Commit report for v3.0.x branch

Sun Jul 27 00:00:02 CEST 2014

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server)

======
rlm_otp doesn't need a configure script

Arran Cudbard-Bell at 2014-07-26T17:08:15Z
Files modified:
	* src/modules/rlm_otp/.gitignore
	* src/modules/rlm_otp/all.mk
	* src/modules/rlm_otp/all.mk.in
	* src/modules/rlm_otp/configure
	* src/modules/rlm_otp/configure.ac

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/e9ecb7be8a290a9f2a4192e78ae15b9b7b7f26a4
====== 
Import/Export from Apache DS to cleanup formatting

Arran Cudbard-Bell at 2014-07-26T16:21:42Z
Files modified:
	* doc/schemas/ldap/openldap/freeradius-clients.schema
	* doc/schemas/ldap/openldap/freeradius.schema

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1bb6c2d1982e11362b9cd9fe4c3d4b4f9e16a38c
====== 
Typo in clients schema

Arran Cudbard-Bell at 2014-07-26T15:23:38Z
Files modified:
	* doc/schemas/ldap/openldap/freeradius-clients.schema

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a4a7837b562818e0d7e0ac9ee33af76e94c3be26
====== 
Only include pcap.h if we have libpcap

Arran Cudbard-Bell at 2014-07-26T15:22:25Z
Files modified:
	* src/include/pcap.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/753b74f3aa2126bb933c05e6de418d1bf61b0098
====== 
Organise LDAP schemas better

Arran Cudbard-Bell at 2014-07-25T22:06:39Z
Files modified:
	* doc/schemas/ldap/edir/freeradius-clients.ldif
	* doc/schemas/ldap/iplanet.ldif
	* doc/schemas/ldap/iplanet.schema
	* doc/schemas/ldap/iplanet/freeradius.ldif
	* doc/schemas/ldap/iplanet/freeradius.schema
	* doc/schemas/ldap/openldap.ldif
	* doc/schemas/ldap/openldap.schema
	* doc/schemas/ldap/openldap/freeradius-clients.ldif
	* doc/schemas/ldap/openldap/freeradius-clients.schema
	* doc/schemas/ldap/openldap/freeradius.ldif
	* doc/schemas/ldap/openldap/freeradius.schema
	* doc/schemas/ldap/radiusclients-edirectory.ldif
	* doc/schemas/ldap/radiusclients-openldap.ldif
	* doc/schemas/ldap/radiusclients-openldap.schema

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/239ab5540e0d4c6c55b2c0c7455e7ce385a98bfb
====== 
Change IANA number in LDAP schemas from 3317 to 11344

No idea who 'Port Community Rotterdam' are, but we have our own IANA number, so should be using it.

Arran Cudbard-Bell at 2014-07-25T21:50:08Z
Files modified:
	* doc/schemas/ldap/iplanet.ldif
	* doc/schemas/ldap/iplanet.schema
	* doc/schemas/ldap/openldap.ldif
	* doc/schemas/ldap/openldap.schema

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/4087461ac4cb1f502ba2c71d707bde34c2c778fb
====== 
Hack to get TLS-PSK-Identity

Alan T. DeKok at 2014-07-25T20:18:19Z
Files modified:
	* src/main/listen.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/14507d9e13469cd1ccf55f32afc2f90796ba3667
====== 
Needs cast to long long int

Arran Cudbard-Bell at 2014-07-25T18:47:29Z
Files modified:
	* src/modules/rlm_expr/rlm_expr.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/eba481140f018478411ce6f97084ab99b41f6bd8
====== 
print 64bit rlm_expr result

Arran Cudbard-Bell at 2014-07-25T18:25:46Z
Files modified:
	* src/modules/rlm_expr/rlm_expr.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/5f17c3bd8c8cb79605666e6ecda6d2dc7dab8716
====== 
Continue to build functions which don't rely on libpcap, when we don't have libpcap

Arran Cudbard-Bell at 2014-07-23T18:50:28Z
Files modified:
	* src/include/pcap.h
	* src/lib/pcap.c
	* src/main/radsniff.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c465ce2c6ae1d4d15e16cba7ae7a7ca7f29aeae4
====== 
Fix formatting of switch statements

