- Freeradius-Devel - lists.freeradius.org

Additional attributes for share/dictionary.hp
by Mike Stroyan 31 Aug '08

31 Aug '08

I am not sure if this is the right forum for contributing config file information. If it isn't, I would appreciate a pointer to a more correct method. I have a couple more attributes that should be in share/dictionary.hp. These are used by several of the switches that fit in HP BladeSystems. They are privilege levels similar to ones in dictionary.alteon. But they are values for "Service-Type" rather than a vendor-specific attribute. An example use in a "users" file would look like- -------------------------------------------- Admin1 Cleartext-Password := "secret" Service-Type = Administrative-User Oper1 Cleartext-Password := "secret" Service-Type = HP-Oper User1 Cleartext-Password := "secret" Service-Type = HP-User -------------------------------------------- Here is a diff from the current git head- diff --git a/share/dictionary.hp b/share/dictionary.hp index c8b178a..ab466d6 100644 --- a/share/dictionary.hp +++ b/share/dictionary.hp @@ -51,4 +51,8 @@ VALUE HP-Management-Protocol HTTPS 6 #VALUE HP-Management-Role SystemAdministrator 18 #VALUE HP-Management-Role WebUserAdminstrator 19 +# privilege attributes for HP-GbE2c, HP 1:10Gb, and HP 10Gb Ethernet Blade Switches +VALUE Service-Type HP-Oper 252 +VALUE Service-Type HP-User 255 + END-VENDOR HP -- Mike Stroyan, mike.stroyan(a)hp.com

2 1

(no subject)
by Terdik Sándor 31 Aug '08

31 Aug '08

Hi! I need some help. I would like to configure EAP-TLS my freeradius server. I have install the OpenSSL succesfully I think but when I run the radiusd -X command the result is: rlm_eap: Ignoring EAP-Type/tls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/ttls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support. Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } rlm_eap: No such sub-type for default EAP type tls /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. } When I installed the freeradius the ./configure, make and make install command didn't show any warning that the openssl didn't install. Please help! Thanks! _______________________________________ Micsoda akció! Több mint 500 könyv 50% kedvezménnyel az Alexandra Könyváruházakban 2008. augusztus 15. és szeptember 30. között! Nehogy lemaradjon! http://ad.adverticum.net/b/cl,1,6022,281996,342125/click.prm

2 1

GIT Log for 2008-08-29 23:33 GMT
by aland＠deployingradius.com 29 Aug '08

29 Aug '08

commit 413e517b07143cbd2af3d3dc96e79f12da81a3d7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Aug 29 20:41:40 2008 +0200 Use functions from libfreeradius Otherwise radeapclient won't build, because we don't (yet) have a libfreeradius-server Files changed: src/modules/rlm_eap/libeap/eap_tls.c | 6 ++++-- 1 files changed, 4 insertions(+), 2 deletions(-) ====================================================================== commit 1e888c85edcd0582e3a409b75c4ed1339f380fef Author: Alan T. DeKok <aland(a)freeradius.org> Date: Fri Aug 29 14:53:26 2008 +0200 Mark session as resumed Files changed: share/dictionary.freeradius.internal | 5 ----- src/modules/rlm_eap/libeap/eap_tls.c | 6 ------ 2 files changed, 0 insertions(+), 11 deletions(-) ====================================================================== commit b4e026a0ae324402afd960f0bea2972eb856d792 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Aug 28 17:37:51 2008 +0200 As posted to the list. Files changed: share/dictionary.hp | 7 +------ 1 files changed, 1 insertions(+), 6 deletions(-) ====================================================================== commit 97eaa4fca8c3ec8a593a81c4172d04ae255c7c86 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Aug 28 16:14:33 2008 +0200 Check return code of regcomp. Closes #583 Files changed: src/main/valuepair.c | 11 ++--------- 1 files changed, 2 insertions(+), 9 deletions(-) ======================================================================

