- Freeradius-Devel - lists.freeradius.org

radclient in cvs head
by Peter Nixon 18 Sep '06

18 Sep '06

Does anyone know why radclient in cvs head gives the following error message after successfully disconnecting a user? Sending Disconnect-Request of id 214 to 1.1.1.1 port 1700 Acct-Session-Id = "11111" User-Name = "user" X-Ascend-Session-Svr-Key = "4235DAD8" NAS-IP-Address = 1.1.1.1 rad_recv: Disconnect-ACK packet from host 1.1.1.1 port 1700, id=214, length=20 rad_verify: Received Unknown packet code 41from client 1.1.1.1 port 1700: Cannot validate signature The stable version does not give this error message: rad_verify: Received Unknown packet code 41from client 1.1.1.1 port 1700: Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 1

Automatic report from sources (radiusd) between 15.09.2006 - 16.09.2006 GMT
by Automatic cvs log generator 16 Sep '06

16 Sep '06

CVS log entries from 15.09.2006 (Fri) 08:00:01 - 16.09.2006 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: pnixon File: radiusd/suse/rcradius-relayd; Revisions: 1.2 ===================================================== Log entries ===================================================== Description: Fix service name Modified files: File: radiusd/suse/rcradius-relayd; Revision: 1.2; Date: 2006/09/15 15:05:10; Author: pnixon; Lines: (+1 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/suse/rcradius-relayd Revisions: 1.2 Authors: pnixon (+1 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 13.09.2006 - 14.09.2006 GMT
by Automatic cvs log generator 15 Sep '06

15 Sep '06

CVS log entries from 13.09.2006 (Wed) 08:00:00 - 14.09.2006 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/modules.c; Revisions: 1.109 Author: bjordanov File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.39 Author: pnixon File: radiusd/raddb/sqlippool.conf; Revisions: 1.3 ===================================================== Log entries ===================================================== Description: Major cleanup of the queries (To match what we are running in production) Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.3; Date: 2006/09/13 12:49:37; Author: pnixon; Lines: (+40 -26) ------------------------------- Description: When walking over a section, handle the case of CONF_DATA existing Modified files: File: radiusd/src/main/modules.c; Revision: 1.109; Date: 2006/09/13 18:55:23; Author: aland; Lines: (+5 -3) ------------------------------- Description: Fixed bug id #390 Removed pairfree and Updated to use pairmove. Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.39; Date: 2006/09/13 08:36:53; Author: bjordanov; Lines: (+7 -12) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/sqlippool.conf Revisions: 1.3 Authors: pnixon (+40 -26) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.109 Authors: aland (+5 -3) ------------------------------- File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.39 Authors: bjordanov (+7 -12) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

3 2

Automatic report from sources (radiusd) between 14.09.2006 - 15.09.2006 GMT
by Automatic cvs log generator 15 Sep '06

15 Sep '06

CVS log entries from 14.09.2006 (Thu) 08:00:00 - 15.09.2006 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/threads.c; Revisions: 1.111 File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.42, 1.41, 1.40 ===================================================== Log entries ===================================================== Description: Don't NULL self->request until after we're done using it Modified files: File: radiusd/src/main/threads.c; Revision: 1.111; Date: 2006/09/14 16:32:30; Author: aland; Lines: (+2 -3) ------------------------------- Description: Reverted the change from 1.36 -> 1.37. The operators are only for hacks like the "users" file, which have a severely limited policy engine. With Perl, the script has much more flexibility to decide which attributes to re-write, which ones to delete, and which ones to leave alone. As a result, the operators are unnecessary, and don't belong Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.42; Date: 2006/09/14 17:52:46; Author: aland; Lines: (+9 -46) ------------------------------- Description: Commited a fix for bug #390 Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.41; Date: 2006/09/14 17:43:43; Author: aland; Lines: (+10 -2) ------------------------------- Description: Reverted change 1.38 -> 1.39. pairmove() uses operators, which is unnecessary here. The Perl code can decide which attributes should be in which lists, so the operators are entirely unnecessary. In addition, pairmove() may leave attributes in the source list, so the code in 1.39 has a memory leak, because it doesn't call pairfree. A fix for bug #390 will be committed separately. Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.40; Date: 2006/09/14 17:41:34; Author: aland; Lines: (+12 -7) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/threads.c Revisions: 1.111 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.42, 1.41, 1.40 Authors: aland (+9 -46), aland (+10 -2), aland (+12 -7) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Hi all
by Enkhbat.N 15 Sep '06

