- Freeradius-Devel - lists.freeradius.org

MS-CHAP support for pam_radius?
by A T 19 Nov '05

19 Nov '05

Hi - Is anyone aware of a source for a pam_radius implementation that includes support for MS-CHAP authentication? Thanks, Albert --------------------------------- Yahoo! FareChase - Search multiple travel sites in one click.

2 1

Re: rlm_pam fixes
by Frank Cusack 18 Nov '05

18 Nov '05

On November 18, 2005 10:46:36 AM +0100 Nicolas Baradakis <nbk(a)sitadelle.com> wrote: > Does this solve bug #291 ? (crash in rlm_pam) > http://bugs.freeradius.org/show_bug.cgi?id=291 Seems unlikely. That crash looks like either a bug in libpam (unlikely) or something in rlm_pam scribbling over pamh (also seems unlikely). I'll try to reproduce the problem. rlm_pam is a bit klunky but it's straightforward so if the problem is indeed there it shouldn't be hard to find. -frank

1 0

The location of the group files( ../raddb/users/) parsing ??
by sumi 18 Nov '05

18 Nov '05

Hi, Could you plz give me some info. about how the free-radius parses the users file ?? Which module does it ? can you plz specify the file name ?? ie., i have a config file : ../raddb/users which contains some users & groups associated. If the user1 belongs to group1 and does not belong to group2. Now i can have the access accept list for group1 but how can i reject the user to group2. Do i need to have a reject entry for group2 ?? Ex: user1 -> group1 -> accept user1 ->group2 -> reject But i dont want to have a DEFAULT Auth Type : Reject rather how do we achive it ?? any idea ?? Awaiting for ur reply. Thank u, Sumithra. -- "If u look at what u dont have in life, u dont have anything But if u look at what u have in life, u have everything.....!!"

2 1

Automatic report from sources (radiusd) between 17.11.2005 - 18.11.2005 GMT
by Automatic cvs log generator 18 Nov '05

18 Nov '05

CVS log entries from 17.11.2005 (Thu) 09:00:01 - 18.11.2005 (Fri) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: fcusack File: radiusd/src/modules/rlm_pam/rlm_pam.c; Revisions: 1.39 ===================================================== Log entries ===================================================== Description: - allocate all responses, not just the ones we fill in; the prior behavior would probably segfault if >1 prompt - fill in responses in the same order as prompts - correctly free memory on error (we were leaking reply[*].resp) - zero out response memory on error (pointless, but considered SOP) Modified files: File: radiusd/src/modules/rlm_pam/rlm_pam.c; Revision: 1.39; Date: 2005/11/17 17:53:11; Author: fcusack; Lines: (+20 -16) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_pam/rlm_pam.c Revisions: 1.39 Authors: fcusack (+20 -16) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

2 1

EAP-AKA
by kalyani gopalabhatla 17 Nov '05

17 Nov '05

Hi all, Free radius doesnot support EAP-AKA. How to configure EAP-AKA mechanism on RADIUS server? do we need to change the configuration file in such a way that it runs AKA or do we need to write a seperate script ? IS there any other open source server that supports EAP-AKA? Please can any one help with this.... Thanks kal Raji --------------------------------- Yahoo! FareChase - Search multiple travel sites in one click.

2 1

Need info about Clients configuration.
by Vishwanath Srikant Pattanshetti 17 Nov '05

17 Nov '05

Hi Am setting up radius server where I want to store the client addresses in oracle database. My setup would have about 1500 RADIUS clients talking to the RADIUS server and these clients would be dynamically added/removed And for some clients I may have to proxy the authentication requests. Hence I want to know is there a way I can specify a "default" client in the "nas" table so that the proxying can be handled easily?? Thanks in advance. -Vishwa.

