RE: Bug in CUI generation? Is this a known issue?

2013-05-14 Thread stefan.paetow
list Subject: Re: Bug in CUI generation? Is this a known issue? Matthew Newton wrote: Bug. src/main/xlat.c:1077 has: if (isdigit(l[1])) break; which stops looking for a module_name (e.g. md5 if the first character after the : is a digit. Yeah... that's hard to fix in 2.x. The code

Re: Bug in CUI generation? Is this a known issue?

2013-05-13 Thread Alan DeKok
Matthew Newton wrote: Bug. src/main/xlat.c:1077 has: if (isdigit(l[1])) break; which stops looking for a module_name (e.g. md5 if the first character after the : is a digit. Yeah... that's hard to fix in 2.x. The code is rich in material plants like. (If you get my drift) Fixed

Bug in CUI generation? Is this a known issue?

2013-05-10 Thread stefan.paetow
I'm playing around with CUI generation with FreeRADIUS 2.2.0 and discovered something odd. In policy.conf I've set cui_require_operator_name = 1 and cui_hash_key = 4c2982f2f3b1dc4804994cf386db8c0a34d4ab2a. As you can see it's a 32-character string and it looks like a hash. In radiusd -X

Re: Bug in CUI generation? Is this a known issue?

2013-05-10 Thread A . L . M . Buxey
Hi, rad_recv: Access-Request packet from host 192.168.126.155 port 1814, id=17, length=113 User-Name = st...@diamond.ac.uk User-Password = testing NAS-IP-Address = 127.0.0.1 NAS-Port = 0

RE: Bug in CUI generation? Is this a known issue?

2013-05-10 Thread stefan.paetow
] On Behalf Of a.l.m.bu...@lboro.ac.uk Sent: 10 May 2013 11:00 To: FreeRadius users mailing list Subject: Re: Bug in CUI generation? Is this a known issue? Hi, rad_recv: Access-Request packet from host 192.168.126.155 port 1814, id=17, length=113 User-Name = st

Re: Bug in CUI generation? Is this a known issue?

2013-05-10 Thread Matthew Newton
characters in length (abcdef as an example), or a non-hex string of any length, it works ok. So I'm guessing here that if the cui_hash_key happens to be a string that is a potentially valid MD5 hash, the md5 operator in the CUI generation statement does nothing or barfs. Bug. src/main/xlat.c:1077

Re: Bug in CUI generation? Is this a known issue?

2013-05-10 Thread Phil Mayers
or barfs. Bug. src/main/xlat.c:1077 has: if (isdigit(l[1])) break; which stops looking for a module_name (e.g. md5 if the first character after the : is a digit. Fixed in 3.0 (see 4fd62ce9 22 August 2012). I think it's fixed in 2.2 head as well? IIRC leaving a after the : works fine

RE: Bug in CUI generation? Is this a known issue?

2013-05-10 Thread stefan.paetow
mailing list Subject: Re: Bug in CUI generation? Is this a known issue? Hi, On Fri, May 10, 2013 at 09:49:14AM +, stefan.pae...@diamond.ac.uk wrote: As you can see, the expand: bit shows an empty value. Then I changed my cui_hash_key to 01234567890abcdef01234567890abcdef and it did

Re: Bug/Enhancement request: Race condition with short-term accounting (FreeRadius 2.1.10)

2012-08-29 Thread Alan DeKok
Matthias Nagel wrote: This is correct, if one has some kind of key to identify a session that could be used as a database index. But unfortunately there are a lot of authenticators out there, that do not correctly generate radius accounting session ids. Basicly I see three different types

Re: Bug/Enhancement request: Race condition with short-term accounting (FreeRadius 2.1.10)

2012-08-29 Thread Phil Mayers
On 08/28/2012 05:26 PM, Matthias Nagel wrote: is incomplete, i.e. it only has as start time. The latter never will be completed, because the stop message has already been processed and acknowledged to the authenticator. Aside from anything else - you need to handle this case. Accounting is

Bug/Enhancement request: Race condition with short-term accounting (FreeRadius 2.1.10)

2012-08-28 Thread Matthias Nagel
Hello everybody, if two accounting messages for the same session are sent by the authenticator very quickly, the messages may be processed by the radius server in the wrong order. This results into two sessions being accounted instead of one. The second phantom session stays open for ever,

Re: Bug/Enhancement request: Race condition with short-term accounting (FreeRadius 2.1.10)

