- Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 11.11.2007 - 12.11.2007 GMT
by Automatic cvs log generator 12 Nov '07

12 Nov '07

CVS log entries from 11.11.2007 (Sun) 09:00:01 - 12.11.2007 (Mon) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/include/conffile.h; Revisions: 1.40 File: radiusd/src/modules/rlm_linelog/rlm_linelog.c; Revisions: 1.15 File: radiusd/src/main/radiusd.c; Revisions: 1.379 File: radiusd/src/modules/rlm_chap/rlm_chap.c; Revisions: 1.21 File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c; Revisions: 1.42 File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c; Revisions: 1.8 File: radiusd/raddb/experimental.conf; Revisions: 1.38 File: radiusd/src/modules/rlm_expr/rlm_expr.c; Revisions: 1.18 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.256 File: radiusd/src/modules/rlm_policy/rlm_policy.c; Revisions: 1.16 File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revisions: 1.30 File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c; Revisions: 1.38 File: radiusd/src/modules/rlm_realm/rlm_realm.c; Revisions: 1.69 File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.55 File: radiusd/src/main/modules.c; Revisions: 1.149 File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c; Revisions: 1.39 File: radiusd/src/modules/rlm_always/rlm_always.c; Revisions: 1.22 File: radiusd/raddb/eap.conf; Revisions: 1.17 File: radiusd/src/modules/rlm_passwd/rlm_passwd.c; Revisions: 1.35 File: radiusd/src/main/mainconfig.c; Revisions: 1.131 File: radiusd/src/modules/rlm_files/rlm_files.c; Revisions: 1.83 File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revisions: 1.62 File: radiusd/src/include/modules.h; Revisions: 1.33 File: radiusd/src/modules/rlm_unix/rlm_unix.c; Revisions: 1.83 File: radiusd/src/modules/rlm_exec/rlm_exec.c; Revisions: 1.29 File: radiusd/src/main/event.c; Revisions: 1.71 File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c; Revisions: 1.78 File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revisions: 1.47 File: radiusd/man/man8/radiusd.8; Revisions: 1.15 File: radiusd/src/main/conffile.c; Revisions: 1.185 ===================================================== Combined list of identical log entries ===================================================== Description: Mark more modules safe for -C Modified files: File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revision: 1.62; Date: 2007/11/12 06:16:56; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c; Revision: 1.42; Date: 2007/11/12 06:16:56; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_unix/rlm_unix.c; Revision: 1.83; Date: 2007/11/12 06:16:56; Author: aland; Lines: (+3 -3) ------------------------------- Description: Mark more modules "safe for -C" Modified files: File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c; Revision: 1.8; Date: 2007/11/11 22:11:51; Author: aland; Lines: (+2 -2) File: radiusd/src/modules/rlm_digest/rlm_digest.c; Revision: 1.30; Date: 2007/11/11 22:05:29; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_eap/rlm_eap.c; Revision: 1.47; Date: 2007/11/11 22:05:29; Author: aland; Lines: (+5 -6) File: radiusd/src/modules/rlm_exec/rlm_exec.c; Revision: 1.29; Date: 2007/11/11 22:05:30; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_expr/rlm_expr.c; Revision: 1.18; Date: 2007/11/11 22:05:30; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_linelog/rlm_linelog.c; Revision: 1.15; Date: 2007/11/11 22:11:51; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.55; Date: 2007/11/11 22:05:30; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_passwd/rlm_passwd.c; Revision: 1.35; Date: 2007/11/11 22:05:29; Author: aland; Lines: (+2 -2) File: radiusd/src/modules/rlm_policy/rlm_policy.c; Revision: 1.16; Date: 2007/11/11 22:11:51; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c; Revision: 1.78; Date: 2007/11/11 22:11:51; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_realm/rlm_realm.c; Revision: 1.69; Date: 2007/11/11 22:05:30; Author: aland; Lines: (+3 -3) ------------------------------- Description: Make cf_reference_item public, so it can be used in %{config:...