- Freeradius-Devel - lists.freeradius.org

Premature end of paircompare when using !* op on non-present attribute
by Enrik Berkhan 17 Feb '06

17 Feb '06

Hi all, yesterday I've noticed the following when using the '!*' op (T_OP_CMP_FALSE) in the check items. When the attribute to be compared is not found in the list of request attributes, '!*' evaluates to true, which is correct, but further processing of the remaining check items will be skipped. The code responsible for this behaviour comes from paircompare() in src/main/valuepair.c: > /* > * Not found, it's not a match. > */ > if (auth_item == NULL) { > /* > * Didn't find it. If we were *trying* > * to not find it, then we succeeded. > */ > if (check_item->operator == T_OP_CMP_FALSE) > return 0; > else > return -1; > } I believe the `return 0' to be incorrect. I think it should be `continue' instead to evaluate the remaining check items. Or is it correct like it is? Enrik

2 1

Automatic report from sources (radiusd) between 16.02.2006 - 17.02.2006 GMT
by Automatic cvs log generator 17 Feb '06

17 Feb '06

CVS log entries from 16.02.2006 (Thu) 09:00:01 - 17.02.2006 (Fri) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/version.c; Revisions: 1.13.4.2 Author: fcusack File: radiusd/src/modules/rlm_otp/otp_site.c; Revisions: 1.6, 1.5.2.2 ===================================================== Log entries ===================================================== Description: Update date in copyright Modified files: File: radiusd/src/main/version.c; Revision: 1.13.4.2; Date: 2006/02/16 22:17:21; Author: aland; Lines: (+3 -3) ------------------------------- Description: Append first 2 username chars to challenge. The previous routine created a fixed challenge, which led to a fixed response, which was all 0's! Thanks to David Mitchell for spotting this. Modified files: File: radiusd/src/modules/rlm_otp/otp_site.c; Revision: 1.6; Date: 2006/02/17 01:33:18; Author: fcusack; Lines: (+21 -15) ------------------------------- Description: import from HEAD: Append first 2 username chars to challenge. The previous routine created a fixed challenge, which led to a fixed response, which was all 0's! Thanks to David Mitchell for spotting this. Modified files: File: radiusd/src/modules/rlm_otp/otp_site.c; Revision: 1.5.2.2; Date: 2006/02/17 01:33:55; Author: fcusack; Lines: (+21 -15) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/version.c Revisions: 1.13.4.2 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_site.c Revisions: 1.6, 1.5.2.2 Authors: fcusack (+21 -15), fcusack (+21 -15) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

php and freeradius
by Pezhman Lali 16 Feb '06

16 Feb '06

this is my complete output of debug mode, as you can see the bottom of debug output, I 've tried two times for auth, at first php script exit(1) and second exit(0), [root@radius raddb]# radiusd -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded System Module: Instantiated unix (unix) Module: Loaded eap rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Loaded and initialized type gtc rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess Module: Instantiated preprocess (preprocess) Module: Loaded realm Module: Instantiated realm (suffix) Module: Loaded files Module: Instantiated files (files) Module: Instantiated exec (authphp) Module: Loaded Acct-Unique-Session-Id Module: Instantiated acct_unique (acct_unique) Module: Loaded detail Module: Instantiated detail (detail) Module: Loaded radutmp Module: Instantiated radutmp (radutmp) Initializing the thread pool... Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:37644, id=137, length=56 User-Name = "reza" User-Password = "12349" NAS-IP-Address = 255.255.255.255 NAS-Port = 12 Exec-Program: /usr/local/etc/raddb/test.php Exec-Program-Wait: plaintext: Content-type: text/html X-Powered-By: PHP/4.3.4 Exec-Program: returned: 0 Login incorrect: [reza/12349] (from client radius port 12) rad_recv: Access-Request packet from host 127.0.0.1:37644, id=137, length=56 Sending Access-Reject of id 137 to 127.0.0.1:37644 rad_recv: Access-Request packet from host 127.0.0.1:37644, id=142, length=56 User-Name = "reza" User-Password = "12349" NAS-IP-Address = 255.255.255.255 NAS-Port = 12 Exec-Program: /usr/local/etc/raddb/test.php Exec-Program-Wait: plaintext: Content-type: text/html X-Powered-By: PHP/4.3.4 Exec-Program: returned: 1 rlm_exec (authphp): External script failed best __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

