- Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 09 May '13

09 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Updated for v3 Alan T. DeKok@2013-05-09T20:03:52Z Files modified: * share/dictionary.rfc6930 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab149c8ac847b8256697… ====== RFC 6930 and dictionary Alan T. DeKok@2013-05-09T20:03:52Z Files modified: * doc/rfc/rfc6930.txt * share/dictionary * share/dictionary.rfc6930 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/74b837657b73d90b9002… ====== RFC 6911 and dictionary Alan T. DeKok@2013-05-09T20:03:45Z Files modified: * doc/rfc/rfc6911.txt * share/dictionary * share/dictionary.rfc6911 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11572562699449a7c1ad… ====== Use correctly sized buffer for MD5 and use a time-invariant comparison Alan T. DeKok@2013-05-09T16:07:38Z Files modified: * src/modules/rlm_eap/types/rlm_eap_md5/eap_md5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fd49c4c8c38a3add06a… ====== Remove length limitations on names Alan T. DeKok@2013-05-09T16:00:29Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a18fd7991427a7427a5… ====== re-arrange code to make it clearer what's going on Alan T. DeKok@2013-05-09T15:56:05Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50e9675e31a02e1d1141… ====== Remove more fixed-size buffers Alan T. DeKok@2013-05-09T15:48:12Z Files modified: * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ba6f0840746e4a9320ce… ====== Remove extraneous strlcpy && buffer Alan T. DeKok@2013-05-09T15:48:12Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f244d250fac1a7d60052… ====== Fix wypo in WITH_ macro. At worst it left an unused label in the code. skids (via Arran Cudbard-Bell)@2013-05-09T07:09:19Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/288bdd9ecbb6174b2d53… ====== Typo in comments skids (via Arran Cudbard-Bell)@2013-05-09T07:09:10Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/274ca8c272d3d0eb533f… ====== Adjust comment to direct users to newer doc file, README.failover nonexistant skids (via Arran Cudbard-Bell)@2013-05-09T07:09:03Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0779e2ae6afc05acb60d… ====== Fix typos in comments skids (via Arran Cudbard-Bell)@2013-05-09T07:08:47Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c572fec9b4264d221f44… ====== Remove UNUSED from a used parameter skids (via Arran Cudbard-Bell)@2013-05-09T07:08:29Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25acf3a64db5f195a250… ====== grammar correction in comments skids (via Arran Cudbard-Bell)@2013-05-09T07:08:19Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5cf9af477234154f211… ====== Whitespace Arran Cudbard-Bell@2013-05-09T03:21:47Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cd48ca221c4680efd79… ====== Simpler way to validate URI Arran Cudbard-Bell@2013-05-09T03:17:06Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/681c975e216d20f39dc0… ====== -- This commit summary was generated @2013-05-10T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 09 May '13

09 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== RFC 6930 and dictionary Alan T. DeKok@2013-05-09T20:02:43Z Files modified: * doc/rfc/rfc6930.txt * share/dictionary * share/dictionary.rfc6930 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f746e171346061fa534c… ====== RFC 6911 and dictionary Alan T. DeKok@2013-05-09T20:02:35Z Files modified: * doc/rfc/rfc6911.txt * share/dictionary * share/dictionary.rfc6911 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42f4e3be2736a388871f… ====== -- This commit summary was generated @2013-05-10T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 May '13

08 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Decoded VPs are associated with the packet Alan T. DeKok@2013-05-08T16:30:04Z Files modified: * src/include/libradius.h * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4f55c685ce4847a8e4e… ====== Made decoder handle concatenated attributes Alan T. DeKok@2013-05-08T16:24:03Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8d040198e43e2003d5d… ====== More checks for concatenated attrs Alan T. DeKok@2013-05-08T16:20:37Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c678acb924b906ae007d… ====== talloc_steal next pointer, too Alan T. DeKok@2013-05-08T16:20:14Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/656c44b1f3f17b6889ce… ====== Refer to smbpasswd module, not etc_smbpasswd Alan T. DeKok@2013-05-08T15:26:15Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/488976de904f75a97f3f… ====== -- This commit summary was generated @2013-05-09T00:00:08Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 08 May '13

08 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Refer to smbpasswd module, not etc_smbpasswd Alan T. DeKok@2013-05-08T15:24:17Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b26cff8a2bd8ec610266… ====== -- This commit summary was generated @2013-05-09T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Changes in v3
by Alan DeKok 08 May '13

08 May '13

I'm in the process of pushing back some major changes to v3. It involves removing the 253-byte limit on the internal representation for attributes (i.e. VALUE_PAIRs). The changes were much less than I thought. They took only a day or so once I decided which approach to take. They also required "talloc", which explains why the change wasn't done up until now. The server can now support RFC 6929 "extended" attributes, without any pre-defined limitation on length. i.e. 4K certificates, etc. I'm in the process of sweeping through the code, and removing the rest of the length limitations. e.g. EAP-Message encoding / decoding, etc. As a bonus, the server can now represent *255* character DHCP options, which it couldn't do before. Arran and I are working on true support for nested TLVs. At that point, turning FreeRADIUS into a Diameter server isn't that hard. :) Alan DeKok.

