- Freeradius-Devel - lists.freeradius.org

GIT Log for 2011-04-12 23:33 GMT
by aland＠deployingradius.com 12 Apr '11

12 Apr '11

commit 9209b7c206316116cabe7b9e1e18cf2ed929fdd5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Apr 12 11:03:59 2011 +0200 Fix arguments for 3.0 API Files changed: .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 30d731c60b2e60e4434e9771477b9383b2d5e894 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Apr 10 16:28:27 2011 +0200 Fix arguments to pairmove2 Files changed: .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ======================================================================

1 0

GIT Log for 2011-04-10 23:33 GMT
by aland＠deployingradius.com 10 Apr '11

10 Apr '11

commit a6a1064ae86fb775f1d83077423dee88e16a6eec Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Apr 10 08:02:05 2011 +0200 Don't set "EAP Failure" when sending error message back .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-)

1 0

GIT Log for 2011-04-08 23:33 GMT
by aland＠deployingradius.com 08 Apr '11

08 Apr '11

commit f3e3212b70e81da6f54d979912a17cd82f3dadc8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Apr 8 13:04:25 2011 +0200 The file may be closed when there are no VPs Files changed: src/main/detail.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 899024045aecf72adfbd48c386c1f722e129940f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Apr 8 09:36:49 2011 +0200 Make error sending configurable Files changed: raddb/modules/eap | 17 +++++++++++++++++ .../rlm_eap/types/rlm_eap_mschapv2/eap_mschapv2.h | 2 -- .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 12 ++++++++++-- 3 files changed, 27 insertions(+), 4 deletions(-) ====================================================================== commit 84fe588bf11671f0ef3b01c7ea5b3a1d87edce21 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 7 16:29:20 2011 +0200 Handle failures Files changed: .../types/rlm_eap_mschapv2/rlm_eap_mschapv2.c | 29 +++++++++++++------ 1 files changed, 20 insertions(+), 9 deletions(-) ====================================================================== commit e35f3fce3f0ee84fd9c61b7f39b8f03e33ac6690 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 7 16:18:27 2011 +0200 Add allow_retry and retry_msg functionality Based on a patch from John Hayward. Setting "allow_retry=0" and "retry_msg = hello" seems to help with EAP-MSCHAPv2 and cached passwords... Files changed: raddb/modules/mschap | 7 +++++++ src/modules/rlm_mschap/rlm_mschap.c | 33 +++++++++++++++++++++++++++------ 2 files changed, 34 insertions(+), 6 deletions(-) ====================================================================== commit 3f1d4a562c63bffc89b35b9c0720b04225792925 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 7 16:11:58 2011 +0200 Allow MS-CHAP-Error in Access-Reject Files changed: raddb/attrs.access_reject | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) ====================================================================== commit c2e8b249ecc1bda362cd766292afa37394f971cd Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 7 09:44:26 2011 +0200 Don't over-write a fail code with a success code. Closes bug #152 Files changed: src/main/valuepair.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 36fd25dbd57899eb03ae653d4bffeae9ae55256a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Apr 6 16:06:18 2011 +0200 Fix prototype Files changed: src/include/radiusd.h | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ======================================================================

1 0

Re: multi language support question?
by ziyen 07 Apr '11

07 Apr '11

> > Hi > When i auth request not english username then > "Invalid user: [\261\342\274\372\301\366\277\370/test01]" happen > when "\261\342\274\372\301\366\277\370" is not englist string > is it a method to solve this? > > Thanks. > > >

