March 2007 - Freeradius-Users - lists.freeradius.org

Control the date and time using freeradius version 1.1.3
by support＠getciscolab.com 17 Mar '07

17 Mar '07

Hi, I need to allow my user to access the system on specific date (i.e 1/4/2008). Can I do it with freeradius ? Many Thanks, Shachar support(a)getciscolab.com

1 0

version 2
by Norbert Wegener 17 Mar '07

17 Mar '07

On http://wiki.freeradius.org/Fail-over I find an interesting feature, that would be very useful in some configurations: authorize { ... sql if notfound { ldap1 } else { ldap2 } As mentioned there, it is available in version 2 of the server. Is it already foreseeable, when approximately the version 2 of freeradius will be available? Norbert Wegener

3 2

Re : freeradius + branch_1_1 via cvs ?
by Eshun Benjamin 17 Mar '07

17 Mar '07

I want to make a silly question but i don't know a lot on cvs. I want to download the freeradius-1.1.5 with branch_1_1 via cvs and i use the following command after connected to the server: cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd Is the cvs command right? I checked some manuals first before i use it. YES, but you have to login before; http://www.freeradius.org/development.html#cvs $ cvs -d :pserver:anoncvs@cvs.freeradius.org:/source login CVS password: anoncvs $ cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : apolyxrono <apolyxrono(a)yahoo.co.uk> À : FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Envoyé le : Samedi, 17 Mars 2007, 10h58mn 00s Objet : freeradius + branch_1_1 via cvs ? Hi list , I want to make a silly question but i don't know a lot on cvs. I want to download the freeradius-1.1.5 with branch_1_1 via cvs and i use the following command after connected to the server: cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd Is the cvs command right? I checked some manuals first before i use it. Do i download the fr-1.1.5 with branch_1_1 or just fr-1.1.5 ? Because after compilation and running the server i get the same errors while running the freeradius-1.1.5 source code (not via cvs) thanks ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

1 0

freeradius-1.1.5 with branch_1_1 via CVS does not work...
by apolyxrono 17 Mar '07

