- Freeradius-Devel - lists.freeradius.org

Things like "tests"
by Alan DeKok 12 Apr '13

12 Apr '13

I'm happy to announce that there are more of the things called "tests" for the server. I've broken out the new condition and xlat parsing into a simple test harness. See src/tests/condition.txt and src/tests/xlat.txt Writing the tests highlighted a few minor bugs in both the conditions and xlat code. Those are now fixed. As always, more testing is appreciated. I think the next step is to integration the parsing into "unlang". The code right now is "awkward", to be polite. This would also allow start-time errors for xlat's. i.e.: if (User-Name == "%{foo: bar}") { would result in an error of "unknown module foo". The parsed conditions also make the "unlang" interpreter simpler and faster. Many more things can be compiled once, and interpreted at run time. The code in 2.x re-parses the strings. Every. Single. Time. I still don't want "unlang" to become a real language. However, having cleaner code, a better parser, and better error messages is all good. Alan DeKok.

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 11 Apr '13

11 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Note recent changes Alan T. DeKok@2013-04-11T15:56:07Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d8d82adcb86ab62a8ca0… ====== Note that TLS "random_file" isn't required. OpenSSL reads /dev/urandom anyways. Alan T. DeKok@2013-04-11T15:51:48Z Files modified: * raddb/eap.conf * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2e03e736e74a7423de02… ====== dhclient is ISC's thing. Let's rename it Alan T. DeKok@2013-04-11T15:22:42Z Files modified: * src/main/Makefile.in * src/main/dhclient.c * src/main/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd0aeac03811bb7ab541… ====== Fix typo Alan T. DeKok@2013-04-09T21:00:26Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/452661e234d865521372… ====== -- This commit summary was generated @2013-04-12T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 11 Apr '13

11 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Be more pedantic about conditional checks Using a similar approach to the xlat code. Parse the conditions, and complain descriptively on error Alan T. DeKok@2013-04-11T19:41:01Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/910aacbb1a332be4b62b… ====== Move and expose list of allowed attribute names And allow '/' in attribute names. Mainly for WiMAX insanity Alan T. DeKok@2013-04-11T19:19:11Z Files modified: * src/include/libradius.h * src/lib/dict.c * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/91de55aa2fc1c46ce871… ====== Re-arrange if/elsif checking So that we check for it before eating the first '(' character. This is in preparation for allowing pre-compiled conditions. Alan T. DeKok@2013-04-11T17:30:46Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/354e31d28f9396f57363… ====== Note that TLS "random_file" isn't required. OpenSSL reads /dev/urandom anyways. Alan T. DeKok@2013-04-11T15:49:32Z Files modified: * raddb/mods-available/eap * raddb/sites-available/tls * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/092a8e0f1f72c9f5207c… ====== dhclient is ISC's thing. Let's not use that Alan T. DeKok@2013-04-11T15:25:11Z Files modified: * src/modules/proto_dhcp/all.mk * src/modules/proto_dhcp/dhclient.c * src/modules/proto_dhcp/dhclient.mk * src/modules/proto_dhcp/dhcpclient.c * src/modules/proto_dhcp/dhcpclient.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25c7fd290b058c10e6dc… ====== Use intermediate variables instead of many casts Alan T. DeKok@2013-04-11T04:12:27Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/70d126a58e2ab6b35006… ====== Fix typos Alan T. DeKok@2013-04-11T04:12:26Z Files modified: * src/include/libradius.h * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82ebcbbe4d3a57b51634… ====== Update ldap Arran Cudbard-Bell@2013-04-11T02:34:21Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdad43df059689cd84d4… ====== Update ldap Arran Cudbard-Bell@2013-04-11T02:33:53Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a2e3ca340a18f19d36cc… ====== -- This commit summary was generated @2013-04-12T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 10 Apr '13

