- Freeradius-Devel - lists.freeradius.org

Commit report for v2.x.x branch
by announce＠freeradius.org 19 Mar '14

19 Mar '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update spec files for 2.2.4 Alan T. DeKok@2014-03-19T18:17:37Z Files modified: * redhat/freeradius.spec * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c140baf7e58b954fb90… ====== -- This commit summary was generated @2014-03-20T00:00:11Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Re: [freeradius-server] basic config for dhcp IP allocation using sqlite
by Matthew Newton 19 Mar '14

19 Mar '14

Hi, [back on-list] On Wed, Mar 19, 2014 at 07:54:39AM -0700, Alan DeKok wrote: > Please also test the latest v3.0.x branch. I've updated the > queries to use '%%s' instead of '%%%%%%%%%%%s'. :) So they > should be simpler, and now work! Confirmed - running #e910535, queries with %%s work, rather than %%%%s... I'm now getting a lot of xlat debug with -X, as below. Is that expected? Seems to come from 5ec4b6c6. It looks like it should be in a higher debug level than just -X? Cheers Matthew ... Parsed xlat tree: literal --> UPDATE radippool SET nasipaddress = ' attribute --> NAS-IP-Address { ref 2 list 1 tag -128 } literal --> ', pool_key = ' attribute --> Calling-Station-Id { ref 2 list 1 tag -128 } ... -- Matthew Newton, Ph.D. <mcn4(a)le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp(a)le.ac.uk>

2 2

RE: no group matching - we set read group = yes - but no group attributes is checked or taken :-(
by Krystof Klima - WIFIPROFI.CZ 18 Mar '14

18 Mar '14

Hello, Is it possible to download this version ?? somewhere ? e.g. like ReleaseCandidate version ? BTW: But really thanks a lot for this response, You have solved our last 10nights with many reinstallations Best regards, Kryštof Klíma **** poskytování poradenství v oblasti sítí Lan a Wan, servis a prodej výpočetní techniky Mobil: +420 774 331 774 E-mail: <mailto:klima@wifiprofi.cz> klima(a)wifiprofi.cz

2 1

Commit report for master branch
by announce＠freeradius.org 18 Mar '14

18 Mar '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== allocate-update should be allocate_update for dhcp_sqlippool Matthew Newton (via Alan T. DeKok)@2014-03-18T22:56:09Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf * raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/61c1f2884587936044bc… ====== Fix for latest functionality of the format script Alan T. DeKok@2014-03-18T20:29:43Z Files modified: * share/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/892af67c571c65ed74c1… ====== Doxygen Arran Cudbard-Bell@2014-03-18T19:04:54Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4093c5bd212a58bdb519… ====== Deal with HTTP 100 responses correctly Arran Cudbard-Bell@2014-03-18T19:02:18Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1908eff41c2a16b90267… ====== Improve error messages in HTTP header parser Arran Cudbard-Bell@2014-03-18T19:00:32Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21479f787553cb5332be… ====== Tweak buffer allocation to alloc double the previous memory as before when encoding requests to avoid unnecessary allocs Arran Cudbard-Bell@2014-03-18T18:05:40Z Files modified: * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3e0c0cd8db86440121c… ====== Fix issue in fr_prints_string Arran Cudbard-Bell@2014-03-18T17:31:20Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d390a24f9c9529e9c8d7… ====== Output what we expected and got it unittest.c Arran Cudbard-Bell@2014-03-18T17:31:20Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c084567acb0afbcf7f67… ====== Formatting in rlm_rest Arran Cudbard-Bell@2014-03-18T17:31:20Z Files modified: * src/include/libradius.h * src/lib/print.c * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d61c7d4c981880ca628b… ====== Modify functions in print.c to return > than outlen if they run out of buffer. This is required for correct operation of rlm_rest stream encoders Arran Cudbard-Bell@2014-03-18T17:31:20Z Files modified: * src/include/libradius.h * src/lib/print.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45a9371484881d335b21… ====== We should not set a default connect_uri We should set a default timeout (in this case 4 seconds). To disable timeout it can be set to 0. Arran Cudbard-Bell@2014-03-18T07:42:41Z Files modified: * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3251ac8aa13a864efea3… ====== Use the same names for variables as the rest of the code in rlm_rest encoders Add more error checking around curl_easy_escape Make the encoder code clearer Arran Cudbard-Bell@2014-03-18T00:47:47Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d915e710d575e4a1f5e… ====== -- This commit summary was generated @2014-03-19T00:00:16Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 18 Mar '14

