- Freeradius-Devel - lists.freeradius.org

Strange packet causing radius to crash.
by Matthew Schumacher 21 Feb '08

21 Feb '08

List, A long while ago I posted some requests to have the NAS_Idenitfier passed to the session_zap function so that stop messages created to zap sessions would have the correct NAS_Identifier. I need this because I made some accounting decisions based on this attribute. I posted in bugzilla and even wrote a patch for it: http://bugs.freeradius.org/show_bug.cgi?id=381 The patch proved to be unreliable, and now I'm trying to figure out why. Most of the time it works fine, but every now and then it crashes the radius server. In digging around trying to figure out why it doesn't work I was able to capture the Access-Request packet that crashes the server. In wireshark it shows the error, "VSA too short": User Datagram Protocol, Src Port: 1645 (1645), Dst Port: 1645 (1645) Source port: 1645 (1645) Destination port: 1645 (1645) Length: 163 Checksum: 0x96d2 [correct] Radius Protocol Code: Access-Request (1) Packet identifier: 0xa0 (160) Length: 155 Authenticator: 1CC1E84AA40F3B2168FD1A0CF4D60DFB Attribute Value Pairs AVP: l=11 t=User-Name(1): michael.s User-Name: michael.s AVP: l=18 t=User-Password(2): Encrypted User-Password: \221- AVP: l=6 t=NAS-IP-Address(4): x.x.x.x NAS-IP-Address: x.x.x.x (x.x.x.x) AVP: l=6 t=NAS-Port(5): 257 NAS-Port: 257 AVP: l=10 t=Acct-Session-Id(44): 16779082 Acct-Session-Id: 16779082 AVP: l=14 t=Vendor-Specific(26) v=UTStarcom Incorporated(429) [VSA too short] Does anyone know what the deal is with this? Reading the RFC it looks like I should get the 1 byte for the type, 1 byte for length, 4 bytes for id, then string. In the capture I have this, but there are ~ 48 bytes after this. Any help would be greatly appreciated. Oh, before I forget, platform is linux, radius is 1.1.7. Thanks, schu

2 4

Automatic report from sources (radiusd) between 19.02.2008 - 20.02.2008 GMT
by Automatic cvs log generator 20 Feb '08

20 Feb '08

CVS log entries from 19.02.2008 (Tue) 09:00:00 - 20.02.2008 (Wed) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/event.c; Revisions: 1.89, 1.88 File: radiusd/src/main/detail.c; Revisions: 1.9 File: radiusd/src/include/detail.h; Revisions: 1.2 ===================================================== Combined list of identical log entries ===================================================== Description: Clean up handling of detail files && events. It's much more understandable now... Note also that SNMP appears to be broken. Oops... Modified files: File: radiusd/src/include/detail.h; Revision: 1.2; Date: 2008/02/19 09:44:14; Author: aland; Lines: (+3 -2) File: radiusd/src/main/detail.c; Revision: 1.9; Date: 2008/02/19 09:44:14; Author: aland; Lines: (+57 -37) File: radiusd/src/main/event.c; Revision: 1.89; Date: 2008/02/19 09:44:14; Author: aland; Lines: (+118 -183) ===================================================== Log entries ===================================================== Description: Initialize buffer properly... Modified files: File: radiusd/src/main/event.c; Revision: 1.88; Date: 2008/02/19 09:36:41; Author: aland; Lines: (+4 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/detail.h Revisions: 1.2 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/main/detail.c Revisions: 1.9 Authors: aland (+57 -37) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.89, 1.88 Authors: aland (+118 -183), aland (+4 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

message digests and modulus sizes supported in free radius
by Jagadish 19 Feb '08

19 Feb '08

Hi, Can anybody please tell me which standard does free radius supports for signature generation and signature verification? I mean, there are standards like (1) PKCS1_V1_5 (2) PSS (3) ANSIX9.31 Which standard does free radius support? I have one more doubt on type of message digest algorithms and modulus sizes supported in free radius. I generated certificates with sha1 and with modulus size 1024. This is working fine. I want to know if it works with other message digests like sha224, sha256, sha384, sha512 and modulus sizes like 1536, 2048, 3072, 4096. Please help me in this regard. thanks in advance, Jagadish