4 5

Deprecated ldap_int_tls_config in rlm_ldap
by John Dennis 08 May '13

08 May '13

I was going through some of our fixes for 2.x and noticed that the new rlm_ldap for 3.0 has the same problem. Apparently Arron wondered about the use of ldap_int_tls_config as well and wrote up this issue: https://github.com/FreeRADIUS/freeradius-server/issues/236 The short story is that ldap_int_tls_config was never meant to be a public LDAP API, that's why it's not in the public header! But more to the point OpenLDAP has addressed the TLS configuration issues a while ago. Note OpenLDAP provides the *client* library most everyone uses, this is not an OpenLDAP server issue, we're talking client code here independent of your LDAP server of choice. The code in question centers around setting the REQUIRE_CERT option. To be able to use the correct API for setting REQUIRE_CERT one has to enable the NEW_TLS_CTX option (this is how OpenLDAP fixed the use of bogus use ldap_int_tls_config, by moving the TLS options into the standard config area). The old deprecated LDAP API took string arguments, the new API uses enumerated constants. To preserve backwards compatibility with rlm_ldap and because we really don't want enumerated constants in the rlm_ldap module config we also need to translate the string option to an enumerated constant. I could not figure out how to attach a patch to the github issue, so a git formatted patch is attached which can be applied with git-am or git-apply. This patch is against master (the rewritten rlm_ldap). Caveat: I have not actually tested the proposed patch against master, I simply ported our 2.x patch which had been tested. Note, the 2.x rlm_ldap has the same issue and the only reason we didn't push a 2.x patch yet is because while testing we discovered a bug in the OpenLDAP TLS driver code in which operations related to TLS were performed in the wrong order, that has since been fixed and was restricted to the case where NSS was the TLS provider. Once we finish testing the 2.x I'll submit that as well. But as far as I'm concerned in the new FreeRADIUS 3.x version there should be no reference whatsoever to a non-public deprecated LDAP API, instead 3.x should only use the currently defined public LDAP API's, trying to be backward compatible to something that was broken is not something that should be carried forward into a new version. -- John Dennis <jdennis(a)redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/

2 4

Commit report for master branch
by announce＠freeradius.org 07 May '13

07 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Typo Arran Cudbard-Bell@2013-05-07T23:27:54Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87bfde540ab3763e53d0… ====== And this is now an error Arran Cudbard-Bell@2013-05-07T22:10:34Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aca6161f9a2917411686… ====== Notes on 253 octets and TTLS Alan T. DeKok@2013-05-07T22:08:33Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32f6d96c6144bea998c2… ====== Make eap_compose routine for EAP is now RADIUS un-aware It relies on the packet encoder to chop the EAP packet into attributes Alan T. DeKok@2013-05-07T22:08:33Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1af36dba6c826287638… ====== "concatenated" attributes get split when encoded But only if they're more than 253 octets long. The dictionary parser enforces the limitation that only "RFC" attributes can be concatenated Alan T. DeKok@2013-05-07T22:08:33Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9191f0d95b46ef790de2… ====== Use correct variable when decoding inner tunnel things Alan T. DeKok@2013-05-07T22:08:32Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/peap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55f6e393619c310dae6d… ====== Add the "concat" flag For EAP-Message, and RFC 5904 attributes. It means that the encoder/decoder takes care of splitting / concatenating the attributes Alan T. DeKok@2013-05-07T22:08:32Z Files modified: * share/dictionary.rfc2869 * share/dictionary.rfc5904 * src/include/libradius.h * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/701a48dde8fb741d41f7… ====== Use libldap default values for require_cert Arran Cudbard-Bell@2013-05-07T22:04:55Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/19abde122046d5bc261f… ====== Don't need to warn about rebind as it's checked on startup Arran Cudbard-Bell@2013-05-07T21:59:16Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf86a307dd1591b04f82… ====== Fixes #236 - Use correct interface for setting cert validation options - Original fix by John Dennis Arran Cudbard-Bell@2013-05-07T21:52:14Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.in * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/087ba36153fdc6a52a0c… ====== -- This commit summary was generated @2013-05-08T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 06 May '13