15 Sep '06

Hi Everybody I'm using FreeRADIUS 1.0.0 on FreeBSD OS. I want to account Prepaid User based on traffic, but I can't. I looked for about that from Internet. So Many people advised to use "Session-Octets-Limit" attribute. But I can't use this attribute. Dialer software is IPWireless modem over PPPoE. 1. I inserted into DICTIONARY file 2. Show on reply-detail..log Session-Octets-Limit := 0 Octets-Direction := Input Port-Limit = 1 Framed-Compression = Van-Jacobson-TCP-IP Framed-Protocol = PPP Roaming-Indication = Home-network-subscriber Additional-PDP-Contexts-Allowed = 0 IMEI-Status = IMEI-OK SV-Status = SV-OK Tier-Of-Service = Gold Service-Type = Framed-User But not checked. Please help me. Best Regard, Enkhbat.N

1 0

rfc4590
by Alexander Schrab 14 Sep '06

14 Sep '06

Hi, I have been looking at the rfc 4590 (http digest) and done some tests with freeradius. As I userstand it implements a similar but uncompatible draft. Is anyone looking into this issue? I have done a quick-n-dirty patch against 1.1.3 to support the attributes defined in rfc4590, but I havn't looked into it in more detail. /Alexander Schrab

2 1

latest cvs crash
by Tuyan Ozipek 14 Sep '06

14 Sep '06

Hi all, With cvs HEAD of freeradius from yesterday, i am having a Segmentation fault while trying to handle requests. with gdb running radiusd , in 'set args -A -f -xxxxxxxx' i have this trace at the moment of the crash. Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1212638304 (LWP 19107)] 0x08061393 in request_handler_thread (arg=0x815cee0) at threads.c:518 518 if (!self->request->reply->data && this does not happen when radiusd is running with -X option since its not threaded. a few lines from radiusd just before the crash.. Wed Sep 13 18:38:11 2006 : Debug: modsingle[authenticate]: returned from pap (rlm_pap) for request 0 Wed Sep 13 18:38:11 2006 : Debug: modcall: group PAP returns reject for request 0 Wed Sep 13 18:38:11 2006 : Debug: auth: Failed to validate the user. Wed Sep 13 18:38:11 2006 : Debug: Delaying request 0 for 1 seconds Wed Sep 13 18:38:11 2006 : Debug: Finished request 0 Wed Sep 13 18:38:11 2006 : Debug: Going to the next request I can provide more information if needed.. Regards -- Tuyan Ozipek <tuyan(a)suntel.com.tr>

