- Freeradius-Devel - lists.freeradius.org

detail log type wrong
by ziyen 31 May '11

31 May '11

*Hi * *last git 2.1.x version's are like* Tue May 31 15:43:44 2011 Packet-Type = Access-Accept MS-MPPE-Recv-Key = 0x6a4087da64a2340990e620284bf68f58776bc15df80f15c55a5a4a0fdfe53978 MS-MPPE-Send-Key = 0xd29504a39dc3f9b2e3a259d8d16c0e5e5b209bd3ddd33b41e64e731f8a496e11 EAP-MSK = 0x6a4087da64a2340990e620284bf68f58776bc15df80f15c55a5a4a0fdfe53978d29504a39dc3f9b2e3a259d8d16c0e5e5b209bd3ddd33b41e64e731f8a496e11 EAP-EMSK = 0x75069c36523115dcc2e2b06d195aa41022987cb6d00b52bffa76c9e78ca4e903cda38a6b7ee8a06107fbc8ea4c470a36f6aec55f59bcc431b93c229b2b2355d7 EAP-Message = 0x03220004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "test01" *but today like below..* Tue May 31 14:15:31 2011 Packet-Type = Access-Accept MS-MPPE-Recv-Key = 0x5ae6736835c76d1873265c1e2d1e6ac1013b1a96bd2fcbf03633d5a854a7aaceMS-MPPE-Send-Key = 0x02f78bce4af77a7cc8a78fbbaaad0faad9dfde27167761af539189c789652138EAP-MSK = 0x5ae6736835c76d1873265c1e2d1e6ac1013b1a96bd2fcbf03633d5a854a7aace02f78bce4af77a7cc8a78fbbaaad0faad9dfde27167761af539189c789652138EAP-EMSK = 0x8094d14277078bd19bfb7cc0f1c887128254be8b272685b14b440bb6da5c1f6fb8285b48a60d36c3ccd65557cae1fd8703f9d0685a881c0c59af456e77f08007EAP-Message = 0x03060004Message-Authenticator = 0x00000000000000000000000000000000User-Name = "test01" I think " \n\" are need.. Thakns.

2 1

GIT Log for 2011-05-30 23:33 GMT
by aland＠deployingradius.com 30 May '11

30 May '11

commit 1df682e2e40503c574600df0257f988b21482a0a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon May 30 17:14:18 2011 +0200 Revert most of the "checked_write" code. It apparently caused crashes on some machines. This code reverts (mostly) back to the original code which worked, but it should also notice when the disk is full, and return FAIL src/modules/rlm_detail/rlm_detail.c | 123 +++++++++-------------------------- 1 files changed, 31 insertions(+), 92 deletions(-)

1 0

GIT Log for 2011-05-28 23:33 GMT
by aland＠deployingradius.com 28 May '11

28 May '11

commit 55d659874d1330011e960c96bdf6131606f87561 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat May 28 17:58:09 2011 +0200 Added support for "break" Files changed: man/man5/unlang.5 | 8 +++++- src/main/modcall.c | 58 ++++++++++++++++++++++++++++++++++++++++++++++----- 2 files changed, 58 insertions(+), 8 deletions(-) ====================================================================== commit de60e732c576f7cbceb1a96741abef70059f014c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat May 28 12:48:25 2011 +0200 Make copy of "foreach" variable This lets it be deleted or modified in the loop, without changing the value of the variable being looped over. i.e. the variable being looped over can't be modified. But the underlying attribute can be deleted or free'd, and the server won't crash Files changed: src/main/modcall.c | 37 +++++++++++++++++++++++++++++-------- src/main/xlat.c | 13 +++++++------ 2 files changed, 36 insertions(+), 14 deletions(-) ====================================================================== commit ba18f024b15e40420cde5006e7d3c7540b489983 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat May 28 10:36:11 2011 +0200 Make debug output easier to read. Print group names, value of "foreach" variables, and change punctuation to whitespace (which is easier to read) Files changed: src/main/log.c | 2 +- src/main/modcall.c | 51 ++++++++++++++++++++++++++++++++++++++++----------- 2 files changed, 41 insertions(+), 12 deletions(-) ======================================================================

