December 2013 - Freeradius-Devel - lists.freeradius.org

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

control check_item := being overwritten by group check_item :=
by Jonathan 30 Dec '13

30 Dec '13

we are in the progress of migrating freeradius servers and encountering behavior changes 1.X: "check_item := takes precedence over group check_item :=" 2.X: "check_item := being overwritten by group check_item :=" current_release=1.1.8 target_release=2.2.3 (or any other stable) Some more detail: sqlcounter.conf configured with: sqlcounter limitvolume { counter-name = Octets-Total check-name = Max-Octets ... } behavior for: Max-Octets with operator ":=" ONLY groupcheck item set result in 1.1.8: groupcheck-item is taken, no issue result in 2.2.3: groupcheck-item is taken, no issue behavior for: Max-Octets with operator ":=" usercheck item set groupcheck item set result in 1.1.8: usercheck-item takes precende, no issue result in 2.2.3: groupcheck-item overwrites usercheck-item, user not able to increase his volume limit independent of the group he is a member off. I've validated as well in 2.1.12 which yields the same behavior as 2.2.3. So behavior has changed from 1.x to 2.x How can I make a user inherit group items while still overriding specific user check control items. The of "=" is not allowed, so i'm currently without direction in how to get this behavior back. Is this a bug or intended behavior, and how can I resolve this? Regards, Jonathan

1 0

Commit report for master branch
by announce＠freeradius.org 30 Dec '13

30 Dec '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Sign fixes Arran Cudbard-Bell@2013-12-30T17:40:09Z Files modified: * src/main/radsniff.c * src/modules/rlm_counter/rlm_counter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fe2e923ea323051ce90a… ====== -- This commit summary was generated @2013-12-31T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 30 Dec '13

30 Dec '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Various whitespace fixes - Don't mix up tabs and spaces, this will lead to unreadable code - Removed trailing whitespace Arran Cudbard-Bell@2013-12-30T17:41:52Z Files modified: * src/modules/rlm_perl/example.pl * src/modules/rlm_python/prepaid.py * src/modules/rlm_python/radiusd.py * src/modules/rlm_rest/demo.pl * src/modules/rlm_ruby/example.rb Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c84c0acd2f5c26f41d3… ====== -- This commit summary was generated @2013-12-31T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 25 Dec '13

25 Dec '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #494 from herwinw/whitespace_fixes Various whitespace fixes Arran Cudbard-Bell@2013-12-25T18:04:22Z Files modified: * src/modules/rlm_perl/example.pl * src/modules/rlm_python/prepaid.py * src/modules/rlm_python/radiusd.py * src/modules/rlm_rest/demo.pl * src/modules/rlm_ruby/example.rb Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7116058c31a706636ef8… ====== Various whitespace fixes - Don't mix up tabs and spaces, this will lead to unreadable code - Removed trailing whitespace Herwin Weststrate@2013-12-25T15:53:29Z Files modified: * src/modules/rlm_perl/example.pl * src/modules/rlm_python/prepaid.py * src/modules/rlm_python/radiusd.py * src/modules/rlm_rest/demo.pl * src/modules/rlm_ruby/example.rb Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7d2385b998d1666ea25… ====== -- This commit summary was generated @2013-12-26T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 20 Dec '13

