- Freeradius-Devel - lists.freeradius.org

Realm ?????
by S.I 25 Aug '05

25 Aug '05

Hi, I have a problem with freeradius-1.0.4 on FreeBSD 5.4-STABLE when realm user (*@blia-bluia-blia) or !@#$%^&*()_+@domain.com is login in my NAS . kernel show error: radiusd in free(): warning: junk pointer, too high to make sense. Can you make a patch for custom suffix waitng for your solution. Best Regards S.I

2 1

Automatic report from sources (radiusd) between 24.08.2005 - 25.08.2005 GMT
by Automatic cvs log generator 25 Aug '05

25 Aug '05

CVS log entries from 24.08.2005 (Wed) 08:00:01 - 25.08.2005 (Thu) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/auth.c; Revisions: 1.150, 1.149, 1.136.2.4 Author: nbk File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revisions: 1.15.2.2 File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.153, 1.122.2.6 File: radiusd/src/main/mainconfig.c; Revisions: 1.36.2.6, 1.36.2.5 File: radiusd/src/lib/misc.c; Revisions: 1.41.2.3 File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revisions: 1.59.2.2 File: radiusd/src/include/libradius.h; Revisions: 1.76.2.1 File: radiusd/raddb/sql.conf; Revisions: 1.49, 1.48, 1.41.2.2 File: radiusd/src/modules/rlm_unix/cache.c; Revisions: 1.25.2.1 File: radiusd/src/modules/rlm_expr/rlm_expr.c; Revisions: 1.7.2.1 File: radiusd/src/modules/rlm_eap/types/rlm_eap_md5/eap_md5.c; Revisions: 1.11, 1.10.2.1 File: radiusd/src/modules/rlm_eap/libeap/fips186prf.c; Revisions: 1.3.2.1 ===================================================== Combined list of identical log entries ===================================================== Description: Fix compilation warnings with gcc 4.0 Patch from Steven Simon <simon.s(a)apple.com> Modified files: File: radiusd/src/include/libradius.h; Revision: 1.76.2.1; Date: 2005/08/24 14:37:51; Author: nbk; Lines: (+2 -2) File: radiusd/src/lib/misc.c; Revision: 1.41.2.3; Date: 2005/08/24 14:37:51; Author: nbk; Lines: (+3 -3) File: radiusd/src/main/mainconfig.c; Revision: 1.36.2.5; Date: 2005/08/24 14:37:51; Author: nbk; Lines: (+7 -7) File: radiusd/src/modules/rlm_eap/libeap/fips186prf.c; Revision: 1.3.2.1; Date: 2005/08/24 14:37:52; Author: nbk; Lines: (+9 -2) File: radiusd/src/modules/rlm_expr/rlm_expr.c; Revision: 1.7.2.1; Date: 2005/08/24 14:37:52; Author: nbk; Lines: (+4 -3) File: radiusd/src/modules/rlm_mschap/rlm_mschap.c; Revision: 1.59.2.2; Date: 2005/08/24 14:37:52; Author: nbk; Lines: (+13 -11) File: radiusd/src/modules/rlm_pap/rlm_pap.c; Revision: 1.15.2.2; Date: 2005/08/24 14:37:52; Author: nbk; Lines: (+3 -3) File: radiusd/src/modules/rlm_unix/cache.c; Revision: 1.25.2.1; Date: 2005/08/24 14:37:53; Author: nbk; Lines: (+4 -4) ===================================================== Log entries ===================================================== Description: Use %S instead of NOW() because the value is wrong when post-processing the query. (radsqlrelay) Modified files: File: radiusd/raddb/sql.conf; Revision: 1.49; Date: 2005/08/24 16:50:31; Author: nbk; Lines: (+2 -2) ------------------------------- Description: Use the same case-insensitives queries as postgresql.conf Modified files: File: radiusd/raddb/sql.conf; Revision: 1.48; Date: 2005/08/24 16:34:37; Author: nbk; Lines: (+65 -44) ------------------------------- Description: Pull from CVS head: nas_table definition case-insensitives queries %S instead of NOW() Modified files: File: radiusd/raddb/sql.conf; Revision: 1.41.2.2; Date: 2005/08/24 17:02:04; Author: nbk; Lines: (+54 -42) ------------------------------- Description: Dang typos Modified files: File: radiusd/src/main/auth.c; Revision: 1.150; Date: 2005/08/25 00:10:46; Author: aland; Lines: (+6 -6) ------------------------------- Description: Don't de-reference a NULL pointer if the auth-type is unknown Modified files: File: radiusd/src/main/auth.c; Revision: 1.149; Date: 2005/08/25 00:08:09; Author: aland; Lines: (+11 -4) ------------------------------- Description: Pull fix from the head Modified files: File: radiusd/src/main/auth.c; Revision: 1.136.2.4; Date: 2005/08/25 00:10:28; Author: aland; Lines: (+11 -4) ------------------------------- Description: Still warnings, fixing them. Modified files: File: radiusd/src/main/mainconfig.c; Revision: 1.36.2.6; Date: 2005/08/24 15:38:26; Author: nbk; Lines: (+7 -7) ------------------------------- Description: Delete the assertion (reply->value_size < 256) because an unsigned char is always < 256. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_md5/eap_md5.c; Revision: 1.11; Date: 2005/08/24 14:23:05; Author: nbk; Lines: (+1 -2) ------------------------------- Description: Pull from CVS head: Delete the assertion (reply->value_size < 256) because an unsigned char is always < 256. Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_md5/eap_md5.c; Revision: 1.10.2.1; Date: 2005/08/24 14:23:11; Author: nbk; Lines: (+1 -2) ------------------------------- Description: Fix compilation warnings in code from Novell. Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.153; Date: 2005/08/24 09:21:58; Author: nbk; Lines: (+5 -5) ------------------------------- Description: Pull from CVS head: Fix compilation warnings. Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.6; Date: 2005/08/24 10:12:19; Author: nbk; Lines: (+9 -9) ===================================================== Summary of modified files ===================================================== File: radiusd/raddb/sql.conf Revisions: 1.49, 1.48, 1.41.2.2 Authors: nbk (+2 -2), nbk (+65 -44), nbk (+54 -42) ------------------------------- File: radiusd/src/include/libradius.h Revisions: 1.76.2.1 Authors: nbk (+2 -2) ------------------------------- File: radiusd/src/lib/misc.c Revisions: 1.41.2.3 Authors: nbk (+3 -3) ------------------------------- File: radiusd/src/main/auth.c Revisions: 1.150, 1.149, 1.136.2.4 Authors: aland (+6 -6), aland (+11 -4), aland (+11 -4) ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.36.2.6, 1.36.2.5 Authors: nbk (+7 -7), nbk (+7 -7) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/fips186prf.c Revisions: 1.3.2.1 Authors: nbk (+9 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_md5/eap_md5.c Revisions: 1.11, 1.10.2.1 Authors: nbk (+1 -2), nbk (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_expr/rlm_expr.c Revisions: 1.7.2.1 Authors: nbk (+4 -3) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.153, 1.122.2.6 Authors: nbk (+5 -5), nbk (+9 -9) ------------------------------- File: radiusd/src/modules/rlm_mschap/rlm_mschap.c Revisions: 1.59.2.2 Authors: nbk (+13 -11) ------------------------------- File: radiusd/src/modules/rlm_pap/rlm_pap.c Revisions: 1.15.2.2 Authors: nbk (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_unix/cache.c Revisions: 1.25.2.1 Authors: nbk (+4 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

