- Freeradius-Devel - lists.freeradius.org

One LDAP server, Multiple Domains ( baseDN )
by Saeed Khademi 09 Aug '16

09 Aug '16

Hello, I am new to this list, and my question maybe asked before. Sorry if this is a duplicate. I have one LDAP server, with multiple domain names on it: LDAP server : A.COM Domains : A.com B.com C.com now I am trying to get it work and authenticate users of all 3 domains correctly. At the same time, I like to keep the configuration as short & simple as possible. Tried many scenario’s, the only one that worked was this: ============== in mods-available/LDAP : ldap A.com { ..... } ldap B.com { .... } ldap C.com { .... } ----------- in sites-enable/default authorize { pap eap .... A.com B.com C.com ..... } authenticate { ...... Auth_type ldap { A.com B.com C.com } ----------------- in sites-enabled/inner_tunnel the same as sites-enable/default ====================================== and it works. Since all the configuration for all three domains are the same, except for base_DN, what I’d like to have is to use something like this: switch ( “&Realm” ) { case “A.com” { base_dn = {"ou=people,dc=A,dc=com" } case “A.com” { base_dn = {"ou=people,dc=B,dc=com" } case “A.com” { base_dn = {"ou=people,dc=C,dc=com" } } is it possible to do it? if YES, then where should I put it? and what happens for authorize and authentication sections? Regards, Saeed.

2 1

Commit report for v3.1.x branch
by announce＠freeradius.org 08 Aug '16

08 Aug '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #1672 from jrouzierinverse/relax-casting-signed-to-integer Relax casting from signed to integer Arran Cudbard-Bell (via GitHub)@2016-08-08T21:33:33Z Files modified: * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/71f83a153dd2b369cc9e… ====== Relax casting from signed to integer James Rouzier@2016-08-08T21:29:29Z Files modified: * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d1b6efc75188d776286… ====== -- This commit summary was generated @2016-08-09T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 05 Aug '16

05 Aug '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove python tests. They only fail on the cutdown built, and we need travis working on v3.0.x Arran Cudbard-Bell@2016-08-05T15:48:38Z Files modified: * src/tests/modules/python/.gitignore * src/tests/modules/python/all.mk * src/tests/modules/python/auth_cext_compat.attrs * src/tests/modules/python/auth_cext_compat.unlang * src/tests/modules/python/auth_configured_module.attrs * src/tests/modules/python/auth_configured_module.unlang * src/tests/modules/python/auth_multi_inst.attrs * src/tests/modules/python/auth_multi_inst.unlang * src/tests/modules/python/auth_with_tls.attrs * src/tests/modules/python/auth_with_tls.unlang * src/tests/modules/python/mod1.py * src/tests/modules/python/mod2.py * src/tests/modules/python/mod3.py * src/tests/modules/python/mod4.py * src/tests/modules/python/module.conf * src/tests/modules/python/shared.py Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d37f88b61228d6f5ae84… ====== Merge pull request #1669 from Maka0/patch-3 Update dictionary.ruckus Arran Cudbard-Bell (via GitHub)@2016-08-05T14:57:04Z Files modified: * share/dictionary.ruckus Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dac2723e8cbdde244b05… ====== Update dictionary.ruckus Updated dictionary to include additional attributes Maka0 (via GitHub)@2016-08-05T12:13:52Z Files modified: * share/dictionary.ruckus Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38c811bffc48c03a8721… ====== -- This commit summary was generated @2016-08-06T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 05 Aug '16

05 Aug '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Ignore zero length arguments Arran Cudbard-Bell@2016-08-05T17:45:58Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4bda2e0346c26e8bf576… ====== -- This commit summary was generated @2016-08-06T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 03 Aug '16

