headers
Automatic cvs log generator | 1 Sep 2006 10:04

Automatic report from sources (radiusd) between 31.08.2006 - 01.09.2006 GMT

CVS log entries from 31.08.2006 (Thu) 08:00:01 - 01.09.2006 (Fri) 08:00:01 GMT
=====================================================
Summary by authors
=====================================================
Author: nbk
	File: radiusd/debian/freeradius.init; Revisions: 1.6

Author: pnixon
	File: radiusd/raddb/oraclesql.conf; Revisions: 1.9
	File: radiusd/raddb/sql/mssql-dialup.conf; Revisions: 1.1
	File: radiusd/raddb/sql/postgresql-voip-postpaid.conf; Revisions: 1.1
	File: radiusd/raddb/sql/postgresql-dialup.conf; Revisions: 1.1
	File: radiusd/raddb/mssql.conf; Revisions: 1.11
	File: radiusd/raddb/sql.conf; Revisions: 1.55, 1.54
	File: radiusd/raddb/radiusd.conf.in; Revisions: 1.234
	File: radiusd/raddb/sql/mysql-dialup.conf; Revisions: 1.1
	File: radiusd/raddb/sql/oracle-dialup.conf; Revisions: 1.1
	File: radiusd/raddb/pgsql-voip.conf; Revisions: 1.4
	File: radiusd/raddb/postgresql.conf; Revisions: 1.30

=====================================================
Combined list of identical log entries
=====================================================
Description:
Minor updates following reorganisation of the sql config files
Modified files:
	File: radiusd/raddb/radiusd.conf.in; Revision: 1.234;
	Date: 2006/08/31 22:21:12; Author: pnixon; Lines: (+2 -8)
	File: radiusd/raddb/sql.conf; Revision: 1.55;
	Date: 2006/08/31 22:21:12; Author: pnixon; Lines: (+5 -5)
(Continue reading)

Permalink | Reply | 0 comments |
headers
Peter Nixon | 1 Sep 2006 10:18
Gravatar

Re: Duplicate requests in a session

On Thu 31 Aug 2006 18:19, Guy Fraser wrote:
> On Thu, 2006-08-31 at 12:31 +0300, Peter Nixon wrote:
> > Good question. Does anyone have anything against changing this?
> >
> > -Peter
> >
> > On Thu 31 Aug 2006 10:11, Santiago Balaguer García wrote:
> > > Thanks James, I don't figure out to use primary key solves the problem
> > > of duplicate keys.
> > > I had in radacct as primary key <<radacctid>> but now I am going to
> > > have <<acctuniqueid>>.
> > >
> > > This proble cause a new thread: why radacctid is the primary key of
> > > radacct table instead od acctuniqueid?
>
> I used a slightly different solution in my PostgreSQL implementation :
>
> ALTER TABLE ONLY radacct
>     ADD CONSTRAINT radacct_unique_session UNIQUE (
>         username, nasipaddress, nasportid, acctsessionid
> );

After looking at this again, a unique constraint (or primary key) 
on "acctuniqueid" will give exactly the same behaviour as you have here with 
much lower load on the database. The default acct_unique looks like this:

acct_unique {
                key = "User-Name, Acct-Session-Id, NAS-IP-Address, 
Client-IP-Address, NAS-Port"
}
(Continue reading)

Permalink | Reply | 1 comment |
headers
Alan DeKok | 1 Sep 2006 10:51
Favicon
Gravatar

Re: Duplicate requests in a session

Peter Nixon <listuser <at> peternixon.net> wrote:
> Should we be trying to ensure unique records at runtime or should
> that be left to post processing?

  If the records are looked up by the server at runtime, they should
be made unique at runtime.

> I know than most people "expect" the records to be unique, but is that a
> realistic expectation? I have a pair of NAS in failover config (Rather large
> Ciscos running the absolute latest IOS technology release) which send the
> exact same values in every request:

  I know... it's a bit of a problem.

> Is that a good or a bad tradeoff? I am leaning towards good, but its
> pretty close to even money..

  I'm not sure.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog
Permalink | Reply | 0 comments |
headers
Carlos Parada | 1 Sep 2006 13:05
Picon
Favicon

EAP-AKA authentication support


Hi all,

I was looking for freeradius in order be able to authenticate using
EAP-AKA.
However, correct me if I am wrong, there is still no implementation for
that in
latest 1.1.3 released version.

Anybody knows if the EAP-AKA implementation is in the project roadmap?

Has anybody else interest on that issue?

Best Regards,
Carlos Parada
Permalink | Reply | 0 comments |
headers
Phaneuf, Brian | 1 Sep 2006 15:04

RE: EAP-AKA authentication support

I have just last week, implemented and submitted to an EAP-AKA
implementation to FreeRADIUS's bugzilla database as suggested to my Alan
DeKok.

http://bugs.freeradius.org/show_bug.cgi?id=386 

As I have never submitted code to FreeRADIUS before, I am unsure of what
the next step is.

