- Freeradius-Users - lists.freeradius.org

update disconnect and order of operations
by Anatoliy 14 Jul '23

14 Jul '23

Hi team, How update disconnect work in accounting section ? For example we have accounting configuration like this sql { fail = 1 } if ( !fail ) { if (&Class) { if (&Class == "outage" && &Acct-Status-Type == "Interim-Update") { update disconnect { Acct-Session-Id := "%{Acct-Session-Id}" } } } } linelog if we receive accounting pack with Class=outage and DB accessible , we should send disconnect message for this session. But, what happens if NAS is busy , or packet will be lost , so we did not receive reply ? Will freeradius wait for some timeout before continue to linelog directive or sending and processing disconnect message will be executed in parallel and we process the linelog without any delay?

3 6

EAP-MSCHAPv2 and AD Authentication w/o ntlm_auth
by BOUILLOUD Corentin 11 Jul '23

11 Jul '23

Hi everyone, nice to meet you, I would like to use Kerberos instead of ntlm_auth to authenticate AD users with FreeRADIUS. I configured 'mschap' module to directly use winbind daemon directly and, If I understood samba documentation properly, winbindd can't authenticate users himself. It uses 'pam_winbind' module that we can configure to use Kerberos. Could you confirm me that it is correct and/or possible in another way ? mods-enabled/mschap # # An alternative to using ntlm_auth is to connect to the # winbind daemon directly for authentication. This option # is likely to be faster and may be useful on busy systems, # but is less well tested. # # Using this option requires libwbclient from Samba 4.2.1 # or later to be installed. Make sure that ntlm_auth above is # commented out. # winbind_username = "%{mschap:User-Name}" winbind_domain = "%{mschap:NT-Domain}" https://www.samba.org/samba/docs/current/man-html/winbindd.8.html The service provided by winbindd is called `winbind' and can be used to resolve user and group information from a Windows NT server. The service can also provide authentication services via an associated PAM module. https://www.samba.org/samba/docs/current/man-html/pam_winbind.8.html krb5_auth pam_winbind can authenticate using Kerberos when winbindd is talking to an Active Directory domain controller. Kerberos authentication must be enabled with this parameter. ======================================================== This message has been scanned for malware. This message and any attachments (the "message") are confidential, intended solely for the addressees, and may contain legally privileged information. Any unauthorised use or dissemination is prohibited. E-mails are susceptible to alteration. Neither our company or any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified. ========================================================= Ce message a ete verifie et ne contient pas de programme malveillant. Ce message et toutes les pieces jointes (ci-apres le "message") sont confidentiels et susceptibles de contenir des informations couvertes par le secret professionnel. Ce message est etabli a l'intention exclusive de ses destinataires. Toute utilisation ou diffusion non autorisee est interdite. Tout message electronique est susceptible d'alteration. Notre societe et ses filiales declinent toute responsabilite au titre de ce message s'il a ete altere, deforme falsifie. O =========================================================

