- Freeradius-Devel - lists.freeradius.org

Need sample config file for EAP-MD5 authentication
by Atif Ikram 25 Aug '06

25 Aug '06

Greetings, I am new to FreeRADIUS and trying to set it up with HostAp and xsupplicant. I have gotten all three components compiled and running. The HostAp and FreeRADIUS are running on Linux box whereas xsupplicant is cross-compiled for an ARM processor and running on an embedded machine but is on the network. The FreeRADIUS and HostAP are talking to each other after when I had the same secret set in clients.conf and wired.conf files in FreeRADIUS and HostAP configuration files respectively. I have xsupplicant trying to authenticate itself and I see it talking to HostAP but since I don't have it configured right, the FreeRADIUS rejects the authentication for this client. I am on a wired network so MD5 type authentication will suffice. I just cannot figure out how to configure the eap.conf file in FreeRADIUS, or syntax where I can provide the user name and password for the client. Can someone help me out with a sample file ? It is a very simple configuration but I couldn't find it on Google search. Thanks in advance, Mike

3 5

Eap-Tls Problem
by Matteo Lazzarini 25 Aug '06

25 Aug '06

Hello I'm a new user, and i'm trying to set an Eap-Tls authentication using freeradius 1.1.2. My system is debian stable. I installed freeradius 1.1.2 (./confidure, make ,make install) and libssl-dev (apt-get install libssl-dev) like here: http://web.archive.org/web/20031206113912/http://www.impossiblereflex.com/8… http://www.alphacore.net/spip/article.php3?id_article=33 When I turn on freeradius I can see this: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/eap.conf Config: including file: /etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = yes main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = yes main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/etc/1x/jagger.pem" tls: certificate_file = "/etc/1x/jagger.pem" tls: CA_file = "/etc/1x/root.pem" tls: private_key_password = "whatever" tls: dh_file = "/etc/1x/dh" tls: random_file = "/etc/1x/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap: Loaded and initialized type tls peap: default_eap_type = "mschapv2" peap: copy_request_to_tunnel = no peap: use_tunneled_reply = no peap: proxy_tunneled_request_as_eap = yes rlm_eap: Loaded and initialized type peap mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (auth_log) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. After I made the certificate and installed in the client I tried to request an authentication but the output show me an error: rad_recv: Access-Request packet from host 192.168.1.5:1217, id=17, length=139 User-Name = "marcello" NAS-IP-Address = 0.0.0.0 NAS-Port = 0 Called-Station-Id = "00-40-05-30-C5-86" Calling-Station-Id = "00-0C-F1-15-17-59" NAS-Identifier = "DLink-900AP+" Framed-MTU = 1380 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020d000d016d617263656c6c6f Message-Authenticator = 0x5cf6d0c113ea537193f632be5324ddac Processing the authorize section of radiusd.conf modcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821 modcall[authorize]: module "auth_log" returns ok for request 8 rlm_eap: EAP packet type response id 13 length 13 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 8 users: Matched entry DEFAULT at line 152 users: Matched entry marcello at line 219 modcall[authorize]: module "files" returns ok for request 8 modcall: leaving group authorize (returns updated) for request 8 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 8 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 8 modcall: leaving group authenticate (returns handled) for request 8 Sending Access-Challenge of id 17 to 192.168.1.5 port 1217 EAP-Message = 0x010e00060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf07c05d2e094204483f4809fce1d0c28 Finished request 8 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.5:1217, id=18, length=224 User-Name = "marcello" NAS-IP-Address = 0.0.0.0 NAS-Port = 0 Called-Station-Id = "00-40-05-30-C5-86" Calling-Station-Id = "00-0C-F1-15-17-59" NAS-Identifier = "DLink-900AP+" Framed-MTU = 1380 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020e00500d800000004616030100410100003d030144e9b43485e72b29db6f1029820e8626f3358dc31aacc52a129ce61689ebe58f00001600040005000a000900640062000300060013001200630100 State = 0xf07c05d2e094204483f4809fce1d0c28 Message-Authenticator = 0x975a5fb5db9745857a408bd7f840d26b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 9 modcall[authorize]: module "preprocess" returns ok for request 9 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821 modcall[authorize]: module "auth_log" returns ok for request 9 rlm_eap: EAP packet type response id 14 length 80 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 9 users: Matched entry DEFAULT at line 152 users: Matched entry marcello at line 219 modcall[authorize]: module "files" returns ok for request 9 modcall: leaving group authorize (returns updated) for request 9 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 9 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 063f], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 009a], CertificateRequest TLS_accept: SSLv3 write certificate request A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 9 modcall: leaving group authenticate (returns handled) for request 9 Sending Access-Challenge of id 18 to 192.168.1.5 port 1217 EAP-Message = 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 EAP-Message = 0x1c06092a864886f70d010901160f63614067727570706f696d692e6974301e170d3036303832313130353231345a170d3037303832313130353231345a30818a310b3009060355040613024954310e300c060355040813054954414c593110300e0603550407130742657267616d6f31123010060355040a130947727570706f696d693110300e060355040b1307494d492073726c310f300d060355040313066a61676765723122302006092a864886f70d01090116136a61676765724067727570706f696d692e697430819f300d06092a864886f70d010101050003818d0030818902818100bbe2fe9126b2b0849877a8b391dda33f98ee5de4a34d EAP-Message = 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 EAP-Message = 0x068ea99f5b2f42aec356b15d82d4cf4d925dc611c0a4037aec9c5743625600038530820381308202eaa003020102020900ede70675d53a5467300d06092a864886f70d0101040500308188310b3009060355040613024954310e300c060355040813054954414c593110300e0603550407130742657267616d6f31123010060355040a130947727570706f696d693110300e060355040b1307494d492073726c3111300f060355040313084341726164697573311e301c06092a864886f70d010901160f63614067727570706f696d692e6974301e170d3036303832313130353035345a170d3036303932303130353035345a308188310b3009060355 EAP-Message = 0x040613024954310e300c060355040813054954414c59 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8bfc44c788f3b51de96ef0e08569c6e5 Finished request 9 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 8 ID 17 with timestamp 44e9b492 Cleaning up request 9 ID 18 with timestamp 44e9b492 Nothing to do. Sleeping until we see a request. Can Somebody help me? Thanks Matteo