-Brian

-----Original Message-----
From:
freeradius-devel-bounces+bphaneuf=reefpoint.com <at> lists.freeradius.org
[mailto:freeradius-devel-bounces+bphaneuf=reefpoint.com <at> lists.freeradius
.org] On Behalf Of Carlos Parada
Sent: Friday, September 01, 2006 7:05 AM
To: freeradius-devel <at> lists.freeradius.org
Subject: EAP-AKA authentication support

Hi all,

I was looking for freeradius in order be able to authenticate using
EAP-AKA.
However, correct me if I am wrong, there is still no implementation for
that in
latest 1.1.3 released version.

Anybody knows if the EAP-AKA implementation is in the project roadmap?
(Continue reading)

Permalink | Reply | 1 comment |
headers
Alan DeKok | 1 Sep 2006 16:20
Favicon
Gravatar

Re: EAP-AKA authentication support

"Phaneuf, Brian" <bphaneuf <at> reefpoint.com> wrote:
> As I have never submitted code to FreeRADIUS before, I am unsure of what
> the next step is.

  I've taken a quick look, and the code seems OK.  My only complaint
is that the patch is reversed...  The diff contains the patch for
moving from your version with EAP-AKA to the normal version, not the
other way around.

  I expect that the EAP-AKA support can be added fairly soon.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog
Permalink | Reply | 0 comments |
headers
Phaneuf, Brian | 1 Sep 2006 16:53

RE: EAP-AKA authentication support

I am not a diff wiz. What order should my diff be done to remedy that
problem? Would you like me to diff it again?

Also, I just noticed that I am missing the configure file from the
rlm_eap_aka directory in my submission. It is the same as it is in
rlm_eap_sim but with aka replacing sim.

-----Original Message-----
From:
freeradius-devel-bounces+bphaneuf=reefpoint.com <at> lists.freeradius.org
[mailto:freeradius-devel-bounces+bphaneuf=reefpoint.com <at> lists.freeradius
.org] On Behalf Of Alan DeKok
Sent: Friday, September 01, 2006 10:20 AM
To: FreeRadius developers mailing list
Subject: Re: EAP-AKA authentication support 

"Phaneuf, Brian" <bphaneuf <at> reefpoint.com> wrote:
> As I have never submitted code to FreeRADIUS before, I am unsure of
what
> the next step is.

  I've taken a quick look, and the code seems OK.  My only complaint
is that the patch is reversed...  The diff contains the patch for
moving from your version with EAP-AKA to the normal version, not the
other way around.

  I expect that the EAP-AKA support can be added fairly soon.

  Alan DeKok.
--
(Continue reading)

Permalink | Reply | 1 comment |
headers
Nicolas Baradakis | 1 Sep 2006 17:43

Re: EAP-AKA authentication support

Phaneuf, Brian wrote:

> I am not a diff wiz. What order should my diff be done to remedy that
> problem?

See http://freeradius.org/radiusd/doc/DIFFS

--

-- 
Nicolas Baradakis
Permalink | Reply | 0 comments |
headers
Phaneuf, Brian | 1 Sep 2006 19:32

RE: EAP-AKA authentication support

Thanks for the pointer! 
Alan - I have updated the bugzilla entry with the new diffs that also
include the configure script in rlm_eap_aka that was missing from
before.

-----Original Message-----
From:
freeradius-devel-bounces+bphaneuf=reefpoint.com <at> lists.freeradius.org
[mailto:freeradius-devel-bounces+bphaneuf=reefpoint.com <at> lists.freeradius
.org] On Behalf Of Nicolas Baradakis
Sent: Friday, September 01, 2006 11:43 AM
To: FreeRadius developers mailing list
Subject: Re: EAP-AKA authentication support

Phaneuf, Brian wrote:

> I am not a diff wiz. What order should my diff be done to remedy that
> problem?

See http://freeradius.org/radiusd/doc/DIFFS

--

-- 
Nicolas Baradakis

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/devel.html
Permalink | Reply | 1 comment |
headers
Alan DeKok | 1 Sep 2006 19:36
Favicon
Gravatar

Re: EAP-AKA authentication support

"Phaneuf, Brian" <bphaneuf <at> reefpoint.com> wrote:
> Alan - I have updated the bugzilla entry with the new diffs that also
> include the configure script in rlm_eap_aka that was missing from
> before.

  Please don't put the diff's in the comments.  Doing so makes it
impossible to apply the patch.  Add it as an attachment.

  And it's not necessary to include the 'configure' script.  It can be
generated from 'configure.in'.

  And I'm a little concerned about the whole-sale copy of radiusd.conf
as an "example".  Can you please add a separate attachment that is a
diff of the stock radiusd.conf.in file, and the example you have.

  Adding an additional complete copy of radiusd.conf to the tree is a
big problem.  It means that now two copies have to be kept in sync,
which is more work.  It also means that the "example" you posted is
configured for your local system, and is hard for others to use.

  I know there's already a copy of radiusd.conf in the src/eapsim-03
directory.  That's a bad idea, and it should be fixed.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog
Permalink | Reply | 0 comments |

Gmane