memory leaks and other problems with rlm_ippool
by Peter Nixon 24 Aug '05

24 Aug '05

Hi Guys I am consistently finding that if you create more than one IP Pool bigger than a class B network that FreeRADIUS fails to start with an error saying that it cannot fork. It can however be run in debug mode with this config. I have tested this on a number of different servers with a number of different versions of FreeRADIUS and on SUSE Linux Enterprise 9, SUSE Pro 9.2, SUSE Pro 9.3 and some random version of Turbo Linux that a customer had. Also, one customer who had only a single class B IP Pool with about 10,000 clients connecting and disconnecting on a regular basis (Around 300 Auth requests and associated Accounting packets per minute between 8am and midnight) is seeing their FreeRADIUS grow over the course of a couple of days until the Linux OOM killer kills it. (Making their customers very unhappy until they restart their server) Their server is fully patched SLES9 running FreeRADIUS 1.0.4 Does anyone have any ideas? Surely someone else must have seen these problems. I can't be the only person running multiple, large IP Pools... -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

4 6

Automatic report from sources (radiusd) between 23.08.2005 - 24.08.2005 GMT
by Automatic cvs log generator 24 Aug '05

24 Aug '05

CVS log entries from 23.08.2005 (Tue) 08:00:01 - 24.08.2005 (Wed) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revisions: 1.152, 1.122.2.5 File: radiusd/src/main/auth.c; Revisions: 1.148 File: radiusd/src/include/radiusd.h; Revisions: 1.203 Author: nbk File: radiusd/src/main/xlat.c; Revisions: 1.102, 1.101, 1.72.2.6 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/db_postgresql.sql; Revisions: 1.23, 1.16.2.4 File: radiusd/raddb/Makefile; Revisions: 1.11 File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revisions: 1.18, 1.11.2.3, 1.11.2.2 Author: phampson File: radiusd/debian/rules; Revisions: 1.54.2.16 ===================================================== Combined list of identical log entries ===================================================== Description: Use proper name in #ifdef Modified files: File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.152; Date: 2005/08/23 22:45:21; Author: aland; Lines: (+2 -2) File: radiusd/src/modules/rlm_ldap/rlm_ldap.c; Revision: 1.122.2.5; Date: 2005/08/23 22:44:45; Author: aland; Lines: (+2 -2) ------------------------------- Description: Make rad_check_password 'static', as no one else needs it Modified files: File: radiusd/src/include/radiusd.h; Revision: 1.203; Date: 2005/08/23 23:45:58; Author: aland; Lines: (+1 -2) File: radiusd/src/main/auth.c; Revision: 1.148; Date: 2005/08/23 23:45:58; Author: aland; Lines: (+3 -3) ===================================================== Log entries ===================================================== Description: Don't install CVS control files in dialup-admin's docs. Modified files: File: radiusd/debian/rules; Revision: 1.54.2.16; Date: 2005/08/23 13:39:14; Author: phampson; Lines: (+3 -3) ------------------------------- Description: Remove 'clients', 'naslist', 'x99.conf' and 'x99passwd.sample' from the list of files to install. Modified files: File: radiusd/raddb/Makefile; Revision: 1.11; Date: 2005/08/23 09:02:53; Author: nbk; Lines: (+12 -7) ------------------------------- Description: If strftime(3) returns 0, the contents of the string array is undefined, therefore it should not be copied. Thanks to Primoz Bratanic for spotting this. Modified files: File: radiusd/src/main/xlat.c; Revision: 1.102; Date: 2005/08/23 10:26:23; Author: nbk; Lines: (+41 -27) ------------------------------- Description: Fix typo line 781. Modified files: File: radiusd/src/main/xlat.c; Revision: 1.101; Date: 2005/08/23 08:34:55; Author: nbk; Lines: (+3 -3) ------------------------------- Description: Pull from CVS head: Fix typo and test strftime(3) return value. Modified files: File: radiusd/src/main/xlat.c; Revision: 1.72.2.6; Date: 2005/08/23 10:26:34; Author: nbk; Lines: (+42 -28) ------------------------------- Description: The maximum password length is 128, not 253. (closes: #270) Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/db_postgresql.sql; Revision: 1.23; Date: 2005/08/23 15:40:12; Author: nbk; Lines: (+2 -2) ------------------------------- Description: Pull from CVS head: The maximum password length is 128, not 253. (closes: #270) Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/db_postgresql.sql; Revision: 1.16.2.4; Date: 2005/08/23 15:40:15; Author: nbk; Lines: (+2 -2) ------------------------------- Description: Escape the SQL queries to prevent possible SQL injection vulnerability. Bug found by Primoz Bratanic <primoz(a)slo-tech.com> Modified files: File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.18; Date: 2005/08/23 14:03:45; Author: nbk; Lines: (+60 -6) ------------------------------- Description: Pull from CVS head: Use the time left to the next reset if it's inferior to the time left in the counter. (closes: #190) Modified files: File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.11.2.3; Date: 2005/08/23 14:13:38; Author: nbk; Lines: (+3 -2) ------------------------------- Description: Pull from CVS head: Escape the SQL queries. Modified files: File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.11.2.2; Date: 2005/08/23 14:03:54; Author: nbk; Lines: (+60 -6) ===================================================== Summary of modified files ===================================================== File: radiusd/debian/rules Revisions: 1.54.2.16 Authors: phampson (+3 -3) ------------------------------- File: radiusd/raddb/Makefile Revisions: 1.11 Authors: nbk (+12 -7) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.203 Authors: aland (+1 -2) ------------------------------- File: radiusd/src/main/auth.c Revisions: 1.148 Authors: aland (+3 -3) ------------------------------- File: radiusd/src/main/xlat.c Revisions: 1.102, 1.101, 1.72.2.6 Authors: nbk (+41 -27), nbk (+3 -3), nbk (+42 -28) ------------------------------- File: radiusd/src/modules/rlm_ldap/rlm_ldap.c Revisions: 1.152, 1.122.2.5 Authors: aland (+2 -2), aland (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/db_postgresql.sql Revisions: 1.23, 1.16.2.4 Authors: nbk (+2 -2), nbk (+2 -2) ------------------------------- File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c Revisions: 1.18, 1.11.2.3, 1.11.2.2 Authors: nbk (+60 -6), nbk (+3 -2), nbk (+60 -6) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: Release 1.0.5?
by Alexander Voropay 23 Aug '05

