- Freeradius-Devel - lists.freeradius.org

3.0.x: persistent TLS session cache
by Stefan Winter 04 Feb '14

04 Feb '14

Hi, now on 3.0.x to follow the die on exit code fixes... and found something else: I've configured TLS session caches in mods-enabled/eap. The directory to cache sessions in exists, and with the user radiusd on the shell I can touch files in that directory. And yet: (3) eap_peap : TLS_accept: SSLv3 write finished A (3) eap_peap : TLS_accept: SSLv3 flush data SSL: adding session 9b8b9b86357428cced36cd4aac564d9b17a6258cd84cf070b38a974eb563f62c to cache SSL: could not open session file %{logdir}/tlscache-eduroam-users/9b8b9b86357428cced36cd4aac564d9b17a6258cd84cf070b38a974eb563f62c.asn1: (3) eap_peap : (other): SSL negotiation finished successfully SSL Connection Established Well, I used %{logdir} in my persist_dir setting in the config alright, but... looking at the code, this debug message prints exactly what's being used for the open() call - so %{logdir} should have been expanded to the literal path, right? Is there some xlat() missing here? Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

2 2

Commit report for master branch
by announce＠freeradius.org 03 Feb '14

03 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Move cached_config_t to talloc Alan T. DeKok@2014-02-03T17:49:55Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3c4265736c7c6dbf29b4… ====== Update queries.conf Arran Cudbard-Bell@2014-02-03T16:40:33Z Files modified: * raddb/mods-config/sql/cui/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b9f55d5cfdc71faf7b15… ====== Rename home_server type to home_server_t Arran Cudbard-Bell@2014-02-03T12:54:11Z Files modified: * src/include/radiusd.h * src/include/realms.h * src/main/command.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/stats.c * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a844851b122008b889d1… ====== -- This commit summary was generated @2014-02-04T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 03 Feb '14

03 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Move cached_config_t to talloc Alan T. DeKok@2014-02-03T17:49:42Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16f14a41e82c1bf4619f… ====== Update queries.conf Arran Cudbard-Bell@2014-02-03T16:35:14Z Files modified: * raddb/mods-config/sql/cui/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32a442c9dd255c5ba352… ====== Update ChangeLog Arran Cudbard-Bell@2014-02-03T13:09:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be1b8c76b2386e99bd37… ====== Update ChangeLog Arran Cudbard-Bell@2014-02-03T13:08:28Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02c707ed6009e64ab731… ====== Rename home_server type to home_server_t Arran Cudbard-Bell@2014-02-03T12:53:39Z Files modified: * src/include/radiusd.h * src/include/realms.h * src/main/command.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/stats.c * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4486645bdbda6753e04f… ====== -- This commit summary was generated @2014-02-04T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 02 Feb '14

02 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Delay cleanup of listeners until all requests using them are done. Also do stats just before we free the request, instead of when we remove it from the request hash. This is because some requests aren't in the hash... Alan T. DeKok@2014-02-02T15:57:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c83f95b6047255554753… ====== -- This commit summary was generated @2014-02-03T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 02 Feb '14

02 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Delay cleanup of listeners until all requests using them are done. Also do stats just before we free the request, instead of when we remove it from the request hash. This is because some requests aren't in the hash... Alan T. DeKok@2014-02-02T15:58:34Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c0adaa730a3d3430eac… ====== -- This commit summary was generated @2014-02-03T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 31 Jan '14

31 Jan '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Typo Arran Cudbard-Bell@2014-01-31T11:13:47Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d6abb23871107f61165… ====== Make TCP sockets work with udpfromto. Add a "proto" field to RADIUS_PACKET. Have it checked in rad_send(), so that we just use write(). Using sendto() is OK for TCP sockets. Using udpfromto is not OK for TCP sockets. Ensure that the TCP code in listen.c sets the proto field. Ensure that rad_alloc_reply() sets the proto field Ensure that radclient sets the proto field as necessary Conflicts: src/main/radclient.c Alan T. DeKok@2014-01-31T04:20:10Z Files modified: * src/include/libradius.h * src/lib/radius.c * src/main/listen.c * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e497159bbb7f0d5483d2… ====== Fix radattr dictionary path Arran Cudbard-Bell@2014-01-31T02:37:50Z Files modified: * src/tests/unit/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b31f858d8519ab712950… ====== Add -D to more utilities Arran Cudbard-Bell@2014-01-31T02:05:50Z Files modified: * src/main/radattr.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/05db37a45b7683c2093e… ====== -- This commit summary was generated @2014-02-01T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 31 Jan '14

