- Freeradius-Devel - lists.freeradius.org

how to add attribute in freeradius
by reach me 03 Feb '06

03 Feb '06

Hi, Can anybody please tell me how to add attribute in freeradius ? Thanks and Regards, Antony --------------------------------- Jiyo cricket on Yahoo! India cricket

2 1

I: rlm_sql
by Carlo Prestopino 03 Feb '06

03 Feb '06

Ok, Ive tested the function once again on RADIUS, It was an error in the function (I used utente instead of user) that caused RADIUS malfunction. The process logic is as follows: 1 check if users MAC is present in radcheck table 2 if not present his MAC will be inserted into radcheck In sql.conf Postauth_query is changed as detailed postauth_query = "INSERT into ${postauth_table} (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{replyacket-Type}', NOW()); SELECT mac_check('%{User-Name}', '%{Calling-Station-Id}')" it is simply added a call to the function mac_check, defined as follows CREATE FUNCTION `mac_check`(user VARCHAR(20),mac VARCHAR(30)) RETURNS varchar(50) DETERMINISTIC BEGIN IF (SELECT (SELECT MAX((Attribute='Calling-Station-Id')) from radcheck WHERE UserName=user)) THEN RETURN 'record already present'; END IF; INSERT INTO radcheck (UserName,Attribute,op,Value) VALUES (user,'Calling-Station-Id',':=', mac); RETURN 'record inserted'; END Regards, Carlo _____ Da: Carlo Prestopino [mailto:c.prestopino@waitalia.com] Inviato: venerdì 3 febbraio 2006 13.57 A: 'FreeRadius developers mailing list' Oggetto: R: rlm_sql Yes, its ok. Ive simply made a mistake in cut/paste operations. The corret one is as follows CREATE FUNCTION `mac_check`(utente VARCHAR(20),mac VARCHAR(30)) RETURNS varchar(50) DETERMINISTIC BEGIN IF (SELECT (SELECT MAX((Attribute='Calling-Station-Id')) from radcheck WHERE UserName=user)) THEN #INSERT into radpostauth (id, user, pass, reply, date) values ('', utente, passwd,reply_packet, NOW()); RETURN 'record already present'; END IF; INSERT INTO radcheck (UserName,Attribute,op,Value) VALUES (utente,'Calling-Station-Id',':=', mac); RETURN 'record inserted'; END The five arguments one is because I tried to change the content of postauth_query with a function that have to perform two actions: - INSERT into radcheck (needed to perform MAC control) - INSERT into radpostauth (original behaviour of postauth_query) Regards, Carlo

1 0

rlm_sql
by Carlo Prestopino 03 Feb '06

03 Feb '06

Hi all, I would like to insert a check on users' MAC address operated by freeRADIUS. The objective is to allow users to use only one MAC address to gain access to a Wi-Fi network. The new query will check if user's MAC address is the same of his first access, and deny access if he is using a different one. To do this a new query needs to be inserted into /raddb/sql.conf to perform this check in the authentication process, and the src/modules/rlm_sql/rlm_sql.c needs to be modified. Writing the new query is not a problem, but modifying rlm_sql.c seems to be not so easy. Could somebody give indication on how to do this in order to speed up development process? A description of information flow (variables/funtions/pointers) into rlm_sql.c might be useful. Thank you in advance, Best regards, Carlo

4 5

freeradius 1.0.5 + openLDAP 2.3.17 ( with bdb ?? )
by sumi 01 Feb '06

01 Feb '06

HI Folks, Do anyone know which berkeley database version is compatible with openLDAP 2.3.17?? Im trying to compile the openldap2.3.17 with bdb-4.0 which is giving incompatibility error. Any earliest reply will be of great help. Thanks Sumi -- "If u look at what u dont have in life, u dont have anything But if u look at what u have in life, u have everything.....!!"

3 4

Release 1.1.0 this week?
by Alan DeKok 01 Feb '06

01 Feb '06

I was planning on releasing it Monday, but now Tuesday or Wednesday is looking better for me. Comments? Also, here's a list of what could be in later releases 1.1.1 - libeap fixes - netsnmp fixes 1.1.2 - upgraded libtool & autoconf?? Once that's done, the CVS head is starting to look a little anemic... Alan DeKok.

