- Freeradius-Users - lists.freeradius.org

Re : freeradius + branch_1_1 via cvs ?
by Eshun Benjamin 17 Mar '07

17 Mar '07

I want to make a silly question but i don't know a lot on cvs. I want to download the freeradius-1.1.5 with branch_1_1 via cvs and i use the following command after connected to the server: cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd Is the cvs command right? I checked some manuals first before i use it. YES, but you have to login before; http://www.freeradius.org/development.html#cvs $ cvs -d :pserver:anoncvs@cvs.freeradius.org:/source login CVS password: anoncvs $ cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : apolyxrono <apolyxrono(a)yahoo.co.uk> À : FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Envoyé le : Samedi, 17 Mars 2007, 10h58mn 00s Objet : freeradius + branch_1_1 via cvs ? Hi list , I want to make a silly question but i don't know a lot on cvs. I want to download the freeradius-1.1.5 with branch_1_1 via cvs and i use the following command after connected to the server: cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd Is the cvs command right? I checked some manuals first before i use it. Do i download the fr-1.1.5 with branch_1_1 or just fr-1.1.5 ? Because after compilation and running the server i get the same errors while running the freeradius-1.1.5 source code (not via cvs) thanks ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

1 0

freeradius-1.1.5 with branch_1_1 via CVS does not work...
by apolyxrono 17 Mar '07

