- Freeradius-Users - lists.freeradius.org

MD5 authentication
by manIP 15 Nov '07

15 Nov '07

Hi all, The user passwords are stored in my SQL database and encrypted in MD5...Could anyone tell me how to authenticate them (CHAP, PAP....) ? I know that I have to change the "authentication" request but I really don't know where it is located... Many Thanks! Khalid

4 6

poptop - received RADIUS server response with invalid length
by Ben Thompson 15 Nov '07

15 Nov '07

Hi We are running a poptop vpn server which authenticates via radiusclient and freeradius. Some people have reported problems logging in so I decided to investigate. Here is a log from the vpn server :- Nov 14 11:26:12 nassrv3 pppd[15621]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xa7836037> <pcomp> <accomp>] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0xa7836037> <pcomp> <accomp>] Nov 14 11:26:12 nassrv3 pppd[15621]: sent [LCP EchoReq id=0x0 magic=0xa7836037] Nov 14 11:26:12 nassrv3 pppd[15621]: sent [CHAP Challenge id=0x9 <f426157bf1a8cd0fbc8d2276a48e731a>, name = "pptpd"] Nov 14 11:26:12 nassrv3 pptpd[15620]: CTRL: Ignored a SET LINK INFO packet with real ACCMs! Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP Ident id=0x2 magic=0x76cf2fdd "MSRASV5.10"] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP Ident id=0x3 magic=0x76cf2fdd "MSRAS-0-ANNA"] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP EchoRep id=0x0 magic=0x76cf2fdd] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [CHAP Response id=0x9 <4166d4713ef8cec048e88644889a7fbc0000000000000000adcaef9a0709f7576bad0ce28f82ed7e5fb6e8c193a192bb00>, name = "ozw1"] Nov 14 11:26:12 nassrv3 pppd[15621]: rc_check_reply: received RADIUS server response with invalid length Nov 14 11:26:12 nassrv3 pppd[15621]: rc_avpair_gen: received attribute with invalid length Nov 14 11:26:12 nassrv3 pppd[15621]: Peer ozw1 failed CHAP authentication Nov 14 11:26:12 nassrv3 pppd[15621]: sent [CHAP Failure id=0x9 ""] Nov 14 11:26:12 nassrv3 pppd[15621]: sent [LCP TermReq id=0x2 "Authentication failed"] Nov 14 11:26:12 nassrv3 pppd[15621]: rcvd [LCP TermAck id=0x2 "Authentication failed"] Nov 14 11:26:12 nassrv3 pppd[15621]: Connection terminated. Nov 14 11:26:12 nassrv3 pppd[15621]: Exit. Nov 14 11:26:12 nassrv3 pptpd[15620]: GRE: read(fd=6,buffer=5109c0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs Nov 14 11:26:12 nassrv3 pptpd[15620]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7) Nov 14 11:26:12 nassrv3 pptpd[15620]: CTRL: Reaping child PPP[15621] Nov 14 11:26:12 nassrv3 pptpd[15620]: CTRL: Client 81.132.112.97 control connection finished Here is the relevent part of radius.log :- Wed Nov 14 11:26:12 2007 : Auth: Login OK: [ozw1] (from client vpnvirtualip port 0 cli 1.18) Here is a packet capture showing the radius conversation :- 11:26:12.567346 IP vpn.york.ac.uk.33286 > nasaaa2.york.ac.uk.radius: RADIUS, Access Request (1), id: 0xc1 length: 140 11:26:12.568107 IP nasaaa2.york.ac.uk.radius > vpn.york.ac.uk.33286: RADIUS, Access Accept (2), id: 0xc1 length: 179 11:26:12.568122 IP vpn.york.ac.uk > nasaaa2.york.ac.uk: ICMP vpn.york.ac.uk udp port 33286 unreachable, length 215 Can anyone suggest what might be the problem here? I don't understand the "upd port unreachable" or the "received RADIUS server response with invalid length" messages. Thanks Ben Thompson