10 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== a module may register multiple xlats Arran Cudbard-Bell@2013-04-10T18:52:31Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39be7e8c13e3bb1f1f30… ====== More doxygen Alan T. DeKok@2013-04-10T18:21:03Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59b9cbd2c042578ee057… ====== Moved "print type-specific empty data" into src/lib Alan T. DeKok@2013-04-10T18:18:23Z Files modified: * src/include/libradius.h * src/lib/print.c * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/033299b9e78215d5888d… ====== Fix typo Alan T. DeKok@2013-04-10T17:31:13Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5930d29850cfbda0c5b… ====== Use new radius_list API Instead of decoding the name each time we run exec Alan T. DeKok@2013-04-10T16:43:23Z Files modified: * src/modules/rlm_exec/rlm_exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16fabdc39926cece1647… ====== Debug argv when executing programs Alan T. DeKok@2013-04-10T16:43:22Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/29cef280457c2caf2025… ====== Do substring matching only on user input request:foo matches "request" req doesn't match "request" Alan T. DeKok@2013-04-10T16:43:22Z Files modified: * src/lib/token.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ffc17a0b9b3eee28f07… ====== Add escape function to xlat_register Update the xlat expansion so that expanding a module's RHS calls xlat_process, not xlat_aprint. That allows for ALL of the xlat chain to be printed, not just part of it. Update various modules to use the new xlat_register API Update the modules to *not* call radius_xlat() from their mod_xlat() function. We still need to fix some modules: perl / sql: we can now write to "fmt", so various code needs to be changed perl: strtok() in a thread-safe function is horrible. Use str2argv() instead redis: calls radius_xlat(), in a function which is also called from the main redis query routines. And calls rad_xlat_argv(), which splits the string before xlat'ing it. That's now wrong. Instead, the redis_xlat function should supply an escape function (for spaces) and then rely on str2argv() (or similar) to chop on real spaces, and not on escaped spaces Also fixed a memory leak in the yubikey module Alan T. DeKok@2013-04-10T16:43:22Z Files modified: * src/include/radiusd.h * src/main/listen.c * src/main/mainconfig.c * src/main/realms.c * src/main/xlat.c * src/modules/proto_dhcp/rlm_dhcp.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fdc7c25b0d8d43dfe0bc… ====== Fix typo Arran Cudbard-Bell@2013-04-10T00:55:46Z Files modified: * src/modules/rlm_rest/configure * src/modules/rlm_rest/configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d8111d7eb5c37c004eab… ====== -- This commit summary was generated @2013-04-11T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Re: Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords
by pramod kulkarni 10 Apr '13

10 Apr '13

> > Thanks John for the reply. > can I use EAP-TLS method of authentication with LDAP as backend datastore > to check usernames and passwords. > It would be like I bind to RADIUS server with EAP-TLS method using > certificate and check usernames and passwords from LDAP server > if yes on EAP-TLS can you please tell me how to configure EAP-TLS with > LDAP as backend datastore. > Basically I want to avoid harcoded usernames and passwords in raddb of > RADIUS server for authenticating users which I am doing currently . > ldap { > server = "localhost" > # identity = "cn=admin,o=My Org,c=UA" > identity = "uid=admin,ou=CamUsers,dc=vmbox,dc=int" > password = admin > basedn = "ou=CamUsers,dc=vmbox,dc=int" > filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" > # base_filter = "(objectclass=radiusprofile)" > # set this to 'yes' to use TLS encrypted connections > # to the LDAP database by using the StartTLS extended > # operation. > # The StartTLS operation is supposed to be used with normal > # ldap connections instead of using ldaps (port 689) connections > start_tls = yes > # tls_cacertfile = > C:/FreeRADIUS.net/etc/raddb/certs/FreeRADIUS.net/DemoCerts/cacert.pem > # tls_cacertdir = > C:/FreeRADIUS.net/etc/raddb/certs/FreeRADIUS.net/DemoCerts > # tls_certfile = > C:/FreeRADIUS.net/etc/raddb/certs/FreeRADIUS.net/DemoCerts/admin.pem > # tls_keyfile = > C:/FreeRADIUS.net/etc/raddb/certs/FreeRADIUS.net/DemoCerts/admin.pem > # tls_randfile = /path/to/rnd > tls_require_cert = "allow" > Waiting for your inputs > Thanks and Regards, > Pramod > > >

2 1

Fwd: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords
by pramod kulkarni 09 Apr '13

09 Apr '13

Hi, I am working on RADIUS with LDAP as backend for authenticating users. I configured rlm_ldap on RADIUS server with username and plaintext password and I am able to authenticate RADIUS client using LDAP. But I want to configure RADIUS server with certificates instead of using usernames and passwords. Please guide me how to achieve this,is there any help/doc how to configure LDAP SASL bind for RADIUS Server. Waiting for your inputs. Thanks and Regards, Pramod

2 1

Commit report for master branch
by announce＠freeradius.org 08 Apr '13

08 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use the new xlat parser Which gives MUCH better errors when parsing xlat expressions. Alan T. DeKok@2013-04-08T19:19:43Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/db82edb117eb2270acf4… ====== -- This commit summary was generated @2013-04-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 07 Apr '13

07 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Minor cleanups and formatting Alan T. DeKok@2013-04-07T15:45:30Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1fcf0094aac3ec3b1d39… ====== xlat parsing functions Arran Cudbard-Bell@2013-04-07T02:43:58Z Files modified: * src/include/radiusd.h * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02cdf90400b947e5f837… ====== -- This commit summary was generated @2013-04-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 06 Apr '13

06 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix typos Arran Cudbard-Bell@2013-04-06T06:13:57Z Files modified: * src/main/xlat.c * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/18b319048e791d1b6338… ====== -- This commit summary was generated @2013-04-07T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 04 Apr '13