17 Mar '07

Hi list, Finally i got the freeradius-1.1.5 with the branch_1_1 via cvs on my ubuntu 6.10 Desktop. Compilation was ok but while running in debugging mode i get this: root@ubuntu:~# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x800fbeb0 *** ======= Backtrace: ========= /lib/tls/i686/cmov/libc.so.6[0xb7e5f8bd] /lib/tls/i686/cmov/libc.so.6(__libc_free+0x84)[0xb7e5fa44] /usr/local/lib/libltdl.so.3[0xb7f3176b] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0xb7f320fe] radiusd(find_module_instance+0x358)[0x8000d688] radiusd(setup_modules+0x1d8)[0x8000dc38] radiusd(main+0x438)[0x80011388] /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb7e0e8cc] radiusd[0x80004b81] ======= Memory map: ======== 80000000-8001f000 r-xp 00000000 03:41 2080799 /usr/local/sbin/radiusd 8001f000-80020000 rw-p 0001e000 03:41 2080799 /usr/local/sbin/radiusd 80020000-80108000 rw-p 80020000 00:00 0 [heap] b7c00000-b7c21000 rw-p b7c00000 00:00 0 b7c21000-b7d00000 ---p b7c21000 00:00 0 b7dd4000-b7dde000 r-xp 00000000 03:41 3735568 /lib/libgcc_s.so.1 b7dde000-b7ddf000 rw-p 00009000 03:41 3735568 /lib/libgcc_s.so.1 b7ddf000-b7de8000 r-xp 00000000 03:41 3735585 /lib/tls/i686/cmov/libnss_files-2.4.so b7de8000-b7dea000 rw-p 00008000 03:41 3735585 /lib/tls/i686/cmov/libnss_files-2.4.so b7df4000-b7df5000 rw-p b7df4000 00:00 0 b7df5000-b7df7000 r-xp 00000000 03:41 3735579 /lib/tls/i686/cmov/libdl-2.4.so b7df7000-b7df9000 rw-p 00001000 03:41 3735579 /lib/tls/i686/cmov/libdl-2.4.so b7df9000-b7f26000 r-xp 00000000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f26000-b7f28000 r--p 0012c000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f28000-b7f2a000 rw-p 0012e000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f2a000-b7f2e000 rw-p b7f2a000 00:00 0 b7f2e000-b7f33000 r-xp 00000000 03:41 2048003 /usr/local/lib/libltdl.so.3.1.4 b7f33000-b7f34000 rw-p 00004000 03:41 2048003 /usr/local/lib/libltdl.so.3.1.4 b7f34000-b7f39000 r-xp 00000000 03:41 3735578 /lib/tls/i686/cmov/libcrypt-2.4.so b7f39000-b7f3b000 rw-p 00004000 03:41 3735578 /lib/tls/i686/cmov/libcrypt-2.4.so b7f3b000-b7f62000 rw-p b7f3b000 00:00 0 b7f62000-b7f77000 r-xp 00000000 03:41 2048119 /usr/local/lib/libradius-1.1.5.so b7f77000-b7f78000 rw-p 00014000 03:41 2048119 /usr/local/lib/libradius-1.1.5.so b7f78000-b7f79000 rw-p b7f78000 00:00 0 b7f79000-b7f88000 r-xp 00000000 03:41 3735590 /lib/tls/i686/cmov/libpthread-2.4.so b7f88000-b7f8a000 rw-p 0000f000 03:41 3735590 /lib/tls/i686/cmov/libpthread-2.4.so b7f8a000-b7f8c000 rw-p b7f8a000 00:00 0 b7f8c000-b7f9b000 r-xp 00000000 03:41 3735591 /lib/tls/i686/cmov/libresolv-2.4.so b7f9b000-b7f9d000 rw-p 0000f000 03:41 3735591 /lib/tls/i686/cmov/libresolv-2.4.so b7f9d000-b7f9f000 rw-p b7f9d000 00:00 0 b7f9f000-b7fb1000 r-xp 00000000 03:41 3735582 /lib/tls/i686/cmov/libnsl-2.4.so b7fb1000-b7fb3000 rw-p 00011000 03:41 3735582 /lib/tls/i686/cmov/libnsl-2.4.so b7fb3000-b7fb6000 rw-p b7fb3000 00:00 0 b7fbc000-b7fbe000 r-xp 00000000 03:41 2048022 /usr/local/lib/rlm_exec-1.1.5.so b7fbe000-b7fbf000 rw-p 00001000 03:41 2048022 /usr/local/lib/rlm_exec-1.1.5.so b7fbf000-b7fc1000 rw-p b7fbf000 00:00 0 b7fc1000-b7fda000 r-xp 00000000 03:41 3737318 /lib/ld-2.4.so b7fda000-b7fdc000 rw-p 00018000 03:41 3737318 /lib/ld-2.4.so bf90c000-bf93e000 rw-p bf90c000 00:00 0 [stack] ffffe000-fffff000 ---p 00000000 00:00 0 [vdso] Aborted (core dumped) So freeradius-1.1.5 with branch_1_1 does not work on my ubuntu. Does anyone have freeradius-1.1.5 running on ubuntu? Please let me know...I am trying this from Monday 12-03-07. thanks a lot ___________________________________________________________ The all-new Yahoo! Mail goes wherever you go - free your email address from your Internet provider. http://uk.docs.yahoo.com/nowyoucan.html

1 0

freeradius + branch_1_1 via cvs ?
by apolyxrono 17 Mar '07

17 Mar '07

Hi list , I want to make a silly question but i don't know a lot on cvs. I want to download the freeradius-1.1.5 with branch_1_1 via cvs and i use the following command after connected to the server: cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd Is the cvs command right? I checked some manuals first before i use it. Do i download the fr-1.1.5 with branch_1_1 or just fr-1.1.5 ? Because after compilation and running the server i get the same errors while running the freeradius-1.1.5 source code (not via cvs) thanks ___________________________________________________________ All new Yahoo! Mail "The new Interface is stunning in its simplicity and ease of use." - PC Magazine http://uk.docs.yahoo.com/nowyoucan.html

1 0

How to enable Freeradius to support a smart card with AES encryption algorithm?
by yao guoxian 17 Mar '07