06 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove unnecessary cast Alan T. DeKok@2013-05-06T22:35:07Z Files modified: * src/main/auth.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e910f5761a283a441359… ====== Don't mangle strings in place Alan T. DeKok@2013-05-06T22:35:07Z Files modified: * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c903cb6034f052c71d19… ====== Don't mangle strings in place Alan T. DeKok@2013-05-06T22:33:27Z Files modified: * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a0d3c282a13241c5a924… ====== Remove unnecessary cast Alan T. DeKok@2013-05-06T22:31:53Z Files modified: * src/lib/valuepair.c * src/main/auth.c * src/main/valuepair.c * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_unix/rlm_unix.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fe7dc2f2651d1aa389dd… ====== const issues Alan T. DeKok@2013-05-06T22:24:12Z Files modified: * src/modules/rlm_ippool/rlm_ippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8269bc096f35931427b3… ====== Fix compiler warnings Alan T. DeKok@2013-05-06T22:00:47Z Files modified: * src/modules/rlm_counter/rlm_counter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eccf76575c8d75c6142e… ====== Re-organized Alan T. DeKok@2013-05-06T16:45:17Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/495da350777f5efe7557… ====== Remove length limitations on certificate names, etc. Alan T. DeKok@2013-05-06T16:45:17Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4930ab65c457801704b7… ====== Check length, not strlen Alan T. DeKok@2013-05-06T16:45:16Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e694dea0b2a6eed8cd03… ====== Move vp_octets and vp_strvalue to pointer which shrinks the VALUE_PAIR structure, and removes all length limitations on the attributes. The code audit still needs to be finished. Alan T. DeKok@2013-05-06T16:45:16Z Files modified: * src/include/dhcp.h * src/include/libradius.h * src/include/radiusd.h * src/lib/filters.c * src/lib/radius.c * src/lib/valuepair.c * src/main/process.c * src/main/radclient.c * src/main/soh.c * src/main/valuepair.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_vmps/vqp.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eapcommon.c * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/libeap/mppe_keys.c * src/modules/rlm_eap/mem.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_eap/types/rlm_eap_leap/eap_leap.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.h * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_eap2/rlm_eap2.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_logintime/timestr.c * src/modules/rlm_mschap/mschap.c * src/modules/rlm_mschap/mschap.h * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_otp/otp_mppe.c * src/modules/rlm_otp/otp_pw_valid.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_wimax/rlm_wimax.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/71f29ede8a9fa390182d… ====== Advance ptr Arran Cudbard-Bell@2013-05-06T00:28:18Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e8c8c41b911e1a67fd1… ====== Doxygen Arran Cudbard-Bell@2013-05-06T00:15:11Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/07b813bfb02cf973f64d… ====== GCC fix Arran Cudbard-Bell@2013-05-06T00:13:26Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2e41082f47862dbb3cad… ====== Standardise return codes Arran Cudbard-Bell@2013-05-06T00:05:15Z Files modified: * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b8b03189943d90cf74b0… ====== TLS section must appear higher in the config Arran Cudbard-Bell@2013-05-05T23:34:51Z Files modified: * raddb/mods-available/rest Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d1193c5025b3788cf378… ====== -- This commit summary was generated @2013-05-07T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 06 May '13

06 May '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Better checks for decoding base64 If it's not base64, don't do anything Alan T. DeKok@2013-05-06T15:00:10Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae892655f89ca0eda6cc… ====== -- This commit summary was generated @2013-05-07T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