23 Aug '05

Hi! Could you please to pay some attention to this problem: https://list.xs4all.nl/pipermail/freeradius-devel/2005-June/008471.html (see thread). As far as I found, this error is triggered only when logging "-X" is enbled. Seems, something wrong with logging in multithreaded environment. (not multithread safe ?) ./src/lib/log.c:42: * This also isn't multithreaded-safe, so it'll have to be changed -- -=AV=-

2 1

Re: Release 1.0.5?
by Alexander Voropay 23 Aug '05

23 Aug '05

Hi! Is it possible to rewrite a string in the ./raddb/sql.conf ? accounting_update_query = "UPDATE ${acct_table1} \ SET FramedIPAddress = '%{Framed-IP-Address}', \ AcctSessionTime = '%{Acct-Session-Time}', \ ... - remove a "\" and put it as one long line. Seems, radius_xlat() does not understand "\" (line continue) and substitutes it with "?" so we have a wrong SQL request. -- -=AV=-

2 1

Re: [Openswan dev] Openswan 2.3.1/2.4.0rc1 instability with L2TP
by Michael Richardson 23 Aug '05

23 Aug '05

-----BEGIN PGP SIGNED MESSAGE----- >>>>> "Norbert" == Norbert Wegener <nw(a)sbs.de> writes: Norbert> Further analysis showed, that when using a netkey kernel Norbert> instead of KLIPS and openswan-2.4.0rc1 , everything worked Norbert> as expected. So the problem seems to be only partially Norbert> causes by the fragment_size miscalculation. The main reason Norbert> seems to be related to KLIPS. Norbert Wegener tcpdump -i ipsec0 -w /tmp/ipsec0.pcap -s 1600 tcpdump -i eth1 -w /tmp/eth0.pcap -s 1600 on the server end of things. (assuming eth1 is your external interface) I have been told that there are issues with fragmentation of transport-mode packets. Don't ask me what I think of L2TP. - -- ] Michael Richardson Xelerance Corporation, Ottawa, ON | firewalls [ ] mcr @ xelerance.com Now doing IPsec training, see |net architect[ ] http://www.sandelman.ca/mcr/ www.xelerance.com/training/ |device driver[ ] I'm a dad: http://www.sandelman.ca/lrmr/ [ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Finger me for keys iQCVAwUBQwpHUoqHRg3pndX9AQGyTAP/QIeUM/TwRAAfYS0D2vCe+UJTF9ONCwN3 qv+oB+siqS0VAbC4eiJ9WQ5JmtYlREifCUsDcieKfHW82IHHVuf0lCFly8s4QBAV 3TwJLebgex+pahFeqVHu/IbJJSn6Fr9tRxybG2UO5wbZkzw5+OxjOm/uIxRPhML9 QAyO4WTKCK4= =t8OK -----END PGP SIGNATURE-----

2 1

Automatic report from sources (radiusd) between 22.08.2005 - 23.08.2005 GMT
by Automatic cvs log generator 23 Aug '05