php and freeradius
by Pezhman Lali 15 Feb '06

15 Feb '06

hi this is my php test file: #!/usr/bin/php <?php $u="root"; $p=""; $h="radius"; $con=mysql_connect($h,$u,$p); mysql_select_db('radius'); $query=""; mysql_close($con); $f = fopen('./php.log','w'); fwrite($f,print_r($_ENV,TRUE)); fclose($f); exit(0); ?> and php exec module: exec authphp { wait = yes program = "${raddbdir}/test.php " input_pairs = request output_pairs = request } because of exit(0) in php script I believe every one must be accepted, but the freeradius reject everyone, and this is my debug mode output: User-Name = "reza" User-Password = "1234" NAS-IP-Address = 255.255.255.255 NAS-Port = 12 Exec-Program: /usr/local/etc/raddb/test.php Exec-Program-Wait: plaintext: Content-type: text/html X-Powered-By: PHP/4.3.4 Exec-Program: returned: 0 Login incorrect: [reza/1234] (from client radius port 12) rad_recv: Access-Request packet from host 127.0.0.1:37157, id=224, length=56 Sending Access-Reject of id 224 to 127.0.0.1:37157 let me know where is problem? best __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

Automatic report from sources (radiusd) between 14.02.2006 - 15.02.2006 GMT
by Automatic cvs log generator 15 Feb '06

15 Feb '06

CVS log entries from 14.02.2006 (Tue) 09:00:01 - 15.02.2006 (Wed) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/share/dictionary; Revisions: 1.126, 1.93.2.5.2.2 File: radiusd/share/dictionary.quintum; Revisions: 1.2.10.2 ===================================================== Log entries ===================================================== Description: Include fortinet dictionary, too. Modified files: File: radiusd/share/dictionary; Revision: 1.126; Date: 2006/02/14 15:28:37; Author: nbk; Lines: (+2 -1) ------------------------------- Description: Pull from CVS head: Include fortinet and nortel dictionaries, too. Modified files: File: radiusd/share/dictionary; Revision: 1.93.2.5.2.2; Date: 2006/02/14 15:43:53; Author: nbk; Lines: (+3 -1) ------------------------------- Description: Pull from CVS head: More attributes. Modified files: File: radiusd/share/dictionary.quintum; Revision: 1.2.10.2; Date: 2006/02/14 15:49:47; Author: nbk; Lines: (+4 -1) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary Revisions: 1.126, 1.93.2.5.2.2 Authors: nbk (+2 -1), nbk (+3 -1) ------------------------------- File: radiusd/share/dictionary.quintum Revisions: 1.2.10.2 Authors: nbk (+4 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

freeradius and php
by Pezhman Lali 14 Feb '06

14 Feb '06

how I can send Username,password,.... to exec program, and in php script, how return access-accept back to freeradius. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 2