1 0

GIT Log for 2011-05-27 23:33 GMT
by aland＠deployingradius.com 28 May '11

28 May '11

commit 4053d65e8d9c3b36416d661aef1cdbf5e060c0a8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri May 27 14:49:17 2011 +0200 Document the "locking" configuration item Files changed: raddb/modules/detail | 6 ++++++ 1 files changed, 6 insertions(+), 0 deletions(-) ====================================================================== commit 11aa444213a951eb8f393c66e33385a0bfc2a48d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri May 27 13:08:03 2011 +0200 Fix typo Files changed: src/main/modcall.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit a3221304b5f36c9ff76a1f307524d55133b2d403 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri May 27 12:58:39 2011 +0200 Added "foreach" to unlang There's no "break" yet. Files changed: man/man5/unlang.5 | 26 ++++++++++++++- src/main/modcall.c | 91 ++++++++++++++++++++++++++++++++++++++++++++++++++-- src/main/xlat.c | 45 +++++++++++++++++++++++++ 3 files changed, 158 insertions(+), 4 deletions(-) ====================================================================== commit 2d64950b01c94832080d0b8cd00ff029da83b49d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri May 27 10:47:09 2011 +0200 Make home server coa config match raddb/proxy.conf Files changed: src/main/realms.c | 24 ++++++++++++++++-------- 1 files changed, 16 insertions(+), 8 deletions(-) ======================================================================

2 1

GIT Log for 2011-05-26 23:33 GMT
by aland＠deployingradius.com 26 May '11

26 May '11

commit af5034a66dccdb042a7187917e14770c9595ebf4 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu May 26 13:59:10 2011 +0200 Bump buffer size for regex matches Files changed: src/main/evaluate.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 835fe07a60db9ecd83b5ef521330eb9c110210f3 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu May 26 10:54:25 2011 +0200 Terminate string when using %{Attribute-Name[*]} Files changed: src/main/xlat.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) ======================================================================

1 0

Authenticate against group in AD and MySql DB
by bladan 26 May '11

26 May '11

Hi all. I have a solution where users are able to login to a wireless network with help of FreeRadius and MySql. The users resides in the MySql database. A customer would like to be able to authenticate users in a group in an Active Directory as well. So if a user login FreeRadius will first check if the user is part of the group in Active Directory and if not failover to MySql. If not present in MySql either the user will not be logged in. I'm not very good at FreeRadius because I've inheritated the solution. But as I understand it this should be possible. Could anyone confirm this and maybe also provide some input on how to set it up? The MySql authentication is already working. Thanks! Johan -- View this message in context: http://freeradius.1045715.n5.nabble.com/Authenticate-against-group-in-AD-an… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

1 0

freeradius2.1.10 crash @ request_stats_final
by winson 26 May '11

26 May '11

Hi, I am using freeradius 2.1.10 and it has crashed @ the following line (debug via gdb) of request_stats_final where in the macro is called for #define INC_ACCT(_x) radius_acct_stats._x++;request->listener->stats._x++;if (request->client && request->client->acct) request->client->acct->_x++ #0 0x0041fdc8 in request_stats_final (request=0x1907d10) at stats.c:122 #1 0x0042656c in ev_request_free (prequest=0x7ffa5ae8) at event.c:182 #2 0x00426b74 in wait_a_bit (ctx=<value optimized out>) at event.c:1310 #3 0x0042a594 in no_response_to_proxied_request (ctx=0x1907d10) at event.c:1086 #4 0x2aaf3938 in fr_event_run (el=0x18f2920, when=<value optimized out>) at event.c:220 #5 0x2aaf3c7c in fr_event_loop (el=0x18f2920) at event.c:399 #6 0x0041f7b8 in main (argc=2, argv=0x7ffa5f14) at radiusd.c:410 I have also merged the latest code changes present @ https://github.com/alandekok/freeradius-server/blob/master/src/main/stats.c and added few null checks (attached stats.c). though the crash has reoccurred. Please let me know if there is anything I am missing out as a fix for the crash. Also, Is there any specific reason why the /src/main/event.c file has been moved in the master dir ? Regards, Winson -- View this message in context: http://freeradius.1045715.n5.nabble.com/freeradius2-1-10-crash-request-stat… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