2 2

Errors when building binary RPM on OL9
by Linus Hicks 30 Jun '23

30 Jun '23

I have downloaded the 3.2.3 tar file from the freeradius site and trying to build the binary RPM on an Oracle Linux 9 system. I copied the redhat/freeradius.spec file into the SPECS directory but needed to make a couple of changes to get it this far. 1. I got a file not found error on SOURCES/freeradius-tmpfiles-conf. That file is in the redhat/ directory but I couldn't figure out how to change where it is looking for it so just put a copy where it is looking. 2. I have installed postgresql-15 from binary RPM on their site and the paths to the /lib and /include directories don't match the paths searched in the build, now resolved. 3. Now I'm getting: RPM build errors: line 51: It's not recommended to have unversioned Obsoletes: Obsoletes: freeradius-devel line 52: It's not recommended to have unversioned Obsoletes: Obsoletes: freeradius-libs Macro expanded in comment on line 602: %{_mandir}/man5/rlm_idn.5.gz} File listed twice: /etc/raddb/certs/bootstrap File listed twice: /etc/raddb/mods-config/sql/main/mysql/extras File listed twice: /etc/raddb/mods-config/sql/main/mysql/extras/wimax File listed twice: /etc/raddb/mods-config/sql/main/mysql/extras/wimax/queries.conf File listed twice: /etc/raddb/mods-config/sql/main/mysql/extras/wimax/schema.sql File listed twice: /etc/raddb/mods-config/sql/main/postgresql/extras File listed twice: /etc/raddb/mods-config/sql/main/postgresql/extras/cisco_h323_db_schema.sql File listed twice: /etc/raddb/mods-config/sql/main/postgresql/extras/voip-postpaid.conf Installed (but unpackaged) file(s) found: /etc/raddb/mods-config/python/example.py /etc/raddb/mods-config/python/radiusd.py /usr/lib/debug/usr/lib64/freeradius/rlm_python.so-3.2.3-1.el9.x86_64.debug /usr/lib64/freeradius/rlm_python.so It did not create the RPM and I believe the last set of files listed as "Installed (but unpackaged)" need to be resolved. I know there's a way to ignore the error and continue, but that could leave me with a broken RPM. Any help is appreciated. C. Linus Hicks Please access the attached hyperlink for Highstreet’s electronic communications disclaimer: http://www.highstreetit.com/Email_Disclaimer.htm

2 5

Migrating DHCP configuration from v3 to v4
by Ľudovít Mikula 30 Jun '23

30 Jun '23

I am migrating my dhcp setup from freeradius v3 into v4 and have some questions. In v3 there was a dedicated dhcp and dhcp-ippool mods-config/sql setup, where the sql_user_name was set to: sql_user_name = "%{control:DHCP-SQL-Option-Identifier}" and in my processing sections I have set the "control:DHCP-SQL-Option-Identifier" based on some custom logic. In v4 there is no such configuration, but the comments in ippool queries seem to suggest it can now all be done in one config. However when using ippool module in DHCP request processing, the %{User-Name} attribute (configured in sql_user_name) is not known and I have not found an alternative to DHCP-SQL-Option-Identifier attribute. What is the recommended way of migrating such configuration from v3 into v4? Thank you. -- Ludo Mikula

2 4

Problem using hased passwords
by Michael Schwartzkopff 30 Jun '23

30 Jun '23

Hi, I am trying to use a hased password, but I get the error: pap: ERROR: SHA1 digest does not match "known good" digest from the eap_gtc module. According to the compatibility matrix this should work. My setup: users file: user SHA-Password := "<SHA sum of the password, not salted>" Log: (31) files: users: Matched entry misch3 at line 101 (31) [files] = ok (...) (31) pap: Normalizing SHA-Password from hex encoding, 40 bytes -> 20 bytes (31) pap: WARNING: Auth-Type already set. Not setting to PAP (31) [pap] = noop (31) } # authorize = updated (31) eap_gtc: # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (31) eap_gtc: Auth-Type PAP { (31) pap: Login attempt with password (31) pap: Comparing with "known-good" SHA-Password (31) pap: ERROR: SHA1 digest does not match "known good" digest (31) pap: Passwords don't match (31) eap_gtc: [pap] = reject (31) eap_gtc: } # Auth-Type PAP = reject Any ideas? I double checked the passwords and the SHA sum on both ends. Michael.

