- Freeradius-Devel - lists.freeradius.org

Automatic report from sources (radiusd) between 21.08.2006 - 22.08.2006 GMT
by Automatic cvs log generator 22 Aug '06

22 Aug '06

CVS log entries from 21.08.2006 (Mon) 08:00:02 - 22.08.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/main/Makefile.in; Revisions: 1.27.2.5.2.4 File: radiusd/src/include/Makefile; Revisions: 1.5 Author: pnixon File: radiusd/suse/freeradius.spec; Revisions: 1.11.2.6.2.8 ===================================================== Log entries ===================================================== Description: Install new files hash.h and packet.h too and remove "freeradius-devel" from the #include directives in the copy to be found in the destination directory. An external program could now use the FreeRADIUS libradius with a #include <freeradius/libradius.h> Modified files: File: radiusd/src/include/Makefile; Revision: 1.5; Date: 2006/08/21 09:47:48; Author: nbk; Lines: (+4 -1) ------------------------------- Description: Don't link mainconfig.lo to radrelay, it's not necessary. Thanks to Markus Krause <krause(a)biochem.mpg.de> Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.27.2.5.2.4; Date: 2006/08/21 12:47:46; Author: nbk; Lines: (+3 -3) ------------------------------- Description: Major update the the spec file to with BuildRequires for various linux versions Modified files: File: radiusd/suse/freeradius.spec; Revision: 1.11.2.6.2.8; Date: 2006/08/21 13:12:21; Author: pnixon; Lines: (+108 -40) ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/Makefile Revisions: 1.5 Authors: nbk (+4 -1) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.27.2.5.2.4 Authors: nbk (+3 -3) ------------------------------- File: radiusd/suse/freeradius.spec Revisions: 1.11.2.6.2.8 Authors: pnixon (+108 -40) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: building v.1.1.3(cvs) on different systems
by Markus Krause 22 Aug '06

22 Aug '06

Zitat von Nicolas Baradakis <nbk(a)sitadelle.com>: > Markus Krause wrote: > > > i just tested the building of todays cvs checkout of branch_1_1, here is > > what happend (maybe you want to know ;-)): > > Thanks for the report, your tests are very useful. i am glad to be able to contribute at least this way a bit to this great project! > [...] > > > * mac os x 10.4.7: > > running ./configure and then make leads to: > > > > /usr/bin/ld: multiple definitions of symbol _mainconfig > > .libs/radrelay.o definition of _mainconfig in section (__DATA,__common) > > .libs/mainconfig.o definition of _mainconfig in section (__DATA,__common) > > It seems radrelay doesn't need to link with mainconfig.o anymore. Please > do a "cvs update" and try again with no configure option. ok, i did a "cvs update", then "./configure" and "make" there were no errors and after "make install" i had a running freeradius server ! > > then i tried "./configure --disable-shared" (i remembered something ...) > > and got until: > > > > /usr/bin/ld: Undefined symbols: > > _boot_DynaLoader > > It looks like a problem with rlm_perl. This time please try to build > with "./configure --disable-shared --without-rlm-perl". ok (although the solution above works, but may be it is of some use): make clean ./configure --disable-shared --without-rlm-perl make the build was successful. > Please also post the output of the command "perl -MExtUtils::Embed -e ldopts". here you are: macky-lan:~ krause$ perl -MExtUtils::Embed -e ldopts -L/usr/local/lib /System/Library/Perl/5.8.6/darwin-thread-multi-2level/auto/DynaLoader/DynaLoader.a -L/System/Library/Perl/5.8.6/darwin-thread-multi-2level/CORE -lperl -ldl -lm -lc macky-lan:~ krause$ maybe i should mention that no sql-modules (sqlcounter, mysql, postgresql, oracle, unixODBC) were build due to missing libraries (maybe i can test it at least with mysql next time ...) so, what else is there to test? ;-) regards markus > > -- > Nicolas Baradakis > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html > -- Markus Krause email: krause(a)biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