17 Mar '07

Hi list, Finally i got the freeradius-1.1.5 with the branch_1_1 via cvs on my ubuntu 6.10 Desktop. Compilation was ok but while running in debugging mode i get this: root@ubuntu:~# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x800fbeb0 *** ======= Backtrace: ========= /lib/tls/i686/cmov/libc.so.6[0xb7e5f8bd] /lib/tls/i686/cmov/libc.so.6(__libc_free+0x84)[0xb7e5fa44] /usr/local/lib/libltdl.so.3[0xb7f3176b] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0xb7f320fe] radiusd(find_module_instance+0x358)[0x8000d688] radiusd(setup_modules+0x1d8)[0x8000dc38] radiusd(main+0x438)[0x80011388] /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb7e0e8cc] radiusd[0x80004b81] ======= Memory map: ======== 80000000-8001f000 r-xp 00000000 03:41 2080799 /usr/local/sbin/radiusd 8001f000-80020000 rw-p 0001e000 03:41 2080799 /usr/local/sbin/radiusd 80020000-80108000 rw-p 80020000 00:00 0 [heap] b7c00000-b7c21000 rw-p b7c00000 00:00 0 b7c21000-b7d00000 ---p b7c21000 00:00 0 b7dd4000-b7dde000 r-xp 00000000 03:41 3735568 /lib/libgcc_s.so.1 b7dde000-b7ddf000 rw-p 00009000 03:41 3735568 /lib/libgcc_s.so.1 b7ddf000-b7de8000 r-xp 00000000 03:41 3735585 /lib/tls/i686/cmov/libnss_files-2.4.so b7de8000-b7dea000 rw-p 00008000 03:41 3735585 /lib/tls/i686/cmov/libnss_files-2.4.so b7df4000-b7df5000 rw-p b7df4000 00:00 0 b7df5000-b7df7000 r-xp 00000000 03:41 3735579 /lib/tls/i686/cmov/libdl-2.4.so b7df7000-b7df9000 rw-p 00001000 03:41 3735579 /lib/tls/i686/cmov/libdl-2.4.so b7df9000-b7f26000 r-xp 00000000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f26000-b7f28000 r--p 0012c000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f28000-b7f2a000 rw-p 0012e000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f2a000-b7f2e000 rw-p b7f2a000 00:00 0 b7f2e000-b7f33000 r-xp 00000000 03:41 2048003 /usr/local/lib/libltdl.so.3.1.4 b7f33000-b7f34000 rw-p 00004000 03:41 2048003 /usr/local/lib/libltdl.so.3.1.4 b7f34000-b7f39000 r-xp 00000000 03:41 3735578 /lib/tls/i686/cmov/libcrypt-2.4.so b7f39000-b7f3b000 rw-p 00004000 03:41 3735578 /lib/tls/i686/cmov/libcrypt-2.4.so b7f3b000-b7f62000 rw-p b7f3b000 00:00 0 b7f62000-b7f77000 r-xp 00000000 03:41 2048119 /usr/local/lib/libradius-1.1.5.so b7f77000-b7f78000 rw-p 00014000 03:41 2048119 /usr/local/lib/libradius-1.1.5.so b7f78000-b7f79000 rw-p b7f78000 00:00 0 b7f79000-b7f88000 r-xp 00000000 03:41 3735590 /lib/tls/i686/cmov/libpthread-2.4.so b7f88000-b7f8a000 rw-p 0000f000 03:41 3735590 /lib/tls/i686/cmov/libpthread-2.4.so b7f8a000-b7f8c000 rw-p b7f8a000 00:00 0 b7f8c000-b7f9b000 r-xp 00000000 03:41 3735591 /lib/tls/i686/cmov/libresolv-2.4.so b7f9b000-b7f9d000 rw-p 0000f000 03:41 3735591 /lib/tls/i686/cmov/libresolv-2.4.so b7f9d000-b7f9f000 rw-p b7f9d000 00:00 0 b7f9f000-b7fb1000 r-xp 00000000 03:41 3735582 /lib/tls/i686/cmov/libnsl-2.4.so b7fb1000-b7fb3000 rw-p 00011000 03:41 3735582 /lib/tls/i686/cmov/libnsl-2.4.so b7fb3000-b7fb6000 rw-p b7fb3000 00:00 0 b7fbc000-b7fbe000 r-xp 00000000 03:41 2048022 /usr/local/lib/rlm_exec-1.1.5.so b7fbe000-b7fbf000 rw-p 00001000 03:41 2048022 /usr/local/lib/rlm_exec-1.1.5.so b7fbf000-b7fc1000 rw-p b7fbf000 00:00 0 b7fc1000-b7fda000 r-xp 00000000 03:41 3737318 /lib/ld-2.4.so b7fda000-b7fdc000 rw-p 00018000 03:41 3737318 /lib/ld-2.4.so bf90c000-bf93e000 rw-p bf90c000 00:00 0 [stack] ffffe000-fffff000 ---p 00000000 00:00 0 [vdso] Aborted (core dumped) So freeradius-1.1.5 with branch_1_1 does not work on my ubuntu. Does anyone have freeradius-1.1.5 running on ubuntu? Please let me know...I am trying this from Monday 12-03-07. thanks a lot ___________________________________________________________ The all-new Yahoo! Mail goes wherever you go - free your email address from your Internet provider. http://uk.docs.yahoo.com/nowyoucan.html

1 0

freeradius + branch_1_1 via cvs ?
by apolyxrono 17 Mar '07

17 Mar '07

Hi list , I want to make a silly question but i don't know a lot on cvs. I want to download the freeradius-1.1.5 with branch_1_1 via cvs and i use the following command after connected to the server: cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd Is the cvs command right? I checked some manuals first before i use it. Do i download the fr-1.1.5 with branch_1_1 or just fr-1.1.5 ? Because after compilation and running the server i get the same errors while running the freeradius-1.1.5 source code (not via cvs) thanks ___________________________________________________________ All new Yahoo! Mail "The new Interface is stunning in its simplicity and ease of use." - PC Magazine http://uk.docs.yahoo.com/nowyoucan.html

1 0

How to enable Freeradius to support a smart card with AES encryption algorithm?
by yao guoxian 17 Mar '07