Arran Cudbard-Bell at 2014-07-23T18:42:43Z
Files modified:
	* src/lib/dict.c
	* src/lib/getaddrinfo.c
	* src/lib/pcap.c
	* src/lib/print.c
	* src/lib/radius.c
	* src/lib/snprintf.c
	* src/lib/token.c
	* src/lib/valuepair.c
	* src/main/acct.c
	* src/main/auth.c
	* src/main/collectd.c
	* src/main/detail.c
	* src/main/evaluate.c
	* src/main/modules.c
	* src/main/radwho.c
	* src/main/realms.c
	* src/main/soh.c
	* src/main/tls.c
	* src/main/unittest.c
	* src/main/util.c
	* src/main/valuepair.c
	* src/main/xlat.c
	* src/modules/rlm_cache/rlm_cache.c
	* src/modules/rlm_couchbase/couchbase.c
	* src/modules/rlm_couchbase/mod.c
	* src/modules/rlm_couchbase/rlm_couchbase.c
	* src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c
	* src/modules/rlm_eap/types/rlm_eap_peap/peap.c
	* src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c
	* src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c
	* src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c
	* src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c
	* src/modules/rlm_exec/rlm_exec.c
	* src/modules/rlm_expr/paircmp.c
	* src/modules/rlm_expr/rlm_expr.c
	* src/modules/rlm_ippool/rlm_ippool_tool.c
	* src/modules/rlm_ldap/attrmap.c
	* src/modules/rlm_ldap/clients.c
	* src/modules/rlm_ldap/groups.c
	* src/modules/rlm_ldap/ldap.c
	* src/modules/rlm_ldap/rlm_ldap.c
	* src/modules/rlm_mschap/rlm_mschap.c
	* src/modules/rlm_otp/otp_pw_valid.c
	* src/modules/rlm_pam/rlm_pam.c
	* src/modules/rlm_perl/rlm_perl.c
	* src/modules/rlm_radutmp/rlm_radutmp.c
	* src/modules/rlm_rediswho/rlm_rediswho.c
	* src/modules/rlm_soh/rlm_soh.c
	* src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c
	* src/modules/rlm_sql/rlm_sql.c
	* src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c
	* src/modules/rlm_unix/rlm_unix.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/907d6227ca0560b472493ae6140d7f5775530731
====== 
Merge pull request #742 from qnet-herwin/rlm_perl_v3.0.x

Fix error in attribute copying to rlm_perl

Arran Cudbard-Bell at 2014-07-22T19:23:22Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d013d4d7a3d2bd48218cf97f9d973407bca589c2
====== 
Fix error in attribute copying to rlm_perl

Introduced in commit c225c615760d4c907640ebd249f860d5ab3258dd. It copied the RAD_REPLY hash twice, which had the side effects that some keys dropped out.

Herwin Weststrate at 2014-07-22T18:06:33Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/eca14dcf7b94d69b8ac5265749d63f8f43e7e2c8
====== 
Debian: Ensure some directories exist

This prevents some warnings when installing the package.

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-21T18:36:15Z
Files modified:
	* debian/freeradius.postinst

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/eb9a2fbd065728b94bd172123ca33c6bdb8259c5
====== 
Other perl formatting

Arran Cudbard-Bell at 2014-07-21T16:49:23Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c225c615760d4c907640ebd249f860d5ab3258dd
====== 
Fix multivalues attributes in rlm_perl. Addresses #731, Addresses #722

Arran Cudbard-Bell at 2014-07-21T16:48:18Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8f4e239539802f329555a033c465271058c8501c
====== 
Add the gigawords calculation for MSSQL in accounting stop SQL clause

root (via Alan T. DeKok)@2014-07-21T14:35:57Z
Files modified:
	* raddb/mods-config/sql/main/mssql/queries.conf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/e41443bb6aace79a781bb700a6cbb8a130a1480a
====== 
Added a NULL check to rlm_perl

Otherwise, trying to start rlm_perl with an invalid file parameter would cause a segfault.

Herwin Weststrate (via Alan T. DeKok)@2014-07-20T15:22:57Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/bd0acc6f1812ea1d7c167a151ba09f32befa8a72
====== 
Merge pull request #732 from nchaigne/v3.0.x

dhcpclient - timeout and decline, release, inform

Arran Cudbard-Bell at 2014-07-16T20:51:30Z
Files modified:
	* src/modules/proto_dhcp/dhcpclient.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/eeaca37fd844026e8eff65c557e7e00c605cbb23
====== 
dhcpclient - timeout and decline, release, inform

Added receive timeout on socket according to -t option (retries are
still not handled).
Added commands for "decline", "release" and "inform" messages.
Updated usage.