2012-08-28 Thread Alan DeKok
Matthias Nagel wrote: if two accounting messages for the same session are sent by the authenticator very quickly, the messages may be processed by the radius server in the wrong order. This results into two sessions being accounted instead of one. The second phantom session stays open for

Re: Bug/Enhancement request: Race condition with short-term accounting (FreeRadius 2.1.10)

2012-08-28 Thread Fajar A. Nugraha
On Wed, Aug 29, 2012 at 4:11 AM, Alan DeKok al...@deployingradius.com wrote: Matthias Nagel wrote: 5) Thread #2 terminates first and the accounting stop message is written to the PostgreSQL database. The SQL UPDATE statement fails, because there is no entry for this session that could be

Re: Bug/Enhancement request: Race condition with short-term accounting (FreeRadius 2.1.10)

2012-08-28 Thread Matthias Nagel
Hello, Am Dienstag 28 August 2012, 23:11:57 schrieb Alan DeKok: Matthias Nagel wrote: if two accounting messages for the same session are sent by the authenticator very quickly, the messages may be processed by the radius server in the wrong order. This results into two sessions being

Re: Bug/Enhancement request: Race condition with short-term accounting (FreeRadius 2.1.10)

2012-08-28 Thread Arran Cudbard-Bell
Yes yes RADIUS vendors should go die in a big fiery pit somewhere. 1) Verify your NAS supports the Class attribute correctly (http://www.ietf.org/rfc/rfc2865.txt 5.25) 2) Implement the policies in raddb/policy.d/accounting (master:HEAD) 3) Submit patch to add unique index constraint on

Re: Bug/Enhancement request: Race condition with short-term accounting (FreeRadius 2.1.10)

2012-08-28 Thread Arran Cudbard-Bell
On 28 Aug 2012, at 23:05, Matthias Nagel matthias.h.na...@gmail.com wrote: Hello, Am Dienstag 28 August 2012, 23:11:57 schrieb Alan DeKok: Matthias Nagel wrote: if two accounting messages for the same session are sent by the authenticator very quickly, the messages may be processed by

Re: using windows 8's builtin eap-ttls... Windows 8 bug

2012-04-19 Thread Matthew Newton
. Really nice to see more options than just PEAP at last :-) There seems to be a bug in the Windows 8 TTLS ACK, which means that EAP-TTLS/MS-CHAPv2 doesn't work (EAP-TTLS/MSCHAP and EAP-TTLS/EAP-MSCHAP-V2 are OK). Having received an Access-Accept from the inner tunnel (after the mschap module

Re: using windows 8's builtin eap-ttls... Windows 8 bug

2012-04-19 Thread alan buxey
Hi, We've been digging into this a bit more and testing the TTLS support with Windows 8. Really nice to see more options than just PEAP at last :-) thanks for the further testing/verification Matthew :-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Possible bug in rlm_sqlcounter examples

2012-02-22 Thread Phil Mayers
On 02/21/2012 11:04 PM, Tim White wrote: Following on from my previous email, I've checked an x86 machine as well, and get the same behaviour. I should hope so; SQL is not architecture specific! Your original solution was correct as far as I could see; if there's any chance a column might be

Re: Possible bug in rlm_sqlcounter examples

2012-02-21 Thread Tim White
Following on from my previous email, I've checked an x86 machine as well, and get the same behaviour. Debug logs follow, the first being the initial login for the day, showing sqlcounter not finding an integer and hence returning noop. The second being after an initial login where a correct

Possible bug in rlm_sqlcounter examples

2012-02-20 Thread Tim White
Hi All. I am using the following SQL in sqlcounter for a MySQL database in the Grase Hotspot project, as part of daily/hourly/monthly counters. query = SELECT SUM(acctsessiontime - \ GREATEST((%b - UNIX_TIMESTAMP(acctstarttime)), 0)) \ FROM radacct

Re: FreeRADIUS 2.1.12 rlm_sqlcounter bug?

2011-12-17 Thread Alan DeKok
ben beneke wrote: rlm_expr doesn't seem to have extensive documentation, nor was I able to find an example similar to what I want to achieve. It does math. That's it. However, if I understand everything correctly, my solution would be something like the following: rlm_expr is needed to

Re: FreeRADIUS 2.1.12 rlm_sqlcounter bug?