17 Mar '07

Hi! I have a smart card emluator which suports AES, not MD5 encryption algorithm. Is it possible to enable Freeradius to support my smart card emlulator? I have an idea as follow: First,amending client agent (NAS) daemon program to make it send chap-password which is produced with AES, not MD5. The usual md5 chap-password is produced as MD5( user-packet-ID+user-secret+16 bytes authenticator), while the aes chap-password is produced as AES(16 bytes authenticator) using user-secret as key.The usual md5 chap-passwor attribute in an Access Request packet is as follow: __________________________________________________ | code = 3 | Length = 19 | user-packet-ID | 16 bytes value| __________________________________________________ While the aes chap-password replaced the 16 bytes value ( MD5( user-packet-ID+user-secret+16 bytes authenticator)) with AES(16 bytes authenticator). Second ,amending rlm-chap.c to alter it to use AES to analyze the request packet. Is it practical? Appreciate any suggestions. regards Guoxian

2 9

freeradius-1.1.5 : Aborted(core dump)
by adreas Polyxronopoulos 17 Mar '07

17 Mar '07

Hi list, I compilled freeradius-1.1.5( not from cvs ) on ubuntu 6.10 Desktop and after running the server i got the following output , can anyone help me? root@ubuntu:/usr/local/src/freeradius-1.1.5# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x800faeb0 *** ======= Backtrace: ========= /lib/tls/i686/cmov/libc.so.6[0xb7e578bd] /lib/tls/i686/cmov/libc.so.6(__libc_free+0x84)[0xb7e57a44] /usr/local/lib/libltdl.so.3[0xb7f2976b] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0xb7f2a0fe] radiusd(find_module_instance+0x358)[0x8000d618] radiusd(setup_modules+0x1d8)[0x8000dbc8] radiusd(main+0x46c)[0x8001126c] /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb7e068cc] radiusd[0x80004bc1] ======= Memory map: ======== 80000000-8001e000 r-xp 00000000 03:41 2080809 /usr/local/sbin/radiusd 8001e000-8001f000 rw-p 0001e000 03:41 2080809 /usr/local/sbin/radiusd 8001f000-80107000 rw-p 8001f000 00:00 0 [heap] b7c00000-b7c21000 rw-p b7c00000 00:00 0 b7c21000-b7d00000 ---p b7c21000 00:00 0 b7dcc000-b7dd6000 r-xp 00000000 03:41 3735568 /lib/libgcc_s.so.1 b7dd6000-b7dd7000 rw-p 00009000 03:41 3735568 /lib/libgcc_s.so.1 b7dd7000-b7de0000 r-xp 00000000 03:41 3735585 /lib/tls/i686/cmov/libnss_files-2.4.so b7de0000-b7de2000 rw-p 00008000 03:41 3735585 /lib/tls/i686/cmov/libnss_files-2.4.so b7dec000-b7ded000 rw-p b7dec000 00:00 0 b7ded000-b7def000 r-xp 00000000 03:41 3735579 /lib/tls/i686/cmov/libdl-2.4.so b7def000-b7df1000 rw-p 00001000 03:41 3735579 /lib/tls/i686/cmov/libdl-2.4.so b7df1000-b7f1e000 r-xp 00000000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f1e000-b7f20000 r--p 0012c000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f20000-b7f22000 rw-p 0012e000 03:41 3735576 /lib/tls/i686/cmov/libc-2.4.so b7f22000-b7f26000 rw-p b7f22000 00:00 0 b7f26000-b7f2b000 r-xp 00000000 03:41 2048003 /usr/local/lib/libltdl.so.3.1.4 b7f2b000-b7f2c000 rw-p 00004000 03:41 2048003 /usr/local/lib/libltdl.so.3.1.4 b7f2c000-b7f31000 r-xp 00000000 03:41 3735578 /lib/tls/i686/cmov/libcrypt-2.4.so b7f31000-b7f33000 rw-p 00004000 03:41 3735578 /lib/tls/i686/cmov/libcrypt-2.4.so b7f33000-b7f5a000 rw-p b7f33000 00:00 0 b7f5a000-b7f6f000 r-xp 00000000 03:41 3686519 /usr/local/lib/libradius-1.1.5.so b7f6f000-b7f71000 rw-p 00014000 03:41 3686519 /usr/local/lib/libradius-1.1.5.so b7f71000-b7f80000 r-xp 00000000 03:41 3735590 /lib/tls/i686/cmov/libpthread-2.4.so b7f80000-b7f82000 rw-p 0000f000 03:41 3735590 /lib/tls/i686/cmov/libpthread-2.4.so b7f82000-b7f84000 rw-p b7f82000 00:00 0 b7f84000-b7f93000 r-xp 00000000 03:41 3735591 /lib/tls/i686/cmov/libresolv-2.4.so b7f93000-b7f95000 rw-p 0000f000 03:41 3735591 /lib/tls/i686/cmov/libresolv-2.4.so b7f95000-b7f97000 rw-p b7f95000 00:00 0 b7f97000-b7fa9000 r-xp 00000000 03:41 3735582 /lib/tls/i686/cmov/libnsl-2.4.so b7fa9000-b7fab000 rw-p 00011000 03:41 3735582 /lib/tls/i686/cmov/libnsl-2.4.so b7fab000-b7fae000 rw-p b7fab000 00:00 0 b7fb4000-b7fb6000 r-xp 00000000 03:41 2048051 /usr/local/lib/rlm_exec-1.1.5.so b7fb6000-b7fb7000 rw-p 00001000 03:41 2048051 /usr/local/lib/rlm_exec-1.1.5.so b7fb7000-b7fb9000 rw-p b7fb7000 00:00 0 b7fb9000-b7fd2000 r-xp 00000000 03:41 3737318 /lib/ld-2.4.so b7fd2000-b7fd4000 rw-p 00018000 03:41 3737318 /lib/ld-2.4.so bfe21000-bfe52000 rw-p bfe21000 00:00 0 [stack] ffffe000-fffff000 ---p 00000000 00:00 0 [vdso] Aborted (core dumped) thanks for your time... Adreas Polyxronopoulos ___________________________________________________________ Now you can scan emails quickly with a reading pane. Get the new Yahoo! Mail. http://uk.docs.yahoo.com/nowyoucan.html

