- Freeradius-Devel - lists.freeradius.org

GIT Log for 2009-04-09 23:33 GMT
by aland＠deployingradius.com 09 Apr '09

09 Apr '09

commit 2d4ce3bff567d03e348742b36b4c9e890b88b060 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 9 10:35:38 2009 +0200 Do recursive xlat src/main/xlat.c | 8 +++++++- 1 files changed, 7 insertions(+), 1 deletions(-)

1 0

How to find out from which section a module was called
by Stephan Jaeger 09 Apr '09

09 Apr '09

Hi, is it possible to get the information from which section a module was called? Maybe from the request struct? If have a problem with modules like rlm_linelog which have a common function for all sections. Following the example configuration logs the same string for access-request and access-accept/reject (the access-request one) because the packet type from the request is access-request in both request and reply. So i guess if not i have to configure different rlm_linelog instances to handle requests and replies. I also had that problem with a self made module so i had to make different module functions for every section. -- i. A. Stephan Jäger Abteilung Dienste Telefon: (0441)8000-2873 Telefax: (0441)8000-2599 mailto:stephan.jaeger@ewetel.de ___________________________________ EWE TEL GmbH Cloppenburger Straße 310 26133 Oldenburg Handelsregister Amtsgericht Oldenburg HRB 3723 Vorsitzender des Aufsichtsrates: Heiko Harms Geschäftsführung: Hans-Joachim Iken (Vorsitzender), Dr. Norbert Schulz, Dirk Thole Homepage: http://www.ewetel.de/

2 1

GIT Log for 2009-04-08 23:33 GMT
by aland＠deployingradius.com 08 Apr '09

08 Apr '09

commit 865cc41c4e95f2ee6353932e444d4ecee2580134 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Apr 8 16:58:31 2009 +0200 Added md5 xlat Files changed: src/main/xlat.c | 35 ++++++++++++++++++++++++++++++++++- 1 files changed, 34 insertions(+), 1 deletions(-) ====================================================================== commit 660226e1ff60a51fea2c690171f9f44c857861e3 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Apr 8 15:45:03 2009 +0200 Corrected typo Files changed: src/modules/rlm_ldap/rlm_ldap.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 11f8a544f0d1c5ca7b7a0debff0d81df7ff9e42b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Apr 8 14:12:43 2009 +0200 Updates, as posted to the list Files changed: share/dictionary.fortinet | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) ====================================================================== commit ee9a86594689aba2bc132a3c8780a94b856c6d0e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Apr 5 02:44:37 2009 +0200 Don't load pre/post-proxy sections if we're not proxying Files changed: src/main/modules.c | 12 ++++++++++++ 1 files changed, 12 insertions(+), 0 deletions(-) ======================================================================

1 0

Bug server dead - did anyone keep a copy of the HTTP-Digest auth patch?
by Andrew Krywaniuk 08 Apr '09

08 Apr '09

Hi, I'm looking for a copy of the experimental patch for HTTP digest authentication mentioned on http://wiki.freeradius.org/RFC that was previously stored on the now-defunct bugs server (http://bugs.freeradius.org/show_bug.cgi?id=391) If anyone kept a copy of this patch and could send it to me, I would appreciate it. My private e-mail is the rot13 of nxeljnavhx(at)sbegvarg(dot)pbz. BTW, I noticed that the list of custom attributes in the dictionary.fortinet file is out of date. Please update the list as follows: ATTRIBUTE Fortinet-Group-Name 1 string ATTRIBUTE Fortinet-Client-IP-Address 2 ipaddr ATTRIBUTE Fortinet-Vdom-Name 3 string ATTRIBUTE Fortinet-Client-IPv6-Address 4 octets ATTRIBUTE Fortinet-Interface-Name 5 string ATTRIBUTE Fortinet-Access-Profile 6 string Andrew _________________________________________________________________ Internet Explorer 8 helps keep your personal info safe. http://go.microsoft.com/?linkid=9655581

2 1

GIT Log for 2009-04-02 23:33 GMT
by aland＠deployingradius.com 03 Apr '09

03 Apr '09

commit 90c05e048d12082ce91e2baece1c1f90f265867d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 2 13:45:51 2009 +0200 Added "rebind" option to re-authenticate on rebind Also, change chase_referrals default to unset. This allows us to use the OpenLDAP default, OR to force it on/off. rebind is done only when chase_referrals is true, AND rebind is true Files changed: ====================================================================== commit e428b72171c57473bed5ccb1575e408cca07acfb Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 2 11:45:41 2009 +0200 Added chase_referrals option Files changed: ====================================================================== commit f60fe639e7562df9a710ab319f347e5934b92738 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Apr 2 11:21:03 2009 +0200 Note limitations with -n Files changed: ======================================================================