} Made internal configuration code reference sub-sections by instances, too. This allows ${foo.bar[baz]} references. Added internal "confdir" directive in cf_file_read, which adds "confdir" as the FIRST configuration item in "main". This allows the rest of the configuration files and directives to be tied to ${confdir}, meaning the server can be built with one target directory, but still run out of another Modified files: File: radiusd/src/include/conffile.h; Revision: 1.40; Date: 2007/11/11 21:20:59; Author: aland; Lines: (+5 -3) File: radiusd/src/main/conffile.c; Revision: 1.185; Date: 2007/11/11 21:21:00; Author: aland; Lines: (+61 -11) File: radiusd/src/main/mainconfig.c; Revision: 1.131; Date: 2007/11/11 21:20:59; Author: aland; Lines: (+13 -178) ------------------------------- Description: Change raddbdir to confdir for consistency. Modified files: File: radiusd/raddb/eap.conf; Revision: 1.17; Date: 2007/11/11 18:11:28; Author: aland; Lines: (+3 -3) File: radiusd/raddb/experimental.conf; Revision: 1.38; Date: 2007/11/11 18:11:28; Author: aland; Lines: (+3 -3) File: radiusd/raddb/radiusd.conf.in; Revision: 1.256; Date: 2007/11/11 18:11:28; Author: aland; Lines: (+5 -5) ------------------------------- Description: Added -C command-line option, documentation, debug messages, and marked a number of modules as "safe for -C". Note that sql, ldap, etc. are NOT "safe for -C". Modified files: File: radiusd/man/man8/radiusd.8; Revision: 1.15; Date: 2007/11/11 22:02:01; Author: aland; Lines: (+112 -107) File: radiusd/src/include/modules.h; Revision: 1.33; Date: 2007/11/11 22:01:59; Author: aland; Lines: (+5 -4) File: radiusd/src/main/event.c; Revision: 1.71; Date: 2007/11/11 22:02:00; Author: aland; Lines: (+8 -3) File: radiusd/src/main/modules.c; Revision: 1.149; Date: 2007/11/11 22:02:01; Author: aland; Lines: (+12 -3) File: radiusd/src/main/radiusd.c; Revision: 1.379; Date: 2007/11/11 22:01:59; Author: aland; Lines: (+22 -32) File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c; Revision: 1.39; Date: 2007/11/11 22:02:02; Author: aland; Lines: (+2 -2) File: radiusd/src/modules/rlm_always/rlm_always.c; Revision: 1.22; Date: 2007/11/11 22:02:02; Author: aland; Lines: (+2 -2) File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c; Revision: 1.38; Date: 2007/11/11 22:02:02; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_chap/rlm_chap.c; Revision: 1.21; Date: 2007/11/11 22:02:02; Author: aland; Lines: (+3 -3) File: radiusd/src/modules/rlm_files/rlm_files.c; Revision: 1.83; Date: 2007/11/11 22:02:01; Author: aland; Lines: (+3 -3) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/man/man8/radiusd.8 Revisions: 1.15 Authors: aland (+112 -107) ------------------------------- File: radiusd/raddb/eap.conf Revisions: 1.17 Authors: aland (+3 -3) ------------------------------- File: radiusd/raddb/experimental.conf Revisions: 1.38 Authors: aland (+3 -3) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.256 Authors: aland (+5 -5) ------------------------------- File: radiusd/src/include/conffile.h Revisions: 1.40 Authors: aland (+5 -3) ------------------------------- File: radiusd/src/include/modules.h Revisions: 1.33 Authors: aland (+5 -4) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.185 Authors: aland (+61 -11) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.71 Authors: aland (+8 -3) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.131 Authors: aland (+13 -178) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.149 Authors: aland (+12 -3) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.379 Authors: aland (+22 -32) ------------------------------- File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c Revisions: 1.39 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_acctlog/rlm_acctlog.c Revisions: 1.8 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_always/rlm_always.c Revisions: 1.22 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_attr_filter/rlm_attr_filter.c Revisions: 1.38 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_chap/rlm_chap.c Revisions: 1.21 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_detail/rlm_detail.c Revisions: 1.62 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_digest/rlm_digest.c Revisions: 1.30 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/rlm_eap.c Revisions: 1.47 Authors: aland (+5 -6) ------------------------------- File: radiusd/src/modules/rlm_exec/rlm_exec.c Revisions: 1.29 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_expr/rlm_expr.c Revisions: 1.18 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_files/rlm_files.c Revisions: 1.83 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_linelog/rlm_linelog.c Revisions: 1.15 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.55 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_passwd/rlm_passwd.c Revisions: 1.35 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_policy/rlm_policy.c Revisions: 1.16 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_preprocess/rlm_preprocess.c Revisions: 1.78 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c Revisions: 1.42 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_realm/rlm_realm.c Revisions: 1.69 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_unix/rlm_unix.c Revisions: 1.83 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 10.11.2007 - 11.11.2007 GMT
by Automatic cvs log generator 11 Nov '07