2011-12-16 Thread Alan DeKok
ben beneke wrote: I am using FreeRADIUS Version 2.1.12, for host i686-pc-linux-gnu, built on Dec 6 2011 at 19:51:34, and I'd like to set up a quota using rlm_sqlcounter. However, the quota I'd like to use is over 4GB and the module will than overflow, not allowing a user who still has quota

Re: FreeRADIUS 2.1.12 rlm_sqlcounter bug?

2011-12-16 Thread ben beneke
On Fri, Dec 16, 2011 at 3:04 PM, Alan DeKok al...@deployingradius.com wrote: ben beneke wrote: I am using FreeRADIUS Version 2.1.12, for host i686-pc-linux-gnu, built on Dec 6 2011 at 19:51:34, and I'd like to set up a quota using rlm_sqlcounter. However, the quota I'd like to use is over 4GB

BUG: radwtmp and system 'last' command

2011-12-04 Thread Коньков Евгений
Hi, Freeradius-users. man radlast ... radlast is a frontend for the systems last command but in last versions of FreeBSD the 'last' command have change format and now radwtmp log file can not be readed by radlast command because of NEW system LAST do not understand old format ( Is there any

Re: BUG: radwtmp and system 'last' command

2011-12-04 Thread Alan DeKok
Коньков Евгений wrote: but in last versions of FreeBSD the 'last' command have change format and now radwtmp log file can not be readed by radlast command because of NEW system LAST do not understand old format ( Is there any workaround about this? Try the git v2.1.x branch. There was a

Re: 2.1.12 bug/change in behaviour - un-named server {} blocks no longer work?

2011-09-30 Thread Fred MAISON
Ho Phil, Could you explain the interest of un-named server ? Best regards, Fred - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 2.1.12 bug/change in behaviour - un-named server {} blocks no longer work?

2011-09-30 Thread Alan DeKok
Fred MAISON wrote: Ho Phil, Could you explain the interest of un-named server ? The authorize, etc. sections should really be inside of a server block. It will make future functionality easier to add. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: 2.1.12 bug/change in behaviour - un-named server {} blocks no longer work?

2011-09-30 Thread Arran Cudbard-Bell
On 30 Sep 2011, at 07:58, Fred MAISON wrote: Ho Phil, Could you explain the interest of un-named server ? It's the default server for anything in clients.conf and the listen section in radiusd.conf. It's mainly in there for backwards compatibility... -Arran Arran Cudbard-Bell

Re: 2.1.12 bug/change in behaviour - un-named server {} blocks no longer work?

2011-09-29 Thread Alan DeKok
Phil Mayers wrote: 2.1.12 seems to not process this config; it seems to completely ignore the un-named virtual server config: Hmm.. OK ...and thus nothing works. AFAICT this is a change from 2.1.10/11 (although I was always running a pre-release i.e. a known-good commit) Weird...

2.1.12 bug/change in behaviour - un-named server {} blocks no longer work?

2011-09-27 Thread Phil Mayers
All, For a long time, I have had a config with this: sites-enabled/foo: listen { ... } server { authorize { .. } } sites-enabled/oldfoo: client xxx { virtual_server = oldfoo } server oldfoo { authorize { .. } } That is, an un-named virtual server {} block with the config

rlm_detail issue (bug report + patch).

2011-05-18 Thread Konstantin Chekushin
I think, this module needs a little patch. This will prevent uncontrolled situation, when no space left on device. At this moment, if there are no space left, then rlm_detail doesn't return any error, when he cannot flush buffered information to the file. Client continue sending accounting

Bug in proxy code with IPv6?

2011-05-11 Thread Stefan Winter
Hello, this is about 2.1.10. In my proxy.conf, I have two clauses for a host ( see [1] and [2] below), once with ipaddr for IPv4 and once with ipv6addr for IPv6. If I set the pool to use the IPv4 one (see [3]) , packets get proxied just fine. If I replace with IPv6, no packet leaves the server

Re: Bug in proxy code with IPv6?

2011-05-11 Thread Alan DeKok
Stefan Winter wrote: As soon as I change the proxy pool definition back to the v4 variant, things start working again. That's a bit strange... Bug #143, fixed in the v2.1.x branch. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Bug in proxy code with IPv6?

2011-05-11 Thread Stefan Winter
Hi, That's a bit strange... Bug #143, fixed in the v2.1.x branch. Cool! Looking forward to 2.1.11... Stefan Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau

Re: Bug in proxy code with IPv6?

