- Freeradius-Devel - lists.freeradius.org

freeradius-client cross compile fail
by Bertrand Jacquin 28 Jun '11

28 Jun '11

Hi there, radiusclient-ng configure failed when cross compiling as no fallback method to handling this : checking for stricmp... no checking for random... yes checking for rand... yes checking for snprintf... yes checking for vsnprintf... yes checking for field domainname in struct utsname... configure: error: in `/usr/i586-geode-linux-gnu/tmp/portage/net-dialup/freeradius-client-1.1.6/work/freeradius-client-1.1.6': configure: error: cannot run test program while cross compiling See `config.log' for more details Here is a patch to let user define utsname status by defining ac_cv_struct_utsname There is another fix for /dev/urandom that is tested on build host. But this file can don't exist on target host. So let user define ac_cv_file__dev_urandom -- Beber On Lady Voodoo

1 1

git 2.1.x /src/lib/radius.c first line mis tyop
by ziyen 27 Jun '11

27 Jun '11

Hi git 2.1.x /src/lib/radius.c first line ">" included Thanks.

2 1

[PATCH] rlm_mschap: silence gcc buffer overflow detection mechanism
by Petr Uzel 27 Jun '11

27 Jun '11

Signed-off-by: Petr Uzel <petr.uzel(a)suse.cz> --- src/modules/rlm_mschap/rlm_mschap.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/modules/rlm_mschap/rlm_mschap.c b/src/modules/rlm_mschap/rlm_mschap.c index ab9c4b1..da50daa 100644 --- a/src/modules/rlm_mschap/rlm_mschap.c +++ b/src/modules/rlm_mschap/rlm_mschap.c @@ -1780,10 +1780,10 @@ static int mschap_authenticate(void * instance, REQUEST *request) inst->allow_retry); if (inst->retry_msg) { - snprintf(buffer + 9, sizeof(buffer), " C="); + snprintf(buffer + 9, sizeof(buffer) - 9, " C="); for (i = 0; i < 16; i++) { snprintf(buffer + 12 + i*2, - sizeof(buffer), "%02x", + sizeof(buffer) - 12 - i*2, "%02x", fr_rand() & 0xff); } snprintf(buffer + 12 + 32, sizeof(buffer) - 45, -- 1.7.3.4 Petr -- Petr Uzel IRC: ptr_uzl @ freenode

2 1

Failed creating handler
by Cornel Cruceru 27 Jun '11

27 Jun '11

Hi, I'm running FreeRADIUS 2.1.11 on Gentoo compiled with specific patches (qafixes, versionless, pkglibdir) and a small patch of my own (byminute, adds an extra var in xlat.c, nothing big). I'm experiencing a weird crash of which I've found absolutely nothing online: "Failed creating handler". Source code says this one comes from src/main/event.c when calling fr_event_insert() but I can't figure out anything else. The server does decoupled accounting, one site has only one module in accounting, rlm_detail and the other listens on the detail logs with only one module in accounting, rlm_python. cleanup_delay is 5, max_requests 10240, 16 threads, max_requests_per_server = 1500 Any idea what could be the problem? tx, amne

4 3

Build system / win32
by Phil Mayers 26 Jun '11

26 Jun '11

So... There was some discussion last week on the JANET-ROAMING list which culminated in several people expressing a desire for a native windows version of FreeRADIUS. I spent a bit of time this weekend with the mingw32 cross-compiler and pthread/openssl cross-compiled libraries, and it does look like this might be possible. It will have a limit of 63 sockets because of the way select() works on Windows, and it'll need some slight portability tweaks, but the basic concept is sound; I've got a version that will start up and parse the config file... ...unfortunately that's as far as it'll get, because the build has trouble generating the various shared libraries in DLL form, namely libfreeradius-radius and libfreeradius-eap, as well as the rlm_xx. The main reason seems to be the build system; If you have a fully autoconf/automake and libtool-ised source base, the cross-compile seems to work this all out for you, but in the case of FreeRADIUS there seem to be a mix - autoconf is used, but automake isn't and the libtool stuff seems to be hand-crafted to work around the various bugs it's had? Before I spend any more time on this - what's the future of the build system? I'm only passingly familiar with autotools, but if we want to keep it, I'm happy to take a look? If on the other hand the desire is to junk it (and in particular libtool) then there's no point spending any time on it, and I'll try a different approach (possibly a hand-crafted makefile.mingw32) Cheers, Phil

