Re: Last call for 2.1.10

2010-09-24 Thread Stefan Winter
Hi, compiled and runs on a test server (but no real traffic load). One thing has changed from recently: on my openSUSE 11.2 i586 previously, I had to compile ---with-system-libtool, and *not using that* would break the build. Now, it's vice versa: --with-system-libtool breaks, and without

Re: Last call for 2.1.10

2010-09-24 Thread Alan DeKok
Stefan Winter wrote: One thing has changed from recently: on my openSUSE 11.2 i586 previously, I had to compile ---with-system-libtool, and *not using that* would break the build. Now, it's vice versa: --with-system-libtool breaks, and without it, stuff works. Yes... I changed it so that

Re: Last call for 2.1.10

2010-09-24 Thread Alan Buxey
Hi, The only bug here is that the server should complain if you have two instances of the same module defined. That would prevent the server from starting in this case, and highlight the fact that the configuration is wrong. that would be the obvious and ideal way to deal with

Re: Last call for 2.1.10

2010-09-24 Thread Alexander Clouter
Alan DeKok al...@deployingradius.com wrote: If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. Is it worth tweaking the eap.conf comment so that it is explicitly mentioned that for session resumption to work sensibly for TTLS/PEAP that

Re: Last call for 2.1.10

2010-09-24 Thread Alan DeKok
Alexander Clouter wrote: Alan DeKok al...@deployingradius.com wrote: If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. Is it worth tweaking the eap.conf comment so that it is explicitly mentioned that for session resumption to work sensibly for TTLS/PEAP

Re: Last call for 2.1.10

2010-09-24 Thread Alan DeKok
Alan Buxey wrote: Hi, The only bug here is that the server should complain if you have two instances of the same module defined. That would prevent the server from starting in this case, and highlight the fact that the configuration is wrong. that would be the obvious and ideal way to

Re: Last call for 2.1.10

2010-09-23 Thread Johan Meiring
On 2010/09/22 03:15 PM, Alan DeKok wrote: I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. Would be nice to remove +git from debian/changelog -- Johan Meiring Cape PC Services

Re: Last call for 2.1.10

2010-09-23 Thread Alan DeKok
John Horne wrote: We also have the file /etc/raddb/modules-local/attr_filter which contains: Have you *deleted* the default configuration for the attr_filter.post-proxy module? If not, you have *two* copies of the module configuration. That's why it's having issues. It picks on the first

Re: Last call for 2.1.10

2010-09-23 Thread John Horne
On Thu, 2010-09-23 at 12:05 +0200, Alan DeKok wrote: John Horne wrote: So, I guess the question is why is freeradius reloading the post-proxy filter a second time after the HUP? The question is why do you have two configurations for the same module? The only bug here is that the

Re: Last call for 2.1.10

2010-09-23 Thread John Dennis
I just noticed the redhat/freeradius.spec file wasn't fully updated in 2.1.0. It was missing the dynamic_clients and opendirectory modules in the %files section. Also the release tag was left at 2 instead of being reset to 1. Attached is a patch, in addition to the above it adds the changelog

Re: Last call for 2.1.10

2010-09-23 Thread Alan DeKok
John Dennis wrote: I just noticed the redhat/freeradius.spec file wasn't fully updated in 2.1.0. It was missing the dynamic_clients and opendirectory modules in the %files section. Also the release tag was left at 2 instead of being reset to 1. Attached is a patch, in addition to the above it

Last call for 2.1.10

2010-09-22 Thread Alan DeKok
I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. The changelog is *extensive*. There are a large number of minor bugs fixed, and a lot of minor new features added. But the result

RE: Last call for 2.1.10

2010-09-22 Thread Garber, Neal
Last call for 2.1.10 I haven't had a chance to rework the patch for saving replies after a PEAP/TTLS reject (been very busy at work). I'll try to get to it today; but, I assume it's too late for 2.1.10 at this point, right? - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: Last call for 2.1.10

2010-09-22 Thread Alan DeKok
Garber, Neal wrote: Last call for 2.1.10 I haven't had a chance to rework the patch for saving replies after a PEAP/TTLS reject (been very busy at work). I'll try to get to it today; but, I assume it's too late for 2.1.10 at this point, right? I'll take a look... but 2.1.10 has been

