July 2016 - Freeradius-Devel - lists.freeradius.org

New functionality in 4.0
by Alan DeKok 09 Jul '16

09 Jul '16

As part of cleaning up 4.0, I've just committed a cool new feature: keyed "load-balance" sections. They also work for "redundant-load-balance" load-balance &User-Name { ldap1 ldap2 ldap3 } The key will be expanded at run time, and the contents hashed. The resulting hash will be used to pick one of the children of the "load-balance" section. If there's no key, a child will be picked at random, as before. This can be used to shard accounting packets across multiple databases, for example. The longer-term use of this will be to move proxying to a module, and allow complete control over home server load-balancing via "unlang" statements. Right now, that functionality is all special-purpose code in "realms.c". It works, but it's not easily extensible. Now it's easily extensible. We're also looking into making the new configuration simple to use, so that it's not too much of a change from existing practice. Alan DeKok.

1 0

Two connection pools in one module.
by Ленченко Илья Анатольевич 06 Jul '16

06 Jul '16

Hello, I am writing module for freeradius 3.0.11. Module needs to work with mysql and rabbitMQ both. So i tried to declare two variables of type fr_connection_pool_t in one instance struct: typedef struct rlm_smt_t { const char *mysqlHost; const char *mysqlPort; const char *mysqlUser; const char *mysqlPassword; const char *mysqlSchema; const char *mysqlTable; const char *mysqlRequestPartner; const char *mysqlRequestSession; const char *mysqlRequestSessionTimeout; char const *journalName; const char *rmqHost; const char *rmqUser; const char *rmqPassword; uint32_t rmqPort; const char *rmqVhost; uint32_t rmqTimeout; uint32_t rmqChannel; uint32_t rmqChannelMax; uint32_t rmqFrameMax; uint32_t rmqHeartbeat; int auth_type; fr_connection_pool_t *poolMYSQL; fr_connection_pool_t *poolRabbitMQ; } rlm_smt_t; Then: static int mod_instantiate(CONF_SECTION *conf, void *instance) { rlm_smt_t *inst = instance; inst->poolMYSQL = fr_connection_pool_module_init(conf, inst, mod_conn_create_mysql, NULL, NULL); if (!inst->poolMYSQL) { return -1; } inst->poolRabbitMQ = fr_connection_pool_module_init(conf, inst, mod_conn_create_rmq, NULL, NULL); if (!inst->poolRabbitMQ) { return -1; } return 0; } And: static int mod_detach(void *instance) { rlm_smt_t *inst = instance; fr_connection_pool_free(inst->poolMYSQL); fr_connection_pool_free(inst->poolRabbitMQ); return 0; } It seems to me that module ignores line inst->poolRabbitMQ = fr_connection_pool_module_init(conf, inst, mod_conn_create_rmq, NULL, NULL); And then i get segmentation fault in mod_detach. Is it possible to keep two connection pools in one module? How can i achieve that? Also module reads only one pool from config file, but i need to read two pools. Thanks. Ilya Lenchenko