3 2

compile error with option --with-system-libtool
by Hermann Lauer 02 Apr '09

02 Apr '09

Dear developers, while building a deb package on lenny(sparc) with the debian/rules file included in the 2.1.4 tarball compilation fails due to some libtools issues, see output below. After removing the --with-system-libtool from the configure options in debian/rules the package was build sucessfull. I'm not familiar with libtool, but a path of ./libtools looks somehow wrong. Thanks, Hermann --------------------------------------- Making all in rlm_acctlog... make[7]: Entering directory `/home/hlauer/tmp/freeradius-server-2.1.4/src/modules/rlm_acctlog' ./libtool --mode=compile gcc -Wall -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/home/hlauer/tmp/freeradius-server-2.1.4/src -I/home/hlauer/tmp/freeradius-server-2.1.4/libltdl -c rlm_acctlog.c make[7]: ./libtool: Command not found make[7]: *** [rlm_acctlog.lo] Error 127 make[7]: Leaving directory `/home/hlauer/tmp/freeradius-server-2.1.4/src/modules/rlm_acctlog' make[6]: *** [common] Error 2 make[6]: Leaving directory `/home/hlauer/tmp/freeradius-server-2.1.4/src/modules' make[5]: *** [all] Error 2 make[5]: Leaving directory `/home/hlauer/tmp/freeradius-server-2.1.4/src/modules' make[4]: *** [common] Error 2 make[4]: Leaving directory `/home/hlauer/tmp/freeradius-server-2.1.4/src' make[3]: *** [all] Error 2 make[3]: Leaving directory `/home/hlauer/tmp/freeradius-server-2.1.4/src' make[2]: *** [common] Error 2 make[2]: Leaving directory `/home/hlauer/tmp/freeradius-server-2.1.4' make[1]: *** [all] Error 2 make[1]: Leaving directory `/home/hlauer/tmp/freeradius-server-2.1.4' make: *** [build-arch-stamp] Error 2 dpkg-buildpackage: failure: debian/rules build gave error exit status 2 -- Netzwerkadministration/Zentrale Dienste, Interdiziplinaeres Zentrum fuer wissenschaftliches Rechnen der Universitaet Heidelberg IWR; INF 368; 69120 Heidelberg; Tel: (06221)54-8236 Fax: -5224 Email: Hermann.Lauer(a)iwr.uni-heidelberg.de

2 1

Re :freeRadius PAM -- handling reply attributes
by krishna Mohan 31 Mar '09

31 Mar '09

krishna Mohan wrote:> I wrote my PAM module (to authenticate a user against Sun AM) for> freeRadius and that part is working fine. Now, the PAM module will> receive few response attributes from the authenticating application for> each user, for whom the authentication is success.> > How to receive this kind of application specific attributes and how to> insert them in Radius-Accept packet? This is an urgent requirement for me.> The server has an API for creating attributes. Use that.>> Alan DeKok.Where is the API available? Pls provide any resource/link?I receive an xml with authorization information from the authenticating app in response to a successful authentication.My PAM module should read that xml and get the required authorization information and pass it in ACCESS-ACCEPT.Thanks in advance.Sri

2 1

GIT Log for 2009-03-29 23:33 GMT
by aland＠deployingradius.com 31 Mar '09

31 Mar '09

commit aa40f81af40a5f5b46ced1351692a8fcd738f862 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Mar 29 13:52:15 2009 -0700 Add support for !* filtering. All attributes will be deleted man/man5/unlang.5 | 30 +++++++++++++----------------- src/main/evaluate.c | 8 ++++++++ 2 files changed, 21 insertions(+), 17 deletions(-)

3 6

Re: pam -- how to handle reply attributes
by Alan DeKok 31 Mar '09

31 Mar '09

krishna Mohan wrote: > I wrote my PAM module (to authenticate a user against Sun AM) for > freeRadius and that part is working fine. Now, the PAM module will > receive few response attributes from the authenticating application for > each user, for whom the authentication is success. > > How to receive this kind of application specific attributes and how to > insert them in Radius-Accept packet? This is an urgent requirement for me. The server has an API for creating attributes. Use that. Alan DeKok.

1 0

freeRadius PAM -- handling reply attributes
by krishna Mohan 30 Mar '09

30 Mar '09

Hi,      I wrote my PAM module (to authenticate a user against Sun AM) for freeRadius and that part is working fine. Now, the PAM module will receive few response attributes from the authenticating application for each user, for whom the authentication is success.How to receive this kind of application specific attributes and how to insert them in Radius-Accept packet? This is an urgent requirement for me.Appreciating your help.Thanks,Sri.

1 0