2 1

Connection before logon
by Phil Scarratt 17 Mar '07

17 Mar '07

Hi I am sure this must be a commonly asked question, but after hours of searching I just can't seem to find the answer. I've spent hours trawling through google and searching the archives to no avail. I am sure I am missing something simple, but can't put my finger on it. There are several posts of similar topic but no answer (or answer that works). In my case, I have freeradius installed to use EAP-TLS, Windows XPSP2 clients exclusively. The authentication works fine after logging on using a local account. I have the same certificates in both the local users certificate store and the computer account certificate store. The debug output for freeradius, when the computer is first switched on and before logging on, simply shows repeated Access-Request packets like the one below. It basically simply repeats. Can anyone shed any light at all, or point me in other directions to search? TIA Fil --Debug Output-- Cleaning up request 8 ID 2 with timestamp 45fa940f Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 192.168.1.50:1054, id=4, length=207 Message-Authenticator = 0xc45158cab736178c590d01cee92bc6cc Service-Type = Framed-User User-Name = "host/SACM0734" Framed-MTU = 1488 Called-Station-Id = "XXXXXXXXXXXXXXXXXXX" Calling-Station-Id = "XXXXXXXXXXXXXXXXX" NAS-Identifier = "D-Link Access Point" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x0204001201686f73742f5341434d30373334 NAS-IP-Address = 192.168.1.50 NAS-Port = 1 NAS-Port-Id = "STA port # 1" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 9 modcall[authorize]: module "preprocess" returns ok for request 9 rlm_realm: No '\' in User-Name = "host/SACM0734", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "ntdomain" returns noop for request 9 rlm_eap: EAP packet type response id 4 length 18 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 9 users: Matched host/SACM0734 at 66 modcall[authorize]: module "files" returns ok for request 9 modcall: group authorize returns updated for request 9 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 9 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 9 modcall: group authenticate returns handled for request 9 Sending Access-Challenge of id 4 to 192.168.1.50:1054 EAP-Message = 0x010500060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xfa4829561866ec99c1e1c3ace47e3f57 Finished request 9 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 9 ID 4 with timestamp 45fa942d Nothing to do. Sleeping until we see a request.

