- Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 12.02.2008 - 13.02.2008 GMT
by Automatic cvs log generator 13 Feb '08

13 Feb '08

CVS log entries from 12.02.2008 (Tue) 09:00:00 - 13.02.2008 (Wed) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.84 File: radiusd/src/main/event.c; Revisions: 1.87 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.265 File: radiusd/src/main/listen.c; Revisions: 1.118, 1.117 ===================================================== Combined list of identical log entries ===================================================== Description: Notes on new listener "type = proxy" Modified files: File: radiusd/doc/ChangeLog; Revision: 1.84; Date: 2008/02/12 10:30:56; Author: aland; Lines: (+8 -1) File: radiusd/raddb/radiusd.conf.in; Revision: 1.265; Date: 2008/02/12 10:30:57; Author: aland; Lines: (+17 -8) ===================================================== Log entries ===================================================== Description: Print out "listening on proxy", too Modified files: File: radiusd/src/main/event.c; Revision: 1.87; Date: 2008/02/12 10:08:32; Author: aland; Lines: (+7 -7) ------------------------------- Description: Sanity checks for port ranges in listen sections. Allow listen { type = proxy }, which can simplify some configs Grab port number from getsockname(), if available Modified files: File: radiusd/src/main/listen.c; Revision: 1.118; Date: 2008/02/12 10:20:37; Author: aland; Lines: (+34 -3) ------------------------------- Description: Print out more error messages on failure Modified files: File: radiusd/src/main/listen.c; Revision: 1.117; Date: 2008/02/12 09:52:06; Author: aland; Lines: (+5 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.84 Authors: aland (+8 -1) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.265 Authors: aland (+17 -8) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.87 Authors: aland (+7 -7) ------------------------------- File: radiusd/src/main/listen.c Revisions: 1.118, 1.117 Authors: aland (+34 -3), aland (+5 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 11.02.2008 - 12.02.2008 GMT
by Automatic cvs log generator 12 Feb '08

12 Feb '08

CVS log entries from 11.02.2008 (Mon) 09:00:01 - 12.02.2008 (Tue) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/event.c; Revisions: 1.86 File: radiusd/share/dictionary.hp; Revisions: 1.4 File: radiusd/src/lib/event.c; Revisions: 1.18 File: radiusd/src/include/radiusd.h; Revisions: 1.260 ===================================================== Combined list of identical log entries ===================================================== Description: Added signal self for new proxy fd's, so that we will start listening on them. Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.260; Date: 2008/02/11 15:19:54; Author: aland; Lines: (+3 -2) File: radiusd/src/main/event.c; Revision: 1.86; Date: 2008/02/11 15:19:55; Author: aland; Lines: (+29 -17) ===================================================== Log entries ===================================================== Description: Added a few attributes... Modified files: File: radiusd/share/dictionary.hp; Revision: 1.4; Date: 2008/02/11 13:06:42; Author: aland; Lines: (+5 -1) ------------------------------- Description: Be fail-safe on multiple inserts Modified files: File: radiusd/src/lib/event.c; Revision: 1.18; Date: 2008/02/11 15:09:56; Author: aland; Lines: (+17 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.hp Revisions: 1.4 Authors: aland (+5 -1) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.260 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/lib/event.c Revisions: 1.18 Authors: aland (+17 -4) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.86 Authors: aland (+29 -17) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 10.02.2008 - 11.02.2008 GMT
by Automatic cvs log generator 11 Feb '08

11 Feb '08

CVS log entries from 10.02.2008 (Sun) 09:00:01 - 11.02.2008 (Mon) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.83 File: radiusd/src/modules/rlm_eap/mem.c; Revisions: 1.28 File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revisions: 1.55 File: radiusd/src/main/realms.c; Revisions: 1.44 File: radiusd/src/main/modcall.c; Revisions: 1.96 ===================================================== Combined list of identical log entries ===================================================== Description: Properly initialize random context. This solves the EAP handler issues seen recently on the list. Modified files: File: radiusd/src/modules/rlm_eap/mem.c; Revision: 1.28; Date: 2008/02/10 09:18:10; Author: aland; Lines: (+4 -5) File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revision: 1.55; Date: 2008/02/10 09:18:10; Author: aland; Lines: (+3 -2) ===================================================== Log entries ===================================================== Description: Note recent fixes Modified files: File: radiusd/doc/ChangeLog; Revision: 1.83; Date: 2008/02/10 09:22:13; Author: aland; Lines: (+8 -4) ------------------------------- Description: Singles in authenticate{} return immediately. Sections are processed just like authorize Modified files: File: radiusd/src/main/modcall.c; Revision: 1.96; Date: 2008/02/10 11:30:05; Author: aland; Lines: (+14 -5) ------------------------------- Description: Fall back to using DEFAULT realm. Based on patch from Vincent Magnin Modified files: File: radiusd/src/main/realms.c; Revision: 1.44; Date: 2008/02/10 15:23:33; Author: aland; Lines: (+11 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.83 Authors: aland (+8 -4) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.96 Authors: aland (+14 -5) ------------------------------- File: radiusd/src/main/realms.c Revisions: 1.44 Authors: aland (+11 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/mem.c Revisions: 1.28 Authors: aland (+4 -5) ------------------------------- File: radiusd/src/modules/rlm_eap/rlm_eap.c Revisions: 1.55 Authors: aland (+3 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusclient) between 10.02.2008 - 11.02.2008 GMT
by Automatic cvs log generator 11 Feb '08