Nicolas C at 2014-07-16T16:16:59Z
Files modified:
	* src/modules/proto_dhcp/dhcpclient.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/be33e21913803de6d2c3c21351b9d50bbd825da4
====== 
Merge pull request #734 from spbnick/switch_cnf_to_sha256

Switch .cnf files to sha256 message digest

Arran Cudbard-Bell at 2014-07-16T20:50:27Z
Files modified:
	* raddb/certs/ca.cnf
	* raddb/certs/client.cnf
	* raddb/certs/server.cnf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/ed2100d9b45ce84404116cb4aec8c1bb55a176ca
====== 
Switch .cnf files to sha256 message digest

Use sha256 as default_md (message digest) in all .cnf files as it is
more secure than the previous, now considered weak, sha1.

Nikolai Kondrashov at 2014-07-16T19:51:33Z
Files modified:
	* raddb/certs/ca.cnf
	* raddb/certs/client.cnf
	* raddb/certs/server.cnf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/515e5e9cf9404d2d80a03e66da198a0c31efd7fa
====== 
Merge pull request #736 from spbnick/add_rlm_krb5_doc

Add minimal rlm_krb5 documentation file

Arran Cudbard-Bell at 2014-07-16T20:50:08Z
Files modified:
	* doc/modules/rlm_krb5
	* raddb/mods-available/krb5

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/21bfdf44061184c69f747a24349ac9e1114f7cd3
====== 
Add minimal rlm_krb5 documentation file

Add doc/modules/rlm_krb5 - a minimal rlm_krb5 module documentation file,
based on the wiki page. Update raddb/mods-available/krb5 comments to
point to the actual and proper location.

Nikolai Kondrashov at 2014-07-16T19:50:49Z
Files modified:
	* doc/modules/rlm_krb5
	* raddb/mods-available/krb5

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3d4d0246fa51097840a2a682b81c2162a47a010b
====== 
Merge pull request #735 from spbnick/add_P_option_to_man_pages

Add description of -P option to man pages

Arran Cudbard-Bell at 2014-07-16T20:49:51Z
Files modified:
	* man/man1/radclient.1
	* man/man1/radtest.1

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/00c97ec743e475f80a4af693526660a2fc9a6a46
====== 
Add description of -P option to man pages

Add description of -P option to radtest and radclient man pages.

Nikolai Kondrashov at 2014-07-16T19:52:30Z
Files modified:
	* man/man1/radclient.1
	* man/man1/radtest.1

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/4097b0b7a024d223a2576647ce348c95daecb2c1
====== 
Merge pull request #733 from spbnick/clarify_snmp_trap_conditions

Clarify conditions of limit hit SNMP notifications

Arran Cudbard-Bell at 2014-07-16T20:49:22Z
Files modified:
	* mibs/FREERADIUS-NOTIFICATION-MIB.txt

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/7a2c7a8d263d5a65cb9ca2b77c50210c92bbd35a
====== 
Clarify conditions of limit hit SNMP notifications

Use "hit" instead of "reach" in the descriptions of serverMaxRequest and
serverMaxThreads SNMP notifications to make it clearer that they trigger
upon attempt to exceed the limit, not upon reaching the maximum allowed
value.

Nikolai Kondrashov at 2014-07-16T19:52:06Z
Files modified:
	* mibs/FREERADIUS-NOTIFICATION-MIB.txt

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8ca930d24d51c512075c6142a486a2411555d3d5
====== 
More changes

Alan T. DeKok at 2014-07-15T14:11:50Z
Files modified:
	* doc/ChangeLog

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d257e796f9ad1c62075c5ee0999344905795e008
====== 
Note recent changes

Alan T. DeKok at 2014-07-15T14:06:01Z
Files modified:
	* doc/ChangeLog

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/b707d3a44c8e2ba8d48fbef17731792590274ebe
====== 
Check BN_rand_range return value

CVE-2014-4733.

