- Freeradius-Devel - lists.freeradius.org

reference guide...
by suganthi velusamy 26 Jun '07

26 Jun '07

Hi. I am new to freeradius. I want to understand the implementation of freeradius. I tried to understand the coding. As a fresher, i didnt get a clear idea of that. If anybody has any documentation regarding the implementation of freeradius, please help me... Thanx. --------------------------------- Once upon a time there was 1 GB storage on Yahoo! Mail. Click here for happy ending!

1 0

Automatic report from sources (radiusd) between 23.06.2007 - 24.06.2007 GMT
by Automatic cvs log generator 24 Jun '07

24 Jun '07

CVS log entries from 23.06.2007 (Sat) 08:00:01 - 24.06.2007 (Sun) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revisions: 1.25 File: radiusd/src/main/xlat.c; Revisions: 1.128 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revisions: 1.36 File: radiusd/share/dictionary.freeradius.internal; Revisions: 1.17 ===================================================== Log entries ===================================================== Description: Make MSCHAP a synonym for MS-CHAP, for future & backwards compatibility Modified files: File: radiusd/share/dictionary.freeradius.internal; Revision: 1.17; Date: 2007/06/23 14:08:32; Author: aland; Lines: (+2 -1) ------------------------------- Description: Print server, not request->listener Modified files: File: radiusd/src/main/xlat.c; Revision: 1.128; Date: 2007/06/23 13:37:28; Author: aland; Lines: (+3 -3) ------------------------------- Description: Pull Virtual-Server checks from ttls.c Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revision: 1.25; Date: 2007/06/23 14:09:10; Author: aland; Lines: (+10 -2) ------------------------------- Description: Look for Virtual-Server in configuration items. If found, run the tunneled request through that virtual server. If not found, use the parents server. This is SO much better than what was there before... none of the "FreeRADIUS-Proxied-To" stuff is necessary any more, and the inner tunnel sessions can be completely separated from the outer tunnel sessions Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.36; Date: 2007/06/23 14:03:51; Author: aland; Lines: (+19 -11) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.freeradius.internal Revisions: 1.17 Authors: aland (+2 -1) ------------------------------- File: radiusd/src/main/xlat.c Revisions: 1.128 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c Revisions: 1.25 Authors: aland (+10 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Revisions: 1.36 Authors: aland (+19 -11) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 22.06.2007 - 23.06.2007 GMT
by Automatic cvs log generator 23 Jun '07

23 Jun '07

CVS log entries from 22.06.2007 (Fri) 08:00:00 - 23.06.2007 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.184 ===================================================== Log entries ===================================================== Description: Print out *why* opening the mapping file failed. Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.184; Date: 2007/06/22 08:01:08; Author: aland; Lines: (+3 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.184 Authors: aland (+3 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

freeradius-client updates
by Chris Parker 23 Jun '07

23 Jun '07

I've been making progress on the freeradius-client library. The CVS head now contains some additional config checks to help with some portability. Changed some 'unsigned int/int' to 'size_t'. Changed some 'bzero' to 'memset'. Added some casts to clear some warnings. I've removed most(all?) of the non-threadsafe calls, and replaced with appropriate threadsafe calls wherever I could. There is still some problem with 'gethostby_*' calls. I created a wrapper for those, but when I define hosts by name, instead of by address, I'm still seeing packets launch off into the stratosphere instead of to the defined host(s). This leads me to believe that there is still some sort of problem in the 'send_server()' logic. It works perfectly if the code defines the servers via dotted-quad ( which is certainly far preferred ). The library is now working as part of an embedded radiusclient built into the FreeSWITCH ( http://www.freeswitch.org/ ) server. Yay! It is doing accounting ( Start/Stop ) at this point. It is still a bit rough around the edges, and some additional cleanup still needs to be done, though it's definitely improved. I'm looking for some feedback/testing from others, to make sure the other programs which use the library ( radtest, radacct, radlogin, etc. ) are not broken. I've tested them as best I can, but want to have others with other build environments and usage scenarios confirm. :) Unless there's any major problems that anyone sees, I think we're ready to take another snapshot of CVS head and release an updated version. Anyone with feedback on the packages ( /debian, /rpm ) etc, would be welcome as I've not updated those yet. -Chris -- Chris Parker Director, Systems StarNet - US LEC, now a PAETEC Company (888)212-0099 Fax (847)963-1302 Wholesale Internet and VoIP Services http://www.megapop.net NOTICE: Message is sent IN CONFIDENCE to addressees. It may contain information that is privileged, proprietary or confidential.

