- Freeradius-Devel - lists.freeradius.org

libeap/eap_tls.c eaptls_process details
by Carolin Latze 29 Jun '09

29 Jun '09

Hi, I have a question about the following code fragment found in eaptls_process in rlm_eap/libeap/eap_tls.c: /* * Decrypt the complete record. */ BIO_write(tls_session->into_ssl, tls_session->dirty_in.data, tls_session->dirty_in.used); /* * Clear the dirty buffer now that we are done with it * and init the clean_out buffer to store decrypted data */ (tls_session->record_init)(&tls_session->dirty_in); (tls_session->record_init)(&tls_session->clean_out); /* * Read (and decrypt) the tunneled data from the * SSL session, and put it into the decrypted * data buffer. */ err = SSL_read(tls_session->ssl, tls_session->clean_out.data, sizeof(tls_session->clean_out.data)); I think, BIO_write sends data out to the peer and SSL_read receives data from the peer here, but the comments suggest something else (like piping the data through decryption within the server). Which version is correct? ;-) Thanks in advance Carolin

2 1

GIT Log for 2009-06-25 23:33 GMT
by aland＠deployingradius.com 25 Jun '09

25 Jun '09

commit e7604da5bb9a805842927ef3eb4f97568e7d4900 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Jun 25 20:57:00 2009 +0200 Remove bad assertion src/main/event.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-)

1 0

Multiple authendication from client using freeRadius server
by kpani 23 Jun '09

23 Jun '09

Hi, I am using freeRadius server and JRadius client for my java application user authentication. I have a scenario for multiple authentication by user. 1) User will provide username 2) Radius server will authenticate and response access-challenge 3) The user will be prompted to enter password. This will continue for few more steps. I was advised to develop a custom authentication protocol. I am not sure if this is the only way. Please suggest me an idea or reference to implement this. Regards, Dhandapani -- View this message in context: http://www.nabble.com/Multiple-authendication-from-client-using-freeRadius-… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

2 1

GIT Log for 2009-06-19 23:33 GMT
by aland＠deployingradius.com 19 Jun '09

19 Jun '09

commit 321c0ae58641f709d115526bb564cbd8c4dab71d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jun 19 16:02:24 2009 +0200 Fix typos Files changed: src/modules/frs_dhcp/dhcp.c | 7 +------ 1 files changed, 1 insertions(+), 6 deletions(-) ====================================================================== commit 79ffcee03efc9e11294e2ac40af58e9be4886554 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jun 19 11:57:44 2009 +0200 A number of fixes for the DHCP code. - send server identifier in siaddr field, too - find message-type option anywhere in the packet, not just at the start - respond to unicast packets that have yiaddr == giaddr == 0 Files changed: src/modules/frs_dhcp/dhcp.c | 150 +++++++++++++++++++++++++++++-------------- 1 files changed, 101 insertions(+), 49 deletions(-) ======================================================================

1 0

GIT Log for 2009-06-17 23:33 GMT
by aland＠deployingradius.com 17 Jun '09

17 Jun '09

commit 23948db29b02fce17c78deb5951d08988b95e116 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Jun 17 12:35:04 2009 +0200 Sort attributes, and print times as offsets Files changed: src/main/radsniff.c | 80 +++++++++++++++++++++++++++++++++++++++++++++++++-- 1 files changed, 77 insertions(+), 3 deletions(-) ====================================================================== commit 07c292fe351839471687c64ef6345f12e6394d72 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Jun 17 07:35:43 2009 +0200 Document Cleartext-Password Files changed: man/man5/users.5 | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) ====================================================================== commit 023a7839ec622afbe6dd584cc76c9b44fd0dde71 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Jun 17 07:34:18 2009 +0200 Allow for overload, to read packets as fast as possible Files changed: src/modules/frs_detail/frs_detail.c | 11 ++++++++++- 1 files changed, 10 insertions(+), 1 deletions(-) ======================================================================

1 0

GIT Log for 2009-06-16 23:33 GMT
by aland＠deployingradius.com 16 Jun '09

16 Jun '09

commit 86e6a1cba83015ccdf2c4236227e460a3f9e814f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Jun 16 16:39:57 2009 +0200 Removed requirement for DHCP to have clients Files changed: raddb/sites-available/dhcp | 21 ------------ src/main/listen.c | 11 ++++-- src/modules/frs_dhcp/frs_dhcp.c | 69 +++++++++++++++++++++++++++++++++------ 3 files changed, 66 insertions(+), 35 deletions(-) ====================================================================== commit 53ef0b2ddcb3e888bca120f62560305524582028 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Jun 16 16:38:02 2009 +0200 Added udpfromto support for sending, too Files changed: src/modules/frs_dhcp/dhcp.c | 20 +++++++++++++------- 1 files changed, 13 insertions(+), 7 deletions(-) ====================================================================== commit 4932587583ff6c085a373c55b0bdf5dd028da655 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Jun 16 15:55:08 2009 +0200 Added the ability to selectively mark a module as alive/dead This is useful for when you KNOW that a server is down for a long time, but you don't want to edit your configuration. Files changed: src/include/modpriv.h | 1 + src/main/modcall.c | 8 +++++++ src/modules/frs_control/frs_control.c | 38 +++++++++++++++++++++++++++++++++ 3 files changed, 47 insertions(+), 0 deletions(-) ====================================================================== commit 240d07c2c9fb8d7d196e2dbb59f33dbea91ce713 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Jun 16 14:52:40 2009 +0200 Option to suppress packet contents Files changed: src/main/radsniff.c | 14 ++++++++++---- 1 files changed, 10 insertions(+), 4 deletions(-) ====================================================================== commit e30c2b8d5e17fb967ed888cefdd117dcd5926db7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Jun 16 14:22:47 2009 +0200 Make radsniff more useful. It now prints out LESS information, like the RADIUS filters && secret. That information can be printed out using '-X' (should be -x) Fixed pointer type for IP, to catch alignment issues. use data + size, NOT ethernet + size Cleaned up output so it's easier to read, and includes timestamps. Added packet tree for filters. IF there's a filter, AND it matches a request packet, THEN also print out the reply packet for that request Files changed: src/main/radsniff.c | 179 +++++++++++++++++++++++++++++---------------------- 1 files changed, 103 insertions(+), 76 deletions(-) ======================================================================