11 Nov '07

CVS log entries from 10.11.2007 (Sat) 09:00:00 - 11.11.2007 (Sun) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.54 File: radiusd/src/modules/rlm_eap/libeap/tls.c; Revisions: 1.9 File: radiusd/src/main/event.c; Revisions: 1.70 File: radiusd/src/lib/valuepair.c; Revisions: 1.126 ===================================================== Combined list of identical log entries ===================================================== Description: sprintf -> snprintf Modified files: File: radiusd/src/lib/valuepair.c; Revision: 1.126; Date: 2007/11/10 09:36:25; Author: aland; Lines: (+9 -7) File: radiusd/src/main/event.c; Revision: 1.70; Date: 2007/11/10 09:39:39; Author: aland; Lines: (+4 -3) File: radiusd/src/modules/rlm_eap/libeap/tls.c; Revision: 1.9; Date: 2007/11/10 09:41:48; Author: aland; Lines: (+8 -5) File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.54; Date: 2007/11/10 09:40:11; Author: aland; Lines: (+4 -4) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/valuepair.c Revisions: 1.126 Authors: aland (+9 -7) ------------------------------- File: radiusd/src/main/event.c Revisions: 1.70 Authors: aland (+4 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/tls.c Revisions: 1.9 Authors: aland (+8 -5) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.54 Authors: aland (+4 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: Common data structure between PEAP and Ms-CHAPv2
by Aravinda babu 10 Nov '07

10 Nov '07

Hi, In general cases EAP identity and MS-CHAP username are same but if someone sends EAP identity and MS-CHAP username different we want to check.. The PEAP module has access to the full request/response attributes, including the User-Name.Which variable in peap.c i have to use to get these details ? Is there any design doc to understand freeradius EAP module ? Thanks, Aravinda babu wrote: > Is there any datastructure common to MS-CHAP and PEAP ? No. > or Is there any datastructure of MS-CHAP module visible > in PEAP module ? No. > Basically i want to send the details of Username in > MS-CHAP response packet to PEAP module.How can i do that? Why? The PEAP module has access to the full request/response attributes, including the User-Name. Perhaps you could try explaining in more detail exactly what goal you're trying to reach. Alan DeKok. ----- Original Message ---- From: Aravinda babu <aravinddepik(a)yahoo.co.in> To: freeradius-devel(a)lists.freeradius.org Sent: Saturday, 10 November, 2007 7:04:10 PM Subject: Common data structure between PEAP and Ms-CHAPv2 Hi all, I am new to this mailing list.I thought this question suits to devel list so i am sending this here.If i am wrong please let me know. Is there any datastructure common to MS-CHAP and PEAP ? or Is there any datastructure of MS-CHAP module visible in PEAP module ? Basically i want to send the details of Username in MS-CHAP response packet to PEAP module.How can i do that? Thanks in advance, Bye, Newbie. Explore your hobbies and interests. Go to http://in.promos.yahoo.com/groups Unlimited freedom, unlimited storage. Get it now, on http://help.yahoo.com/l/in/yahoo/mail/yahoomail/tools/tools-08.html/

