- Freeradius-Devel - lists.freeradius.org

freeside/FS/FS/svc_forward.pm update
by Scott Edwards 19 Sep '05

19 Sep '05

Previous to this update, it was illegal to set multiple destination email addresses, or permit destination email addresses to be back-slashed (ignore further processing, man forward). This patch opens up the regular expression used in validating the input. There appears to be a quoting issue with the backslashes somewhere, but it may well be my own provisioning script. Thanks, Scott Edwards -- Daxal Communications - http://www.daxal.com/

1 1

Automatic report from sources (radiusd) between 18.09.2005 - 19.09.2005 GMT
by Automatic cvs log generator 19 Sep '05

19 Sep '05

CVS log entries from 18.09.2005 (Sun) 08:00:02 - 19.09.2005 (Mon) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/stable; Revisions: 1.16 Author: phampson File: radiusd/doc/ChangeLog; Revisions: 1.57.2.30, 1.57.2.29 ===================================================== Log entries ===================================================== Description: Include post-1.0.5 changes Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.30; Date: 2005/09/18 17:57:04; Author: phampson; Lines: (+7 -4) ------------------------------- Description: Fix changelog entry to reflect the fact that 1.0.5 was released before I updated the crypt.h #include Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.29; Date: 2005/09/18 17:51:38; Author: phampson; Lines: (+6 -3) ------------------------------- Description: Add rlm_perl and rlm_sqlcounter. Modified files: File: radiusd/src/modules/stable; Revision: 1.16; Date: 2005/09/18 16:56:23; Author: nbk; Lines: (+2 -0) ===================================================== Summary of modified files ===================================================== File: radiusd/doc/ChangeLog Revisions: 1.57.2.30, 1.57.2.29 Authors: phampson (+7 -4), phampson (+6 -3) ------------------------------- File: radiusd/src/modules/stable Revisions: 1.16 Authors: nbk (+2 -0) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Attributes of functions
by Nicolas Baradakis 18 Sep '05

18 Sep '05

Among other things, Primoz Bratanic has send to me a patch that adds attributes to some of the functions. I think it is a good idea, I can see only avantages to it: - it makes the code more explicit for the reader. - it helps the compiler to produce a more performant binary. - it makes audit easier. I'd like to know whether I can apply this patch. There're two different methods to use the attributes of functions: --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- #ifndef __GNUC__ # define __attribute__(x) /*NOTHING*/ #endif static void __attribute__((noreturn)) usage(void) --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- Or perhaps this one a little friendlier: --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- #ifdef __GNUC__ # define NORETURN __attribute__(noreturn) #else # define NORETURN /*NOTHING*/ #endif static void NORETURN usage(void) --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- 8< --- -- Nicolas Baradakis

4 9

Re: rlm_sqlippool IPR (was: Automatic report from sources (radiusd) between 13.09.2005 - 14.09.2005 GMT)
by Ruslan A Dautkhanov 18 Sep '05

18 Sep '05

> > First, initially they make it public in year 2002-2003, please search archives... > > I made many changes to this module, main of them is that sqlippool > > _not_ create different pool of sql connections for _each_ configured > > pool of ip-addresses. > Yes. This was a good change. My changes go further. They allow only one > instance of the module to be configured and it will server ALL IP pools > configured at the SQL level so new IP Pools can be added and removed from > SQL on the fly and FreeRADIUS never has to be restarted nor configured for > them at all. This is also more efficient as there dont need to multiple > copies (potentially thousands in my case) of the module running which all > return NOOP except for one. On the other hand each request to the module > will always result in an SQL query but that is usually a decent tradeoff > as if you are using IP Pools then you are probably using them for most if > not all of your users.. That is great improvement. After it allocation of IP addresses can be configured very flexible and can be changed online, without restarting FR. BTW, IP addresses can be allocated through default sqlippool, but this allocated address can be overwrited to "static" one, configured in radreply Framed-IP-Address attribute for users that need it. We use such technique everywhere in our productional RADIUS servers. Thanks. -- Ruslan A Dautkhanov rusland(a)scn.ru

1 0

FreeRADIUS CVS->{BZR,Hg} migration consideration
by Paul TBBle Hampson 18 Sep '05