3 4

FW: Rlm_exec and cygwin
by Chris Hellberg 13 Sep '06

13 Sep '06

Sending to the right list address this time :) > > Hi, > > I'm going through the debugging process of figuring out why > the module rlm_exec is stopping freeradius-1.1.3 from > executing. There are a bunch of discussions about this in the > cygwin and freeradius archives, but no real conclusions that > I can get an idea of what to fix. > > The output is below. I have a feeling that rlm_exec is > referencing a symbol in a library that isn't in the source > (either from missing.[h,c]) or a cygwin library. Is attaching > gdb to radiusd and stepping through the functions to see at > which point things break the next best step? Also, does it > make a difference if the modules are dynamically built? > Strace in cygwin is extrememly verbose (to put it mildly) so > I'd like to avoid if possible. > > $ ./radiusd.exe -Xx > Wed Sep 13 14:02:11 2006 : Info: Starting - reading > configuration files ... > Wed Sep 13 14:02:11 2006 : Debug: reread_config: reading radiusd.conf > Wed Sep 13 14:02:11 2006 : Debug: Config: including file: > /cygdrive/c/devel/ap > ps/freeradius-1.1.3/etc/raddb/proxy.conf > Wed Sep 13 14:02:11 2006 : Debug: Config: including file: > /cygdrive/c/devel/ap > ps/freeradius-1.1.3/etc/raddb/clients.conf > Wed Sep 13 14:02:11 2006 : Debug: Config: including file: > /cygdrive/c/devel/ap > ps/freeradius-1.1.3/etc/raddb/snmp.conf > Wed Sep 13 14:02:11 2006 : Debug: Config: including file: > /cygdrive/c/devel/ap > ps/freeradius-1.1.3/etc/raddb/eap.conf > Wed Sep 13 14:02:11 2006 : Debug: Config: including file: > /cygdrive/c/devel/ap > ps/freeradius-1.1.3/etc/raddb/sql.conf > Wed Sep 13 14:02:11 2006 : Debug: main: prefix = > "/cygdrive/c/devel/apps/freera dius-1.1.3" > Wed Sep 13 14:02:11 2006 : Debug: main: localstatedir = > "/cygdrive/c/devel/apps /freeradius-1.1.3/var" > Wed Sep 13 14:02:11 2006 : Debug: main: logdir = > "/cygdrive/c/devel/apps/freera dius-1.1.3/var/log/radius" > Wed Sep 13 14:02:11 2006 : Debug: main: libdir = > "/cygdrive/c/devel/apps/freera dius-1.1.3/lib" > Wed Sep 13 14:02:11 2006 : Debug: main: radacctdir = > "/cygdrive/c/devel/apps/fr eeradius-1.1.3/var/log/radius/radacct" > Wed Sep 13 14:02:11 2006 : Debug: main: hostname_lookups = > no Wed Sep 13 14:02:11 2006 : Debug: main: max_request_time > = 30 Wed Sep 13 14:02:11 2006 : Debug: main: cleanup_delay = > 5 Wed Sep 13 14:02:11 2006 : Debug: main: max_requests = > 1024 Wed Sep 13 14:02:11 2006 : Debug: main: > delete_blocked_requests = 0 Wed Sep 13 14:02:11 2006 : Debug: > main: port = 0 Wed Sep 13 14:02:11 2006 : Debug: main: > allow_core_dumps = no Wed Sep 13 14:02:11 2006 : Debug: > main: log_stripped_names = no Wed Sep 13 14:02:11 2006 : > Debug: main: log_file = "/cygdrive/c/devel/apps/free > radius-1.1.3/var/log/radius/radius.log" > Wed Sep 13 14:02:11 2006 : Debug: main: log_auth = no Wed > Sep 13 14:02:11 2006 : Debug: main: log_auth_badpass = no > Wed Sep 13 14:02:11 2006 : Debug: main: log_auth_goodpass = > no Wed Sep 13 14:02:11 2006 : Debug: main: pidfile = > "/cygdrive/c/devel/apps/freer adius-1.1.3/var/run/radiusd/radiusd.pid" > Wed Sep 13 14:02:11 2006 : Debug: main: user = "(null)" > Wed Sep 13 14:02:11 2006 : Debug: main: group = "(null)" > Wed Sep 13 14:02:11 2006 : Debug: main: usercollide = no Wed > Sep 13 14:02:11 2006 : Debug: main: lower_user = "no" > Wed Sep 13 14:02:11 2006 : Debug: main: lower_pass = "no" > Wed Sep 13 14:02:11 2006 : Debug: main: nospace_user = "no" > Wed Sep 13 14:02:11 2006 : Debug: main: nospace_pass = "no" > Wed Sep 13 14:02:11 2006 : Debug: main: checkrad = > "/cygdrive/c/devel/apps/free radius-1.1.3/sbin/checkrad" > Wed Sep 13 14:02:11 2006 : Debug: main: proxy_requests = yes > Wed Sep 13 14:02:11 2006 : Debug: proxy: retry_delay = 5 Wed > Sep 13 14:02:11 2006 : Debug: proxy: retry_count = 3 Wed Sep > 13 14:02:11 2006 : Debug: proxy: synchronous = no Wed Sep 13 > 14:02:11 2006 : Debug: proxy: default_fallback = yes Wed Sep > 13 14:02:11 2006 : Debug: proxy: dead_time = 120 Wed Sep 13 > 14:02:11 2006 : Debug: proxy: post_proxy_authorize = no Wed > Sep 13 14:02:11 2006 : Debug: proxy: wake_all_if_all_dead = > no Wed Sep 13 14:02:11 2006 : Debug: security: > max_attributes = 200 Wed Sep 13 14:02:11 2006 : Debug: > security: reject_delay = 1 Wed Sep 13 14:02:11 2006 : Debug: > security: status_server = no Wed Sep 13 14:02:11 2006 : > Debug: main: debug_level = 0 Wed Sep 13 14:02:11 2006 : > Debug: read_config_files: reading dictionary Wed Sep 13 > 14:02:11 2006 : Debug: read_config_files: reading naslist > Wed Sep 13 14:02:11 2006 : Info: Using deprecated naslist > file. Support for thi s will go away soon. > Wed Sep 13 14:02:11 2006 : Debug: read_config_files: reading > clients Wed Sep 13 14:02:11 2006 : Debug: read_config_files: > reading realms Wed Sep 13 14:02:11 2006 : Debug: radiusd: > entering modules setup Wed Sep 13 14:02:11 2006 : Debug: > Module: Library search path is /cygdrive/c/dev > el/apps/freeradius-1.1.3/lib Wed Sep 13 14:02:11 2006 : > Error: radiusd.conf[1585] Failed to link to module 'r > lm_exec': Permission denied > > > $ ls lib/rlm_exec* > lib/rlm_exec-1.1.3.la lib/rlm_exec.a lib/rlm_exec.la > >

1 0

Nightly snapshots
by Peter Nixon 13 Sep '06

13 Sep '06

Can we please change the nightly snapshots to bz2 format instead of gz? It will save bandwidth, and save me recompressing the file each time before building snapshot rpms. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 1

Error on Proxy (I think)
by Peter Nixon 12 Sep '06

12 Sep '06

I just got the following error from CVS head when proxying an auth request. Sun Sep 10 22:21:36 2006 : Error: Assertion failed in listen.c, line 558 Its a production server so I will debug more tomorrow. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 5