6 23

Re: Last set of changes for 1.1.3
by Sandworm 25 Aug '06

25 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 23 Aug 2006 03:29:45 +1000 Peter Nixon wrote: > > I changed the RedHat spec file to match the suse spec file > with regards %doc > Actually, that gets a lot of unnecessary stuff in (including README.suse, etc), as well as Makefiles, as Nicolas pointed out. The following patch to the 1.1.3 CVS redhat directory file freeradius.spec simplifies this. I've tested it and appears to restore the doc install behaviour that FR used to have a few releases ago. - --- freeradius.spec.orig 2006-08-23 15:24:59.000000000 +1000 +++ freeradius.spec 2006-08-23 16:29:12.000000000 +1000 @@ -56,6 +56,9 @@ # remove unneeded stuff rm -f $RPM_BUILD_ROOT%{_mandir}/man8/builddbm.8 rm -f $RPM_BUILD_ROOT%{_prefix}/sbin/rc.radiusd +rm -rf doc/00-OLD doc/CVS doc/Makefile +rm -rf doc/examples/CVS doc/examples/Makefile +rm -rf doc/rfc/CVS doc/rfc/Makefile cd redhat install -m 755 rc.radiusd-redhat $RPM_BUILD_ROOT/etc/rc.d/init.d/radiusd @@ -98,7 +101,8 @@ %files %defattr(-,root,root) - -%doc doc/ChangeLog doc/README* todo/ COPYRIGHT INSTALL +%doc doc/* todo/ COPYRIGHT INSTALL +%doc doc/examples/ doc/rfc/ %config /etc/pam.d/radius %config /etc/logrotate.d/radiusd %config /etc/rc.d/init.d/radiusd -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTr7XoACgkQmw4BJyaatJ0F0wCfZDK5nd6wjKMfSwlRr4WblJwBaQgA oJBx4q1Fq8Q3PCGnNPfjsXOdBs0Y =LU+g -----END PGP SIGNATURE-----

2 1

Automatic report from sources (radiusd) between 24.08.2006 - 25.08.2006 GMT
by Automatic cvs log generator 25 Aug '06