2 4

EAP TLS fatal protocol version
by roudi＠rjbsoft.co.za 25 Jun '23

25 Jun '23

Hi, I recently got a VPS for my RADIUS server as I am having issues keeping my local server online due to prolonged rolling blackouts. My new server is Ubuntu 22.04.2 and I have installed the latest FreeRADIUS v3.2.3 and I am using MySQL. My FreeRADIUS server is working perfectly for PPPoE authentication on Mikrotik. My problem comes in on my Ubiquiti Sectors where I have WPA2-Enterprise Authentication on the WiFi devices. My old server is running Ubuntu 18 with FreeRadius v3.0, and on that server my WPA2-Enterprise authentication is working perfectly. The error I am getting on the new server looks like this in the log file: (6) eap: Calling submodule eap_peap to process data (6) eap_peap: (TLS) EAP Peer says that the final record size will be 62 bytes (6) eap_peap: (TLS) EAP Got all data (62 bytes) (6) eap_peap: (TLS) Handshake state - before SSL initialization (6) eap_peap: (TLS) Handshake state - Server before SSL initialization (6) eap_peap: (TLS) Handshake state - Server before SSL initialization (6) eap_peap: (TLS) recv TLS 1.3 Handshake, ClientHello (6) eap_peap: (TLS) send TLS 1.0 Alert, fatal protocol_version (6) eap_peap: ERROR: (TLS) Alert write:fatal:protocol version (6) eap_peap: ERROR: (TLS) Server : Error in error (6) eap_peap: ERROR: (TLS) Failed reading from OpenSSL: error:0A000102:SSL routines::unsupported protocol (6) eap_peap: ERROR: (TLS) System call (I/O) error (-1) (6) eap_peap: ERROR: (TLS) EAP Receive handshake failed during operation (6) eap_peap: ERROR: [eaptls process] = fail (6) eap: ERROR: Failed continuing EAP PEAP (25) session. EAP sub-module failed (6) eap: Sending EAP Failure (code 4) ID 1 length 4 (6) eap: Failed in EAP select (6) [eap] = invalid (6) } # authenticate = invalid (6) Failed to authenticate the user The problem looks like the client is sending a TLS 1.3 Handshake, and FreeRADIUS is replying with a TLS 1.0 reply. I have also noticed that Ubuntu 22 is using OpenSSL 3.0.2 15 and Ubuntu 18 was using OpenSSL 1.1.1. And this is where, I suspect, my problem is, but I am unsure how to get around this. What I have tried: * Setting TLS Max version to 1.3 in eap config * Removing OpenSSL v3.0 and installing OpenSSL v1.1.1 on ubuntu 22, but this broke and removed a lot of stuff. * Downgraded to FreeRADIUS 3.0, same problem. I could just get a VPS with Ubuntu 18, but this realy defeats the point as Ubuntu 18 is almost at end of life, and having the latest OS would be a good option. Is there anyone out there that got WPA2-Enterprise authentication working on FreeRADIUS 3.0 or 3.2 on Ubuntu 22? Thanks Roudi

2 1

Changing radacct logs path
by Can Paçacı 23 Jun '23

23 Jun '23

Hi, I changed the radacct log directory location (radacctdir = /aaa/logs/radacct) in the radiud.conf file and also changed the owner of the destination directory and premission but it didn't work. Why? How can I do that. Regards -- Can Paçacı pacaci(a)servisnet.com.tr Servisnet A.Ş. Tel: 90 216 9999677 90 530 5450952

4 5

Vendor specific attributes format eapol_test
by nabble＠felix.world 23 Jun '23

23 Jun '23

Hello, I know it’s not FreeRADIUS related but you may be able to help me to understand how vendor specific attributes work and how to correctly send them with eapol_test. Vendor specific attributes are in the RADIUS attribute 26 So with eapol_test the following flag `-N 26:x:00009f680305010000` would be in detail: 00009f68 = Vendor-Id in hex 03 = Vendor attribute id 05 = length 010000 = Value 05 should be the length if I understand it correctly. But after playing around a bit it confuses me more and more. Why is 010000 of length 05 and e.g. 11000342342342 of length 09? BR, Lineconnect

2 1

Re: FW: FreeRadius TOTP authenticate fail passcode validation
by João Miguel Regateiro 23 Jun '23