3 2

building v.1.1.3(cvs) on different systems
by Markus Krause 21 Aug '06

21 Aug '06

hi all, i just tested the building of todays cvs checkout of branch_1_1, here is what happend (maybe you want to know ;-)): * debian sarge 3.1a: building worked without problems, except some warnings at the end from "dh_shlibdeps -s: dpkg-shlibdeps: warning: could not find path for libradius-1.1.3.so" (and others), but the installed version works. * suse 10.1: "rpmbuild -bb" said it needs "libapr0", which i could not find in suse 10.1. i changed it in freeradius.spec to "libapr1" instead, which seems to work, at least the build finished without problems and the installed programms seems to run without errors. * mac os x 10.4.7: running ./configure and then make leads to: radrelay.c: In function 'loop': radrelay.c:679: warning: comparison between signed and unsigned radrelay.c: In function 'main': radrelay.c:875: warning: passing argument 1 of 'free' discards qualifiers from pointer target type radrelay.c:930: warning: comparison between signed and unsigned gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DDARWIN -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I../include -DHOSTINFO=\"powerpc-apple-darwin8.7.0\" -DRADIUSD_VERSION=\"1.1.3\" -c radrelay.c -o radrelay.o >/dev/null 2>&1 /Users/krause/downloads/freeradius/radiusd/libtool --mode=link gcc -o radrelay radrelay.lo mainconfig.lo util.lo nas.lo client.lo log.lo conffile.lo files.lo xlat.lo -lresolv -lpthread ../lib/libradius.la gcc -o .libs/radrelay .libs/radrelay.o .libs/mainconfig.o .libs/util.o .libs/nas.o .libs/client.o .libs/log.o .libs/conffile.o .libs/files.o .libs/xlat.o -lresolv -lpthread ../lib/.libs/libradius.dylib /usr/bin/ld: multiple definitions of symbol _mainconfig .libs/radrelay.o definition of _mainconfig in section (__DATA,__common) .libs/mainconfig.o definition of _mainconfig in section (__DATA,__common) collect2: ld returned 1 exit status make[4]: *** [radrelay] Error 1 make[3]: *** [common] Error 2 make[2]: *** [all] Error 2 make[1]: *** [common] Error 2 make: *** [all] Error 2 then i tried "./configure --disable-shared" (i remembered something ...) and got until: gcc .libs/radiusdS.o -o radiusd acct.o auth.o client.o conffile.o exec.o files.o log.o mainconfig.o modules.o modcall.o nas.o proxy.o radiusd.o radius_snmp.o request_list.o session.o smux.o threads.o util.o valuepair.o version.o timestr.o xlat.o ../modules/rlm_acct_unique/.libs/rlm_acct_unique.a ../modules/rlm_always/.libs/rlm_always.a ../modules/rlm_attr_filter/.libs/rlm_attr_filter.a ../modules/rlm_attr_rewrite/.libs/rlm_attr_rewrite.a ../modules/rlm_chap/.libs/rlm_chap.a ../modules/rlm_dbm/.libs/rlm_dbm.a ../modules/rlm_detail/.libs/rlm_detail.a ../modules/rlm_digest/.libs/rlm_digest.a ../modules/rlm_eap/.libs/rlm_eap.a ../modules/rlm_exec/.libs/rlm_exec.a ../modules/rlm_expr/.libs/rlm_expr.a ../modules/rlm_fastusers/.libs/rlm_fastusers.a ../modules/rlm_files/.libs/rlm_files.a ../modules/rlm_krb5/.libs/rlm_krb5.a -lkrb5 -lcom_err ../modules/rlm_ldap/.libs/rlm_ldap.a -lldap_r ../modules/rlm_mschap/.libs/rlm_mschap.a ../modules/rlm_ns_mta_md5/.libs/rlm_ns_mta_md5.a ../modules/rlm_otp/.libs/rlm_otp.a ../modules/rlm_pam/.libs/rlm_pam.a -lpam ../modules/rlm_pap/.libs/rlm_pap.a ../modules/rlm_passwd/.libs/rlm_passwd.a ../modules/rlm_perl/.libs/rlm_perl.a -L/usr/local/lib -L/System/Library/Perl/5.8.6/darwin-thread-multi-2level/CORE -lperl -lm -lc ../modules/rlm_preprocess/.libs/rlm_preprocess.a ../modules/rlm_radutmp/.libs/rlm_radutmp.a ../modules/rlm_realm/.libs/rlm_realm.a ../modules/rlm_sql/.libs/rlm_sql.a ../modules/rlm_sql_log/.libs/rlm_sql_log.a ../modules/rlm_sqlcounter/.libs/rlm_sqlcounter.a ../modules/rlm_unix/.libs/rlm_unix.a ../modules/rlm_checkval/.libs/rlm_checkval.a ../modules/rlm_eap/types/rlm_eap_md5/.libs/rlm_eap_md5.a ../modules/rlm_eap/types/rlm_eap_leap/.libs/rlm_eap_leap.a ../modules/rlm_eap/types/rlm_eap_tls/.libs/rlm_eap_tls.a ../modules/rlm_eap/types/rlm_eap_ttls/.libs/rlm_eap_ttls.a ../modules/rlm_eap/types/rlm_eap_sim/.libs/rlm_eap_sim.a ../modules/rlm_eap/types/rlm_eap_peap/.libs/rlm_eap_peap.a /Users/krause/downloads/freeradius/radiusd/src/modules/rlm_eap/libeap/.libs/libeap.a ../modules/rlm_eap/types/rlm_eap_mschapv2/.libs/rlm_eap_mschapv2.a ../modules/rlm_eap/types/rlm_eap_gtc/.libs/rlm_eap_gtc.a ../modules/rlm_sql/drivers/rlm_sql_iodbc/.libs/rlm_sql_iodbc.a -L/usr/lib -liodbc ../modules/rlm_eap/libeap/.libs/libeap.a /Users/krause/downloads/freeradius/radiusd/src/lib/.libs/libradius.a -lresolv -lpthread -lssl -lcrypto ../lib/.libs/libradius.a /usr/lib/libltdl.3.1.0.dylib -ldl /usr/bin/ld: Undefined symbols: _boot_DynaLoader collect2: ld returned 1 exit status rm -f .libs/radiusdS.o make[4]: *** [radiusd] Error 1 make[3]: *** [common] Error 2 make[2]: *** [all] Error 2 make[1]: *** [common] Error 2 make: *** [all] Error 2 as i am quite new to mac os x programming i do not know how to solve this ... any hints? regards markus -- Markus Krause email: krause(a)biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