18 Mar '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #552 from mcnewton/v3.0.x allocate-update should be allocate_update for dhcp_sqlippool Alan DeKok@2014-03-18T22:55:50Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf * raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9aae5b72686516ffaa3c… ====== allocate-update should be allocate_update for dhcp_sqlippool Matthew Newton@2014-03-18T22:40:23Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf * raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f546f33a7a8652c1bcd… ====== Fix for latest functionality of the format script Alan T. DeKok@2014-03-18T20:29:34Z Files modified: * share/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e910535c927f58479e98… ====== Update ChangeLog Arran Cudbard-Bell@2014-03-18T19:10:45Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd576c91e1e9ec4c8146… ====== Doxygen Arran Cudbard-Bell@2014-03-18T19:05:02Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c6813c5ca90b1d352fe… ====== Deal with HTTP 100 responses correctly Arran Cudbard-Bell@2014-03-18T19:02:36Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdaa7350f7af5a274284… ====== Improve error messages in HTTP header parser Arran Cudbard-Bell@2014-03-18T19:02:30Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3aa568e03fdd153e0d6… ====== Tweak buffer allocation to alloc double the previous memory as before when encoding requests to avoid unnecessary allocs Arran Cudbard-Bell@2014-03-18T18:05:21Z Files modified: * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/64179183b00f572a5519… ====== Fix issue in fr_prints_string Arran Cudbard-Bell@2014-03-18T17:30:30Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1587615f5ff1f291cbd5… ====== Output what we expected and got it unittest.c Arran Cudbard-Bell@2014-03-18T17:30:30Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3632f51d68fbe710a9b7… ====== Modify functions in print.c to return > than outlen if they run out of buffer. This is required for correct operation of rlm_rest stream encoders Arran Cudbard-Bell@2014-03-18T17:30:30Z Files modified: * src/include/libradius.h * src/lib/print.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/145316259afed9702740… ====== Formatting in rlm_rest Arran Cudbard-Bell@2014-03-18T16:12:46Z Files modified: * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd3cc79c22a93194383a… ====== We should not set a default connect_uri We should set a default timeout (in this case 4 seconds). To disable timeout it can be set to 0. Arran Cudbard-Bell@2014-03-18T07:42:31Z Files modified: * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eac8d6e4e2f543df3b6e… ====== Use the same names for variables as the rest of the code in rlm_rest encoders Add more error checking around curl_easy_escape Make the encoder code clearer Arran Cudbard-Bell@2014-03-18T00:48:00Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8542645d440e45ac0cd9… ====== -- This commit summary was generated @2014-03-19T00:00:16Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 18 Mar '14

18 Mar '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix for latest functionality of the format script Alan T. DeKok@2014-03-18T20:28:20Z Files modified: * share/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8663924f7ed25335b756… ====== -- This commit summary was generated @2014-03-19T00:00:14Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

RE: no group matching - we set read group = yes - but no group attributes is checked or taken :-(
by Krystof Klima - WIFIPROFI.CZ 18 Mar '14