18 Sep '05

In order to have a look at how something like Bazaar-ng (which seems to have come out on top after consideration for my significantly smaller projects) or Mercuirial (which is optimised towards larger projects, and might suit FreeRADIUS nicely) will handle the importing of current the FreeRADIUS CVS repository, I propose to run a read-only parallel repository in either or both of the above on my own server, syncing against the FreeRADIUS CVS server. I'm planning to use tailor [1] to do the initial conversion and regular pulls. I'd then offer rsync, http and *web access as appropriate (although I've never tried it for Mercurial and only just set it up for bazaar-ng) for the curious to see what sort of difference it makes. However, the initial pull will produce pain for cvs.freeradius.org I expect, so I'd like to know if there's a particular time window which would be better for the cvs.freeradius.org box to be hammered upon by me doing this. (And be sure the time window is in UTC. I'm in Australia, so I don't want a TZ mistake to cause me to bring something grinding to a halt in front of someone's CEO. ^_^) (Alternatively, I could work off a copy of the CVS repository for a given point in time, but that's more effort for the server admins, and so I consider it optional. tailor can use pserver from the look of things.) I'm also open to other suggestions of versioning software to use, although I'm really only familiar with CVS in usage, and have been reading about git and bzr recently. One of (in fact, the main) reason I'm doing this is that it makes branches cheaper, so I can branch off my own Debian packaging work, and only push it up when I make a fix that belongs in the FreeRADIUS repository as well as in the Debian archive. I'm not really satisfied with the way I handled this between 1.0.4 and 1.0.5, although dpatch improved it immensely over 1.0.3 and earlier. ^_^ [1] http://darcs.net/DarcsWiki/Tailor -- ----------------------------------------------------------- Paul "TBBle" Hampson, MCSE 8th year CompSci/Asian Studies student, ANU The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361) Paul.Hampson(a)Pobox.Com Of course Pacman didn't influence us as kids. If it did, we'd be running around in darkened rooms, popping pills and listening to repetitive music. -- Kristian Wilson, Nintendo, Inc, 1989 License: http://creativecommons.org/licenses/by/2.1/au/ -----------------------------------------------------------

4 16

Automatic report from sources (radiusd) between 17.09.2005 - 18.09.2005 GMT
by Automatic cvs log generator 18 Sep '05