In practice, the function should never fail.

jvoisin (via Alan T. DeKok)@2014-07-15T01:34:42Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c3e8546f1057754dabdb1a607499b30931727744
====== 
Constant time memory comparison.

CVE-2014-4731.

Non-constant time comparisons usually require millions of packets
in order to get enough statistics.  This is VERY hard to do with
WiFi or wired 802.1X.  The delays on switch port open / close
are on the order of seconds.

jvoisin (via Alan T. DeKok)@2014-07-15T01:31:02Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d0e01ff9a9df52ab027070e647b4f63f5819da8f
====== 
Use *_clear_free instead of *_free.

CVE-2014-4732

jvoisin (via Alan T. DeKok)@2014-07-15T01:29:06Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c
	* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/22297d7bff6f1d5517eb6208feed7527328031b4
====== 
Update ChangeLog

Arran Cudbard-Bell at 2014-07-12T21:02:20Z
Files modified:
	* doc/ChangeLog

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/4a382ca4f9342cb3d1609fe487ec1ef85a0dde16
====== 
Add module type sanity check

Arran Cudbard-Bell at 2014-07-12T19:43:07Z
Files modified:
	* src/main/modules.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a8b7756dd63a536099bdec68a271f9a819f9e0e1
====== 
Add support for connection pool reuse

Arran Cudbard-Bell at 2014-07-12T19:43:07Z
Files modified:
	* src/include/conffile.h
	* src/include/connection.h
	* src/include/modpriv.h
	* src/main/conffile.c
	* src/main/connection.c
	* src/main/modules.c
	* src/modules/rlm_couchbase/rlm_couchbase.c
	* src/modules/rlm_krb5/rlm_krb5.c
	* src/modules/rlm_ldap/rlm_ldap.c
	* src/modules/rlm_redis/rlm_redis.c
	* src/modules/rlm_rest/rlm_rest.c
	* src/modules/rlm_smsotp/rlm_smsotp.c
	* src/modules/rlm_sql/sql.c
	* src/modules/rlm_yubikey/validate.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/93a297a98b16e60dbe2e6ba66856fb8bcd8e362b
====== 
Convert another argument to bool

Arran Cudbard-Bell at 2014-07-12T19:43:06Z
Files modified:
	* src/include/modpriv.h
	* src/main/command.c
	* src/main/modcall.c
	* src/main/modules.c
	* src/modules/rlm_rediswho/rlm_rediswho.c
	* src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c
	* src/modules/rlm_sqlippool/rlm_sqlippool.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/7ccffc8631184606a9b52506e9dd31296c2a7be4
====== 
Merge pull request #730 from nchaigne/v3.0.x

dhcpclient - store xid when encoding request

Alan DeKok at 2014-07-12T15:40:30Z
Files modified:
	* src/modules/proto_dhcp/dhcp.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/b85d952a0c10afe4d01eb719df3edf6983944798
====== 
dhcpclient - store xid when encoding request

Fixes the incorrect debug message "Encoding DHCP-Discover of id
ffffffff".
And this will allow to correlate xid from response (should be done by
the client, but not yet).

Nicolas C at 2014-07-11T18:16:46Z
Files modified:
	* src/modules/proto_dhcp/dhcp.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/69bfb4d61b5de4f672f849f156aaf61be693b848
====== 
Typo

Arran Cudbard-Bell at 2014-07-10T18:40:56Z
Files modified:
	* src/include/connection.h
	* src/main/connection.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/59c1ef434b7859e7a32b77f530260a9eaa47897b
====== 
Formatting and documentation

Arran Cudbard-Bell at 2014-07-10T18:40:56Z
Files modified:
	* src/main/conffile.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/129d1b166a4d753185f0a65d302129db3077a162
====== 
find_client: min prefix of 0 needs to work

Use signed loop counter to permit 0-1 to be <= min_prefix

Sam Hartman (via Alan T. DeKok)@2014-07-10T18:07:27Z
Files modified:
	* src/main/client.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/5219d3de9a0e1ba8b01f300b7b20d028833734ac
====== 
fr_inaddr_mask fix 0 prefix

Don't depend on the behavior of shifting by 32-bits on a 32-bit type.

