- Freeradius-Devel - lists.freeradius.org

How to return "Reply-Message" from python script
by Александра Белова 24 Sep '09

24 Sep '09

I use the python a script for authorisation, for this purpose I in radiusd.conf have placed in section modules exec auth { profram = "/user/local/etc/raddb/auth.py" wait = yse inpyt_pairs = request shell_escape = yes output = no output_pairs = reply } As I have understood inpyt_pairs = request shell_escape = yes places attributes of request in variable environments of a script, and output_pairs = reply should allow to return to transfer atributes value pairs generated by a script in the server reply.As I have understood values returned by a script, 0 - ok, 1 - reject, the server answer to authorise or not the user, I besides it would would like to return to the user the message "Reply-Message", but I can not understand as it to make.My script looks in the simplified sort so def handleUserList (p): u_name = p [' USER_NAME '] u_pwd = p [' USER_PASSWORD '] ................ if (well user): sys.exit (3) else: sys.exit (1) if __ name __ == "__ main __": import os hendleUserList (os.eniron) And it works correctly, but he does not allow to transfer the message to the user. As I saw in prepaid.py for message return is used return (RLM_MODULE_XX, ((' Auth-Type ', ' python '), (' Reply-Message ', ' text '))) when I use similar string return (3, ((' Reply-Message ', ' text '))) the message is not transferred to the user and exec-Program: returned: 0 always.Please illustrate on an example how value pairs for attributes of the answer of a server are formed and transferred to it.

1 0

FW: C++ library for Radius
by Nazim Oztahtaci 24 Sep '09

24 Sep '09

Hello, I am a master student in KTH University, Stockholm. We are working on a project inwhich we are implementing a Darwin Streaming Server. We have to implement a custom authentication module in that in C++. We have a running Free Radius server on our platform. We need to make external connection between DSS and Radius so DSS will send user information to DSS and will get validation response. Is there any suitable library for that in C++? Best regards, Nazim Oztahtaci Diğer Windows Live™ özelliklerine göz atın. Sadece e-posta iletilerinden daha fazlası _________________________________________________________________ Windows Live tüm arkadaşlarınızla tek bir yerden iletişim kurmanıza yardımcı olur. http://www.microsoft.com/turkiye/windows/windowslive/products/social-networ…

3 9

debugging tip
by Joe Maimon 23 Sep '09

23 Sep '09

Debian build a freeradius-dbg package. How do I get gdb to use these symbols with the minimum of fuss? I must be missing something basic.

3 4

segv when specifying src_ipaddr in proxy.conf
by Joe Maimon 23 Sep '09

23 Sep '09

Apparently ipaddr works. 20090910 git + patches realms.c { "src_ipaddr", PW_TYPE_STRING_PTR, 0, &hs_srcipaddr, NULL }, Is this correct? This is the bt #0 0xb7cab8eb in strlen () from /lib/i686/cmov/libc.so.6 #1 0xb7c78198 in vfprintf () from /lib/i686/cmov/libc.so.6 #2 0xb7c982e4 in vsnprintf () from /lib/i686/cmov/libc.so.6 #3 0xb7c7e602 in snprintf () from /lib/i686/cmov/libc.so.6 #4 0x08056039 in listen_alloc (type_name=0x1 <Address 0x1 out of bounds>) at listen.c:666 #5 0x08056dac in proxy_new_listener (ipaddr=0x809b1bc, exists=1) at listen.c:830 #6 0x0806b60e in home_server_create_callback (ctx=0x81e72c8, data=0xbffff3a0) at realms.c:2231 #7 0xb7fd1c0e in WalkNodeInOrder (X=0x809b4a0, callback=0x806b5d0 <home_server_create_callback>, context=0x81e72c8) at rbtree.c:544 #8 0x0806b594 in home_server_create_listeners (ctx=0x81e68a0) at realms.c:2261 #9 0x080569ca in listen_init (config=0x8081020, head=0xbffff718) at listen.c:1262 #10 0x08069dcf in radius_event_init (cs=0x8081020, spawn_flag=0) at event.c:3597 #11 0x0805e728 in main (argc=2, argv=0xbffff8b4) at radiusd.c:346