18 Sep '05

CVS log entries from 17.09.2005 (Sat) 08:00:01 - 18.09.2005 (Sun) 08:00:02 GMT ===================================================== Summary by authors ===================================================== Author: fcusack File: radiusd/src/modules/rlm_otp/Makefile.in; Revisions: 1.4 File: radiusd/src/modules/rlm_otp/cardops/cryptocard.h; Revisions: 1.5 File: radiusd/src/modules/rlm_otp/otp_cardops.h; Revisions: 1.5 File: radiusd/src/modules/rlm_otp/otp_x99.c; Revisions: 1.5 File: radiusd/src/modules/rlm_otp/otp_hotp.c; Revisions: 1.2, 1.1 File: radiusd/raddb/otppasswd.sample; Revisions: 1.3, 1.2 File: radiusd/src/modules/rlm_otp/cardops/cryptocard.c; Revisions: 1.5 File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revisions: 1.14 File: radiusd/src/modules/rlm_otp/otp.h; Revisions: 1.9, 1.8 Author: nbk File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.151, 1.131.2.5 ===================================================== Combined list of identical log entries ===================================================== Description: pass log_prefix to cardops challenge() and response() methods Modified files: File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.9; Date: 2005/09/18 07:27:01; Author: fcusack; Lines: (+2 -2) File: radiusd/src/modules/rlm_otp/otp_cardops.c; Revision: 1.14; Date: 2005/09/18 07:27:01; Author: fcusack; Lines: (+10 -6) File: radiusd/src/modules/rlm_otp/otp_cardops.h; Revision: 1.5; Date: 2005/09/18 07:27:01; Author: fcusack; Lines: (+4 -3) File: radiusd/src/modules/rlm_otp/otp_x99.c; Revision: 1.5; Date: 2005/09/18 07:27:01; Author: fcusack; Lines: (+5 -4) File: radiusd/src/modules/rlm_otp/cardops/cryptocard.c; Revision: 1.5; Date: 2005/09/18 07:27:01; Author: fcusack; Lines: (+8 -5) File: radiusd/src/modules/rlm_otp/cardops/cryptocard.h; Revision: 1.5; Date: 2005/09/18 07:27:01; Author: fcusack; Lines: (+3 -3) ------------------------------- Description: add hotp support Modified files: File: radiusd/src/modules/rlm_otp/Makefile.in; Revision: 1.4; Date: 2005/09/18 06:38:22; Author: fcusack; Lines: (+1 -1) File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.8; Date: 2005/09/18 06:38:22; Author: fcusack; Lines: (+6 -1) File: radiusd/src/modules/rlm_otp/otp_hotp.c; Revision: 1.1; Date: 2005/09/18 06:38:22; Author: fcusack; ===================================================== Log entries ===================================================== Description: typo Modified files: File: radiusd/raddb/otppasswd.sample; Revision: 1.3; Date: 2005/09/17 18:17:29; Author: fcusack; Lines: (+1 -1) ------------------------------- Description: remove state file documentation (now found in dsm documentation, not part of freeradius) Modified files: File: radiusd/raddb/otppasswd.sample; Revision: 1.2; Date: 2005/09/17 18:17:02; Author: fcusack; Lines: (+5 -55) ------------------------------- Description: fix HMAC error report Modified files: File: radiusd/src/modules/rlm_otp/otp_hotp.c; Revision: 1.2; Date: 2005/09/18 07:30:23; Author: fcusack; Lines: (+3 -3) ------------------------------- Description: Fix annoying format string errors. Thanks to Primoz Bratanic for bringing this to our attention. Modified files: File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.151; Date: 2005/09/17 12:47:35; Author: nbk; Lines: (+18 -13) ------------------------------- Description: Pull from CVS head: Fix format string errors. Modified files: File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.131.2.5; Date: 2005/09/17 13:03:31; Author: nbk; Lines: (+11 -10) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/otppasswd.sample Revisions: 1.3, 1.2 Authors: fcusack (+1 -1), fcusack (+5 -55) ------------------------------- File: radiusd/src/modules/rlm_otp/Makefile.in Revisions: 1.4 Authors: fcusack (+1 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/cardops/cryptocard.c Revisions: 1.5 Authors: fcusack (+8 -5) ------------------------------- File: radiusd/src/modules/rlm_otp/cardops/cryptocard.h Revisions: 1.5 Authors: fcusack (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_otp/otp.h Revisions: 1.9, 1.8 Authors: fcusack (+2 -2), fcusack (+6 -1) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_cardops.c Revisions: 1.14 Authors: fcusack (+10 -6) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_cardops.h Revisions: 1.5 Authors: fcusack (+4 -3) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_hotp.c Revisions: 1.2, 1.1 Authors: fcusack (+3 -3), fcusack ------------------------------- File: radiusd/src/modules/rlm_otp/otp_x99.c Revisions: 1.5 Authors: fcusack (+5 -4) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.151, 1.131.2.5 Authors: nbk (+18 -13), nbk (+11 -10) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: rlm_sqlippool IPR (was: Automatic report from sources (radiusd) between 13.09.2005 - 14.09.2005 GMT)
by Ruslan A Dautkhanov 17 Sep '05