2 1

Common data structure between PEAP and Ms-CHAPv2
by Aravinda babu 10 Nov '07

10 Nov '07

Hi all, I am new to this mailing list.I thought this question suits to devel list so i am sending this here.If i am wrong please let me know. Is there any datastructure common to MS-CHAP and PEAP ? or Is there any datastructure of MS-CHAP module visible in PEAP module ? Basically i want to send the details of Username in MS-CHAP response packet to PEAP module.How can i do that? Thanks in advance, Bye, Newbie. Explore your hobbies and interests. Go to http://in.promos.yahoo.com/groups

2 1

Automatic report from sources (radiusd) between 09.11.2007 - 10.11.2007 GMT
by Automatic cvs log generator 10 Nov '07

10 Nov '07

CVS log entries from 09.11.2007 (Fri) 09:00:03 - 10.11.2007 (Sat) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revisions: 1.39, 1.38 File: radiusd/src/modules/rlm_eap/libeap/eap_tls.c; Revisions: 1.6 Author: nbk File: radiusd/src/modules/rlm_unix/rlm_unix.c; Revisions: 1.82 ===================================================== Log entries ===================================================== Description: Return EAPTLS_OK only if the SSL setup is finished, AND there's no more data inside of the tunnel Modified files: File: radiusd/src/modules/rlm_eap/libeap/eap_tls.c; Revision: 1.6; Date: 2007/11/10 06:45:51; Author: aland; Lines: (+3 -3) ------------------------------- Description: More careful sanity checking on the values of attributes and vendor Id's Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.39; Date: 2007/11/10 07:07:59; Author: aland; Lines: (+30 -8) ------------------------------- Description: If the EAP message in the Diameter AVP is larger than 253 octets, split it among multiple VALUE_PAIRs. This fixes a previous FIXME. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.38; Date: 2007/11/10 06:59:14; Author: aland; Lines: (+44 -13) ------------------------------- Description: When s = cl->shortname we try to copy a string of arbitrary length to a 64 bytes long buffer. Bug found by Primoz Bratanic <primoz(a)slo-tech.com> Modified files: File: radiusd/src/modules/rlm_unix/rlm_unix.c; Revision: 1.82; Date: 2007/11/09 23:49:49; Author: nbk; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_eap/libeap/eap_tls.c Revisions: 1.6 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Revisions: 1.39, 1.38 Authors: aland (+30 -8), aland (+44 -13) ------------------------------- File: radiusd/src/modules/rlm_unix/rlm_unix.c Revisions: 1.82 Authors: nbk (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Dynamic DNS Question
by David Mitchell 09 Nov '07

09 Nov '07

We've run into a potential problem with our FreeRadius setup. We currently use per-client keys for security. We have begun testing dynamic DNS updates and have run into the problem of having the radius server fail to start because an entry in clients.conf refers to a DNS entry which doesn't exist. We could use only IP addresses in clients.conf, but that means we can't have dynamic addresses for clients. We could also use per-subnet keys but we really want to keep the increase in security afforded by having unique keys for each host. My question is two-fold. One, does anybody know of a workaround with the current code base I haven't thought of? Two, what sorts of requirements should I include if I code up patch to add this feature? Certainly I would guess that there would have to be a way to keep the current functionality where responding to authentication requests would not require any DNS requests. But in our dynamic DNS case, I would like the server to look up the reverse DNS entry of the source IP address on an incoming request and use that result to determine which clients.conf entry to use. This would mean caching the FQDN names from the clients.conf file somewhere and then searching that list with the results of the DNS query. Or alternatively doing something more sophisticated such as determining the key to use based on attributes in the request itself. Any feedback on the direction I should take before I start trying to code something up would be appreciated. Thanks in advance, -David Mitchell -- ----------------------------------------------------------------- | David Mitchell (mitchell(a)ucar.edu) Network Engineer IV | | Tel: (303) 497-1845 National Center for | | FAX: (303) 497-1818 Atmospheric Research | -----------------------------------------------------------------