2 7

question
by Александра Белова 23 Sep '09

23 Sep '09

Describe please a correct method of inclusion and usage of rlm_python unit for freeradius. I write "$INCLUDE experimental.conf." in the end of the section modules in radiusd.conf. In experimental.conf in the section beginning python I have added "module = $ {confdir}/radiusd_test.py" and comment strings "mod_instatiate = radius_test". Files radiusd.py and radiusd_test.py are made the executed. I add python in section authorize in sites-available/default. I have started "radiusd-X". On the screen + Including configuration file /usr/local/etc/expiremental.conf + Module: Linced to module rlm_python Module: Instatiating python Python_init done Python{ Func_instantiate = "instantiate" + } I start "radtest bob bob localhost 0 testing123", user bob describe in the user file. Radus send the Access-Accept and in the screen in radiusd I see "++[python] returns ok". Then i change radiusd_test.py by returning radiusd.RLM_MODULE_REJECT in authorize function and also has written output to a string file "in authorise. I have restarted radiusd and have repeated the same operations. And see that Radus send the Access-Accept and in the screen in radiusd I see "++[python] returns ok". But no file was created. As it seems to me the unit has not fulfilled that it is possible to make with this problem and as it correctly to use. Thank you.

1 0

Client-Short-Name vs. Client-Shortname vs. FreeRADIUS-Client-Shortname
by Joe Maimon 22 Sep '09

22 Sep '09

I have been using Client-Short-Name (local patch) in users/hints/policy matching for quite some time. Basically I use it to send appropriate attributes or to rewrite reply attributes based on who the client is, and shortname fits my bill because I can use regex matching for wide ranges of properly named clients. I am aware that config expansion is supposed to allow me to use any other arbitrary tag from the configuration for this purpose (please advise whether this is indeed the case and the recommended approach) but this way has been working fairly well for quite some time for me. Barring a few patch edits to accommodate changing internal dictionary numbers it has been working fine. Recently I noticed that there are similarly named attributes part of stock source. Client-Shortname and FreeRADIUS-Client-Shortname However, matching does not seem to work properly with Client-Shortname and both FreeRADIUS-Client-Shortname and my own Client-Short-Name gives me this fatal error on startup with latest git /etc/freeradius/users.jnet[54]: Parse error (check) for entry DEFAULT: Invalid octet string "localhost" for attribute name "FreeRADIUS-Client-Shortname"

1 0

question
by Александра Белова 21 Sep '09

21 Sep '09

Hello. I'm trying to use rlm_python module for freeradius. I include experimental.conf in radiusd.conf and change it put the string "module = ${confdir}/radiusd_test.py" and comment lines "mod_instatiate = radius_test" in it. Then i put "python" in the authorization section in sites-available/default. I run radiusd -X and see "++[python] returns ok". Then i change radiusd_test.py by returning radiusd.RLM_MODULE_REJECT, restart radiusd -X and get the same "++[python] returns ok". what can i do with this problem? Thank you.

1 0

ChangeLog
by Stefan Winter 21 Sep '09

21 Sep '09

Hi, I just discovered that the 2.1.7 code clears the DF bit for outgoing packets, as discussed here earlier. Great! I didn't find that in the release notes however. I've been making many eduroam sites aware of this, and I think it would be nice to confirm in the ChangeLog that this is "the" version one should use if that piece of misbehaviour was a concern. Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473

2 1

GIT Log for 2009-09-17 23:33 GMT
by aland＠deployingradius.com 17 Sep '09

17 Sep '09

commit 66b8e171eb8f7f67d09032aed4f541ed88523f9a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Sep 17 12:03:36 2009 +0200 Fix arguments to client_find src/main/client.c | 6 +++++- 1 files changed, 5 insertions(+), 1 deletions(-)