23 Aug '05

CVS log entries from 22.08.2005 (Mon) 08:00:01 - 23.08.2005 (Tue) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/raddb/naslist; Revisions: 1.4 File: radiusd/src/include/radiusd.h; Revisions: 1.202, 1.201 File: radiusd/man/man5/naslist.5; Revisions: 1.4 File: radiusd/src/main/Makefile.in; Revisions: 1.52, 1.51 File: radiusd/src/main/crypt.c; Revisions: 1.1 File: radiusd/scripts/clients.pl; Revisions: 1.2, 1.1 File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c; Revisions: 1.33 File: radiusd/src/main/mainconfig.c; Revisions: 1.79, 1.78 File: radiusd/src/lib/misc.c; Revisions: 1.62, 1.61 File: radiusd/src/lib/Makefile; Revisions: 1.22 File: radiusd/src/lib/print.c; Revisions: 1.35 File: radiusd/src/main/client.c; Revisions: 1.45 File: radiusd/src/main/nas.c; Revisions: 1.26 File: radiusd/raddb/clients; Revisions: 1.6 File: radiusd/src/include/libradius.h; Revisions: 1.93, 1.92 File: radiusd/src/lib/crypt.c; Revisions: 1.10 File: radiusd/man/man5/clients.5; Revisions: 1.4 File: radiusd/src/main/radwho.c; Revisions: 1.58, 1.57 File: radiusd/src/main/conffile.c; Revisions: 1.128 Author: nbk File: radiusd/src/modules/rlm_ldap/configure.in; Revisions: 1.15, 1.10.2.4 File: radiusd/src/lib/misc.c; Revisions: 1.60 File: radiusd/src/modules/rlm_ldap/configure; Revisions: 1.16, 1.10.2.3 Author: phampson File: radiusd/debian/rules; Revisions: 1.54.2.15 File: radiusd/debian/patches/01_NET-SNMP_build_support.dpatch; Revisions: 1.1.2.4 File: radiusd/debian/patches/02_EAP-SIM_doesnt_need_openssl.dpatch; Revisions: 1.1.2.4 File: radiusd/debian/patches/06_libtool14_vs_rlm_eap_tls.dpatch; Revisions: 1.1.2.2 ===================================================== Combined list of identical log entries ===================================================== Description: Removed support for old-style "naslist" file, and updated scripts/clients.pl to convert it, too Modified files: File: radiusd/man/man5/naslist.5; Revision: 1.4; Date: 2005/08/22 19:12:07; Author: aland; Lines: (+7 -26) File: radiusd/raddb/clients; Revision: 1.6; Date: 2005/08/22 19:12:07; Author: aland; Lines: (+0 -0) File: radiusd/raddb/naslist; Revision: 1.4; Date: 2005/08/22 19:12:08; Author: aland; Lines: (+0 -0) File: radiusd/scripts/clients.pl; Revision: 1.2; Date: 2005/08/22 19:12:07; Author: aland; Lines: (+46 -10) File: radiusd/src/include/radiusd.h; Revision: 1.202; Date: 2005/08/22 19:12:08; Author: aland; Lines: (+1 -13) File: radiusd/src/main/Makefile.in; Revision: 1.51; Date: 2005/08/22 19:12:08; Author: aland; Lines: (+2 -5) File: radiusd/src/main/mainconfig.c; Revision: 1.79; Date: 2005/08/22 19:12:08; Author: aland; Lines: (+1 -9) File: radiusd/src/main/nas.c; Revision: 1.26; Date: 2005/08/22 19:12:08; Author: aland; Lines: (+2 -2) ------------------------------- Description: Removed support for old-style "clients" file, as it makes future work more difficult. Modified files: File: radiusd/man/man5/clients.5; Revision: 1.4; Date: 2005/08/22 18:35:50; Author: aland; Lines: (+5 -27) File: radiusd/scripts/clients.pl; Revision: 1.1; Date: 2005/08/22 18:35:50; Author: aland; File: radiusd/src/include/radiusd.h; Revision: 1.201; Date: 2005/08/22 18:35:49; Author: aland; Lines: (+1 -2) File: radiusd/src/main/client.c; Revision: 1.45; Date: 2005/08/22 18:35:50; Author: aland; Lines: (+2 -171) File: radiusd/src/main/mainconfig.c; Revision: 1.78; Date: 2005/08/22 18:35:50; Author: aland; Lines: (+1 -11) ------------------------------- Description: Move crypt.c to src/main. Library functions shouldn't have pthread stuff in them. Modified files: File: radiusd/src/lib/Makefile; Revision: 1.22; Date: 2005/08/23 00:16:21; Author: aland; Lines: (+1 -1) File: radiusd/src/lib/crypt.c; Revision: 1.10; Date: 2005/08/23 00:16:22; Author: aland; Lines: (+0 -0) File: radiusd/src/main/Makefile.in; Revision: 1.52; Date: 2005/08/23 00:16:22; Author: aland; Lines: (+6 -2) File: radiusd/src/main/crypt.c; Revision: 1.1; Date: 2005/08/23 00:16:22; Author: aland; ------------------------------- Description: Remove more unused, and unnecesary functions Modified files: File: radiusd/src/include/libradius.h; Revision: 1.93; Date: 2005/08/22 22:00:38; Author: aland; Lines: (+1 -5) File: radiusd/src/lib/misc.c; Revision: 1.62; Date: 2005/08/22 22:00:38; Author: aland; Lines: (+2 -96) File: radiusd/src/main/radwho.c; Revision: 1.58; Date: 2005/08/22 22:00:38; Author: aland; Lines: (+3 -4) File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c; Revision: 1.33; Date: 2005/08/22 22:00:39; Author: aland; Lines: (+13 -5) ------------------------------- Description: Get rid of ip_hostname, which is an old IPv4-only function. Make ip_ntoh() respect librad_dodns flag Don't use rad_assert in src/lib/misc.c, it's a server-only function Modified files: File: radiusd/src/include/libradius.h; Revision: 1.92; Date: 2005/08/22 21:45:14; Author: aland; Lines: (+1 -2) File: radiusd/src/lib/misc.c; Revision: 1.61; Date: 2005/08/22 21:45:14; Author: aland; Lines: (+10 -53) File: radiusd/src/lib/print.c; Revision: 1.35; Date: 2005/08/22 21:45:14; Author: aland; Lines: (+4 -5) File: radiusd/src/main/radwho.c; Revision: 1.57; Date: 2005/08/22 21:45:14; Author: aland; Lines: (+15 -10) ===================================================== Log entries ===================================================== Description: Update to patch current configure Modified files: File: radiusd/debian/patches/01_NET-SNMP_build_support.dpatch; Revision: 1.1.2.4; Date: 2005/08/23 07:10:14; Author: phampson; Lines: (+115 -113) ------------------------------- Description: Fix patch for regenerated src/modules/rlm_eap/types/rlm_eap_sim/configure Modified files: File: radiusd/debian/patches/02_EAP-SIM_doesnt_need_openssl.dpatch; Revision: 1.1.2.4; Date: 2005/08/23 07:18:29; Author: phampson; Lines: (+180 -94) ------------------------------- Description: Fix patch for changes in src/modules/rules.mak Modified files: File: radiusd/debian/patches/06_libtool14_vs_rlm_eap_tls.dpatch; Revision: 1.1.2.2; Date: 2005/08/23 07:18:54; Author: phampson; Lines: (+3 -3) ------------------------------- Description: Return to use of pg_config, lost while Debian-archive-version was being maintained. Modified files: File: radiusd/debian/rules; Revision: 1.54.2.15; Date: 2005/08/23 05:53:53; Author: phampson; Lines: (+7 -1) ------------------------------- Description: Add an assertion (n > 0) in strNcpy(), it may help to catch incorrect use of the function. Modified files: File: radiusd/src/lib/misc.c; Revision: 1.60; Date: 2005/08/22 16:52:52; Author: nbk; Lines: (+5 -2) ------------------------------- Description: Migrate subsections, too. Allow for NULL data in cf_data_add() Use flag in cf_data_add, so we don't find internal stuff Modified files: File: radiusd/src/main/conffile.c; Revision: 1.128; Date: 2005/08/23 01:02:18; Author: aland; Lines: (+75 -42) ------------------------------- Description: Regenerate from configure.in 1.15 Modified files: File: radiusd/src/modules/rlm_ldap/configure; Revision: 1.16; Date: 2005/08/22 14:53:50; Author: nbk; Lines: (+530 -1391) ------------------------------- Description: Regenerate from configure.in 1.10.2.4 Modified files: File: radiusd/src/modules/rlm_ldap/configure; Revision: 1.10.2.3; Date: 2005/08/22 14:53:52; Author: nbk; Lines: (+409 -1063) ------------------------------- Description: Mostly rewrite the autoconf tests for libldap. OpenLDAP doesn't provide an autoconf test for their libldap, and we can't reasonably check for all the dependancies for every version and every set of options. That's why we just give '-lldap' to the linker, so we