- Freeradius-Devel - lists.freeradius.org

GIT Log for 2009-01-05 00:33 GMT
by aland＠deployingradius.com 05 Jan '09

05 Jan '09

commit fb941e6bbebe0a2ea39a197f27bab9feba389687 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Jan 1 10:31:23 2009 +0100 Added "make cert" commands to bootstrap file This helps it work when people don't have "make" installed raddb/certs/bootstrap | 31 +++++++++++++++++++++++++++++++ 1 files changed, 31 insertions(+), 0 deletions(-)

1 0

GIT Log for 2009-01-03 00:33 GMT
by aland＠deployingradius.com 03 Jan '09

03 Jan '09

commit 6b364fbbf1e6f535b90aa0d90280da9480d1fb3a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jan 2 19:43:53 2009 +0100 Corrected typo Files changed: src/main/event.c | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) ====================================================================== commit b557db5fe35af220c1808978d64d5df2354fbae5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Jan 2 16:44:24 2009 +0100 Enable the server to originate CoA-Request && Disconnect-Request This is a fairly large change in the server, but is protected by WITH_COA, so you can build without it, if you want to do that. Conflicts: src/include/radiusd.h src/main/listen.c Files changed: man/man5/unlang.5 | 17 +- raddb/proxy.conf | 42 -- raddb/sites-available/originate-coa | 190 --------- share/dictionary.freeradius.internal | 13 - src/include/radius.h | 3 - src/include/radiusd.h | 18 - src/include/realms.h | 13 - src/main/client.c | 23 -- src/main/evaluate.c | 89 +---- src/main/event.c | 719 +++++----------------------------- src/main/mainconfig.c | 8 +- src/main/modcall.c | 11 +- src/main/realms.c | 156 ++------ src/main/util.c | 28 -- src/modules/frs_proxy/frs_proxy.c | 52 --- 15 files changed, 153 insertions(+), 1229 deletions(-) ======================================================================

1 0

Re: 2.1.3 and Solaris 9 compile errors
by Anatoly S. Zimin 25 Dec '08

25 Dec '08

On 10:32 Thu 25 Dec , Anders Holm wrote: > Anatoly S. Zimin wrote: > >> Greg Fuller wrote: > >> [snip] > >> $ cd /usr/local/src/freeradius-server-2.1.3/ > >> $ rm -rf src/modules/rlm_perl > >> > > This is not solution. > > I am know how resolve this problem. > > If anyone need this. Please ask me. > > May be this solution need for developers. > > I am long time useing FreeRadius on Solaris. > > And I am know how to do this. > > > > Post it to the list, and document it in the Wiki. Someone is bound to > need a real solution to this problem. > > //anders OK. How to build rlm_perl module on Solaris 9/10. Work on FreeRadius 1.x and 2.x Set shell environment like LDFLAGS, LD_OPTIONS, and others. # export PATH=$PATH:/usr/sbin:/usr/bin:/opt/csw/bin:/usr/sbin:/usr/bin:/usr/dt/bin:/usr/openwin/bin:/usr/ccs/bin:/usr/local/bin:/usr/sfw/bin # export LDFLAGS='-L/usr/sfw/lib -R/usr/sfw/lib -L/lib -R/lib' # export LD_OPTIONS='-L/usr/sfw/lib -R/usr/sfw/lib -L/lib -R/lib' # export CFLAGS='-I/usr/include -I/usr/sfw/include -I/usr/include/kerberosv5 -I/zones/src/freeradius-server-2.1.3/libltdl' # /usr/sfw/bin/gtar -xvjf freeradius-* # cd freeradius-* # patch < solaris.rlm_perl.patch File to patch: src/modules/rlm_perl/configure done. # ./configure --prefix=/path/to/install --with-openssl-includes=/usr/sfw/include --with-openssl-libraries=/usr/sfw/lib # gmake # gmake install P.S. patch file in attach. Where I got it? I am read this in manual for gcc! :) ######################## -mimpure-text -mimpure-text, used in addition to -shared, tells the compiler to not pass -z text to the linker when linking a shared object. Using this option, you can link position-dependent code into a shared object. -mimpure-text suppresses the ``relocations remain against allocat- able but non-writable sections'' linker error message. However, the necessary relocations will trigger copy-on-write, and the shared object is not actually shared across processes. Instead of using -mimpure-text, you should compile all source code with -fpic or -fPIC. This option is only available on SunOS and Solaris. ######################## And please somebody put this on freeradius Wiki. Or include in main branch of freeradius. Thanks a lot. -- Anatoly S. Zimin

1 0

How to run 2.3.1 under Cygwin (Was: How to compile 2.1.3 under Cygwin)
by Joachim Altenhein 22 Dec '08

22 Dec '08

Hello, please delete me last mail. $ ./configure --without-rlm_perl --enable-shared=no works for vmps. eap seems to have some problems (initialize random...) but i will look in it later. Sorry for the noice Achim