1 0

compile error with current snapshot
by Norbert Wegener 16 Nov '05

16 Nov '05

Is it worth mentioning here, when the current snapshot fails to compile? System is Suse9.3 as well as Suse10.0 *** Warning: Linking the shared library rlm_eap_peap.la against the loadable module^M *** rlm_eap_tls.so is not portable!^M ^M *** Warning: Linking the shared library rlm_eap_peap.la against the loadable module^M *** libeap.so is not portable!^M gcc -shared .libs/rlm_eap_peap.o .libs/peap.o -L/usr/local/lib -lradius -lrlm_eap_tls -L/root/freeradius-snapshot-20051115/src/modules/rlm_eap/libeap -leap -lssl -lcrypto -lnsl -lresolv -lpthread -Wl,-soname -Wl,rlm_eap_peap-1.1.0-pre0.so -o .libs/rlm_eap_peap-1.1.0-pre0.so^M /usr/lib/gcc-lib/i586-suse-linux/3.3.5/../../../../i586-suse-linux/bin/ld: cannot find -lrlm_eap_tls^M collect2: ld returned 1 exit status^M libtool: install: error: relink `rlm_eap_peap.la' with the above command before installing it^M gmake[11]: *** [install] Error 1^M gmake[11]: Leaving directory `/root/freeradius-snapshot-20051115/src/modules/rlm_eap/types/rlm_eap_peap'^M gmake[10]: *** [common] Error 2^M gmake[10]: Leaving directory `/root/freeradius-snapshot-20051115/src/modules/rlm_eap/types'^M gmake[9]: *** [install] Error 2^M gmake[9]: Leaving directory `/root/freeradius-snapshot-20051115/src/modules/rlm_eap/types'^M gmake[8]: *** [common] Error 2^M gmake[8]: Leaving directory `/root/freeradius-snapshot-20051115/src/modules/rlm_eap'^M gmake[7]: *** [install-types] Error 2^M gmake[7]: Leaving directory `/root/freeradius-snapshot-20051115/src/modules/rlm_eap'^M gmake[6]: *** [install] Error 2^M gmake[6]: Leaving directory `/root/freeradius-snapshot-20051115/src/modules/rlm_eap'^M gmake[5]: *** [common] Error 2^M gmake[5]: Leaving directory `/root/freeradius-snapshot-20051115/src/modules'^M gmake[4]: *** [install] Error 2^M gmake[4]: Leaving directory `/root/freeradius-snapshot-20051115/src/modules'^M gmake[3]: *** [common] Error 2^M gmake[3]: Leaving directory `/root/freeradius-snapshot-20051115/src'^M Norbert Wegener

2 3

Automatic report from sources (radiusd) between 15.11.2005 - 16.11.2005 GMT
by Automatic cvs log generator 16 Nov '05