1 0

GIT Log for 2011-04-05 23:33 GMT
by aland＠deployingradius.com 05 Apr '11

05 Apr '11

commit ee85d5dd440df5f6ebf4d46748f2336a0f977713 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Apr 5 16:56:33 2011 +0200 Add -4 and -6 options These force NAS-IP-Address or NAS-IPv6-Address Files changed: man/man1/radtest.1 | 12 +++++++++++- src/main/radtest.in | 15 ++++++++++++++- 2 files changed, 25 insertions(+), 2 deletions(-) ====================================================================== commit 8147ce1304531e62804d249f7554e15073891acf Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Apr 2 18:17:50 2011 +0200 Revert "Make event timer callback take el pointer" As it turns out, this isn't a good idea. This reverts commit 21d97638c32c7619994ca521e4c4f01e420c9a5b. Files changed: src/include/event.h | 2 +- src/lib/event.c | 2 +- src/main/command.c | 2 +- src/main/event.c | 62 +++++++++++++++++++++++++------------------------- 4 files changed, 34 insertions(+), 34 deletions(-) ====================================================================== commit bb1eebb0f767abc7eb97b6c4db20a6975738938d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Apr 1 10:04:12 2011 +0200 Skip zero-length attributes rather than looping forvever trying to encode them Files changed: src/lib/radius.c | 34 ++++++++++++++++++++++++++-------- 1 files changed, 26 insertions(+), 8 deletions(-) ====================================================================== commit 7cb2317510dddca9cdce8df1deba0a93c5f3b93d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Mar 30 08:37:00 2011 +0200 Accept accounting packets via TCP Files changed: src/main/listen.c | 22 ++++++++++++++++------ 1 files changed, 16 insertions(+), 6 deletions(-) ====================================================================== commit bd6b7163a98cad9da3faaa5c3e5559c79ce1d251 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Mar 30 08:27:54 2011 +0200 Fix build/run errors when not using proxying Files changed: src/modules/rlm_realm/rlm_realm.c | 8 +++++--- 1 files changed, 5 insertions(+), 3 deletions(-) ====================================================================== commit 45ae14194ee3170e31dcad7fd2a1c43642ceaa81 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 29 15:53:01 2011 +0200 Fix handling of "-l stdout" Files changed: src/main/log.c | 8 +------- src/main/radiusd.c | 14 ++++++++------ 2 files changed, 9 insertions(+), 13 deletions(-) ====================================================================== commit 08258a6193ef076139b346efbdd2c34528a9d8f5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 29 12:50:08 2011 +0200 More build fixes Files changed: src/main/modules.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ====================================================================== commit 26e0f27d0552771479655d5d9b479393d4a79e5c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 29 09:46:30 2011 +0200 Build with various compile flags. The WITH/WITHOUT_FOO features allow us to build the server with or without certain features. However, setting the flags to various values *should* allow the server to build. This patch fixes that. Files changed: src/include/radiusd.h | 38 ++++++++++++++++++-------------------- src/main/log.c | 4 ++-- src/main/realms.c | 2 +- 3 files changed, 21 insertions(+), 23 deletions(-) ====================================================================== commit 987d003328a7b005c833e66a719c3e454e2c14cc Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Mar 29 09:08:00 2011 +0200 Fix function prototype Files changed: src/include/radiusd.h | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit b8d635b65de272e5e5dfaa360d7e6ec096eb9413 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Mar 27 21:00:10 2011 +0200 Cap response_window at max_request_time Files changed: src/main/realms.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) ====================================================================== commit e97630f6da3d813a6a1af0d3586b7a4da812b68d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 16:06:40 2011 +0100 Set min/max for max_request_time, cleanup_delay, and reject_delay Files changed: src/main/mainconfig.c | 4 ++++ 1 files changed, 4 insertions(+), 0 deletions(-) ====================================================================== commit 21d97638c32c7619994ca521e4c4f01e420c9a5b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 15:44:57 2011 +0100 Make event timer callback take el pointer It's just too useful to ignore Files changed: src/include/event.h | 2 +- src/lib/event.c | 2 +- src/main/command.c | 2 +- src/main/event.c | 62 +++++++++++++++++++++++++------------------------- 4 files changed, 34 insertions(+), 34 deletions(-) ======================================================================

1 0

eap2 in freeradius
by Chanthearith HUON 04 Apr '11

04 Apr '11

Hi everyone, I am testing eap2 in freeradius. I run "radiusd -X", I got following error message " radiusd: symbol lookup error: /usr/lib/rlm_eap2-2.1.0.so: undefined symbol: eap_server_register_methods " Anyone, have any idea what might be wrong with the configuration? Thank in advance, Thierry

