- Freeradius-Devel - lists.freeradius.org

Commit report for v2.x.x branch
by announce＠freeradius.org 17 Feb '13

17 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix bug in unused addport functionality Alan T. DeKok@2013-02-17T23:45:06Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d5f31e6558df27181ee… ====== No socket filename is a startup error Alan T. DeKok@2013-02-17T23:43:05Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f51ba12267c97bd14bb7… ====== uint for array checks Alan T. DeKok@2013-02-17T23:33:36Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c244d587654f4170d905… ====== Check for NULL string Alan T. DeKok@2013-02-17T23:32:07Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/76c530631573bbbe8bbc… ====== Check for more NULL Alan T. DeKok@2013-02-17T23:31:08Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d4fa062d3dffc29bf33… ====== Ensure pointer is initialized Alan T. DeKok@2013-02-17T23:29:03Z Files modified: * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a3b4abe5361d364d4e8… ====== Don't check for array existence Alan T. DeKok@2013-02-17T23:25:24Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d4940d7889a8ca94c55a… ====== Fix typo Alan T. DeKok@2013-02-17T19:36:44Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/981d6de2c2ae011f86f8… ====== Fix race condition in conf file Closes Coverity #720457 Alan T. DeKok@2013-02-17T19:32:36Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47317e77d90e6ec634e1… ====== Check fro =~ and !~ Alan T. DeKok@2013-02-17T19:27:16Z Files modified: * src/modules/rlm_expr/paircmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/31018af86c6b025eabe5… ====== Clear memory using correct size Closes Coverity #720439, 40, 41 Alan T. DeKok@2013-02-17T17:58:42Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7fe059b7dcf118bb4351… ====== Don't expand variables if cs==NULL Closes Coverity #720373 Alan T. DeKok@2013-02-17T17:58:39Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4e809da76ef5da88630b… ====== value may be NULL If the admin misconfigures things, oh well Alan T. DeKok@2013-02-17T17:11:30Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82f82ddcef02a7874303… ====== add missing break Alan T. DeKok@2013-02-17T03:39:06Z Files modified: * src/modules/rlm_dbm/rlm_dbm_parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9dedef2aa8f58b43d4f5… ====== Check size of buffer for raw attributes Alan T. DeKok@2013-02-17T03:24:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e847dfc57c0b85f52555… ====== -- This commit summary was generated @2013-02-18T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Removing attribute/vendor/type from valuepairs
by Arran Cudbard-Bell 17 Feb '13

17 Feb '13

Hi All, A number of commits have been pushed to master branch to remove the attribute, vendor, type and flags fields from the VLAUE_PAIR struct. When VALUE_PAIRs are created, the attribute number and vendor are resolved to a DICT_ATTR, the DICT_ATTR is then used as the source of type information for the VALUE_PAIR. For attributes not found in the FreeRADIUS dictionary, instances of DICT_ATTR are dynamically allocated, then freed when the VALUE_PAIR is freed. Alan has also rewritten the RADIUS protocol decoder to better support nested attributes, which should be fully supported before 3.0 is released. Next week work will begin on integrating talloc. talloc is a hierachical memory allocator which can dramatically simplify memory management for trees of dynamically allocated objects. This is in preparation for adding request chaining* and nested TLVs. As talloc is small (3K LoC) we plan to bundle it with the server, and integrate it into the new build system in a similar way to jlibtool. As always testing is appreciated. -Arran * Initially this will be for proxying between multiple virtual servers internally, but will make it easier to implement request trees, where a single incoming request spawns multiple child requests.

