- Freeradius-Devel - lists.freeradius.org

GIT Log for 2008-12-13 00:33 GMT
by aland＠deployingradius.com 13 Dec '08

13 Dec '08

commit 2444f601448f816f5c9fe9637c593064e107af9b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 12 19:01:34 2008 +0100 Fix evaluation parser It would previously *not* evaluate things properly if there were nested conditions, because the logic was broken and weird. This is simplified, with the result that it's easy to understand, and works correctly. Files changed: src/main/evaluate.c | 191 +++++++++++++++++++++++++++------------------------ 1 files changed, 100 insertions(+), 91 deletions(-) ====================================================================== commit c5cd441ef680e3a4c04b2410181d7cce0b3dd564 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 12 15:50:59 2008 +0100 Minor updates Files changed: share/dictionary.hp | 6 +----- 1 files changed, 1 insertions(+), 5 deletions(-) ====================================================================== commit 09463cdf3b99fb0c10a02af7c8409a72c7efecf1 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 12 09:36:30 2008 +0100 Define SUN_LEN for systems that don't have it Files changed: src/main/radmin.c | 3 --- 1 files changed, 0 insertions(+), 3 deletions(-) ====================================================================== commit 024ab6d3aaf5b90f23e18621f81cb1e7588bdac9 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 12 15:56:15 2008 +0100 Manually pull changes from 2_1_x branch e917f3cfd0b6adc073b1f22c57d9ac340ffbf11c 4d1358466a3ff8c83e5408288c22e296f2a8eb80 Files changed: src/modules/frs_control/frs_control.c | 24 ++++++------------------ 1 files changed, 6 insertions(+), 18 deletions(-) ====================================================================== commit ccd7b9786a8d5c4ac92f35db78702c2de6280d54 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 11 15:26:58 2008 +0100 Permit multiple "-e" Files changed: src/main/radmin.c | 32 +++++++++----------------------- 1 files changed, 9 insertions(+), 23 deletions(-) ====================================================================== commit e44d30b71f36249d8fccf1743a34d7cce4afb523 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 11 15:21:11 2008 +0100 Corrected typo Files changed: src/main/event.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 51f81e9341bae87f9d8adc116167526408f53b93 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 11 12:18:49 2008 +0100 Fix minor bug. Check correct ptr Files changed: src/main/event.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ======================================================================

1 0

Understanding freeradius
by RODOLPHE ANTONIO DE ARAUJO MARQUES 12 Dec '08

12 Dec '08

Hi, I'm currently developing a new 802.11 authentication and association protocol to achieve fast handovers in 802.11 infrastructured networks. I need to add a new module to freeradius to manage new keys that will be derived during the initial 802.1X authentication. What I need from freeradius is to add new attributes in the Access-Request and Access-Accept messages and save some data in a new structure for each user. I've been looking at the code, and reading the wiki trying to understand how freeradius work, but with no success. Can anyone help me getting started by pointing some functions where the freeradius reads and constructs messages, sends and receive and how it choses the authentication method, or any other useful information that may help me achieve my goal? I'm currently using freeradius-server-2.1.1 Thank you Rodolphe Marques

2 2

GIT Log for 2008-12-11 00:33 GMT
by aland＠deployingradius.com 11 Dec '08

11 Dec '08

commit 26ceaca46da3420b3233217ddcd1c4dd47491080 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Dec 10 18:33:59 2008 +0100 Fix stupid bug. Files changed: src/modules/rlm_eap/types/rlm_eap_peap/peap.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit a9f10aa805665b9e6af082b418910a693857864a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Dec 5 07:56:16 2008 +0100 TTLSv0 RFC Files changed: doc/rfc/rfc5281.txt | 2859 --------------------------------------------------- 1 files changed, 0 insertions(+), 2859 deletions(-) ======================================================================

1 0

GIT Log for 2008-12-05 00:33 GMT
by aland＠deployingradius.com 05 Dec '08

05 Dec '08

commit 1afbd314d0207a04606d115607522b3bb45ebd16 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Dec 3 17:29:52 2008 +0100 Allow all ports to be used. Closes #559 Files changed: src/main/listen.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit fcfcb6f657d5b561ce2b21702bb365e2b351d75f Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Dec 3 17:27:03 2008 +0100 Corrected VSA types. Closes #617 Files changed: share/dictionary.alteon | 12 ++++++------ 1 files changed, 6 insertions(+), 6 deletions(-) ====================================================================== commit 47448a81dad9e3b0d6517d98eec12da61331b7ec Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 4 10:00:03 2008 +0100 Added Cisco TFTP server option 150. Closes #618 Files changed: share/dictionary.dhcp | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) ======================================================================

1 0

Looking for freelance help to develop freeradius module.
by Joshua Lim 03 Dec '08

