April 2013 - Freeradius-Devel - lists.freeradius.org

Re: Setting different IDLE-TIMEOUTS based on IP Address
by Matthew Newton 17 Apr '13

17 Apr '13

Hi, (moving to -devel) On Wed, Apr 17, 2013 at 08:29:51PM +0000, Alan Buxey wrote: > Use any one of the clients.conf methods that were mentioned > yesterday with some unlang and this would be working already. I > seem to recall that huntgroups might be going the way if the > dodo(?) It doesn't do regex methods because its older... pre 1.0 > code It's down to the userparse() function in valuepair.c, which is used by many things including rlm_preprocess for huntgroups, but also rlm_files. So the bug also affects this in the users file (which I'm guessing won't be going away any time soon!): DEFAULT NAS-IP-Address =~ /^10\.0\./ does not work, but DEFAULT NAS-IP-Address =~ ^10\.0\. does. userparse() doesn't strip the /'s off the regex and saves it in the the AVP value. This gets passed directly into regcomp() in radius_compare_vps (valuepair.c), which tries to match the /'s... and fails. In contrast, for an "if" statement in unlang the expression is passed to radius_evaluate_condition() in evaluate.c, which parses it and passes what it thinks are regexes to getregex(). This has the entirely opposite behaviour - it refuses to recognise it as a regex *unless* it is bracketed with /'s. Then it returns just the bit inside the /'s for the regex comparison. I have a bit of a love hate relationship with unlang. It's fantastic for conditionals and wierd logic, but it looks hideous if doing big lookups in the config. So with a couple of these I'd recommend unlang as quickest, but he may have hundreds to compare and huntgroups might be easier than listing them all in the clients.conf file if they have odd logic (and is certain to be much tidier than a massive 'if'-list in unlang). Personally, I'd probably move from huntgroups towards an instantiation of the files module (keyed on NAS-IP-Address, for instance), but that suffers from the same regex bug/feature... :-) If nothing else, moving huntgroups from rlm_preprocess into a new module rlm_huntgroups would probably make a lot more sense. It does tend to confuse people now as it's not too obvious where it's being looked up. Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4(a)le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp(a)le.ac.uk>

2 1

Commit report for master branch
by announce＠freeradius.org 16 Apr '13

16 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Allow %{request:Tunnel-Password:1[1]} to work and add more regression tests Alan T. DeKok@2013-04-16T23:49:32Z Files modified: * src/main/xlat.c * src/tests/xlat.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4a278f9941a809642bf8… ====== Remove unused variable Alan T. DeKok@2013-04-16T23:49:23Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e22f6f745c20379cc49… ====== Fix typo in unlock Alan T. DeKok@2013-04-16T23:49:08Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d672df9be58809d92e4d… ====== Check for too much text after xlat, too Alan T. DeKok@2013-04-16T23:49:01Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c584a474f474173e6c8… ====== doxygen Alan T. DeKok@2013-04-16T22:27:33Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de262381d6cd4de848be… ====== use &da not da Alan T. DeKok@2013-04-16T19:46:03Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75f5858737b70f63d514… ====== doxygen Alan T. DeKok@2013-04-16T19:43:27Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/146b847147cb08ee038a… ====== Update ruby data types to work with 2.0.0 Arran Cudbard-Bell@2013-04-16T19:24:36Z Files modified: * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87697f5fdec22e253801… ====== Fix coverity issues Arran Cudbard-Bell@2013-04-16T18:56:46Z Files modified: * src/lib/valuepair.c * src/main/auth.c * src/main/evaluate.c * src/main/log.c * src/main/modcall.c * src/main/util.c * src/main/xlat.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_yubikey/decrypt.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ed550e6ef6fbf60047e… ====== Update new conditional parser to create data structures Which aren't exposed yet, but it works. Also add more tests. Alan T. DeKok@2013-04-16T04:01:17Z Files modified: * src/main/conffile.c * src/main/parser.c * src/tests/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bcae5332e1a6c0a683cf… ====== Fix comment Alan T. DeKok@2013-04-16T04:01:17Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bbc6904dc878a47bd58c… ====== Get excited if there is trailing stuff after the condition Alan T. DeKok@2013-04-16T04:01:17Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/90f3d65bf1c63ab9d279… ====== Shucks Alan T. DeKok@2013-04-16T04:01:17Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ab4708da3f6d27fc496… ====== Fix attr_filter.foo.bar.baz.bar If a module is referenced as '-foo', it can't have a . Alan T. DeKok@2013-04-16T04:01:17Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/34672c82341470415e88… ====== Replace %C with %{Packet-Src-IP-Address} Alan T. DeKok@2013-04-16T04:01:17Z Files modified: * raddb/mods-available/linelog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73c20be9c70e575c781f… ====== Client shortname can be created internally So if the user is looking for it and it doesn't exist in the config file, return it from the request->client structure Alan T. DeKok@2013-04-16T04:01:17Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7cc5e8a8445d36b95bdc… ====== -- This commit summary was generated @2013-04-17T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

