December 2009 - Freeradius-Devel - lists.freeradius.org

GIT Log for 2009-12-11 00:33 GMT
by aland＠deployingradius.com 10 Dec '09

10 Dec '09

commit 7e62aad062c862031343f64a57d0c01ce7941bcd Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 10 11:41:55 2009 +0100 Fix CVE-2009-3736 libltdl/ltdl.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)

1 0

GIT Log for 2009-12-10 00:33 GMT
by aland＠deployingradius.com 09 Dec '09

09 Dec '09

commit 6da2a01b44f62c22fabb6e4f44d2f92c0cfb6563 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Dec 9 15:48:30 2009 +0100 Template code to use lt_dladvise() The libtool people have discovered that it's useful to allow *additional* features from linking. Like allowing libraries to link to libraries. Using this magic API allows FreeRADIUS to load the Perl module, which in turn loads other modules, which in turn load dynamic libraries. Right now, it complains because of limitations in libltdl. We COULD do these checks in 2.1.8, but that involves either adding configure checks, OR upgrading our version of libltdl. We don't want to do either. src/main/modules.c | 27 ++++++++++++++++++++++++++- 1 files changed, 26 insertions(+), 1 deletions(-)

1 0

GIT Log for 2009-12-09 00:33 GMT
by aland＠deployingradius.com 08 Dec '09

08 Dec '09

commit e3833c6fa089a30eedf26155669b13d04b86d69a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 8 16:31:02 2009 +0100 Add datarootdir from bug #51 Files changed: Make.inc.in | 1 + src/include/build-radpaths-h.in | 1 + 2 files changed, 2 insertions(+), 0 deletions(-) ====================================================================== commit 2732981cbcdbe2c7d5b112fa3c420e16da6f59a1 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Dec 8 14:00:53 2009 +0100 Handle case where Acct-Session-Time might not exist Files changed: raddb/sql/postgresql/dialup.conf | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) ======================================================================

1 0

GIT Log for 2009-12-08 00:33 GMT
by aland＠deployingradius.com 07 Dec '09

07 Dec '09

commit 8e202406d8a78d87951eaa3ac63f6e85cf9f34a7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 7 13:53:14 2009 +0100 Add %{Attribute-Name#} This prints the numerical value, rather than the decoded time/VALUE Files changed: man/man5/unlang.5 | 9 +++++++++ src/main/xlat.c | 37 +++++++++++++++++++++++++++++++++---- 2 files changed, 42 insertions(+), 4 deletions(-) ====================================================================== commit 1601cc94cdf25b2ed17b084d2c916bc4f141c09e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 7 13:24:14 2009 +0100 Added notes on use of FreeRADIUS-Acct-Session-Start-Time Files changed: raddb/sites-available/default | 16 ++++++++++++++++ 1 files changed, 16 insertions(+), 0 deletions(-) ====================================================================== commit 0c406f238deb74e42efb64b50ade6ec759c1ec6b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 7 13:20:12 2009 +0100 Added synthetic session start time attribute Files changed: share/dictionary.freeradius | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) ====================================================================== commit 88637a75188e593696429d6da0c545903a102550 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Mon Dec 7 10:38:51 2009 +0100 Make more errors non-fatal Files changed: src/main/event.c | 23 ++++++++++++++++++----- 1 files changed, 18 insertions(+), 5 deletions(-) ======================================================================