5 8

Automatic report from sources (radiusd) between 31.01.2006 - 01.02.2006 GMT
by Automatic cvs log generator 01 Feb '06

01 Feb '06

CVS log entries from 31.01.2006 (Tue) 09:00:01 - 01.02.2006 (Wed) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_otp/Makefile.in; Revisions: 1.6 File: radiusd/src/main/Makefile.in; Revisions: 1.60 File: radiusd/configure.in; Revisions: 1.226 File: radiusd/src/modules/rlm_eap/libeap/Makefile; Revisions: 1.9 ===================================================== Log entries ===================================================== Description: Fix the tests for OpenSSL: the macros FR_SMART_CHECK_{LIB,INCLUDE} look into a number of directories, therefore the -L -I parameters could be different from the user-supplied value. Modified files: File: radiusd/configure.in; Revision: 1.226; Date: 2006/01/31 17:09:43; Author: nbk; Lines: (+67 -63) ------------------------------- Description: CFLAGS += $(OPENSSL_INCLUDE) Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.60; Date: 2006/01/31 17:10:42; Author: nbk; Lines: (+4 -3) ------------------------------- Description: Don't compile files with SSL content if there is no SSL support. Modified files: File: radiusd/src/modules/rlm_eap/libeap/Makefile; Revision: 1.9; Date: 2006/01/31 17:10:10; Author: nbk; Lines: (+6 -4) ------------------------------- Description: Don't enter any subdirectory when the target is empty. (error from my previous commit) Modified files: File: radiusd/src/modules/rlm_otp/Makefile.in; Revision: 1.6; Date: 2006/01/31 17:11:07; Author: nbk; Lines: (+3 -7) ===================================================== Summary of modified files ===================================================== File: radiusd/configure.in Revisions: 1.226 Authors: nbk (+67 -63) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.60 Authors: nbk (+4 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/Makefile Revisions: 1.9 Authors: nbk (+6 -4) ------------------------------- File: radiusd/src/modules/rlm_otp/Makefile.in Revisions: 1.6 Authors: nbk (+3 -7) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

rfc2865 and RADIUS-LDAPv3.schema inconsistencies?
by Markus Krause 31 Jan '06

31 Jan '06

hi developers! i had a closer look at RADIUS-LDAPv3.schema (rev.1.9.6.1) and compared it with rfc2865 and there seem to be some "inconsistencies": some attributes which may contain zero or more values according to rfc2865 (http://rfc.net/rfc2865.html) are defined as SINGLE-VALUE in the schema file. as far as i understand the rfc the following values (the numbers in brackets refer to the section nr. and page) may contain more values: Filter-Id <-> radiusFilterId (5.11, p.36) Framed-AppleTalk-Network <-> radiusFramedAppleTalkNetwork (5.38, p.58) Framed-Compresion <-> radiusFramedCompression (5.13, p.37) Login-IP-Host <-> radiusLoginIPHost (5.15, p.38) the attribute NAS-IP-Address (radiusNASIpAddress) is described (in rfc) to be allowed to be present zero or one time (see 5.4, p.29, and 5.44: table of attributes, p.63), but is not defined as SINGLE-VALUE in the schema file. i am not using these values right now so i don't know if this differences can cause problems, i just came across this by testing nicolas' patch for bug 261 some time ago and finally had some time and mood to read the rfc. of course i also do not know if these differences are intended, i am just wondering about them! ;-) with best regards, markus -- Markus Krause email: krause(a)biochem.mpg.de Computing Center Tel.: 089 - 89 40 85 99 Group Lottspeich / Proteomics Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

4 7

Automatic report from sources (radiusd) between 30.01.2006 - 31.01.2006 GMT
by Automatic cvs log generator 31 Jan '06

31 Jan '06

CVS log entries from 30.01.2006 (Mon) 09:00:00 - 31.01.2006 (Tue) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.36 File: radiusd/src/lib/hash.c; Revisions: 1.10 ===================================================== Log entries ===================================================== Description: Don't increment num_elements too often Modified files: File: radiusd/src/lib/hash.c; Revision: 1.10; Date: 2006/01/30 22:06:10; Author: aland; Lines: (+3 -4) ------------------------------- Description: Update warning message Modified files: File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.36; Date: 2006/01/30 19:16:10; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/hash.c Revisions: 1.10 Authors: aland (+3 -4) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.36 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

rlm_ippool failed to get Pool-Name attribute on solaris 10
by German Gumenyuk 31 Jan '06

31 Jan '06

Hello Alan, seems i have used wrong Client-IP-Address value in DEFAULT entry. thank you for help. German Gumenyuk --------------------------------- Yahoo! Autos. Looking for a sweet ride? Get pricing, reviews, & more on new and used cars.

1 0

rlm_ippool failed to get Pool-Name attribute on solaris 10
by German Gumenyuk 31 Jan '06

31 Jan '06

Hello Alan, thank you for answer. in debug log it is matched correct user. this user has Fall-Through = yes in users file Pool-Name entries are defined in following DEFAULT entries (there is part of users file in previous mail) But pairfind() returns NULL for PW_POOL_NAME in rlm_ippool module: ------ Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 users: Matched entry userms4 at line 1 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied CHAP-Password matches local User-Password Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 rlm_ippool: Could not find Pool-Name attribute. modcall[post-auth]: module "p2_2" returns noop for request 0 rlm_ippool: Could not find Pool-Name attribute. ... ----- German Gumenyuk --------------------------------- What are the most popular cars? Find out at Yahoo! Autos

1 0