Sam Hartman (via Alan T. DeKok)@2014-07-10T17:28:15Z
Files modified:
	* src/lib/misc.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/41f8259d2f59784d6f23bbfde009e72fe53c143b
====== 
Allow User-Name in CUI reply

Alan T. DeKok at 2014-07-10T05:21:52Z
Files modified:
	* raddb/policy.d/cui

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/42430f41416f06ba8ee7542847ff41f4f9cd027e
====== 
Use loop index to get description.  Closes #729

Alan T. DeKok at 2014-07-09T21:33:24Z
Files modified:
	* src/main/tls.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1d25e515d28108e3cb8b824f2492472a6b01edec
====== 
A parent config section might not exist

when dynamically adding a home server.

Alan T. DeKok at 2014-07-09T21:29:09Z
Files modified:
	* src/main/realms.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/cf608881626bcf93ab74cd1bbf88b04423ac2dcf
====== 
Remove useless extern declarations

Arran Cudbard-Bell at 2014-07-09T18:35:03Z
Files modified:
	* src/include/libradius.h
	* src/include/missing-h
	* src/include/rad_assert.h
	* src/include/radiusd.h
	* src/include/tls-h
	* src/lib/dict.c
	* src/lib/print.c
	* src/lib/radius.c
	* src/main/mainconfig.c
	* src/main/tls.c
	* src/main/tls_listen.c
	* src/modules/rlm_eap/libeap/eap_chbind.h
	* src/modules/rlm_eap/libeap/eap_tls.c
	* src/modules/rlm_eap/libeap/eap_types.h
	* src/modules/rlm_mschap/opendir.c
	* src/modules/rlm_mschap/rlm_mschap.c
	* src/modules/rlm_opendirectory/rlm_opendirectory.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/37917ad89540da122e5d02f429e8647f89d5d5af
====== 
Cleanup EAP-SIM macros

Arran Cudbard-Bell at 2014-07-09T18:35:03Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_sim.h
	* src/modules/rlm_eap/libeap/eapsimlib.c
	* src/modules/rlm_eap/radeapclient.c
	* src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/b92da9313a5ee8135e6a71acf3aba2015eb04656
====== 
Debug condition is now a fr_cond_t

Arran Cudbard-Bell at 2014-07-09T18:35:02Z
Files modified:
	* src/main/mainconfig.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1d60c47e73727c795b1c614bf94e4f0f84d7fecc
====== 
Limit which operators can be used with LDAP group comparison

and other minor cleanups

Arran Cudbard-Bell at 2014-07-09T18:34:55Z
Files modified:
	* src/modules/rlm_ldap/groups.c
	* src/modules/rlm_ldap/rlm_ldap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/62a8a4ed8e505b511179b0350997dabf76a2a0a4
====== 
Formatting

Arran Cudbard-Bell at 2014-07-09T02:09:19Z
Files modified:
	* src/include/token.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/e5a743c8be8b7eada07ed929aba61ab1e84095e7
====== 
Fixup Sqlite schema

Arran Cudbard-Bell at 2014-07-09T02:09:00Z
Files modified:
	* raddb/mods-config/sql/main/sqlite/schema.sql

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/77d7284333b953702b50959f5c413f521b1c99ff
====== 
Update cui

Updated comments to clarify the dual purpose of the unlang fragment.

Stefan Paetow (via Arran Cudbard-Bell)@2014-07-08T13:51:32Z
Files modified:
	* raddb/policy.d/cui

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/448bc0e0727d406825fa608ca1c787c32190e33e
====== 
Try and make dlopen library search messages clearer

Arran Cudbard-Bell at 2014-07-08T05:24:31Z
Files modified:
	* src/main/modules.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/2059032d31e38393ffd30ea26ddd9d34efa5f39d
====== 
Remove reply:User-Name only if there's a reply:CUI

Alan T. DeKok at 2014-07-08T04:35:28Z
Files modified:
	* raddb/policy.d/cui

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3d9a6e9957835180e19820c566fefb3eeed4ee12
====== 
Changed integer type for rlm_eap_{ttls,peap} tunnel types to bool where applicable

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-07T20:31:03Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h
	* src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9851f2c759de4307aeb757ce922b90b644cdc77f
====== 
Use enums instead of define lists in rlm_eap_peap

But only for the values that are only used internally.