2 1

Automatic report from sources (radiusd) between 18.02.2008 - 19.02.2008 GMT
by Automatic cvs log generator 19 Feb '08

19 Feb '08

CVS log entries from 18.02.2008 (Mon) 09:00:01 - 19.02.2008 (Tue) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revisions: 1.35 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revisions: 1.44 ===================================================== Combined list of identical log entries ===================================================== Description: Set fake->request->src_ipaddr from request->packet->src_ipaddr, just like rad_alloc_fake() does. This lets certain multi-stage proxying of inner tunnel PEAP/TTLS sessions work. Bug found && patch by Dmitry Sergienko Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revision: 1.35; Date: 2008/02/18 23:56:25; Author: aland; Lines: (+4 -6) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.44; Date: 2008/02/18 23:56:25; Author: aland; Lines: (+3 -2) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c Revisions: 1.35 Authors: aland (+4 -6) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Revisions: 1.44 Authors: aland (+3 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 16.02.2008 - 17.02.2008 GMT
by Automatic cvs log generator 17 Feb '08

17 Feb '08

CVS log entries from 16.02.2008 (Sat) 09:00:01 - 17.02.2008 (Sun) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/include/conffile.h; Revisions: 1.44 File: radiusd/src/include/packet.h; Revisions: 1.6 File: radiusd/src/include/missing.h; Revisions: 1.42 ===================================================== Combined list of identical log entries ===================================================== Description: Move offsetof into missing.h, where it really belongs Modified files: File: radiusd/src/include/conffile.h; Revision: 1.44; Date: 2008/02/16 09:20:06; Author: aland; Lines: (+2 -6) File: radiusd/src/include/missing.h; Revision: 1.42; Date: 2008/02/16 09:20:06; Author: aland; Lines: (+6 -2) File: radiusd/src/include/packet.h; Revision: 1.6; Date: 2008/02/16 09:20:05; Author: aland; Lines: (+2 -7) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/conffile.h Revisions: 1.44 Authors: aland (+2 -6) ------------------------------- File: radiusd/src/include/missing.h Revisions: 1.42 Authors: aland (+6 -2) ------------------------------- File: radiusd/src/include/packet.h Revisions: 1.6 Authors: aland (+2 -7) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

I need to use CHAP or PAP
by Sarp Kaya 16 Feb '08

16 Feb '08

Hello, I am using ANTCOR OS, intel IXP 533mhz chipset routerboard. I want to set Hotspot. I followed these steps to set up radius. http://ubuntuforums.org/showthread.php?t=478804&highlight=radius And here is my OS configure Wiki: http://wiki.antcor.com/wiki/index.php/Simple_HotSpot_Setup Now, I set up like those links but my Router cannot use FreeRadius. I think CHAP or PAP is not enabled. How can I enable it.

1 0

Automatic report from sources (radiusd) between 15.02.2008 - 16.02.2008 GMT
by Automatic cvs log generator 16 Feb '08

16 Feb '08

CVS log entries from 15.02.2008 (Fri) 09:00:01 - 16.02.2008 (Sat) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/modules.c; Revisions: 1.157 File: radiusd/src/main/modcall.c; Revisions: 1.97 File: radiusd/src/include/modules.h; Revisions: 1.35 File: radiusd/src/include/ident.h; Revisions: 1.2 ===================================================== Combined list of identical log entries ===================================================== Description: Allow server[foo] references as singles. It doesn't (yet) dynamically expand the inner name, but that isn't too hard to add at this point. Modified files: File: radiusd/src/include/modules.h; Revision: 1.35; Date: 2008/02/15 09:47:58; Author: aland; Lines: (+3 -2) File: radiusd/src/main/modcall.c; Revision: 1.97; Date: 2008/02/15 09:47:58; Author: aland; Lines: (+106 -13) File: radiusd/src/main/modules.c; Revision: 1.157; Date: 2008/02/15 09:47:58; Author: aland; Lines: (+3 -3) ===================================================== Log entries ===================================================== Description: add #else for non-GCC and non-SUN compilers Modified files: File: radiusd/src/include/ident.h; Revision: 1.2; Date: 2008/02/15 21:19:28; Author: aland; Lines: (+4 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/ident.h Revisions: 1.2 Authors: aland (+4 -1) ------------------------------- File: radiusd/src/include/modules.h Revisions: 1.35 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.97 Authors: aland (+106 -13) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.157 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