3 3

Re: freeradius-client-1.1.5
by Eivind Naess 09 Nov '07

09 Nov '07

Hi Chris, Thank you for your reply to my question. Now, I did checkout freeradius-client from CVS and the function that I asked for exist. However, I did run into a few problems / issues. I am trying to cross-compile this for an ARM Intel ixp425 platform. 1) I needed to export ac_cv_func_uname=no into the environment before executing ./configure. Configure just didn't like the fact that I was cross-compiling with a different toolchain and barfed when it figured it couldn't run the test program. This should probably get fixed for 1.1.6. 2) There are some added macro "DEBUG" added to the freeradius-client.h. This conflicts with a different define of DEBUG defined somewhere else. I'd say either remove it, or rename it. It's for debugging anyway. 3) Cross-compiling 1.1.5, I had a problem with sending authentication requests where the password got corrupted due to some alignment errors in rc_pack_list() and rc_md5_calc(). It appears that the problem is gone in CVS, however; the code looks pretty much the same to me. What I did to circumvent the problem was to declare a char md5[MD5_DIGEST_LENGTH] and use that for MD5Final(), then do a memcpy(output, md5, MD5_DIGEST_LENGTH). This works well, when the output variable doesn't align with the boundary of my processor, in gdb it showed up as 0x...0a and it stomped on 0x...08 (the two first bytes got corrupted and my radiusd didn't understand squat). 4) I looked at the function signature for rc_add_config(...), and it does not seem to require "line", and "filename". It's more an artifact of your static functions requiring some input in case they fail. In my opinion, since the code is shared between rc_read_config(), the static functions should not need to know anything about filename and position, that's a responsibility of the caller function. Return codes can be used to solve this better refactoring the functions to better fit a users (freeradius-client api) need. The filename and line arguments simply doesn't have any value when you embed the radius client. Please consider the following as comments: 5) If you really want to 'embed' freeradius-client, it would be nice if I could specify something similar to "authserv <ip>:<port>:<secret>" and not needing to write a "server" file which declares the servers w/secrets. 6) I don't necessarily understand the radius-protocol in detail, but I would think it would be nice to be able to specify the dictionary attributes/values as you kind of do with rc_add_config(..). This again relates to the fact of reducing external dependencies when embedding freeradius-client. 7) This comment is related to logs, and I haven't studied the use of rc_log too closely. Just in general, this is a library and not an application. It would be nice to possibly use logs to trace calls within the library, but for error reporting it seems like it would be more useful to return an error code, and then call a rc_geterror_str(errno) or something. I am speaking of this as an integrator of OSS and I often like the ability to control the output of an application and not to necessarily "pollute" the system's event logs. BTW, I think freeradius is a great project, keep up the good work :o) I've attached a patch as a set of differences that fixes #2 #4. ---------------------------------------------------------- diff -ruNBb ../../vendor-drop/src/include/freeradius-client.h ../src/include/freeradius-client.h --- ../../vendor-drop/src/include/freeradius-client.h 2007-10-05 08:37:26.000000000 -0700 +++ ../src/include/freeradius-client.h 2007-11-07 08:15:23.000000000 -0800 @@ -17,12 +17,6 @@ #ifndef RADIUSCLIENT_NG_H #define RADIUSCLIENT_NG_H -#ifdef CP_DEBUG -#define DEBUG rc_log -#else -#define DEBUG -#endif - #include <sys/types.h> /* * Include for C99 uintX_t defines is stdint.h on most systems. Solaris uses @@ -447,7 +441,7 @@ SERVER *rc_conf_srv(rc_handle *, char *); int rc_find_server(rc_handle *, char *, uint32_t *, char *); void rc_config_free(rc_handle *); -int rc_add_config(rc_handle *, const char *, const char *, const char *, const int); +int rc_add_config(rc_handle *, const char *, const char *); rc_handle *rc_config_init(rc_handle *); int test_config(rc_handle *, char *); diff -ruNBb ../../vendor-drop/src/lib/config.c ../src/lib/config.c --- ../../vendor-drop/src/lib/config.c 2007-07-11 10:29:29.000000000 -0700 +++ ../src/lib/config.c 2007-11-07 08:16:14.000000000 -0800 @@ -52,7 +52,7 @@ * Returns: 0 on success, -1 on failure */ -static int set_option_str(const char *filename, int line, OPTION *option, const char *p) +static int set_option_str(OPTION *option, const char *p) { if (p) { option->val = (void *) strdup(p); @@ -67,12 +67,11 @@ return 0; } -static int set_option_int(const char *filename, int line, OPTION *option, const char *p) +static int set_option_int(OPTION *option, const char *p) { int *iptr; if (p == NULL) { - rc_log(LOG_ERR, "%s: line %d: bogus option value", filename, line); return -1; } @@ -87,7 +86,7 @@ return 0; } -static int set_option_srv(const char *filename, int line, OPTION *option, const char *p) +static int set_option_srv(OPTION *option, const char *p) { SERVER *serv; char *p_pointer; @@ -100,13 +99,11 @@ p_dupe = strdup(p); if (p_dupe == NULL) { - rc_log(LOG_ERR, "%s: line %d: Invalid option or memory failure", filename, line); return -1; } serv = (SERVER *) option->val; if (serv == NULL) { - DEBUG(LOG_ERR, "option->val / server is NULL, allocating memory"); serv = malloc(sizeof(*serv)); if (serv == NULL) { rc_log(LOG_CRIT, "read_config: out of memory"); @@ -152,12 +149,11 @@ else serv->port[serv->max] = ntohs ((unsigned int) svp->s_port); else { - rc_log(LOG_ERR, "%s: line %d: no default port for %s", filename, line, option->name); if (option->val == NULL) { free(p_dupe); free(serv); } - return -1; + return -2; } } @@ -180,7 +176,7 @@ return 0; } -static int set_option_auo(const char *filename, int line, OPTION *option, const char *p) +static int set_option_auo(OPTION *option, const char *p) { int *iptr; char *p_dupe = NULL; @@ -190,7 +186,6 @@ p_dupe = strdup(p); if (p_dupe == NULL) { - rc_log(LOG_WARNING, "%s: line %d: bogus option value", filename, line); return -1; } @@ -200,18 +195,15 @@ } *iptr = 0; - /*if(strstr(p_dupe,", \t") != NULL) {*/ p_pointer = strtok_r(p_dupe, ", \t", &p_save); - /*}*/ if (!strncmp(p_pointer, "local", 5)) *iptr = AUTH_LOCAL_FST; else if (!strncmp(p_pointer, "radius", 6)) *iptr = AUTH_RADIUS_FST; else { - rc_log(LOG_ERR,"%s: auth_order: unknown keyword: %s", filename, p); free(p_dupe); - return -1; + return -2; } p_pointer = strtok_r(NULL, ", \t", &p_save); @@ -222,9 +214,8 @@ else if ((*iptr & AUTH_LOCAL_FST) && !strcmp(p_pointer, "radius")) *iptr = (*iptr) | AUTH_RADIUS_SND; else { - rc_log(LOG_ERR,"%s: auth_order: unknown or unexpected keyword: %s", filename, p); free(p_dupe); - return -1; + return -2; } } @@ -242,7 +233,7 @@ * Returns: 0 on success, -1 on failure */ -int rc_add_config(rc_handle *rh, const char *option_name, const char *option_val, const char *source, const int line) +int rc_add_config(rc_handle *rh, const char *option_name, const char *option_val) { OPTION *option; @@ -260,22 +251,22 @@ switch (option->type) { case OT_STR: - if (set_option_str(source, line, option, option_val) < 0) { + if (set_option_str(option, option_val) < 0) { return -1; } break; case OT_INT: - if (set_option_int(source, line, option, option_val) < 0) { + if (set_option_int(option, option_val) < 0) { return -1; } break; case OT_SRV: - if (set_option_srv(source, line, option, option_val) < 0) { + if (set_option_srv(option, option_val) < 0) { return -1; } break; case OT_AUO: - if (set_option_auo(source, line, option, option_val) < 0) { + if (set_option_auo(option, option_val) < 0) { return -1; } break; @@ -353,6 +344,7 @@ char buffer[512], *p; OPTION *option; int line; + int rcode; size_t pos; rc_handle *rh; @@ -420,28 +412,46 @@ switch (option->type) { case OT_STR: - if (set_option_str(filename, line, option, p) < 0) { + rcode = set_option_str(option, p); + if (rcode < 0) { + rc_log(LOG_ERR, "%s: line %d: unable to set option value", filename, line ); fclose(configfd); rc_destroy(rh); return NULL; } break; case OT_INT: - if (set_option_int(filename, line, option, p) < 0) { + rcode = set_option_int(option, p); + if (rcode < 0) { + rc_log(LOG_ERR, "%s: line %d: unable to set option value", filename, line); fclose(configfd); rc_destroy(rh); return NULL; } break; case OT_SRV: - if (set_option_srv(filename, line, option, p) < 0) { + rcode = set_option_srv(option, p); + if (rcode == -1) + rc_log(LOG_ERR, "%s: line %d: unable to set option value", filename, line); + + if (rcode == -2) + rc_log(LOG_ERR, "%s: line %d: no default port for %s", filename, line, option->name); + + if (rcode < 0) { fclose(configfd); rc_destroy(rh); return NULL; } break; case OT_AUO: - if (set_option_auo(filename, line, option, p) < 0) { + rcode = set_option_auo(option, p); + if (rcode == -1) + rc_log(LOG_ERR, "%s: line %d: unable to set option value", filename, line); + + if (rcode == -2) + rc_log(LOG_ERR, "%s: line %d: found unknown keyword/value: %s", filename, line, p); + + if (rcode < 0) { fclose(configfd); rc_destroy(rh); return NULL; Binary files ../../vendor-drop/src/lib/.config.c.swp and ../src/lib/.config.c.swp differ diff -ruNBb ../../vendor-drop/src/lib/sendserver.c ../src/lib/sendserver.c --- ../../vendor-drop/src/lib/sendserver.c 2007-08-07 07:26:29.000000000 -0700 +++ ../src/lib/sendserver.c 2007-11-07 07:35:44.000000000 -0800 @@ -226,8 +226,6 @@ /*}*/ } - DEBUG(LOG_ERR, "DEBUG: rc_send_server: creating socket to: %s", server_name); - sockfd = socket (AF_INET, SOCK_DGRAM, 0); if (sockfd < 0) { @@ -297,10 +295,6 @@ auth->length = htons ((unsigned short) total_length); } - DEBUG(LOG_ERR, "DEBUG: local %s : 0, remote %s : %u\n", - inet_ntoa(sinlocal.sin_addr), - inet_ntoa(sinremote.sin_addr), data->svc_port); - for (;;) { sendto (sockfd, (char *) auth, (unsigned int) total_length, (int) 0, Binary files ../../vendor-drop/src/lib/.sendserver.c.swp and ../src/lib/.sendserver.c.swp differ diff -ruNBb ../../vendor-drop/src/src/radembedded.c ../src/src/radembedded.c --- ../../vendor-drop/src/src/radembedded.c 2007-10-08 08:48:06.000000000 -0700 +++ ../src/src/radembedded.c 2007-11-07 08:18:46.000000000 -0800 @@ -52,42 +52,42 @@ /* set auth_order to be radius only */ - if (rc_add_config(rh, "auth_order", "radius", "config", 0) != 0) + if (rc_add_config(rh, "auth_order", "radius") != 0) { printf("ERROR: Unable to set auth_order.\n"); rc_destroy(rh); exit(1); } - if (rc_add_config(rh, "login_tries", "4", "config", 0) != 0) + if (rc_add_config(rh, "login_tries", "4") != 0) { printf("ERROR: Unable to set login_tries.\n"); rc_destroy(rh); exit(1); } - if (rc_add_config(rh, "dictionary", "/usr/local/radius/dictionary", "config", 0) != 0) + if (rc_add_config(rh, "dictionary", "/usr/local/radius/dictionary") != 0) { printf("ERROR: Unable to set dictionary.\n"); rc_destroy(rh); exit(1); } - if (rc_add_config(rh, "seqfile", "/var/run/radius.seq", "config", 0) != 0) + if (rc_add_config(rh, "seqfile", "/var/run/radius.seq") != 0) { printf("ERROR: Unable to set seq file.\n"); rc_destroy(rh); exit(1); } - if (rc_add_config(rh, "radius_retries", "3", "config", 0) != 0) + if (rc_add_config(rh, "radius_retries", "3") != 0) { printf("ERROR: Unable to set radius_retries.\n"); rc_destroy(rh); exit(1); } - if (rc_add_config(rh, "radius_timeout", "5", "config", 0) != 0) + if (rc_add_config(rh, "radius_timeout", "5") != 0) { printf("ERROR: Unable to set radius_timeout.\n"); rc_destroy(rh); @@ -100,14 +100,14 @@ * be used. */ - if (rc_add_config(rh, "authserver", "localhost::testing123", "config", 0) != 0) + if (rc_add_config(rh, "authserver", "localhost::testing123") != 0) { printf("ERROR: Unable to set authserver.\n"); rc_destroy(rh); exit(1); } - if (rc_add_config(rh, "acctserver", "localhost:1813:testing123", "config", 0) != 0) + if (rc_add_config(rh, "acctserver", "localhost:1813:testing123") != 0) { printf("ERROR: Unable to set acctserver.\n"); rc_destroy(rh);