25 Aug '06

CVS log entries from 24.08.2006 (Thu) 08:00:00 - 25.08.2006 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/auth.c; Revisions: 1.158 File: radiusd/src/main/mainconfig.c; Revisions: 1.93 File: radiusd/src/lib/valuepair.c; Revisions: 1.112 File: radiusd/src/modules/rlm_files/rlm_files.c; Revisions: 1.77 ===================================================== Log entries ===================================================== Description: In pairmove(), do NOT blindly move all of the attributes over if *to == NULL. We still have to pay attention to the operators. If the operators are comparison ones, then do NOT move them to the "*to" list, as they're not needed. Modified files: File: radiusd/src/lib/valuepair.c; Revision: 1.112; Date: 2006/08/24 23:49:47; Author: aland; Lines: (+25 -8) ------------------------------- Description: Don't copy User-Password to Cleartext-Password, if the User-Password already exists. Modified files: File: radiusd/src/main/auth.c; Revision: 1.158; Date: 2006/08/24 23:27:20; Author: aland; Lines: (+8 -2) ------------------------------- Description: If debugging, set output to stdout. Print server version on startup update text for reloading configuration files Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.93; Date: 2006/08/24 18:57:01; Author: aland; Lines: (+6 -2) ------------------------------- Description: Corrected comment Modified files: File: radiusd/src/modules/rlm_files/rlm_files.c; Revision: 1.77; Date: 2006/08/24 23:50:13; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/valuepair.c Revisions: 1.112 Authors: aland (+25 -8) ------------------------------- File: radiusd/src/main/auth.c Revisions: 1.158 Authors: aland (+8 -2) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.93 Authors: aland (+6 -2) ------------------------------- File: radiusd/src/modules/rlm_files/rlm_files.c Revisions: 1.77 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 23.08.2006 - 24.08.2006 GMT
by Automatic cvs log generator 24 Aug '06

24 Aug '06

CVS log entries from 23.08.2006 (Wed) 08:00:01 - 24.08.2006 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/log.c; Revisions: 1.51 File: radiusd/src/main/mainconfig.c; Revisions: 1.92 File: radiusd/src/main/radiusd.c; Revisions: 1.357 ===================================================== Combined list of identical log entries ===================================================== Description: Until we read radiusd.conf, all errors should go to stderr. Once we read radiusd.conf, we've initialized the logging destination, and all errors should go there. Modified files: File: radiusd/src/main/log.c; Revision: 1.51; Date: 2006/08/23 20:37:15; Author: aland; Lines: (+35 -19) File: radiusd/src/main/mainconfig.c; Revision: 1.92; Date: 2006/08/23 20:37:14; Author: aland; Lines: (+53 -39) File: radiusd/src/main/radiusd.c; Revision: 1.357; Date: 2006/08/23 20:37:14; Author: aland; Lines: (+9 -6) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/log.c Revisions: 1.51 Authors: aland (+35 -19) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.92 Authors: aland (+53 -39) ------------------------------- File: radiusd/src/main/radiusd.c Revisions: 1.357 Authors: aland (+9 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Help to debugging the server using GDb
by Shankar Ganesh C 24 Aug '06

24 Aug '06

Hi I was trying to debug the radiusd through gbb.But the program is exiting out below are the logs Pls let me know any debugging flags needs to be set, when i need to debug using GDB Rgds, Shankar ganesh Wed Aug 23 16:13:26 2006 : Info: Starting - reading configuration files ... n947 if ((mainconfig.allow_core_dumps == FALSE) && (debug_flag == 0)) { (gdb) n 959 DEBUG2("radiusd: entering modules setup"); (gdb) n 950 act.sa_handler = sig_fatal; (gdb) n 951 sigaction(SIGSEGV, &act, NULL); (gdb) n 959 DEBUG2("radiusd: entering modules setup"); (gdb) n 960 if (setup_modules() < 0) { (gdb) n n 971 if (strcmp(radlog_dir, "syslog") == 0) { (gdb) n 972 openlog(progname, LOG_PID, syslog_facility); (gdb) n 977 if (strcmp(radlog_dir, "stdout") == 0) { (gdb) n 978 radlog_dest = RADLOG_STDOUT; (gdb) n 979 } else if (strcmp(radlog_dir, "stderr") == 0) { (gdb) n 980 radlog_dest = RADLOG_STDERR; (gdb) n 984 rl_init(); (gdb) n 989 pair_builtincompare_init(); (gdb) n 998 if (debug_flag == 0 && dont_fork == FALSE) { (gdb) n 999 pid = fork(); (gdb) n 1000 if(pid < 0) { (gdb) n 1001 radlog(L_ERR|L_CONS, "Couldn't fork"); (gdb) n 1008 if(pid > 0) { (gdb) n 1009 exit(0); (gdb) n Program exited normally.