return codes of update stanzas
by Stefan Winter 15 Feb '08

15 Feb '08

Hi, these stanzas return "notfound" on places where I wouldn't expect it... config: authorize { update request { RESTENA-Service-Type := "IMAP" } update reply { Reply-Message := "%{request:RESTENA-Service-Type}" } sql pap } And a run in -X says: rad_recv: Access-Request packet from host 2001:a18:1:8::155 port 34772, id=231, length=59 User-Name = "swinter" User-Password = "something" NAS-IP-Address = 127.0.0.2 NAS-Port = 123 server IMAP { +- entering group authorize ++[request] returns notfound expand: %{request:RESTENA-Service-Type} -> IMAP ++[reply] returns notfound expand: %{User-Name} -> swinter ... [rlm_sql stuff] ... ++[sql] returns ok ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "something" rlm_pap: Using clear text password "something" rlm_pap: User authenticated successfully ++[pap] returns ok Login OK: [swinter/something] (from client aragorn-v6 port 123) } # server IMAP Sending Access-Accept of id 231 to 2001:a18:1:8::155 port 34772 Reply-Message = "IMAP" Finished request 0. Obviously, the server performs the request and reply updates. Debug output says that both returned "notfound" though. Shouldn't they return "updated", at least for the sake of clarity when reading debug output? At first glance, I thought I got the syntax of unlang wrong when I read "notfound". Greetings, Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter(a)restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473

2 1

Automatic report from sources (radiusd) between 14.02.2008 - 15.02.2008 GMT
by Automatic cvs log generator 15 Feb '08

15 Feb '08

CVS log entries from 14.02.2008 (Thu) 09:00:01 - 15.02.2008 (Fri) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/VERSION; Revisions: 1.2 File: radiusd/man/man5/rlm_attr_filter.5; Revisions: 1.5 File: radiusd/src/modules/rlm_sim_files/rlm_sim_files.c; Revisions: 1.12 File: radiusd/redhat/freeradius.spec; Revisions: 1.27 File: radiusd/debian/changelog; Revisions: 1.77 File: radiusd/doc/ChangeLog; Revisions: 1.86 File: radiusd/Makefile; Revisions: 1.56 File: radiusd/suse/freeradius.spec; Revisions: 1.25 File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c; Revisions: 1.40 ===================================================== Combined list of identical log entries ===================================================== Description: Updated to 2.0.2 Modified files: File: radiusd/debian/changelog; Revision: 1.77; Date: 2008/02/14 11:13:15; Author: aland; Lines: (+23 -0) File: radiusd/redhat/freeradius.spec; Revision: 1.27; Date: 2008/02/14 11:13:15; Author: aland; Lines: (+2 -3) File: radiusd/suse/freeradius.spec; Revision: 1.25; Date: 2008/02/14 11:13:15; Author: aland; Lines: (+1 -1) ------------------------------- Description: Corrected behavior to match documentation. Modified files: File: radiusd/man/man5/rlm_attr_filter.5; Revision: 1.5; Date: 2008/02/14 10:31:15; Author: aland; Lines: (+24 -5) File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c; Revision: 1.40; Date: 2008/02/14 10:31:15; Author: aland; Lines: (+15 -5) ===================================================== Log entries ===================================================== Description: Added 'deb' target Modified files: File: radiusd/Makefile; Revision: 1.56; Date: 2008/02/14 11:09:29; Author: aland; Lines: (+8 -1) ------------------------------- Description: 2.0.2 Modified files: File: radiusd/VERSION; Revision: 1.2; Date: 2008/02/14 11:14:11; Author: aland; Lines: (+1 -1) ------------------------------- Description: Notes on attr_filter Modified files: File: radiusd/doc/ChangeLog; Revision: 1.86; Date: 2008/02/14 11:13:48; Author: aland; Lines: (+4 -1) ------------------------------- Description: strncat is useless. Use strlcpy instead Modified files: File: radiusd/src/modules/rlm_sim_files/rlm_sim_files.c; Revision: 1.12; Date: 2008/02/14 09:00:38; Author: aland; Lines: (+7 -10) ===================================================== Summary of modified files ===================================================== File: radiusd/Makefile Revisions: 1.56 Authors: aland (+8 -1) ------------------------------- File: radiusd/VERSION Revisions: 1.2 Authors: aland (+1 -1) ------------------------------- File: radiusd/debian/changelog Revisions: 1.77 Authors: aland (+23 -0) ------------------------------- File: radiusd/doc/ChangeLog Revisions: 1.86 Authors: aland (+4 -1) ------------------------------- File: radiusd/man/man5/rlm_attr_filter.5 Revisions: 1.5 Authors: aland (+24 -5) ------------------------------- File: radiusd/redhat/freeradius.spec Revisions: 1.27 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c Revisions: 1.40 Authors: aland (+15 -5) ------------------------------- File: radiusd/src/modules/rlm_sim_files/rlm_sim_files.c Revisions: 1.12 Authors: aland (+7 -10) ------------------------------- File: radiusd/suse/freeradius.spec Revisions: 1.25 Authors: aland (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 13.02.2008 - 14.02.2008 GMT
by Automatic cvs log generator 14 Feb '08