don't mistakenly load the wrong version of the dependant librairies. (closes: #73) Static linking with libldap will probably result in unresolved symbols. It has always been the case, but nobody ever complained about it. Modified files: File: radiusd/src/modules/rlm_ldap/configure.in; Revision: 1.15; Date: 2005/08/22 14:50:43; Author: nbk; Lines: (+81 -61) ------------------------------- Description: Pull from CVS head: Rewrite the autoconf tests for libldap and just give '-lldap' to the linker. (closes: #73) Modified files: File: radiusd/src/modules/rlm_ldap/configure.in; Revision: 1.10.2.4; Date: 2005/08/22 14:50:46; Author: nbk; Lines: (+79 -60) ===================================================== Summary of modified files ===================================================== File: radiusd/debian/patches/01_NET-SNMP_build_support.dpatch Revisions: 1.1.2.4 Authors: phampson (+115 -113) ------------------------------- File: radiusd/debian/patches/02_EAP-SIM_doesnt_need_openssl.dpatch Revisions: 1.1.2.4 Authors: phampson (+180 -94) ------------------------------- File: radiusd/debian/patches/06_libtool14_vs_rlm_eap_tls.dpatch Revisions: 1.1.2.2 Authors: phampson (+3 -3) ------------------------------- File: radiusd/debian/rules Revisions: 1.54.2.15 Authors: phampson (+7 -1) ------------------------------- File: radiusd/man/man5/clients.5 Revisions: 1.4 Authors: aland (+5 -27) ------------------------------- File: radiusd/man/man5/naslist.5 Revisions: 1.4 Authors: aland (+7 -26) ------------------------------- File: radiusd/raddb/clients Revisions: 1.6 Authors: aland (+0 -0) ------------------------------- File: radiusd/raddb/naslist Revisions: 1.4 Authors: aland (+0 -0) ------------------------------- File: radiusd/scripts/clients.pl Revisions: 1.2, 1.1 Authors: aland (+46 -10), aland ------------------------------- File: radiusd/src/include/libradius.h Revisions: 1.93, 1.92 Authors: aland (+1 -5), aland (+1 -2) ------------------------------- File: radiusd/src/include/radiusd.h Revisions: 1.202, 1.201 Authors: aland (+1 -13), aland (+1 -2) ------------------------------- File: radiusd/src/lib/Makefile Revisions: 1.22 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/lib/crypt.c Revisions: 1.10 Authors: aland (+0 -0) ------------------------------- File: radiusd/src/lib/misc.c Revisions: 1.62, 1.61, 1.60 Authors: aland (+2 -96), aland (+10 -53), nbk (+5 -2) ------------------------------- File: radiusd/src/lib/print.c Revisions: 1.35 Authors: aland (+4 -5) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.52, 1.51 Authors: aland (+6 -2), aland (+2 -5) ------------------------------- File: radiusd/src/main/client.c Revisions: 1.45 Authors: aland (+2 -171) ------------------------------- File: radiusd/src/main/conffile.c Revisions: 1.128 Authors: aland (+75 -42) ------------------------------- File: radiusd/src/main/crypt.c Revisions: 1.1 Authors: aland ------------------------------- File: radiusd/src/main/mainconfig.c Revisions: 1.79, 1.78 Authors: aland (+1 -9), aland (+1 -11) ------------------------------- File: radiusd/src/main/nas.c Revisions: 1.26 Authors: aland (+2 -2) ------------------------------- File: radiusd/src/main/radwho.c Revisions: 1.58, 1.57 Authors: aland (+3 -4), aland (+15 -10) ------------------------------- File: radiusd/src/modules/rlm_acct_unique/rlm_acct_unique.c Revisions: 1.33 Authors: aland (+13 -5) ------------------------------- File: radiusd/src/modules/rlm_ldap/configure Revisions: 1.16, 1.10.2.3 Authors: nbk (+530 -1391), nbk (+409 -1063) ------------------------------- File: radiusd/src/modules/rlm_ldap/configure.in Revisions: 1.15, 1.10.2.4 Authors: nbk (+81 -61), nbk (+79 -60) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 21.08.2005 - 22.08.2005 GMT
by Automatic cvs log generator 22 Aug '05