New parsing of "unlang" conditions.
by Alan DeKok 15 Apr '13

15 Apr '13

I've pushed a change to the git "master" branch. It does more in-deptg parsing of conditions in "unlang", when the server starts. ./raddb//sites-enabled/default[214]: Parse error in condition ERROR: if (foo =~ "fpp") { ERROR: ^Expected regex '/' Or: ERROR: if (foo =~ /fpp/ X) { ERROR: ^Unexpected text etc. This works for normal conditions, too, and not just regexes. The next step is to integrate the xlat parser with the conditional parser. This will allow the server to produce *very* descriptive erros when it starts. i.e. ERROR: if (foo == "%{User-Foo}") { ERROR: ^Unknown attribute There are some caveats, of course. But it should work. As always, please check it out. I've done a number of tests, but there's always the possibility that something was missed. Alan DeKok.

2 4

Commit report for master branch
by announce＠freeradius.org 15 Apr '13

15 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use consistent names for the connection functions Arran Cudbard-Bell@2013-04-15T19:13:29Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5af94a34fda5dd87e46b… ====== Make connection re-use scheme configurable Arran Cudbard-Bell@2013-04-15T18:38:15Z Files modified: * raddb/mods-available/yubikey * src/include/connection.h * src/main/connection.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/664d67ed8aa7e408774c… ====== -- This commit summary was generated @2013-04-16T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 14 Apr '13

14 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix typo Alan T. DeKok@2013-04-14T17:39:33Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9b14315a1eb259df4298… ====== Include the DHCP dictionary for the tests Alan T. DeKok@2013-04-14T17:23:57Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b98abe64ed98f25a56a… ====== Fix typo Alan T. DeKok@2013-04-14T17:23:09Z Files modified: * src/modules/proto_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8bd6548bf9ca282bbad7… ====== radius_request_name() shouldn't skip over unknown strings i.e. "127.0.0.1" should get the caller's default ref returned, instead of EATING the "127.", and then returning the caller's ref Alan T. DeKok@2013-04-14T17:10:53Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f2b630d13114e925d68… ====== Add dict_read() API. To read one dictionary file. And made rlm_dhcp read it, so that the DHCP dictionaries can be loaded automatically. Alan T. DeKok@2013-04-14T16:58:27Z Files modified: * raddb/dictionary.in * src/include/libradius.h * src/include/radiusd.h * src/lib/dict.c * src/main/mainconfig.c * src/main/valuepair.c * src/modules/proto_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d165b978963290706914… ====== Error if we try to load DHCP without DHCP dictionaries Alan T. DeKok@2013-04-14T16:43:04Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4220f12759f65fe04966… ====== Clean up code for conditionally loading a module Alan T. DeKok@2013-04-14T16:32:03Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/81838dcc925563168cba… ====== Doxygen Alan T. DeKok@2013-04-14T16:16:44Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5c67e6f298c728c7fb6… ====== typo Alan T. DeKok@2013-04-14T16:10:53Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cda76064107787f9b520… ====== Convert map / tmpl to use talloc Alan T. DeKok@2013-04-14T04:58:21Z Files modified: * src/include/radiusd.h * src/main/modcall.c * src/main/valuepair.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8ecbb846dc3302f8bf1… ====== doxygen Alan T. DeKok@2013-04-14T04:39:47Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/24e3a425bef6f382d241… ====== Indentation / whitespace Alan T. DeKok@2013-04-14T04:34:50Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d25eed50956450ba39a… ====== Correctly load optional modules Alan T. DeKok@2013-04-14T04:34:26Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12228640776e10e2d365… ====== Don't do double escaping. Now that we pass the top-level escape function from radius_xlat down to the lower level functions, we don't need to do the escape again in xlat_expand Alan T. DeKok@2013-04-14T04:33:06Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5972a1143201e206595… ====== Ensure node->ref && list are initialized Alan T. DeKok@2013-04-14T04:16:34Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8802dca8b3181768971b… ====== -- This commit summary was generated @2013-04-15T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 13 Apr '13