2011-05-11 Thread Alan Buxey
Hi, this is about 2.1.10. In my proxy.conf, I have two clauses for a host ( see [1] and [2] below), once with ipaddr for IPv4 and once with ipv6addr for IPv6. I was going to be reporting the same thing - however, I've delayed since I could only see this behaviour on a VM system so wasnt sure

Re: Bug in proxy code with IPv6?

2011-05-11 Thread Stefan Winter
Hi, I was going to be reporting the same thing - however, I've delayed since I could only see this behaviour on a VM system so wasnt sure it wasnt a VMWare issue (random UDP thing) - as, the exact same code (2.1.8 through to 2.1.10) on a real physical server didnt show this behaviour.

Re: Multiple ldaps (SSL) backends and only the first queried works.?Possible bug?

2011-05-04 Thread Daniele Albrizio
request fails with TLS: peer cert untrusted or revoked (0x42) but it is configured correctly. I suspect this could be a bug in the way multiple CA cert attribute of subsequent requests are handled in freeradius code. You probably will find if you change those tls 'demands' to 'never' things work

Re: Multiple ldaps (SSL) backends and only the first queried works.?Possible bug?

2011-05-04 Thread Phil Mayers
to the other ldap server. This Nth request fails with TLS: peer cert untrusted or revoked (0x42) but it is configured correctly. I suspect this could be a bug in the way multiple CA cert attribute of subsequent requests are handled in freeradius code. FreeRADIUS just calls: ldap_set_option( NULL

Re: Multiple ldaps (SSL) backends and only the first queried works.?Possible bug?

2011-05-04 Thread Tanjil Ahmed
Hi all is there anybody can tell me why my mikrotik ppp user sometimes authenticate fail on free radius? how to fix it? after few mins it will be oke... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple ldaps (SSL) backends and only the first queried works.?Possible bug?

2011-05-04 Thread Phil Mayers
On 05/04/2011 08:46 PM, Tanjil Ahmed wrote: Hi all is there anybody can tell me why my mikrotik ppp user sometimes authenticate fail on free radius? Please don't hijack an existing thread. Start a new one. how to fix it? after few mins it will be oke... You need to give us more

Multiple ldaps (SSL) backends and only the first queried works. Possible bug?

2011-05-03 Thread Daniele Albrizio
I've two ldaps backends instantiated like: authorize { ... Autz-Type OPENLDAP { openldap } Autz-Type ADLDAP { adldap } ... } authenticate { ... Auth-Type OPENLDAP { openldap } Auth-Type ADLDAP

Re: Multiple ldaps (SSL) backends and only the first queried works. Possible bug?

2011-05-03 Thread Daniele Albrizio
On 03/05/11 19:00, Daniele Albrizio wrote: I've two ldaps backends instantiated like: Forgot... Using compiled freeradius-server-2.1.10 on Debian GNU/Linux 6.0 -- Daniele ALBRIZIO - albri...@univ.trieste.it Tel. +39-040.558.3319 UNIVERSITY OF TRIESTE - Network Services

Re: Multiple ldaps (SSL) backends and only the first queried works.?Possible bug?

2011-05-03 Thread Alexander Clouter
Daniele Albrizio albri...@univ.trieste.it wrote: I suspect the cacertfile attribute is not correctly re-instantiated and only the value of the first request is used to check against when instantiating a new ldaps connection. Without a doubt the chaining is not working on your LDAP servers.

Radius bug?

2011-04-22 Thread duhvir
handled (17) There was no response configured: rejecting request (17) Using Post-Auth-Type Reject ... reject and it's all over ... Main error is: There was no response configured: rejecting request. With that config on 2.1.10 in FreeBSD reps no such error, but there is 118 bug with eap

Re: bug

2011-04-05 Thread Alan DeKok
Rtz Poknat wrote: I deleted an entry in the database , yet it returns,, and session time is 59000 seconds. i check the openvpn server but no user is connected and it is continously updating the last update in sql table. also, even if i turn off the NAS,, the entry still updates by itself.. (a

bug

2011-04-04 Thread Rtz Poknat
hello. I deleted an entry in the database , yet it returns,, and session time is 59000 seconds. i check the openvpn server but no user is connected and it is continously updating the last update in sql table. also, even if i turn off the NAS,, the entry still updates by itself.. (a ghost??)