3 2

SIGSEGV, Segmentation fault in 3.1
by Wegener, Norbert 05 Jul '16

05 Jul '16

With git 479164a792428bb78a1113add1288a66ac94833e from yesterday: gdb ./freeradius-server-3.1.x/sbin/radiusd GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from ./freeradius-server-3.1.x/sbin/radiusd...done. (gdb) set args -X run . .. Program received signal SIGSEGV, Segmentation fault. __strncasecmp_l_avx () at ../sysdeps/x86_64/multiarch/strcmp-sse42.S:235 235 ../sysdeps/x86_64/multiarch/strcmp-sse42.S: Datei oder Verzeichnis nicht gefunden. (gdb) bt #0 __strncasecmp_l_avx () at ../sysdeps/x86_64/multiarch/strcmp-sse42.S:235 #1 0x00007ffff4f02e00 in mod_post_proxy (instance=0xc58600, request=0xf15f10) at src/modules/rlm_eap/rlm_eap.c:540 #2 0x00000000004191ab in unlang_module (component=MOD_POST_PROXY, sp=0xdde350, request=0xf15f10) at src/main/interpreter.c:97 #3 0x000000000041a63e in unlang_single (request=0xf15f10, stack=0x7fffffffd360, presult=0x7fffffffd314, priority=0x7fffffffd318) at src/main/interpreter.c:679 #4 0x000000000041ace0 in unlang_run (request=0xf15f10, stack=0x7fffffffd360, presult=0x7fffffffde68, ppriority=0x7fffffffde6c) at src/main/interpreter.c:883 #5 0x000000000041b09c in unlang_interpret (request=0xf15f10, c=0xdde190, component=MOD_POST_PROXY) at src/main/interpreter.c:1034 #6 0x000000000042e6d5 in indexed_modcall (comp=MOD_POST_PROXY, idx=0, request=0xf15f10) at src/main/modules.c:2067 #7 0x000000000042e8b6 in process_post_proxy (type=0, request=0xf15f10) at src/main/modules.c:2162 #8 0x0000000000448a25 in process_proxy_reply (request=0xf15f10, reply=0xf399c0) at src/main/process.c:2351 #9 0x000000000044a589 in proxy_to_virtual_server (request=0xf15f10) at src/main/process.c:3091 #10 0x000000000044a69b in request_proxy_send (request=0xf15f10) at src/main/process.c:3120 #11 0x0000000000446939 in request_running (request=0xf15f10, action=FR_ACTION_RUN) at src/main/process.c:1473 #12 0x0000000000446af6 in request_queued (request=0xf15f10, action=FR_ACTION_RUN) at src/main/process.c:1533 #13 0x0000000000441f3f in request_enqueue (request=0xf15f10) at src/main/threads.c:315 #14 0x00000000004455a5 in worker_thread (request=0xf15f10, process=0x4469d0 <request_queued>) at src/main/process.c:918 #15 0x0000000000447311 in request_receive (ctx=0xf15c40, listener=0x9ef530, packet=0xf15ca0, client=0xd5b3d0, fun=0x410f50 <rad_authenticate>) at src/main/process.c:1768 #16 0x000000000041f663 in auth_socket_recv (listener=0x9ef530) at src/main/listen.c:1904 #17 0x000000000044e751 in event_socket_handler (xel=0xf07d20, fd=55, ctx=0x9ef530) at src/main/process.c:4560 #18 0x00007ffff79778f9 in fr_event_loop (el=0xf07d20) at src/lib/event.c:636 #19 0x00000000004506ac in radius_event_process () at src/main/process.c:5455 #20 0x0000000000434dbe in main (argc=2, argv=0x7fffffffe638) at src/main/radiusd.c:584 Norbert Wegener

2 2

Commit report for v3.1.x branch
by announce＠freeradius.org 04 Jul '16

04 Jul '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXenEbAAoJEH0Oec13Yh7NcA4H/2XH2j9IDvSHDA4/daAzl1xj ltMyRSm6OZ3EVE0tzLXWPOyRBAXWZ1OFzQeKrrmpzHmkpn6dpLFsSxDq4nxo748B n09AV0t6ZlaQC2w/VVh3PNwwh28Zt3FDACpl/nexz6bUp56a043oxJHGDNZLasZb I2QcXIEVhYwrtU9Hem3Hu0sAMsHi/vxLh8tcctsKjZNTtOan3VQsKMJrhWIpuO5H 1cKTBd9WqEgOZnLA4LgZW9dzkdr54yTLYojmVUk6bbUqKo+oKoKGkG1Z+OMtyIFy eyo/juUF/fM+373YrkB8ehcFjN3P2kNH/vp45AgjExan4/znu9Hb0Nz4L47NTZE= =kXbu -----END PGP SIGNATURE----- secret is talloc'd Alan T. DeKok@2016-07-04T16:22:12Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/479164a792428bb78a11… ====== -- This commit summary was generated @2016-07-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