3 3

Commit report for master branch
by announce＠freeradius.org 16 Feb '13

16 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove jradius dictionary file Arran Cudbard-Bell@2013-02-16T23:28:06Z Files modified: * share/dictionary.jradius Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1b63c40f38d37785887… ====== Fixup Doxygen comments Arran Cudbard-Bell@2013-02-16T23:26:07Z Files modified: * src/lib/dict.c * src/lib/valuepair.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3144fc769cc287cd5ab… ====== Remove redundant flags and fields from VALUE_PAIR Arran Cudbard-Bell@2013-02-16T23:26:07Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d7282b656fa1d4e80ed… ====== Use DICT_ATTR for attribute number and vendor number Arran Cudbard-Bell@2013-02-16T23:26:07Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2f6b3dd0a5781f6f691… ====== Fixup remaining calls to old xlat functions in evaluate.c and main/valuepair.c Arran Cudbard-Bell@2013-02-16T23:26:07Z Files modified: * src/main/evaluate.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b24e431522646d197ac7… ====== Copy xlat source values when copying attributes Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10cc9d5fee534f63a306… ====== Misc whitespace fixes in libradius.h Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93ae43b11b6036cf9ad7… ====== Remove pairmake_xlat Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/include/libradius.h * src/lib/valuepair.c * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5360c851e0a44607b285… ====== Modify pair read so that it parses values into a more generic structure, and update it to use the new xlat functions Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ab05193697bff4b660e… ====== Fixup rlm_sql to use the new xlat functions Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/68bf990b72c09c868f59… ====== Update pairmake_any to call dict_attrunknown Arran Cudbard-Bell@2013-02-16T23:25:48Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a3cd4ac6a83d2880313… ====== Rename some arguments to be more consistent in pair compare Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/include/radiusd.h * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfcae5a58019b69783e9… ====== Use da->name in pair compare Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f7d5379bd68e5c536f8… ====== Use da attribute and vendor in paircompare Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59a4271f2a06c4923e7b… ====== Add radius_xlat_do and rename pairxlatmove to radius_xlat_move Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/include/radiusd.h * src/main/valuepair.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d822166298afea19f067… ====== Remove dependency on pairxlatmove in rlm_rest (it never really needed to use it anyway) Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d35d8f7a74880d99097… ====== Fixup dict_valbyattr call in rlm_rediswho Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/373fdba96711cb660e61… ====== Add pairmark_xlat Arran Cudbard-Bell@2013-02-16T23:25:47Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/408ef6b777bf3224b973… ====== White space changes in rlm_sql Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/752f6f986d2d28a016fb… ====== Fixup some function documentation in main/valuepair.c Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2cd5d7fe642642fb3d58… ====== Our implementation of DHCP assumes DHCP-Client-Identifier is always a MAC Address Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * share/dictionary.dhcp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed0802c25638f7c90087… ====== Don't bother checking for truncation in rlm_rest, it doesn't work for xlat expanded values anyway Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff9cf031423116d8bd4a… ====== Use type int for boolean values, apparently json-c no longer defines it. Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98403c70248bba801395… ====== Remove rlm_policy from the red hat spec file Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25a1ca234acf06f24b46… ====== Remove rlm_jradius documentation and dictionaries Arran Cudbard-Bell@2013-02-16T23:25:46Z Files modified: * doc/rlm_jradius * share/dictionary Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/40ca9399fb8f9259e130… ====== -- This commit summary was generated @2013-02-17T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

[mschap] No Cleartext-Password configured. Cannot create LM-Password.
by Grzegorz Cimochowski 16 Feb '13