2.2.0 crash at a strange location
by Stefan Winter 06 May '13

06 May '13

Hi, today I did some minor config changes which turned my stable-running 2.2.0 into a crash-every-5-min server :-( The change involved a) switching from Cleartext-Password to SSHA1-Password (retaining the pap module for checking the PW validity) b) a somewhat sophisticated unlang statement to express: if the SSHA1-PW was wrong, retrieve an alternative password from a VSA ("RESTENA-Debug-Password") and set it to be the Cleartext-Password; then try pap again with that This is obviously the implementation of a "backdoor" for our helpdesk if we need to login into a user's account for debugging without knowing his actual password because it's SSHA'ed in the DB. All nice and cute, and it worked while doing "mild" usage with a test account - but now in production things go down the drain with it. I've temporarily switched back to the previous SQL query which had Cleartext-Password. And voilà: the server is stable again. Even with the unlang construct still in place (below for reference). So I strongly suspect things to go wrong *only if* SSHA1-Passwords are used to authenticate the user. Strangely enough, the gdb backtrace shows that it fails somewhere inside glibc while trying to expand a %S in xlat - which appears totally unrelated to the changes I did. The backtrace is below. policy.conf: replacement for authenticate/pap: policy { pap_hash_debugfallback { group { pap { reject = 2 ok = return } if ( "%{control:RESTENA-Debug-Password}" ) { update control { SSHA1-Password !* "nogood" NT-Password !* "nogood" Cleartext-Password := "%{control:RESTENA-Debug-Password}" } ok = 1 ok } pap { reject = 2 ok = return } } } ... } Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x4b015950 (LWP 24837)] 0x00002b380d7d5550 in ?? () from /lib64/libc.so.6 (gdb) bt #0 0x00002b380d7d5550 in ?? () from /lib64/libc.so.6 #1 0x00002b380d7d6c0c in malloc () from /lib64/libc.so.6 #2 0x00002b380d7da8f2 in strdup () from /lib64/libc.so.6 #3 0x00002b380d7ed928 in ?? () from /lib64/libc.so.6 #4 0x00002b380d7ee3f0 in tzset () from /lib64/libc.so.6 #5 0x00002b380d7f2c94 in strftime_l () from /lib64/libc.so.6 #6 0x000000000042277d in radius_xlat (out=0x4b013a30 "[Access-Accept", outlen=1023, fmt=0x667c4e "[%S] [AUTH OK ] '%{User-Name}' (%{RESTENA-Service-Type}:%{client:shortname})", request=0x2aaab0001f60, func=0x2aaaab2e33d0 <linelog_escape_func>) at xlat.c:1348 #7 0x00002aaaab2e31d4 in do_linelog (instance=0x835a60, request=0x2aaab0001f60) at rlm_linelog.c:328 #8 0x000000000041c920 in modcall (component=7, c=<value optimized out>, request=0x2aaab0001f60) at modcall.c:304 #9 0x0000000000419be8 in indexed_modcall (comp=0, idx=0, request=0x2aaab0001f60) at modules.c:740 #10 0x00000000004094fd in rad_postauth (request=0x2aaab0001f60) at auth.c:433 #11 0x0000000000409b83 in rad_authenticate (request=0x2aaab0001f60) at auth.c:831 #12 0x0000000000427538 in radius_handle_request (request=0x2aaab0001f60, fun=0x409540 <rad_authenticate>) at event.c:3784 #13 0x0000000000420728 in request_handler_thread (arg=<value optimized out>) at threads.c:537 #14 0x00002b380c8d8020 in start_thread () from /lib64/libpthread.so.0 #15 0x00002b380d829f8d in clone () from /lib64/libc.so.6 #16 0x0000000000000000 in ?? () (gdb) bt full #0 0x00002b380d7d5550 in ?? () from /lib64/libc.so.6 No symbol table info available. #1 0x00002b380d7d6c0c in malloc () from /lib64/libc.so.6 No symbol table info available. #2 0x00002b380d7da8f2 in strdup () from /lib64/libc.so.6 No symbol table info available. #3 0x00002b380d7ed928 in ?? () from /lib64/libc.so.6 No symbol table info available. #4 0x00002b380d7ee3f0 in tzset () from /lib64/libc.so.6 No symbol table info available. #5 0x00002b380d7f2c94 in strftime_l () from /lib64/libc.so.6 No symbol table info available. #6 0x000000000042277d in radius_xlat (out=0x4b013a30 "[Access-Accept", outlen=1023, fmt=0x667c4e "[%S] [AUTH OK ] '%{User-Name}' (%{RESTENA-Service-Type}:%{client:shortname})", request=0x2aaab0001f60, func=0x2aaaab2e33d0 <linelog_escape_func>) at xlat.c:1348 c = <value optimized out> len = <value optimized out> freespace = <value optimized out> p = 0x667c50 "S] [AUTH OK ] '%{User-Name}' (%{RESTENA-Service-Type}:%{client:shortname})" q = 0x4b013a31 "Access-Accept" tmp = (VALUE_PAIR *) 0x2aaab0001f60 TM = (struct tm *) 0x3 s_TM = {tm_sec = 45, tm_min = 15, tm_hour = 10, tm_mday = 6, tm_mon = 4, tm_year = 113, tm_wday = 1, tm_yday = 125, tm_isdst = 1, tm_gmtoff = 7200, tm_zone = 0x807da0 "CEST"} tmpdt = "\000\020\000\000\000\000\000\000\000\020\000\000\000\000\000\000\b\000\000\000\000\000\000\000\236A�G", '\0' <repeats 11 times> #7 0x00002aaaab2e31d4 in do_linelog (instance=0x835a60, request=0x2aaab0001f60) at rlm_linelog.c:328 ci = <value optimized out> cp = <value optimized out> fd = 56 buffer = "/var/log/radius/activity.log\000+\000\000�*\001K\001\000\000\000�+\001K\000\000\000\000�X\001K\000\000\000\000\000�\213\000\000\000\000\000\005\000\000\000\000\000\000\000�>\000��*\000\000\000\000\000\000\000\000\000\000�>\000��*\000\000\n\000\000\000\000\000\000\000�>\000��*\000\000P>\001K\000\000\000\000�w�\0178+\000\000:=\000\000\000\000\000\000\030", '\0' <repeats 15 times>, "�\025B\000\000\000\000\000\000�\213\000\000\000\000\000�*\001K\000\000\000\000P>\001K\000\000\000\000`\037\000��*\000\000\000\000\002\000\000\000\000\000\220�\213\000\000"... p = <value optimized out> line = "[Access-Accept", '\0' <repeats 434 times>, "Mon May 6 10:15:45 2013\000\000\000\000\000\000\000\000Mon May 6 10:15:45 2013", '\0' <repeats 116 times>, "\024\000\000\000`\001\000\000\000\000\000\0008\001\000\000\000\000\000\000\000\000\000\000\024", '\0' <repeats 35 times>, "\202\230'\f8+\000\000`\003j\000\000\000\000\000 \000\000��*\000\0008\001", '\0' <repeats 14 times>, "\001\000\000\000\000\000\000\000`\037\000��*\000\0000}\203\000\000\000\000\000\fl}\r8+\000\000�\204|", '\0' <repeats 13 times>... value = 0x667c4e "[%S] [AUTH OK ] '%{User-Name}' (%{RESTENA-Service-Type}:%{client:shortname})" gid = <value optimized out> grp = (struct group *) 0x0 endptr = 0x6889fc ")" #8 0x000000000041c920 in modcall (component=7, c=<value optimized out>, request=0x2aaab0001f60) at modcall.c:304 server = <value optimized out> myresult = 1 stack = {pointer = 0, priority = {0, 0, 3, 0, 0, 0, 0, 0, 0, 3, 0, 3, 0 <repeats 20 times>}, result = {7, 7, 2, 0, 0, 0, 0, 0, 0, 2, 2, 2, 2, 0 <repeats 19 times>}, children = {0x8f2910, 0x8f2730, 0x8f2800, 0x0, 0x837410, 0x0 <repeats 27 times>}, start = {0x0, 0x8f2730, 0x8f27a0, 0x0, 0x0, 0x837480, 0x8374f0, 0x8af080, 0x8e3ec0, 0x0 <repeats 23 times>}} parent = (modcallable *) 0x8f2730 child = (modcallable *) 0x8f2800 if_taken = 0 was_if = 0 #9 0x0000000000419be8 in indexed_modcall (comp=0, idx=0, request=0x2aaab0001f60) at modules.c:740 this = <value optimized out> rcode = <value optimized out> list = (modcallable *) 0x8f2910 server = (virtual_server_t *) 0x837330 #10 0x00000000004094fd in rad_postauth (request=0x2aaab0001f60) at auth.c:433 result = <value optimized out> postauth_type = 0 vp = (VALUE_PAIR *) 0x0 #11 0x0000000000409b83 in rad_authenticate (request=0x2aaab0001f60) at auth.c:831 namepair = (VALUE_PAIR *) 0x9a71f0 check_item = (VALUE_PAIR *) 0x0 auth_item = (VALUE_PAIR *) 0x9a8c10 module_msg = <value optimized out> tmp = (VALUE_PAIR *) 0x0 result = -1275060192 autz_retry = <value optimized out> autz_type = <value optimized out> #12 0x0000000000427538 in radius_handle_request (request=0x2aaab0001f60, fun=0x409540 <rad_authenticate>) at event.c:3784 ---Type <return> to continue, or q <return> to quit--- No locals. #13 0x0000000000420728 in request_handler_thread (arg=<value optimized out>) at threads.c:537 fun = (RAD_REQUEST_FUNP) 0x409540 <rad_authenticate> self = (THREAD_HANDLE *) 0x2aaab4001fe0 #14 0x00002b380c8d8020 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #15 0x00002b380d829f8d in clone () from /lib64/libc.so.6 No symbol table info available. #16 0x0000000000000000 in ?? () No symbol table info available. (gdb) -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473

5 12