11 Feb '08

CVS log entries from 10.02.2008 (Sun) 08:00:02 - 11.02.2008 (Mon) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: sobomax File: radiusclient/etc/radiusclient.conf.in; Revisions: 1.4 File: radiusclient/lib/util.c; Revisions: 1.9 File: radiusclient/lib/config.c; Revisions: 1.22 File: radiusclient/lib/buildreq.c; Revisions: 1.14 File: radiusclient/include/freeradius-client.h; Revisions: 1.13 ===================================================== Combined list of identical log entries ===================================================== Description: Introduce new feature: radius_deadtime: The length of time in seconds that we skip a nonresponsive RADIUS server for transaction requests. Server(s) being in the "dead" state are tried only after all other non-dead servers have been tried and failed or timeouted. The deadtime interval starts when the server does not respond to an authentication/accounting request transmissions. When the interval expires, the "dead" server would be re-tried again, and if it's still down then it will be considered "dead" for another such interval and so on. This option is no-op if there is only one server in the list. Set to 0 in order to disable the feature. While implementing, restructure buildreq.c to eliminate duplicate code. Sponsored by: Sippy Software, Inc., http://www.sippysoft.com Modified files: File: radiusclient/etc/radiusclient.conf.in; Revision: 1.4; Date: 2008/02/11 06:54:23; Author: sobomax; Lines: (+11 -0) File: radiusclient/include/freeradius-client.h; Revision: 1.13; Date: 2008/02/11 06:54:23; Author: sobomax; Lines: (+3 -1) File: radiusclient/lib/buildreq.c; Revision: 1.14; Date: 2008/02/11 06:54:23; Author: sobomax; Lines: (+110 -128) File: radiusclient/lib/config.c; Revision: 1.22; Date: 2008/02/11 06:54:23; Author: sobomax; Lines: (+7 -2) File: radiusclient/lib/util.c; Revision: 1.9; Date: 2008/02/11 06:54:23; Author: sobomax; Lines: (+22 -1) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusclient/etc/radiusclient.conf.in Revisions: 1.4 Authors: sobomax (+11 -0) ------------------------------- File: radiusclient/include/freeradius-client.h Revisions: 1.13 Authors: sobomax (+3 -1) ------------------------------- File: radiusclient/lib/buildreq.c Revisions: 1.14 Authors: sobomax (+110 -128) ------------------------------- File: radiusclient/lib/config.c Revisions: 1.22 Authors: sobomax (+7 -2) ------------------------------- File: radiusclient/lib/util.c Revisions: 1.9 Authors: sobomax (+22 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/rc-new_makelog.pl

1 0

Automatic report from sources (radiusd) between 08.02.2008 - 09.02.2008 GMT
by Automatic cvs log generator 09 Feb '08

09 Feb '08

CVS log entries from 08.02.2008 (Fri) 09:00:01 - 09.02.2008 (Sat) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/configure; Revisions: 1.17 File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revisions: 1.47, 1.46 ===================================================== Log entries ===================================================== Description: Use name2 for debug messages, not name1 Modified files: File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revision: 1.47; Date: 2008/02/09 08:00:55; Author: aland; Lines: (+21 -31) ------------------------------- Description: Corrected debug output Modified files: File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c; Revision: 1.46; Date: 2008/02/09 07:55:21; Author: aland; Lines: (+3 -3) ------------------------------- Description: Re-build from configure.in to add -DLDAP_DEPRECATED, which allows it to work on 64-bit systems Modified files: File: radiusd/src/modules/rlm_ldap/configure; Revision: 1.17; Date: 2008/02/09 07:29:18; Author: aland; Lines: (+2057 -1614) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c Revisions: 1.47, 1.46 Authors: aland (+21 -31), aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_ldap/configure Revisions: 1.17 Authors: aland (+2057 -1614) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

