- Freeradius-Devel - lists.freeradius.org

Suggested feature for rlm_detail: logging only a few specific users
by Bjørn Mork 24 Apr '06

24 Apr '06

During debugging of production systems, I've often wished there was some way to enable debugging only for specific users. The attached patch (against 1.1.x CVS for now) extends rlm_detail with an optional rlm_files compatible "usersfile" option. It does not change the behaviour for existing configurations. Usage example: modules { .. detail debugusers { detailfile = "${logdir}/debuglog" usersfile = "${raddbdir}/users.debug" } .. } .. post-auth { Post-Auth-Type REJECT { debugusers } } Where users.debug contains a list of users to debug. The syntax is similar to users(5). It can even contain check-items and DEFAULT entries (which only makes sense if combined with check items), to filter the logging even more. I'm posting this here to get some feedback whether this is a good idea or if I'm reimplementing something that already exists, or if this should go into a separate module. Comments? Bjørn

3 5

Redundant ldap server with freeradius 1.0.5
by sumi thra 24 Apr '06

24 Apr '06

- Hey All, I want to configure two ldap server's for fail over conditions. My configuration in the radiusd.conf is... ldap { redundant { ldap_primary ldap_secondary } } .... ldap_primary { .. .. } ldap_secondary { .. .. } .. When the server gets any access-request packet, it tries to connect to the secondary server. Even though the primary server is reachable, the secondary server is contacted first. How can i make the radius server to contact primary ldap server first & then the next ldap server ?? Am i missing any configuration?? Could please help me in this regard. Thanks in advance. Sumithra.

1 0

Re: Google Summer of Code and RadSec?
by Pezhman Lali 23 Apr '06

23 Apr '06

Alan wrote: > I'd suggest coming up with 3-4 project suggestions, so that there > would be more of a chance of a student finding a project they liked. > > 1) GnuTLS support in rlm_eap > 2) radsec (as a separate daemon) > 3) adding tacacs+ support (see one of the bugs for template code) > > Others? I 'm agree with Alan Dekok. please add rlm_php to this list, the future of php is sunny. tanx Best Pezhman Lali --------------------------------- How low will we go? Check out Yahoo! Messengers low PC-to-Phone call rates.

2 1

Automatic report from sources (radiusd) between 20.04.2006 - 21.04.2006 GMT
by Automatic cvs log generator 21 Apr '06

21 Apr '06

CVS log entries from 20.04.2006 (Thu) 08:00:01 - 21.04.2006 (Fri) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/raddb/radiusd.conf.in; Revisions: 1.232, 1.188.2.4.2.11 ===================================================== Combined list of identical log entries ===================================================== Description: updated note about Active Directory Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.232; Date: 2006/04/20 18:40:34; Author: aland; Lines: (+3 -7) File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.11; Date: 2006/04/20 18:40:29; Author: aland; Lines: (+3 -7) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/radiusd.conf.in Revisions: 1.232, 1.188.2.4.2.11 Authors: aland (+3 -7), aland (+3 -7) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Request for consideration in the summer of code
by Alan DeKok 20 Apr '06

20 Apr '06

FreeRADIUS (http://www.freeradius.org) is the premier Open Source RADIUS server. It is used in carrier-class deployments with tens of millions of users. It has more features than any other Open Source server, and more features than most commercial server. That being said, it isn't perfect. We'd like to be considered for the Summer of Code, in order to improve the product. We have a list of project ideas on the web at: http://www.freeradius.org/summerofcode/ We will review the "blue-sky" proposals and incoming student applications publicly on the developers list. As the project lead, I will act as the initial point of contact between Google and the project. Mentors have volunteered to be available for the projects, and there are sufficient people to take over from an assigned mentor if a mentor is unable to provide continuing guidance. We expect that students will join the developers list, and will discuss their ongoing work there with the team of project developers. The mentor (or backup) will provide a written evaluation of the student's work one the project is over. Thank you for your consideration. Alan DeKok.