5 10

Server key exchange
by Yan Zhang 30 Mar '11

30 Mar '11

Hello, I have a question about authentication with FreeRadius server need your help. Why no server key exchange in my authentication procedure? If anything need t be configured of server side? I found a configuration item "rsa_key_exchange" in configuration of tls. It seems no function to this issue. Have anybody has the experience of this expect? Thanks very much. Regards Yan

2 3

GIT Log for 2011-03-26 00:33 GMT
by aland＠deployingradius.com 26 Mar '11

26 Mar '11

commit be83cc6f00e9e623df86fd65452e1d520e63a605 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 15:26:53 2011 +0100 Fix for 3.0 API Files changed: src/main/auth.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 92caaa4aa5233fde81c6b13669b2982b025f8255 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 13:53:10 2011 +0100 Correct debug log for internal proxied requests Files changed: src/main/auth.c | 11 ++++++++++- 1 files changed, 10 insertions(+), 1 deletions(-) ====================================================================== commit 3b644ab186218ca9e31d47f24ec33d927737c178 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 10:21:07 2011 +0100 Fix generation of autoheader, and re-build it Files changed: Makefile | 10 ++-------- src/include/autoconf.h.in | 15 +++++++++++++++ 2 files changed, 17 insertions(+), 8 deletions(-) ====================================================================== commit 6d6fa321e8c5457b46ab4e86612811f88423c3b9 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 10:14:57 2011 +0100 Fix typo in last commit Files changed: Makefile | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 47def5e27cfb10e32fb9dea4bb93ed92f7c9d68b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 10:09:33 2011 +0100 Re-build more on reconfig Files changed: Makefile | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) ====================================================================== commit cefb78d4c57b5ac446bbc7936d3e4bdc59de088c Author: John Dennis <jdennis(a)redhat.com> Date: Thu Mar 24 11:59:37 2011 -0400 Fix autogen.sh The script is invoked with -e which causes the script to exit immediately if a subshell command enclosed in parentheses has a non-zero exit status. The command grep "^AC_CONFIG_HEADER" configure.in > /dev/null returns non-zero for many of the subdirs which causes the autogen.sh script to immediately exit. In fact it exits on the very first subdirectory (src/modules/rlm_sql) prematurely aborting the entire operation. Files changed: autogen.sh | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 5b35e0ca9db32ea715b359efc79adb0f3f48274f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Mar 25 11:10:25 2011 +0100 Removed many VP_TRACE macros The new method of printing the hex version of the attributes is much better. Also added a "debug_pair" to the hard-coded Message-Authenticator Files changed: src/lib/radius.c | 9 +-------- 1 files changed, 1 insertions(+), 8 deletions(-) ====================================================================== commit a45678ac7bd24176d89c5275eb3a50fceece42be Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Mar 24 15:25:42 2011 +0100 Fixed "encode TLV" API. We need to track the START vp, and the NEXT vp. Previously, we were tracking the *current* VP and the next one, which didn't work. The issue was that if the TLV encoding recursed twice, it would not back up twice, and instead encode the next level 1 TLV as part of the current one. Also updated the location of "debug_pair", to put it into vp2data_any, which is really where it should go. Files changed: src/lib/radius.c | 25 +++++++++---------------- 1 files changed, 9 insertions(+), 16 deletions(-) ====================================================================== commit 6468fa17314d2f75dd03ec64625bb578e532daf7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Mar 24 14:57:46 2011 +0100 Fix typos. Classifer -> ClassifIer Files changed: share/dictionary.wimax.alvarion | 18 +++++++++--------- 1 files changed, 9 insertions(+), 9 deletions(-) ======================================================================

