- Freeradius-Devel - lists.freeradius.org

FreeRadius Mikrotik-Rate-Limit attribute limit
by Lalit Choudhary 18 Feb '14

18 Feb '14

Hi all, I configured freeradius (FreeRADIUS Version 2.2.2) with mysql,While testing Mikrotik NAS i found that Mikrotik-Total-Limit attribute it works upto 4gb then Mikrotik-Total-Limit-Gigawords for more than 4gb (4294967296 in bytes).If i set Mikrotik-Total-Limit value more then 3.9 GB ,it's taking random value or 0 for this attribute. Currently my hotspot ,wifi users data usage limit set in database, using store procedure it's calculating value for Mikrotik-Total-Limit and assigning other attributes. Today i tried by sending both attributes(Mikrotik-Total-Limit-Gigawords and Mikrotik-Total-Limit) in redreply, Sending Access-Accept of id 61 to 192.168.53.157 port 48563 Mikrotik-Rate-Limit = "15M/16M" Mikrotik-Total-Limit = 5242880 (this value in bytes) Mikrotik-Total-Limit-Gigawords = 1 (this value in GB) Session-Timeout = 0 Idle-Timeout = 0 Port-Limit = 1 I'm assuming that it will Terminate the session after 1026 mb usage (Mikrotik-Total-Limit + Mikrotik-Total-Limit-Gigawords), but user session not Terminating even after 1026 mb usage . I am not sure whether Mikrotik-Total-Limit-Gigawords taking value in GB or bytes. Please suggests how i can use Mikrotik-Total-Limit-Gigawords for more then 4 GB data limit. Thanks, Lalit Choudhary

3 3

Commit report for master branch
by announce＠freeradius.org 17 Feb '14

17 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Better to use '${name}' for panic action log as %e may contain path components Arran Cudbard-Bell@2014-02-17T21:14:12Z Files modified: * raddb/radiusd.conf.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c9398285be6b1afdedf7… ====== We no longer log acct delay Fix AcctInterval Arran Cudbard-Bell@2014-02-17T20:52:19Z Files modified: * raddb/mods-config/sql/main/postgresql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cdf88209713b97c4b35c… ====== It's cleartext password not Clear-Text password or Cleartext Password Arran Cudbard-Bell@2014-02-17T19:12:50Z Files modified: * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e310bedc46d44adda09c… ====== Fix more places where passwords are revealed in debugging messages Arran Cudbard-Bell@2014-02-17T19:07:35Z Files modified: * src/main/tls.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_securid/rlm_securid.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d57d05c729142ee160cf… ====== Hide eDirectory passwords too Arran Cudbard-Bell@2014-02-17T18:49:41Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab1299c59fbd07af1b85… ====== rlm_sql query buffers are dynamically allocated, so it is not appropriate to define or use MAX_QUERY_LEN Arran Cudbard-Bell@2014-02-17T17:55:59Z Files modified: * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/039abbf562dccb6e2a44… ====== Add "secret" flag to configuration items. For passwords, shared secrets, etc. For now, strings only. When using "radiusd -X", secret items are NOT printed, and are replaced with <<< secret >>> They are still printed out when using "radiusd -Xx". So administrators who care to know can still find them. The User-Password is *not* mangled in this manner. We have too many people with shared secret problems in the list. It is useful to be able to point to the debug output and say "LOOK, it's WRONG". But passwords for LDAP, SQL, etc. are another class of object. So it's OK to hide them in "radiusd -X" Alan T. DeKok@2014-02-17T16:25:49Z Files modified: * src/include/conffile.h * src/main/client.c * src/main/conffile.c * src/main/realms.c * src/main/tls.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/901d59f4b36657441c54… ====== Revert "Allow "no overwrite" for config variables" This reverts commit 4f6bcffce7040c7b71ba4c64b30e0068f59f0fa5. It turns out we don't need this, so it should be deleted Alan T. DeKok@2014-02-17T14:17:29Z Files modified: * src/include/conffile.h * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9bfbbd8ec55e1d888738… ====== -- This commit summary was generated @2014-02-18T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 17 Feb '14