2 3

GIT Log for 2011-05-25 23:33 GMT
by aland＠deployingradius.com 25 May '11

25 May '11

commit b47a1d9b71452b50b5a6743b057cbfeefd82d2ff Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 25 14:56:02 2011 +0200 Fix API for 3.0 Files changed: src/modules/rlm_replicate/rlm_replicate.c | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) ====================================================================== commit cb999fbe9b3ccb64e42d1a92bb8e43f62bb6a9de Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 25 14:42:34 2011 +0200 Handle CHAP-Challenge Files changed: src/modules/rlm_replicate/rlm_replicate.c | 23 ++++++++++++++++++++++- 1 files changed, 22 insertions(+), 1 deletions(-) ====================================================================== commit afb64103d654e95076d889d0f909ad749e351105 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 25 12:31:25 2011 +0200 Use rlm_redis CFLAGS and LDFLAGS This lets the module build Files changed: src/modules/rlm_rediswho/Makefile.in | 4 +- src/modules/rlm_rediswho/configure | 1500 ++++++++++++++++++++++++++++++++- src/modules/rlm_rediswho/configure.in | 114 +++- 3 files changed, 1599 insertions(+), 19 deletions(-) ====================================================================== commit 3ff4bea8dcd52936be0650ed53063b83cfd59cd0 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 25 11:46:06 2011 +0200 Mark "replicate" as stable Files changed: src/modules/stable | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) ====================================================================== commit 23ad656957a4bb8206fc795c9666d58aac3ec516 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 25 11:43:35 2011 +0200 Ensure AF for src IP matches AF for dst IP Files changed: src/main/realms.c | 7 +++++++ 1 files changed, 7 insertions(+), 0 deletions(-) ====================================================================== commit 2bfa67e32442d83d69b7124c49636252ef5e6c05 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 25 11:43:12 2011 +0200 Make it build && work. Apparently infinite loops are bad. Who knew? Files changed: src/modules/rlm_replicate/rlm_replicate.c | 14 +++++++++----- 1 files changed, 9 insertions(+), 5 deletions(-) ====================================================================== commit 59b12ab7ce9eb31e3ee375f482bc3aec9ca98380 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 25 10:52:35 2011 +0200 Make errors more prominent Files changed: src/main/xlat.c | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) ====================================================================== commit f680813db7f264a627ea147bc9d5b47ace062a99 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 25 10:21:41 2011 +0200 Initial version of rlm_replicate Allows replication of packets (send without response), to multiple destinations. Files changed: raddb/modules/replicate | 40 ++++++ src/modules/rlm_replicate/Makefile | 11 ++ src/modules/rlm_replicate/rlm_replicate.c | 191 +++++++++++++++++++++++++++++ 3 files changed, 242 insertions(+), 0 deletions(-) ======================================================================

1 0

Error for mismatched brackets
by Brian Candler 25 May '11

25 May '11

We recently got caught with someone writing ++++? if ("%{request:Assigned-IP-Address)" !~ /./) instead of ++++? if ("%{request:Assigned-IP-Address}" !~ /./) I stared at it for ages but couldn't see the problem, until I put the server into debug mode and picked through it with a fine-toothed comb. Could I suggest these sort of syntactic bugs be bumped up to an ERROR rather than DEBUG, similar to commit 0dbd06ce ? Regards, Brian.

2 3

Dependency detection problem for rlm_rediswho
by Brian Candler 25 May '11

25 May '11

I am trying a ./configure --with-experimental-modules This stage completes successfully, but when I do 'make' it dies because it tries to build rlm_rediswho, even though hiredis.h is missing. ./configure did detect this correctly for rlm_redis, and set targetname to empty in the Makefile: === configuring in ./src/modules/rlm_redis (/u/home/brian/git/freeradius-server/./src/modules/rlm_redis) configure: running /bin/bash ./configure '--prefix=/usr/local' '--with-experimental-modules' '--enable-ltdl-install' --cache-file=/dev/null --srcdir=. checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking for redisConnect in -lhiredis... no configure: WARNING: hiredis libraries not found. Use --with-redis-lib-dir=<path>. checking for hiredis.h... no configure: WARNING: hiredis headers not found. Use --with-redis-include-dir=<path>. configure: WARNING: silently not building rlm_redis. configure: WARNING: FAILURE: rlm_redis requires: libhiredis hiredis.h. configure: creating ./config.status config.status: creating Makefile But it didn't for rlm_rediswho: === configuring in ./src/modules/rlm_rediswho (/u/home/brian/git/freeradius-server/./src/modules/rlm_rediswho) configure: running /bin/bash ./configure '--prefix=/usr/local' '--with-experimental-modules' '--enable-ltdl-install' --cache-file=/dev/null --srcdir=. configure: creating ./config.status config.status: creating Makefile So I think the configure.in in rlm_rediswho needs expanding somehow. Whilst rlm_rediswho doesn't directly use hiredis.h, it does #include <rlm_redis.h> and that file has #include <hiredis/hiredis.h> I'm not sure of the best solution, short of duplicating the configure logic between rlm_redis and rlm_rediswho. For the moment, my workaround is: ./configure --with-experimental-modules --without-rlm_rediswho Regards, Brian. P.S. I notice that src/modules/stable contains "rlm_ns_mta_md5" but there appears to be no such module. Is this folded into rlm_pap now?

2 1