1 0

Freeradius-Devel Digest, Vol 53, Issue 16
by kachin Agarwal 17 Sep '09

17 Sep '09

hi, Actually these patches worked fine when i upgraded freeeadius server from 2.0.2 to 2.1.4 So again i ve created these patches for 2.1.6 But the patches work fine. as it does not show any error while patching. but only shows an error after that patching file src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h patching file src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c patching file share/dictionary Hunk #1 succeeded at 186 (offset 3 lines). configure: WARNING: In the future, Autoconf will not detect cross-tools whose name does not start with the host triplet. If you think this configuration is useful to you, please write to autoconf(a)gnu.org. configure: WARNING: snmpget not found - Simultaneous-Use and checkrad.pl may not work configure: WARNING: snmpwalk not found - Simultaneous-Use and checkrad.pl may not work config.status: WARNING: ./Make.inc.in seems to ignore the --datarootdir setting config.status: WARNING: ./src/include/build-radpaths-h.in seems to ignore the --datarootdir setting radius.c: In function 'vp2data': radius.c:678: warning: pointer targets in passing argument 2 of 'make_passwd' differ in signedness radius.c:704: warning: pointer targets in passing argument 2 of 'make_tunnel_passwd' differ in signedness radius.c:711: warning: pointer targets in passing argument 2 of 'make_tunnel_passwd' differ in signedness rlm_counter.c: In function 'counter_instantiate': rlm_counter.c:533: warning: suggest explicit braces to avoid ambiguous 'else' rlm_eap_peap.c: In function 'eappeap_authenticate': rlm_eap_peap.c:315: warning: implicit declaration of function 'pairmoveall' rlm_eap_ttls.c: In function 'eapttls_authenticate': rlm_eap_ttls.c:215: warning: implicit declaration of function 'pairmoveall' rlm_eap.c: In function 'eap_instantiate': rlm_eap.c:203: warning: format '%s' expects type 'char *', but argument 3 has type 'int' rlm_eap.c:211: warning: format '%s' expects type 'char *', but argument 3 has type 'int' /opt/wios/gcc-4.2.2-glibc-2.7-p2/mips-xlr-linux-gnu/lib/gcc/mips-xlr-linux-gnu/4.2.2/../../../../mips-xlr-linux-gnu/bin/ld: warning: libfreeradius-radius-2.1.6.so, needed by libeap/.libs/libfreeradius-eap.so, not found (try using -rpath or -rpath-link) .libs/radeapclient.o: In function `cleanresp': radeapclient.c:(.text+0x214): undefined reference to `pairdelete' radeapclient.c:(.text+0x234): undefined reference to `pairdelete' radeapclient.c:(.text+0x24c): undefined reference to `pairbasicfree' .libs/radeapclient.o: In function `process_eap_start': radeapclient.c:(.text+0x304): undefined reference to `pairfind' radeapclient.c:(.text+0x43c): undefined reference to `pairfind' radeapclient.c:(.text+0x454): undefined reference to `pairfind' radeapclient.c:(.text+0x46c): undefined reference to `pairfind' radeapclient.c:(.text+0x520): undefined reference to `paircreate' radeapclient.c:(.text+0x538): undefined reference to `pairreplace' radeapclient.c:(.text+0x558): undefined reference to `paircreate' radeapclient.c:(.text+0x570): undefined reference to `pairreplace' radeapclient.c:(.text+0x5a4): undefined reference to `paircreate' radeapclient.c:(.text+0x5c0): undefined reference to `fr_rand' radeapclient.c:(.text+0x5e0): undefined reference to `fr_rand' radeapclient.c:(.text+0x5f8): undefined reference to `fr_rand' radeapclient.c:(.text+0x610): undefined reference to `fr_rand' radeapclient.c:(.text+0x654): undefined reference to `pairreplace' radeapclient.c:(.text+0x67c): undefined reference to `pairfind' radeapclient.c:(.text+0x6dc): undefined reference to `paircreate' radeapclient.c:(.text+0x734): undefined reference to `pairreplace' .libs/radeapclient.o: In function `respond_eap_sim': radeapclient.c:(.text+0x968): undefined reference