17 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== We no longer log acct delay Fix AcctInterval Arran Cudbard-Bell@2014-02-17T21:14:54Z Files modified: * raddb/mods-config/sql/main/postgresql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6797e749559ecd86db2d… ====== Better to use '${name}' for panic action log as %e may contain path components Arran Cudbard-Bell@2014-02-17T21:14:37Z Files modified: * raddb/radiusd.conf.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32a137513b8dcfa0b074… ====== Fix more places where passwords are revealed in debugging messages Arran Cudbard-Bell@2014-02-17T19:13:13Z Files modified: * src/main/tls.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_securid/rlm_securid.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ac2e9a7a07d0400babc… ====== It's cleartext password not Clear-Text password or Cleartext Password Arran Cudbard-Bell@2014-02-17T19:04:36Z Files modified: * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc921b67f506341669e5… ====== Hide eDirectory passwords too Arran Cudbard-Bell@2014-02-17T18:49:56Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20f52e55cc5205b740d7… ====== rlm_sql query buffers are dynamically allocated, so it is not appropriate to define or use MAX_QUERY_LEN Arran Cudbard-Bell@2014-02-17T17:56:24Z Files modified: * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7d7eb494a7bdf6f61d30… ====== Add "secret" flag to configuration items. For passwords, shared secrets, etc. For now, strings only. When using "radiusd -X", secret items are NOT printed, and are replaced with <<< secret >>> They are still printed out when using "radiusd -Xx". So administrators who care to know can still find them. The User-Password is *not* mangled in this manner. We have too many people with shared secret problems in the list. It is useful to be able to point to the debug output and say "LOOK, it's WRONG". But passwords for LDAP, SQL, etc. are another class of object. So it's OK to hide them in "radiusd -X" Alan T. DeKok@2014-02-17T16:20:14Z Files modified: * src/include/conffile.h * src/main/client.c * src/main/conffile.c * src/main/realms.c * src/main/tls.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1536d285b7b913ff2bcb… ====== Revert "Allow "no overwrite" for config variables" This reverts commit 4f6bcffce7040c7b71ba4c64b30e0068f59f0fa5. It turns out we don't need this, so it should be deleted Alan T. DeKok@2014-02-17T14:16:43Z Files modified: * src/include/conffile.h * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/881f32c978c75fa30da0… ====== Fix column order in Postgres indexes. Add index for Acct On/Off Arran Cudbard-Bell@2014-02-17T13:02:29Z Files modified: * raddb/mods-config/sql/main/postgresql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/357c24fdd79528778104… ====== -- This commit summary was generated @2014-02-18T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 16 Feb '14

16 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fixup PostgreSQL queries Arran Cudbard-Bell@2014-02-16T10:57:55Z Files modified: * raddb/mods-config/sql/main/postgresql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd06fd7cafdd4a0cc6c1… ====== Fixup postgresql driver errors so we get the context ^ displayed properly Arran Cudbard-Bell@2014-02-16T00:43:26Z Files modified: * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23ba3ccc4db9030f54bd… ====== -- This commit summary was generated @2014-02-17T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 16 Feb '14

16 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fixup PostgreSQL queries Arran Cudbard-Bell@2014-02-16T10:58:39Z Files modified: * raddb/mods-config/sql/main/postgresql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cc6949db40868c10c2eb… ====== Update ChangeLog Arran Cudbard-Bell@2014-02-16T10:40:01Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2e2e8b2502e25aabad9b… ====== Fixup postgresql driver errors so we get the context ^ displayed properly Arran Cudbard-Bell@2014-02-16T00:43:04Z Files modified: * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b98c4620fbfc3541935b… ====== -- This commit summary was generated @2014-02-17T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 15 Feb '14

15 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix formatting in debian init script and add debug-threaded mode Arran Cudbard-Bell@2014-02-15T23:30:20Z Files modified: * debian/freeradius.init Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2956b16a822f0113610… ====== More tests Alan T. DeKok@2014-02-15T22:22:10Z Files modified: * src/main/radattr.c * src/tests/unit/rfc.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6e740858aa30dc6fc3d… ====== 127.0.0.1/32 == 127.0.0.1 Alan T. DeKok@2014-02-15T22:14:12Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c34f9cc7220b0cd7dd14… ====== Check that /32 isn't really /32768938373892873673894 Alan T. DeKok@2014-02-15T22:09:27Z Files modified: * src/lib/valuepair.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3dcca6fd4ac75b3c2742… ====== Increase debug level on logging calls in rlm_pap which reveal the "known-good" or User's password Arran Cudbard-Bell@2014-02-15T21:52:29Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2752ed30f02fa5d69f43… ====== Allow IP addresses with /32 suffixes Arran Cudbard-Bell@2014-02-15T20:37:52Z Files modified: * src/lib/valuepair.c * src/modules/rlm_sql/sql.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c912c567fd728fa265f… ====== Document PW_TYPE flags Arran Cudbard-Bell@2014-02-15T17:39:45Z Files modified: * src/include/conffile.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/722efc8990275c18fe6d… ====== IP addresses can be integers, too Alan T. DeKok@2014-02-15T17:11:48Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00b56e40392949f1e322… ====== Double-quotes strings with no % are literals Which means more cases can be statically optimized away Alan T. DeKok@2014-02-15T17:08:33Z Files modified: * src/main/map.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47989eac370fb179e8cf… ====== Statically evaluate literal string comparisons They're not parsed as VPT_TYPE_DATA, because there's no cast Alan T. DeKok@2014-02-15T17:08:31Z Files modified: * src/main/parser.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d033afd776c88eddaf7… ====== Update radsniff.init Arran Cudbard-Bell@2014-02-15T00:41:14Z Files modified: * scripts/radsniff.init Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/751c924db4e0564eb37f… ====== -- This commit summary was generated @2014-02-16T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 15 Feb '14