16 Feb '13

Hi i have big problem whit my freeradius 2.2.0 whit mysql log from freeradius -X FreeRADIUS Version 2.2.0, for host i386-portbld-freebsd9.0, built on Dec 18 2012 at 15:56:50 Copyright (C) 1999-2012 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /usr/local/etc/raddb/radiusd.conf including configuration file /usr/local/etc/raddb/clients.conf including files in directory /usr/local/etc/raddb/modules/ including configuration file /usr/local/etc/raddb/modules/wimax including configuration file /usr/local/etc/raddb/modules/always including configuration file /usr/local/etc/raddb/modules/attr_filter including configuration file /usr/local/etc/raddb/modules/attr_rewrite including configuration file /usr/local/etc/raddb/modules/cache including configuration file /usr/local/etc/raddb/modules/chap including configuration file /usr/local/etc/raddb/modules/checkval including configuration file /usr/local/etc/raddb/modules/counter including configuration file /usr/local/etc/raddb/modules/cui including configuration file /usr/local/etc/raddb/modules/detail including configuration file /usr/local/etc/raddb/modules/detail.example.com including configuration file /usr/local/etc/raddb/modules/detail.log including configuration file /usr/local/etc/raddb/modules/dhcp_sqlippool including configuration file /usr/local/etc/raddb/sql/mysql/ippool-dhcp.conf including configuration file /usr/local/etc/raddb/modules/digest including configuration file /usr/local/etc/raddb/modules/dynamic_clients including configuration file /usr/local/etc/raddb/modules/echo including configuration file /usr/local/etc/raddb/modules/etc_group including configuration file /usr/local/etc/raddb/modules/exec including configuration file /usr/local/etc/raddb/modules/expiration including configuration file /usr/local/etc/raddb/modules/expr including configuration file /usr/local/etc/raddb/modules/files including configuration file /usr/local/etc/raddb/modules/inner-eap including configuration file /usr/local/etc/raddb/modules/ippool including configuration file /usr/local/etc/raddb/modules/krb5 including configuration file /usr/local/etc/raddb/modules/ldap including configuration file /usr/local/etc/raddb/modules/linelog including configuration file /usr/local/etc/raddb/modules/otp including configuration file /usr/local/etc/raddb/modules/logintime including configuration file /usr/local/etc/raddb/modules/mac2ip including configuration file /usr/local/etc/raddb/modules/mac2vlan including configuration file /usr/local/etc/raddb/modules/mschap including configuration file /usr/local/etc/raddb/modules/ntlm_auth including configuration file /usr/local/etc/raddb/modules/opendirectory including configuration file /usr/local/etc/raddb/modules/pam including configuration file /usr/local/etc/raddb/modules/pap including configuration file /usr/local/etc/raddb/modules/passwd including configuration file /usr/local/etc/raddb/modules/perl including configuration file /usr/local/etc/raddb/modules/policy including configuration file /usr/local/etc/raddb/modules/preprocess including configuration file /usr/local/etc/raddb/modules/radrelay including configuration file /usr/local/etc/raddb/modules/radutmp including configuration file /usr/local/etc/raddb/modules/realm including configuration file /usr/local/etc/raddb/modules/redis including configuration file /usr/local/etc/raddb/modules/rediswho including configuration file /usr/local/etc/raddb/modules/replicate including configuration file /usr/local/etc/raddb/modules/smbpasswd including configuration file /usr/local/etc/raddb/modules/smsotp including configuration file /usr/local/etc/raddb/modules/soh including configuration file /usr/local/etc/raddb/modules/sql_log including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login including configuration file /usr/local/etc/raddb/modules/sradutmp including configuration file /usr/local/etc/raddb/modules/unix including configuration file /usr/local/etc/raddb/modules/acct_unique including configuration file /usr/local/etc/raddb/eap.conf including configuration file /usr/local/etc/raddb/sql.conf including configuration file /usr/local/etc/raddb/sql/mysql/dialup.conf including configuration file /usr/local/etc/raddb/sql/mysql/counter.conf including configuration file /usr/local/etc/raddb/policy.conf including files in directory /usr/local/etc/raddb/sites-enabled/ including configuration file /usr/local/etc/raddb/sites-enabled/default including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel including configuration file /usr/local/etc/raddb/sites-enabled/control-socket main { user = "freeradius" group = "freeradius" allow_core_dumps = no } including dictionary file /usr/local/etc/raddb/dictionary main { name = "radiusd" prefix = "/usr/local" localstatedir = "/var" sbindir = "/usr/local/sbin" logdir = "/var/log" run_dir = "/var/run/radiusd" libdir = "/usr/local/lib/freeradius-2.2.0" radacctdir = "/var/log/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating module "exec" from file /usr/local/etc/raddb/modules/exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating module "expr" from file /usr/local/etc/raddb/modules/expr Module: Linked to module rlm_expiration Module: Instantiating module "expiration" from file /usr/local/etc/raddb/modules/expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating module "logintime" from file /usr/local/etc/raddb/modules/logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server { # from file /usr/local/etc/raddb/radiusd.conf modules { Module: Creating Auth-Type = digest Module: Creating Post-Auth-Type = REJECT Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_mschap Module: Instantiating module "mschap" from file /usr/local/etc/raddb/modules/mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no allow_retry = yes } Module: Linked to module rlm_digest Module: Instantiating module "digest" from file /usr/local/etc/raddb/modules/digest Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating module "preprocess" from file /usr/local/etc/raddb/modules/preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } reading pairlist file /usr/local/etc/raddb/huntgroups reading pairlist file /usr/local/etc/raddb/hints Module: Linked to module rlm_chap Module: Instantiating module "chap" from file /usr/local/etc/raddb/modules/chap Module: Linked to module rlm_realm Module: Instantiating module "suffix" from file /usr/local/etc/raddb/modules/realm realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_eap Module: Instantiating module "eap" from file /usr/local/etc/raddb/eap.conf eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 4096 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 CA_path = "/usr/local/etc/raddb/certs" pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" CA_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/usr/local/etc/raddb/certs/dh" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" ecdh_curve = "prime256v1" cache { enable = no lifetime = 24 