22 Aug '05

CVS log entries from 21.08.2005 (Sun) 08:00:01 - 22.08.2005 (Mon) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/main/xlat.c; Revisions: 1.100, 1.99, 1.72.2.5, 1.72.2.4 File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/db_postgresql.sql; Revisions: 1.22, 1.16.2.3 File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revisions: 1.17, 1.11.2.1 ===================================================== Log entries ===================================================== Description: ctime_r(3) always use 26 characters, and may write beyond the buffer boundary. Bug found by Primoz Bratanic <primoz(a)slo-tech.com> Modified files: File: radiusd/src/main/xlat.c; Revision: 1.100; Date: 2005/08/21 19:44:53; Author: nbk; Lines: (+8 -9) ------------------------------- Description: Fix an off-by-one error in xlat_copy(). Bug found by Primoz Bratanic <primoz(a)slo-tech.com> Modified files: File: radiusd/src/main/xlat.c; Revision: 1.99; Date: 2005/08/21 18:12:28; Author: nbk; Lines: (+9 -16) ------------------------------- Description: Pull from CVS head: Steal patches about ctime_r(3). Modified files: File: radiusd/src/main/xlat.c; Revision: 1.72.2.5; Date: 2005/08/21 19:45:04; Author: nbk; Lines: (+7 -3) ------------------------------- Description: Pull from CVS head: Fix an off-by-one error in xlat_copy(). Modified files: File: radiusd/src/main/xlat.c; Revision: 1.72.2.4; Date: 2005/08/21 18:12:42; Author: nbk; Lines: (+9 -16) ------------------------------- Description: Comply with RFC2865 where username and password are strings up to 253 characters. We don't need that many in our own users tables (radcheck, radreply, ...), but we do need this in radacct and radpostauth because we don't know the maximum length of our roaming partners. (closes #266) Thanks to Thor Spruyt for the patch. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/db_postgresql.sql; Revision: 1.22; Date: 2005/08/21 09:41:27; Author: nbk; Lines: (+4 -4) ------------------------------- Description: Pull from CVS head: Increase radacct and radpostauth field lengths. Modified files: File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/db_postgresql.sql; Revision: 1.16.2.3; Date: 2005/08/21 09:41:44; Author: nbk; Lines: (+4 -4) ------------------------------- Description: Replace sprintf(3) by snprintf(3) because they can overflow the buffer space at lines 347 and 546. Bug found by Primoz Bratanic <primoz(a)slo-tech.com> Modified files: File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.17; Date: 2005/08/21 20:04:18; Author: nbk; Lines: (+8 -8) ------------------------------- Description: Pull from CVS head: Replace sprintf(3) by snprintf(3) to prevent buffer overflows. Modified files: File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c; Revision: 1.11.2.1; Date: 2005/08/21 20:04:26; Author: nbk; Lines: (+8 -8) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/xlat.c Revisions: 1.100, 1.99, 1.72.2.5, 1.72.2.4 Authors: nbk (+8 -9), nbk (+9 -16), nbk (+7 -3), nbk (+9 -16) ------------------------------- File: radiusd/src/modules/rlm_sql/drivers/rlm_sql_postgresql/db_postgresql.sql Revisions: 1.22, 1.16.2.3 Authors: nbk (+4 -4), nbk (+4 -4) ------------------------------- File: radiusd/src/modules/rlm_sqlcounter/rlm_sqlcounter.c Revisions: 1.17, 1.11.2.1 Authors: nbk (+8 -8), nbk (+8 -8) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: [Openswan dev] Openswan 2.3.1/2.4.0rc1 instability with L2TP
by Norbert Wegener 21 Aug '05