1 1

Re : Compile problems on Solaris 10
by Eshun Benjamin 16 Mar '07

16 Mar '07

gcc -Wall -fPIC -c pam_radius_auth.c -o pam_radius_auth.o In file included from pam_radius_auth.h:23, from pam_radius_auth.c:63: md5.h:21: error: syntax error before 'u_int32_t' md5.h:21: warning: no semicolon at end of struct or union check out what is going on in pam_radius_auth.h on line 23 ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : Paul Goodman <pgoodman(a)ucar.edu> À : freeradius-users(a)lists.freeradius.org Envoyé le : Jeudi, 15 Mars 2007, 17h34mn 51s Objet : Compile problems on Solaris 10 I am trying to compile the pam_radius-1.3.16 modules on a Solaris 10 system, but when I run make, I get the following error: gcc -Wall -fPIC -c pam_radius_auth.c -o pam_radius_auth.o In file included from pam_radius_auth.h:23, from pam_radius_auth.c:63: md5.h:21: error: syntax error before 'u_int32_t' md5.h:21: warning: no semicolon at end of struct or union md5.h:22: warning: type defaults to 'int' in declaration of 'bits' md5.h:22: warning: data definition has no type or storage class md5.h:24: error: syntax error before '}' token md5.h:29: error: syntax error before 'buf' pam_radius_auth.c: In function 'get_random_vector': pam_radius_auth.c:350: error: storage size of 'my_md5' isn't known pam_radius_auth.c:350: warning: unused variable 'my_md5' pam_radius_auth.c: In function 'get_accounting_vector': pam_radius_auth.c:382: error: storage size of 'my_md5' isn't known pam_radius_auth.c:382: warning: unused variable 'my_md5' pam_radius_auth.c: In function 'verify_packet': pam_radius_auth.c:400: error: storage size of 'my_md5' isn't known pam_radius_auth.c:400: warning: unused variable 'my_md5' pam_radius_auth.c: In function 'add_password': pam_radius_auth.c:497: error: storage size of 'md5_secret' isn't known pam_radius_auth.c:497: error: storage size of 'my_md5' isn't known pam_radius_auth.c:497: warning: unused variable 'my_md5' pam_radius_auth.c:497: warning: unused variable 'md5_secret' pam_radius_auth.c: In function 'rad_converse': pam_radius_auth.c:1016: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1019: warning: passing argument 2 of 'conv->conv' from incompatible pointer type pam_radius_auth.c: In function 'pam_sm_authenticate': pam_radius_auth.c:1071: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type pam_radius_auth.c:1099: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1113: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1146: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c: In function 'pam_private_session': pam_radius_auth.c:1267: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type pam_radius_auth.c:1288: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c: In function 'pam_sm_chauthtok': pam_radius_auth.c:1374: warning: passing argument 2 of 'pam_get_user' from incompatible pointer type pam_radius_auth.c:1395: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1404: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type pam_radius_auth.c:1409: warning: passing argument 3 of 'pam_get_item' from incompatible pointer type gmake: *** [pam_radius_auth.o] Error 1 The same is true when I use the Sun cc (Studio 11 compiler). I am using gcc 4.0.2 (the most recent version I could get to run on Solaris). Output of uname -a is: SunOS xxxx 5.10 Generic_118833-36 sun4u sparc SUNW,A70 Does anyone have a suggestion as to how to modify the header file to make it work or know where I can find pre-compiled modules for Solaris? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

3 2

How EAP module set the Auth-Type to EAP when using rlm_sim_file module?
by lishuai zhao 16 Mar '07

16 Mar '07

Hi, all I am using rlm_sim_file module to perform the authorization function, so I have to add "sim_file" before "eap" in the authorize{} of radiusd.conf. In general, the authorization function can set the "Auth-Type" automatically, such as rlm_file or rlm_sql. But I find that the rlm_sim_file does not do that. In the rlm_sim_triplets of Doc, it says that :If this module is successful at retrieving three sets of triplets, then the EAP-Type: attribute will be set to SIM. The EAP module itself will set the Auth-Type to EAP when it sees the EAP-Message attribute. I only find that Auth-Type is set in the eap_authorize function. In my opinion, if rlm_sim_file is used, the eap_authorize will not be executed. So , I do not know how Auth-Type is set to EAP when using rlm_sim_file module? Best wishes! Lishuai.zhao