1 0

GIT Log for 2008-08-28 23:33 GMT
by aland＠deployingradius.com 28 Aug '08

28 Aug '08

commit c4232ceb380ce58299ec896aa3691a9a52721aa8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Aug 28 14:28:35 2008 +0200 Corrected typo. Files changed: src/lib/log.c | 20 +++++++------------- 1 files changed, 7 insertions(+), 13 deletions(-) ====================================================================== commit 1bad12768f07d33d2f5f360f290d828fcf564b11 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Aug 27 16:40:36 2008 +0200 Fix compiler warnings Files changed: .../rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c | 14 ++++++-------- 1 files changed, 6 insertions(+), 8 deletions(-) ====================================================================== commit 067ab370e4fa74c38e460e982742266b200571d9 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Aug 27 16:37:58 2008 +0200 Load CA's only if CA file or CA path are set Closes bug #477 Files changed: .../rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c | 10 ++++------ 1 files changed, 4 insertions(+), 6 deletions(-) ====================================================================== commit 3c480813ff548864032f7e827b545f18879099a0 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Aug 27 10:59:04 2008 +0200 Add sample inner-eap method Files changed: raddb/modules/inner-eap | 161 ----------------------------------------------- 1 files changed, 0 insertions(+), 161 deletions(-) ====================================================================== commit db05fd6a6b1b7056038f05a2d6ee3bf5abbf2204 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Aug 27 03:07:22 2008 +0200 Added EAP RFC Files changed: doc/rfc/rfc2284.txt | 843 --------------------------------------------------- 1 files changed, 0 insertions(+), 843 deletions(-) ======================================================================

1 0

Release of 2.1.0?
by Alan DeKok 28 Aug '08

28 Aug '08

There have been a lot of changes since 2.0.5, and a few months. I think the changes are enough to warrant calling this 2.1.0, rather than 2.0.5. Objections? Has anyone tried the new session resumption code? Alan DeKok.

2 3

EAP-FAST experiment
by William Hegardt 28 Aug '08

28 Aug '08

I'm using FR 2.0.5 on Linux. I've built it with experimental-modules in hopes of getting eap-fast to work. I believe this uses the eap2 configuration block in experimental.conf. I also see the comments that read: # This module requires the libeap.so file from the hostap # software (http://hostap.epitest.fi/hostapd/) It has been # tested on the development version of hostapd (0.6.1) ONLY. # # In order to use it, you MUST build a "libeap.so" in hostapd, # which is not done by default. # # You MUST also edit the file: src/modules/rlm_eap2/Makefile # to point to the location of the hostap include files. # # This module CANNOT be used in the same way as the current # FreeRADIUS "eap" module. There is NO way to look inside of # a tunneled request. There is NO way to proxy a tunneled # request. There is NO way to even look at the user name inside # of the tunneled request. There is NO way to control the # choice of EAP types inside of the tunnel. You MUST force # the server to choose "eap2" for authentication, because this # module has no "authorize" section. After I follow these instructions, is there anything else necessary to get eap-fast working? Do I need a fast{} sub-section inside of the eap2{} section? How do I force the server to choose eap2 for authentication as mentioned above? Thanks

2 1

basics
by Terdik Sándor 28 Aug '08

28 Aug '08

Hi! I have read all documentation files in the freeradius directory but understanding it first is very hard for me. Fisrt of all I need some help about the following topics: - I succeed to integrate the new module to the radiusd by right of example module but I don't understand how determine radiusd which module have to load when receive a radius packet? -For example the situation is that I want to write a new EAP-Types(i.e EAP-DESIGN which similar to EAP-TLS over lan) to eap-design.c file in EAP/types directory.Afther that I set this new eap types in the eap.conf file.First of all I would like to reach that if the server get a radius packet which contain some information of EAP-DESIGN the server load my own module and send some response for the client.Which basics functions do I make it? Thanks ______________________________________________________________________ Digitális fényképezőgépek akár 5000 Ft ajándék fotókidolgozással a FotoMarket Online Fotóáruházban! - www.fotomarket.hu VÁSÁROLNA? SEGÍTÜNK! Igényeljen hitelkártyát online és élvezze Ön is a vásárlás szabadságát!