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-07T20:29:54Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/09ea27662cf245be6dc0ab9aada57de2de90011d
====== 
Formatting

Arran Cudbard-Bell at 2014-07-07T20:28:29Z
Files modified:
	* src/modules/rlm_ldap/groups.c
	* src/modules/rlm_ldap/rlm_ldap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/7c201641c1527cae70331c6b6206d374cfdcea7b
====== 
As posted to the list

Alan T. DeKok at 2014-07-07T18:09:51Z
Files modified:
	* share/dictionary
	* share/dictionary.dragonwave

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8cc903f285be0fcba4ec6e3b8bd58c96492e44fa
====== 
Merge pull request #725 from nchaigne/v3.0.x

radeapclient - fix send_packet

Arran Cudbard-Bell at 2014-07-04T17:08:19Z
Files modified:
	* src/modules/rlm_eap/radeapclient.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f3100c303c7cf6e5f50984f126eb93238ce27197
====== 
radeapclient - fix send_packet

I spotted two errors in radeapclient.c, introduced in the following
previous commits.
With this fix, radeapclient is now useable again.

1)
Commit: c8a062a112f17a5810d311dc0e0acfe963b2d440
(2014/06/13)

- send_packet(rep, &req);
-
- if (!req) return -1;
+ send_packet(req, &rep);
+ if (!rep) {

Arguments got reversed. Hence segmentation fault later when doing:

for (vp = req->vps; vp != NULL; vp = vpnext) {

Bit of caution on the wording used in radeapclient:
"req" is the request coming FROM the server. (because this is not a
"request" in RADIUS sense, but an EAP-Request within the EAP-SIM
transaction.)
"rep" is the response from the client TO the server (EAP-Response).

2)
Commit: bc3676835c3dcc220ab518d4c3c35962bc0f8be2
(2014/05/02)

In "send_packet":

+ if (!req || !rep || !*rep) return -1;

*rep == NULL is the expected behaviour...

Nicolas C at 2014-07-04T17:03:33Z
Files modified:
	* src/modules/rlm_eap/radeapclient.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/53c1ce349b07a6e51dcc0cde9041e0a5153bdf11
====== 
In redhat spec file, update dependency on json-c to version 0.10 as 0.11 only exists for fedora and 0.10 builds ok

Philippe Wooding (via Alan T. DeKok)@2014-07-04T16:01:54Z
Files modified:
	* redhat/freeradius.spec

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c0e3a5330804c0873621ca1789255df53dde8012
====== 
Update redhat spec file to reflect the fact rlm_host is no longer experimental.

Philippe Wooding (via Alan T. DeKok)@2014-07-04T16:01:34Z
Files modified:
	* redhat/freeradius.spec

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3fb6571b943ae2f1eb489abd9ec2b8b6f000882f
====== 
Use correct type for length

Alan T. DeKok at 2014-07-03T01:59:51Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/0b6a39907161cf244351177d6c62348439e025dc
====== 
No need for casting in talloc_array_length()

Alan T. DeKok at 2014-07-03T01:45:37Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/cd41bcb584cb30f8271316b047022c7266aead69
====== 
rad_vp2attr() returns -1 on error, 0 on "not enough room"

Alan T. DeKok at 2014-07-03T01:43:51Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/0000859a6f1b9438559d32e395d54c1146e73be5
====== 
Channel bindings fixes

-fix size calculation
-skip unwanted attrs when copying
-add safety check to copy code in case size is wrong
-add cast to get correct result from talloc_array_length()

Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:58Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/4c5834ebdd27ccc780ca6aa7ee194b187d0a260e
====== 
Don't call free on talloc'ed channel bindings packet

Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:54Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/b862293c1e25e33e7cec135795d14a8c639fa9a6
====== 
Fix cursor initialization bugs in eap_chbind_vp2packet

Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:50Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/84b7c83d5127d04e98110979e4394f076d64418d
====== 
Fixed adding attributes with multiple values to rlm_perl

Without this fix, the array in Perl would start with the value of the
first attribute in the packet, combined with the actual values of the
attribute.

The debug log would look like this:

$RAD_REPLY{'User-Name'}[0] = &reply:User-Name -> 'anonymous'
$RAD_REPLY{'h323-credit-amount'}[1] = &reply:h323-credit-amount -> '100'
$RAD_REPLY{'h323-credit-amount'}[2] = &reply:h323-credit-amount -> '101'

The actual value of $RAD_REPLY{'h323-credit-amount'} is
['anonymous','100','101']

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-02T19:36:09Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c920cf0ff498b3695040265955db580b0a7c7cbd
====== 
Merge pull request #719 from nchaigne/v3.0.x

3.0.x - Make EAP-SIM work again - proper encoding of EAP-SIM attributes ...