1 0

GIT Log for 2009-06-15 23:33 GMT
by aland＠deployingradius.com 15 Jun '09

15 Jun '09

commit 0c0e44e33873f37f0c0b601485e3f83db8ca61ad Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Jun 15 16:50:12 2009 +0200 Updated to apply packet src/dst rules BEFORE printing header out Otherwise, debugging mode prints out the wrong information Files changed: src/modules/frs_dhcp/dhcp.c | 138 +++++++++++++++++++++++++------------------ 1 files changed, 80 insertions(+), 58 deletions(-) ====================================================================== commit 6559e2a631d1053929272528fa3a9ef18f8024f7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Jun 15 16:39:39 2009 +0200 Make it work on Mac OS X Files changed: src/lib/udpfromto.c | 14 +++++++------- 1 files changed, 7 insertions(+), 7 deletions(-) ====================================================================== commit a90c429f280bbda33d940e8b3163e6d7e027245d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Jun 15 14:23:12 2009 +0200 Fix stupid typo Files changed: src/main/event.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit bc93366d39fcf6b673d84228b872bfa710fa58c2 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Jun 15 11:41:15 2009 +0200 Fixed typo Files changed: raddb/sites-available/default | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 0b624311e86459590a1d5c63ddc833a8557f4403 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Jun 15 10:48:51 2009 +0200 Document how to filter access-challenges Files changed: raddb/sites-available/default | 16 ++++++++++++++++ 1 files changed, 16 insertions(+), 0 deletions(-) ====================================================================== commit b7a19ae6f7b477a832d3bc8fa30647633d95324d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Jun 15 09:51:38 2009 +0200 Run packet through processing ONLY if we have a reply Files changed: src/main/event.c | 34 ++++++++++++++++++++++------------ 1 files changed, 22 insertions(+), 12 deletions(-) ======================================================================

1 0

GIT Log for 2009-06-14 23:33 GMT
by aland＠deployingradius.com 14 Jun '09

14 Jun '09

commit 981a4d5cac1a96ed0238c31e100722c4e35609fe Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Jun 14 08:25:52 2009 +0200 Hack the dhcp offset The dictionary files don't agree with the code, so we've got to fix the code src/modules/frs_dhcp/frs_dhcp.c | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-)

1 0

Re: Hack way to compile freeradius causing freeradius to hang under multithread mode
by Ming-Ching Tiew 14 Jun '09

14 Jun '09

--- On Sun, 6/14/09, Ming-Ching Tiew <mctiew(a)yahoo.com> wrote: > radiusd: #### Opening IP addresses and Ports #### > listen { > type = "auth" > ipaddr = * > port = 0 > Thread 4 waiting to be assigned a request > Thread 5 waiting to be assigned a request > Re-wait 3 > Re-wait 1 > Re-wait 2 > > And nothing after that. netstat -naut still does not have > anything listening to 1812. > > Regards. > Apparently the program was stucked at function fr_suid_up(), inside which it calls setrersuid(-1, suid, -1 ) with suid = 0. The blocks there forever and never return. I think I will try to compile without HAVE_SETUID to see what happens. Regards.

1 0

Re: Hack way to compile freeradius causing freeradius to hang under multithread mode
by Ming-Ching Tiew 14 Jun '09

14 Jun '09

--- On Sun, 6/14/09, A.L.M.Buxey(a)lboro.ac.uk <A.L.M.Buxey(a)lboro.ac.uk> wrote: > > umm, have you checked the output of radiusd.log etc to > ensure you > dnt have a simple problem - such as access rights to a > directory, > path or log file? > This would be very likely. When I run it as 'radiusd -xx', the log file says :- Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } thread pool { start_servers = 5 max_servers = 32 min_spare_servers = 3 max_spare_servers = 10 max_requests_per_server = 0 cleanup_delay = 5 max_queue_size = 65536 } Thread spawned new child 1. Total threads in pool: 1 Thread spawned new child 2. Total threads in pool: 2 Thread spawned new child 3. Total threads in pool: 3 Thread 1 waiting to be assigned a request Thread 2 waiting to be assigned a request Thread 3 waiting to be assigned a request Thread spawned new child 4. Total threads in pool: 4 Thread spawned new child 5. Total threads in pool: 5 Thread pool initialized radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 Thread 4 waiting to be assigned a request Thread 5 waiting to be assigned a request Re-wait 3 Re-wait 1 Re-wait 2 And nothing after that. netstat -naut still does not have anything listening to 1812. Regards.

1 0