3 10

EAP/TLS , after access-challenge nothing happen
by Stefan Nowak 22 Jun '07

22 Jun '07

Hi I have a little problem with authenticate using EAP/TLS on freeradius. After Access Challenge freeradius not display Reject or Accept, only going to the begin and repeat the same operation. What`s wrong ?? as NAS i`m using CISCO catalyst 2950 and client supplicant WinXP, server is freeradius 1.5. this is logs from tcpdump: 21:43:21.547329 IP 192.168.1.9.radius > 192.168.1.7.radius: RADIUS, Access Request (1), id: 0x7d length: 120 21:43:21.648845 IP 192.168.1.7.radius > 192.168.1.9.radius: RADIUS, Access Challenge (11), id: 0x7d length: 64 21:43:21.572693 IP 192.168.1.9.radius > 192.168.1.7.radius: RADIUS, Access Request (1), id: 0x7e length: 189 21:43:21.587661 IP 192.168.1.7.radius > 192.168.1.9.radius: RADIUS, Access Challenge (11), id: 0x7e length: 1100 21:43:21.602274 IP 192.168.1.9.radius > 192.168.1.7.radius: RADIUS, Access Request (1), id: 0x7f length: 115 21:43:21.604767 IP 192.168.1.7.radius > 192.168.1.9.radius: RADIUS, Access Challenge (11), id: 0x7f length: 976 21:43:21.620631 IP 192.168.1.9.radius > 192.168.1.7.radius: RADIUS, Access Request (1), id: 0x80 length: 115 21:43:21.629087 IP 192.168.1.7.radius > 192.168.1.9.radius: RADIUS, Access Challenge (11), id: 0x80 length: 68 and this is logs from freeradius debug mode: rad_recv: Access-Request packet from host 192.168.1.9:1812, id=207, length=115 NAS-IP-Address = 192.168.1.9 NAS-Port-Type = Async User-Name = "client" Service-Type = Framed-User Framed-MTU = 1500 Calling-Station-Id = "00-11-09-26-48-fa" State = 0xf4dbd9e74648ce65d56e471171d0e7f3 EAP-Message = 0x020200060d00 Message-Authenticator = 0x767944f13525d633320393682cb2403f Processing the authorize section of radiusd.conf modcall: entering group authorize for request 90 modcall[authorize]: module "preprocess" returns ok for request 90 modcall[authorize]: module "chap" returns noop for request 90 modcall[authorize]: module "mschap" returns noop for request 90 rlm_realm: No '@' in User-Name = "client", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 90 rlm_eap: EAP packet type response id 2 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 90 modcall[authorize]: module "files" returns notfound for request 90 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 90 modcall: leaving group authorize (returns updated) for request 90 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 90 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 90 modcall: leaving group authenticate (returns handled) for request 90 Sending Access-Challenge of id 207 to 192.168.1.9 port 1812 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x035504061302504c311630140603550408130d7769656c6b6f706f6c736b6965311430120603550407130b6269616c6f736c69776965310f300d060355040a130670696f6e6172310f300d060355040b130670696f6e6172311e301c0603550403131546756e6e79626f6e6520576972656c657373204341311b301906092a864886f70d010901160c70696f6e61724077702e706c0e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8a37dd36bf1bbbf6747bb6c4216ea380 Finished request 90 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.9:1812, id=208, length=115 NAS-IP-Address = 192.168.1.9 NAS-Port-Type = Async User-Name = "client" Service-Type = Framed-User Framed-MTU = 1500 Calling-Station-Id = "00-11-09-26-48-fa" State = 0x8a37dd36bf1bbbf6747bb6c4216ea380 EAP-Message = 0x020300060d00 Message-Authenticator = 0x6de0700bd6d131fc1cec8bec76fcea72 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 91 modcall[authorize]: module "preprocess" returns ok for request 91 modcall[authorize]: module "chap" returns noop for request 91 modcall[authorize]: module "mschap" returns noop for request 91 rlm_realm: No '@' in User-Name = "client", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 91 rlm_eap: EAP packet type response id 3 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 91 modcall[authorize]: module "files" returns notfound for request 91 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 91 modcall: leaving group authorize (returns updated) for request 91 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 91 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 91 modcall: leaving group authenticate (returns handled) for request 91 Sending Access-Challenge of id 208 to 192.168.1.9 port 1812 EAP-Message = 0x0104000a0d8000000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x7b7eac5f542d1c6ec0abd77c3ce3c509 Finished request 91 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 88 ID 205 with timestamp 467ad8b7 Cleaning up request 89 ID 206 with timestamp 467ad8b7 Cleaning up request 90 ID 207 with timestamp 467ad8b7 Cleaning up request 91 ID 208 with timestamp 467ad8b7 Nothing to do. Sleeping until we see a request. ---------------------------------------------------- Nieważne, kim jesteś i jak wyglądasz. Jesteś wart tyle, ile ktoś chce zapłacić za twoją śmierć... Przerażający thriller HOSTEL 2 - w kinach od 22 czerwca! http://klik.wp.pl/?adr=http%3A%2F%2Fadv.reklama.wp.pl%2Fas%2Fhostel2.html&s…

2 1

double login and multilink attempt
by Mahalakshmi Vijayakumar 22 Jun '07

22 Jun '07

*hi, wats the difference between multilink attempt and double login.* *thank you...*

1 0

Automatic report from sources (radiusd) between 21.06.2007 - 22.06.2007 GMT
by Automatic cvs log generator 22 Jun '07