2 1

TTLS authentication slow
by Allan Riordan Boll 14 Nov '07

14 Nov '07

Hi, I'm new to Freeradius, and the concepts behind Radius and network security in general also, so I'm not sure if this is normal or not. I've configured Freeradius so that I can authenticate Windows XP clients on our wireless network through a Linux server's /etc/passwd file. The problem is that authenticating takes around 20 seconds. While running the server in a terminal with the -X flag, I see that my Windows XP client first makes one TLS request, then waits ~20 seconds, then makes two more TLS requests and four TTLS requests all together taking less than one second. After these last six requests the client is immediately online. Can anyone hint me on why the client waits for so long before doing the requests it needs? Is my Freeradius server erroneously defaulting the client to use TLS instead of TTLS, and confusing the client? I've written a radiusd.conf from scratch, so that the server only runs the modules I actually use, hoping this is safer and easier to administrate. Please feedback if anyone have any comments on this approach. Note that the problem described above is also a there with the huge bundled stock configuration file. The configuration is as follows: ##################################################################### prefix = /usr localstatedir = /var logdir = /var/log/radius checkrad = "/usr/sbin/checkrad" pidfile = "/var/run/radiusd/radiusd.pid" max_requests = 2048 bind_address = * cleanup_delay = 2 user = radiusd group = radiusd security { max_attributes = 200 reject_delay = 1 status_server = no } thread pool { start_servers = 5 max_servers = 32 min_spare_servers = 3 max_spare_servers = 10 max_requests_per_server = 0 } modules { unix { } pap { } eap { default_eap_type = ttls tls { private_key_file = /etc/raddb/server.tld.pem certificate_file = /etc/raddb/server.tld.pem CA_file = /etc/raddb/server.tld.pem dh_file = /etc/raddb/dh random_file = /etc/raddb/random fragment_size = 1024 include_length = yes } ttls { } } files { usersfile = /etc/raddb/users acctusersfile = /etc/raddb/acct_users preproxy_usersfile = /etc/raddb/preproxy_users compat = no } } authorize { eap files } authenticate { Auth-Type PAP { pap } unix eap } client x.x.x.x { secret = xxxx shortname = accesspoint01 nastype = other } ##################################################################### Any hints greatly appreciated! Thank you very much :-) Regards, Allan Boll - student and network administrator at a dorm ;-)

7 9

CVS on Mac OS 10.4.10
by Wolfgang Burger 14 Nov '07

14 Nov '07

Hello again, I´m trying my best to install the CVS head. OS: Mac OS X 10.4.10 (8R218) openSSL: 0.9.8g 19 Oct 2007 (via darwinports) Complier: Xcode 2.5 output of make: mac339:~/Desktop/radiusCVS/radiusd system$ make Making all in src... Making all in include... make[4]: Nothing to be done for `all'. Making all in lib... make[4]: Nothing to be done for `all'. Making all in modules... Making all in rlm_acctlog... Making all in rlm_acct_unique... Making all in rlm_always... Making all in rlm_attr_filter... Making all in rlm_attr_rewrite... Making all in rlm_chap... Making all in rlm_checkval... Making all in rlm_copy_packet... Making all in rlm_counter... make[6]: Nothing to be done for `all'. Making all in rlm_dbm... Making all in rlm_detail... Making all in rlm_digest... Making all in rlm_eap... Making all in libeap... /Users/system/Desktop/radiusCVS/radiusd/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DDARWIN -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -DEAPLIB -I. -I.. -I/Users/system/Desktop/radiusCVS/radiusd/src -DOPENSSL_NO_KRB5 -c cb.c gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DDARWIN -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -DEAPLIB -I. -I.. -I/Users/system/Desktop/radiusCVS/radiusd/src -DOPENSSL_NO_KRB5 -c cb.c -o cb.o In file included from /Users/system/Desktop/radiusCVS/radiusd/src/freeradius-devel/ libradius.h:54, from /Users/system/Desktop/radiusCVS/radiusd/src/freeradius-devel/radiusd.h: 14, from ../eap.h:30, from eap_tls.h:68, from cb.c:27: /Users/system/Desktop/radiusCVS/radiusd/src/freeradius-devel/md4.h:66: error: conflicting types for 'MD4_CTX' /usr/include/openssl/md4.h:105: error: previous declaration of 'MD4_CTX' was here make[7]: *** [cb.lo] Error 1 make[6]: *** [common] Error 2 make[5]: *** [common] Error 2 make[4]: *** [all] Error 2 make[3]: *** [common] Error 2 make[2]: *** [all] Error 2 make[1]: *** [common] Error 2 make: *** [all] Error 2 Any hints for me? Thank you very much. Best regards / Mit freundlichen Grüßen Wolfgang Burger <burgerw(a)immunbio.mpg.de> Max-Planck-Institut fuer Immunbiologie Scientific Data Processing Unit (+00 49) 761 / 5108 461 Stuebeweg 51 D-79108 Freiburg Germany