2 1

Freeradius-client some application development issues
by Geoff Mitchell 27 Aug '08

27 Aug '08

I have been attempting to develop a Radius method of authentication for courier-imap. During this time I have come across several issues, and at the moment I am actually using the radiusclient-ng library, which is the basis for the freeradius-client library. The reason for having to use this older version of the library is because of seg faults caused by the use of the gethostbyname_r function, and the result set it returns. Now I believe in what freeradius.org does, and I am a big fan of the server, so I want to try and help clean this up to improve the library. I am using Debian etch, and these problems could be specific to that distro. However, to start off the function gethostbyname_r is setting the returned h_addr_list, within the hostbuf, to the pointer tmphostbuf which the client library malloc's, and then free's within rc_gethostbyname. This causes a seg fault by the fact that the memory space has now been freed, and then accessed. There also seems to be another problem along these lines, because even removing the temphostbuf free results in a seg fault when the data is accessed in the function that called rc_gethostbyname, but not when accessed with the function. I am still trying to track down the cause of this second seg fault, hence why I have not submitted a patch. Another issue I have come across is the handling of the config file. Now I would like to use one config file for application specific, and library, values. This is not possible purely because of the way that find_options, which is called by rc_read_config, uses a hard coded value "NUM_OPTIONS". Would you accept this value being moved into the rc_handle structure. This would then allow for the config_options to be expanded by the application, and thus a single config would work. At the moment expanding the options involves modifying the options.h and recompiling the library, that then makes it application specific. Geoff