Re: bug

2011-04-04 Thread Alan Buxey
hi, turn on sqltrace and turn on tcpdump - you will find what is causing it alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FR 2.1.11git, Dead home server status server reply - possible minor bug

2010-10-25 Thread Alan DeKok
James J J Hooper wrote: The date (Time-Of-Death) seems a little odd. I poked around in the code and got as far as the below, which looks possibly wrong, but I don't understand C enough to work out what to do with it from the surrounding code: You're right. It's a pretty simple typo.

FR 2.1.11git, Dead home server status server reply - possible minor bug

2010-10-24 Thread James J J Hooper
Hi Alan et al, {Running FR from GIT upto commit b42665d4475835f38fe71ef749e39cd22587bcfa, Sat Oct 9 17:52} Doing: /bin/echo Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 131, FreeRADIUS-Stats-Server-IP-Address = ., FreeRADIUS-Stats-Server-Port = 1812 |

Samba Bug #6563

2010-08-02 Thread Colantuoni, Robert
ntlm_auth returns an invalid NT_KEY. I believe this issue has been open for about 2 years and hasn't moved much in the Samba bug list: https://bugzilla.samba.org/show_bug.cgi?id=6563 A committer named Volker Lendecke suggested that the source was SamLogonEx... by using SamLogon instead, you can

RE: Samba Bug #6563

2010-08-02 Thread Sallee, Stephen (Jake)
-bounces+jake.sallee=umhb@lists.freeradius.o rg] On Behalf Of Colantuoni, Robert Sent: Monday, August 02, 2010 12:16 PM To: freeradius-users@lists.freeradius.org Subject: Samba Bug #6563 Our AD team recently upgraded their servers from Windows 2003 to 2008 and broke the Samba 3.0.34 installation we

Bug #17 (MS-CHAP user names)

2010-07-27 Thread Alan DeKok
I've had a chance to look at the final set of patches for bug #17. This is the bug where the supplicant sends Name for EAP-Identity, but uses name for the EAP-MSCHAPv2 calculations. I've done some minor editing to the patches, and put them into the code for 2.1.10. Thanks to Neal Garber

RE: Bug #17 (MS-CHAP user names)

2010-07-27 Thread Garber, Neal
I've done some minor editing to the patches, and put them into the code for 2.1.10. I just downloaded and installed 2.1.10 on my test server. So far, everything looks good. Thank you Alan. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

bug in 'man radiusd'

2010-05-06 Thread Коньков Евгений
Hi, FreeRadius. -X Debugging mode. Equivalent to -sfxx -l stdout but man does not descrite -l option at all. -- mailto:kes-...@yandex.ru - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: bug in 'man radiusd'

2010-05-06 Thread kes-kes
Hi, FreeRadius. -X Debugging mode. Equivalent to -sfxx -l stdout but man does not describe -l option at all. -- mailto:kes-...@yandex.ru - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: DHCP Sending NAK in reply to Discover (BUG)

2010-04-07 Thread Alan DeKok
Fixed, thanks. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

DHCP Sending NAK in reply to Discover (BUG)

2010-04-06 Thread sergey
--- dhcpd.c.old2010-04-06 12:35:28.0 +0300 +++ dhcpd.c2010-04-06 12:55:43.0 +0300 @@ -150,7 +150,11 @@ case RLM_MODULE_INVALID: case RLM_MODULE_NOOP: case RLM_MODULE_NOTFOUND: -request-reply-code = PW_DHCP_NAK; +if (request-packet-code ==

Bug fixes on v2.1.8

2010-03-27 Thread Sergio
Hi people, and developers, i can see that you finally fixed a bug that i and others like me mentioned at this forum at least one year ago. I'm glad to see it :) To be precise, i'm talking about the fix that sign client certificates with CA, rather than server certs. And here i was, talking

BUG: 2.1.8

2010-01-08 Thread Коньков Евгений
Hi After installing FreeRadius 2.1.8 in 'sites-enabled' I notice new enables site: 'control-socket' In its header I have read: # For now, anyone who has permission to connect to the socket # has nearly complete control over the server. Be warned! # # This functionality is NOT

Re: BUG: 2.1.8

2010-01-08 Thread Alan DeKok
Коньков Евгений wrote: Hi After installing FreeRadius 2.1.8 in 'sites-enabled' I notice new enables site: 'control-socket' ... I think you must remove that from 'sites-enables' The default is to permit read operations only. i.e. the control socket cannot be used to *change* anything.