1 0

GIT Log for 2009-12-07 00:33 GMT
by aland＠deployingradius.com 06 Dec '09

06 Dec '09

commit a660c5fc4f758b0594dd00d86e56878977725342 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 6 17:02:08 2009 +0100 Added sample ntlm_auth module Files changed: raddb/modules/ntlm_auth | 12 ++++++++++++ 1 files changed, 12 insertions(+), 0 deletions(-) ====================================================================== commit b693342ff902b3c29683c8d4fbe043afcc824e0a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 6 13:54:14 2009 +0100 Use case insensitive comparison. Closes #36 Files changed: src/modules/rlm_ldap/rlm_ldap.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 9cf4a047ce57722f5b1a64a5f379e66c61f7b274 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 6 13:51:01 2009 +0100 Portability fixes, as noted by bug #33 Files changed: raddb/certs/Makefile | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 610ef72016c441f136c75e9cddcc2d252fe7636b Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 6 13:48:14 2009 +0100 IP pools require a transactional back-end So we used InnoDB Files changed: raddb/sql/mysql/ippool.sql | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 2e7f4b4792ddd0b31549df6c06d9475f9c476dcf Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 6 13:43:59 2009 +0100 Remove notes on unsupported configuration items Files changed: doc/rlm_ldap | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) ====================================================================== commit 110b39598e5842dec6f20f80433fb50806f23bfe Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 6 13:39:00 2009 +0100 Be more specific about which detail files we suppress Don't write packets back to the same detail file, but allow them to be written to different detail files Files changed: src/modules/rlm_detail/rlm_detail.c | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) ====================================================================== commit e46965240d38d3222219f080d139e7dec5ba211c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 6 13:37:13 2009 +0100 Removed re-definition of detail structure Files changed: src/main/event.c | 3 --- 1 files changed, 0 insertions(+), 3 deletions(-) ====================================================================== commit 1821dcca208ee5f5d742477cdd0fd26c3e101df9 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sun Dec 6 13:36:28 2009 +0100 Moved detail structure defs to a public header file Files changed: src/include/detail.h | 34 ++++++++++++++++++++++++++++++++++ src/modules/frs_detail/frs_detail.c | 35 ----------------------------------- 2 files changed, 34 insertions(+), 35 deletions(-) ====================================================================== commit 558c51a711d7a326604eda0fc51040cbda2b77a8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Dec 5 15:58:19 2009 +0100 Fix code so that corner cases of %{%{foo}:-%{bar}} work The previous code was odd... this code is simpler, and works. Files changed: src/main/xlat.c | 364 ++++++++++++++++++++----------------------------------- 1 files changed, 131 insertions(+), 233 deletions(-) ======================================================================

1 0

PATCH: allow detail listeners to write to other files
by John Morrissey 06 Dec '09

06 Dec '09

I noticed[1] that detail listeners refuse to write detail entries to files, even if the destination filename is different from the source filename. The attached patch fixes that. It also centralizes the listen_detail_t definition, removing the 'stub' definition in src/main/event.c. john [1] https://lists.freeradius.org/pipermail/freeradius-users/2009-October/msg001… -- John Morrissey _o /\ ---- __o jwm(a)horde.net _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__

2 6

GIT Log for 2009-12-06 00:33 GMT
by aland＠deployingradius.com 05 Dec '09

05 Dec '09

commit cea144c158d0c4366c9f9e43a13a6c3bc0b0543a Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat Dec 5 15:54:08 2009 +0100 Re-set FP after closing it src/modules/rlm_passwd/rlm_passwd.c | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-)

1 0

Setting Client-IP-Address in rlm_preprocess
by John Morrissey 04 Dec '09

04 Dec '09

Client-IP-Address is dynamically set by xlat_packet(). AFAICT, there's no way to trigger this in rlm_perl, so Client-IP-Address is never available in rlm_perl handlers. This leads to some interesting unlang to set Client-IP-Address in the request so rlm_perl can access it: authorize { update request { Client-IP-Address := "%{Client-IP-Address}" } } rlm_preprocess sets NAS-IP-Address if it's not set. Alan, would you accept a patch to add similar behavior for Client-IP-Address? john -- John Morrissey _o /\ ---- __o jwm(a)horde.net _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__

3 7

next release?
by John Dennis 04 Dec '09

04 Dec '09

We're trying coordinate our release schedule for our next version of RHEL (RHEL 6.0). As it stands now RHEL6 will release with FreeRADIUS version 2.1.7. But it takes us a very long time to prepare a new RHEL release and in the interim there may be an opportunity to upgrade the version of FreeRADIUS in RHEL6 to something newer should you decide to make a new release in the next few months. I seem to recall a discussion that the next significant release will be 2.2.0. Is that still correct? Do you have an anticipated release date for that? What major new features and/or bug fixes do you anticipate being in it? I ask these questions because I might be able to ask management to anticipate we will need to rebase the version of FreeRADIUS to something newer in RHEL6 than the current 2.1.7. But to do so I have to provide dates and the supporting reasons why this would be a good thing to do. Thanks. -- John Dennis <jdennis(a)redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/

4 8

GIT Log for 2009-12-04 00:33 GMT
by aland＠deployingradius.com 03 Dec '09

03 Dec '09

commit 85ec4a871d3ef44a4c3707b6aaf4d52e80839c3e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Thu Dec 3 10:25:33 2009 +0100 Sign client certs with CA rather than server cert raddb/certs/Makefile | 5 ++--- 1 files changed, 2 insertions(+), 3 deletions(-)

1 0