2 1

GIT Log for 2008-08-26 23:33 GMT
by aland＠deployingradius.com 26 Aug '08

26 Aug '08

commit e15f3b33c2b4fae4abed0eac80fe94eb82e795de Author: Stephen Gran <steve(a)lobefin.net> Date: Mon Aug 25 14:18:19 2008 +0100 Fix unsafe use of tmpfile. Signed-off-by: Stephen Gran <steve(a)lobefin.net> Files changed: dialup_admin/bin/backup_radacct | 16 ++++++++-------- 1 files changed, 8 insertions(+), 8 deletions(-) ====================================================================== commit d21c7dc8da9c638377d6095cc499c3285c5fdd64 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 26 15:27:23 2008 +0200 Check for __thread For thread-local storage. Files changed: aclocal.m4 | 12 -------- configure | 64 +-------------------------------------------- configure.in | 2 - src/include/autoconf.h.in | 3 -- 4 files changed, 1 insertions(+), 80 deletions(-) ====================================================================== commit 236126fdbd47de316e987b73d700208d902d5171 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 26 15:15:22 2008 +0200 Use thread-local storage for log messages We try to use __thread where possible... it's better. Files changed: src/lib/log.c | 78 ++++---------------------------------------------------- 1 files changed, 6 insertions(+), 72 deletions(-) ====================================================================== commit 26d104026c948c473dbed6c2c369ab2c76db5844 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 26 11:16:37 2008 +0200 fr_strerror -> fr_strerror() This is in preparation for (perhaps) making the logging functions thread-safe. Files changed: src/include/libradius.h | 2 +- src/lib/dhcp.c | 8 ++++---- src/lib/dict.c | 6 +++--- src/lib/log.c | 20 +++++++------------- src/lib/valuepair.c | 2 +- src/main/client.c | 2 +- src/main/dhcpd.c | 2 +- src/main/evaluate.c | 4 ++-- src/main/event.c | 2 +- src/main/files.c | 4 ++-- src/main/listen.c | 8 ++++---- src/main/mainconfig.c | 2 +- src/main/modcall.c | 2 +- src/main/modules.c | 2 +- src/main/radclient.c | 6 +++--- src/main/radsniff.c | 2 +- src/main/vmps.c | 4 ++-- src/modules/rlm_acct_unique/rlm_acct_unique.c | 2 +- src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c | 2 +- src/modules/rlm_eap/libeap/mppe_keys.c | 2 +- .../rlm_eap/types/rlm_eap_ikev2/rlm_eap_ikev2.c | 2 +- .../rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c | 2 +- src/modules/rlm_ldap/rlm_ldap.c | 2 +- src/modules/rlm_mschap/rlm_mschap.c | 4 ++-- src/modules/rlm_policy/evaluate.c | 2 +- src/modules/rlm_sql/rlm_sql.c | 4 ++-- src/modules/rlm_sql/sql.c | 2 +- src/modules/rlm_sql_log/rlm_sql_log.c | 2 +- 28 files changed, 49 insertions(+), 55 deletions(-) ====================================================================== commit d3e553987770e50807fd8d97a3f94da99903592c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 26 10:34:55 2008 +0200 Rename librad_* to fr_* perl -pi -e "s/librad_debug/fr_debug_flag/g;s/librad_log/fr_strerror_printf/g;s/librad_dodns/fr_dns_lookups/g;s/librad_perror/fr_perror/g;s/librad_max_attributes/fr_max_attributes/g;s/librad_safeprint/fr_print_string/g;s/librad_errstr/fr_strerror/g;" Files changed: src/include/libradius.h | 18 +- src/lib/dhcp.c | 28 ++-- src/lib/dict.c | 172 ++++++++++---------- src/lib/filters.c | 20 ++-- src/lib/log.c | 16 +- src/lib/misc.c | 14 +- src/lib/packet.c | 8 +- src/lib/print.c | 8 +- src/lib/radius.c | 92 ++++++------ src/lib/valuepair.c | 100 ++++++------ src/lib/vqp.c | 34 ++-- src/main/auth.c | 4 +- src/main/client.c | 2 +- src/main/conffile.c | 6 +- src/main/dhcpd.c | 2 +- src/main/evaluate.c | 4 +- src/main/event.c | 2 +- src/main/files.c | 4 +- src/main/listen.c | 8 +- src/main/mainconfig.c | 8 +- src/main/modcall.c | 2 +- src/main/modules.c | 2 +- src/main/radclient.c | 24 ++-- src/main/radsniff.c | 8 +- src/main/radwho.c | 6 +- src/main/vmps.c | 4 +- src/modules/rlm_acct_unique/rlm_acct_unique.c | 2 +- src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c | 2 +- src/modules/rlm_dbm/rlm_dbm.c | 2 +- src/modules/rlm_dbm/rlm_dbm_parser.c | 12 +- src/modules/rlm_eap/libeap/mppe_keys.c | 2 +- src/modules/rlm_eap/radeapclient.c | 22 ++-- .../rlm_eap/types/rlm_eap_ikev2/rlm_eap_ikev2.c | 2 +- .../rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c | 2 +- src/modules/rlm_ldap/rlm_ldap.c | 2 +- src/modules/rlm_mschap/rlm_mschap.c | 4 +- src/modules/rlm_policy/evaluate.c | 2 +- src/modules/rlm_sql/rlm_sql.c | 4 +- src/modules/rlm_sql/sql.c | 2 +- src/modules/rlm_sql_log/rlm_sql_log.c | 2 +- 40 files changed, 329 insertions(+), 329 deletions(-) ====================================================================== commit 814b3df8b3532e76246d6bef8d682d57a452e81c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Aug 26 10:25:34 2008 +0200 Note more changes Files changed: doc/ChangeLog | 26 +++++++++----------------- 1 files changed, 9 insertions(+), 17 deletions(-) ====================================================================== commit d23959cdeef37d48803202864876fc21459faf50 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Aug 25 23:28:49 2008 +0200 Complain on references to things like "prefix =" i.e. check for cp->value == NULL, rather than core dumping Files changed: src/main/conffile.c | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) ====================================================================== commit 386cb6348e54c40f3684f4b25d2e3bcab320d160 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Aug 25 11:26:42 2008 +0200 Left this out earlier. Files changed: raddb/modules/wimax | 4 ---- 1 files changed, 0 insertions(+), 4 deletions(-) ======================================================================

1 0

tempfile bug in dialupadmin script
by Stephen Gran 26 Aug '08

26 Aug '08

Hi all, We got a bug report in Debian about an unsafe use of a hard coded tempfile in one of the dialupadmin scripts, so I thought I'd pass on our fix. http://git.debian.org/?p=collab-maint/freeradius.git;a=commitdiff;h=e741df7… Cheers, -- -------------------------------------------------------------------------- | Stephen Gran | Death, when unnecessary, is a tragic | | steve(a)lobefin.net | thing. -- Flint, "Requiem for | | http://www.lobefin.net/~steve | Methuselah", stardate 5843.7 | --------------------------------------------------------------------------

2 3