20 Dec '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Don't re-use a flag for multiple purposes. A packet can NOT be in the request hash, and still valid for a reply. e.g. TCP Alan T. DeKok@2013-12-20T23:29:26Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/947e586856f8bfe7ef67… ====== Use talloc_free Alan T. DeKok@2013-12-20T23:14:25Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2922d34813692e226a12… ====== Removed unnecessary listen block Alan T. DeKok@2013-12-20T23:10:28Z Files modified: * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a38d1a5522e95843c6a… ====== Fix places where tls field was used in listen.c without WITH_TLS being defined Arran Cudbard-Bell@2013-12-20T02:08:59Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00ba9937cf93c0ffbea5… ====== Try setting multiple vars for each row in the matrix Arran Cudbard-Bell@2013-12-20T02:08:53Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ced6d1990948f0923a3… ====== Mark tls_required as unused if were building without tls... Arran Cudbard-Bell@2013-12-20T02:08:42Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/91a156b870bf9b32c1eb… ====== Mark nt_password parameter in do_mschap_cpw as unused if were building without openssl Arran Cudbard-Bell@2013-12-20T02:08:38Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b04c7bc358273242096a… ====== More cbuff fixes... Arran Cudbard-Bell@2013-12-20T02:08:34Z Files modified: * src/lib/cbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e5a7cd9cb5f07a222c7… ====== Fixup formatting Arran Cudbard-Bell@2013-12-20T01:09:45Z Files modified: * src/include/radiusd.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2e9bd0a020b8c5c7ac31… ====== #include <sys/wait.h> if were using waitpid Arran Cudbard-Bell@2013-12-20T01:09:37Z Files modified: * src/include/radiusd.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3bd11356fa4e5aff63e… ====== Fix comments in our version of md5.c Arran Cudbard-Bell@2013-12-20T01:05:04Z Files modified: * src/lib/md5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49ea2632170c46c5fb8e… ====== Fix issues in cbuff when building without threads with GCC Arran Cudbard-Bell@2013-12-20T00:51:21Z Files modified: * src/lib/cbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f11530f85448ad03e2f7… ====== Expand the matrix to build with and without shared libs Arran Cudbard-Bell@2013-12-20T00:50:45Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2906788f25aed769849a… ====== Create a small build matrix with optional libraries disabled Arran Cudbard-Bell@2013-12-20T00:33:23Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eefaadd6966a8c1da0c3… ====== Only setup should have a semi colon after it in threads.h Arran Cudbard-Bell@2013-12-20T00:12:57Z Files modified: * src/include/threads.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/462212df8cf8fc76ded3… ====== Fix typos, and some slightly incorrect assumptions The last time I saw this in the wild it was the supplicant, it's actually pretty unlikely the NAS would modify the EAP type Arran Cudbard-Bell@2013-12-20T00:00:12Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/44d76ae21c180dc65169… ====== -- This commit summary was generated @2013-12-21T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 20 Dec '13

20 Dec '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix places where tls field was used in listen.c without WITH_TLS being defined Arran Cudbard-Bell@2013-12-20T02:01:52Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f719de87f6c3c606960… ====== Try setting multiple vars for each row in the matrix Arran Cudbard-Bell@2013-12-20T01:43:06Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e822ea15397516eb781e… ====== Mark tls_required as unused if were building without tls... Arran Cudbard-Bell@2013-12-20T01:39:13Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdb35287d7791a5f8e6d… ====== Mark nt_password parameter in do_mschap_cpw as unused if were building without openssl Arran Cudbard-Bell@2013-12-20T01:21:34Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de424839a93c0a5b34cb… ====== More cbuff fixes... Arran Cudbard-Bell@2013-12-20T01:20:12Z Files modified: * src/lib/cbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7b523fb492380cb17c8… ====== Fixup formatting Arran Cudbard-Bell@2013-12-20T01:10:25Z Files modified: * src/include/radiusd.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/219e3156cb5a3741900a… ====== #include <sys/wait.h> if were using waitpid Arran Cudbard-Bell@2013-12-20T01:10:19Z Files modified: * src/include/radiusd.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c2221f6a46cab3e7519… ====== Fix comments in our version of md5.c Arran Cudbard-Bell@2013-12-20T01:04:57Z Files modified: * src/lib/md5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/891ccd4153576b98768a… ====== Fix issues in cbuff when building without threads with GCC Arran Cudbard-Bell@2013-12-20T00:48:59Z Files modified: * src/lib/cbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/86b43952b87ebf0b3c20… ====== Expand the matrix to build with and without shared libs Arran Cudbard-Bell@2013-12-20T00:40:14Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a113347c9eb9b8ac2503… ====== Create a small build matrix with optional libraries disabled Arran Cudbard-Bell@2013-12-20T00:34:25Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f9ad0b4188932ded5094… ====== Only setup should have a semi colon after it in threads.h Arran Cudbard-Bell@2013-12-20T00:12:50Z Files modified: * src/include/threads.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/58f85fbd97876aac3abb… ====== Fix typos, and some slightly incorrect assumptions The last time I saw this in the wild it was the supplicant, it's actually pretty unlikely the NAS would modify the EAP type Arran Cudbard-Bell@2013-12-20T00:00:03Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d7ff408cebacf516ba2… ====== -- This commit summary was generated @2013-12-21T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 19 Dec '13