13 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Clean up debug output for new "update" sections Alan T. DeKok@2013-04-13T20:33:19Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/86a5b2cfaa7f87ee7b14… ====== Document new "update" sections Alan T. DeKok@2013-04-13T20:28:18Z Files modified: * man/man5/unlang.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d6586025d655ab1cc703… ====== Make the "update" sections more generic. The new template / map code does a ton of memory allocations, but it's more generic than the old radius_update_attrlist() function. The template / map code largely duplicated the functionality of radius_update_attrlist(), but with different code. We've deleted the old code, and now use the new code for "update" sections. The benefit is that we can now do: update { reply:Filter-Id := &request:User-Name } And it will work. This is more generic than before. As a bonus, the old 2.x "update" sections still work, too Alan T. DeKok@2013-04-13T20:18:39Z Files modified: * src/include/radiusd.h * src/main/evaluate.c * src/main/modcall.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd492c33b5a74ca4868a… ====== Fix radius_map2request() So that it loops over the list only in debug mode and so that it doesn't erroneously free vp Alan T. DeKok@2013-04-13T20:18:39Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5d1899dc574b1a739a1… ====== Initialize vp->type So that it's clear what data type it is Alan T. DeKok@2013-04-13T20:18:39Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0549db5b3d752fb44f5a… ====== Use correct talloc ctx and set vp->op, so that radius_map2request doesn't have to Alan T. DeKok@2013-04-13T20:18:38Z Files modified: * src/modules/rlm_ldap/attrmap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/61b03686cf0fcec64792… ====== Added radius_map2vp function which should be the default callback from radius_map2request Alan T. DeKok@2013-04-13T20:18:38Z Files modified: * src/include/radiusd.h * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ac32a8d3e2b84e88916… ====== Enforce operators in update sections Can only be comparison, set, etc. Alan T. DeKok@2013-04-13T20:18:38Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec604cd5d54aa5abaf1d… ====== Make attribute references use 'User-Name = &Filter-Id' Alan T. DeKok@2013-04-13T20:18:38Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ca5db61ce7bb342891d… ====== Fix typo Alan T. DeKok@2013-04-13T20:18:38Z Files modified: * src/modules/rlm_sqlcounter/rlm_sqlcounter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dbbbb5930b3af18a0688… ====== Make radius_attrmap() take the "update" section itself so that we can use it in unlang Alan T. DeKok@2013-04-13T20:18:38Z Files modified: * src/main/valuepair.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_ldap/attrmap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c43014d15ac820f617a… ====== Remove more deprecated API warnings Arran Cudbard-Bell@2013-04-13T18:02:33Z Files modified: * src/lib/hmac.c * src/lib/md4.c * src/lib/md5.c * src/lib/radius.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cbfaaa221776d29051ee… ====== More tests Alan T. DeKok@2013-04-13T16:28:36Z Files modified: * src/tests/xlat.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed2e3cda7192d22e3bbf… ====== Use current escape, as node->xlat == NULL Alan T. DeKok@2013-04-13T16:28:36Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d263f28a3f6c5958baf… ====== More minor cleanups Arran Cudbard-Bell@2013-04-13T04:24:23Z Files modified: * raddb/mods-available/ldap * src/modules/rlm_ldap/edir.c * src/modules/rlm_ldap/ldap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23fd03ccd09444ac9728… ====== Cleanup edir.c Arran Cudbard-Bell@2013-04-13T04:19:42Z Files modified: * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/edir.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62e9d6f382ee46f955fb… ====== Better error message Arran Cudbard-Bell@2013-04-13T04:05:03Z Files modified: * src/modules/rlm_ldap/attrmap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/43c8112e276eec980cd7… ====== Add support back for generic attributes in rlm_ldap Arran Cudbard-Bell@2013-04-13T01:19:42Z Files modified: * raddb/mods-available/ldap * src/include/radiusd.h * src/main/valuepair.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/863aa3a024d88bd2b339… ====== -- This commit summary was generated @2013-04-14T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