2 3

Review request: rlm_xmlrpc
by Angelo Compagnucci 24 Jun '11

24 Jun '11

Hi list, I wrote a simple module to interface freeradius with a webserver via xmlrpc. This is an excerpt from the readme: "Have you ever wanted to trigger an action real time when the user logs in or logs off in freeradius? This module born to solve this problem in a message passing fashion using the xmlrpc tecnology really common to web application. With this module you can write a custom application that exposes an xmlrpc method as an entry point for radius accounting packets. This way you can trigger an event on your webservice at the same time freeradius processes accounting packets. ..." I think this module could be usefull and I wrote it just for fun and profit! The module is not heavily tested in production, but it is in production from a few days on a low traffic machine, just to test and stress it. I will be really gratefull to anyone who wants to use it or contribute to it, hoping that it will be added to freeradius in a near future! You can find the sources on github: https://github.com/angeloc/rlm_xmlrpc Angelo.

2 2

Number of LDAP/SQL queries in inner-tunnel
by Phil Mayers 23 Jun '11

23 Jun '11

Also in discussions on JANET-ROAMING, it seems people are seeing 3 queries to their LDAP servers in inner-tunnel. I believe this is because, with PEAP/MSCHAP, there are 3 passes through the inner tunnel: * EAP identity -> Access-Challenge with EAP-MSCHAP challenge * EAP-MSCHAP response packet -> Access-Challenge with EAP success * EAP success -> Access-Accept In the outer tunnel the trick: eap { ok = return } ...can be used to stop processing, but that's specific to the PEAP/TTLS EAP types; the EAP module just returns "updated" for EAP-Identity and EAP-Success packets. Should rlm_eap return "ok" (or something) in authorize if the packet is an EAP-Identity, NAK, Success or Failure packets? Or maybe "handled" (although that's riskier, since the user can't opt out of it). This would allow you to do: server inner-tunnel { authorize { eap { ok = return } ldap } } Obviously you need to run SQL/LDAP for inner-eap method "response" packets to read Cleartext-Password / NT-Password in time for the authenticate {} section. Cheers Phil

2 2

rlm_sql_iodbc wrong parameter parsing
by Angelo Compagnucci 13 Jun '11

13 Jun '11

I think I found a bug in module rlm_sql_iodbc. The problem is located in rlm_sql_iodbc driver, in the SQLConnect function. The function's signature requires sql_server as second parameter (config->sql_server), but the sql_db one was provided (config->sql_db). This bug forces to set the configuration parameter "radius_db" to the system DSN only for iodbc module, differing from the ODBC one where the "server" parameter is used. I opened the bug https://bugs.freeradius.org/bugzilla/show_bug.cgi?id=150 in which I attached a patch that solves the problem. Hope this helps. Thank you for your interest.

2 5

freeradius memory leak
by Alexander Clouter 12 Jun '11

12 Jun '11

Hi, I have shitty news and really shitty news. The 'good' news, I know FreeRADIUS (2.1.x branch) has a memory leak. The bad news, I'm running in production FreeRADIUS on ARM boxen so things like valgrind are not an option. All I see is a SIGKILL. Spiel from top :) ---- 4260 freerad 20 0 411m 354m 3708 S 4.3 70.4 31:40.31 freeradius ---- What I do have is a 420MB core file of that above process..any takers :) Ideas welcomed. Cheers -- Alexander Clouter .sigmonster says: For adult education nothing beats children.

2 4

GIT Log for 2011-06-10 23:33 GMT
by aland＠deployingradius.com 10 Jun '11

10 Jun '11

commit ee6ba4d187f9e3ba3dea673a4e184ed6773dfa6b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jun 10 14:52:57 2011 +0200 Make "cadir" and "certdir" globals raddb/modules/eap | 6 ------ raddb/radiusd.conf.in | 2 ++ raddb/sites-available/tls | 12 ------------ 3 files changed, 2 insertions(+), 18 deletions(-)

1 0