03 Aug '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAABCgAGBQJXoh8qAAoJEP+k1YKfttfKcFUP/iOVx+fwwPl6C4i2bXzbdf9x NY8593teS9OU+hpzQWlPYm4hxISNFfr8j5mSIUqri6/7gU8Zcsvt2Fq+f6ppuhb6 1srMfHNUrKBaXJiN3gEP7COPcDDkcU7K5vFHoxrcn+4e+pPWWh1ox5GBnjRkCAy9 pcHqcVz95gYn2rekQPqEHqnXCTbdqM6PBk4UefOuFY9C98dQqMqIO7ROWrjEK1CL IQWSNyyAHzxLWbKgB4HND4UB6npPgkpldW1HpRu6VaPKnDJP+OFFOzSlWY5WUxXn Bi6U5+DtzDWv24vZbpCL7L3Dm/xE8U42uGeqlVNCTpH0q0sXi9UsE2lNgE9H/H2A lL4rddR4niwZNH1Allwxo3RQfp/7IGtQzJLos8ti/PKcuOHLBbyjsae/vahFJUmG ayPQgFN3R69SmRG3AWMhkfYusf6Q8LS3B1dx4T3aReEL7guYq/MakTvXzvjTdkyl rXXXePByzNZwlfUHbPhqhs1Yc0i1a2zLxrE2FO437nKR/qwFJ/9Taa3sZr4WOtYQ AQ/dH8kHu8QDvbds+3Ck8O3O/EK6zOXfnh3Eo86JYxv2p/CMqm0+duwnrHhR4AOt hYYVOeGcTFxkSnizNFk9SMdf4IbctqiTlFwVna5rvUATpL0/O9MfX2UgRQ2XWNEK xlPwM7mI/ih1rrmdy6Bx =Bf+R -----END PGP SIGNATURE----- Don't overwrite the client list we just resolved... Arran Cudbard-Bell@2016-08-03T18:43:22Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/adf6474f4ecfb6a59945… ====== Formatting Arran Cudbard-Bell@2016-08-03T18:19:47Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32779b951e1881f27e08… ====== Comments and better names... I mean, flag? Really... Arran Cudbard-Bell@2016-08-03T18:19:21Z Files modified: * src/include/clients.h * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60c6e5af8b82742cd4f5… ====== Document the client code Add client list name for debugging Arran Cudbard-Bell@2016-08-03T17:44:47Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7fcc5a342a792f7afffa… ====== Avoid cursor memsets on empty list Arran Cudbard-Bell@2016-08-03T16:25:52Z Files modified: * src/lib/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/33185893cc4ad8ab184f… ====== Clean up spurious asserts Arran Cudbard-Bell@2016-08-03T16:23:41Z Files modified: * src/include/pair.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/61a973f64855266ede43… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXocPbAAoJEH0Oec13Yh7NByUIAI7iamRFECnej5V/Cn7nwys5 Gib7IYl5CgLLrLFjCZzai6ER5a2WqcgNsdMWjaVKX8rIeuQJnySDwrVg+vtW5yvv wXiWZHvBM3tFi1qMbvIMKMX2SSifIGrCVk0zxU3NU9UmNHvJUDNwl6DRUZzguA6W k6ITT+2HhbxbQTjenUyF6urKxnEIvtUTwEB6P/xqkQLMoLa5mHw8R+a6twrrxTbq v7HEO+VT2yEyYzg2AK5vDhCBuByH96O9di9Klo1471pQNCVMRqFIAQNWbGW/PVkg t7AGGWig2MT2RAMo7jtsw3mDCkvELJddaFkeEcbxU+Ly05B4Xk7LwPvZxqJHaWw= =Bv6X -----END PGP SIGNATURE----- uncomment FAST by default because it needs disable_tlsv1_2, and the other methods don't need it. Alan T. DeKok@2016-08-03T12:13:20Z Files modified: * raddb/mods-available/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/17fb58f22b59664028ef… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXobPgAAoJEH0Oec13Yh7NyUgH/10JQ1xXLmfB09n7+v/HWq40 iNgwsZppAPRdD/9QKOY8tpW6gK1QYsV3r4WU1K2qQCwZnz8fRBkkjCW5h3Iygea6 EaVGIBP14ahxALb8tYoVoaJWRDZGmLqCKoOrtzK64XZl/meg4p+jhfqLPTobHxwW NMryXChLD+TgGuJlLW1RTEHvlGYp9KcsSbrrmwfBMcMnDtry7H6VKdZC2wXXltgl YSZG+OHw6YdwVPuh+9/sz7ehh7hACGdrnYWEV4yR93gz8Ylt9PfThcSsQAyUu6Bm TY8t7KiaUadOZWD7UlyivVY2iwnIQ/VpL1O41Qu4ioAhhnMQwDDGUpUHp9KGSyY= =Vp6B -----END PGP SIGNATURE----- minor EAP-FAST fixes. Don't load EAP-FAST when TLS isn't enabled Alan T. DeKok@2016-08-03T11:05:22Z Files modified: * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8bf6217ec5276575d8d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXoal1AAoJEH0Oec13Yh7NtMEH/jywuFCyVpalorpCYR7Kwhr2 t039OBblQxVWjxH0OBjGqTqxgMG9HLJ20fbqWc3IX77lLb8hY0QAq+D5uTXDvguy et5YpHhWl1aVcMmi+5AG8rZPhile5pLYLLzuQ3NOO1nOSPY7lU2Hku8KR9d2jHjT kcbeE4IJwdPVxXaCp/Q5+y1eyADnHtIf7u9fSZQrbZ79rTsbUz9fIdkKKneNKw5F pDprfW3MwIOD+JmZcmUEynHdH7mnyhutt8z8BQUDnl/LrQ1YFuKeMCB8mA6OfjM0 E+yqEBT/zz70N7Aeuh1OLz8bXn1GlsV7jmBazhU1c7uAndPc91IwaDV2pANaOpw= =pJKv -----END PGP SIGNATURE----- Sample configuration for EAP-FAST Alan T. DeKok@2016-08-03T10:21:01Z Files modified: * raddb/mods-available/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8cbb88793728ce61a8c1… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXoaaSAAoJEH0Oec13Yh7NSM0H+QHCVeux+v+YComCgme/gyvN okYNmfdpW/OGFsfrHP4RxoTe8Pe/bBSU0xJqdTv7ElzxpKOsalqhxAmzfapexLzv 2Qgc4dER/AUbWkJoUKZ6Uf7eYm7/+L7CX+XJSGd3SIySZjYO/0WA+ydDPJ2xV/fm 9z7Chxie+R7U/hlp1xnt0RXL/oxm/vHzNkvzeqdi1lTXcG9033HMrIUiFq8pLniw I4myMuCg/reimvwcn7j2G+i9Xg2g9Z9nk5tEJROZta09L0BFQ5oxt9YqxOmtIx38 KB0W1K3lYLUZ0B9CPecw+3TsmQEYKpx8cab5EXr9AqsZjmvYZLm1LwIjQY6OWQ8= =7R/V -----END PGP SIGNATURE----- pull NEAT fix from v4.0.x branch Alan T. DeKok@2016-08-03T10:08:49Z Files modified: * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/088d00111fcc975efc82… ====== -- This commit summary was generated @2016-08-04T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 02 Aug '16