Arran Cudbard-Bell at 2014-07-01T19:48:25Z
Files modified:
	* src/modules/rlm_eap/libeap/eapsimlib.c
	* src/modules/rlm_eap/radeapclient.c
	* src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/fd45098b462a03a16a4722952fe5006314356744
====== 
3.0.x - Make EAP-SIM work again - proper encoding of EAP-SIM attributes within EAP-Message

This fix follows the issue I logged (on the mailing list, not on GitHub)
on June 11th.

As a reminder, the problem happened after a commit which (among other
things) modified the EAP-SIM attributes.
Since this commit, EAP-SIM authentication do not work because
EAP-Message is not properly encoded anymore by FreeRADIUS.

I believe the commit is the following:

https://github.com/FreeRADIUS/freeradius-server/commit/39df09e42d80a96363be0bddee2ff0ba97fdb035

So, here is a fix.

I also fixed the attributes issue in radeapclient, but at the moment the
binary is unusable: it crashes, and I don't have time to look into this.
(I tested the fix with another EAP client)

Nicolas C at 2014-07-01T17:03:03Z
Files modified:
	* src/modules/rlm_eap/libeap/eapsimlib.c
	* src/modules/rlm_eap/radeapclient.c
	* src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9ec3c382665a34595d6586a39db66968d380ed2d
====== 
Inline breaks linking?

Arran Cudbard-Bell at 2014-07-01T15:58:31Z
Files modified:
	* src/include/libradius.h
	* src/lib/dict.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/06e09be31d59ef4933ba47a6ac4cf361e091336f
====== 
Fix capitalisation in UKERNA dictionary Fixes #718

Arran Cudbard-Bell at 2014-07-01T15:44:50Z
Files modified:
	* share/dictionary.ukerna

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/2d1ef27ac98f646e5ba0c6cf4df6cb98a95e9d05
====== 
Other things still reference dict_attr_allowed_chars

Arran Cudbard-Bell at 2014-07-01T15:43:07Z
Files modified:
	* src/include/libradius.h
	* src/lib/dict.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/7af44b794161ffbb32016b78a12f9e9e7bec2c65
====== 
Fixed reference to config file

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:42:00Z
Files modified:
	* raddb/sites-available/default

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/40bee0edc4b7638717e30f2aecadb56291136971
====== 
Readability fixes in mods-available/perl

Alignment is now stable with any tab width.

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:41:48Z
Files modified:
	* raddb/mods-available/perl

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8e7fc3460be51899fefb03a066405c8abfcf3ec9
====== 
Fixed typo in rlm_sql.c

s/afftected/affected/

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:40:19Z
Files modified:
	* src/modules/rlm_sql/rlm_sql.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a5d11402be8624845ef52f5b763db0569100a0cf
====== 
Fixed some tabs/spaces in default virtual server

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:40:14Z
Files modified:
	* raddb/sites-available/default

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/bd6519551d5e09733e1bddf1c0261215b1df5fa8
====== 
Use RFC language in eap.c messages

Arran Cudbard-Bell at 2014-07-01T13:39:38Z
Files modified:
	* src/modules/rlm_eap/eap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/852f3abe9b521d1b84484edb8d42e9cbc849c137
====== 
No need to call exit twice

Arran Cudbard-Bell at 2014-07-01T13:39:38Z
Files modified:
	* src/lib/event.c
	* src/main/detail.c
	* src/main/radiusd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/56a66de36cf920b89d4d145940b54726eb297b52
====== 
Better errors on junk chars in dict.c

Arran Cudbard-Bell at 2014-07-01T13:39:38Z
Files modified:
	* src/lib/dict.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/5a77de871d49ba43a33b1572b7f3ed16955a385b
====== 
We can now use talloc_free() for listeners

Alan T. DeKok at 2014-06-27T17:04:32Z
Files modified:
	* src/main/process.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/77f68022e2f87bf24b8310064bdb33691c6c272c
====== 
Proxy sockets use common_socket_free().  Closes #680