radeapclient crash in 3.1 - file not found.
by Wegener, Norbert 04 Jul '16

04 Jul '16

Radeapclient in 3.1 seems to be broken in the latest v3.1.x git. It does not connect to the radius but crashes immediately. Using the same datin file with radeapclient 3.0.11 the request is handled as expected. Here gdb's output: gdb ../freeradius-server-3.1.x/bin/radeapclient GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from ../freeradius-server-3.1.x/bin/radeapclient...done. (gdb) set args -x localhost auth testing123 -f datin (gdb) run Starting program: /home/dev/tests/freeradius-server-3.1.x/bin/radeapclient -x localhost auth testing123 -f datin [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Loading input data... Read 1 element(s) from input: datin Loaded: 1 input element(s). Adding new socket: src: 0.0.0.0:0, dst: 127.0.0.1:1812 Added new socket: 5 (num sockets: 1) Transaction: 0, sending packet: 0 (id: 160)... Program received signal SIGABRT, Aborted. 0x00007ffff5eae067 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 ../nptl/sysdeps/unix/sysv/linux/raise.c: Datei oder Verzeichnis nicht gefunden. (gdb) bt #0 0x00007ffff5eae067 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007ffff5eaf448 in __GI_abort () at abort.c:89 #2 0x00007ffff6ec889c in ?? () from /usr/lib/x86_64-linux-gnu/libtalloc.so.2 #3 0x00007ffff6ec801f in ?? () from /usr/lib/x86_64-linux-gnu/libtalloc.so.2 #4 0x00007ffff6ec89fa in talloc_get_size () from /usr/lib/x86_64-linux-gnu/libtalloc.so.2 #5 0x00007ffff7badf49 in fr_radius_sign (packet=0x911e00, original=0x0, secret=0x7fffffffe868 "testing123") at src/lib/radius.c:475 #6 0x00007ffff7bae115 in fr_radius_send (packet=0x911e00, original=0x0, secret=0x7fffffffe868 "testing123") at src/lib/radius.c:551 #7 0x000000000040b293 in rc_send_one_packet (trans=0x911c40, packet_p=0x911c58) at src/modules/rlm_eap/radeapclient.c:1404 #8 0x000000000040b3bc in rc_send_transaction_packet (trans=0x911c40, packet_p=0x911c58) at src/modules/rlm_eap/radeapclient.c:1428 #9 0x000000000040c18d in rc_loop_start_transactions () at src/modules/rlm_eap/radeapclient.c:1842 #10 0x000000000040c1a7 in rc_main_loop () at src/modules/rlm_eap/radeapclient.c:1860 #11 0x000000000040d927 in main (argc=4, argv=0x7fffffffe5f0) at src/modules/rlm_eap/radeapclient.c:2397 (gdb) Norbert Wegener

2 1

Commit report for v3.1.x branch
by announce＠freeradius.org 02 Jul '16

02 Jul '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXeB2WAAoJEH0Oec13Yh7NNQgH/iq0oL5CcoLt2Dx1boxlzhhb YlU6qI/SDuKcX/Q0sVqm+7iSoew/KPzX1edSmqDJX4LsD6lghSpCHOxflFzmE5wV PEd6eujwg9/nMEAii4dTrxiGiB07edxujqvsaRLu6ZpEZN2U9xed9/KJ6+X3fdve zB42o3c9Je8txC43M/ZnQWKK0YW36++yveFJaXUUb/NCmsBaYFtqh9SqYXuNer0b g07/dHg7cu0VhIm8jnF5LYFuT2kRa/RiJ/Glm3JmGblwze1Dt/CNwU5owlMLN1Q8 1pyhi46wg9mCQrjc59enVTs54kKYYAjTRoNjtwCiWsTTFUFnxHbw4huQCjtQwIY= =Jy21 -----END PGP SIGNATURE----- remove extraneous print hex Alan T. DeKok@2016-07-02T22:01:26Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb90f74893f8ace5d35d… ====== -- This commit summary was generated @2016-07-03T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 01 Jul '16