15 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Backport eval fix Arran Cudbard-Bell@2014-02-15T23:30:04Z Files modified: * debian/freeradius.init Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d79e76204558b422a185… ====== Fix formatting in debian init script and add debug-threaded mode Arran Cudbard-Bell@2014-02-15T23:30:04Z Files modified: * debian/freeradius.init Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60c1d4d0a5f084fe31a7… ====== Recommend using attribute references more often Alan T. DeKok@2014-02-15T22:31:16Z Files modified: * man/man5/unlang.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9cbc8bf46c2223d3b29c… ====== More tests Alan T. DeKok@2014-02-15T22:20:50Z Files modified: * src/main/radattr.c * src/tests/unit/rfc.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c5c91061b9f6a12a1b20… ====== 127.0.0.1/32 == 127.0.0.1 Alan T. DeKok@2014-02-15T22:13:43Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77502479e49966d6f044… ====== Check that /32 isn't really /32768938373892873673894 Alan T. DeKok@2014-02-15T22:08:50Z Files modified: * src/lib/valuepair.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fac6153639ab3b25eb26… ====== Increase debug level on logging calls in rlm_pap which reveal the "known-good" or User's password Arran Cudbard-Bell@2014-02-15T21:52:59Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37ed7e9dc20da784fbf6… ====== Allow IP addresses with /32 suffixes Arran Cudbard-Bell@2014-02-15T20:37:42Z Files modified: * src/lib/valuepair.c * src/modules/rlm_sql/sql.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d4a43f5c932e1b74a1d… ====== Document PW_TYPE flags Arran Cudbard-Bell@2014-02-15T17:40:16Z Files modified: * src/include/conffile.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06a5b48b7d4920b9ebdf… ====== IP addresses can be integers, too Alan T. DeKok@2014-02-15T17:11:31Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5f8233ac6ab810bdd2d… ====== Note recent changes Alan T. DeKok@2014-02-15T17:09:54Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/015058198c9e6432f59e… ====== Double-quotes strings with no % are literals Which means more cases can be statically optimized away Alan T. DeKok@2014-02-15T17:05:14Z Files modified: * src/main/map.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/caa125fbfc10c6709954… ====== Statically evaluate literal string comparisons They're not parsed as VPT_TYPE_DATA, because there's no cast Alan T. DeKok@2014-02-15T16:55:36Z Files modified: * src/main/parser.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b8ef443640647bea5cd7… ====== -- This commit summary was generated @2014-02-16T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 14 Feb '14

14 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add delay when restarting radsniff Arran Cudbard-Bell@2014-02-14T19:00:43Z Files modified: * scripts/radsniff.init Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c205ab5d2b0a4c12916… ====== fix dict_addattr call in rlm_sqlcounter Arran Cudbard-Bell@2014-02-14T13:36:13Z Files modified: * src/include/libradius.h * src/lib/dict.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0ef37750ff0dfabd5cd6… ====== the value for User-Name requires quotes around it. Alan T. DeKok@2014-02-14T03:13:58Z Files modified: * scripts/raddebug Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ed1d8cb161f4fba3703… ====== -- This commit summary was generated @2014-02-15T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 14 Feb '14

14 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update ChangeLog Arran Cudbard-Bell@2014-02-14T13:49:47Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/398a8aab044c364e2f11… ====== fix dict_addattr call in rlm_sqlcounter Arran Cudbard-Bell@2014-02-14T13:35:53Z Files modified: * src/include/libradius.h * src/lib/dict.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1df85943aa47d5ab4ba3… ====== the value for User-Name requires quotes around it. Alan T. DeKok@2014-02-13T15:26:37Z Files modified: * scripts/raddebug Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea46dd86bd74ea5f3fcf… ====== -- This commit summary was generated @2014-02-15T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 13 Feb '14

13 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix potential crash with SSHA and salts > 44bytes Arran Cudbard-Bell@2014-02-13T15:22:36Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff5147c9e5088c7cf5c0… ====== Update PostgreSQL schemas and queries Arran Cudbard-Bell@2014-02-13T12:54:05Z Files modified: * raddb/mods-config/sql/main/postgresql/queries.conf * raddb/mods-config/sql/main/postgresql/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9747c052e4536c0679f4… ====== Formatting in MySQL queries Arran Cudbard-Bell@2014-02-13T12:54:05Z Files modified: * raddb/mods-config/sql/main/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12e681827fd7f4ed723c… ====== -- This commit summary was generated @2014-02-14T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0