3 8

Eap-Tls Problem
by Matteo Lazzarini 21 Aug '06

21 Aug '06

Hello I'm a new user, and i'm trying to set an Eap-Tls authentication using freeradius 1.1.2. My system is debian stable. I installed freeradius 1.1.2 (./confidure, make ,make install) and libssl-dev (apt-get install libssl-dev) like here: http://web.archive.org/web/20031206113912/http://www.impossiblereflex.com/8… http://www.alphacore.net/spip/article.php3?id_article=33 When I turn on freeradius I can see this: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/eap.conf Config: including file: /etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = yes main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = yes main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/etc/1x/jagger.pem" tls: certificate_file = "/etc/1x/jagger.pem" tls: CA_file = "/etc/1x/root.pem" tls: private_key_password = "whatever" tls: dh_file = "/etc/1x/dh" tls: random_file = "/etc/1x/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap: Loaded and initialized type tls peap: default_eap_type = "mschapv2" peap: copy_request_to_tunnel = no peap: use_tunneled_reply = no peap: proxy_tunneled_request_as_eap = yes rlm_eap: Loaded and initialized type peap mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (auth_log) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. After I made the certificate and installed in the client I tried to request an authentication but the output show me an error: rad_recv: Access-Request packet from host 192.168.1.5:1217, id=17, length=139 User-Name = "marcello" NAS-IP-Address = 0.0.0.0 NAS-Port = 0 Called-Station-Id = "00-40-05-30-C5-86" Calling-Station-Id = "00-0C-F1-15-17-59" NAS-Identifier = "DLink-900AP+" Framed-MTU = 1380 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020d000d016d617263656c6c6f Message-Authenticator = 0x5cf6d0c113ea537193f632be5324ddac Processing the authorize section of radiusd.conf modcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821 modcall[authorize]: module "auth_log" returns ok for request 8 rlm_eap: EAP packet type response id 13 length 13 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 8 users: Matched entry DEFAULT at line 152 users: Matched entry marcello at line 219 modcall[authorize]: module "files" returns ok for request 8 modcall: leaving group authorize (returns updated) for request 8 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 8 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 8 modcall: leaving group authenticate (returns handled) for request 8 Sending Access-Challenge of id 17 to 192.168.1.5 port 1217 EAP-Message = 0x010e00060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf07c05d2e094204483f4809fce1d0c28 Finished request 8 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.5:1217, id=18, length=224 User-Name = "marcello" NAS-IP-Address = 0.0.0.0 NAS-Port = 0 Called-Station-Id = "00-40-05-30-C5-86" Calling-Station-Id = "00-0C-F1-15-17-59" NAS-Identifier = "DLink-900AP+" Framed-MTU = 1380 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020e00500d800000004616030100410100003d030144e9b43485e72b29db6f1029820e8626f3358dc31aacc52a129ce61689ebe58f00001600040005000a000900640062000300060013001200630100 State = 0xf07c05d2e094204483f4809fce1d0c28 Message-Authenticator = 0x975a5fb5db9745857a408bd7f840d26b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 9 modcall[authorize]: module "preprocess" returns ok for request 9 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.1.5/auth-detail-20060821 modcall[authorize]: module "auth_log" returns ok for request 9 rlm_eap: EAP packet type response id 14 length 80 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 9 users: Matched entry DEFAULT at line 152 users: Matched entry marcello at line 219 modcall[authorize]: module "files" returns ok for request 9 modcall: leaving group authorize (returns updated) for request 9 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 9 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 063f], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 009a], CertificateRequest TLS_accept: SSLv3 write certificate request A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 9 modcall: leaving group authenticate (returns handled) for request 9 Sending Access-Challenge of id 18 to 192.168.1.5 port 1217 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x040613024954310e300c060355040813054954414c59 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8bfc44c788f3b51de96ef0e08569c6e5 Finished request 9 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 8 ID 17 with timestamp 44e9b492 Cleaning up request 9 ID 18 with timestamp 44e9b492 Nothing to do. Sleeping until we see a request. Can Somebody help me? Thanks Matteo

1 0

EAP-AKA support
by bphaneuf＠reefpoint.com 21 Aug '06

21 Aug '06

I have a need for FreeRadius to support EAP-AKA and did not see it available, so I copied/extended the FreeRadius EAP-SIM module to support it. I noticed a number of requests for it in the past so I would like to contribute my modification/extensions to freeradius.org, My implementation relies on some EAP-SIM module infrastructure such as the EAP-SIM header file as well as some EAP-SIM routines. It also relied on a number of EAP-SIM attributes defined in dictionary.freeradius.internal. FreeRadius starts up and runs with or without the EAP-SIM module loaded. Is this a suitable approach or should it be completely stand-alone? What is the procedure to actually submit my extensions for consideration?

2 1

CVS build fails on rlm_policy
by A.L.M.Buxey＠lboro.ac.uk 21 Aug '06

21 Aug '06

hi, quick note : building the latest CVS head (aka 2.0.0-pre0) fails at the rlm_policy building stage - the compile_modgroup is fed too few arguments it claims.. parse.c: In function 'parse_module': parse.c:1084: warning: passing argument 1 of 'compile_modgroup' makes pointer from integer without a cast parse.c:1084: warning: passing argument 2 of 'compile_modgroup' makes integer from pointer without a cast parse.c:1084: warning: passing argument 3 of 'compile_modgroup' from incompatible pointer type parse.c:1084: error: too few arguments to function 'compile_modgroup' make: *** [parse.lo] Error 1 alan

2 1

Automatic report from sources (radiusd) between 18.08.2006 - 19.08.2006 GMT
by Automatic cvs log generator 19 Aug '06

