- Freeradius-Devel - lists.freeradius.org

free radius configure error: talloc.h
by Kavitha Kamarthy 31 May '13

31 May '13

Hi All, I read the previous posts and installed the talloclib and I do see the talloc.h under /usr/include. I see that the library is correctly installed. I set the PATH to reflect that in .bashrc. I also copied the talloc.h file under/usr/local/include too but it is unable to find the talloc.h file. When I execute /freeradius-server$ sudo ./configure --with-talloc-include-dir="/usr/include" I get the error : configure: Setting additional developer CFLAGS checking for the compiler flag "-Wdocumentation"... no configure: Developer CFLAGS are " -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -Wformat-y2k -Wno-format-extra-args -Wno-format-zero-length -Wno-cast-align -Wformat-nonliteral -Wformat-security -Wformat=2 -DWITH_VERIFY_PTR=1" configure: is developer build, enabling experimental modules implicitly, disable with --without-experimental-modules checking for TLS... no checking for talloc.h in /usr/include... no checking for talloc.h... no checking for talloc.h in /usr/local/include... no checking for talloc.h in /opt/include... no configure: WARNING: talloc headers not found. Use --with-talloc-include-dir=<path>. configure: error: FreeRADIUS requires libtalloc Any suggestions how to fix this ? Thx KCK

1 0

Commit report for master branch
by announce＠freeradius.org 30 May '13

30 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== and just use cflags Arran Cudbard-Bell@2013-05-30T22:06:49Z Files modified: * m4/ax_cc.m4 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4adf179e9e91f2582059… ====== Probably need to pass -Werror for compiler argument checks Arran Cudbard-Bell@2013-05-30T22:05:36Z Files modified: * configure * m4/ax_cc.m4 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0373d39af8821576eeb0… ====== -Wdocumentation doesn't warn about unrecognised tags Arran Cudbard-Bell@2013-05-30T21:31:11Z Files modified: * src/main/valuepair.c * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0af8f9c57923053941e… ====== Fixup doxygen comments to pass new check Arran Cudbard-Bell@2013-05-30T21:21:00Z Files modified: * src/lib/valuepair.c * src/main/connection.c * src/main/exec.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_yubikey/decrypt.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0399000f7ef167c69bf… ====== Update main autoconf Better check for -Qunused-arguments Pass -Wdocumentation if supported by the compiler, this allows clang >= 3.2 to parse the doxygen documentation and emit warnings if it doesn't match the code. Arran Cudbard-Bell@2013-05-30T21:04:16Z Files modified: * configure * configure.in * m4/ax_cc.m4 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4cbe9552c17e06898176… ====== Need more cursors Arran Cudbard-Bell@2013-05-30T19:21:34Z Files modified: * src/modules/rlm_attr_filter/rlm_attr_filter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f4f29d2861f0371a045f… ====== And one more... Arran Cudbard-Bell@2013-05-30T16:55:24Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b54d7b63e55b4e8f79bc… ====== Fix reference issues hidden by cast Arran Cudbard-Bell@2013-05-30T16:29:27Z Files modified: * src/main/command.c * src/main/tls.c * src/main/valuepair.c * src/modules/proto_dhcp/dhcp.c * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e7acd1cfa84be41a38b2… ====== Macro Arran Cudbard-Bell@2013-05-30T00:44:37Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3960ee099892c24f1682… ====== -- This commit summary was generated @2013-05-31T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 29 May '13

29 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== VERIFY must only be be called on non-NULL pointers pairfindnext needs its own pointer to work correctly Fix typo in evaluate.c Arran Cudbard-Bell@2013-05-29T19:08:49Z Files modified: * src/include/libradius.h * src/lib/valuepair.c * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc83f82015a67599a6b2… ====== Fix use after free when iterating over pairlists to be freed Arran Cudbard-Bell@2013-05-29T18:05:32Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb28809a263fb7f582fd… ====== Use paircursor for iteration where appropriate Arran Cudbard-Bell@2013-05-29T15:52:38Z Files modified: * src/include/libradius.h * src/lib/print.c * src/lib/valuepair.c * src/main/auth.c * src/main/command.c * src/main/detail.c * src/main/evaluate.c * src/main/exec.c * src/main/log.c * src/main/modcall.c * src/main/process.c * src/main/radattr.c * src/main/radclient.c * src/main/radsniff.c * src/main/tls.c * src/main/valuepair.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_dhcp/dhcpclient.c * src/modules/proto_dhcp/rlm_dhcp.c * src/modules/proto_vmps/vqp.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eapcommon.c * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_unix/rlm_unix.c * src/modules/rlm_utf8/rlm_utf8.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e3b4c5b2bfda8d8965f3… ====== -- This commit summary was generated @2013-05-30T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

default certificates: add a useless CRL distribution point?
by Stefan Winter 25 May '13

25 May '13

Hi, the bootstrap script adds EKU "TLS Web Server" because that makes most of the Windows editions happy. Folks in eduroam have now discovered something ... odd ... with Windows Phone 8. It requires that the *server* certificate that comes in during EAP contains the "CRL Distribution Point" extension. This is rather useless of course, because the client can't actually consult the CRL because he has no network while he's trying to authenticate. As an effect of that, it does not matter at all whether the URL in the CDP extension actually serves a CRL. It's just an extra annoyance to be aware of. I'm wondering: should the bootstrap scripts add a CDP pointing to a non-existing URL? It would improve the compatibility with these devices. It would make the certs look stranger though, as that is just added junk. Maybe a URL like "http://www.freeradius.org/silly/cert/extension/" would make that clear for anyone who cares to take a look at the generated certs. Note that I don't know if the CA and/or intermediates also need that extension present. I can find out if need be (and I'm sure Tomasz and Maja are reading this list themselves anyway :-) ). Greetings, Stefan Winter