22 Jun '07

CVS log entries from 21.06.2007 (Thu) 08:00:00 - 22.06.2007 (Fri) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/modcall.c; Revisions: 1.81, 1.80 File: radiusd/src/main/conffile.c; Revisions: 1.170 File: radiusd/raddb/Makefile; Revisions: 1.27 ===================================================== Combined list of identical log entries ===================================================== Description: If no value is set, allow it to be NULL. Modified files: File: radiusd/src/main/conffile.c; Revision: 1.170; Date: 2007/06/21 09:27:00; Author: aland; Lines: (+8 -4) File: radiusd/src/main/modcall.c; Revision: 1.81; Date: 2007/06/21 09:27:00; Author: aland; Lines: (+4 -3) ===================================================== Log entries ===================================================== Description: Corrected typo Modified files: File: radiusd/raddb/Makefile; Revision: 1.27; Date: 2007/06/21 09:04:46; Author: aland; Lines: (+2 -2) ------------------------------- Description: Corrected compiler warnings Modified files: File: radiusd/src/main/modcall.c; Revision: 1.80; Date: 2007/06/21 09:13:58; Author: aland; Lines: (+5 -10) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/Makefile Revisions: 1.27 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.170 Authors: aland (+8 -4) ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.81, 1.80 Authors: aland (+4 -3), aland (+5 -10) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusclient) between 21.06.2007 - 21.06.2007 GMT
by Automatic cvs log generator 21 Jun '07

21 Jun '07

CVS log entries from 21.06.2007 (Thu) 18:29:47 - 21.06.2007 (Thu) 18:35:38 GMT ===================================================== Summary by authors ===================================================== Author: cparker File: radiusclient/BUGS; Revisions: 1.2 ===================================================== Log entries ===================================================== Description: Added note on hostname lookup issue. Modified files: File: radiusclient/BUGS; Revision: 1.2; Date: 2007/06/21 18:35:00; Author: cparker; Lines: (+4 -1) ===================================================== Summary of modified files ===================================================== File: radiusclient/BUGS Revisions: 1.2 Authors: cparker (+4 -1) -- Automatic cron job from ./rc-new_makelog.pl

1 0

Automatic report from sources (radiusd) between 20.06.2007 - 21.06.2007 GMT
by Automatic cvs log generator 21 Jun '07

21 Jun '07

CVS log entries from 20.06.2007 (Wed) 08:00:00 - 21.06.2007 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/configurable_failover; Revisions: 1.12 File: radiusd/doc/load-balance.txt; Revisions: 1.6 File: radiusd/README; Revisions: 1.7.6.5 File: radiusd/src/main/modcall.c; Revisions: 1.79 File: radiusd/share/dictionary.telkom; Revisions: 1.1 File: radiusd/man/man5/unlang.5; Revisions: 1.5 ===================================================== Combined list of identical log entries ===================================================== Description: Move more documentation into the "man" page Modified files: File: radiusd/doc/configurable_failover; Revision: 1.12; Date: 2007/06/20 09:37:21; Author: aland; Lines: (+4 -61) File: radiusd/doc/load-balance.txt; Revision: 1.6; Date: 2007/06/20 09:37:21; Author: aland; Lines: (+5 -34) File: radiusd/man/man5/unlang.5; Revision: 1.5; Date: 2007/06/20 09:37:21; Author: aland; Lines: (+119 -4) ===================================================== Log entries ===================================================== Description: Corrected typo Modified files: File: radiusd/README; Revision: 1.7.6.5; Date: 2007/06/20 13:18:55; Author: aland; Lines: (+1 -1) ------------------------------- Description: As posted to the list Modified files: File: radiusd/share/dictionary.telkom; Revision: 1.1; Date: 2007/06/20 13:17:31; Author: aland; ------------------------------- Description: Be more particular about what can be in a "redundant", etc. group Modified files: File: radiusd/src/main/modcall.c; Revision: 1.79; Date: 2007/06/20 09:38:56; Author: aland; Lines: (+68 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/README Revisions: 1.7.6.5 Authors: aland (+1 -1) ------------------------------- File: radiusd/doc/configurable_failover Revisions: 1.12 Authors: aland (+4 -61) ------------------------------- File: radiusd/doc/load-balance.txt Revisions: 1.6 Authors: aland (+5 -34) ------------------------------- File: radiusd/man/man5/unlang.5 Revisions: 1.5 Authors: aland (+119 -4) ------------------------------- File: radiusd/share/dictionary.telkom Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/main/modcall.c Revisions: 1.79 Authors: aland (+68 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Multiple Databases with Freeradius
by Abdul Qadir 20 Jun '07

20 Jun '07

Hi, Is it possible to configure Freeradius to connect with two oracle databases and based on some criteria send the query to appropriate database Thanking you all in advance. Best Regards, Abdul Qadir --------------------------------- Moody friends. Drama queens. Your life? Nope! - their life, your story. Play Sims Stories at Yahoo! Games.

2 1