EAP-SIM simulation, how does Freeradius calculate MAC value in AT_MAC attribute
by Tabibel Sami 13 Apr '13

13 Apr '13

Hi, I am working on the implementation of an EAP-SIM supplicant, when i send to freeradius a EAP-Response/SIM/Start packet i receive as expected an EAP-Resquest/SIM/Challenge with AT_RAND (RAND value was specified in users file [2]) and AT_MAC, after this I should calculate MAC value and test if this value matches witch AT_MAC value sent by freeradius. my question is how freeradius calculate MAC value in AT_MAC atribute ? or from wich source freeradius fill MAC value in the AT_MAC attribute ? [2]: my eap-sim user is set in users file as below : 1262074920549791 Auth-Type := EAP, EAP-Type := SIM EAP-Sim-Rand1 = 0x39900000000000000000000000000000, EAP-Sim-SRES1 = 0x30112233, EAP-Sim-KC1 = 0x445566778899AABB, EAP-Sim-Rand2 = 0x31000000000000000000000000000000, EAP-Sim-SRES2 = 0x31112233, EAP-Sim-KC2 = 0x445566778899AABB, EAP-Sim-Rand3 = 0x32000000000000000000000000000000, EAP-Sim-SRES3 = 0x32112233, EAP-Sim-KC3 = 0x445566778899AABB Thank you in advance, Best regards. -- Sami

2 4

More feature additions
by Alan DeKok 13 Apr '13

13 Apr '13

"unlang" has now been updated to use the new update parsing Arran added for the LDAP and cache modules. This makes the update sections a little simpler, with a bit more power. You can now use attribute references. For clarity, they require the use of "&": update reply { Filter-Id := &request:User-Name } This copies User-Name from the request to the Filter-Id in the reply. The value isn't printed, expanded, or parsed. it's a straight copy of internal data structures. You can also do: update { reply:Filter-Id := &request:User-Name } Which does what you expect. The following is likely to *not* work: update { reply:Filter-Id := "foo" request:User-Name := "bar" } That should probably work in the future. But not now. The old format for the "update" sections is still accepted, and still works. The current status of v3 is that it has had a number of old and unused modules deleted. However, it has about the same number of lines of code as v2.2.0, and has a fair bit more functionality. It's good to see that the server is being simplified while it's being made more complex. :) Alan DeKok.