EAP-PEAPv1 in Freeradius 1.1.7
by Martin Gadbois 08 Feb '08

08 Feb '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sorry for being backwards... is there EAP-PEAPv1 support in FR 1.1.x? I know the wiki talks about it and there is EAP-GTC in the configuration, but I see on the current site that it is available in the eap2 module, in > 2.0.0. Thanks... - -- ============== +---------------------------------------------+ Martin Gadbois | "Please answer by yes or no. | Sr. SW Designer | Uncooperative user waste precious CPU time" | Colubris Networks Inc. | -- The Andromeda Strain, M. Crichton, 1969 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHq2rzMPkSU9icdA0RAu3sAJsGxyNIsv2rCUuzc8UZjOkfW+HR9QCeIGQU hUY1w4N8JgqJQ3ofNDw+Mfg= =d/ES -----END PGP SIGNATURE-----

2 1

authentication failed
by Dharmesh Desai 07 Feb '08

07 Feb '08

Dear All, I am using free radius client. Authenticating with the free radius server. If I am using free radius utility radclient and passing argument as a shared secret then it works fine. With free radius client utility radiusclient application, if I am providing as it in file servers then it is giving me error that unprintable characters in password. Can any suggest where I am wrong? Regards, Dharmesh Desai

1 0

How server_random is generated
by Jagadish 07 Feb '08

07 Feb '08

Hi, I am new to this mailing list. I started using free radius server. I am using EAP-TLS. I want to know how "server_random" is generated in free radius source code. I went through the source code. In eaptls_gen_mppe_keys() function, "client_random " and "server_random" are passed as seed to PRF function. I think "client_random" is obtained from "client Hello" packet from supplicant(client). But where from "server_random" is obtained in the source code? One more thing I found was SSL_read() function is called in tls_handshake_recv() function(In tls.c file). I added debugs to print "client_random" and "server_random " before SSL_read() function and after SSL_read() function. The random values were printed after the SSL_read() function is called. Is this function does fill the server_random variable? Please help me in resolving this. thanks in advance, Jagadish

2 1

Automatic report from sources (radiusd) between 06.02.2008 - 07.02.2008 GMT
by Automatic cvs log generator 07 Feb '08

07 Feb '08

CVS log entries from 06.02.2008 (Wed) 09:00:00 - 07.02.2008 (Thu) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.82 File: radiusd/src/modules/rlm_eap/mem.c; Revisions: 1.27 File: radiusd/src/main/event.c; Revisions: 1.85, 1.84 File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revisions: 1.54 File: radiusd/raddb/sites-available/proxy-inner-tunnel; Revisions: 1.2 File: radiusd/raddb/sites-available/inner-tunnel; Revisions: 1.4 File: radiusd/src/main/conffile.c; Revisions: 1.100.2.1.2.7 File: radiusd/man/man1/radclient.1; Revisions: 1.10 ===================================================== Combined list of identical log entries ===================================================== Description: Print more on "failed to remember handler" Try harder to keep a unique state. Check return code of eaplist_add Modified files: File: radiusd/src/modules/rlm_eap/mem.c; Revision: 1.27; Date: 2008/02/07 08:51:06; Author: aland; Lines: (+11 -6) File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revision: 1.54; Date: 2008/02/07 08:51:06; Author: aland; Lines: (+13 -12) ===================================================== Log entries ===================================================== Description: Notes on 2.0.2 Modified files: File: radiusd/doc/ChangeLog; Revision: 1.82; Date: 2008/02/06 14:01:22; Author: aland; Lines: (+18 -2) ------------------------------- Description: Corrected documentation Modified files: File: radiusd/man/man1/radclient.1; Revision: 1.10; Date: 2008/02/06 10:36:48; Author: aland; Lines: (+1 -1) ------------------------------- Description: corrected typo Modified files: File: radiusd/raddb/sites-available/inner-tunnel; Revision: 1.4; Date: 2008/02/06 17:06:07; Author: aland; Lines: (+2 -2) ------------------------------- Description: Notes on proxying when "proxy_as_eap = no" Modified files: File: radiusd/raddb/sites-available/proxy-inner-tunnel; Revision: 1.2; Date: 2008/02/06 11:11:48; Author: aland; Lines: (+9 -1) ------------------------------- Description: Allow lines at EOF to not have LF. Patch from colubris Modified files: File: radiusd/src/main/conffile.c; Revision: 1.100.2.1.2.7; Date: 2008/02/06 17:12:40; Author: aland; Lines: (+3 -3) ------------------------------- Description: Clean up detail file handling again Modified files: File: radiusd/src/main/event.c; Revision: 1.85; Date: 2008/02/06 11:06:40; Author: aland; Lines: (+10 -15) ------------------------------- Description: Permit inner tunnel EAP things to be proxied, too Modified files: File: radiusd/src/main/event.c; Revision: 1.84; Date: 2008/02/06 11:05:03; Author: aland; Lines: (+4 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.82 Authors: aland (+18 -2) ------------------------------- File: radiusd/man/man1/radclient.1 Revisions: 1.10 Authors: aland (+1 -1) ------------------------------- File: radiusd/raddb/sites-available/inner-tunnel Revisions: 1.4 Authors: aland (+2 -2) ------------------------------- File: radiusd/raddb/sites-available/proxy-inner-tunnel Revisions: 1.2 Authors: aland (+9 -1) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.100.2.1.2.7 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.85, 1.84 Authors: aland (+10 -15), aland (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_eap/mem.c Revisions: 1.27 Authors: aland (+11 -6) ------------------------------- File: radiusd/src/modules/rlm_eap/rlm_eap.c Revisions: 1.54 Authors: aland (+13 -12) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

