- Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 02.10.2006 - 03.10.2006 GMT
by Automatic cvs log generator 03 Oct '06

03 Oct '06

CVS log entries from 02.10.2006 (Mon) 08:00:01 - 03.10.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/Makefile; Revisions: 1.49 File: radiusd/scripts/min-includes.pl; Revisions: 1.1 Author: pnixon File: radiusd/doc/examples/oracle.sql; Revisions: 1.5 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.10, 1.9, 1.8 ===================================================== Combined list of identical log entries ===================================================== Description: Perl script (hokey as heck) to minimize the number of includes that we have in C files. It finds duplicate includes, and prints them out for user verification. It optionally will also go through & nuke the duplicates Modified files: File: radiusd/Makefile; Revision: 1.49; Date: 2006/10/02 23:53:38; Author: aland; Lines: (+5 -1) File: radiusd/scripts/min-includes.pl; Revision: 1.1; Date: 2006/10/02 23:53:38; Author: aland; ===================================================== Log entries ===================================================== Description: RFC 2865: The String field is one or more octets. The NAS may limit the maximum length of the User-Name but the ability to handle at least 63 octets is recommended. Modified files: File: radiusd/doc/examples/oracle.sql; Revision: 1.5; Date: 2006/10/02 09:45:00; Author: pnixon; Lines: (+2 -2) ------------------------------- Description: New patch for configurable logging Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.10; Date: 2006/10/03 07:26:37; Author: pnixon; Lines: (+55 -21) ------------------------------- Description: Rollback this patch. Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.9; Date: 2006/10/03 07:25:31; Author: pnixon; Lines: (+12 -27) ------------------------------- Description: Logging update Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.8; Date: 2006/10/03 06:48:20; Author: pnixon; Lines: (+29 -14) ===================================================== Summary of modified files ===================================================== File: radiusd/Makefile Revisions: 1.49 Authors: aland (+5 -1) ------------------------------- File: radiusd/doc/examples/oracle.sql Revisions: 1.5 Authors: pnixon (+2 -2) ------------------------------- File: radiusd/scripts/min-includes.pl Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.10, 1.9, 1.8 Authors: pnixon (+55 -21), pnixon (+12 -27), pnixon (+29 -14) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Development TODO
by Peter Nixon 02 Oct '06

02 Oct '06

Hi Guys I just copied the toto list from cvs head into: http://wiki.freeradius.org/Development_Roadmap#URGENT It seems that this list is a bit out of date. Can everyone have a look at this and help update it please? Also should we add a section for the 1.1.x branch or have we decided the 2.0 will definately be the next release. (ie. Should we continue to apply patches to sqlippool in 1.1.x or just in cvs head) Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 1

Query
by Chew, Heng Hui (Andy) FORNATL, SN 02 Oct '06

02 Oct '06

If I want to add in another attribute e.g. location coordinate as part of the authentication via PEAP, how may I do it? With Regards, Chew Heng Hui Andy

1 0

utilities for totaling and booting
by D S 01 Oct '06

01 Oct '06

Hello from the wireless abyss [image: Smile] Some background, I build these jukeboxes, they play videos over a bars Audio Visual system by sending an sms to a cell phone built into to them. it also has ringtones and a system of registering bluetooth users. This is all paid for by a bill acceptor in the front of the machine. Inside your everyday PC, with a hacked apart and soldered keyboard, a jimmy rigged bill acceptor on the lpt port and a cell phone for getting sms's So, you either had to come to the machine and pick your songs, or there had to be printed out some menus or songlists, and I got all exicited cuz they write they are going to come out with WAP over bluetooth (personal area network protocol) and well I was going to have dynamic menus, so I started digging around, stuck myself apache on one of these boxes, got it to serv wap pages and the like. Then, the next thing I know, I think, hey, wouldn't it be cool if I took all this media and made it distributable over wireless. So, I went and ordered a WRT54GL and flashed the sucker. Got it all working, you can log in, it checks FreeRadius.net (windows) and there you are with this little hosted website on a windows box (all the rest of the stuff is C# and mono doesn't run it so I am stuck with the OS) In Ukraine, there are like 2 million credit card about, and , a DSL connection will literally cost you a months wages ever month, about $150 for 2gig of traffic 256k (the average months salary) so, I more or less have everything I need to set up these hotspots, let people use them for free for the local stuff (UAMALLOWED chilli.conf) and I want to let them put money in the bill acceptor to get real internet. I am assuming once I get the radius tables in mysql, I can simply insert new values there for authentication purposes so crediting joe user is easy enough. Now I spent about an hour reading all the posts here but never found a real solid kinda fix that I could squeeze under window (yeah, I know, it sucks, but try to make the killer jukebox in Linux [image: Smile] What I am missing, Or Radius is missing, is the way to kick off users that have download their fair share (like 1/2 their monthly salary) I am assuming that I need some other scripts to add up the various accounting statements that are showing up in the log and to add them to the user account and somewhere another script to kick them off the NAS. Since I am new to all of this ( I got my router the other day ) I am pretty happy I've made such progress, but no cookie for me cuz I will be broke the day I turn it on as every 16 year old will be logged on. The freeradius I am using doesn't include the dial up admin program mentioned either. BTW, I don't know how interesting these machines would be in the US, we have made 3 of them and they are interesting, I am collecting all the soft and configurations in one directory so I can redistribute what I've done so hopefully helping me will help a lots of people:-) Sorry for my bad English, thanking you much for your help and sorry if my post is considered offtopic, I understood if you are installing these servers, this is the list and I hope to have a lot of them installed as I will be using one radius server on each local machine. :-) Have a nice day