to `paircopy2' radeapclient.c:(.text+0x990): undefined reference to `paircopy2' radeapclient.c:(.text+0x9b0): undefined reference to `pairfind' radeapclient.c:(.text+0x9d0): undefined reference to `paircreate' radeapclient.c:(.text+0x9e8): undefined reference to `pairreplace' radeapclient.c:(.text+0xa04): undefined reference to `pairfind' radeapclient.c:(.text+0xa80): undefined reference to `vp_printlist' radeapclient.c:(.text+0xa98): undefined reference to `pairfind' radeapclient.c:(.text+0xb28): undefined reference to `pairfind' radeapclient.c:(.text+0xb40): undefined reference to `pairfind' radeapclient.c:(.text+0xb7c): undefined reference to `pairfind' radeapclient.c:(.text+0xba8): undefined reference to `pairfind' .libs/radeapclient.o:radeapclient.c:(.text+0xbc4): more undefined references to `pairfind' follow .libs/radeapclient.o: In function `respond_eap_sim': radeapclient.c:(.text+0x1024): undefined reference to `paircreate' radeapclient.c:(.text+0x103c): undefined reference to `pairreplace' radeapclient.c:(.text+0x1054): undefined reference to `paircreate' radeapclient.c:(.text+0x1070): undefined reference to `pairreplace' radeapclient.c:(.text+0x10ac): undefined reference to `paircreate' radeapclient.c:(.text+0x10ec): undefined reference to `pairreplace' radeapclient.c:(.text+0x1268): undefined reference to `pairreplace' radeapclient.c:(.text+0x12dc): undefined reference to `pairreplace' .libs/radeapclient.o: In function `sendrecv_eap': radeapclient.c:(.text+0x1370): undefined reference to `pairfind' radeapclient.c:(.text+0x1390): undefined reference to `pairfind' radeapclient.c:(.text+0x13ac): undefined reference to `pairfind' radeapclient.c:(.text+0x13c8): undefined reference to `strlcpy' radeapclient.c:(.text+0x140c): undefined reference to `vp_printlist' radeapclient.c:(.text+0x1418): undefined reference to `pairfind' radeapclient.c:(.text+0x1430): undefined reference to `pairdelete' radeapclient.c:(.text+0x1484): undefined reference to `fr_md5_calc' radeapclient.c:(.text+0x1490): undefined reference to `strlcpy' radeapclient.c:(.text+0x17c0): undefined reference to `rad_chap_encode' radeapclient.c:(.text+0x17e4): undefined reference to `rad_send' radeapclient.c:(.text+0x1934): undefined reference to `rad_recv' radeapclient.c:(.text+0x19a0): undefined reference to `ip_ntoh' radeapclient.c:(.text+0x19c0): undefined reference to `ip_ntoh' radeapclient.c:(.text+0x1a10): undefined reference to `fr_perror' radeapclient.c:(.text+0x1a94): undefined reference to `rad_verify' radeapclient.c:(.text+0x1ab8): undefined reference to `fr_perror' radeapclient.c:(.text+0x1ac4): undefined reference to `rad_decode' radeapclient.c:(.text+0x1ae8): undefined reference to `fr_perror' radeapclient.c:(.text+0x1af4): undefined reference to `fr_debug_flag' radeapclient.c:(.text+0x1bc0): undefined reference to `paircreate' radeapclient.c:(.text+0x1bd8): undefined reference to `pairadd' radeapclient.c:(.text+0x1bf8): undefined reference to `paircreate' radeapclient.c:(.text+0x1c10): undefined reference to `pairadd' radeapclient.c:(.text+0x1c60): undefined reference to `paircreate' radeapclient.c:(.text+0x1cac): undefined reference to `pairadd' radeapclient.c:(.text+0x1d1c): undefined reference to `paircopy2' radeapclient.c:(.text+0x1d28): undefined reference to `fr_MD5Init' radeapclient.c:(.text+0x1d34): undefined reference to `fr_MD5Update' radeapclient.c:(.text+0x1d40): undefined reference to `fr_MD5Final' radeapclient.c:(.text+0x1d4c): undefined reference to `paircreate' radeapclient.c:(.text+0x1d58): undefined reference to `pairreplace' .libs/radeapclient.o: In function `main': radeapclient.c:(.text+0x20d8): undefined reference to `fr_debug_flag' radeapclient.c:(.text+0x2204): undefined reference to `fr_debug_flag' radeapclient.c:(.text+0x2578): undefined