01 Jul '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUAV3bfa9m5M8Eq7XTwAQLwXxAAllMWDAvTGf0Lav7qewuev1siR62fcPco d6jlMaG6hTPgsGQApZxIFFMGcpwYEw0dOzLFB8yQVBxC3eUc5fWCh8sTkdjYvnOW IxfFzzG4CktlQgyygaCtyraLIi1m4n8sRkU7xKMbQj4MYnYVLgRHs2rPnBMyJoB9 /mNZSgth6EzK4PoC1D6d0r2fwHW6NgTG+qUXA8+H5lohxPbWzTbklkxWvF+2VY2S XCrNO5zqDzhjktlO1830a7O9jyYlNaVoKrbPqurDq9oZQjBN4uZShL1KTr2KL+I6 Ntf+uhs8uJv4n2tFsPqvsLOMZRmhoonQNU/hhesV18GokUMw01HZ4AIkVwRQQbyC +MrnI3oc7EPeX4s6iAr2XcSPoCN53lJqSryRGBAfZf7mR979PazTo+bqCzDy35sL B7fwHmZAGdV0mCc1otnRW6Kb7HDbkEsQmqnVhbAUCqMVI9SoT9UrHQw0HeqjdnDk xD4wMtIWf8XN+gPrmFLSRqLo7+A0bdDyVXyGVKkK+VIUIOjO7KY09yZnEfS7zRZw /8iNReUXIXT2dEs96bPzh0Wq6ehvvy1MiOJx7ApwnaC5THyiwOow0Ldh6YIAnhht kguF2OzlIIhSNkUK4J2DnDA+AmHGI/HZieu/0utm7w10aD4miI7TUPr8jR4iJunx cXfeDPUp+Ug= =Xo95 -----END PGP SIGNATURE----- thread_pool.requests is never used Matthew Newton@2016-07-01T23:23:44Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/61842388099ef638ce2b… ====== gpgsig -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUAV3bYKNm5M8Eq7XTwAQIJuQ//bDlb0lmhxlEPUPW0rHXfTGP+XgN7dfeK +AyHpxpUzv6ZGZBdmJQOocFnhG++I01w+5vNkz+gNSS3STFXoAMiK+PQNhKWve+i byzVKWpcNVJM/d2IpDvuiINYbZ6lfZPKtSWFkhPug3FZVL3iOYtszqmBRWFNP4Pr KjJRrZaLPn/iKBlNKv9AMTcQ0DxhcTeMuTmykK5M46p10jqcbK/vRxp/exZqVjTN VoQD0SHt0LPydYu6PT6X1+FO8k4399xPwznuQao7L8bmBBIFtlyFXaHBm0lhPo03 8X7f0IkYw1tj3gm1+bgdiUXDM2BfAC69ABUusgiXdH0Kzj1TsKVvGMxUZ+eedTzP Rm/HcpVlgF17WZErnNL3irbyTtPyuJv46PnZ+ZCcnAzHhPHufLuN5rALPmyvjSRo sXSIN/pwJp3aMMKG2eXy2ujNACFb9Z9KVcxtRUcguRcqQ0sIpJbzFwdy2VH1DV8Z okgTr8rajMDm5zbQhs2o6gPs8FOQqrTXUXo15LjoI3CKtryErH5hPfP5sjztSg9e jMKzyylNm+ipuIYmp0VHyBPe8EXaf/BE3wNP3TTNaFrFm7dh+yTBFs3MHvMcBMpa e3N3LSHIpEQmtIOKrCThrTratSRZcQq7+FkwW8HjLIJQBBVpaNDAXIebcRWPJ2Ab /cise+agTe0= =rNWm -----END PGP SIGNATURE----- names are nicer than numbers Matthew Newton@2016-07-01T22:52:50Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/17909992666244111c89… ====== -- This commit summary was generated @2016-07-02T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0