2 1

Automatic report from sources (radiusd) between 30.09.2006 - 01.10.2006 GMT
by Automatic cvs log generator 01 Oct '06

01 Oct '06

CVS log entries from 30.09.2006 (Sat) 08:00:01 - 01.10.2006 (Sun) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: mgriego File: radiusd/src/main/exec.c; Revisions: 1.54 ===================================================== Log entries ===================================================== Description: Sleep for 1 second if the child hasn't returned yet before starting the next iteration of the loop. Modified files: File: radiusd/src/main/exec.c; Revision: 1.54; Date: 2006/09/30 22:21:56; Author: mgriego; Lines: (+7 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/exec.c Revisions: 1.54 Authors: mgriego (+7 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Problem "linking" external library to freeradius module
by kky 30 Sep '06

30 Sep '06

Hi, i need to use the libgcrypt (gnupg.org) witch i have installed in /usr/local/lib for my auth module, usually i just #include <gcrypt.h> and in my Makefile just append a few flags: " -I/usr/local/include -L/usr/local/lib -lgcrypt -L/usr/local/lib -lgpg-error " so i put this line in my makefile (witch I copied from another eap auth module! ): TARGET = rlm_eap_xxx SRCS = rlm_eap_xxx.c eap_xxx.c crypto_xxx.c RLM_CFLAGS = $(INCLTDL) -I../.. -I../../libeap \ -I/usr/local/include -I/usr/local/lib -I/usr/include \ -L/tmp/freeradius-$(VERS)/src/lib \ -L/usr/local/lib -lgcrypt -L/usr/local/lib -lgpg-error HEADERS = eap_xxx.h crypto_xxx.h ../../eap.h ../../rlm_eap.h RLM_INSTALL = RLM_DIR=../../ include ${RLM_DIR}../rules.mak $(LT_OBJS): $(HEADERS) i start freeradiusd -X and when my code calls a libgcrypt function it says : radiusd: symbol lookup error: /usr/local/lib/rlm_eap_xxx-1.1.3.so: undefined symbol: gcry_mpi_powm additionally in the libgrcrypt documentation is telling that if i'm using automake (witch i don't handle at all !!) i can use the defined Autoconf variables in my `Makefile.am' : AM_CPPFLAGS = $(LIBGCRYPT_CFLAGS) LDADD = $(LIBGCRYPT_LIBS) LIBGCRYPT_CFLAGS needed for compilation of the program to find the `gcrypt.h' header file, and LIBGCRYPT_LIBS needed to link the program to the Libgcrypt library. I've tried to put them in a few places but without results ! do you have an advice ?! THANK YOU !! kky

2 1

Automatic report from sources (radiusd) between 29.09.2006 - 30.09.2006 GMT
by Automatic cvs log generator 30 Sep '06

30 Sep '06

CVS log entries from 29.09.2006 (Fri) 08:00:01 - 30.09.2006 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: fcusack File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revisions: 1.31, 1.30 Author: pnixon File: radiusd/suse/rcradius-relayd; Revisions: 1.3 ===================================================== Log entries ===================================================== Description: another state->radstate fix Modified files: File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.31; Date: 2006/09/30 01:38:56; Author: fcusack; Lines: (+3 -3) ------------------------------- Description: s/bad state/bad radstate/ to be clear that it's not token state Modified files: File: radiusd/src/modules/rlm_otp/otp_rlm.c; Revision: 1.30; Date: 2006/09/30 01:36:54; Author: fcusack; Lines: (+7 -7) ------------------------------- Description: Rename to symlink to avoid problems with startproc Modified files: File: radiusd/suse/rcradius-relayd; Revision: 1.3; Date: 2006/09/29 16:12:11; Author: pnixon; Lines: (+1 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_otp/otp_rlm.c Revisions: 1.31, 1.30 Authors: fcusack (+3 -3), fcusack (+7 -7) ------------------------------- File: radiusd/suse/rcradius-relayd Revisions: 1.3 Authors: pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