16 Nov '05

CVS log entries from 15.11.2005 (Tue) 09:00:01 - 16.11.2005 (Wed) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_eap/libeap/mppe_keys.c; Revisions: 1.1 File: radiusd/src/modules/rlm_eap/libeap/eap_tls.h; Revisions: 1.1 File: radiusd/src/modules/rlm_eap/libeap/Makefile; Revisions: 1.4 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/cb.c; Revisions: 1.18 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in; Revisions: 1.8 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in; Revisions: 1.10 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/eap_tls.c; Revisions: 1.25 File: radiusd/src/modules/rlm_eap/libeap/tls.c; Revisions: 1.1 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys.c; Revisions: 1.5 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/eap_tls.h; Revisions: 1.20 File: radiusd/src/modules/rlm_eap/libeap/fips186prf.c; Revisions: 1.6 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in; Revisions: 1.8 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/tls.c; Revisions: 1.18 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h; Revisions: 1.7 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h; Revisions: 1.6 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h; Revisions: 1.8 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c; Revisions: 1.9 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revisions: 1.19 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revisions: 1.24 File: radiusd/src/modules/rlm_eap/libeap/cb.c; Revisions: 1.1 File: radiusd/src/modules/rlm_eap/libeap/eap_tls.c; Revisions: 1.1 ===================================================== Combined list of identical log entries ===================================================== Description: Moved TLS code from rlm_eap_tls to libeap. Updated Make files to use the new defs. It appears to work. Modified files: File: radiusd/src/modules/rlm_eap/libeap/Makefile; Revision: 1.4; Date: 2005/11/15 22:29:49; Author: aland; Lines: (+4 -3) File: radiusd/src/modules/rlm_eap/libeap/cb.c; Revision: 1.1; Date: 2005/11/15 22:29:49; Author: aland; File: radiusd/src/modules/rlm_eap/libeap/eap_tls.c; Revision: 1.1; Date: 2005/11/15 22:29:49; Author: aland; File: radiusd/src/modules/rlm_eap/libeap/eap_tls.h; Revision: 1.1; Date: 2005/11/15 22:29:50; Author: aland; File: radiusd/src/modules/rlm_eap/libeap/mppe_keys.c; Revision: 1.1; Date: 2005/11/15 22:29:50; Author: aland; File: radiusd/src/modules/rlm_eap/libeap/tls.c; Revision: 1.1; Date: 2005/11/15 22:29:50; Author: aland; File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in; Revision: 1.8; Date: 2005/11/15 22:29:50; Author: aland; Lines: (+1 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h; Revision: 1.7; Date: 2005/11/15 22:29:50; Author: aland; Lines: (+2 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c; Revision: 1.19; Date: 2005/11/15 22:29:50; Author: aland; Lines: (+1 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c; Revision: 1.9; Date: 2005/11/15 22:29:50; Author: aland; Lines: (+1 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in; Revision: 1.8; Date: 2005/11/15 22:29:50; Author: aland; Lines: (+2 -3) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/cb.c; Revision: 1.18; Date: 2005/11/15 22:29:51; Author: aland; Lines: (+1 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/eap_tls.c; Revision: 1.25; Date: 2005/11/15 22:29:51; Author: aland; Lines: (+1 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/eap_tls.h; Revision: 1.20; Date: 2005/11/15 22:29:51; Author: aland; Lines: (+1 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys.c; Revision: 1.5; Date: 2005/11/15 22:29:51; Author: aland; Lines: (+1 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h; Revision: 1.8; Date: 2005/11/15 22:29:51; Author: aland; Lines: (+2 -166) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/tls.c; Revision: 1.18; Date: 2005/11/15 22:29:52; Author: aland; Lines: (+1 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in; Revision: 1.10; Date: 2005/11/15 22:29:52; Author: aland; Lines: (+1 -1) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h; Revision: 1.6; Date: 2005/11/15 22:29:52; Author: aland; Lines: (+2 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c; Revision: 1.24; Date: 2005/11/15 22:29:52; Author: aland; Lines: (+1 -2) ===================================================== Log entries ===================================================== Description: Remove stupid CVS log statement Modified files: File: radiusd/src/modules/rlm_eap/libeap/fips186prf.c; Revision: 1.6; Date: 2005/11/15 22:14:38; Author: aland; Lines: (+1 -27) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_eap/libeap/Makefile Revisions: 1.4 Authors: aland (+4 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/cb.c Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/eap_tls.c Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/eap_tls.h Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/fips186prf.c Revisions: 1.6 Authors: aland (+1 -27) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/mppe_keys.c Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/tls.c Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in Revisions: 1.8 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h Revisions: 1.7 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/peap.c Revisions: 1.19 Authors: aland (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c Revisions: 1.9 Authors: aland (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in Revisions: 1.8 Authors: aland (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/cb.c Revisions: 1.18 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/eap_tls.c Revisions: 1.25 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/eap_tls.h Revisions: 1.20 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys.c Revisions: 1.5 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Revisions: 1.8 Authors: aland (+2 -166) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/tls.c Revisions: 1.18 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in Revisions: 1.10 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h Revisions: 1.6 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Revisions: 1.24 Authors: aland (+1 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

need info about radius+SSH
by Vishwanath Srikant Pattanshetti 15 Nov '05

15 Nov '05

Hello all I have freeradius installed on solaris 10. I want to do the configuration in such a way that, when a user connects to this machine using ssh, the user authentication is done using the RADIUS server. I have added the following line to /etc/pam.conf on solaris machine. ssh auth sufficient pam_radius_auth.so.1 But I do not see any request sent to radius server when a user connects to the machine using ssh. However I have tried similar configuration for telnet by adding following line to /etc/pam.conf telnet auth sufficient pam_radius_auth.so.1 And this configuration works fine. Can some one please tell me what am I missing?? Thanks and regards. -Vishwa

2 1

Automatic report from sources (radiusd) between 14.11.2005 - 15.11.2005 GMT
by Automatic cvs log generator 15 Nov '05