Re: Last call for 2.1.10

2010-09-22 Thread Phil Mayers
On 22/09/10 14:15, Alan DeKok wrote: I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. Can we squeeze one quick VSA update into dictionary.extreme: ATTRIBUTE

Re: Last call for 2.1.10

2010-09-22 Thread Phil Mayers
On 22/09/10 15:14, Phil Mayers wrote: On 22/09/10 14:15, Alan DeKok wrote: I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. Can we squeeze one quick VSA update into

Re: Last call for 2.1.10

2010-09-22 Thread John Horne
On Wed, 2010-09-22 at 15:15 +0200, Alan DeKok wrote: I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. We have an issue but I am a little lost as to where things are going wrong. If I set the uid/gid and 'mode=rw' in

Re: Last call for 2.1.10

2010-09-22 Thread Alan DeKok
John Horne wrote: The problem seems to be that although the proxy server returns a 'Yes' reply (meaning the user is authenticated) What does that mean? There is no standard attribute to transport a Yes. Although this looks like a pppd problem, it only occurs after we have issued 'radmin

Re: Last call for 2.1.10

2010-09-22 Thread John Horne
On Wed, 2010-09-22 at 18:53 +0200, Alan DeKok wrote: John Horne wrote: The problem seems to be that although the proxy server returns a 'Yes' reply (meaning the user is authenticated) What does that mean? There is no standard attribute to transport a Yes. Sorry, the 'Yes' is just the

Re: Last call for 2.1.10

2010-09-22 Thread Bjørn Mork
Alan DeKok al...@deployingradius.com writes: I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. A little late into the game, but I just noticed this: bj...@nemi:~$ radclient -v

Re: Last call for 2.1.10

2010-09-22 Thread John Dennis
On 09/22/2010 09:15 AM, Alan DeKok wrote: I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. I verified 2.1.10 builds and produces an RPM. My apologies but I don't have time at the

Re: Last call for 2.1.10

2010-09-22 Thread John Horne
On Wed, 2010-09-22 at 18:02 +0100, John Horne wrote: The failed login has no MS-CHAP2-Success attribute being sent back. Okay. The problem is to do with attribute filtering, but that in turn seems to be caused by freeradius doing something unexpected when it receives the HUP. We define the

Re: Last call for 2.1.10

2010-08-12 Thread Stefan Winter
Hi, I've just tried to compile with my usual set of configure flags, and got: /usr/bin/libtool --mode=link gcc -o radeapclient radeapclient.lo libeap/libfreeradius-eap.la -lnsl -lresolv -lpthread -lcrypto -lssl -lcrypto libtool: link: gcc -o .libs/radeapclient .libs/radeapclient.o

Re: Last call for 2.1.10

2010-08-12 Thread Johan Meiring
On 2010/08/12 09:36 AM, Stefan Winter wrote: /root/freeradius-server-2.1.10-pre/src/lib/.libs/libfreeradius-radius.so -lnsl -lresolv -lpthread -lssl -lcrypto -Wl,-rpath -Wl,/usr/local/freeradius/2.1.10-pre/lib libeap/.libs/libfreeradius-eap.so: undefined reference to `radius_pairmake' collect2:

Re: Last call for 2.1.10

2010-08-12 Thread Alan DeKok
Stefan Winter wrote: libeap/.libs/libfreeradius-eap.so: undefined reference to `radius_pairmake' This was noted the other day. I committed a fix, and just pushed it back to the git repositories. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Last call for 2.1.10

2010-08-12 Thread Johan Meiring
On 2010/08/12 10:02 AM, Alan DeKok wrote: Stefan Winter wrote: libeap/.libs/libfreeradius-eap.so: undefined reference to `radius_pairmake' This was noted the other day. I committed a fix, and just pushed it back to the git repositories. I can confirm that it compiles on Debian Lenny

Re: Last call for 2.1.10

2010-08-12 Thread Stefan Winter
Hi, This was noted the other day. I committed a fix, and just pushed it back to the git repositories. Thanks. Re-pulled, compiled, installed, works with test requests. Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et