02 Aug '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix quicksort with comparators Arran Cudbard-Bell@2016-08-02T22:49:40Z Files modified: * src/lib/misc.c * src/main/radsniff.c * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9318184ec14f797b7d0… ====== Whitespace Arran Cudbard-Bell@2016-08-02T22:49:28Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d0bd4fcd87b520b50a2… ====== Free the request last Arran Cudbard-Bell@2016-08-02T17:49:35Z Files modified: * src/modules/rlm_redis_ippool/rlm_redis_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be850fa88761bae3263f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXoJqjAAoJEH0Oec13Yh7N27sH/11EwKSI+J3uKbJ6qsF/Pbbc pXSfvAGz4m0Dg6KrNCYuVqh6PKbOQR3OxJgDh6/92m/FfuQzKKu6WACVrQsB6pfX 4OhhOa97TkYNj6wequZxP4gWAaGCjykpz0Yp0Qw1ZEeC5co77G1zN9dqgsBEuYLV 6k5g5GM9ox1zI6tYnuTLtb4lhbn28wCOg08yOCcTcQ2cWWb67Ec5dk/SqXq8bXIg LRbLdIUCAuXJdhG8kuw69kJ5gU2w6te1QpARciCLJ+qHwx23nPsqX/5liPtjJQa+ W420o6Yslnva6QOddGkDL0QmE/ItQ6zMr71WA37OoKSz+Q0UJrdGw8umRs//R1o= =Hdy8 -----END PGP SIGNATURE----- ksize should not be zero Alan T. DeKok@2016-08-02T15:05:33Z Files modified: * src/modules/rlm_eap/types/rlm_eap_fast/eap_fast.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5243923f899c4b5562cf… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXoHt3AAoJEH0Oec13Yh7Nl6sH/RCRJI7Evv/SOylRTGWGR1oG fo9XdRbmOI6We3/YeMbHqdTFlWcY/HhRvPLULnMuBc7A0bEM1bE1O5cqp/TTpK1j Vvm3LrISHkmtvdC/9ZgLLNh9AyDBkxm43WCcHmnUe7h5B3c7UScIOwWfJB7Qp+WW qhk9eYn8T0FdUMYY7bjg0X+FdasLe6XuW4k4bWYZdmh4PsrPlC8n58Z/xt89tUJs 8Vi59ubhSYeyq/PD2n9WAMax6vWBPmp7ZcfhMYPmRQV1NZ+1bxvPTrt5WXTi/xuI k5shxRadwB8/shm3HB3wWjz6joO/GFwkWbyeSbGDlfZWhvGVgwWcT8aOae/Qjfc= =lrZc -----END PGP SIGNATURE----- Initial rev of EAP-FAST. The code needs to be cleaned up to match the style of the rest of the server. But it works Alan T. DeKok@2016-08-02T12:52:39Z Files modified: * src/modules/rlm_eap/types/rlm_eap_fast/all.mk * src/modules/rlm_eap/types/rlm_eap_fast/eap_fast.c * src/modules/rlm_eap/types/rlm_eap_fast/eap_fast.h * src/modules/rlm_eap/types/rlm_eap_fast/eap_fast_crypto.c * src/modules/rlm_eap/types/rlm_eap_fast/eap_fast_crypto.h * src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd46efdd808ab8b5d645… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXoHt3AAoJEH0Oec13Yh7NPAcIAKhHgciHNPyX03fCyIRK3/N+ i0Vvh45T6TcOlk6R+rBzuAZMl4be1uSfISUvUVGgwB4iJSjwewbYiQn1xJ7YS4eO IGgtoAXVwK0srK9aRgBmhS+wGw9qX0DOrQRfHPKtiECEBhuQF/VAXHK/57Y7kZ24 SL3qnEsqGA1nBJ/dRTCxIWJsT0WI6+8btR/O4Qq61C4CGUBUw3g9nupbpGyEQ+pm MvuH7bDemSICbHWsaiDr3cRo1WRzklDfN8chcfH168khl3d9TEDk7YK+lIIoo5dO 95U2xkVvhKTQ+u1oxP+PmChPj5SojDZdd8RDEus8LgOVnbpVNQKvKRa13RXbrHE= =OoYZ -----END PGP SIGNATURE----- remove WITH_DHCP when we fix it, we'll just skip the entire proto_dhcp module when building --without-dhcp Alan T. DeKok@2016-08-02T12:52:39Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3f027950208072e9a8f… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXoHt3AAoJEH0Oec13Yh7Nq80H/1PETebhJn8jAWritoQMQP07 0tEoaI4012wU07BhVb0na8YF6ZuXO2Ip3CpqH9J7XBuVO239X5chClB0yYBWoGcL 3sPwQiQBAq0Ga60hsB7NfjpYDS9etWNoxbSP0lkoKm5uzmiug06B5ia4FfyhW19e mWdv/Sn7JY8w96EpfCfM8kw4C0q0MG73Tn50/NkQ2B+o8KpP+fkkWDKExTh8dgNl 4xlrHgK462AYgMASBpACh9GQ0R8Ylc4XMC8ekZZEmPkpw4sM9MR5ut670Si666jF 3DP89mqKD4kHI9BUh1OA5Isg5gUhHxDW/mrcqs07XSpjbFdAXVLGyhwY3XGpBLc= =5tXh -----END PGP SIGNATURE----- build without DHCP Alan T. DeKok@2016-08-02T12:52:39Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/187d42b9f026cd8719ac… ====== -- This commit summary was generated @2016-08-03T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Minor update for 4.0: expr and &Attribute-Name[*]
by Alan DeKok 02 Aug '16

