Freeradius server 3.0.21 released
The FreeRADIUS Server Project is a high performance and highly configurable multi-protocol policy server, supporting RADIUS, DHCPv4, and VMPS. It is available under the terms of the GNU GPLv2. Using RADIUS allows authentication and authorization for a network to be centralized, and minimizes the number of changes that have to be done when adding or deleting new users to a network.
FreeRADIUS can authenticate users on systems such as 802.1x (WiFi), dial-up, PPPoE, VPN’s, VoIP, and many others. It supports back-end databases such as MySQL, PostgreSQL, Oracle, Microsoft Active Directory, Apache Cassandra, Redis, OpenLDAP, and many more. It is used daily to authenticate Internet access for hundreds of millions of people, in sites ranging from 10 to 10 million+ users.
Changelog v3.0.21
Feature improvements
- New stored procedure for allocating IPs with PostgreSQL. Rates of 1500 IPs per second are now possible. See
raddb/mods-config/sql/ippool/postgresql/procedure.sqlPatch from Terry Burton. - Add SQL IP pool support for Microsoft SQL Server See
raddb/mods-config/sql/ippool/mssql/Patch from Terry Burton. - Added RCNTEC dictionary. Closes #3168.
- Added Pica8 dictionary. Closes #3179.
- Add
TLS-Client-Cert-Valid-Sinceattribute holding notBefore date. Patch from Boris Lytochkin. Fixes #3157. - Generate attributes containing unknown OIDs. See
raddb/sites-available/tls. Patch from Boris Lytochkin. - Update the WiMAX dictionary.
- Added ability to rlm_python (Python2) show a stacktrace from errors. #2979
- Add WiFi Alliance Policy OIDs. See
raddb/certs/xpextensionsPatch from Stefan Winter. - radmin now shows coa stats, too.
- Sample schema extensions for summarizing data in SQL. See
mods-config/sql/main/*/process-radacct.sqlMany patches from Terry Burton. - Update dictionary.aerohive, dictionary.fortinet, dictionary.arista and dictionary.erx
- Added VAS Experts dictionary.
- Many updates to RPM and jenkins builds from Matthew Newton
- Added
%C(time now in seconds) and%c(microsecond component of now) back-ported from the “master” branch. - Add reload capability to systemd unit file in Debian and RedHat.
- Increase timestamp precision in postauth to maximum supported by each database and simplify (and make more consistent between drivers) the timestamps in SQL queries by using expansions. Patches from Terry Burton.
- Option to set dictionary path in raduat script. Patch from Terry Burton.
Bug fixes
- Various fixes found by PVS-Studio.
- Set permissions of certificates in bootstrap shell script. Fixes #3132.
- Increase the
nasportidSQL field forvarchar(32). #3141 - Skip processing proxy reply if there are no home servers available.
- Update SQLite IPPool queries. Fixes #3177. Patch from Terry Burton.
- rlm_sql_unixodbc fixes. Patches from Terry Burton. Fixes #2822
- Fixes when building with LibreSSL. Patch from Nathan Owens.
- Fix the rlm_python3 build. Note that this module is experimental. #3183
- The rlm_python should append the
python_pathpaths insys.path, It fixes the expected behaviour to use the existing Python modules. Fixes #3180 - Fix rlm_python to print the script errors properly.
- Bound total query time for PostgreSQL. Fixes #3253
- Many fixes to Oracle sqlippool. It now does 500 IPs per second without any tuning. Fixes #3270.
- Reference sqlippool by it’s correct name. Fixes #3272
- Revert 3.0.20 patch which caused crashes on duplicate clients.
- Update WiMAX-MSK attribute. Fixes #3280.
- Fix crash when trying to access non-existant regex capture group.
- Use timestamps (request or server) rather than SQL
NOW()in accounting queries so that these are stable when replayed from a file buffer. Patches from Terry Burton.
Install
git clone https://github.com/FreeRADIUS/freeradius-server.git
./configure
make
make install
Configuring the server
- Start off with the default configuration files.
- Save a copy of the default configuration: It WORKS. Don’t change it!
- Verify that the server starts – in debugging mode (
radiusd -X). - Send it test packets using “radclient”, or a NAS or AP.
- Verify that the server does what you expect
- If it does not work, change the configuration, and go to step (3)
- If you’re stuck, revert to using the “last working” configuration.
- If it works, proceed to step (6).
- Save a copy of the working configuration, along with a note of what you changed, and why.
- Make a SMALL change to the configuration.
- Repeat from step (3).
Copyright (C) 1999-2018 The FreeRADIUS Server Project
Source: https://github.com/FreeRADIUS/
