- Freeradius-Devel - lists.freeradius.org

Commit report for v2.x.x branch
by announce＠freeradius.org 04 Feb '13

04 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update to match last commit Alan T. DeKok@2013-02-04T14:50:15Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c8cabe0efabc8adff07… ====== Updated EAP types to match IANA Alan T. DeKok@2013-02-04T14:45:23Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1dd0b5797951a88a26fa… ====== -- This commit summary was generated @2013-02-05T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 04 Feb '13

04 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update to match last commit Alan T. DeKok@2013-02-04T14:50:37Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/65fa6ce48361cdca4280… ====== Updated EAP types to match IANA Alan T. DeKok@2013-02-04T14:46:11Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9648fd84064fff3d14e6… ====== -- This commit summary was generated @2013-02-05T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 03 Feb '13

03 Feb '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Run post-auth on Access-Challenge if there's a Post-Auth-Type Challenge {} section Arran Cudbard-Bell@2013-02-03T02:17:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a67c3bb8401a8ab2fd6… ====== -- This commit summary was generated @2013-02-04T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Changing "radlog" calls to RDEBUG & setting Module-Failure-Message
by Phil Mayers 03 Feb '13

03 Feb '13

I run a small local patch that changes a few irritating calls to radlog into RDEBUG and sets the Module-Failure-Message inside rlm_eap; these are useful for logging per-request failure causes. See here: https://github.com/philmayers/freeradius-server/commit/baab30d0f16dc449c47a… More generally - I personally think that radlog calls are appropriate for whole-server events (e.g. upstream proxy down) but not per-request events (except possibly very, very fatal errors) as a "radius.log" can grow surprisingly large when a client is banging away at you. What do others think?

3 2

freeradius and EAP-TNC
by Avesh Agarwal 01 Feb '13

01 Feb '13

Hello, I am interested in using EAP_TNC feature with Freeradius server. I know that Freeradius code base includes EAP_TNC and TNC server functionality. Specifically, I am interested in making it work by default in Fedora distribution. I have a working setup that uses a patched version of Freeradius and patches are from Trust@FHH group. I have a few questions regarding this: 1. TNC functionality in Freeradius does not seem to be enabled by default currently. I would like to understand what is needed to be done so that it can be enabled by default. I am willing to work on this if I can get some help to understand what is missing. 2. As per my understanding the existing TNC functionality in Freeradius was contributed by Trust@FHH group. I found that Trust@FHH group has some updated patches for this but those are not yet merged with current Freeradius. If someone can tell the reasons behind this, then I can try to coordinate with Trust@FHH group in case any changes are needed in the patches or a totally new approach is required. I have read a thread about it that was sometimes back in 2008 but I have not found anything after that, so does not seem very helpful after so many years. So any effort in taking TNC functionality in Freeradius further to production level would be really appreciated. Thanks Avesh

2 3

Proxies "status-server" pings are broken when virtual server "status" is enabled
by Olivier Beytrison 01 Feb '13

01 Feb '13

Hello, I've enabled the default virtual-server "status" to get some stats out of FR3. Default configuration except for the password off course. Works very well... gives nice info... but later I noticed that the remote proxies received Access-Rejects to their status-server pings. Made some tests and that's what I found. Normal case without the "status" virtual server enabled, I get the following output : rad_recv: Status-Server packet from host 195.176.12.14 port 1814, id=226, length=70 Message-Authenticator = 0x04be96ea125b0c4b93f1c79e3e2bae64 NAS-Identifier = "Status Check 1. Are you alive?" (0) # Executing section post-auth from file /etc/freeradius/sites-enabled/eduroam (0) group post-auth { (0) - entering group post-auth {...} [snip of reply_log junk] (0) [reply_log] = ok (0) ? if (User-Name && "%{realm}" != 'hes-so.ch') (0) ? Evaluating (User-Name ) -> FALSE (0) ? Skipping ("%{realm}" != 'hes-so.ch') (0) ? if (User-Name && "%{realm}" != 'hes-so.ch') -> FALSE Sending Access-Accept of id 226 from 160.98.240.20 port 1812 to 195.176.12.14 port 1814 (0) Finished request 0. Now when the virtual-server "status" is enabled rad_recv: Status-Server packet from host 195.176.12.14 port 1814, id=180, length=70 Message-Authenticator = 0xf2c18ba68bae0de068bf8d9ed96b4c96 NAS-Identifier = "Status Check 0. Are you alive?" (0) WARNING: Unknown value specified for Autz-Type. Cannot perform requested action. (0) # Executing group from file /etc/freeradius/sites-enabled/eduroam (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/sites-enabled/eduroam (0) group REJECT { (0) - entering group REJECT {...} (0) sql : expand: '.query' -> '.query' [snip of sql junk] (0) [sql] = ok (0) Finished request 0. Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed reject Sending Access-Reject of id 180 from 160.98.240.20 port 1812 to 195.176.12.14 port 1814 This comes from the fact that in the status virtual-server, the "Autz-Type status-server" stanza is defined. But in the current virtual server receiving the "ping" (eduroam) it's not defined,so it triggers an reject message. Well in the end it doesn't change much as the remote server will still mark the server alive after receiving 3 access-reject in response to his status-server. But is this behaviour wanted ? Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mobile: +41 (0)78 619 73 53 Mail: olivier(a)heliosnet.org

4 9

Commit report for master branch
by announce＠freeradius.org 30 Jan '13

30 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Hack to make rlm_perl RTLD_GLOBAL Closes #118 Alan T. DeKok@2013-01-30T00:02:05Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e3055dd69670b3263555… ====== -- This commit summary was generated @2013-01-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 30 Jan '13

30 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Ensure that replication doesn't affect request->proxy Alan T. DeKok@2013-01-30T15:30:49Z Files modified: * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b9b1b54a78ff2310f3ce… ====== -- This commit summary was generated @2013-01-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

adds support for custom reply-message for rlm_sqlcounter
by Tux Mason 29 Jan '13

29 Jan '13

Hello, The attached patch enables displaying of the reply-message set within a given sqlcounter definition. Daniel

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 28 Jan '13

28 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Note updates Alan T. DeKok@2013-01-28T19:30:25Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa24b6e2d5c95a0969fa… ====== -- This commit summary was generated @2013-01-29T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0