2 4

hints and non-DEFAULT entries
by Stefan Winter 14 Nov '07

14 Nov '07

Hi, today I tried to use hints, but obviously in an unsupported manner. I wanted to set a specific attribute for one user if he logs in from one specific NAS and thought that: theguy Client-IP-Address == 1.2.3.4 The-Attribute = x would do it. Instead, this line matched all incoming usernames, just as if there was DEFAULT instead of theguy at the beginning of the line. I.e. it attached the attribute to *everyone* coming in from that IP. I changed the entry to match with DEFAULT User-Name == "theguy", which worked. I suggest to add documentation to hints that the usual "users" way of adding entries with the user name at the beginning of the line doesn't work. Greetings, Stefan Winter -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter(a)restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473

2 1

unlang question
by Norbert Wegener 14 Nov '07

14 Nov '07

Something like if ("%{sqlnastype:SELECT Value from radcheck where UserName = '%{User-Name}' and otherconditions}" == 'bla' ) works, whereas I have problems with: if ("%{sqlnastype:SELECT Value from radcheck where UserName = '%{User-Name}' and other conditions.. " is not null ) Am I doing something wrong or is "is not null" not (yet) implemented? Norbert Wegener

2 1

Freeradius 1.1.7 no DB handles
by steven meyer 14 Nov '07

14 Nov '07

I have searched now for several weeks, but do not find a solution: Installed freeradius 1.1.7 on suse configured mysql on the same server I can start radiusd fine, I can login into nas, but I want accounting put into mysql and that just does not work. My DB-tables are empty, just accounting should be put into it. I do not need anything in usergroup for accounting etc, or do I? radiusd -X | grep sql : Config: including file: /usr/local/etc/raddb/sql.conf sql: driver = "rlm_sql_mysql" sql: server = "localhost" sql: port = "" sql: login = "root" sql: password = "" sql: radius_db = "radiusLOG" sql: nas_table = "nas" sql: sqltrace = no sql: sqltracefile = "/rzf/protokolle/radiusd/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = " UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_update_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Gigawords: -0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay, XAscendSessionSvrKey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '% {Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = " UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Gigawords:-0}' << 32 | '%{Acct-Input-Octets:-0}', AcctOutputOctets = '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = " INSERT INTO radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Gigawo rds:-0}' << 32 | '%{Acct-Input-Octets:-0}', '%{Acct-Output-Gigawords:-0}' << 32 | '%{Acct-Output-Octets:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time:-0}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (user, pass, reply, date) values ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radiusLOG rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql (sql): Connected new DB handle, #4 Module: Instantiated sql (sql) rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 1 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 2 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 3 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 4 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 5 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 6 rlm_sql (sql): sql_set_user escaped user --> 'kristin' rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 modcall[accounting]: module "sql" returns fail for request 7 .... I tried to create and put sqltrace into my db. That was no problem at all. But whats the Problem of radiusd? It connects to DB, but cannot insert when accounting-Data comes in!? I do not know where else to look at. Please help me! -- View this message in context: http://www.nabble.com/Freeradius-1.1.7-no-DB-handles-tf4757305.html#a136043… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 8