1 0

GIT Log for 2011-03-25 00:33 GMT
by aland＠deployingradius.com 25 Mar '11

25 Mar '11

commit 3abd9fc1f272959cb36659839d8d8a8b495d8bd4 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Mar 24 14:03:05 2011 +0100 Fix bugs in last commit Encode was off by one byte (oops). Debugging output now is a bit better. Files changed: src/lib/radius.c | 109 ++++++++++++++++++++++++++++++++++++++++-------------- 1 files changed, 81 insertions(+), 28 deletions(-) ====================================================================== commit eb74b50024b92e2d34d1039862dde03c7919ddc9 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Mar 24 12:19:38 2011 +0100 Print out hex version of encoded attributes This makes debugging the encoder much easier Files changed: src/lib/radius.c | 134 ++++++++++++++++++++++++++++++++++++++++++++---------- 1 files changed, 110 insertions(+), 24 deletions(-) ====================================================================== commit 24bcf9587ce5cdc4edb44abeb5d4208df2a48785 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Mar 24 09:11:35 2011 +0100 Print VSAs in a slightly better format Files changed: src/lib/radius.c | 18 ++++++++++++++++-- 1 files changed, 16 insertions(+), 2 deletions(-) ====================================================================== commit 5d2bb283e13d8565986d91d1d9572d9518aaaef0 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Mar 24 09:02:42 2011 +0100 Print hex versions of the packet for debug*4 (-x -x -x -x) Files changed: src/lib/radius.c | 8 ++++++++ 1 files changed, 8 insertions(+), 0 deletions(-) ======================================================================

1 0

dlopen issues in 2.1.10 (was: perl dynamic expansion in unlang?)
by John Dennis 24 Mar '11

24 Mar '11

On 03/18/2011 12:39 PM, Fajar A. Nugraha wrote: > On a side note, in RHEL6's freeradius-perl RPM, rlm_perl is unusable: > Can't load '/usr/lib64/perl5/auto/Data/Dumper/Dumper.so' for module > Data::Dumper: /usr/lib64/perl5/auto/Data/Dumper/Dumper.so: undefined > symbol: Perl_sv_cmp at /usr/lib64/perl5/XSLoader.pm line 70. This was filed as https://bugzilla.redhat.com/show_bug.cgi?id=689045 I finally tracked this down and since it affects other people building 2.1.10 I thought I would pass along the info. Alan please also note there is a git formatted patch attached against the v2.1.x git branch and I think you also need to run autogen.sh again (see below). It turns out the fix is to use lt_dladvise* and Alan checked in a fix for it on 12/9/2009 in commit 7115d751. However that code does not get turned on unless HAVE_LT_DLADVISE_INIT is defined. Alan checked in a fix on 8/6/2010 in commit 323229c2 which added the check for lt_dladvise in configure.in and if found sets HAVE_LT_DLADVISE_INIT opps, but not really the actual symbol which was defined was HAVE_HAVE_LT_DLADVISE_INIT (note the extra HAVE_) This was corrected on 1/7/2011 in commit 03993758. So if you modify HAVE_HAVE_LT_DLADVISE_INIT to be HAVE_LT_DLADVISE_INIT in the 2.1.10 tree, run configure again you should pick up the lt_dladvise fixes right? Wrong. Why? Because src/include/autoconf.h.in which configure rewrites as src/include/autoconf.h does not have the HAVE_LT_DLADVISE_INIT symbol in it. Why? Because autoheader was not rerun after modifying configure.in. According to the git log it appears as if the headers were last updated on 1/29/2009, about two years ago. So the answer is to run autogen.sh right? Sort of, except autogen.sh has a bug in it which causes it to exit prematurely before it's performed 90% of its work (it misses updating *all* the modules although it does update src/include/autoconf.h.in). The fix for this is in the attached 0001-Fix-autogen.sh-the-script-is-invoked-with-e-which-ca.patch. So what do you need to do if you want to enable lt_dladvise in 2.1.10? 1) change HAVE_HAVE_LT_DLADVISE_INIT to HAVE_LT_DLADVISE_INIT 2) patch autogen.sh so it doesn't exit prematurely (not strictly necessary for lt_dladvise, but a good idea, who knows what else was getting missed because of it) 3) run autogen.sh 4) do the configure, make, & install dance Note, steps 1&2 are implemented in attached freeradius-lt-dladvise.patch Alan: I think you need to apply 0001-Fix-autogen.sh-the-script-is-invoked-with-e-which-ca.patch, then run autogen.sh, and then do a git commit. HTH, John -- John Dennis <jdennis(a)redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/

1 0