23 Jun '23

Hi there, Thanks for the previous response. Now I came across with two different problems, the first is with building the rlm_totp module and the second is during decoding the totp secret. I was able to get the correct totp and authenticate successfully even though the make totp returned some errors. The passcode was indeed incorrect because the module was generating the totp based on the system time. I changed the mods-available/date and set utc=yes and that fixed the problem (that was a misconfiguration on Universal Time vs System Time). I tried to build the rlm_totp (make totp) and got the following errors on undefined references ("fr_hmac_sha1" and "fr_digest_cmp"): rlm_totp.c: In function ‘main’: rlm_totp.c:336:44: warning: format ‘%llu’ expects argument of type ‘long long unsigned int *’, but argument 3 has type ‘uint64_t *’ {aka ‘long unsigned int *’} [-Wformat=] 336 | (void) sscanf(argv[2], "%llu", &now); | ~~~^ ~~~~ | | | | | uint64_t * {aka long unsigned int *} | long long unsigned int * | %lu At top level: rlm_totp.c:50:32: warning: ‘method_env’ defined but not used [-Wunused-const-variable=] 50 | static const call_method_env_t method_env = { | ^~~~~~~~~~ /bin/ld: /tmp/cccE8qoD.o: in function `totp_cmp': /home/mfa/freeradius-server/src/modules/rlm_totp/rlm_totp.c:209: undefined reference to `fr_hmac_sha1' /bin/ld: /home/mfa/freeradius-server/src/modules/rlm_totp/rlm_totp.c:229: undefined reference to `fr_digest_cmp' collect2: error: ld returned 1 exit status make: *** [Makefile:25: totp] Error 1 ------------------------------------------------------------------------------------------ In the last email I was using a standard shared secret just for testing purposes but my TOTP generator creates a 56 characters secret so I am using that and getting this message - “totp: TOTP-Secret cannot be decoded”. I’ve tried smaller secrets and it is always able to decode the secret which made me wonder if you have any restrictions on the secret length? Secret: 3R4VOYWSOR3YWEVRX74HRVXYXLMACQN3A457C24GS2OYG7EINHMBPQZO Base32 encoded: GNJDIVSPLFLVGT2SGNMVORKWKJMDONCIKJLFQWKYJRGUCQ2RJYZUCNBVG5BTENCHKMZE6WKHG5CUSTSIJVBFAUK2J4====== Fri Jun 23 11:42:00 2023 : Info: Ready to process requests Fri Jun 23 11:42:04 2023 : Debug: (2) Received Access-Request Id 192 from 10.56.143.110:59496 to 10.56.143.110:1812 length 73 Fri Jun 23 11:42:04 2023 : Debug: (2) User-Name = "bob" Fri Jun 23 11:42:04 2023 : Debug: (2) User-Password = "testing123123456" Fri Jun 23 11:42:04 2023 : Debug: (2) NAS-IP-Address = 10.56.143.110 Fri Jun 23 11:42:04 2023 : Debug: (2) NAS-Port = 1812 Fri Jun 23 11:42:04 2023 : Debug: (2) Message-Authenticator = 0x7641368bcad58c3250dd31f0e46e76d4 Fri Jun 23 11:42:04 2023 : Debug: (2) session-state: No State attribute Fri Jun 23 11:42:04 2023 : Debug: (2) # Executing section authorize from file /etc/raddb/sites-enabled/default Fri Jun 23 11:42:04 2023 : Debug: (2) authorize { Fri Jun 23 11:42:04 2023 : Debug: (2) modsingle[authorize]: calling files (rlm_files) Fri Jun 23 11:42:04 2023 : Debug: (2) files: users: Matched entry bob at line 1 Fri Jun 23 11:42:04 2023 : Debug: Hello %{User-Name} Fri Jun 23 11:42:04 2023 : Debug: Parsed xlat tree: Fri Jun 23 11:42:04 2023 : Debug: literal --> Hello Fri Jun 23 11:42:04 2023 : Debug: attribute --> User-Name Fri Jun 23 11:42:04 2023 : Debug: literal --> Fri Jun 23 11:42:04 2023 : Debug: (2) files: EXPAND Hello %{User-Name} Fri Jun 23 11:42:04 2023 : Debug: (2) files: --> Hello bob Fri Jun 23 11:42:04 2023 : Debug: (2) modsingle[authorize]: returned from files (rlm_files) Fri Jun 23 11:42:04 2023 : Debug: (2) [files] = ok Fri Jun 23 11:42:04 2023 : Debug: (2) if (User-Password !~ /^(.*)([0-9]{6})$/) { Fri Jun 23 11:42:04 2023 : Debug: (2) if (User-Password !~ /^(.*)([0-9]{6})$/) -> FALSE Fri Jun 23 11:42:04 2023 : Debug: (2) update request { Fri Jun 23 11:42:04 2023 : Debug: (2) EXPAND %{1} Fri Jun 23 11:42:04 2023 : Debug: (2) --> testing123 Fri Jun 23 11:42:04 2023 : Debug: (2) User-Password := testing123 Fri Jun 23 11:42:04 2023 : Debug: (2) Overwriting value "testing123123456" with "testing123" Fri Jun 23 11:42:04 2023 : Debug: (2) EXPAND %{2} Fri Jun 23 11:42:04 2023 : Debug: (2) --> 123456 Fri Jun 23 11:42:04 2023 : Debug: (2) TOTP-Password := 123456 Fri Jun 23 11:42:04 2023 : Debug: (2) } # update request = noop Fri Jun 23 11:42:04 2023 : Debug: (2) if (&User-Name == "bob") { Fri Jun 23 11:42:04 2023 : Debug: (2) if (&User-Name == "bob") -> TRUE Fri Jun 23 11:42:04 2023 : Debug: (2) if (&User-Name == "bob") { Fri Jun 23 11:42:04 2023 : Debug: (2) update control { Fri Jun 23 11:42:04 2023 : Debug: (2) TOTP-Secret := GNJDIVSPLFLVGT2SGNMVORKWKJMDONCIKJLFQWKYJRGUCQ2RJYZUCNBVG5BTENCHKMZE6WKHG5CUSTSIJVBFAUK2J4====== Fri Jun 23 11:42:04 2023 : Debug: (2) } # update control = noop Fri Jun 23 11:42:04 2023 : Debug: (2) } # if (&User-Name == "bob") = noop Fri Jun 23 11:42:04 2023 : Debug: (2) modsingle[authenticate]: calling totp (rlm_totp) Fri Jun 23 11:42:04 2023 : Debug: (2) totp: TOTP-Secret cannot be decoded Fri Jun 23 11:42:04 2023 : Debug: (2) modsingle[authenticate]: returned from totp (rlm_totp) Fri Jun 23 11:42:04 2023 : Debug: (2) [totp.authenticate] = fail Fri Jun 23 11:42:04 2023 : Debug: (2) } # authorize = fail Fri Jun 23 11:42:04 2023 : Debug: (2) Using Post-Auth-Type Reject Fri Jun 23 11:42:04 2023 : Debug: (2) Post-Auth-Type sub-section not found. Ignoring. Fri Jun 23 11:42:04 2023 : Debug: (2) # Executing group from file /etc/raddb/sites-enabled/default Fri Jun 23 11:42:04 2023 : Debug: (2) Delaying response for 1.000000 seconds Fri Jun 23 11:42:04 2023 : Debug: Waking up in 0.3 seconds. Fri Jun 23 11:42:04 2023 : Debug: Waking up in 0.6 seconds. Fri