1 0

Automatic report from sources (radiusd) between 19.04.2006 - 20.04.2006 GMT
by Automatic cvs log generator 20 Apr '06

20 Apr '06

CVS log entries from 19.04.2006 (Wed) 08:00:00 - 20.04.2006 (Thu) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.170 File: radiusd/src/include/conffile.h; Revisions: 1.29, 1.20.4.1 File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revisions: 1.49, 1.37.2.1.2.1 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.231, 1.230, 1.229, 1.188.2.4.2.10, 1.188.2.4.2.9, 1.188.2.4.2.8 File: radiusd/src/main/conffile.c; Revisions: 1.134, 1.100.2.1.2.1 ===================================================== Combined list of identical log entries ===================================================== Description: less rants Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.231; Date: 2006/04/19 19:14:43; Author: aland; Lines: (+17 -10) File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.10; Date: 2006/04/19 19:14:48; Author: aland; Lines: (+16 -9) ------------------------------- Description: add cf_item_is_pair() for completeness Modified files: File: radiusd/src/include/conffile.h; Revision: 1.29; Date: 2006/04/19 16:14:20; Author: aland; Lines: (+2 -1) File: radiusd/src/main/conffile.c; Revision: 1.134; Date: 2006/04/19 16:14:20; Author: aland; Lines: (+6 -2) ------------------------------- Description: Add configurable suppression of attribute printing Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.229; Date: 2006/04/19 16:24:44; Author: aland; Lines: (+13 -1) File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revision: 1.49; Date: 2006/04/19 16:24:44; Author: aland; Lines: (+70 -24) ------------------------------- Description: Port cf_item_is_pair() from the head Modified files: File: radiusd/src/include/conffile.h; Revision: 1.20.4.1; Date: 2006/04/19 16:21:50; Author: aland; Lines: (+2 -1) File: radiusd/src/main/conffile.c; Revision: 1.100.2.1.2.1; Date: 2006/04/19 16:21:50; Author: aland; Lines: (+6 -2) ------------------------------- Description: Port "suppress" attribute printing from the head Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.8; Date: 2006/04/19 18:35:42; Author: aland; Lines: (+13 -1) File: radiusd/src/modules/rlm_detail/rlm_detail.c; Revision: 1.37.2.1.2.1; Date: 2006/04/19 18:35:41; Author: aland; Lines: (+70 -24) ------------------------------- Description: More comments on EAP and LDAP, in the naive hope that people will read them. Modified files: File: radiusd/raddb/radiusd.conf.in; Revision: 1.230; Date: 2006/04/19 19:09:48; Author: aland; Lines: (+16 -2) File: radiusd/raddb/radiusd.conf.in; Revision: 1.188.2.4.2.9; Date: 2006/04/19 19:09:28; Author: aland; Lines: (+16 -2) ===================================================== Log entries ===================================================== Description: call ldap_escape_func for basedn, etc. too This closes bug #360 Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.170; Date: 2006/04/19 15:56:19; Author: aland; Lines: (+6 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/radiusd.conf.in Revisions: 1.231, 1.230, 1.229, 1.188.2.4.2.10, 1.188.2.4.2.9, 1.188.2.4.2.8 Authors: aland (+17 -10), aland (+16 -2), aland (+13 -1), aland (+16 -9), aland (+16 -2), aland (+13 -1) ------------------------------- File: radiusd/src/include/conffile.h Revisions: 1.29, 1.20.4.1 Authors: aland (+2 -1), aland (+2 -1) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.134, 1.100.2.1.2.1 Authors: aland (+6 -2), aland (+6 -2) ------------------------------- File: radiusd/src/modules/rlm_detail/rlm_detail.c Revisions: 1.49, 1.37.2.1.2.1 Authors: aland (+70 -24), aland (+70 -24) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.170 Authors: aland (+6 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 18.04.2006 - 19.04.2006 GMT
by Automatic cvs log generator 19 Apr '06