03 Dec '08

Hi, i'm looking for freelance help to develop a freeradius module. More info can be found here: http://www.rentacoder.com/RentACoder/misc/BidRequests/ShowBidRequest.asp?ln… Thks. Rgds, Joshua _________________________________________________________________ Manage multiple email accounts with Windows Live Mail effortlessly. http://www.get.live.com/wl/all

1 0

GIT Log for 2008-12-03 00:33 GMT
by aland＠deployingradius.com 03 Dec '08

03 Dec '08

commit 2fb879425040a0ace58cb44dee16cc9a5f66a08e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 2 10:26:29 2008 +0100 Note RedHat build FAQ Files changed: redhat/README | 10 ---------- 1 files changed, 0 insertions(+), 10 deletions(-) ====================================================================== commit 57d9720a48961b55027d50745c74cb23938f1523 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 2 10:11:38 2008 +0100 Fix for CVE-2008-4474 Dialup-admin uses tmp files insecurely. Since it isn't running in a default install, this shouldn't be a major problem. Patch from bug #605 Files changed: dialup_admin/bin/clean_radacct | 14 +++++++------- dialup_admin/bin/log_badlogins | 4 +--- dialup_admin/bin/monthly_tot_stats | 18 +++++++++--------- dialup_admin/bin/tot_stats | 18 +++++++++--------- dialup_admin/bin/truncate_radacct | 16 ++++++++-------- 5 files changed, 34 insertions(+), 36 deletions(-) ====================================================================== commit 1e85251f1014c21f3f2d7525aa8773ee925ef2a8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 2 09:00:52 2008 +0100 Don't leak memory on error conditions. Closes Coverity #74. The program exits anyways on error conditions, but cleaning up is usually good practice. Files changed: src/main/radclient.c | 11 ++++------- 1 files changed, 4 insertions(+), 7 deletions(-) ====================================================================== commit 80ec88fdd77bc419b1185ad8a9c3f7c7d0be4cfe Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 2 08:56:54 2008 +0100 Simplify handling of structs. This closes Coverity #73. Rather than fixing the problem of leaked memory, we avoid it completely by avoiding practices that require complex code to avoid leaking memory. Files changed: src/main/radclient.c | 68 ++++++++++++++++++++++++++++--------------------- 1 files changed, 39 insertions(+), 29 deletions(-) ======================================================================

1 0

Issue with keep server of radius on
by yiyongyun 02 Dec '08

02 Dec '08

When I use "radiusd -X" command in TeraTerm on remote pc to start up the server of radius, If I keep the TeraTerm openning, the radius server can work well, it means that the client can receive response of request well. But if I close the TeraTerm, then the client can not receive response of request any longer. How can I solve this problem or how can I keep the radius server on whenever the TeraTerm is openning or closing.

