Microsoft SoH Support

[James J J Hooper]

--On Monday, October 11, 2010 14:24:07 +0200 Alan DeKok 
<aland at deployingradius.com> wrote:

> Phil Mayers wrote:
>> I've tested it with WinXP SP3, Vista and Win7. There is one compile fix
>> needed which must have snuck through (attached)
>
>   I deleted all references to the REQUEST structure from src/lib/soh.c.
>  The library functions are for clients, not just the server.
>
>   The code in "git" should now be up to date, and should compile.


[I know it's work in progress, just FYI...]

There are two unprotected fprintf in peap.c which appear to block the 
server if you run it daemonized [i.e. not -X]:

$ grep -A 5 -B 5 JJJ ./src/modules/rlm_eap/types/rlm_eap_peap/peap.c
		rad_assert(t->soh_virtual_server != NULL);
		fake->server = t->soh_virtual_server;

		RDEBUG("Processing SoH request");
		debug_pair_list(fake->packet->vps);
		//JJJ fprintf(fr_log_fp, "server %s {\n", fake->server);
		rad_authenticate(fake);
		//JJJ fprintf(fr_log_fp, "} # server %s\n", fake->server);
		RDEBUG("Got SoH reply");
		debug_pair_list(fake->reply->vps);

		if (fake->reply->code != PW_AUTHENTICATION_ACK) {
			RDEBUG2("SoH was rejected");


-James


--
James J J Hooper
Network Specialist
Information Services
University of Bristol
http://www.wireless.bristol.ac.uk 	 	http://www.jamesjj.net
--