1 0

Commit report for master branch
by announce＠freeradius.org 12 Apr '13

12 Apr '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Run the simple tests before running the server attribute encoding / decoding, conditional checks xlat Alan T. DeKok@2013-04-12T21:24:32Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/86cecf20f52e23cf9cab… ====== Style fixes Arran Cudbard-Bell@2013-04-12T20:40:15Z Files modified: * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b53b80523d927c8d4c69… ====== Turn off debugging Alan T. DeKok@2013-04-12T19:07:51Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26bf20f97fd76eaf4e12… ====== Move file to better extension Alan T. DeKok@2013-04-12T19:07:35Z Files modified: * src/tests/xlat.c * src/tests/xlat.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/885e0ed9a35c03b14dea… ====== Fix compile error Alan T. DeKok@2013-04-12T19:06:55Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ebdbf887fa79a441cb5… ====== Add xlat to radattr And fix a number of xlat bugs Alan T. DeKok@2013-04-12T18:43:51Z Files modified: * src/include/parser.h * src/main/radattr.c * src/main/radattr.mk * src/main/xlat.c * src/tests/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4116190e69aee99b54ac… ====== Move functions from valuepair.c to util.c So that they can be used by radattr Alan T. DeKok@2013-04-12T18:35:36Z Files modified: * src/main/util.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b672af2b6043cd93c66… ====== Move conditional parser to new file. And integrate it into (the increasingly misnamed) radattr. Add a bunch of tests for the conditions. And fix a number of bugs. It should now be solid and ready for production Alan T. DeKok@2013-04-12T16:48:34Z Files modified: * src/include/parser.h * src/main/conffile.c * src/main/parser.c * src/main/radattr.c * src/main/radattr.mk * src/main/radconf2xml.mk * src/main/radiusd.mk * src/main/radmin.mk * src/main/radwho.mk * src/tests/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12b715fe53598870159e… ====== Error out if the condition is empty Alan T. DeKok@2013-04-12T15:55:53Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9927672f0dfb02dc310a… ====== Use correct quoting in yubikey config file Arran Cudbard-Bell@2013-04-12T04:13:25Z Files modified: * raddb/mods-available/yubikey Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a29c5c47f25a493e8305… ====== Check for set_client errors Move URIs into their own section Arran Cudbard-Bell@2013-04-12T04:10:27Z Files modified: * raddb/mods-available/yubikey * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0cef4d2e1a25a209e949… ====== typo Arran Cudbard-Bell@2013-04-12T03:46:50Z Files modified: * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae56caa1bd0106887954… ====== Add support for validating tokens against yubico servers Arran Cudbard-Bell@2013-04-12T01:33:56Z Files modified: * raddb/mods-available/yubikey * share/dictionary * share/dictionary.yubico * src/modules/rlm_yubikey/all.mk.in * src/modules/rlm_yubikey/config.h.in * src/modules/rlm_yubikey/configure * src/modules/rlm_yubikey/configure.in * src/modules/rlm_yubikey/decrypt.c * src/modules/rlm_yubikey/rlm_yubikey.c * src/modules/rlm_yubikey/rlm_yubikey.h * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7e79f3b2a8a3873a3fe… ====== Allow log prefix to be specified manually for connection pool Add optional 'spread' mode where connections are spread across the entire pool, instead of re-using the most recently used ones. Arran Cudbard-Bell@2013-04-12T01:05:39Z Files modified: * src/include/connection.h * src/main/connection.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42be46246e3401a8361b… ====== -- This commit summary was generated @2013-04-13T00:00:06Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Things like "tests"
by Alan DeKok 12 Apr '13

12 Apr '13

I'm happy to announce that there are more of the things called "tests" for the server. I've broken out the new condition and xlat parsing into a simple test harness. See src/tests/condition.txt and src/tests/xlat.txt Writing the tests highlighted a few minor bugs in both the conditions and xlat code. Those are now fixed. As always, more testing is appreciated. I think the next step is to integration the parsing into "unlang". The code right now is "awkward", to be polite. This would also allow start-time errors for xlat's. i.e.: if (User-Name == "%{foo: bar}") { would result in an error of "unknown module foo". The parsed conditions also make the "unlang" interpreter simpler and faster. Many more things can be compiled once, and interpreted at run time. The code in 2.x re-parses the strings. Every. Single. Time. I still don't want "unlang" to become a real language. However, having cleaner code, a better parser, and better error messages is all good. Alan DeKok.

1 0