max_entries = 255 } verify { } ocsp { enable = no override_cert_url = yes url = "http://127.0.0.1/ocsp/" use_nonce = yes timeout = 0 softfail = no } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no send_error = no } Module: Linked to module rlm_sql Module: Instantiating module "sql" from file /usr/local/etc/raddb/sql.conf sql { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "root" password = "diablo" radius_db = "radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/sqltrace.sql" readclients = yes deletestalesessions = yes num_sql_socks = 5 lifetime = 0 max_queries = 0 sql_user_name = "%{User-Name}" default_user_profile = "" nas_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' AND status = '1' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" accounting_onoff_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = unix_timestamp('%S') - unix_timestamp(acctstarttime), acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = %{%{Acct-Delay-Time}:-0} WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= '%S'" accounting_update_query = " UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_update_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctsessiontime, acctauthentic, connectinfo_start, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, servicetype, framedprotocol, framedipaddress, acctstartdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_start_query = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{%{Acct-Delay-Time}:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_start_query_alt = " UPDATE radacct SET acctstarttime = '%S', acctstartdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_start = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_stop_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_stop_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{%{Acct-Delay-Time}:-0}')" group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" connect_failure_retry_delay = 60 simul_count_query = "" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): Processing generate_sql_clients rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server FROM nas rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Read entry nasname=192.168.30.1,shortname=batorego,secret=test rlm_sql (sql): Adding client 192.168.30.1 (batorego, server=<none>) to clients list rlm_sql (sql): Released sql socket id: 4 Module: Linked to module rlm_pap Module: Instantiating module "pap" from file /usr/local/etc/raddb/modules/pap pap { encryption_scheme = "auto" auto_header = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating module "acct_unique" from file /usr/local/etc/raddb/modules/acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, NAS-Identifier, NAS-Port" } Module: Linked to module rlm_files Module: Instantiating module "files" from file /usr/local/etc/raddb/modules/files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } reading pairlist file /usr/local/etc/raddb/users reading pairlist file /usr/local/etc/raddb/acct_users reading pairlist file /usr/local/etc/raddb/preproxy_users Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating module "detail" from file /usr/local/etc/raddb/modules/detail detail { detailfile = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating module "radutmp" from file /usr/local/etc/raddb/modules/radutmp radutmp { filename = "/var/log/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_sql_log Module: Instantiating module "sql_log" from file /usr/local/etc/raddb/modules/sql_log sql_log { path = "/var/log/radacct/sql-relay" Post-Auth = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', '%S');" sql_user_name = "%{%{User-Name}:-DEFAULT}" utf8 = no safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } Module: Linked to module rlm_attr_filter Module: Instantiating module "attr_filter.access_reject" from file /usr/local/etc/raddb/modules/attr_filter attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" relaxed = no } reading pairlist file /usr/local/etc/raddb/attrs.access_reject } # modules } # server server inner-tunnel { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_unix Module: Instantiating module "unix" from file /usr/local/etc/raddb/modules/unix unix { radwtmp = "/var/log/radwtmp" } Module: Checking authorize {...} for more modules to load Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "control" listen { socket = "/var/run/radiusd/radiusd.sock" } } listen { type = "auth" ipaddr = 127.0.0.1 port = 18120 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 192.168.30.25 port 56465, id=93, length=192 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 52088 NAS-Port-Type = Ethernet User-Name = "makowska_t" Calling-Station-Id = "00:02:72:72:AC:26" Called-Station-Id = "osiedle" NAS-Port-Id = "anteny2.4" MS-CHAP-Challenge = 0xb141e7a2b9fa3b6ce38853fca0b840ab MS-CHAP2-Response = 0x0100fd95e527bf09943e54f4835baa4684ae0000000000000000e19fa7e004fd1ff998159565eacaeb94f1b53d4e89db66e1 NAS-Identifier = "OSIEDLE" NAS-IP-Address = 192.168.30.25 # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' ++[mschap] returns ok [suffix] No '@' in User-Name = "makowska_t", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [sql] expand: %{User-Name} -> makowska_t [sql] sql_set_user escaped user --> 'makowska_t' rlm_sql (sql): Reserving sql socket id: 3 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' AND status = '1' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'makowska_t' AND status = '1' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'makowska_t' ORDER BY priority rlm_sql (sql): Released sql socket id: 3 [sql] User makowska_t not found ++[sql] returns notfound [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = MSCHAP # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group MS-CHAP {...} [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Creating challenge hash with username: makowska_t [mschap] Client is using MS-CHAPv2 for makowska_t, we need NT-Password [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. [mschap] FAILED: MS-CHAP2-Response is incorrect ++[mschap] returns reject Failed to authenticate the user. Using Post-Auth-Type REJECT # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group REJECT {...} [sql] expand: %{User-Name} -> makowska_t [sql] sql_set_user escaped user --> 'makowska_t' [sql] expand: %{User-Password} -> [sql] ... expanding second conditional [sql] expand: %{Chap-Password} -> [sql] expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'makowska_t', '', 'Access-Reject', '2013-01-31 14:34:41') rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'makowska_t', '', 'Access-Reject', '2013-01-31 14:34:41') rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 ++[sql] returns ok [attr_filter.access_reject] expand: %{User-Name} -> makowska_t attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request When a combination of coding mschapv1 everything works ok all options in :/sites-enabled (defoult and inner-tunnel) whot 'sql' enabled.