Fwd: Realm proxy HOW-TO??
by Danai Chudthong 14 Feb '06

14 Feb '06

Dear all I sent this mail to freeradius user group and think I should forward to develope group too. Thanks Danai ----------------------------------------------------------------- Dear all I setup freeradius for my EAP-TLS with realm configuration and everything is fine. But I have some problem about database. The realm name is shown in table raddpostauth but it's not shown in table radacct which is more important. I checked in debug mode and found that freeradius send username with out realm to AP during post-auth process then AP send only username to freeradius for accounting. How to set freeradius to send user@realm to AP in post-auth? I'm not sure what I miss.. Any idea please? For more information, please review in sql query below. Thanks Danai mysql> select username, Realm, NASIPAddress, AcctStartTime, AcctStopTime from radacct where AcctStartTime >= 20060212; +----------+-------+--------------+---------------------+---------------------+ | username | Realm | NASIPAddress | AcctStartTime | AcctStopTime | +----------+-------+--------------+---------------------+---------------------+ | danai | | 192.168.1.2 | 2006-02-12 12:29:47 | 2006-02-12 12:44:32 | | danai | | 192.168.1.2 | 2006-02-12 12:44:34 | 2006-02-12 12:52:33 | | danai | | 192.168.1.2 | 2006-02-12 12:52:35 | 2006-02-12 16:23:09 | | danai | | 192.168.1.2 | 2006-02-12 16:23:10 | 2006-02-12 17:27:56 | | danai | | 192.168.1.2 | 2006-02-12 17:28:01 | 2006-02-12 17:30:48 | | danai | | 192.168.1.2 | 2006-02-12 17:30:52 | 2006-02-12 17:32:58 | | danai | | 192.168.1.2 | 2006-02-12 17:35:39 | 2006-02-12 17:35:45 | | danai | | 192.168.1.2 | 2006-02-12 17:35:46 | 2006-02-12 17:36:58 | | danai | | 192.168.1.2 | 2006-02-12 17:37:33 | 2006-02-12 21:56:37 | | danai | | 192.168.1.2 | 2006-02-12 17:53:49 | 2006-02-12 17:54:09 | | danai | | 192.168.1.2 | 2006-02-12 17:54:16 | 2006-02-12 18:03:05 | | danai | | 192.168.1.2 | 2006-02-12 18:03:09 | 0000-00-00 00:00:00 | | danai | | 192.168.1.2 | 2006-02-12 21:54:47 | 2006-02-12 21:55:06 | | danai | | 192.168.1.2 | 2006-02-12 21:55:39 | 2006-02-12 21:56:10 | | danai | | 192.168.1.2 | 2006-02-12 21:56:39 | 2006-02-12 22:25:04 | | danai | | 192.168.1.2 | 2006-02-12 22:12:11 | 2006-02-12 22:18:44 | | danai | | 192.168.1.2 | 2006-02-12 22:19:01 | 2006-02-12 22:19:23 | | danai | | 192.168.1.2 | 2006-02-12 22:20:01 | 0000-00-00 00:00:00 | | danai | | 192.168.1.2 | 2006-02-12 22:26:12 | 2006-02-12 22:26:34 | | danai | | 192.168.1.2 | 2006-02-12 22:26:35 | 0000-00-00 00:00:00 | +----------+-------+--------------+---------------------+---------------------+ 20 rows in set (0.00 sec) mysql> select user, NASIPAddress, date from radpostauth where date >= 20060212; +--------------------+--------------+---------------------+ | user | NASIPAddress | date | +--------------------+--------------+---------------------+ | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 12:29:47 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 12:44:33 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 12:52:34 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 16:23:10 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:28:01 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:30:51 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:35:39 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:35:46 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 17:37:33 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 17:53:49 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 17:54:15 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 18:03:09 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 21:54:47 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 21:55:39 | | danai(a)kmitnb.ac.th | 192.168.1.2 | 2006-02-12 21:56:39 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:12:11 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:19:01 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:20:01 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:26:12 | | danai(a)kmitt.ac.th | 192.168.1.2 | 2006-02-12 22:26:35 | +--------------------+--------------+---------------------+ 20 rows in set (0.00 sec) __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

develope a module with .c and .cpp
by 陈旭 13 Feb '06

13 Feb '06

Hello I store all the users' info in my Sybase server and I am going to authenticate a user from a module which pulls the information from sybase. I have made it with the module rlm_sql. And also, I rewrite this module, add a function(or with some other name, I don't kown how to call it correctly) which name is 'rlm_sql_authenticate', I am using the driver from ./drivers/rlm_sql_sybase, everything seems OK, or at lease I have not found problemsm, and I am so worrying about it. The other hand, we have lots of experience to manipulate sybase with our encapsulated class, and I am so willingly to develope my module and use this class. But it seems to be very hard to compile .c and .cpp at the same time. When compiling, lots of warning is dumped to my screen, but there is not a error, then I install the module, run FreeRadius under debug mode, when server is ready to prcess request, I sent a request to the server. The server cored dump with some message: symble not found. I am running freeRadius(v1.0.5) under solaris 5.6. Help me! Many thanks! contact me via msn: oicqcx(a)hotmail.com