18 Mar '14

We set all to clean versions, one clear version FC14 with Radiusd 2.1.12 on one server, it is good Second is clear version on new FC20 with Radiusd 3.0.1 on next server.and doesnt work We use recomended "schema.sql" we use basic config using MySQL See log.there is checking groups in FC14 . You can see "User found in group tarif1" [suffix] No '@' in User-Name = "tester", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [sql] expand: %{User-Name} -> tester [sql] sql_set_user escaped user --> 'tester' rlm_sql (sql): Reserving sql socket id: 3 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id WARNING: Found User-Password == "...". WARNING: Are you sure you don't mean Cleartext-Password? WARNING: See "man rlm_pap" for more information. [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'tester' ORDER BY priority [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'tarif1' ORDER BY id [sql] User found in group tarif1 [sql] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'tarif1' ORDER BY id rlm_sql (sql): Released sql socket id: 3 ++[sql] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING: Auth-Type already set. Not setting to PAP ++[pap] returns noop Found Auth-Type = MSCHAP !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! # Executing group from file /etc/raddb/sites-enabled/default +- entering group MS-CHAP {...} [mschap] Creating challenge hash with username: tester [mschap] Told to do MS-CHAPv2 for tester with NT-Password [mschap] adding MS-CHAPv2 MPPE keys ++[mschap] returns ok Login OK: [tester/<via Auth-Type = mschap>] (from client sdc_privatni port 2147483791 cli 00:0C:42:20:96:D3) # Executing section post-auth from file /etc/raddb/sites-enabled/default +- entering group post-auth {...} [sql] expand: %{User-Name} -> tester [sql] sql_set_user escaped user --> 'tester' [sql] expand: %{User-Password} -> [sql] ... expanding second conditional [sql] expand: %{Chap-Password} -> [sql] expand: INSERT INTO radpostauth (username, pass, reply, authdate,DHCP_SERVER,REZE_SE,DHCP_RELAY) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S','%{NAS-IP-Address}','%{NAS-Identifier}','%{Called-Station-Id}') -> INSERT INTO radpostauth (username, pass, reply, authdate,DHCP_SERVER,REZE_SE,DHCP_RELAY) VALUES ( 'tester', '', 'Access-Accept', '2014-03-18 22:38:16','10.10.10.253','mt-dilna.vlaskovi.cz','service1') rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate,DHCP_SERVER,REZE_SE,DHCP_RELAY) VALUES ( 'tester', '', 'Access-Accept', '2014-03-18 22:38:16','10.10.10.253','mt-dilna.vlaskovi.cz','service1') rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 ++[sql] returns ok [sql_log] Processing sql_log_postauth [sql_log] expand: %{User-Name} -> tester [sql_log] expand: %{%{User-Name}:-DEFAULT} -> tester [sql_log] sql_set_user escaped user --> 'tester' [sql_log] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [sql_log] ... expanding second conditional [sql_log] expand: Chap-Password -> Chap-Password [sql_log] expand: INSERT INTO radpostauth (username, pass, reply, authdate, test) VALUES ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', '%S', '%{NAS-IP-Address}'); -> INSERT INTO radpostauth (username, pass, reply, authdate, test) VALUES ('tester', 'Chap-Password', 'Access-Accept', '2014-03-18 22:38:16', '10.10.10.253'); [sql_log] expand: /var/log/radius/radacct/sql-relay -> /var/log/radius/radacct/sql-relay ++[sql_log] returns ok ++[exec] returns noop Sending Access-Accept of id 52 to 172.30.0.54 port 42156 Mikrotik-Rate-Limit = "7M/14M" MS-CHAP2-Success = 0x01533d33353031344234424632324342313046394530304237324242323742413631444532 393131394238 MS-MPPE-Recv-Key = 0xd3b4972527affe2bdc87fe3eeffc5e49 MS-MPPE-Send-Key = 0x7472d58842d4fd4b15afa46ceda6f263 MS-MPPE-Encryption-Policy = 