[PATCH] template_user for pam_radius_auth.so
by Thaddeus Ternes 29 Sep '06

29 Sep '06

After much googling, I was unable to find a solution for Linux like BSD has for it's PAM-Radius module for specifying a system username to use upon a successful authentication. Included is my attempt at adding the "template_user" functionality from the BSD version of to pam_radius_auth. Here's what I've used in my /etc/pam.conf file: login auth required /lib/security/pam_radius_auth.so template_user=myname I haven't been able to do much testing with it yet (as I'm currently involved in other PAM integration efforts), but would definitely appreciate any feedback on this. I'm still rather new to Linux hacking, so all (positive) criticism is most welcomed. Thanks! -Thaddeus diff -Naur pam_radius-1.3.16/pam_radius_auth.c pam_radius-1.3.16-patched/pam_radius_auth.c --- pam_radius-1.3.16/pam_radius_auth.c 2003-02-27 18:01:07.000000000 +0000 +++ pam_radius-1.3.16-patched/pam_radius_auth.c 2006-09-28 19:16:42.000000000 +0000 @@ -67,7 +67,7 @@ /* internal data */ static CONST char *pam_module_name = "pam_radius_auth"; static char conf_file[BUFFER_SIZE]; /* configuration file */ - +static char template_user[BUFFER_SIZE]; /* we need to save these from open_session to close_session, since * when close_session will be called we won't be root anymore and * won't be able to access again the radius server configuration file @@ -137,7 +137,11 @@ } else if (!strcmp(*argv, "debug")) { ctrl |= PAM_DEBUG_ARG; conf->debug = 1; - + + } else if (!strncmp(*argv, "template_user=", 14)) { + ctrl |= PAM_TEMPLATE_USER; + strcpy(template_user, (*argv)+14); + } else { _pam_log(LOG_WARNING, "unrecognized option '%s'", *argv); } @@ -1223,6 +1227,8 @@ *pret = retval; pam_set_data( pamh, "rad_setcred_return", (void *) pret, _int_free ); } + if(retval == PAM_SUCCESS && (ctrl & PAM_TEMPLATE_USER)) + pam_set_item(pamh, PAM_USER, template_user); return retval; } diff -Naur pam_radius-1.3.16/pam_radius_auth.h pam_radius-1.3.16-patched/pam_radius_auth.h --- pam_radius-1.3.16/pam_radius_auth.h 2003-09-19 14:41:32.000000000 +0000 +++ pam_radius-1.3.16-patched/pam_radius_auth.h 2006-09-28 19:14:02.000000000 +0000 @@ -82,6 +82,7 @@ #define PAM_SKIP_PASSWD 2 #define PAM_USE_FIRST_PASS 4 #define PAM_TRY_FIRST_PASS 8 +#define PAM_TEMPLATE_USER 16 #define PAM_RETRY 0x30

2 1

rlm_policy compile error cvs 20060929
by Joe Maimon 29 Sep '06

29 Sep '06

/usr/bin/libtool --mode=compile gcc -Wall -g -O2 -I/home/joe/download/radius/debian9/freeradius-2.0.0/src -c parse.c gcc -Wall -g -O2 -I/home/joe/download/radius/debian9/freeradius-2.0.0/src -c parse.c -fPIC -DPIC -o .libs/parse.o parse.c: In function 'parse_module': parse.c:1174: warning: passing argument 1 of 'compile_modgroup' makes pointer from integer without a cast parse.c:1174: warning: passing argument 2 of 'compile_modgroup' makes integer from pointer without a cast parse.c:1174: warning: passing argument 3 of 'compile_modgroup' from incompatible pointer type parse.c:1174: error: too few arguments to function 'compile_modgroup' make[7]: *** [parse.lo] Error 1 make[7]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src/modules/rlm_policy' make[6]: *** [common] Error 2 make[6]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src/modules' make[5]: *** [all] Error 2 make[5]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src/modules' make[4]: *** [common] Error 2 make[4]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src' make[3]: *** [all] Error 2 make[3]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0/src' make[2]: *** [common] Error 2 make[2]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0' make[1]: *** [all] Error 2 make[1]: Leaving directory `/home/joe/download/radius/debian9/freeradius-2.0.0' make: *** [stamp-build] Error 2 I am not familiar with this function, so I would appreciate a couple pointers on what went wrong. No other module seems to call this function.

2 1

Development Roadmap
by Peter Nixon 29 Sep '06

29 Sep '06

http://wiki.freeradius.org/Development_Roadmap I have created a page in the wiki for features that people would like to see in FreeRADIUS and bugs that people would like to see the end of. I hope we can put up a list of things we plan to have for 2.0 in the near future also. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

3 2