- Freeradius-Devel - lists.freeradius.org

rlm_jradius wimax support patch
by wlanmac 22 Nov '09

22 Nov '09

Hello, Please find the attached patch (given to us by a contributor) that adds a bit of WiMAX support to the rlm_jradius module. Cheers, David

2 1

GIT Log for 2009-11-19 00:33 GMT
by aland＠deployingradius.com 19 Nov '09

19 Nov '09

commit a809dea0195e11fb924b6651c29aa2546708d83a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Nov 18 18:34:17 2009 +0100 As posted to the list share/dictionary.juniper | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)

1 0

EAP proxing with client-balance
by Alexander Clouter 18 Nov '09

18 Nov '09

Hi, Being part of the 'eduroam' clan we have a lot of EAP traffic proxying about the place, even more so being part of the 'University Triangle' in London so those peskey students and staff mooch where ever they can. My setup is generally: ---- home_server_pool eduroam { #type = fail-over <-- works #type = client-balance <-- grumbles #type = client-port-balance <-- grumbles type = keyed-balance <-- grumbles home_server = jrs.0 home_server = jrs.1 home_server = jrs.2 } ---- The proxy topology in eduroam (incase you do not know) is: [us x 2] ---------- [ .ja.net proxies x 3 ] ---------- [them x 2] <ramble> I used 'keyed-balance' as 'client-balance'/'client-port-balance' load balance terribly when your NAS's use the same source port and most of our traffic comes from the same IP (the single infernal WLC 4400 we have). This however is not important, as I only started to use 'keyed-balance' about an hour ago. I noticed after the summer FreeRADIUS overhaul I am finishing off that a number of proxied requests to particular realms failed for no reason. Speaking to my counterparts at the other universities they could see nothing wrong in their *FreeRADIUS* installations. Because I have a general knowledge of whats going on in the nearby universities I know there are some filthy MS IAS installations about and pretty quickly noticed queries to these places were working fine whilst request to my FreeRADIUS buddies did not. </ramble> Looking closer at the detail logs I saw that mid-EAP conversation the packets started to get proxied to different national proxies which resulted (expectedly) with a Access-Reject; also explaining why my counterparts never saw an inner authentication. Looks like MS IAS does not really care where the proxied packets come from, it only key's on Proxy-State (I'm guessing here); FreeRADIUS being a lot more picky...which is just what I like :) With this in mind I moved to 'fail-over' and everything started working. Alas I cannot leave it on 'fail-over' otherwise Alan Buxey gets grumbly. <ramble> I figured out how to enable super verbosity to get at those RDEBUG3's in realms.c:home_server_ldb() and saw (when using anything other than 'fail-over'): ---- [first packet] PROXY jrs 2.0 jrs 0.0 PROXY jrs 2.0 jrs 1.0 [a latter EAP packet had something like] PROXY jrs 2.0 jrs 0.0 PROXY jrs 1.0 jrs 0.0 ---- I think this was a red herring for me, but it got me to look more closer at the realms.c code. </ramble> The conclusion, we should not be paying any attention to 'currently_outstanding' or 'fr_rand()' when there is EAP traffic; I decided to add the clause !HOME_POOL_LOAD_BALANCE; things now work. What do you think of the following patch, I think there is sound reasoning behind it, however of course I am just a network monkey? Cheers -- Alexander Clouter .sigmonster says: There is no grief which time does not lessen and soften. diff --git a/src/main/realms.c b/src/main/realms.c index a0cb796..71640d0 100644 --- a/src/main/realms.c +++ b/src/main/realms.c @@ -1938,8 +1938,12 @@ home_server *home_server_ldb(const char *realmname, /* * We've found the first "live" one. Use that. + * The !HOME_POOL_LOAD_BALANCE clause is for the EAP + * case when we want to do CLIENT/KEY based balancing + * and avoid inconsistent proxying */ - if (pool->type == HOME_POOL_FAIL_OVER) { + if (pool->type == HOME_POOL_FAIL_OVER + || pool->type != HOME_POOL_LOAD_BALANCE) { found = home; break; }

4 14

GIT Log for 2009-11-18 00:33 GMT
by aland＠deployingradius.com 18 Nov '09

18 Nov '09

commit 60cd814a9a14d38eb4ee36dc86db563fc71fb7da Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Nov 17 11:19:17 2009 +0100 Move user/group/chroot/core to bootstrap config It adds some extra stuff when starting in debug mode as root, but it also means that "allow_core_dumps" works again. src/main/mainconfig.c | 30 +++++++++++++++++------------- 1 files changed, 17 insertions(+), 13 deletions(-)

1 0

GIT Log for 2009-11-15 00:33 GMT
by aland＠deployingradius.com 15 Nov '09

15 Nov '09

commit 2cface50032b72b1bf57b23b1893c72a731b39e9 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Nov 14 10:29:40 2009 +0100 Make templates work again src/main/conffile.c | 11 +++++++++-- 1 files changed, 9 insertions(+), 2 deletions(-)

1 0

GIT Log for 2009-11-14 00:33 GMT
by aland＠deployingradius.com 14 Nov '09

14 Nov '09

commit 65ef5bbc7c68a10a1050a27577fe7ae127ad8d14 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Nov 13 14:15:51 2009 +0100 Allow !* to work The code to delete all attributes (as documented in unlang) was previously added in evaluate.c. But the parser hadn't been updated, so it was impossible to actually use that functionality. src/main/conffile.c | 1 + src/main/evaluate.c | 3 +-- src/main/modcall.c | 1 + 3 files changed, 3 insertions(+), 2 deletions(-)