0x00000001 MS-MPPE-Encryption-Types = 0x00000006 Finished request 0. Going to the next request Waking up in 4.9 seconds. And second log from FC20 where is not checked. Looks like doesnt check groupname > directly fall to next proces 5) sql : expand: "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id' Tue Mar 18 21:25:19 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id' Tue Mar 18 21:25:19 2014 : Debug: (5) sql : User found in radcheck table Tue Mar 18 21:25:19 2014 : Debug: (5) sql : Check items matched Tue Mar 18 21:25:19 2014 : Debug: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id Tue Mar 18 21:25:19 2014 : Debug: Parsed xlat tree: Tue Mar 18 21:25:19 2014 : Debug: literal: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = '' Tue Mar 18 21:25:19 2014 : Debug: attribute: SQL-User-Name Tue Mar 18 21:25:19 2014 : Debug: { Tue Mar 18 21:25:19 2014 : Debug: ref 2 Tue Mar 18 21:25:19 2014 : Debug: list 1 Tue Mar 18 21:25:19 2014 : Debug: tag -128 Tue Mar 18 21:25:19 2014 : Debug: } Tue Mar 18 21:25:19 2014 : Debug: literal: '' ORDER BY id' Tue Mar 18 21:25:19 2014 : Debug: (5) sql : expand: "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id' Tue Mar 18 21:25:19 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id' Tue Mar 18 21:25:19 2014 : Debug: (5) sql : User found in radreply table Tue Mar 18 21:25:19 2014 : Debug: (5) sql : ... falling-through to group processing Tue Mar 18 21:25:19 2014 : Debug: SELECT groupname FROM radusergroup WHERE username = BINARY '%{SQL-User-Name}' ORDER BY priority Tue Mar 18 21:25:19 2014 : Debug: Parsed xlat tree: Tue Mar 18 21:25:19 2014 : Debug: literal: 'SELECT groupname FROM radusergroup WHERE username = BINARY '' Tue Mar 18 21:25:19 2014 : Debug: attribute: SQL-User-Name Tue Mar 18 21:25:19 2014 : Debug: { Tue Mar 18 21:25:19 2014 : Debug: ref 2 Tue Mar 18 21:25:19 2014 : Debug: list 1 Tue Mar 18 21:25:19 2014 : Debug: tag -128 Tue Mar 18 21:25:19 2014 : Debug: } Tue Mar 18 21:25:19 2014 : Debug: literal: '' ORDER BY priority' Tue Mar 18 21:25:19 2014 : Debug: (5) sql : expand: "SELECT groupname FROM radusergroup WHERE username = BINARY '%{SQL-User-Name}' ORDER BY priority" -> 'SELECT groupname FR OM radusergroup WHERE username = BINARY 'tester' ORDER BY priority' Tue Mar 18 21:25:19 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT groupname FROM radusergroup WHERE username = BINARY 'tester' ORDER BY priority' Tue Mar 18 21:25:19 2014 : Debug: (5) sql : ... falling-through to profile processing Tue Mar 18 21:25:19 2014 : Debug: rlm_sql (sql): Released connection (8) Tue Mar 18 21:25:19 2014 : Info: rlm_sql (sql): Opening additional connection (9) Tue Mar 18 21:25:19 2014 : Debug: rlm_sql_mysql: Starting connect to MySQL server Regards, Kryštof Klíma **** poskytování poradenství v oblasti sítí Lan a Wan, servis a prodej výpočetní techniky Mobil: +420 774 331 774 E-mail: <mailto:klima@wifiprofi.cz> klima(a)wifiprofi.cz From: Krystof Klima - WIFIPROFI.CZ [mailto:klima@wifiprofi.cz] Sent: Monday, March 17, 2014 9:10 PM To: 'freeradius-devel(a)lists.freeradius.org' Subject: no group matching - we set read group = yes - but no group attributes is checked or taken :-( Importance: High Hello, We are using Freeradius from 1.x version, after new release of Fedora 20, we reinstalled.all we connected well, but only group items is not checked /I am sending all my config in this mail/ and radiusd doesnt write log "raddact" We stop our old database for sure, for sure we install new blind original Freeradius 3.0.1 "schema.sql" without success /user in database works - we are accepted with user - only no log/ Can You help me ?? we solved this three weeks and we are unhappy from our work. List of debug : driver = "rlm_sql_mysql" Mon Mar 17 20:26:44 2014 : Debug: server = "localhost" Mon Mar 17 20:26:44 2014 : Debug: port = "3306" Mon Mar 17 20:26:44 2014 : Debug: login = "radius" Mon Mar 17 20:26:44 2014 : Debug: password = "radius" Mon Mar 17 20:26:44 2014 : Debug: radius_db = "radius_test" Mon Mar 17 20:26:44 2014 : Debug: read_groups = yes Mon Mar 17 20:26:44 2014 : Debug: read_clients = yes Mon Mar 17 20:26:44 2014 : Debug: delete_stale_sessions = yes Mon Mar 17 20:26:44 2014 : Debug: sql_user_name = "%{User-Name}" Mon Mar 17 20:26:44 2014 : Debug: default_user_profile = "" Mon Mar 17 20:26:44 2014 : Debug: client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" Mon Mar 17 20:26:44 2014 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" Mon Mar 17 20:26:44 2014 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" Mon Mar 17 20:26:44 2014 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id " Mon Mar 17 20:26:44 2014 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id " Mon Mar 17 20:26:44 2014 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" Mon Mar 17 20:26:44 2014 : Debug: simul_count_query = "" Mon Mar 17 20:26:45 2014 : Debug: simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotoc ol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" Mon Mar 17 20:26:45 2014 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" And important part with authorinizg.looks like group is empty, but executing query on SSH will show DATA Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : User found in radcheck table Mon Mar 17 20:26:50 2014 : Debug: (0) sql : Check items matched Mon Mar 17 20:26:50 2014 : Debug: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id Mon Mar 17 20:26:50 2014 : Debug: Parsed xlat tree: Mon Mar 17 20:26:50 2014 : Debug: literal: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = '' Mon Mar 17 20:26:50 2014 : Debug: attribute: SQL-User-Name Mon Mar 17 20:26:50 2014 : Debug: { Mon Mar 17 20:26:50 2014 : Debug: ref 2 Mon Mar 17 20:26:50 2014 : Debug: list 1 Mon Mar 17 20:26:50 2014 : Debug: tag -128 Mon Mar 17 20:26:50 2014 : Debug: } Mon Mar 17 20:26:50 2014 : Debug: literal: '' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : ... falling-through to group processing Mon Mar 17 20:26:50 2014 : Debug: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority Mon Mar 17 20:26:50 2014 : Debug: Parsed xlat tree: Mon Mar 17 20:26:50 2014 : Debug: literal: 'SELECT groupname FROM radusergroup WHERE username = '' Mon Mar 17 20:26:50 2014 : Debug: attribute: SQL-User-Name Mon Mar 17 20:26:50 2014 : Debug: { Mon Mar 17 20:26:50 2014 : Debug: ref 2 Mon Mar 17 20:26:50 2014 : Debug: list 1 Mon Mar 17 20:26:50 2014 : Debug: tag -128 Mon Mar 17 20:26:50 2014 : Debug: } Mon Mar 17 20:26:50 2014 : Debug: literal: '' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" -> 'SELECT groupname FROM radu sergroup WHERE username = 'tester' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT groupname FROM radusergroup WHERE username = 'tester' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : ... falling-through to profile processing Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Released connection (1) Mon Mar 17 20:26:50 2014 : Info: rlm_sql (sql): Closing connection (0): Too many free connections (2 > 0) Mon Mar 17 20:26:50 2014 : Debug: rlm_sql_mysql: Socket destructor called, closing socket Mon Mar 17 20:26:50 2014 : Debug: (0) modsingle[authorize]: returned from sql (rlm_sql) for request 0 Mon Mar 17 20:26:50 2014 : Debug: (0) [sql] = ok Mon Mar 17 20:26:50 2014 : Debug: (0) modsingle[authorize]: calling expiration (rlm_expiration) for request Regards, Kryštof Klíma **** poskytování poradenství v oblasti sítí Lan a Wan, servis a prodej výpočetní techniky Mobil: +420 774 331 774 E-mail: <mailto:klima@wifiprofi.cz> klima(a)wifiprofi.cz