21 Aug '05

We have a similar configuration. I can confirm this behaviour for 2.4.0rc1 with KLIPS and the actual version of freeradius. Former versions without KLIPS seem not to be affected. As freeradius is also involved here, I post this message to freeradius-devel. Norbert Dirk Nehring wrote: >Hi, > >we use Openswan with l2tpd (or rp-l2tp) and a RADIUS server (Freeradius >or Microsoft IAS) as IPSec/L2TP-Server. There are no issues with >password authentification. We have a patch for ppp which allows us to >authentificate via EAP/TLS, so you can use a smartcard to establish a >VPN. There is a EAP-TLS connection between client and RADIUS >server. Unfortunately, with Freeradius, we have perhaps an MTU >problem. After successful authentification, packets are sent by pppd to >the client, but you do not see any packet there. If I change to >Microsoft IAS (which generates packets with another size), I works >without any problems. When I switch to strongswan, there is also no >problem with Freeradius (same config). I assume Openswan is handling MTU >in another way than Strongswan. Here is my config: > >ipsec.conf >--------------------------------------------------------- >version 2.0 > >config setup > # klipsdebug=none > plutodebug=control > plutostderrlog=/var/log/pluto.log > nat_traversal=yes > virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16 > >conn %default > left=a.b.c.d > >include /etc/ipsec.d/examples/no_oe.conf > >conn L2TP > right=%any > rightsubnet=vhost:%no,%priv > rightprotoport=17/1701 > leftprotoport=17/1701 > pfs=no > keyingtries=3 > authby=secret > dpddelay=30 > dpdtimeout=60 > dpdaction=clear > ike=3des-md5 > esp=3des-md5,3des-sha1 > auto=add >--------------------------------------------------------- > >l2tpd.conf >--------------------------------------------------------- >[global] >listen-addr = a.b.c.d > >[lns default] >ip range = 10.x.y.2-10.x.y.126 >local ip = 10.x.y.1 >require chap = yes >refuse pap = yes >require authentication = yes >name = l2tpd >ppp debug = yes >pppoptfile = /etc/ppp/options.l2tpd >length bit = yes >--------------------------------------------------------- > >options.l2tpd >--------------------------------------------------------- >name l2tpd >plugin /usr/lib/pppd/2.4.3/radius.so >plugin /usr/lib/pppd/2.4.3/radattr.so >debug >lock >proxyarp >ipcp-accept-local >ipcp-accept-remote >ms-dns 10.1.1.101 >ms-wins 10.1.1.101 >mtu 1376 >mru 1376 >require-eap >lcp-echo-failure 3 >lcp-echo-interval 10 >--------------------------------------------------------- > >Unfortunately, I have no clue how to give more hints to track down the >problem. > >Dirk >_______________________________________________ >Dev mailing list >Dev(a)openswan.org >http://lists.openswan.org/mailman/listinfo/dev > >

2 4