1 0

GIT Log for 2009-11-13 00:33 GMT
by aland＠deployingradius.com 13 Nov '09

13 Nov '09

commit bdb12579578217cf978c8f95d966932e4e3051bd Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Nov 12 16:19:25 2009 +0100 Print commands from radmin when in debug mode Files changed: src/modules/frs_control/frs_control.c | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) ====================================================================== commit ed993033d2f3c0efbe927161cc22b0518ccfd05e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Nov 12 12:25:03 2009 +0100 Fix WiMAX encoding bug introduced in 326a68b90a1a Files changed: src/lib/radius.c | 5 +++-- 1 files changed, 3 insertions(+), 2 deletions(-) ====================================================================== commit 13c45d5fedc25fe45e74a92a1fd6603b00f36796 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Nov 6 08:16:42 2009 -0500 As posted to the list Files changed: share/dictionary.alcatel.sr | 62 +++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 62 insertions(+), 0 deletions(-) ====================================================================== commit 48f0232ec399bbd39ce66adb5957d944440d9210 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Nov 3 16:40:03 2009 -0500 From bug #45 Files changed: share/dictionary.acme | 227 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 227 insertions(+), 0 deletions(-) ======================================================================

1 0

Fw:Re: RE: FreeRadius + EAP-AKA support
by xiningtom_1986 07 Nov '09

07 Nov '09

Hi?Kumar, ????Would?you?please?also?send?me?a?copy?of?the?patch???Thank?you?very?much. xiningtom_1986(a)gmail.com Hi?Kumar, ????Would?you?please?also?send?me?a?copy?of?the?patch???Thank?you?very?much. cht.maillist(a)gmail.com BillGets 2009.11.06 --?Kumar,?Sunil?wrote?:? Hi?Alan Please?find?the?attached?patch?to?fix?the?variable?length?issue?for AT_RES?with?EAP-AKA?support. I?have?created?this?patch?on?top?of?FreeRadius?1.1.4?release?version. Please?provide?your?valuable?comments?or?feedback?for?the?same. Thanks. Warm?regards. Sunil?Kumar >?-----Original?Message----- >?From:?Alan?DeKok?[mailto:aland@depl...] >?Sent:?Thursday,?February?26,?2009?1:53?PM >?To:?FreeRadius?developers?mailing?list >?Cc:?Kumar,?Sunil >?Subject:?Re:?FreeRadius?+?EAP-AKA?support >? >?Kumar,?Sunil?wrote: >?>?We?are?trying?to?use?FreeRadius1.1.4?as?authentication?server?for >?>?EAP-AKA?implementation?with?our?product?toolkit. >? >???Hm...?if?you've?applied?the?EAP-AKA?patch,?could?you?send?a?copy?to >?me???bugs.freeradius.org?has?gone?down,?and?I'm?not?sure?I?have?a?copy >?of?the?patch?anywhere. >? >?>?We?in?our?toolkit?needs?to?support?all?the?variable?length?of?RES values >?>?from?32?bits?(4?bytes)?to?128?bits?(16?bytes).?So?I?have?modified the >?>?FreeRadius?implementation?for?the?same?support. >? >???Nice.??Please?send?us?the?patch! >? >?>?The?intention?of?writing?such?mail?is?to?get?the?information?that?if >?>?somebody?has?already?noticed?and?fixed?this?issue?in?the?latest >?>?releases,?so?please?share?that?information?as?well. >? >???No?one?else?has?seen?this?issue. >? >?>?In?case?it's?not?been?fixed?as?yet,?then?may?be?I?could?contribute my >?>?patch?for?freeradius?1.1.4?version?to?support?all?variable?length RES >?>?value?varying?from?32?bits?to?128?bits. >? >???Please?send?the?patch?for?EAP-AKA!??Or?even?the?entire?rlm_eap >?directory?that?you're?using,?and?we'll?work?out?the?patch. >? >???Alan?DeKok. The?information?contained?in?this?electronic?mail?transmission? may?be?privileged?and?confidential,?and?therefore,?protected? from?disclosure.?If?you?have?received?this?communication?in? error,?please?notify?us?immediately?by?replying?to?this? message?and?deleting?it?from?your?computer?without?copying? or?disclosing?it. -- This?message?was?sent?on?behalf?of?cht.maillist(a)gmail.com?at?openSubscriber.com http://www.opensubscriber.com/message/freeradius-devel@lists.freeradius.org… - List?info/subscribe/unsubscribe??See?http://www.freeradius.org/list/devel.h…

1 0

Freeradius and Sync ppp connection
by Daniele Ferrara 04 Nov '09

04 Nov '09

Hi all I have two server freeradius and PPPoe Server. My problem is when restart server freeradius not sysnc with pppoe server. how to resolve this problem? Daniele

3 4

GIT Log for 2009-10-29 00:33 GMT
by aland＠deployingradius.com 29 Oct '09

29 Oct '09

commit 9dbc8974fdd2300a70293eda9c62bce20a3c9165 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Oct 28 09:44:38 2009 -0400 errormsg may be NULL .../drivers/rlm_sql_postgresql/sql_postgresql.c | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-)

1 0