19 Apr '06

CVS log entries from 18.04.2006 (Tue) 08:00:01 - 19.04.2006 (Wed) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.122.2.8.2.6 File: radiusd/share/dictionary.acc; Revisions: 1.7, 1.2.4.1.2.2 File: radiusd/src/main/mainconfig.c; Revisions: 1.36.2.6.2.2 File: radiusd/configure.in; Revisions: 1.198.2.15.2.6 ===================================================== Combined list of identical log entries ===================================================== Description: close bug #361 Set dumpable after uid switch, if allow core dumps is set Modified files: File: radiusd/configure.in; Revision: 1.198.2.15.2.6; Date: 2006/04/18 17:26:26; Author: aland; Lines: (+2 -1) File: radiusd/src/main/mainconfig.c; Revision: 1.36.2.6.2.2; Date: 2006/04/18 17:26:26; Author: aland; Lines: (+15 -1) ===================================================== Log entries ===================================================== Description: Add one more attribute. Closes bug #352 Modified files: File: radiusd/share/dictionary.acc; Revision: 1.7; Date: 2006/04/18 17:19:04; Author: aland; Lines: (+1 -0) ------------------------------- Description: Port fix from the head for #352 Modified files: File: radiusd/share/dictionary.acc; Revision: 1.2.4.1.2.2; Date: 2006/04/18 17:20:12; Author: aland; Lines: (+1 -0) ------------------------------- Description: call ldap_escape_func for basedn, etc, too. This closes bug #360 Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.8.2.6; Date: 2006/04/18 21:37:42; Author: aland; Lines: (+6 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/configure.in Revisions: 1.198.2.15.2.6 Authors: aland (+2 -1) ------------------------------- File: radiusd/share/dictionary.acc Revisions: 1.7, 1.2.4.1.2.2 Authors: aland (+1 -0), aland (+1 -0) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.36.2.6.2.2 Authors: aland (+15 -1) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.122.2.8.2.6 Authors: aland (+6 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 17.04.2006 - 18.04.2006 GMT
by Automatic cvs log generator 18 Apr '06

18 Apr '06

CVS log entries from 17.04.2006 (Mon) 08:00:00 - 18.04.2006 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_files/rlm_files.c; Revisions: 1.75 File: radiusd/raddb/radiusd.conf.in; Revisions: 1.228 File: radiusd/man/man5/rlm_files.5; Revisions: 1.2, 1.1.4.1 ===================================================== Combined list of identical log entries ===================================================== Description: Allow the "users" file to have keys other than User-Name. This allows the "users" file (or variants) to be used for group checks, too. Modified files: File: radiusd/man/man5/rlm_files.5; Revision: 1.2; Date: 2006/04/17 18:56:32; Author: aland; Lines: (+21 -1) File: radiusd/raddb/radiusd.conf.in; Revision: 1.228; Date: 2006/04/17 18:56:31; Author: aland; Lines: (+6 -1) File: radiusd/src/modules/rlm_files/rlm_files.c; Revision: 1.75; Date: 2006/04/17 18:56:32; Author: aland; Lines: (+21 -6) ===================================================== Log entries ===================================================== Description: Corrected typo Modified files: File: radiusd/man/man5/rlm_files.5; Revision: 1.1.4.1; Date: 2006/04/17 18:13:10; Author: aland; Lines: (+1 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/man/man5/rlm_files.5 Revisions: 1.2, 1.1.4.1 Authors: aland (+21 -1), aland (+1 -1) ------------------------------- File: radiusd/raddb/radiusd.conf.in Revisions: 1.228 Authors: aland (+6 -1) ------------------------------- File: radiusd/src/modules/rlm_files/rlm_files.c Revisions: 1.75 Authors: aland (+21 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

hide password from accounting logs
by Angelica Delgado 17 Apr '06

17 Apr '06

Hello, How can we hide the password from the detail logs? Thanks. Angelica

2 1

Post-Auth not called correctly with Access-Challenge requests
by Chris Parker 17 Apr '06

17 Apr '06

This is CVS head as of the 9th. Seeing an issue with 'post-auth' not being called correctly when an Access-Challenge is sent back to the NAS ( using EAP leap as the authtype ). If I send a regular 'radtest', post-auth is called, and the request is logged. If I send an EAP test 'eapol_test', post-auth is only called when the Access-Challenge is sent back, and is not called again when the Access-Accept/Reject is sent back. I'm trying to use the sql module to do post-auth logging, and it's only inserting the Access-Challenges, since it's not being called on the second go-round. Any thoughts? -Chris -- Chris Parker Director, Engineering StarNet A Service of US LEC (888)212-0099 Fax (847)963-1302 Wholesale Internet Services http://www.megapop.net VoiceEclipse, The Fresh Alternative http://www.voiceeclipse.com NOTICE: Message is sent IN CONFIDENCE to addressees. It may contain information that is privileged, proprietary or confidential.

1 0