4 7

Commit report for master branch
by announce＠freeradius.org 15 Feb '13

15 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix segv in rlm_otp Arran Cudbard-Bell@2013-02-15T23:53:17Z Files modified: * src/modules/rlm_otp/otp_pwe.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1e273aebe1ccfc32087… ====== Cast challenge string as unsigned Arran Cudbard-Bell@2013-02-15T23:43:26Z Files modified: * src/modules/rlm_otp/otp_radstate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98597849f3ab00c0ffa9… ====== Disable EAP caching. Doesn't seem to work Alan T. DeKok@2013-02-15T23:22:44Z Files modified: * raddb/policy.d/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/875aa768ae457dbc540c… ====== mypriority can be -1, too Alan T. DeKok@2013-02-15T23:21:47Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4addc8a0b7bf30ba57df… ====== Merge pull request #190 from candlerb/candlerb/redis_fixes_master Broken rlm_redis in master branch Arran Cudbard-Bell@2013-02-15T06:27:21Z Files modified: * raddb/mods-available/rediswho * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3ea978c9efb4e616b6f6… ====== Remove unnecessary variable Brian Candler@2013-02-14T17:31:34Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/feefac8eb4000b17e042… ====== rlm_rediswho: allow insert/trim/expire to be configured independently For example you might want to do SET and EXPIRE on a start record, and just EXPIRE on interim and stop. Brian Candler@2013-02-14T17:31:34Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf32337cfa6da5f1c50c… ====== rlm_rediswho: return RLM_MODULE_FAIL on failure (including failed Expire) Brian Candler@2013-02-14T17:31:34Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d2a4302e7049e4e5eb2… ====== rlm_rediswho: fix trim functionality (note: query result is not available after redis_finish_query has been called) Brian Candler@2013-02-14T17:31:34Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddd1e9e278d36b2e4fa4… ====== rlm_rediswho: fix unlang conditional expansion Brian Candler@2013-02-14T17:31:34Z Files modified: * raddb/mods-available/rediswho Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d620998d0968c2311721… ====== rlm_redis: fix segfaults on connect Brian Candler@2013-02-14T17:02:53Z Files modified: * src/modules/rlm_redis/rlm_redis.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ffeac33b4f21e45fb53… ====== -- This commit summary was generated @2013-02-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 15 Feb '13