17 Mar '07

Hi! I have a smart card emluator which suports AES, not MD5 encryption algorithm. Is it possible to enable Freeradius to support my smart card emlulator? I have an idea as follow: First,amending client agent (NAS) daemon program to make it send chap-password which is produced with AES, not MD5. The usual md5 chap-password is produced as MD5( user-packet-ID+user-secret+16 bytes authenticator), while the aes chap-password is produced as AES(16 bytes authenticator) using user-secret as key.The usual md5 chap-passwor attribute in an Access Request packet is as follow: __________________________________________________ | code = 3 | Length = 19 | user-packet-ID | 16 bytes value| __________________________________________________ While the aes chap-password replaced the 16 bytes value ( MD5( user-packet-ID+user-secret+16 bytes authenticator)) with AES(16 bytes authenticator). Second ,amending rlm-chap.c to alter it to use AES to analyze the request packet. Is it practical? Appreciate any suggestions. regards Guoxian

2 9

freeradius-1.1.5 : Aborted(core dump)
by adreas Polyxronopoulos 17 Mar '07

17 Mar '07

Hi list, I compilled freeradius-1.1.5( not from cvs ) on ubuntu 6.10 Desktop and after running the server i got the following output , can anyone help me? root@ubuntu:/usr/local/src/freeradius-1.1.5# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x800faeb0 *** ======= Backtrace: ========= /lib/tls/i686/cmov/libc.so.6[0xb7e578bd] /lib/tls/i686/cmov/libc.so.6(__libc_free+0x84)[0xb7e57a44] /usr/local/lib/libltdl.so.3[0xb7f2976b] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0xb7f2a0fe] radiusd(find_module_instance+0x358)[0x8000d618] radiusd(setup_modules+0x1d8)[0x8000dbc8] radiusd(main+0x46c)[0x8001126c] /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb7e068cc] radiusd[0x80004bc1] ======= Memory map: ======== 80000000-8001e000 r-xp 00000000 03:41 2080809 /usr/local/sbin/radiusd 8001e000-8001f000 rw-p 0001e000 03:41 2080809 /usr/local/sbin/radiusd 8001f000-80107000 rw-p 8001f000 00:00 0 [heap] b7c00000-b7c21000 rw-p b7c00000 00:00 0 b7c21000-b7d00000 ---p b7c21000 00:00 0 b7dcc000-b7dd6000 r-xp 00000000 03:41 3735568 /lib/libgcc_s.so.1 b7dd6000-b7dd7000 rw-p 00009000 03:41 3735568 /lib/libgcc_s.so.1 b7dd7000-b7de0000 r-xp 00000000 03:41 3735585 /lib/tls/i686/cmov/libnss_files-2.4.so b7de0000-b7de2000 rw-p 00008000 03:41 3735585 /lib/tls/i686/cmov/libnss_files-2.4.so b7dec000-b7ded000 rw-p b7dec000 00:00 0 b7ded000-b7def000 r-xp 00000000 03:41 3735579 /lib/tls/i686/cmov/libdl-2.4.so b7def000-b7df1000 rw-p 00001000 03:41 3735579 /lib/tls/i686/cmov/libdl-2.4.so b7df1000-b7f1e000 r-xp 00000000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f1e000-b7f20000 r--p 0012c000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f20000-b7f22000 rw-p 0012e000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f22000-b7f26000 rw-p b7f22000 00:00 0 b7f26000-b7f2b000 r-xp 00000000 03:41 2048003 /usr/local/lib/libltdl.so.3.1.4 b7f2b000-b7f2c000 rw-p 00004000 03:41 2048003 /usr/local/lib/libltdl.so.3.1.4 b7f2c000-b7f31000 r-xp 00000000 03:41 3735578 /lib/tls/i686/cmov/libcrypt-2.4.so b7f31000-b7f33000 rw-p 00004000 03:41 3735578 /lib/tls/i686/cmov/libcrypt-2.4.so b7f33000-b7f5a000 rw-p b7f33000 00:00 0 b7f5a000-b7f6f000 r-xp 00000000 03:41 3686519 /usr/local/lib/libradius-1.1.5.so b7f6f000-b7f71000 rw-p 00014000 03:41 3686519 /usr/local/lib/libradius-1.1.5.so b7f71000-b7f80000 r-xp 00000000 03:41 3735590 /lib/tls/i686/cmov/libpthread-2.4.so b7f80000-b7f82000 rw-p 0000f000 03:41 3735590 /lib/tls/i686/cmov/libpthread-2.4.so b7f82000-b7f84000 rw-p b7f82000 00:00 0 b7f84000-b7f93000 r-xp 00000000 03:41 3735591 /lib/tls/i686/cmov/libresolv-2.4.so b7f93000-b7f95000 rw-p 0000f000 03:41 3735591 /lib/tls/i686/cmov/libresolv-2.4.so b7f95000-b7f97000 rw-p b7f95000 00:00 0 b7f97000-b7fa9000 r-xp 00000000 03:41 3735582 /lib/tls/i686/cmov/libnsl-2.4.so b7fa9000-b7fab000 rw-p 00011000 03:41 3735582 /lib/tls/i686/cmov/libnsl-2.4.so b7fab000-b7fae000 rw-p b7fab000 00:00 0 b7fb4000-b7fb6000 r-xp 00000000 03:41 2048051 /usr/local/lib/rlm_exec-1.1.5.so b7fb6000-b7fb7000 rw-p 00001000 03:41 2048051 /usr/local/lib/rlm_exec-1.1.5.so b7fb7000-b7fb9000 rw-p b7fb7000 00:00 0 b7fb9000-b7fd2000 r-xp 00000000 03:41 3737318 /lib/ld-2.4.so b7fd2000-b7fd4000 rw-p 00018000 03:41 3737318 /lib/ld-2.4.so bfe21000-bfe52000 rw-p bfe21000 00:00 0 [stack] ffffe000-fffff000 ---p 00000000 00:00 0 [vdso] Aborted (core dumped) thanks for your time... Adreas Polyxronopoulos ___________________________________________________________ Now you can scan emails quickly with a reading pane. Get the new Yahoo! Mail. http://uk.docs.yahoo.com/nowyoucan.html