Jun 23 11:42:05 2023 : Debug: (2) Sending delayed response Fri Jun 23 11:42:05 2023 : Debug: (2) Sent Access-Reject Id 192 from 10.56.143.110:1812 to 10.56.143.110:59496 length 32 Fri Jun 23 11:42:05 2023 : Debug: (2) Reply-Message = "Hello bob " Fri Jun 23 11:42:05 2023 : Debug: Waking up in 3.9 seconds. Fri Jun 23 11:42:09 2023 : Debug: (2) Cleaning up request packet ID 192 with timestamp +32 due to cleanup_delay was reached Fri Jun 23 11:42:09 2023 : Info: Ready to process requests Thank you! Best regards, Miguel luis teixeira <luis.carlosteixeira(a)outlook.com> escreveu no dia sexta, 23/06/2023 à(s) 12:19: > > > ------------------------------ > *De:* Freeradius-Users <freeradius-users-bounces+luis.carlosteixeira= > hotmail.com(a)lists.freeradius.org> em nome de Alan DeKok < > aland(a)deployingradius.com> > *Enviado:* 20 de junho de 2023 14:50 > *Para:* FreeRadius users mailing list < > freeradius-users(a)lists.freeradius.org> > *Assunto:* Re: FreeRadius TOTP authenticate fail passcode validation > > On Jun 20, 2023, at 5:06 AM, João Miguel Regateiro <jmregateiro(a)gmail.com> > wrote:, > > > > > > I am working on a TOTP authentication method setup with FreeRadius. For > > starters I created the user “bob” on raddb/users and defined a password > to > > authenticate against the server > > I have got it to work with just normal user and password but when I try > to > > configure the TOTP module and testing using radiusd -X it shows the > > totp.authenticate the return fail. I have made sure that the date time is > > the same UTC +00 on all the environments, and generate the TOTP token > with > > sha-1, 6 digits code and 30seconds time frame. [Generate token in base > 32 = > > JJBFGV2ZGNCFARKIKBFTGUCYKA====== ] and [Generate default token = > > JBSWY3DPEHPK3PXP ] > > If it fails, then the short answer is that the TOTP doesn't match. > There isn't really much else which can go wrong. > > I've pushed changes to the v3.2.x branch which let you do "radiusd -Xx", > and the totp module will now print out the TOTP it expected, and the one it > received. You'll have to download and build v3.2.x in order to use it, > though. > > You can also build a command-line program to test the TOTP. Build the > source as normal, and then do: > > $ cd src/modules/rlm_totp > $ make totp > > And then can use the above key: > > $ ./totp totp 1687268891 JBSWY3DPEHPK3PXP 601664 > Time 1687268891 > Expected 601664 > Received 601664 > > or: > > $ ./totp totp now JBSWY3DPEHPK3PXP 123456 > Time 1687269000 > Expected 895298 > Received 123456 > Fail > > My guess is that the TOTP you're giving it is wrong. But increased > debug output will let you know exactly what's going on. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See > https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freer… > <http://www.freeradius.org/list/users.html> >