15 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== EAP-Key-Name is octets, not printable text Alan T. DeKok@2013-02-15T14:37:12Z Files modified: * share/dictionary.rfc4072 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4f8267c56e25f2137fc… ====== Don't use radius_paircreate in a library Alan T. DeKok@2013-02-15T14:37:11Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_tls.h * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2667ed4ebdb70468ba4b… ====== Merge pull request #191 from candlerb/candlerb/redis_fixes_v2.x.x Bug fixes for rlm_redis v2.x.x Arran Cudbard-Bell@2013-02-15T06:25:12Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a720357d344b4f7c42c… ====== rlm_rediswho: fix trim functionality (query result is not available after redis_finish_query has been called) Brian Candler@2013-02-14T13:24:32Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7ce0b04f05259dc18ee… ====== rlm_rediswho: initialize rcode for Accounting-On and Accounting-Off requests Brian Candler@2013-02-14T13:24:06Z Files modified: * src/modules/rlm_rediswho/rlm_rediswho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/91b7831d83ee71e18cb8… ====== -- This commit summary was generated @2013-02-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

exec examples
by Brian Candler 15 Feb '13

15 Feb '13

Minor issue: [raddb/modules/exec] exec { wait = no input_pairs = request shell_escape = yes output = none } However it looks like "output = none" is spurious since rlm_exec doesn't accept an "output" parameter. I think it should be "output_pairs = none" ? (Aside: if I set garbage like "zoutput = none" it's happy with that too) Regards, Brian.

2 2

Commit report for master branch
by announce＠freeradius.org 14 Feb '13

14 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update autoconf json-c stuff Arran Cudbard-Bell@2013-02-14T20:30:59Z Files modified: * src/modules/rlm_rest/configure * src/modules/rlm_rest/configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b4e1e82c04620b034ef… ====== -- This commit summary was generated @2013-02-15T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 14 Feb '13

14 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update the example to show EAP-Key-Name Alan T. DeKok@2013-02-14T17:56:34Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/74b4dbb13a53ea3935fe… ====== Added preliminary support for EAP-Key-Name We use EAP-Session-Id internally, as not everyone wants to send EAP-Key-Name in a packet. The eaptls_gen_eap_key() function generates the EAP-Session-Id. The eaptls_success() function calls the "gen key" function on success. This means that the key is available on all TLS-based EAP methods If someone wants to send EAP-Key-Name, they should use unlang to make EAP-Session-Id to EAP-Key-Name Alan T. DeKok@2013-02-14T17:53:11Z Files modified: * share/dictionary.freeradius.internal * src/include/radius.h * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_tls.h * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/36932d8d56c408ced51e… ====== -- This commit summary was generated @2013-02-15T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