4 3

Automatic report from sources (radiusd) between 22.08.2006 - 23.08.2006 GMT
by Automatic cvs log generator 23 Aug '06

23 Aug '06

CVS log entries from 22.08.2006 (Tue) 08:00:01 - 23.08.2006 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.15.2.2.2.1 File: radiusd/src/modules/rlm_dbm/rlm_dbm_parser.c; Revisions: 1.13, 1.9.4.1 File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.28, 1.57.2.31.2.27 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revisions: 1.35, 1.34, 1.21.4.10, 1.21.4.9 File: radiusd/src/lib/hash.c; Revisions: 1.16, 1.9.2.8 File: radiusd/src/lib/dict.c; Revisions: 1.92, 1.50.2.4.2.11 Author: pnixon File: radiusd/redhat/freeradius.spec; Revisions: 1.19.2.5.2.8 ===================================================== Combined list of identical log entries ===================================================== Description: Be a little more paranoid about initialization. Modified files: File: radiusd/src/lib/dict.c; Revision: 1.92; Date: 2006/08/22 23:02:15; Author: aland; Lines: (+30 -2) File: radiusd/src/lib/dict.c; Revision: 1.50.2.4.2.11; Date: 2006/08/22 23:02:38; Author: aland; Lines: (+30 -2) File: radiusd/src/lib/hash.c; Revision: 1.16; Date: 2006/08/22 23:02:15; Author: aland; Lines: (+7 -4) File: radiusd/src/lib/hash.c; Revision: 1.9.2.8; Date: 2006/08/22 23:02:36; Author: aland; Lines: (+7 -4) ===================================================== Log entries ===================================================== Description: One more bug fix Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.28; Date: 2006/08/22 23:09:20; Author: aland; Lines: (+3 -2) ------------------------------- Description: Latest updates Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.27; Date: 2006/08/22 16:25:41; Author: aland; Lines: (+2 -1) ------------------------------- Description: add some extra stuff to %doc to bring inline with suse Modified files: File: radiusd/redhat/freeradius.spec; Revision: 1.19.2.5.2.8; Date: 2006/08/22 17:25:59; Author: pnixon; Lines: (+6 -1) ------------------------------- Description: Allow empty check lines. This closes bug #380. Modified files: File: radiusd/src/modules/rlm_dbm/rlm_dbm_parser.c; Revision: 1.13; Date: 2006/08/22 18:19:56; Author: aland; Lines: (+4 -4) ------------------------------- Description: Allow empty check lines. This closes bug #380. Modified files: File: radiusd/src/modules/rlm_dbm/rlm_dbm_parser.c; Revision: 1.9.4.1; Date: 2006/08/22 18:19:31; Author: aland; Lines: (+4 -4) ------------------------------- Description: Be a little more aggressive about shrinking the TLS fragment size when given a Framed-MTU. This closes bug #383. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.35; Date: 2006/08/22 16:20:26; Author: aland; Lines: (+25 -5) ------------------------------- Description: Free more entries in the config. This closes bug #385 Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.34; Date: 2006/08/22 16:08:49; Author: aland; Lines: (+14 -11) ------------------------------- Description: Be a little more aggressive about shrinking the TLS fragment size when given a Framed-MTU. This closes bug #383. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.21.4.10; Date: 2006/08/22 16:20:41; Author: aland; Lines: (+25 -5) ------------------------------- Description: Free more entries in the config. This closes bug #385. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c; Revision: 1.21.4.9; Date: 2006/08/22 16:09:16; Author: aland; Lines: (+14 -11) ------------------------------- Description: Corrected typo in debugging message Modified files: File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.15.2.2.2.1; Date: 2006/08/22 20:19:22; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.28, 1.57.2.31.2.27 Authors: aland (+3 -2), aland (+2 -1) ------------------------------- File: radiusd/redhat/freeradius.spec Revisions: 1.19.2.5.2.8 Authors: pnixon (+6 -1) ------------------------------- File: radiusd/src/lib/dict.c Revisions: 1.92, 1.50.2.4.2.11 Authors: aland (+30 -2), aland (+30 -2) ------------------------------- File: radiusd/src/lib/hash.c Revisions: 1.16, 1.9.2.8 Authors: aland (+7 -4), aland (+7 -4) ------------------------------- File: radiusd/src/modules/rlm_dbm/rlm_dbm_parser.c Revisions: 1.13, 1.9.4.1 Authors: aland (+4 -4), aland (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Revisions: 1.35, 1.34, 1.21.4.10, 1.21.4.9 Authors: aland (+25 -5), aland (+14 -11), aland (+25 -5), aland (+14 -11) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.15.2.2.2.1 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: Last set of changes for 1.1.3
by Sandworm 22 Aug '06