2 3

Reject authentication attempts based on "cli" value?
by markcapelle＠pcmc.com 16 Mar '07

16 Mar '07

It is a Cisco WLAN 4402. For reference, here is a log entry from a user connecting from the Guest network: Thu Mar 15 07:10:52 2007 : Auth: Login OK: [guestuser] (from client PCMCWLANCTRLR1 port 0 cli 192.168.100.101) And here is a log entry from someone connecting via 802.1x on another network: Thu Mar 15 07:26:36 2007 : Auth: Login OK: [DOMAIN\\guestuser] (from client PCMCWLANCTRLR1 port 1 cli 00-12-F0-19-6E-B3) As you can see the only way I have to differentiate these two auth attempts is via the "cli" value. 192.168.100.x is the subnet range of my Guest network. I want all auth attempts from 192.168.100.x to be rejected. Hope someone can help me out with this. Thanks. >Date: Thu, 15 Mar 2007 10:55:55 -0400 >From: "King, Michael" <MKing(a)bridgew.edu> >Subject: RE: >To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> >Message-ID: > <6641F169E241EA40B29DE7BFAD24674DA7A43B(a)EXCH2.campus.bridgew.edu> >Content-Type: text/plain; charset="iso-8859-1" > >What manufacturer makes the NAS (the wireless controller?) > >I would look to the Called-Station field. Usually (Based on Cisco AP's) this is the MAC of the AP, followed by the SSID they connected to. > >> -----Original Message----- >> From: >> freeradius-users-bounces+mking=bridgew.edu(a)lists.freeradius.or >> g >> [mailto:freeradius-users-bounces+mking=bridgew.edu@lists.freer >> adius.org] On Behalf Of markcapelle(a)pcmc.com >> Sent: Thursday, March 15, 2007 10:48 AM >> To: freeradius-users(a)lists.freeradius.org >> Subject: >> >> I have a situation where I have a wireless controller that services >> multiple wireless networks (vlans).? When the controller contacts the >> RADIUS server with an authentication request, it does so with the IP >> address of the controller as the client address.? The problem is I >> have a guest network that has lower security than my other wireless >> networks.? The guest network has it's own user/password database >> stored in the controller, but the way authentication occurs is that it >> checks RADIUS for the user first and assumes it will fail, then will >> use the internal database.? The issue with this is that if one of my >> users jumps on the guest network, they are authenticated which is not >> what I want to happen.? Looking at the logs, I noticed that all the >> guest network users have the IP address of the client in the "cli" >> field.? My guest network is a totally different VLAN and IP subnet. >> >> Is there a way to key off of the "cli" field and then make it so that >> all requests from clients with a specific subnet in this field are not >> authenticated?? This would stop my internal users from connecting, but >> allow the correct users (those in the internal DB) to still get >> connected. >> >> Thanks. >> CONFIDENTIALITY NOTICE: This e-mail may contain trade secrets or >> privileged, undisclosed or otherwise confidential information. If you >> have received this e-mail in error, you are hereby notified that any >> review, copying or distribution of this message in whole or in part is >> strictly prohibited. >> Please inform the sender immediately and destroy the original >> transmittal. Thank you for your cooperation. >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> CONFIDENTIALITY NOTICE: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of this message in whole or in part is strictly prohibited. Please inform the sender immediately and destroy the original transmittal. Thank you for your cooperation.

2 1

Accounting Request Message Authenticator setting to 0x00
by Archna Mittal 16 Mar '07

16 Mar '07

Hi, I am a newbie to Radius Protocol. I want to set the Message Authenticator value to 0x00 in my Accounting Request. I have tried bzero but its not working. Please let me know if there is a way to do it? Thanks & Regards, Regards, -Archna

5 9