19 Dec '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Various fixes to allow building without threads Arran Cudbard-Bell@2013-12-19T21:17:58Z Files modified: * src/include/threads.h * src/main/listen.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7538a8e8f986a49c24ae… ====== We need to set LDFLAGS and CFLAGS from SMART_CFLAGS and SMART_LDFLAGS when linking the krb5_thread_safe test program (else it might pick up the wrong version of the library) We can now remove the dependency on MIT KRB5 > 1.11.4 Arran Cudbard-Bell@2013-12-19T20:19:41Z Files modified: * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6aa2130fcbc36531b36… ====== Add connection pool support to rlm_krb5 This allows us to remove the dependency on krb5_copy_context, and support threaded operation for more versions of MIT krb5 Arran Cudbard-Bell@2013-12-19T20:19:41Z Files modified: * raddb/mods-available/krb5 * src/modules/rlm_krb5/all.mk.in * src/modules/rlm_krb5/krb5.c * src/modules/rlm_krb5/krb5.h * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c6730b62be9868b30e2a… ====== More descriptive error message Alan T. DeKok@2013-12-19T17:22:56Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20a8dbfae1ea80a47140… ====== Use correct ifdef Alan T. DeKok@2013-12-19T15:03:32Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48c24dca3e0551b41c24… ====== Failed to do this earlier Alan T. DeKok@2013-12-19T15:02:07Z Files modified: * src/tests/auth/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef23e6d836d8210ff730… ====== Allow auth+acct for TCP / TLS sockets Alan T. DeKok@2013-12-19T14:59:16Z Files modified: * raddb/sites-available/tls * src/include/radiusd.h * src/main/listen.c * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae9a32e57fdeaebd3df2… ====== Automatically figure out which modules need enabling Alan T. DeKok@2013-12-19T14:30:57Z Files modified: * src/tests/auth/all.mk * src/tests/keywords/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7cb5ed0b41c91feed94… ====== Remove extraneous #ifdef's Alan T. DeKok@2013-12-19T14:28:13Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc83490b70ff5980287e… ====== Move "digest" to new authentication test framework Alan T. DeKok@2013-12-19T14:21:04Z Files modified: * src/tests/all.mk * src/tests/auth/all.mk * src/tests/auth/digest * src/tests/auth/digest.attrs * src/tests/digest-01/digest Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eba8e9810c045e8f2e24… ====== Added Response-Packet-Type to output VPs Alan T. DeKok@2013-12-19T14:21:04Z Files modified: * src/main/unittest.c * src/tests/keywords/default-input.attrs * src/tests/keywords/foreach-2.attrs * src/tests/keywords/foreach-break.attrs * src/tests/keywords/foreach.attrs * src/tests/keywords/if-regex-match.attrs * src/tests/keywords/ipaddr.attrs * src/tests/keywords/return-group.attrs * src/tests/keywords/return.attrs Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0fe1313c5b2ac2eda84a… ====== Allow Packet-Type, Digest-*, etc. Code copied from radclient Alan T. DeKok@2013-12-19T14:21:03Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5cb691c509ecc6ac783f… ====== -- This commit summary was generated @2013-12-20T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 19 Dec '13