2 1

[PATCH] Minor fix for for share/{Makefile,format.pl}
by Jan-Benedict Glaw 18 Mar '14

18 Mar '14

Hi! While working on my backend, I recognized that the "format" target in ./share doesn't work as expected. This should fix it for the `master' branch, and probably also applies to the 2.x version. --- share/Makefile | 2 +- share/format.pl | 9 +++------ 2 files changed, 4 insertions(+), 7 deletions(-) diff --git a/share/Makefile b/share/Makefile index ab342b4..d40c0b5 100644 --- a/share/Makefile +++ b/share/Makefile @@ -10,6 +10,6 @@ # format: dictionary* @for x in dictionary* ; do \ - cat $$x | ./format.pl > tmp; \ + ./format.pl $$x > tmp; \ mv tmp $$x; \ done diff --git a/share/format.pl b/share/format.pl index 8105511..dd259a9 100755 --- a/share/format.pl +++ b/share/format.pl @@ -2,7 +2,8 @@ # # Format the dictionaries according to a standard scheme. # -# Usage: cat dictionary | ./format.pl > new +# Usage: cat dictionary | ./format.pl - > new +# or: ./format.pl dictionary > new # # We don't over-write the dictionaries in place, so that the process # can be double-checked by hand. @@ -217,9 +218,5 @@ while (@ARGV) { close FILE; - open FILE, ">$filename" or die "Failed to open $filename: $!\n"; - - print FILE @output; - - close FILE; + print @output; } -- 1.8.3.2 -- Getslash GmbH, Bahnhofstraße 16, 59302 Oelde Tel: +49-2522-834349-5 Fax: +49-2522-834349-1 http://www.getslash.de Mobil: +49-152-33822499 Sitz der Gesellschaft: Oelde Handelsregister: Amtsgericht Münster, HRB 11911 Ust-Id-Nr.: DE 815060326 Geschäftsführung: Andre Peitz, Tobias Hanisch

2 1

no group matching - we set read group = yes - but no group attributes is checked or taken :-(
by Krystof Klima - WIFIPROFI.CZ 18 Mar '14