2 1

Connection before logon
by Phil Scarratt 16 Mar '07

16 Mar '07

Hi I am sure this must be a commonly asked question, but after hours of searching I just can't seem to find the answer. I've spent hours trawling through google and searching the archives to no avail. I am sure I am missing something simple, but can't put my finger on it. There are several posts of similar topic but no answer (or answer that works). In my case, I have freeradius installed to use EAP-TLS, Windows XPSP2 clients exclusively. The authentication works fine after logging on using a local account. I have the same certificates in both the local users certificate store and the computer account certificate store. The debug output for freeradius, when the computer is first switched on and before logging on, simply shows repeated Access-Request packets like the one below. It basically simply repeats. Can anyone shed any light at all, or point me in other directions to search? TIA Fil --Debug Output-- Cleaning up request 8 ID 2 with timestamp 45fa940f Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 192.168.1.50:1054, id=4, length=207 Message-Authenticator = 0xc45158cab736178c590d01cee92bc6cc Service-Type = Framed-User User-Name = "host/SACM0734" Framed-MTU = 1488 Called-Station-Id = "XXXXXXXXXXXXXXXXXXX" Calling-Station-Id = "XXXXXXXXXXXXXXXXX" NAS-Identifier = "D-Link Access Point" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x0204001201686f73742f5341434d30373334 NAS-IP-Address = 192.168.1.50 NAS-Port = 1 NAS-Port-Id = "STA port # 1" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 9 modcall[authorize]: module "preprocess" returns ok for request 9 rlm_realm: No '\' in User-Name = "host/SACM0734", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "ntdomain" returns noop for request 9 rlm_eap: EAP packet type response id 4 length 18 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 9 users: Matched host/SACM0734 at 66 modcall[authorize]: module "files" returns ok for request 9 modcall: group authorize returns updated for request 9 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 9 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 9 modcall: group authenticate returns handled for request 9 Sending Access-Challenge of id 4 to 192.168.1.50:1054 EAP-Message = 0x010500060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfa4829561866ec99c1e1c3ace47e3f57 Finished request 9 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 9 ID 4 with timestamp 45fa942d Nothing to do. Sleeping until we see a request.