2 2

Problem building current master
by Ľudovít Mikula 22 Jun '23

22 Jun '23

I am having problem compiling current master (tried on fresh clone): CC src/lib/tls/conf.c src/lib/tls/conf.c:47:12: warning: ‘tls_conf_parse_cache_mode’ used but never defined 47 | static int tls_conf_parse_cache_mode(TALLOC_CTX *ctx, void *out, void *parent, CONF_ITEM *ci, CONF_PARSER const *rule); | ^~~~~~~~~~~~~~~~~~~~~~~~~ and later it fails with: LINK build/lib/libfreeradius-eap-aka-sim.la CC src/lib/server/pair_server_tests.c /usr/bin/ld: build/lib/local/.libs/libfreeradius-tls.so: undefined reference to `tls_conf_parse_cache_mode' collect2: error: ld returned 1 exit status make: *** [scripts/boiler.mk:731: build/bin/local/pair_server_tests] Error 1 Configured with: ./configure --prefix=/opt/freeradius Library configure status report ------------------------------- curl .................... OK eap ..................... OK eap_aka_sim ............. OK io ...................... OK json .................... OK kafka ................... skipping (requires rdkafka.h libhirdkafka) ldap .................... skipping (requires libldap (with async support) lber ldap.h) redis ................... OK server .................. OK sim ..................... OK tls ..................... OK unlang .................. OK util .................... OK Module configure status report ------------------------------ rlm_always .............. OK rlm_attr_filter ......... OK rlm_cache ............... OK rlm_cache_memcached ..... OK rlm_cache_rbtree ........ OK rlm_cache_redis ......... OK rlm_chap ................ OK rlm_cipher .............. OK rlm_client .............. OK rlm_couchbase ........... skipping (requires couchbase.h libcouchbase) rlm_csv ................. OK rlm_date ................ OK rlm_delay ............... OK rlm_detail .............. OK rlm_dhcpv4 .............. OK rlm_dict ................ OK rlm_digest .............. OK rlm_eap ................. OK rlm_eap_aka ............. OK rlm_eap_aka_prime ....... OK rlm_eap_fast ............ OK rlm_eap_gtc ............. OK rlm_eap_md5 ............. OK rlm_eap_mschapv2 ........ OK rlm_eap_peap ............ OK rlm_eap_pwd ............. OK rlm_eap_sim ............. OK rlm_eap_tls ............. OK rlm_eap_ttls ............ OK rlm_escape .............. OK rlm_exec ................ OK rlm_files ............... OK rlm_icmp ................ OK rlm_idn ................. OK rlm_imap ................ OK rlm_isc_dhcp ............ OK rlm_json ................ OK rlm_kafka ............... OK rlm_krb5 ................ OK rlm_ldap ................ OK rlm_linelog ............. OK rlm_logintime ........... OK rlm_logtee .............. OK rlm_lua ................. skipping (requires lua.h) rlm_mruby ............... skipping (requires mruby.h mruby/compile.h mruby/array.h libmruby libm) rlm_mschap .............. OK ... without opendirectory support without direct winbind support rlm_ocsp ................ OK rlm_opendirectory ....... skipping (requires membership.h) rlm_pam ................. OK rlm_pap ................. OK rlm_passwd .............. OK rlm_perl ................ OK rlm_python .............. OK rlm_radius .............. OK rlm_radutmp ............. OK rlm_redis ............... OK rlm_redis_ippool ........ OK rlm_rediswho ............ OK rlm_rest ................ OK rlm_securid ............. skipping (requires acexport.h libaceclnt) rlm_sigtran ............. skipping (requires osmocom/core/msgb.h osmocom/sccp/sccp.h libosmocore libsccp libxua libmtp) rlm_smtp ................ OK rlm_sometimes ........... OK rlm_sql ................. OK rlm_sql_cassandra ....... skipping (requires libcassandra (>= 2.0) cassandra.h) rlm_sql_db2 ............. skipping (requires libdb2 sqlcli.h) rlm_sql_firebird ........ skipping (requires libfbclient ibase.h) rlm_sql_freetds ......... skipping (requires ctpublic.h libct) rlm_sql_mysql ........... OK rlm_sql_null ............ OK rlm_sql_oracle .......... skipping (requires oci.h libclntsh libnnz[9-12]) rlm_sql_postgresql ...... skipping (requires libpq-fe.h libpq) rlm_sql_sqlite .......... skipping (requires libsqlite3 sqlite.h) rlm_sql_unixodbc ........ skipping (requires libodbc sql.h) rlm_sqlcounter .......... OK rlm_sqlippool ........... OK rlm_stats ............... OK rlm_tacacs .............. OK rlm_test ................ OK rlm_totp ................ OK rlm_unbound ............. OK rlm_unix ................ OK rlm_unpack .............. OK rlm_utf8 ................ OK rlm_wimax ............... OK rlm_winbind ............. skipping (requires wbclient.h core/ntstatus.h) rlm_yubikey ............. OK ... without yubikey token decryption support without yubicloud support -- Ludo

2 2