19 Aug '06

CVS log entries from 18.08.2006 (Fri) 08:00:00 - 19.08.2006 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/doc/ChangeLog; Revisions: 1.57.2.31.2.26 File: radiusd/raddb/sqlippool.conf; Revisions: 1.2 Author: nbk File: radiusd/debian/freeradius.postinst; Revisions: 1.9, 1.5.2.2.2.2 Author: pnixon File: radiusd/doc/examples/postgresql.sql; Revisions: 1.1.2.6 File: radiusd/debian/freeradius.init; Revisions: 1.1.2.3.2.2 File: radiusd/suse/rcradiusd; Revisions: 1.2.6.3, 1.2.6.2 File: radiusd/raddb/postgresql.conf; Revisions: 1.16.2.2.2.3 ===================================================== Combined list of identical log entries ===================================================== Description: The patch in the downstream Debian package to run radclient with a non-privileged user removes the permissions again on upgrade. Instead, we always leave the file /etc/freeradius/dictionary with the default permissions. Modified files: File: radiusd/debian/freeradius.postinst; Revision: 1.9; Date: 2006/08/18 11:57:53; Author: nbk; Lines: (+7 -7) File: radiusd/debian/freeradius.postinst; Revision: 1.5.2.2.2.2; Date: 2006/08/18 11:58:04; Author: nbk; Lines: (+7 -7) ===================================================== Log entries ===================================================== Description: Add LSB compatible init info Modified files: File: radiusd/debian/freeradius.init; Revision: 1.1.2.3.2.2; Date: 2006/08/18 13:23:57; Author: pnixon; Lines: (+8 -0) ------------------------------- Description: Updated with latest changes Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.26; Date: 2006/08/18 18:47:07; Author: aland; Lines: (+6 -2) ------------------------------- Description: Add XAscendSessionSvrKey to allow Packet of Disconnect Modified files: File: radiusd/doc/examples/postgresql.sql; Revision: 1.1.2.6; Date: 2006/08/18 10:22:36; Author: pnixon; Lines: (+3 -2) ------------------------------- Description: Add X-Ascend-Session-Svr-Key so Packet of Disconnect works Modified files: File: radiusd/raddb/postgresql.conf; Revision: 1.16.2.2.2.3; Date: 2006/08/18 10:50:30; Author: pnixon; Lines: (+7 -7) ------------------------------- Description: Pulled from branch_1_1 Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.2; Date: 2006/08/18 16:23:22; Author: aland; Lines: (+95 -0) ------------------------------- Description: added a couple of extra services that should start b4 radiusd Modified files: File: radiusd/suse/rcradiusd; Revision: 1.2.6.3; Date: 2006/08/18 13:27:50; Author: pnixon; Lines: (+1 -1) ------------------------------- Description: update to start AFTER db backends Modified files: File: radiusd/suse/rcradiusd; Revision: 1.2.6.2; Date: 2006/08/18 12:24:09; Author: pnixon; Lines: (+2 -0) ===================================================== Summary of modified files ===================================================== File: radiusd/debian/freeradius.init Revisions: 1.1.2.3.2.2 Authors: pnixon (+8 -0) ------------------------------- File: radiusd/debian/freeradius.postinst Revisions: 1.9, 1.5.2.2.2.2 Authors: nbk (+7 -7), nbk (+7 -7) ------------------------------- File: radiusd/doc/ChangeLog Revisions: 1.57.2.31.2.26 Authors: aland (+6 -2) ------------------------------- File: radiusd/doc/examples/postgresql.sql Revisions: 1.1.2.6 Authors: pnixon (+3 -2) ------------------------------- File: radiusd/raddb/postgresql.conf Revisions: 1.16.2.2.2.3 Authors: pnixon (+7 -7) ------------------------------- File: radiusd/raddb/sqlippool.conf Revisions: 1.2 Authors: aland (+95 -0) ------------------------------- File: radiusd/suse/rcradiusd Revisions: 1.2.6.3, 1.2.6.2 Authors: pnixon (+1 -1), pnixon (+2 -0) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 17.08.2006 - 18.08.2006 GMT
by Automatic cvs log generator 18 Aug '06