2 1

Commit report for master branch
by announce＠freeradius.org 24 May '13

24 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== if len==0, buff may be NULL Alan T. DeKok@2013-05-24T16:25:14Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e58905fed2bd3e5177e… ====== The "opaque" data belongs to handler, not to reply Alan T. DeKok@2013-05-24T15:54:26Z Files modified: * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c6bcb93d55501336bb1f… ====== Allow forcible empty expansions Alan T. DeKok@2013-05-24T15:48:49Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2e58bbb94dff280600f… ====== -- This commit summary was generated @2013-05-25T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 23 May '13

23 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #295 from leprechau/master fix compilation error in rlm_ruby Arran Cudbard-Bell@2013-05-23T01:45:57Z Files modified: * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e8ef869ba8b23bfa710… ====== fix compilation error Aaron Hurt@2013-05-22T06:48:07Z Files modified: * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0ddad94652b0b91f7e3f… ====== -- This commit summary was generated @2013-05-24T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

PEAP/EAP-MSCHAPv2 module modification problem
by Ivan Ostres 23 May '13

23 May '13

Hello list, I am using PEAP-EAP-MSCHAPv2 combo with freeradius. I modified EAP-MSCHAPv2 rlm to use a weird password store system and authentication works fine. There is one thing I am missing - I need to add a specific VSA to access-accept (depending on the user) and am trying to do it this way: #define VENDOR_CISCO 9 #define CISCO_SSG_ACCOUNT_INFO 250 VALUE_PAIR *myvsa; myvsa = radius_paircreate(request, &request->reply->vps, CISCO_SSG_ACCOUNT_INFO, VENDOR_CISCO); if (myvsa == NULL) RDEBUG("MYVSA == NULL"); const char *mystr="AINTERNET"; pairmemcpy(myvsa, (const uint8_t *)mystr,4); this is done under case PW_MSCHAP2_SUCCESS: (line ~180) in rlm_eap_mschapv2.c module. There is no error but I never see this output on access-accept sent to BRAS. What am I doing wrong? Is there a better way to achieve this? BR, iostres

3 7

pull request @292 discusstion requirement
by yuanlinyu 23 May '13

23 May '13

hi, all guys and administrators, I have a pull request #292 about ipv6 issue on master brach src/lib/misc.c, fr_ipaddr_cmp() | | #ifdef HAVE_STRUCT_SOCKADDR_IN6 | | case AF_INET6: | | - if (a->scope < b->scope) return -1; | | - if (a->scope > b->scope) return +1; | | - | | return memcmp(&a->ipaddr.ip6addr, | | | this fix according to my test configuration, 1. problem 1.1 /usr/local/etc/raddb/clients.conf, add link local client client fe80::/16 { secret = cameo shortname = atgs950 } 1.2 /usr/local/etc/raddb/sites-available/default, open ipv6 auth and acct: ipv6addr = :: # any. ::1 == localhost 1.3 client send auth request, server debug info as below: Wed May 22 11:18:57 2013 : Error: Ignoring request to auth interface eth0 address :: port 1812 as server default from unknown client fe80::290:c0ff:fe82:1630 port 49153 proto udp 2. I realy think scope is not necessary as a rb-tree key, for ip address will be unique and represent the scope "global", "link", "site", and it's transport issue 3. I also found no place to parse configured address's scope id anyone can tell me if it's code issue or not? please help review pull request, thanks

1 0

Commit report for master branch
by announce＠freeradius.org 21 May '13

21 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Updates Alan T. DeKok@2013-05-21T19:05:13Z Files modified: * share/dictionary.telkom Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5113475ce044b03bbd5b… ====== removed old comment Alan T. DeKok@2013-05-21T17:04:31Z Files modified: * src/tests/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/03783354d0a38aa09e29… ====== Infinite loops are bad. foo { ... } authorize = ${foo} will add "foo" to the parent section, by appending it to the end of the list. But foo is already in the section, so we create a loop inside the linked list of children. That's bad. Alan T. DeKok@2013-05-21T16:49:41Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/41380536131ec10baecf… ====== -- This commit summary was generated @2013-05-22T00:00:08Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 21 May '13

21 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Updates Alan T. DeKok@2013-05-21T19:04:37Z Files modified: * share/dictionary.telkom Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2fa057297c910d0b0eb7… ====== Merge pull request #293 from fajarnugraha/v2.x.x-suse-20130510 Fix suse package to build and run cleanly for current v2.x.x branch Alan DeKok@2013-05-21T15:10:57Z Files modified: * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2706906bd7a0932d753… ====== suse: build fixes * Bump version to 2.2.1 * Only requires sqlite3-devel and libpcap-devel on Suse 11.x and above * README was renamed to README.rst Fajar A. Nugraha@2013-05-21T11:05:48Z Files modified: * suse/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/504f188078e0a58c3720… ====== -- This commit summary was generated @2013-05-22T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0