reference to `dict_init' radeapclient.c:(.text+0x2598): undefined reference to `fr_perror' radeapclient.c:(.text+0x25b4): undefined reference to `rad_alloc' radeapclient.c:(.text+0x25d4): undefined reference to `fr_perror' radeapclient.c:(.text+0x2810): undefined reference to `ip_hton' radeapclient.c:(.text+0x29c4): undefined reference to `pairfree' radeapclient.c:(.text+0x29d0): undefined reference to `readvp2' libeap/.libs/libfreeradius-eap.so: undefined reference to `fr_strerror' libeap/.libs/libfreeradius-eap.so: undefined reference to `fr_SHA1Final' libeap/.libs/libfreeradius-eap.so: undefined reference to `pairmake' libeap/.libs/libfreeradius-eap.so: undefined reference to `dict_valbyattr' libeap/.libs/libfreeradius-eap.so: undefined reference to `paircopy' libeap/.libs/libfreeradius-eap.so: undefined reference to `fr_SHA1Init' libeap/.libs/libfreeradius-eap.so: undefined reference to `fr_SHA1Update' libeap/.libs/libfreeradius-eap.so: undefined reference to `fr_hmac_sha1' libeap/.libs/libfreeradius-eap.so: undefined reference to `fr_SHA1FinalNoLen' libeap/.libs/libfreeradius-eap.so: undefined reference to `fr_SHA1Transform' collect2: ld returned 1 exit status make[7]: *** [radeapclient] Error 1 make[6]: *** [common] Error 2 make[5]: *** [all] Error 2 make[4]: *** [common] Error 2 make[3]: *** [all] Error 2 make[2]: *** [common] Error 2 make[1]: *** [all] Error 2 make: *** [*/*/*/*/freeradius-server-2.1.6/src/main/radiusd] Error 2 i m a newbie in free radius server. i m able to use 2.1.4 but i want to upgrade it to 2.1.6 can u jus tell me which file creates the libfreeradius-radius-2.1.6.so and the whole concept of linking in a nutshell. Thanx & regards, kachin --- On Thu, 17/9/09, freeradius-devel-request(a)lists.freeradius.org <freeradius-devel-request(a)lists.freeradius.org> wrote: From: freeradius-devel-request(a)lists.freeradius.org <freeradius-devel-request(a)lists.freeradius.org> Subject: Freeradius-Devel Digest, Vol 53, Issue 16 To: freeradius-devel(a)lists.freeradius.org Date: Thursday, 17 September, 2009, 3:30 PM Send Freeradius-Devel mailing list submissions to freeradius-devel(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-devel or, via email, send a message with subject or body 'help' to freeradius-devel-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-devel-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Devel digest..." Today's Topics: 1. Cannot upgrade 2.1.4 to 2.1.6 (kachin Agarwal) 2. Re: Cannot upgrade 2.1.4 to 2.1.6 (Alan Buxey) ---------------------------------------------------------------------- Message: 1 Date: Thu, 17 Sep 2009 11:31:42 +0530 (IST) From: kachin Agarwal <kach_gr8(a)yahoo.co.in> Subject: Cannot upgrade 2.1.4 to 2.1.6 To: freeradius-devel(a)lists.freeradius.org Message-ID: <375760.2597.qm(a)web94206.mail.in2.yahoo.com> Content-Type: text/plain; charset="utf-8" I m trying to upgrade from freeradius-server2.1.4 to freeradius-server2.1.6. i ve created some patches and applied it. but while compiling, it patches all the files and then gives me an error as below : /opt/wios/gcc-4.2.2-glibc-2.7- p2/mips-xlr-linux-gnu/lib/gcc/ mips-xlr-linux-gnu/4.2.2/../.. /../../mips-xlr-linux-gnu/bin/ ld: warning: libfreeradius-radius-2.1.6.so, needed by libeap/.libs/libfreeradius- eap.so, not found (try using -rpath or -rpath-link) collect2: ld returned 1 exit status make[7]: *** [radeapclient] Error 1 make[6]: *** [common] Error 2 make[5]: *** [all] Error 2 make[4]: *** [common] Error 2 make[3]: *** [all] Error 2 make[2]: *** [common] Error 2 make[1]: *** [all] Error 2 make: *** [*/*/*/*/*/freeradius-server- 2.1.6/src/main/radiusd] Error 2 it fails to link plz give me a solution to this problem. Keep up with people you care about with Yahoo! India Mail. Learn how. http://in.overview.mail.yahoo.com/connectmore

2 1