1 1

Re : Compile problems on Solaris 10
by Eshun Benjamin 16 Mar '07

16 Mar '07

gcc -Wall -fPIC -c pam_radius_auth.c -o pam_radius_auth.o In file included from pam_radius_auth.h:23, from pam_radius_auth.c:63: md5.h:21: error: syntax error before 'u_int32_t' md5.h:21: warning: no semicolon at end of struct or union check out what is going on in pam_radius_auth.h on line 23 ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : Paul Goodman <pgoodman(a)ucar.edu> À : freeradius-users(a)lists.freeradius.org Envoyé le : Jeudi, 15 Mars 2007, 17h34mn 51s Objet : Compile problems on Solaris 10 I am trying to compile the pam_radius-1.3.16 modules on a Solaris 10 system, but when I run make, I get the following error: gcc -Wall -fPIC -c pam_radius_auth.c -o pam_radius_auth.o In file included from pam_radius_auth.h:23, from pam_radius_auth.c:63: md5.h:21: error: syntax error before 'u_int32_t' md5.h:21: warning: no semicolon at end of struct or union md5.h:22: warning: type defaults to 'int' in declaration of 'bits' md5.h:22: warning: data definition has no type or storage class md5.h:24: error: syntax error before '}' token md5.h:29: error: syntax error before 'buf' pam_radius_auth.c: In function 'get_random_vector': pam_radius_auth.c:350: error: storage size of 'my_md5' isn't known pam_radius_auth.c:350: warning: unused variable 'my_md5' pam_radius_auth.c: In function 'get_accounting_vector': pam_radius_auth.c:382: error: storage size of 'my_md5' isn't known pam_radius_auth.c:382: warning: unused variable 'my_md5' pam_radius_auth.c: In function 'verify_packet': pam_radius_auth.c:400: error: storage size of 'my_md5' isn't known pam_radius_auth.c:400: warning: unused variable 'my_md5' pam_radius_auth.c: In function 'add_password': pam_radius_auth.c:497: error: storage size of 'md5_secret' isn't known pam_radius_auth.c:497: error: storage size of 'my_md5' isn't known pam_radius_auth.c:497: warning: unused variable 'my_md5' pam_radius_auth.c:497: warning: unused variable 'md5_secret' pam_radius_auth.c: In function 'rad_converse': pam_radius_auth.c:1016: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1019: warning: passing argument 2 of 'conv->conv' from incompatible pointer type pam_radius_auth.c: In function 'pam_sm_authenticate': pam_radius_auth.c:1071: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type pam_radius_auth.c:1099: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1113: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1146: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c: In function 'pam_private_session': pam_radius_auth.c:1267: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type pam_radius_auth.c:1288: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c: In function 'pam_sm_chauthtok': pam_radius_auth.c:1374: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type pam_radius_auth.c:1395: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1404: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1409: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type gmake: *** [pam_radius_auth.o] Error 1 The same is true when I use the Sun cc (Studio 11 compiler). I am using gcc 4.0.2 (the most recent version I could get to run on Solaris). Output of uname -a is: SunOS xxxx 5.10 Generic_118833-36 sun4u sparc SUNW,A70 Does anyone have a suggestion as to how to modify the header file to make it work or know where I can find pre-compiled modules for Solaris? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

3 2

How EAP module set the Auth-Type to EAP when using rlm_sim_file module?
by lishuai zhao 16 Mar '07

16 Mar '07

Hi, all I am using rlm_sim_file module to perform the authorization function, so I have to add "sim_file" before "eap" in the authorize{} of radiusd.conf. In general, the authorization function can set the "Auth-Type" automatically, such as rlm_file or rlm_sql. But I find that the rlm_sim_file does not do that. In the rlm_sim_triplets of Doc, it says that :If this module is successful at retrieving three sets of triplets, then the EAP-Type: attribute will be set to SIM. The EAP module itself will set the Auth-Type to EAP when it sees the EAP-Message attribute. I only find that Auth-Type is set in the eap_authorize function. In my opinion, if rlm_sim_file is used, the eap_authorize will not be executed. So , I do not know how Auth-Type is set to EAP when using rlm_sim_file module? Best wishes! Lishuai.zhao

2 3