1 0

How to compile 2.1.3 under Cygwin
by Joachim Altenhein 22 Dec '08

22 Dec '08

Hello, i moved this topic from the users to the developer list. Sorry for this cross posting. Here the original question: i'm trying to compile Freeradius 2.1.3 under Cygwin. I used './configure --without-rlm_perl' and './configure --without-rlm_perl --without-snmp --enable-static' which compile successfully. I'm using a fresh cygwin installation and 'make install' works great. But when i start 'radiusd -X' i always get: ... realm LOCAL { } radiusd: #### Instantiating modules #### instantiate { /usr/local/etc/raddb/modules/exec[24]: Failed to link to module 'rlm_exec': No such file or directory Errors initializing modules I do have the files rlm_exec-2.1.3.la, rlm_exec.a and rlm_exec.la in /usr/local/lib. Note, that the problem is not specific to rlm_exec. Same is true e.g. for rlm_expr and i think my installation is not able to load any rlm_*file. Shouldn't be there some typ of .dll/.so? Could anybody please tell my who to make freeradius for windows/cygwin. That was the original posting. Now i know more: The problem is releted to the following libtool error: *** Warning: This system can not link to static lib archive ../../libeap/libfreeradius-eap.la. *** I have the capability to make that library automatically link in when *** you link to this library. But I can only do this if you have a *** shared version of the library, which you do not appear to have. *** But as you try to build a module library, libtool will still create *** a static module, that should work as long as the dlopening application *** is linked with the -dlopen flag to resolve symbols at runtime. libtool: link: warning: undefined symbols not allowed in i686-pc-cygwin shared libraries libtool never builds dll files under cygwin if -no-undefined is not specified on the command line. I change a line in src/lib (LINK_MODE = -export-dynamic -no-undefined) and got a dll. Than i have done the same on rules.mak and here the make failed: /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/libtool --mode=link gcc -release 2.1.3 \ -no-undefined -module -export-dynamic -o rlm_acctlog.la \ -rpath /usr/local/lib rlm_acctlog.lo rlm_acctlog.c /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/src/lib/libfreeradius-radius.la -lws2_32 -lpthread gcc -shared .libs/rlm_acctlog.o /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/src/lib/.libs/libfreeradius-radius.dll.a -lws2_32 -lpthread -o .libs/rlm _acctlog-2-1-3.dll -Wl,--enable-auto-image-base -Xlinker --out-implib -Xlinker .libs/rlm_acctlog.dll.a .libs/rlm_acctlog.o: In function `acctlog_instantiate': /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/src/modules/rlm_acctlog/rlm_acctlog.c:63: undefined reference to `_rad_malloc' /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/src/modules/rlm_acctlog/rlm_acctlog.c:66: undefined reference to `_cf_section_parse' .libs/rlm_acctlog.o: In function `do_acctlog_acct': /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/src/modules/rlm_acctlog/rlm_acctlog.c:110: undefined reference to `_radius_xlat' /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/src/modules/rlm_acctlog/rlm_acctlog.c:116: undefined reference to `_radlog' /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/src/modules/rlm_acctlog/rlm_acctlog.c:91: undefined reference to `_radius_xlat' /cygdrive/g/Daten/freeradius/freeradius-server-2.1.3/src/modules/rlm_acctlog/rlm_acctlog.c:92: undefined reference to `_radlog' Creating library file: .libs/rlm_acctlog.dll.a collect2: ld returned 1 exit status make[6]: *** [rlm_acctlog.la] Error 1 To fix this i would have to put all the functions undefined here in a dll. This is far beyond me knowledge of freeradius and sigificantly exceeds me time frame for implementing a Radius server :-( Any further suggestions? Can i link the rlm* modules statically to radiusd? Thanks for any help. Joachim Altenhein

1 1

GIT Log for 2008-12-19 00:33 GMT
by aland＠deployingradius.com 19 Dec '08

19 Dec '08

commit 9434abb910292e431b635235bdf591dc99d02f9c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 18 10:38:31 2008 +0100 Added WiMAX-MN-NAI and other server-side attributes These were inexplicably left out. Files changed: share/dictionary.freeradius.internal | 14 +------------- src/modules/rlm_wimax/rlm_wimax.c | 8 ++++---- 2 files changed, 5 insertions(+), 17 deletions(-) ====================================================================== commit 20ab22de7a5735f155118096b19c7ff0b68ec9be Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 16 16:24:25 2008 +0100 Simplified detail file polling Moved loop over listeners to using the event API. This removes one function, and simplifies the code. Files changed: src/main/event.c | 104 +++++++++++++++++++++++++++--------------------------- 1 files changed, 52 insertions(+), 52 deletions(-) ======================================================================

1 0

rlm_perl sending parameter twice
by Николай 16 Dec '08

16 Dec '08

Hello all. I have trouble, need send parameter 'Filter-Id' twice (Mikrotik .in .out rules), but perl hash can contain only one key, how resolve this problem? -- Best regards, Nickolay mailto:snake@vip.su