14 Feb '08

CVS log entries from 13.02.2008 (Wed) 09:00:01 - 14.02.2008 (Thu) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.85 File: radiusd/raddb/sites-available/proxy-inner-tunnel; Revisions: 1.3 File: radiusd/doc/rlm_ldap; Revisions: 1.41 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.266 File: radiusd/raddb/certs/README; Revisions: 1.8 File: radiusd/raddb/clients.conf; Revisions: 1.12 File: radiusd/src/main/listen.c; Revisions: 1.119 ===================================================== Log entries ===================================================== Description: As per recent changes Modified files: File: radiusd/doc/ChangeLog; Revision: 1.85; Date: 2008/02/13 14:35:26; Author: aland; Lines: (+3 -1) ------------------------------- Description: Corrected reference to schema Modified files: File: radiusd/doc/rlm_ldap; Revision: 1.41; Date: 2008/02/14 07:03:42; Author: aland; Lines: (+1 -1) ------------------------------- Description: Added note on SSL performance Modified files: File: radiusd/raddb/certs/README; Revision: 1.8; Date: 2008/02/13 14:34:47; Author: aland; Lines: (+22 -0) ------------------------------- Description: Use 'virtual_server' everywhere Modified files: File: radiusd/raddb/clients.conf; Revision: 1.12; Date: 2008/02/13 09:41:14; Author: aland; Lines: (+4 -4) ------------------------------- Description: Corrected typo Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.266; Date: 2008/02/13 14:21:05; Author: aland; Lines: (+2 -2) ------------------------------- Description: Updated to make it work... Modified files: File: radiusd/raddb/sites-available/proxy-inner-tunnel; Revision: 1.3; Date: 2008/02/13 09:27:18; Author: aland; Lines: (+10 -8) ------------------------------- Description: Deleted code handling massaging of sockets on HUP. Version 2.0 has never supported this, so the code is dead... Modified files: File: radiusd/src/main/listen.c; Revision: 1.119; Date: 2008/02/13 14:56:57; Author: aland; Lines: (+2 -68) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.85 Authors: aland (+3 -1) ------------------------------- File: radiusd/doc/rlm_ldap Revisions: 1.41 Authors: aland (+1 -1) ------------------------------- File: radiusd/raddb/certs/README Revisions: 1.8 Authors: aland (+22 -0) ------------------------------- File: radiusd/raddb/clients.conf Revisions: 1.12 Authors: aland (+4 -4) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.266 Authors: aland (+2 -2) ------------------------------- File: radiusd/raddb/sites-available/proxy-inner-tunnel Revisions: 1.3 Authors: aland (+10 -8) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.119 Authors: aland (+2 -68) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0