04 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Start of dynamically allocated xlat expansions Arran Cudbard-Bell@2013-04-04T22:36:21Z Files modified: * src/include/radiusd.h * src/main/auth.c * src/main/evaluate.c * src/main/log.c * src/main/mainconfig.c * src/main/modcall.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/radwho.c * src/main/tls.c * src/main/util.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/545a5ec262aef7381d14… ====== Remove vqp.h, too Alan T. DeKok@2013-04-04T19:45:58Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3eb20f91dcbfa5bf51d9… ====== Don't install vmps.h and dhcp.h for now Alan T. DeKok@2013-04-04T17:56:47Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/daa2ec4703057649806f… ====== Properly deal with unknown attributes Alan T. DeKok@2013-04-04T17:31:36Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12fdc0d145a2d45bcc59… ====== fix check Alan T. DeKok@2013-04-04T17:14:10Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20de202ff7d881f3a11e… ====== Array is of CURLoption, not http stuff Alan T. DeKok@2013-04-04T15:45:48Z Files modified: * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/257bce2d55baec2abf9c… ====== Fix some compiler warnings Alan T. DeKok@2013-04-04T15:42:22Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_firebird/rlm_sql_firebird.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b069b7f68a09442d1a46… ====== Fix compiler warnings Alan T. DeKok@2013-04-04T15:34:20Z Files modified: * src/modules/proto_vmps/vmps.c * src/modules/proto_vmps/vqp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d8783039dcbf293c4243… ====== FIx module return codes Alan T. DeKok@2013-04-04T15:27:44Z Files modified: * src/modules/rlm_securid/rlm_securid.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7810c1da8d229d3c4173… ====== Fixed EAP-IKE to use new API for pairlist. And it never free'd the PAIRLIST structure before. Alan T. DeKok@2013-04-04T15:23:14Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.c * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.h * src/modules/rlm_eap/types/rlm_eap_ikev2/rlm_eap_ikev2.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/81f39eb8e2f409ea893c… ====== More fixes Alan T. DeKok@2013-04-04T15:10:11Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/94d6d7dcf7f3d3121a6b… ====== Added dhcp.c to dhclient. We probably want to make it a library... Alan T. DeKok@2013-04-04T14:58:08Z Files modified: * src/modules/proto_dhcp/dhclient.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fddf6ef9f17573e9ffc5… ====== Missed in earlier commit Alan T. DeKok@2013-04-04T04:23:16Z Files modified: * src/modules/proto_dhcp/proto_dhcp.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/beb391df07063be0c297… ====== Move the rest of VQP into proto_vmps Alan T. DeKok@2013-04-04T04:18:24Z Files modified: * src/include/vqp.h * src/lib/all.mk * src/lib/vqp.c * src/main/listen.c * src/modules/proto_vmps/all.mk * src/modules/proto_vmps/vmps.c * src/modules/proto_vmps/vqp.c * src/modules/proto_vmps/vqp.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf72e29699f465293406… ====== Move the rest of the DHCP code to it's own directory Alan T. DeKok@2013-04-04T04:15:03Z Files modified: * src/lib/all.mk * src/lib/dhcp.c * src/main/all.mk * src/main/dhclient.c * src/main/dhclient.mk * src/modules/proto_dhcp/all.mk * src/modules/proto_dhcp/dhclient.c * src/modules/proto_dhcp/dhclient.mk * src/modules/proto_dhcp/dhcp.c * src/modules/proto_dhcp/rlm_dhcp.c * src/modules/proto_dhcp/rlm_dhcp.mk * src/modules/rlm_dhcp/all.mk * src/modules/rlm_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f538ada18704b2c0ae08… ====== Server stuff is dhcpd.c, not dhcp.c Alan T. DeKok@2013-04-04T03:58:13Z Files modified: * src/modules/proto_dhcp/all.mk * src/modules/proto_dhcp/dhcp.c * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6b6d941e99fe7403206… ====== Move DHCP to its own plugin module Alan T. DeKok@2013-04-04T03:57:26Z Files modified: * src/main/dhcpd.c * src/main/listen.c * src/modules/proto_dhcp/all.mk * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/623b5c0309f7859f3c48… ====== Remove vmps.c it should never have been in here Alan T. DeKok@2013-04-04T03:46:34Z Files modified: * src/main/radiusd.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4e68ecb6e87eadee9fec… ====== Move VMPS into a plug-in library A bit of a hack for now, but we're on the way to moving all of the protocols into plug-in libraries. It should make the server core a lot simpler. And easier to add new protocols. Alan T. DeKok@2013-04-04T03:04:18Z Files modified: * src/include/protocol.h * src/include/vmps.h * src/main/command.c * src/main/listen.c * src/main/vmps.c * src/modules/all.mk * src/modules/proto_vmps/all.mk * src/modules/proto_vmps/vmps.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/54afe60f7523a18ed332… ====== No longer need module_struct != module_name Alan T. DeKok@2013-04-04T01:08:20Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f69022847eb74d02ff21… ====== Clean up listener code After years of ifdef-hell. Move the names && type-specific structure sizes into a common structure. This is in preparation (once more) for plug-in protocols Alan T. DeKok@2013-04-04T00:55:17Z Files modified: * src/include/protocol.h * src/main/detail.c * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3225ef48c449eb868d20… ====== Use talloc, not malloc Alan T. DeKok@2013-04-04T00:51:00Z Files modified: * src/main/detail.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32722044a226c24bfa26… ====== -- This commit summary was generated @2013-04-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0