[PATCH] Configure file without an empty line
by Martin Gadbois 06 Feb '08

06 Feb '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I had to apply this patch to 1.1.7 to have it read the config files if the configuration does not end with an empty line. diff -ur freeradius-1.1.7-org/src/main/conffile.c freeradius-1.1.7/src/main/conffile.c - --- freeradius-1.1.7-org/src/main/conffile.c 2007-04-07 18:28:17.000000000 -0400 +++ freeradius-1.1.7/src/main/conffile.c 2008-02-01 16:32:36.000000000 -0500 @@ -672,7 +672,7 @@ * We've filled the buffer, and there isn't * a CR in it. Die! */ - - if (cbuf[len - 1] != '\n') { + if (!eof && cbuf[len - 1] != '\n') { radlog(L_ERR, "%s[%d]: Line too long", cf, *lineno); cf_section_free(&cs); Attached is the configuration file that would fail with an Line too long error. Notice that the end of the file is "...blabla\n", not "...blabla\n\n" I have not tried v2.0.1. - -- ============== +---------------------------------------------+ Martin Gadbois | "Please answer by yes or no. | Sr. SW Designer | Uncooperative user waste precious CPU time" | Colubris Networks Inc. | -- The Andromeda Strain, M. Crichton, 1969 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHqcyrMPkSU9icdA0RAuI3AJ9rBf22wvN7VlZPwZb6q5wLGvrG5gCfZlsh pW9i0iwZmnYltWoJdMSGgCE= =+wv9 -----END PGP SIGNATURE----- # # Configuration for the SQL module, when using Postgresql. # # The database schema is available at: # # doc/examples/postgresql.sql # # Updated for using AttributeGroup/AttributeNumber in *reply tables. # server & password must already be defined driver = "rlm_sql_postgresql" login = "postgres" radius_db = "postgres" acct_table1 = "radius.radacct" acct_table2 = "radius.radacct" # Allow for storing data after authentication postauth_table = "radius.radpostauth" authcheck_table = "radius.radcheck" authreply_table = "radius.radreply" groupcheck_table = "radius.radgroupcheck" groupreply_table = "radius.radgroupreply" # Table to keep group info radusergroup_table = "radius.radusergroup" # Where to store a request authorize_radrequest_table = "radius.radrequest" # Remove stale session if checkrad does not see a double login deletestalesessions = yes # Print all SQL statements when in debug mode (-x) sqltrace = no # sqltracefile = ${logdir}/sqltrace.sql # number of sql connections to make to server num_sql_socks = 5 sql_user_name = "%{Stripped-User-Name:-%{User-Name:-DEFAULT}}" group_membership_query = "SELECT GroupName FROM ${radusergroup_table} WHERE UserName='%{SQL-User-Name}'" postauth_query = "SELECT radius.post_authentication('%{SQL-User-Name}', '%{reply:Packet-Type}', '%{Acct-Session-Id}', '%{Colubris-Access-Controlled}', %{Colubris-VSC-Index}, %{Colubris-Active-User-Sessions}, '%{reply:Colubris-Auth-Method}','%{EAP-Type}', '%{request:Freeradius-Proxied-To}' )"

2 1