31 Jan '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make TCP sockets work with udpfromto. Add a "proto" field to RADIUS_PACKET. Have it checked in rad_send(), so that we just use write(). Using sendto() is OK for TCP sockets. Using udpfromto is not OK for TCP sockets. Ensure that the TCP code in listen.c sets the proto field. Ensure that rad_alloc_reply() sets the proto field Ensure that radclient sets the proto field as necessary Alan T. DeKok@2014-01-31T04:18:35Z Files modified: * src/include/libradius.h * src/lib/radius.c * src/main/listen.c * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc19e44b56379e2f8f68… ====== Send warning message only if it's necessary Alan T. DeKok@2014-01-31T04:03:25Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/266318957216aaf531e4… ====== Fix radattr dictionary path Arran Cudbard-Bell@2014-01-31T02:38:03Z Files modified: * src/tests/unit/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f167c812fd68f12338a8… ====== Add -D to more utilities Arran Cudbard-Bell@2014-01-31T01:59:57Z Files modified: * src/main/radattr.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c2d5372d61b5378bb04… ====== -- This commit summary was generated @2014-02-01T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 30 Jan '14

30 Jan '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Tee to the log file instead When people are running in foreground mode they probably want to see the result of the backtrace... Arran Cudbard-Bell@2014-01-30T20:42:22Z Files modified: * raddb/radiusd.conf.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f08a76e10cb320339ef1… ====== Proper checks for error message functions Arran Cudbard-Bell@2014-01-30T18:09:21Z Files modified: * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.ac * src/modules/rlm_krb5/krb5.c * src/modules/rlm_krb5/krb5.h * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56cb07f13d4de742f078… ====== Consistent error messages Arran Cudbard-Bell@2014-01-30T16:59:09Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/453fb15cbadd93d6375c… ====== Missing break Arran Cudbard-Bell@2014-01-30T16:55:19Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/739a6d0a056ebe9fffb7… ====== Explain why DHCP decoding failed Arran Cudbard-Bell@2014-01-30T16:55:19Z Files modified: * src/modules/proto_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a893476348081a9d4f8… ====== Edit clients.conf Added a missing commented-out closing curly bracket Stefan Paetow (via Alan T. DeKok)@2014-01-30T14:16:29Z Files modified: * raddb/clients.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2c649b86547de1204c6… ====== Typo Alan T. DeKok@2014-01-29T21:49:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12e0bc5efb4035fdc541… ====== -- This commit summary was generated @2014-01-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 30 Jan '14

30 Jan '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Tee to the log file instead When people are running in foreground mode they probably want to see the result of the backtrace... Arran Cudbard-Bell@2014-01-30T20:40:37Z Files modified: * raddb/radiusd.conf.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/481f6e4f79c5a39df442… ====== Proper checks for error message functions Arran Cudbard-Bell@2014-01-30T18:09:14Z Files modified: * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.ac * src/modules/rlm_krb5/krb5.c * src/modules/rlm_krb5/krb5.h * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4b7ba841e2571b052ff… ====== Consistent error messages Arran Cudbard-Bell@2014-01-30T16:59:00Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e00ff8e7afd5794d52be… ====== Missing break Arran Cudbard-Bell@2014-01-30T16:55:00Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5fae13575caa07bdf68d… ====== Explain why DHCP decoding failed Arran Cudbard-Bell@2014-01-30T16:54:59Z Files modified: * src/modules/proto_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f4aa6dc0a26c6eabb00a… ====== Merge pull request #513 from spaetow/master Edit clients.conf Alan DeKok@2014-01-30T14:16:02Z Files modified: * raddb/clients.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e7be9e9ac43d30081c6d… ====== Edit clients.conf Added a missing commented-out closing curly bracket Stefan Paetow@2014-01-30T12:52:22Z Files modified: * raddb/clients.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/13db94293461abaaf094… ====== -- This commit summary was generated @2014-01-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

possible bug in rlm_krb5.c?
by John Dennis 30 Jan '14

30 Jan '14

One of our engineers, Nalin, did a quick review of diffs between 3.0.0 and 3.0.1 and noticed this. I agree with Nalin, it looks like an unintentional mistake, was it? > I did a quick(ish?) skim of a diff between the two ... > > Also from skimming that diff, I can randomly offer that in rlm_krb5.c, > the switch statement that follows a call to krb5_verify_user_opt() falls > through after the KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN case, but the > similarly-structured switch statement after the > krb5_get_init_creds_password() call includes a "break;". The omission > in the first doesn't look intentional to me. -- John

2 2