22 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 16 Jul 2006 03:49:44 +1000 Nicolas Baradakis <nbk(a)sitadelle.com> wrote: > >I've added an option --with-docdir to ./configure, so we can chose >the >directory where the documentation files will be installed. It >should be >useful to build a RPM package. > >I'm not using a redhat-based distribution, and I can't be sure >this >solves all the problems. Please get version 1.1.3 from CVS and try >to run rpmbuild. Sorry, it took a while for me to get to this. Got version 1.1.3 from CVS today and ran rpmbuild on Redhat Enterprise Linux 4 (Update 3). Builds OK - very good, and the default setting Nicolas inserted into the spec file for "with-docdir" is fine. One residual issue though (a fix for which I had as part of the patch I had originally submitted to this list) is that /usr/share/doc/freeradius-1.1.3/ gets only "ChangeLog COPYRIGHT INSTALL README todo/". Unless the remining required files in the doc directory are inserted into the redhat spec file as I had done in the patch, those doc files will not (and do not) get copied in. A better fix would be to rename the files that should be copied into the RPM (or into an installation on any other distro) to have a standard prefix (say "doc-" for want of anything better) from the doc directory. In that case, having the line "%doc doc/doc* todo/ COPYRIGHT INSTALL" in the spec file in the %files section will install everything required. What do you think? Regards SW -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTqpkcACgkQmw4BJyaatJ089QCglLKtEH15ltYXLJdgumjyB6v0JIcA oJlIJpVh8eYuKW3YIZu+vKTuON8h =SkZw -----END PGP SIGNATURE-----

2 1

Unexpected Accounting proxy behaviour
by Peter Nixon 22 Aug '06

22 Aug '06

I have the following in "acct_users": peter Called-Station-Id == "myrealm", Proxy-To-Realm := myproxy Now, with this configuration, "myproxy" receives all of the accounting packets (Start, Interim-Update and Stop) as expected, HOWEVER on the radius server doing the proxying in sqltrace.log (and in the SQL table) I only see the "Start" record. For non proxied packets I happily have the 3 different typs of SQL queries show up in sqltrace.log Can anyone tell me what is different about Start records that would cause this behaviour? I am running the 1.1.x branch cvs snapshot from 2006-08-08 on this server. Thanks in Advance -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 2

Re: Last set of changes for 1.1.3
by Sandworm 22 Aug '06

22 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, 22 Aug 2006 16:38:00 +1000 Sandworm <sandworm(a)mepd.hush.com> wrote: > >>A better fix would be to rename the files that should be copied >into the RPM (or into an installation on any other distro) to have >a standard prefix (say "doc-" for want of anything better) from >the >doc directory. In that case, having the line "%doc doc/doc* todo/ >COPYRIGHT INSTALL" in the spec file in the %files section will >install everything required. Further to what I just posted - Or what has been done in the Suse SPEC file can be done for the Redhat SPEC file - remove whatever is not required from the doc/ directory (such as doc/00-OLD), and then "%doc doc/* todo/ COPYRIGHT INSTALL" will do the trick. SW -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkTqqhMACgkQmw4BJyaatJ16egCfUzcQ9xACHRxg2Slq6NvcrOAS0hMA n3wLtdtZvaDg0sWnE8FUxdbDJxdw =LBC1 -----END PGP SIGNATURE-----

2 1