libtool/libltdl bug

2009-12-20 Thread Peter O'Gorman
Hi, We received a bug report about libltdl, but there is not really enough information to diagnose the problem, perhaps someone here would be able to provide us with the reasoning of why this is a bug in ltdl. http://lists.gnu.org/archive/html/bug-libtool/2009-12/msg00028.html Note that I am

Re: libtool/libltdl bug

2009-12-20 Thread Alan DeKok
Peter O'Gorman wrote: We received a bug report about libltdl, but there is not really enough information to diagnose the problem, perhaps someone here would be able to provide us with the reasoning of why this is a bug in ltdl. http://lists.gnu.org/archive/html/bug-libtool/2009-12/msg00028

Re: bug in rlm_ldap authorization password handling?

2009-11-17 Thread Alan DeKok
, PW_NT_PASSWORD, etc.) But if and only if the password value returned is prepended with {type}, if it isn't prepended then it skips the password attribute rather than using the *default* of PW_CLEARTEXT_PASSWORD. That's arguably a bug. But a bug in a feature that no one should use, and will be deleted

bug in rlm_ldap authorization password handling?

2009-11-16 Thread John Dennis
I'm a little confused by how rlm_ldap is handing passwords. First let me state what I believe to be true, if I'm wrong on any of these assumptions please correct me. Authentication modules need access to either the cleartext password or hashed password, it is the role of the authorization

Re: bug in rlm_ldap authorization password handling?

2009-11-16 Thread tnt
I'm a little confused by how rlm_ldap is handing passwords. First let me state what I believe to be true, if I'm wrong on any of these assumptions please correct me. They are, sort of, correct. Or am I just missing something? You are looking at rlm_ldap in isolation. rlm_pap will handle

Update on MS-CHAP Authentication / Bug 17

2009-10-06 Thread Garber, Neal
Here's some feedback I received (off-list) regarding the patch for bug 17.. I received an E-mail from someone experiencing the userid case sensitivity issue with EAP/MS-CHAPv2 in FR. He applied the patch attached to bug 17 and confirmed that it fixed the problem for him. I too have the patch

Re: Update on MS-CHAP Authentication / Bug 17

2009-10-06 Thread Alan DeKok
Garber, Neal wrote: Here's some feedback I received (off-list) regarding the patch for bug 17.. I received an E-mail from someone experiencing the userid case sensitivity issue with EAP/MS-CHAPv2 in FR. He applied the patch attached to bug 17 and confirmed that it fixed the problem

Re: Bug in create-users.pl

2009-10-02 Thread Alan DeKok
Jens Link wrote: just one quick question: Michael Schwartzkopff reported a bug in create-users.pl in Febuary 2009. As I'm just preparing a presentation on freeRADIUS I noticed that this still isn't fixed. Any plans on when it will be fixed? I can commit a patch. The script is used only

Bug in create-users.pl

2009-10-01 Thread Jens Link
Hi all, just one quick question: Michael Schwartzkopff reported a bug in create-users.pl in Febuary 2009. As I'm just preparing a presentation on freeRADIUS I noticed that this still isn't fixed. Any plans on when it will be fixed? Jens

Re: DHCP routing bug (FreeRadius DHCP reply to Default Gateway)

2009-09-29 Thread Alan DeKok
Pavel Malev wrote: After authorization Freeradius send reply to Default Gateway(!), not to clinet: [tcpdump] 02:28:25.766341 00:30:4f:21:b4:73 00:30:48:35:31:32, ethertype IPv4 (0x0800), length 342: 192.168.2.252.67 255.255.255.255.68: BOOTP/DHCP, Reply, length: 300 Hmm... I thought

DHCP routing bug (FreeRadius DHCP reply to Default Gateway)

2009-09-27 Thread Pavel Malev
Hello! I have Freeradius 2.1.6 on freebsd6.2. Freebsd have Default Gateway: DestinationGatewayFlagsRefs Use Netif Expire default192.168.2.150 UGS 0 7922rl1 Default Gateway have mac-address: ? (192.168.2.150) at 00:30:48:35:31:32 on

MS-CHAP Authentication / Bug 17

2009-09-21 Thread Garber, Neal
I've been running 2.1.6 in Production with the patch from Bug 17, for a month, and everything has been working fine. As a reminder, this patch corrects a bug in MS-CHAP with the calculation of the MS-CHAPv1 challenge passed to ntlm_auth. It causes inappropriate Logon Failure errors