2 1

GIT Log for 2008-12-16 00:33 GMT
by aland＠deployingradius.com 16 Dec '08

16 Dec '08

commit f24628fa5cad143d1d75fa4c6b2a2a6eca4c30b2 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 15 11:57:54 2008 +0100 Removed dead code. Closes Coverity #2 Files changed: src/modules/rlm_sqlcounter/rlm_sqlcounter.c | 12 +++++++++++- 1 files changed, 11 insertions(+), 1 deletions(-) ====================================================================== commit de3e94569655e88849b7507556596084ce3d4a3a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 15 11:55:08 2008 +0100 If input pairs is NULL, return NOOP Closes Coverity #6 Files changed: src/modules/rlm_exec/rlm_exec.c | 8 +------- 1 files changed, 1 insertions(+), 7 deletions(-) ====================================================================== commit 8647048ec7c08e659ecd84074f9ba1bf31a76e25 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 15 11:49:09 2008 +0100 Free memory on error && exit. Closes Coverity #16 Files changed: src/modules/rlm_eap/radeapclient.c | 10 ++++------ 1 files changed, 4 insertions(+), 6 deletions(-) ====================================================================== commit 85b43cc791ba875b73b75916f33571bf8cb4be40 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 15 11:43:15 2008 +0100 Removed dead code. Closes Coverity #56 Files changed: src/modules/rlm_ippool/rlm_ippool_tool.c | 32 ++++++++++++++++++++++++++++++ 1 files changed, 32 insertions(+), 0 deletions(-) ====================================================================== commit e2984c15b594564250b8f6ea288800e2091ded5c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 15 11:41:51 2008 +0100 If it's not a known option, it's an error. Closes Coverity #57 Files changed: src/lib/dict.c | 22 +++++++++++++++++++++- 1 files changed, 21 insertions(+), 1 deletions(-) ====================================================================== commit bb9bf41dbb4b5bfb49bbf2a6699c1660dc4d314a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 15 11:39:31 2008 +0100 Suppress trailing NULs properly. Closes Coverity #58 Files changed: src/lib/print.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit ca2780663b6155f879a2cf4834a5135a2590a5ac Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 15 11:35:32 2008 +0100 Check tag values, too. When comparing attributes, both tag AND value have to match for the attributes to compare as equal. Closes Coverity #59 Files changed: src/main/valuepair.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 0c3891ef0b016787ea7eb7c3decc7909643d8b5f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 15 11:32:52 2008 +0100 pairparsevalue() cannot be passed a NULL value. Closes Coverity #62 Files changed: src/lib/valuepair.c | 8 +++++--- 1 files changed, 5 insertions(+), 3 deletions(-) ====================================================================== commit 32e72ac436258cf11faafe072b5ca2bb8ebbaa78 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 14 23:02:21 2008 +0100 Remove dead code Fixes Coverity #60 Files changed: src/modules/rlm_perl/rlm_perl.c | 5 +++++ 1 files changed, 5 insertions(+), 0 deletions(-) ======================================================================

1 0

GIT Log for 2008-12-15 00:33 GMT
by aland＠deployingradius.com 15 Dec '08

15 Dec '08

commit 047fe5ca74e3de2c7f32f98154d6655c0cfd7181 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 14 10:31:17 2008 +0100 Change where we do suid up/down. If the server starts as root, but it supposed to run as another user, we want to *temporarily* drop permissions very early. Then, when binding to privileged sockets, we re-gain permissions. Once all of the sockets are open, we drop them permanently. However, if we suid up for *all* sockets, then the control socket will be created as root, rather than as the unprivileged user. To fix that, we put suid up/down just around the 2 calls that need it. Files changed: src/include/radiusd.h | 3 - src/main/event.c | 78 +++++++++++++++++++++++++++------ src/main/listen.c | 22 +++------- src/main/mainconfig.c | 116 +++++++++--------------------------------------- 4 files changed, 92 insertions(+), 127 deletions(-) ====================================================================== commit 7e1186f96db5c71315f774be1e1ea781098eb38c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 14 09:48:03 2008 +0100 Work around issue in gmake. We were using PWD, and expecting it to be the current directory. But apparently that's not how gmake works. We have to call $(shell pwd) instead. Files changed: src/modules/rules.mak | 8 +------- 1 files changed, 1 insertions(+), 7 deletions(-) ======================================================================

1 0

GIT Log for 2008-12-14 00:33 GMT
by aland＠deployingradius.com 14 Dec '08

14 Dec '08

commit 84f8892e254bb81b661338d92c519a4f3c906caa Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Dec 13 14:23:34 2008 +0100 Initialize more fields of fake structure Files changed: src/main/util.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-) ====================================================================== commit 145e247dd55f360283d5b335a6fac147065ea9c5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Dec 13 09:44:51 2008 +0100 One more check for parse error If the statement didn't have a condition check, it's a parse error. e.g. () (!) (cond || ) (cond && ) Files changed: src/main/evaluate.c | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) ======================================================================

1 0