02 Aug '16

As an example (useless, but an example) update request { NAS-Port := 1 NAS-Port := 2 NAS-Port := 3 } update reply { Filter-Id := "%{expr: 0 + &NAS-Port[*]}" } Send it a packet, and you get: Filter-Id := "6" Minor, but nice. I've also been pushing updates to Alcatel's stupid struct attributes. If anyone else has time for similar changes, it would be appreciated. Alan DeKok.

2 2

Commit report for v3.1.x branch
by announce＠freeradius.org 28 Jul '16

28 Jul '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use PW_TYPE_STRUCTURAL in xlat_debug_attr (cherry picked from commit bba68b45b2f4b583e45f4a068f15d01d003beaec) Fixes -Xxx segfaulting when debug_all is used Arran Cudbard-Bell (via Matthew Newton)@2016-07-28T11:45:22Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d4aa3565181bce0d74b… ====== -- This commit summary was generated @2016-07-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 28 Jul '16

28 Jul '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJXme5OAAoJEH0Oec13Yh7N008IAKK4ODDhd0IDV22JGidU3XC+ kZ3EApC1X5ZqFrjeKd6BfyIjDLihL6CVAzk4pigDoCdlXeFnrp6u9uMLfZiR3Rpy jhYoV3ztB1W3ovNDErXVXqGAUhTJOrJsLhLy+gSfO6Ug0hoQe8yatFqu4ZgobJoS rVcD1n5qj5U8sTgqJpyFS3myFH3UxREw72f5787afB9gnzzGhSsfJEjEjNKXQDts DiYH6MAxpjBgq94UzyWcler/CS/ECLCFT1KQkeVwqP2hG/vn0abMpWyVh1PGWnLZ RZP17IaqisBipYOgYUpEWHGjYDfq4/qxIglOLfvqJ7xa2rsxiGnV6bb4j2BiEgI= =Z0Mh -----END PGP SIGNATURE----- rlm_pap: show the request password on mismatch, not the "known good" one Matthew Newton (via Alan T. DeKok)@2016-07-28T13:36:46Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/43830d5c82c51353ef7e… ====== -- This commit summary was generated @2016-07-29T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 27 Jul '16

27 Jul '16

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== rlm_pap: show the request password on mismatch, not the "known good" one Matthew Newton@2016-07-27T13:48:18Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8b83fcecdee636f86cc4… ====== -- This commit summary was generated @2016-07-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0