18 Aug '06

CVS log entries from 17.08.2006 (Thu) 08:00:01 - 18.08.2006 (Fri) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/mainconfig.c; Revisions: 1.91 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.5 File: radiusd/src/main/conffile.c; Revisions: 1.135 File: radiusd/doc/rlm_sqlippool; Revisions: 1.2 Author: nbk File: radiusd/man/man8/radsqlrelay.8; Revisions: 1.2, 1.1.2.2 File: radiusd/scripts/radsqlrelay; Revisions: 1.6, 1.4.2.2 Author: pnixon File: radiusd/doc/examples/postgresql.sql; Revisions: 1.1.2.5, 1.1.2.4 File: radiusd/raddb/sqlippool.conf; Revisions: 1.1.2.3 ===================================================== Combined list of identical log entries ===================================================== Description: Add Oracle to the list of supported drivers. Thanks to Alexander Serkin <als(a)cell.ru> Modified files: File: radiusd/man/man8/radsqlrelay.8; Revision: 1.2; Date: 2006/08/17 12:20:19; Author: nbk; Lines: (+18 -1) File: radiusd/man/man8/radsqlrelay.8; Revision: 1.1.2.2; Date: 2006/08/17 12:20:41; Author: nbk; Lines: (+18 -1) File: radiusd/scripts/radsqlrelay; Revision: 1.6; Date: 2006/08/17 12:20:19; Author: nbk; Lines: (+4 -2) File: radiusd/scripts/radsqlrelay; Revision: 1.4.2.2; Date: 2006/08/17 12:20:41; Author: nbk; Lines: (+5 -3) ------------------------------- Description: Pulled from branch_1_1. Untested! Didn't pull doc/examples/postgresql.sql Modified files: File: radiusd/doc/rlm_sqlippool; Revision: 1.2; Date: 2006/08/17 21:41:00; Author: aland; Lines: (+28 -0) File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.5; Date: 2006/08/17 21:41:01; Author: aland; Lines: (+66 -316) ===================================================== Log entries ===================================================== Description: Clean up radippool to make its style closer to the rest of FreeRADIUS Modified files: File: radiusd/doc/examples/postgresql.sql; Revision: 1.1.2.5; Date: 2006/08/17 14:09:26; Author: pnixon; Lines: (+14 -11) ------------------------------- Description: Sync a few changes from cvs head Modified files: File: radiusd/doc/examples/postgresql.sql; Revision: 1.1.2.4; Date: 2006/08/17 12:13:24; Author: pnixon; Lines: (+4 -4) ------------------------------- Description: make the field names match the rest of FreeRADIUS Modified files: File: radiusd/raddb/sqlippool.conf; Revision: 1.1.2.3; Date: 2006/08/17 14:20:52; Author: pnixon; Lines: (+18 -18) ------------------------------- Description: Use correct catch for lines that are too long Modified files: File: radiusd/src/main/conffile.c; Revision: 1.135; Date: 2006/08/18 00:08:37; Author: aland; Lines: (+3 -3) ------------------------------- Description: Don't free cs if it was uninitialized Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.91; Date: 2006/08/17 23:49:26; Author: aland; Lines: (+1 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/examples/postgresql.sql Revisions: 1.1.2.5, 1.1.2.4 Authors: pnixon (+14 -11), pnixon (+4 -4) ------------------------------- File: radiusd/doc/rlm_sqlippool Revisions: 1.2 Authors: aland (+28 -0) ------------------------------- File: radiusd/man/man8/radsqlrelay.8 Revisions: 1.2, 1.1.2.2 Authors: nbk (+18 -1), nbk (+18 -1) ------------------------------- File: radiusd/raddb/sqlippool.conf Revisions: 1.1.2.3 Authors: pnixon (+18 -18) ------------------------------- File: radiusd/scripts/radsqlrelay Revisions: 1.6, 1.4.2.2 Authors: nbk (+4 -2), nbk (+5 -3) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.135 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.91 Authors: aland (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.5 Authors: aland (+66 -316) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 16.08.2006 - 17.08.2006 GMT
by Automatic cvs log generator 17 Aug '06