Re: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Alan Buxey
Hi, has a look at this but it's only of interest for classic MS-CHAP activity rather than MSCHAPv2 in PEAP or TTLS - correct? (in this case we wouldnt use this function or be able to test this at our site...but logically it all looks sane) a few changes though (?) - its 'delimiter', not

Re: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Johan Meiring
Alan Buxey wrote: Hi, has a look at this but it's only of interest for classic MS-CHAP activity rather than MSCHAPv2 in PEAP or TTLS - correct? (in this case we wouldnt use this function or be able to test this at our site...but logically it all looks sane) a few changes though (?) - its

RE: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Garber, Neal
Alan, Thank you for taking the time to review the patch and for your feedback. has a look at this but it's only of interest for classic MS-CHAP activity rather than MSCHAPv2 in PEAP or TTLS - correct? (in this case we wouldnt use this function or be able to test this at our site...but

Re: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Alan Buxey
Hi, a few changes though (?) - its 'delimiter', not 'delimeter' ;-) and...some RDEBUG2 starts with a white space and others print tight to the line - reason for such differences? http://www.googlefight.com/index.php?lang=en_GBword1=delimiterword2=delimeter your point is? (I win the

Re: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Alan Buxey
Hi, Actually, the problem definitely impacts PEAP/MSCHAPv2 (and I believe TTLS/MSCHAPv2 also because it's an error in MS-CHAP, but we don't use TTLS so I can't test that). (I haven't thought about it enough to know whether it affects v1, but it definitely occurs with v2 as that's where I

RE: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Garber, Neal
hmm, okay - I'll only be able to introduce core systrems with this patch in place after 2nd October - we currently have a change freeze on main systems until then That's fabulous. Thanks for your time and willingness to test. - List info/subscribe/unsubscribe? See

RE: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Garber, Neal
google search for 'define:delimeter' Did you mean: define:delimiter Top 2 results shown :-) You are clearly correct given the root of the word delimiter is delimit (not delimet) :-) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Johan Meiring
Alan Buxey wrote: Hi, a few changes though (?) - its 'delimiter', not 'delimeter' ;-) and...some RDEBUG2 starts with a white space and others print tight to the line - reason for such differences? http://www.googlefight.com/index.php?lang=en_GBword1=delimiterword2=delimeter your point

Re: MS-CHAP Authentication / Bug 17

2009-09-21 Thread Alan Buxey
Hi, http://www.googlefight.com/index.php?lang=en_GBword1=delimiterword2=delimeter your point is? (I win the fight ;-) ) Oops I (like an idiot) read you comment the wrong way around! 8-) thats okay - I've got a useful URL to settle arguments with now - thanks! :-) alan - List

Re: Possible bug in rlm_perl

2009-04-21 Thread tnt
I think I may have found a bug in rlm_perl? No, you broke it. #The following line cleans two of the slashes \\ out of the user-name before we return from the #perl module. These two slashes get added in. I'm not sure how or why

Re: Possible bug in rlm_perl

2009-04-21 Thread Josh Hiner
On Apr 21, 2009, at 5:21 AM, t...@kalik.net wrote: I think I may have found a bug in rlm_perl? No, you broke it. #The following line cleans two of the slashes \\ out of the user-name before we return from the #perl module. These two slashes get

Re: Possible bug in rlm_perl

2009-04-21 Thread A . L . M . Buxey
Hi, Ok, but if I do not filter out the extra slashes then after the perl module returns, freeradius gives the error that the User-Name field does not match the peap identity. Then it shows the User-Name with too many slashes (four slashes). If, in my perl module, I filter out two slashes

Possible bug in rlm_perl

2009-04-20 Thread Josh Hiner
I think I may have found a bug in rlm_perl? I have written script with the aid of another freeradius list member that checks to see if a user is in a certain samba windows group. If they are not in the group (the wireless group) the module rejects the login. The module works perfectly except

Re: Possible bug in rlm_perl

2009-04-20 Thread Josh Hiner
Josh Hiner wrote: I think I may have found a bug in rlm_perl? I have written script with the aid of another freeradius list member that checks to see if a user is in a certain samba windows group. If they are not in the group (the wireless group) the module rejects the login. The module works