segfault in current master
by Brian Candler 14 Feb '13

14 Feb '13

Just tried to build current master branch under OSX: ./configure -with-redis-include-dir=/usr/local/include/hiredis --enable-boilermake --prefix=/Users/brian/Build/freeradius-master && make && make install (Note: This is from a git checkout where I had switched branches, but I have done a "make distclean" first) Then I symlinked ../mods-available/redis and rediswho into mods-enabled/. That's the only config change I made. Started it with sbin/radiusd -X (as unpriviledged user), send a radclient packet like this: echo -e "User-Name = brian\nFramed-IP-Address = 1.2.3.4\nAcct-Status-Type = Start\n" | bin/radclient localhost acct testing123 and this is what happened: rad_recv: Accounting-Request packet from host 127.0.0.1 port 54630, id=248, length=39 User-Name = "brian" Framed-IP-Address = 1.2.3.4 Acct-Status-Type = Start (0) # Executing section preacct from file /Users/brian/Build/freeradius-master/etc/raddb/sites-enabled/default (0) group preacct { (0) - entering group preacct {...} (0) [preprocess] = ok (0) policy acct_unique { (0) - entering policy acct_unique {...} (0) ? if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) (0) expand: '%{string:Class}' -> '' Segmentation fault: 11 Oops. But annoyingly, running it again under gdb it was fine: gdb sbin/radiusd run -X ... rad_recv: Accounting-Request packet from host 127.0.0.1 port 62354, id=3, length=39 User-Name = "brian" Framed-IP-Address = 1.2.3.4 Acct-Status-Type = Start (0) # Executing section preacct from file /Users/brian/Build/freeradius-master/etc/raddb/sites-enabled/default (0) group preacct { (0) - entering group preacct {...} (0) [preprocess] = ok (0) policy acct_unique { (0) - entering policy acct_unique {...} (0) ? if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) (0) expand: '%{string:Class}' -> '' (0) ? Evaluating ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) -> FALSE (0) ? if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) -> FALSE (0) else else { (0) - entering else else {...} (0) update request { (0) expand: '%{User-Name}%{Acct-Session-ID}%{NAS-IP-Address}%{NAS-Identifier}%{NAS-Port-ID}%{NAS-Port}' -> 'brian127.0.0.1' (0) expand: '%{md5:%{User-Name}%{Acct-Session-ID}%{NAS-IP-Address}%{NAS-Identifier}%{NAS-Port-ID}%{NAS-Port}}' -> '434d399a6c4094ac3ee91533331275e8' (0) } # update request = ok (0) - else else returns ok (0) - policy acct_unique returns ok (0) suffix : No '@' in User-Name = "brian", looking up realm NULL (0) suffix : No such realm "NULL" (0) [suffix] = noop (0) [files] = noop (0) # Executing section accounting from file /Users/brian/Build/freeradius-master/etc/raddb/sites-enabled/default (0) group accounting { (0) - entering group accounting {...} (0) detail : expand: '%{Packet-Src-IP-Address}' -> '127.0.0.1' (0) detail : expand: '/Users/brian/Build/freeradius-master/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d' -> '/Users/brian/Build/freeradius-master/var/log/radius/radacct/127.0.0.1/detail-20130214' (0) detail : /Users/brian/Build/freeradius-master/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /Users/brian/Build/freeradius-master/var/log/radius/radacct/127.0.0.1/detail-20130214 (0) detail : expand: '%t' -> 'Thu Feb 14 14:58:07 2013' (0) [detail] = ok (0) [unix] = noop (0) [exec] = noop (0) attr_filter.accounting_response : expand: '%{User-Name}' -> 'brian' (0) attr_filter.accounting_response : Matched entry DEFAULT at line 12 (0) [attr_filter.accounting_response] = updated Sending Accounting-Response of id 3 from 0.0.0.0 port 1813 to 127.0.0.1 port 62354 (0) Finished request 0. Waking up in 0.3 seconds. (0) Cleaning up request packet ID 3 with timestamp +41 Ready to process requests. Running again without gdb, it still crashes. So next thing is to try to get a core dump: (configure: allow_core_dumps = yes in radiusd.conf) (check /cores directory is writeable) ulimit -c unlimited sbin/radiusd -X Crashes but no dump :-( Suspiciously, the message "Core dumps are enabled." does not appear on the console output. I'll keep poking around, but if someone knows why the core dumps aren't being created, that would save me some time. Cheers, Brian.

3 6