17 Aug '06

CVS log entries from 16.08.2006 (Wed) 08:00:01 - 17.08.2006 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/lib/radius.c; Revisions: 1.187, 1.125.2.5.2.8 Author: nbk File: radiusd/src/include/Makefile; Revisions: 1.4, 1.2.4.1 Author: pnixon File: radiusd/doc/examples/postgresql.sql; Revisions: 1.1.2.3 File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revisions: 1.3.2.3 File: radiusd/doc/rlm_sqlippool; Revisions: 1.1, 1.1.2.1 ===================================================== Combined list of identical log entries ===================================================== Description: Regenerate radpaths.h if a later run of ./configure has rewritten build-radpaths-h. This prevents from using the pathnames of the previous build, which won't work if the configure options were different. Modified files: File: radiusd/src/include/Makefile; Revision: 1.4; Date: 2006/08/16 21:42:30; Author: nbk; Lines: (+3 -5) File: radiusd/src/include/Makefile; Revision: 1.2.4.1; Date: 2006/08/16 21:43:18; Author: nbk; Lines: (+3 -5) ------------------------------- Description: Some initial sqlippool documentation and schema update Modified files: File: radiusd/doc/rlm_sqlippool; Revision: 1.1.2.1; Date: 2006/08/16 17:42:25; Author: pnixon; Lines: (+28 -0) File: radiusd/doc/examples/postgresql.sql; Revision: 1.1.2.3; Date: 2006/08/16 17:42:26; Author: pnixon; Lines: (+3 -3) ===================================================== Log entries ===================================================== Description: file rlm_sqlippool was initially added on branch branch_1_1. Modified files: File: radiusd/doc/rlm_sqlippool; Revision: 1.1; Date: 2006/08/16 17:42:25; Author: pnixon; ------------------------------- Description: Verify Access-Challenge, too. Bug found by Mitaine Yoann Modified files: File: radiusd/src/lib/radius.c; Revision: 1.187; Date: 2006/08/16 20:04:33; Author: aland; Lines: (+3 -2) ------------------------------- Description: Verify Access-Challenge, too. That's a dumb bug, found by Mitaine Yoann Modified files: File: radiusd/src/lib/radius.c; Revision: 1.125.2.5.2.8; Date: 2006/08/16 20:03:35; Author: aland; Lines: (+3 -2) ------------------------------- Description: Major updates to module to make it standalone. It no longer needs to know what the ip pool config is at startup, infact it no longer cares as each query is check against the table so new pools can be added, deleted and extended on the fly without a reload. Modified files: File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c; Revision: 1.3.2.3; Date: 2006/08/16 17:06:49; Author: pnixon; Lines: (+35 -33) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/examples/postgresql.sql Revisions: 1.1.2.3 Authors: pnixon (+3 -3) ------------------------------- File: radiusd/doc/rlm_sqlippool Revisions: 1.1, 1.1.2.1 Authors: pnixon, pnixon (+28 -0) ------------------------------- File: radiusd/src/include/Makefile Revisions: 1.4, 1.2.4.1 Authors: nbk (+3 -5), nbk (+3 -5) ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.187, 1.125.2.5.2.8 Authors: aland (+3 -2), aland (+3 -2) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/rlm_sqlippool.c Revisions: 1.3.2.3 Authors: pnixon (+35 -33) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

3 3

Help!
by Shankar Ganesh C 17 Aug '06

17 Aug '06

Hi, Could some body help on my requirments.? Below are my requirments. 1) When the radius server recives a accounitng start , accounting stop and Accounitng Intermediate update the free radius should pass on its attributes to another external funciton. 2) Based on the call back function or any other interface from external program the free radius should send a Accounting response message back based on the attributes value retrived from the other function. For the first requirment i have a understaning to follow the below Using the acct_users file based on the acct_status_type using Exec_program attributes values could be passed as command line arguments. The varibales for the same can be defined in variables.txt. For the second requitment i do not have any clues , how to achive that. It whould be great help if any inputs given on the above requirments. Thanks and regards Shankar ganesh

1 0