2 1

attribute Password in an Access-Reject packet
by Susana Macias 13 Feb '06

13 Feb '06

Hy all, I am trying to include two pairs attribute/value in my Radius Response Packet. This is my code: ... pairadd(&request->reply->vps, pairmake("Password", "***\n", T_OP_EQ)); pairadd (&request->reply->vps, pairmake("Reply-Message", "TID-2002", T_OP_EQ)); ... When I do some tests, I observe this: 1) If my radius Response Packet is an Access-Accept, the FreeRadius server sends: Received response ID 255, code 2, length = 71 User-Password = "***\n" Reply-Message = "TID-2002" 2) If my radius Response Packet is an Access-Reject, the FreeRadius server sends: Received response ID 252, code 3, length = 30 Reply-Message = "TID-2002" ---------------------------- * Why the Password attribute does not appear in the Access-Reject packet? * Why does the Password attribute (in the Access-Accept packet) appear like User-Password? Thank you very much Susana ______________________________________________ LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

1 0

RE: develope a module with .c and .cpp
by Murat Mığdısoğlu 13 Feb '06

13 Feb '06

Set ulimit to unlimited to produce a core. Then look it to find which shared object can not be located. İn the default configuration, freeradius looks for .so file under /var/lib directory. Maybe you didn't open the commented line int the sybase modules Makefile and thats why you didnt compiled sybase module İ hope this helps -----Original Message----- From: freeradius-devel-bounces+murat.migdisoglu=superonline.net(a)lists.freeradius.org [mailto:freeradius-devel-bounces+murat.migdisoglu=superonline.net@lists.freeradius.org] On Behalf Of ?? Sent: Monday, February 13, 2006 1:47 PM To: FreeRadiusDevel Subject: develope a module with .c and .cpp Hello I store all the users' info in my Sybase server and I am going to authenticate a user from a module which pulls the information from sybase. I have made it with the module rlm_sql. And also, I rewrite this module, add a function(or with some other name, I don't kown how to call it correctly) which name is 'rlm_sql_authenticate', I am using the driver from ./drivers/rlm_sql_sybase, everything seems OK, or at lease I have not found problemsm, and I am so worrying about it. The other hand, we have lots of experience to manipulate sybase with our encapsulated class, and I am so willingly to develope my module and use this class. But it seems to be very hard to compile .c and .cpp at the same time. When compiling, lots of warning is dumped to my screen, but there is not a error, then I install the module, run FreeRadius under debug mode, when server is ready to prcess request, I sent a request to the server. The server cored dump with some message: symble not found. I am running freeRadius(v1.0.5) under solaris 5.6. Help me! Many thanks! contact me via msn: oicqcx(a)hotmail.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html Bu e-posta mesaji ve ekleri sadece gonderildigi kisi veya kuruma ozeldir. Eger dogru kisiye ulasmadigini dusunuyorsaniz, bu mesajin yonlendirilmesi, kopyalanmasi veya herhangi bir sekilde kullanilmasi yasaktir.Mesaj iceriginde bulunan fikir ve yorumlar, SUPERONLINE'a degil sadece gondericiye aittir. Bu mesaj bilinen tum viruslere karsi test edilmistir. This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient you are hereby notified that any dissemination, copying or use of the information is prohibited. The opinions expressed in this message belong to sender alone. There is no implied endorsement by SUPERONLINE.This e-mail has been scanned for all known computer viruses.

1 0