18 Mar '14

Hello, We are using Freeradius from 1.x version, after new release of Fedora 20, we reinstalled.all we connected well, but only group items is not checked /I am sending all my config in this mail/ and radiusd doesnt write log "raddact" We stop our old database for sure, for sure we install new blind original Freeradius 3.0.1 "schema.sql" without success /user in database works - we are accepted with user - only no log/ Can You help me ?? we solved this three weeks and we are unhappy from our work. List of debug : driver = "rlm_sql_mysql" Mon Mar 17 20:26:44 2014 : Debug: server = "localhost" Mon Mar 17 20:26:44 2014 : Debug: port = "3306" Mon Mar 17 20:26:44 2014 : Debug: login = "radius" Mon Mar 17 20:26:44 2014 : Debug: password = "radius" Mon Mar 17 20:26:44 2014 : Debug: radius_db = "radius_test" Mon Mar 17 20:26:44 2014 : Debug: read_groups = yes Mon Mar 17 20:26:44 2014 : Debug: read_clients = yes Mon Mar 17 20:26:44 2014 : Debug: delete_stale_sessions = yes Mon Mar 17 20:26:44 2014 : Debug: sql_user_name = "%{User-Name}" Mon Mar 17 20:26:44 2014 : Debug: default_user_profile = "" Mon Mar 17 20:26:44 2014 : Debug: client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" Mon Mar 17 20:26:44 2014 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" Mon Mar 17 20:26:44 2014 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" Mon Mar 17 20:26:44 2014 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id " Mon Mar 17 20:26:44 2014 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id " Mon Mar 17 20:26:44 2014 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" Mon Mar 17 20:26:44 2014 : Debug: simul_count_query = "" Mon Mar 17 20:26:45 2014 : Debug: simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotoc ol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" Mon Mar 17 20:26:45 2014 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" And important part with authorinizg.looks like group is empty, but executing query on SSH will show DATA Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : User found in radcheck table Mon Mar 17 20:26:50 2014 : Debug: (0) sql : Check items matched Mon Mar 17 20:26:50 2014 : Debug: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id Mon Mar 17 20:26:50 2014 : Debug: Parsed xlat tree: Mon Mar 17 20:26:50 2014 : Debug: literal: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = '' Mon Mar 17 20:26:50 2014 : Debug: attribute: SQL-User-Name Mon Mar 17 20:26:50 2014 : Debug: { Mon Mar 17 20:26:50 2014 : Debug: ref 2 Mon Mar 17 20:26:50 2014 : Debug: list 1 Mon Mar 17 20:26:50 2014 : Debug: tag -128 Mon Mar 17 20:26:50 2014 : Debug: } Mon Mar 17 20:26:50 2014 : Debug: literal: '' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" -> 'SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = 'tester' ORDER BY id' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : ... falling-through to group processing Mon Mar 17 20:26:50 2014 : Debug: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority Mon Mar 17 20:26:50 2014 : Debug: Parsed xlat tree: Mon Mar 17 20:26:50 2014 : Debug: literal: 'SELECT groupname FROM radusergroup WHERE username = '' Mon Mar 17 20:26:50 2014 : Debug: attribute: SQL-User-Name Mon Mar 17 20:26:50 2014 : Debug: { Mon Mar 17 20:26:50 2014 : Debug: ref 2 Mon Mar 17 20:26:50 2014 : Debug: list 1 Mon Mar 17 20:26:50 2014 : Debug: tag -128 Mon Mar 17 20:26:50 2014 : Debug: } Mon Mar 17 20:26:50 2014 : Debug: literal: '' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : expand: "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" -> 'SELECT groupname FROM radu sergroup WHERE username = 'tester' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Executing query: 'SELECT groupname FROM radusergroup WHERE username = 'tester' ORDER BY priority' Mon Mar 17 20:26:50 2014 : Debug: (0) sql : ... falling-through to profile processing Mon Mar 17 20:26:50 2014 : Debug: rlm_sql (sql): Released connection (1) Mon Mar 17 20:26:50 2014 : Info: rlm_sql (sql): Closing connection (0): Too many free connections (2 > 0) Mon Mar 17 20:26:50 2014 : Debug: rlm_sql_mysql: Socket destructor called, closing socket Mon Mar 17 20:26:50 2014 : Debug: (0) modsingle[authorize]: returned from sql (rlm_sql) for request 0 Mon Mar 17 20:26:50 2014 : Debug: (0) [sql] = ok Mon Mar 17 20:26:50 2014 : Debug: (0) modsingle[authorize]: calling expiration (rlm_expiration) for request Regards, Kryštof Klíma **** poskytování poradenství v oblasti sítí Lan a Wan, servis a prodej výpočetní techniky Mobil: +420 774 331 774 E-mail: <mailto:klima@wifiprofi.cz> klima(a)wifiprofi.cz

3 2

Commit report for master branch
by announce＠freeradius.org 17 Mar '14

17 Mar '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix typo Alan T. DeKok@2014-03-17T23:21:00Z Files modified: * man/man5/rlm_files.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c39cc0291f20b8817f4d… ====== Increment p *then* set last full attribute pointer. Fixes #550 Arran Cudbard-Bell@2014-03-17T22:29:59Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/389763ca8cd2577decea… ====== Remove weird pipe substitution hack for JSON data Arran Cudbard-Bell@2014-03-17T15:20:13Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b94498762650b25a77a… ====== Avoid calling json_object_array_get_idx on non-array objects, bad things happen... Arran Cudbard-Bell@2014-03-17T14:37:00Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/432cfe1e786355f53e27… ====== More formatting Arran Cudbard-Bell@2014-03-17T14:36:28Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0fe5083b690778bec361… ====== Strip trailing & in post data Arran Cudbard-Bell@2014-03-17T14:36:04Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b12acc0f442201fefe6… ====== Work around Perl's weird crap Arran Cudbard-Bell@2014-03-17T14:35:33Z Files modified: * src/modules/rlm_rest/demo.pl Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ad2f01fa26595067f27… ====== Order of operations... Arran Cudbard-Bell@2014-03-17T07:17:02Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e82f4a95da53d8835f57… ====== Fix GCC warnings Arran Cudbard-Bell@2014-03-17T00:10:28Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5dbf55f2a897b1d83609… ====== -- This commit summary was generated @2014-03-18T00:00:13Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0