Alan T. DeKok at 2014-06-27T17:04:32Z
Files modified:
	* src/main/listen.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/4058b7a0b15523253aafbd1d2ee51250a11d731a
====== 
The default secret is "radsec"

Alan T. DeKok at 2014-06-27T17:04:31Z
Files modified:
	* raddb/sites-available/tls

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c16bb57372c5c10267b5c89ed1f0a8d039c731cb
====== 
Now that we have default IPv6 listeners, have a v6 client, too

Alan T. DeKok at 2014-06-27T17:04:31Z
Files modified:
	* raddb/clients.conf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/5d9e85722ebc4548219540cb497858801ce5c9fd
====== 
No need for an empty function

Alan T. DeKok at 2014-06-27T17:04:31Z
Files modified:
	* src/main/listen.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/997bf775f1366ae5dd5b79f469bbae38d1ce3daf
====== 
Move checks for virtual_server to listen_parse()

Which is better than scattering them through the code.

Alan T. DeKok at 2014-06-27T17:04:31Z
Files modified:
	* src/main/listen.c
	* src/main/modules.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/0022bf367c092d2a5843092f0dc8c68950e9e60b
====== 
IKEv2 fixes required on our side

Arran Cudbard-Bell at 2014-06-27T15:47:07Z
Files modified:
	* configure
	* configure.ac
	* src/include/autoconf.h.in
	* src/modules/rlm_eap/types/rlm_eap_ikev2/logging_impl.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/de7fd410a726352bc931ee7aa13cb2725639b37a
====== 
Assume RFC 3542 compliance for IPv6 socket options, which fixes IPv6 support on FreeBSD 10.0

Arran Cudbard-Bell at 2014-06-27T13:30:56Z
Files modified:
	* configure
	* configure.ac
	* src/include/autoconf.h.in
	* src/lib/udpfromto.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/cb3ea70165cee55d14fa9eee2281a17de642e29d
====== 
Confusing comments

Arran Cudbard-Bell at 2014-06-27T12:09:35Z
Files modified:
	* src/lib/debug.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/78c370c0e2c1a3b33ad1dd73c20b02e821fef091
====== 
Fix for ptrace check under FreeBSD

Arran Cudbard-Bell at 2014-06-27T12:01:14Z
Files modified:
	* src/lib/debug.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/012a94628ba7f3090e16186c8741c5256af82e1c
====== 
Use standard return codes

Arran Cudbard-Bell at 2014-06-26T23:09:51Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a7c532216d0692be2906947e02bd4dab2e80da4c
====== 
Convert binary values to octets type attributes correctly

Arran Cudbard-Bell at 2014-06-26T23:09:42Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/78027f0cc9c4e66bd94767f330f1b6970fb63375
====== 
Rename vpsname to list_name

Add array indexes to multivalued attributes

Arran Cudbard-Bell at 2014-06-26T23:09:01Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d3b852d037c1e50f037678832706e2c7eafcf8cc
====== 
Fixup debugging and formatting in rlm_perl

Arran Cudbard-Bell at 2014-06-26T19:13:11Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/5d7ae9f11e9ff9357238410b5a84cea2d57d0bf3
====== 
Improve debug logging of rlm_perl

Don't just show the attributes being copied, but also say where they are
copied from/to.

Herwin Weststrate (via Arran Cudbard-Bell)@2014-06-26T18:41:58Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f6c27a5264b84181e0589138dafcc52278a5dd97
====== 
Set a timer for marking a home server dead.  Closes #712

Alan T. DeKok at 2014-06-26T14:33:32Z
Files modified:
	* src/main/process.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/7bae7c8ed3ae6420c749f04ab3cb716e00071389
====== 
Note recent changes

Alan T. DeKok at 2014-06-26T14:20:15Z
Files modified:
	* doc/ChangeLog

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/fa93a223ca4d3d903f17d1cb0501f2e2c3ca7032
====== 
Pass2 for attributes in existence checks

	if (&foo-LDAP-Group) {
		...
	}

Alan T. DeKok at 2014-06-26T14:18:34Z
Files modified:
	* src/main/modcall.c
	* src/main/parser.c
	* src/tests/unit/condition.txt

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/6a5bc20fb4b9b34912c3dc77a815225347e74ebc
====== 
-- 
This commit summary was generated @2014-07-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).