19 Dec '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Various fixes to allow building without threads Arran Cudbard-Bell@2013-12-19T21:17:49Z Files modified: * src/include/threads.h * src/main/listen.c * src/main/radconf2xml.c * src/main/radmin.c * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f27056fcf18ff1539e86… ====== Add connection pool support to rlm_krb5 This allows us to remove the dependency on krb5_copy_context, and support threaded operation for more versions of MIT krb5 Arran Cudbard-Bell@2013-12-19T20:17:25Z Files modified: * raddb/mods-available/krb5 * src/modules/rlm_krb5/all.mk.in * src/modules/rlm_krb5/krb5.c * src/modules/rlm_krb5/krb5.h * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e00f9379e5cf3867aed9… ====== We need to set LDFLAGS and CFLAGS from SMART_CFLAGS and SMART_LDFLAGS when linking the krb5_thread_safe test program (else it might pick up the wrong version of the library) We can now remove the dependency on MIT KRB5 > 1.11.4 Arran Cudbard-Bell@2013-12-19T20:17:25Z Files modified: * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1632912591faabab0440… ====== More descriptive error message Alan T. DeKok@2013-12-19T17:23:56Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8afda5512d055aae6a1c… ====== Use correct ifdef Alan T. DeKok@2013-12-19T15:03:41Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/739cfb39db681f8a0bce… ====== Failed to do this earlier Alan T. DeKok@2013-12-19T15:02:53Z Files modified: * src/tests/auth/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d2e28516fb0712090fd… ====== Allow auth+acct for TCP / TLS sockets Alan T. DeKok@2013-12-19T15:02:37Z Files modified: * raddb/sites-available/tls * share/dictionary.freeradius.internal * src/include/radiusd.h * src/main/listen.c * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50fbc1d7b763d6add07c… ====== Automatically figure out which modules need enabling Alan T. DeKok@2013-12-19T14:59:34Z Files modified: * src/tests/auth/all.mk * src/tests/keywords/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e61842d967fd06814ee… ====== Move "digest" to new authentication test framework Alan T. DeKok@2013-12-19T14:24:58Z Files modified: * src/tests/all.mk * src/tests/auth/all.mk * src/tests/auth/digest * src/tests/auth/digest.attrs * src/tests/digest-01/digest Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1e358fbb4998cafa494… ====== Added Response-Packet-Type to output VPs Alan T. DeKok@2013-12-19T14:24:55Z Files modified: * src/main/unittest.c * src/tests/keywords/default-input.attrs * src/tests/keywords/foreach-2.attrs * src/tests/keywords/foreach-break.attrs * src/tests/keywords/foreach.attrs * src/tests/keywords/if-regex-match.attrs * src/tests/keywords/ipaddr.attrs * src/tests/keywords/return-group.attrs * src/tests/keywords/return.attrs Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f9bb61b4dbfe8b8d1b5a… ====== Allow Packet-Type, Digest-*, etc. Code copied from radclient Alan T. DeKok@2013-12-19T14:24:44Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0ccca5ef37c538ecbe8e… ====== -- This commit summary was generated @2013-12-20T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 18 Dec '13

18 Dec '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== rlm_ldap_modify returns and ldap_rcode_t NOT and rlm_rcode_t. Static analysis should of caught this... Arran Cudbard-Bell@2013-12-18T15:52:38Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a161494a8aa197b7ff23… ====== Use correct operator in eDirectory debug message Arran Cudbard-Bell@2013-12-18T13:29:01Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97d64015b79d2774dd5c… ====== Cleanup formatting in rlm_mschap, and add some additional debug messages to make it clear what's going on with NT-Password and LM-Password Arran Cudbard-Bell@2013-12-18T13:11:17Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f13450b990b40ef87f36… ====== -- This commit summary was generated @2013-12-19T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0