3 3

Automatic report from sources (radiusd) between 08.11.2007 - 09.11.2007 GMT
by Automatic cvs log generator 09 Nov '07

09 Nov '07

CVS log entries from 08.11.2007 (Thu) 09:00:00 - 09.11.2007 (Fri) 09:00:03 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_eap/libeap/tls.c; Revisions: 1.8 File: radiusd/scripts/check-radiusd-config.in; Revisions: 1.2.10.1 ===================================================== Log entries ===================================================== Description: Add -i to command line parameters to make it work better Modified files: File: radiusd/scripts/check-radiusd-config.in; Revision: 1.2.10.1; Date: 2007/11/08 10:24:10; Author: aland; Lines: (+1 -1) ------------------------------- Description: Call record_minus, not record_init() on handshake send, because there may be data left in the clean_in buffer Modified files: File: radiusd/src/modules/rlm_eap/libeap/tls.c; Revision: 1.8; Date: 2007/11/08 16:26:06; Author: aland; Lines: (+7 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/scripts/check-radiusd-config.in Revisions: 1.2.10.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/tls.c Revisions: 1.8 Authors: aland (+7 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 07.11.2007 - 08.11.2007 GMT
by Automatic cvs log generator 08 Nov '07

08 Nov '07

CVS log entries from 07.11.2007 (Wed) 09:00:01 - 08.11.2007 (Thu) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/include/md4.h; Revisions: 1.12 File: radiusd/configure.in; Revisions: 1.253 ===================================================== Log entries ===================================================== Description: Don't strip executables. The people who need the disk space can strip them by hand. Everyone else needs symbols to work around RTLD_GLOBAL issues, OR to help with debugging Modified files: File: radiusd/configure.in; Revision: 1.253; Date: 2007/11/07 22:13:42; Author: aland; Lines: (+2 -2) ------------------------------- Description: We don't need or use librad_MD4* stuff Modified files: File: radiusd/src/include/md4.h; Revision: 1.12; Date: 2007/11/07 22:21:18; Author: aland; Lines: (+2 -11) ===================================================== Summary of modified files ===================================================== File: radiusd/configure.in Revisions: 1.253 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/include/md4.h Revisions: 1.12 Authors: aland (+2 -11) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

[EAP-TTLS] I want to set freeradius server for EAP-TTLS.
by JANG, CHULWOON 08 Nov '07

08 Nov '07

Dear Freeradius-devel. I completed the freeradius in radhat 9. I try to interoperate between Freeradius and Mobile WiMAX system and so need to set the EAP-TTLS authentication mechanism. But I don’t know that set the EAP-TTLS using Freeradius. Would you give me some material(manual or Howto)? Best regards CW JANG. -------------------------------------------- (주)이노와이어리스 T&M S/W 개발팀 장철운 Phone : 031-788-1675 Mobile : 016-390-7342 E-Mail : <mailto:cwjang@innowireless.co.kr> cwjang(a)innowireless.co.kr --------------------------------------------

2 1