15 Nov '05

CVS log entries from 14.11.2005 (Mon) 09:00:01 - 15.11.2005 (Tue) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/threads.c; Revisions: 1.103 File: radiusd/src/lib/valuepair.c; Revisions: 1.102 File: radiusd/src/include/libradius.h; Revisions: 1.114 File: radiusd/src/modules/rlm_files/rlm_files.c; Revisions: 1.71 File: radiusd/src/main/exec.c; Revisions: 1.51 File: radiusd/src/lib/fifo.c; Revisions: 1.1 File: radiusd/src/lib/dict.c; Revisions: 1.78 File: radiusd/src/lib/Makefile; Revisions: 1.26 Author: nbk File: radiusd/src/main/Makefile.in; Revisions: 1.54 File: radiusd/src/main/exec.c; Revisions: 1.50 File: radiusd/src/modules/rlm_exec/exec.c; Revisions: 1.6 File: radiusd/src/modules/rlm_exec/Makefile; Revisions: 1.3 ===================================================== Combined list of identical log entries ===================================================== Description: Move back the file 'exec.c' from src/modules/rlm_exec to src/main Modified files: File: radiusd/src/main/exec.c; Revision: 1.50; Date: 2005/11/14 19:53:52; Author: nbk; Lines: (+27 -21) File: radiusd/src/modules/rlm_exec/exec.c; Revision: 1.6; Date: 2005/11/14 19:53:53; Author: nbk; Lines: (+2 -2) ------------------------------- Description: Be a little more careful when creating bad attributes Modified files: File: radiusd/src/lib/dict.c; Revision: 1.78; Date: 2005/11/14 21:30:25; Author: aland; Lines: (+4 -92) File: radiusd/src/lib/valuepair.c; Revision: 1.102; Date: 2005/11/14 21:30:25; Author: aland; Lines: (+3 -54) ------------------------------- Description: Have the thread queue handler use fifos, rather than the hash table. This makes it easier to add more logic around request handling, i.e. prefer ongoing conversations over new ones. Modified files: File: radiusd/src/include/libradius.h; Revision: 1.114; Date: 2005/11/14 21:55:13; Author: aland; Lines: (+11 -1) File: radiusd/src/lib/Makefile; Revision: 1.26; Date: 2005/11/14 21:55:13; Author: aland; Lines: (+2 -2) File: radiusd/src/lib/fifo.c; Revision: 1.1; Date: 2005/11/14 21:55:13; Author: aland; File: radiusd/src/main/threads.c; Revision: 1.103; Date: 2005/11/14 21:55:13; Author: aland; Lines: (+71 -72) ===================================================== Log entries ===================================================== Description: Compile again the file 'exec.c' Modified files: File: radiusd/src/main/Makefile.in; Revision: 1.54; Date: 2005/11/14 19:54:45; Author: nbk; Lines: (+6 -6) ------------------------------- Description: Look at the correct variable Modified files: File: radiusd/src/main/exec.c; Revision: 1.51; Date: 2005/11/14 20:28:54; Author: aland; Lines: (+3 -3) ------------------------------- Description: 'exec.c' has been deleted. Modified files: File: radiusd/src/modules/rlm_exec/Makefile; Revision: 1.3; Date: 2005/11/14 19:55:09; Author: nbk; Lines: (+2 -2) ------------------------------- Description: Cleaned up the code so it has one code base for all functions. Added authenticate, postproxy, and postauth sections, too Modified files: File: radiusd/src/modules/rlm_files/rlm_files.c; Revision: 1.71; Date: 2005/11/14 23:38:09; Author: aland; Lines: (+142 -200) ===================================================== Summary of modified files ===================================================== File: radiusd/src/include/libradius.h Revisions: 1.114 Authors: aland (+11 -1) ------------------------------- File: radiusd/src/lib/Makefile Revisions: 1.26 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/lib/dict.c Revisions: 1.78 Authors: aland (+4 -92) ------------------------------- File: radiusd/src/lib/fifo.c Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/lib/valuepair.c Revisions: 1.102 Authors: aland (+3 -54) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.54 Authors: nbk (+6 -6) ------------------------------- File: radiusd/src/main/exec.c Revisions: 1.51, 1.50 Authors: aland (+3 -3), nbk (+27 -21) ------------------------------- File: radiusd/src/main/threads.c Revisions: 1.103 Authors: aland (+71 -72) ------------------------------- File: radiusd/src/modules/rlm_exec/Makefile Revisions: 1.3 Authors: nbk (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_exec/exec.c Revisions: 1.6 Authors: nbk (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_files/rlm_files.c Revisions: 1.71 Authors: aland (+142 -200) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0