Poll: Bug reporting system

2009-04-14 Thread Alan DeKok
Due to a HD loss, bugs.freeradius.org is down, and won't be coming back. Unfortunately, this means a loss of patches, reports, user accounts, etc. Before we put another bug system online, we would like to ask for your input. Which bug reporting system do you use? Which one do you prefer

Re: Poll: Bug reporting system

2009-04-14 Thread Michael Schwartzkopff
On Tuesday 14 April 2009 19:42:17 Alan DeKok wrote: Due to a HD loss, bugs.freeradius.org is down, and won't be coming back. Unfortunately, this means a loss of patches, reports, user accounts, etc. Before we put another bug system online, we would like to ask for your input. Which

Re: Poll: Bug reporting system

2009-04-14 Thread Michael Schwartzkopff
another bug system online, we would like to ask for your input. Which bug reporting system do you use? Which one do you prefer? Which ones are horrible, and shouldn't be considered? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Poll: Bug reporting system

2009-04-14 Thread phil lemelin
Personnaly, I like the simplicity of TRAC. Easy to install, easy to maintain et does the job quite well. The integration with subversion makes it very interesting. It seems it also supports GIT. If it works like subversion, the integration is very intersting since you can link code with tickets.

Re: Poll: Bug reporting system

2009-04-14 Thread Arran Cudbard-Bell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 phil lemelin wrote: Personnaly, I like the simplicity of TRAC. Easy to install, easy to maintain et does the job quite well. The integration with subversion makes it very interesting. It seems it also supports GIT. If it works like subversion,

Re: Poll: Bug reporting system

2009-04-14 Thread Alexander Clouter
Alan DeKok al...@deployingradius.com wrote: Due to a HD loss, bugs.freeradius.org is down, and won't be coming back. Unfortunately, this means a loss of patches, reports, user accounts, etc. Before we put another bug system online, we would like to ask for your input. Which bug

Bug in create-users.pl

2009-02-07 Thread Michael Schwartzkopff
Hi, First of all: Sorry that I post the bug report here and not in bugs.freeradius.org, but that site doen't seem to answer. create-users.pl create a users file of the form: username Cleartext-Password := some string Class=0x0 where Class counts from 0x0 on. When I include

Re: Bug in create-users.pl

2009-02-07 Thread Michael Schwartzkopff
Michael Schwartzkopff schrieb: Hi, First of all: Sorry that I post the bug report here and not in bugs.freeradius.org, but that site doen't seem to answer. create-users.pl create a users file of the form: username Cleartext-Password := some string Class=0x0 where Class counts from

Re: Bug in checkrad.pl

2009-01-18 Thread Alan DeKok
Rick Macdougall wrote: I believe the redback_telnet in checkrad.pl has a small bug. Thanks. I've committed a fix. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Bug in checkrad.pl

2009-01-16 Thread Rick Macdougall
Hi, I believe the redback_telnet in checkrad.pl has a small bug. Original code starting at line 1338 #Ask the question @lines = $t-cmd(String = show subscribers active $us...@$context); if ($lines[0] =~ /subscriber $us...@$context/ ) { Should be #Ask the question @lines = $t-cmd

Regular expressions on module 'files' (possible bug?)

2009-01-10 Thread Flamur Rogova
Hi, On 'users' file I have this entry; b2 User-Password := b2, Calling-Station-ID =~ (00:10:B5:7A:13:BD), Expiration := 28 Feb 2009 23:00:00 this entry should match only if Calling-Station-Id equals to 00:10:B5:7A:13:BD. on my case, it matches always, no matter what I send as

Re: Regular expressions on module 'files' (possible bug?)

2009-01-10 Thread Alexander Clouter
Flamur Rogova fla...@ipko.net wrote: On 'users' file I have this entry; b2 User-Password := b2, Calling-Station-ID =~ (00:10:B5:7A:13:BD), Expiration := 28 Feb 2009 23:00:00 Should this not be: b2 Calling-Station-Id = 00:10:B5:7A:13:B, Cleartext-Password := b2

Re: Space after exec module - is it a bug?

2008-12-15 Thread Phil Mayers
Lech Karol Pawłaszek wrote: Hello. I've encountered a weird problem. Tested on the newest stable (2.1.3) too. Well it's not a problem anymore since I found out a way to make my unlangish things work but: I wanted to check some things in post-auth. I am passing some arguments to my script and I

  1   2   3   4   >