Service-Type=Framed-User translated to Service-Type=Framed?
by Jon SK Phang 14 Nov '07

14 Nov '07

Hi All, Not sure if anyone else saw this. I’m using freeradius-server-pre-2.0.0-8.1 and have got everything to work so far. The backend is a MySQL database. >From a debug instance of FreeRADIUS, it reads Sending Access-Accept of id 44 to 10.152.54.138 port 3129 Framed-IP-Address := 0.0.0.101 Cisco-AVPair += "lcp:interface-config=ip vrf forwarding VRF-PUBLIC" Cisco-AVPair += "lcp:interface-config=peer default ip address pool VRF-PUBLIC" Cisco-AVPair += "lcp:interface-config=ip unnumbered Loopback 99" Service-Type := Framed-User Finished request 0 state 5 Going to the next request But in the Cisco debug log, the word “-User” at the reply in Service-Type=Framed-User is missing. I can only see Service-Type=Framed In NTRadPing utility, the results are the same. Have tried putting the attributes both in radreply and radgroupreply with no difference. Regards Jonathan __________________________________________________________________ Yahoo! Singapore Answers Real people. Real questions. Real answers. Share what you know at http://answers.yahoo.com.sg

2 1

RLM_python patch to enable postproxy - Not work need a little help
by Mike O'Connor 14 Nov '07

14 Nov '07

Hi Guys I wrote the attached patch for Freeradius 1.1.7 to enabled calling python in the post-proxy, it compiles but will not run when the hook is listed in post-proxy because Freeradius complains that there is no support for post-proxy in rlm_python. My question is where in the source is the list of allowed call per module ? Once I know this I can fix this attached and supply as a tested patch. Thanks Mike --- src/modules/rlm_python/rlm_python.c.orig 2007-03-06 00:45:28.000000000 +1030 +++ src/modules/rlm_python/rlm_python.c 2007-10-10 15:36:51.000000000 +0930 @@ -54,6 +54,7 @@ char *mod_authenticate; char *mod_preacct; char *mod_accounting; + char *mod_post_proxy; char *mod_checksimul; char *mod_detach; @@ -63,6 +64,7 @@ char *func_authenticate; char *func_preacct; char *func_accounting; + char *func_post_proxy; char *func_checksimul; char *func_detach; @@ -71,6 +73,7 @@ PyObject *pModule_authenticate; PyObject *pModule_preacct; PyObject *pModule_accounting; + PyObject *pModule_post_proxy; PyObject *pModule_checksimul; PyObject *pModule_detach; @@ -80,6 +83,7 @@ PyObject *pFunc_authenticate; PyObject *pFunc_preacct; PyObject *pFunc_accounting; + PyObject *pFunc_post_proxy; PyObject *pFunc_checksimul; PyObject *pFunc_detach; }; @@ -120,6 +124,11 @@ { "func_accounting", PW_TYPE_STRING_PTR, offsetof(struct rlm_python_t, func_accounting), NULL, NULL}, + { "mod_post_proxy", PW_TYPE_STRING_PTR, + offsetof(struct rlm_python_t, mod_post_proxy), NULL, NULL}, + { "func_post_proxy", PW_TYPE_STRING_PTR, + offsetof(struct rlm_python_t, func_post_proxy), NULL, NULL}, + { "mod_checksimul", PW_TYPE_STRING_PTR, offsetof(struct rlm_python_t, mod_checksimul), NULL, NULL}, { "func_checksimul", PW_TYPE_STRING_PTR, @@ -490,6 +499,7 @@ python_objclear(&data->pFunc_authenticate); python_objclear(&data->pFunc_preacct); python_objclear(&data->pFunc_accounting); + python_objclear(&data->pFunc_post_proxy); python_objclear(&data->pFunc_checksimul); python_objclear(&data->pFunc_detach); @@ -498,6 +508,7 @@ python_objclear(&data->pModule_authenticate); python_objclear(&data->pModule_preacct); python_objclear(&data->pModule_accounting); + python_objclear(&data->pModule_post_proxy); python_objclear(&data->pModule_checksimul); python_objclear(&data->pModule_detach); } @@ -566,6 +577,12 @@ &data->pFunc_accounting) < 0) goto failed; + if (python_load_function(data->mod_post_proxy, + data->func_post_proxy, + &data->pModule_post_proxy, + &data->pFunc_post_proxy) < 0) + goto failed; + if (python_load_function(data->mod_checksimul, data->func_checksimul, &data->pModule_checksimul, @@ -633,6 +650,14 @@ "accounting"); } +static int python_post_proxy(void *instance, REQUEST *request) +{ + return python_function( + request, + ((struct rlm_python_t *)instance)->pFunc_post_proxy, + "post-proxy"); +} + static int python_checksimul(void *instance, REQUEST *request) { return python_function( @@ -663,7 +688,7 @@ python_accounting, /* accounting */ python_checksimul, /* checksimul */ NULL, /* pre-proxy */ - NULL, /* post-proxy */ + python_post_proxy, /* post-proxy */ NULL /* post-auth */ }, python_detach, /* detach */