17 Sep '05

Hello ! >>> > ===================================================== >>> > Combined list of identical log entries >>> > ===================================================== >>> > Description: >>> > Add new SQL IPPool module to tree. Config files to follow >>> > shortly. The module appears to have been worked on my a number of >>> > people. Most recent version is thanks to Ruslan A Dautkhanov. >> >> >> >> Thanks for adding this module, I think it can be useful in a number >> of cases. However, I didn't see any licence information in the files. >> >> Perhaps I'm asking for obvious things because I'm not an expert in >> legal issues. If this is a module of FreeRADIUS, I think it must be >> under GPL, but the only information I found in the sources is this >> line: >> >> Copyright 2002 Globe.Net Communications Limited >> >> It's unclear for me whether it is a problem with the intellectual >> property rights. For example, the OpenLDAP project requires that >> a contribution includes a notice from the author. > > > Yep. It is a very usefull module. We are actually in the process of > rewriting half of it so that it only needs one copy of itself to server > all IP Pools. That should make it scale linearly and mean that FeeRADIUS' > config files do not need to be touched to add a new pool. (No reload) > > Cheers > > -- > Peter Nixon About that copyright: First, initially they make it public in year 2002-2003, please search archives... I made many changes to this module, main of them is that sqlippool _not_ create different pool of sql connections for _each_ configured pool of ip-addresses. Second, when I made this patched module available in 2003 on the web for public, I also ask confirmation for it, they are agreed, as I know. Sorry, but I not have that message already. I think that if they want to stay that code incaccessible for public, then they should not post it to freeradius-list. But they did. -- Ruslan A Dautkhanov rusland(a)scn.ru

3 3

Automatic report from sources (radiusd) between 16.09.2005 - 17.09.2005 GMT
by Automatic cvs log generator 17 Sep '05

17 Sep '05

CVS log entries from 16.09.2005 (Fri) 08:00:02 - 17.09.2005 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/include/libradius.h; Revisions: 1.104 File: radiusd/configure.in; Revisions: 1.219 File: radiusd/src/main/session.c; Revisions: 1.30 File: radiusd/src/lib/misc.c; Revisions: 1.65 Author: fcusack File: radiusd/src/modules/rlm_otp/otp_state.c; Revisions: 1.11 Author: nbk File: radiusd/src/modules/rlm_sqlippool/Makefile; Revisions: 1.2 ===================================================== Combined list of identical log entries ===================================================== Description: Use closefrom(), which is guaranteed to close all file descriptors Well, except for EINTR, which should be fixed... Modified files: File: radiusd/configure.in; Revision: 1.219; Date: 2005/09/16 18:36:18; Author: aland; Lines: (+3 -2) File: radiusd/src/include/libradius.h; Revision: 1.104; Date: 2005/09/16 18:36:18; Author: aland; Lines: (+4 -1) File: radiusd/src/lib/misc.c; Revision: 1.65; Date: 2005/09/16 18:36:18; Author: aland; Lines: (+32 -2) File: radiusd/src/main/session.c; Revision: 1.30; Date: 2005/09/16 18:36:19; Author: aland; Lines: (+2 -15) ===================================================== Log entries ===================================================== Description: otp_state_getfd(): add type for log_prefix arg to definition for PAM case Modified files: File: radiusd/src/modules/rlm_otp/otp_state.c; Revision: 1.11; Date: 2005/09/17 05:40:28; Author: fcusack; Lines: (+3 -3) ------------------------------- Description: The Makefile is auto-generated by configure, thereore it shouldn't be included in the repository. Modified files: File: radiusd/src/modules/rlm_sqlippool/Makefile; Revision: 1.2; Date: 2005/09/16 09:01:41; Author: nbk; Lines: (+0 -0) ===================================================== Summary of modified files ===================================================== File: radiusd/configure.in Revisions: 1.219 Authors: aland (+3 -2) ------------------------------- File: radiusd/src/include/libradius.h Revisions: 1.104 Authors: aland (+4 -1) ------------------------------- File: radiusd/src/lib/misc.c Revisions: 1.65 Authors: aland (+32 -2) ------------------------------- File: radiusd/src/main/session.c Revisions: 1.30 Authors: aland (+2 -15) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_state.c Revisions: 1.11 Authors: fcusack (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_sqlippool/Makefile Revisions: 1.2 Authors: nbk (+0 -0) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

PATCH - $INCLUDE with wildcards
by Jorge Falcão 16 Sep '05

16 Sep '05

Patch for src/main/conffile.c. ATENTION: beta version.. i'm only work 2 hours. Any comments? []'s Jorge

1 0

feature : $INCLUDE path/*.conf
by Jorge Falcão 16 Sep '05

16 Sep '05

I'm working in a patch to permit use $INCLUDE path/*.conf in configuration files. did anybody do it before? []'s Jorge

1 0