patches/series Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d78bc2c6050761deb94… ====== Fix problems with freeradius-dhcp*.deb, refs #1125 Jorge Pereira@2015-08-13T21:52:30Z Files modified: * debian/patches/disable-dhcp-bydefault.diff * debian/patches/series Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/357857ebc34919eed859… ====== Don't install proto_dhcp.so in freeradius-*.deb, #1125 Jorge Pereira@2015-08-13T21:52:30Z Files modified: * debian/freeradius.install Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5ab4b7e89c669e683c1… ====== -- This commit summary was generated @2015-08-16T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 15 Aug '15

15 Aug '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== better than ifdef's throughout the code Jorge Pereira (via Arran Cudbard-Bell)@2015-08-15T17:01:46Z Files modified: * src/main/connection.c * src/main/crypt.c * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52050117c405f9435a49… ====== check if have pthread support Jorge Pereira (via Arran Cudbard-Bell)@2015-08-15T16:50:48Z Files modified: * src/include/listen.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c468f5cab761f48e52a… ====== minor tweaks Jorge Pereira (via Arran Cudbard-Bell)@2015-08-15T16:50:40Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b4b41cfca932c4df9d0… ====== Removed unused pthread reference Jorge Pereira (via Arran Cudbard-Bell)@2015-08-15T16:50:32Z Files modified: * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2112b0ef9e8e9b4de2d… ====== Better check about pthread_mutex_lock/unlock Jorge Pereira (via Arran Cudbard-Bell)@2015-08-15T16:50:27Z Files modified: * src/lib/cbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/36654ea85f2927bc526b… ====== Print out euid and egid on file errors Closes #1071 It's a fairly common issue that the server will work fine in debug mode, but fail to start in daemon mode due to file permissions errors. Additional sprinkling of rad_file_error needed. Arran Cudbard-Bell@2015-08-15T16:49:38Z Files modified: * src/include/radiusd.h * src/main/conffile.c * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/522c79a1da0505fcbbc7… ====== Tweak rad_prints_uid/gid Taking a context and not allocating the result string is confusing Arran Cudbard-Bell@2015-08-15T16:49:38Z Files modified: * src/include/radiusd.h * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56b444180cff974ed025… ====== Fixing the rlm_detail manual Jorge Pereira (via Arran Cudbard-Bell)@2015-08-15T16:02:10Z Files modified: * man/man5/rlm_detail.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d3046646a1d2b86f03d… ====== Don't install proto_dhcp.so in freeradius-*.deb, #1125 Jorge Pereira (via Arran Cudbard-Bell)@2015-08-15T15:52:55Z Files modified: * debian/freeradius.install Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed6d52cdd89858c922ca… ====== Fix problems with freeradius-dhcp*.deb, refs #1125 Jorge Pereira (via Arran Cudbard-Bell)@2015-08-15T15:52:39Z Files modified: * debian/patches/disable-dhcp-bydefault.diff * debian/patches/series Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/92d7a970349c042fe3b1… ====== Pass --build-id explicitly in RHEL spec file (allows build to work with clang) Arran Cudbard-Bell@2015-08-15T04:15:36Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/95eb0eb8696c0373a619… ====== Add timespec subtract Arran Cudbard-Bell@2015-08-15T03:59:37Z Files modified: * src/include/conffile.h * src/include/libradius.h * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e71f86d489204e688058… ====== Constify code Arran Cudbard-Bell@2015-08-15T00:47:13Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8502cf5ec2d755f1124d… ====== Formatting Arran Cudbard-Bell@2015-08-15T00:47:08Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bbc1adb6be7542659b9c… ====== -- This commit summary was generated @2015-08-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0