2 4

1.1.7 on Debian sarge ?
by oz 13 Nov '07

13 Nov '07

Hello list, doesn't freeradius-1.1.7 no longer compile on Debian sarge (oldstable)? I get these errors on after ./configure and make: [...] Making all in rlm_perl... make[6]: Entering directory `/usr/local/src/freeradius-1.1.7/src/modules/rlm_perl' /usr/local/src/freeradius-1.1.7/libtool --mode=compile gcc -g -O2 -I/usr/local/src/f reeradius-1.1.7/src/include -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBIAN -f no-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I /usr/lib/perl/5.8/CORE -D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBIAN -fno-st rict-aliasing -I/usr/local/include -c rlm_perl.c mkdir .libs gcc -g -O2 -I/usr/local/src/freeradius-1.1.7/src/include -D_REENTRANT -D_GNU_SOURCE - DTHREADS_HAVE_PIDS -DDEBIAN -fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOU RCE -D_FILE_OFFSET_BITS=64 -I/usr/lib/perl/5.8/CORE -D_REENTRANT -D_GNU_SOURCE -DTHREA DS_HAVE_PIDS -DDEBIAN -fno-strict-aliasing -I/usr/local/include -c rlm_perl.c -fPIC - DPIC -o .libs/rlm_perl.o rlm_perl.c: In function `perl_xlat': rlm_perl.c:658: parse error before `*' rlm_perl.c:660: `handle' undeclared (first use in this function) rlm_perl.c:660: (Each undeclared identifier is reported only once rlm_perl.c:660: for each function it appears in.) make[6]: *** [rlm_perl.lo] Error 1 make[6]: Leaving directory `/usr/local/src/freeradius-1.1.7/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/usr/local/src/freeradius-1.1.7/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/usr/local/src/freeradius-1.1.7/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/usr/local/src/freeradius-1.1.7/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/usr/local/src/freeradius-1.1.7/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/usr/local/src/freeradius-1.1.7' make: *** [all] Error 2 /usr/local/src/freeradius-1.1.7# But I can compile 1.1.7 on Debian etch (stable) and Debian lenny (testing). Am I just missing a Debian developement package or something? I'd like to update our productive sarge installations before I try distro updates. Any ideas or known issues with Debian sarge? Thanks.

2 2