3 2

GIT Log for 2008-12-02 00:33 GMT
by aland＠deployingradius.com 02 Dec '08

02 Dec '08

commit b74f503ae851e1448119d972bf499cf1bd97dc04 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 16:10:51 2008 +0100 Die if we failed to allocate memory Closes Coverity #63 We don't need to check for "cs->section_tree" twice. Just check for it once, and if we can't allocate it, die. Checking a second time is pointless. Files changed: src/main/conffile.c | 8 +++----- 1 files changed, 3 insertions(+), 5 deletions(-) ====================================================================== commit 0941ba865da2a3a0bdc3355d2f5d1c1847e3f468 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 16:08:09 2008 +0100 "name" cannot be NULL If it's NULL, we can't use it at all. The previous code used it if it was NULL... Closes Coverity #64 Files changed: src/main/conffile.c | 4 +--- 1 files changed, 1 insertions(+), 3 deletions(-) ====================================================================== commit 7cc91bd8c1f4bbf07cfa3fd7f928ad72b7e36e53 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 16:02:15 2008 +0100 log_file may be NULL Closes Coverity #65 Files changed: src/main/log.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 63b91380d6589b016cbf06ff61e63aa0d970f29e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 15:54:01 2008 +0100 Request may be NULL Closes Coverity #66 Files changed: src/main/log.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 289fa1f9aa6902f5e2ef693bb8486164c27c4565 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 14:44:25 2008 +0100 Set "found" to first server. Closes Coverity #67 Files changed: src/main/realms.c | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) ====================================================================== commit c862da5788218a9ebbfa8858f87bfd7da9627caa Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 14:40:00 2008 +0100 secret is NULL for LOCAL realms. Fixes Coverity #68 Files changed: src/main/realms.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 751a09fc7c980940d4776aa8576dcc31c2f54c51 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 14:36:54 2008 +0100 virtual_server can't be NULL If we see "virtual_server = " in a home_server_pool, it's an error. If you want to refer to the default virtual server, don't include a virtual_server configuration entry. Files changed: src/main/realms.c | 9 ++------- 1 files changed, 2 insertions(+), 7 deletions(-) ====================================================================== commit d4ed81e9dedff42ec96d1191ec4cb5e8070af511 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 13:54:35 2008 +0100 One more check for NULL. Closes Coverity #80. Not that we think it's likely... Files changed: src/modules/frs_detail/frs_detail.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit c09ee1fcde0c9fc2df1d79deb02a1cba83d02822 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 13:19:29 2008 +0100 More memory initialization Closes Coverity #83 Files changed: src/lib/misc.c | 2 -- 1 files changed, 0 insertions(+), 2 deletions(-) ====================================================================== commit a6e4ea36bc10ec99d1e85803ef2423179d6a3821 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:50:29 2008 +0100 free structure on error. Closes Coverity #76 Files changed: src/main/listen.c | 3 +-- 1 files changed, 1 insertions(+), 2 deletions(-) ====================================================================== commit 232719a6f7a3744dae1ddd0972f2895ac61c2dd1 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:47:31 2008 +0100 Free fake on unknown packet. This fixes Coverity #77. Files changed: src/main/event.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-) ====================================================================== commit 42cf73caa0e904e045c579f4da9a330d222e4251 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:45:49 2008 +0100 Don't allocate structure twice. This fixes Coverity #78 Files changed: src/modules/rlm_policy/parse.c | 12 ++++++++---- 1 files changed, 8 insertions(+), 4 deletions(-) ====================================================================== commit 0493015e4194fcf94ebeffd8466ca323d859a018 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:40:24 2008 +0100 Ensure there's room for a trailing 0 This address Coverity #70. I don't think it will ever happen due to the way the strings are being handled, but it never hurts to be safe... Files changed: src/main/xlat.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ====================================================================== commit e1605352ffddc90049fb0d1016508640208f547d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:37:21 2008 +0100 Assert that comp < count, not <= count This fixes Coverity #72 Files changed: src/main/modules.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 0290d7c35d43632af84d3c2706656b4f46506f11 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:33:41 2008 +0100 De-reference ptr after checking it. This fixes Coverity #79 Files changed: src/main/evaluate.c | 3 +-- 1 files changed, 1 insertions(+), 2 deletions(-) ====================================================================== commit c608d0214d614060dd7eb3bc1943daa4c2767245 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 1 10:27:24 2008 +0100 Initialize stack.start[0]. This should address Coverity issue #104 Files changed: src/main/modcall.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-) ====================================================================== commit 45baf9c4c977e791851291465c8213f978b88b07 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Nov 27 16:14:23 2008 +0100 Include socket code in modules for static builds Files changed: src/main/Makefile.in | 3 --- 1 files changed, 0 insertions(+), 3 deletions(-) ======================================================================

1 0

Issue with rlm_digest module
by malaya.kishore＠wipro.com 28 Nov '08

28 Nov '08

Hi, Greetings, I am Kishore here working in Wipro Technologies. We were testing MD5 digest with FreeRadius as Authentication Server. FreeRadius AAA is running on SUSE Linux machine. We are finding the below two problems: Problem 1: In the sanity check of rlm_digest module, we find that the attrlen attribute is not incremented correctly. FreeRadius version 2.1.1 Source: freeradius-server-2.1.1\src\modules\rlm_digest\rlm_digest.c Line: 138 Code: attrlen = p[1]; /* stupid VSA format */ Solution: attrlen = p[1]+2; /* stupid VSA format */ Problem 2: As per the FreeRadius site, FreeRadius support RFC: 4590 and 5090. But while testing for MD5 digest, FreeRadius server not sending any Digest-Challenge (Access-Challenge). Can someone please clarify the above issues. Thank you. Kind Regards, Kishore Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com

2 6

GIT Log for 2008-11-28 00:33 GMT
by aland＠deployingradius.com 28 Nov '08

28 Nov '08

commit 8c9700aed39f5f2dc07ec2cea0865acdea66c109 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Nov 27 12:07:18 2008 +0100 Permanently switch UID only if we succeed in doing setuid mainconfig.c does setuid to an unpriviledged user (temporarily). We do setuid(0) back to bind to the sockets. But before running anything else, we permanently switch uid's back to the unpriviledged user. But only if the first suid was done Files changed: src/main/event.c | 9 ++------- src/main/mainconfig.c | 3 +-- 2 files changed, 3 insertions(+), 9 deletions(-) ====================================================================== commit 74f3b146b474c58ccf303c54c028f0517c1f4d80 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Nov 27 10:54:26 2008 +0100 Show module name, not listen type Files changed: src/main/listen.c | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) ======================================================================

1 0