July 2013 - Freeradius-Devel - lists.freeradius.org

Re: Blow-up in username filter?
by Alan Buxey 15 Jul '13

15 Jul '13

Everyone using 3.x beta etc should be running the latest code. .. and reporting bugs/issues they find rather than sitting on them. .. or it will go out with those issues present (imagine day 0 of the release when someone says "Oh. It still crashes when you xxxx in the xxxx file I thought that would get fixed") :/ alan

2 2

%{rand} in recent versions
by Stefan Winter 15 Jul '13

15 Jul '13

Hi, while I've been staring at debug output of 2.x.x I noticed that%{rand:x} doesn't seem to do what it should: ++? if (true ) -> TRUE ++- entering if (true ) {...} expand: %{rand:1000000}%Y%m%d%H%M%S -> 201307150802013-07-15 08:17:08 expand: %{rand:1000000}%Y%m%d%H%M%S -> 201307150802013-07-15 08:17:08 expand: %{rand:1000000}%Y%m%d%H%M%S -> 201307150802013-07-15 08:17:08 As you see, the expression %{rand:1000000} gets expanded into an empty string. In my particular case, this leads to a lot less entropy than I thought. The expansion is there three times alright, that's as per config, but I would have expected the results to be different. Now that I knew where to look, I went back to 2.2.0 mainstream release code - and saw the same :-( I didn't go back to 2.1.12. I'm "fairly sure" it worked back in the day. (Yes, I also want a %s insatead of %S in my config, got it. But the %{rand:} is really a bit more important than that. ) Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473

2 5

Re: Release of Version 2.2.1
by Stefan Winter 15 Jul '13

15 Jul '13

Hi, > I've added the patch to set rcode=1 on clean exit. > > The patch to remove free_mainconfig() is made unnecessary by other > cleanups. The SEGV was a result of mis-ordered free's. There was > conflict between the modules free'ing their data, and the main > configuration code free'ing its data. That was fixed. > > The code was run through valgrind repeatedly until it shows no errors > on exit. Well, this morning's GIT doesn't quite agree. Sending a TERM to the server running -X: Listening on authentication address :: port 1812 Listening on accounting address :: port 1813 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on proxy address :: port 1814 Ready to process requests. Ready to process requests. Signalled to terminate Exiting normally. Speicherzugriffsfehler Speicherzugriffsfehler is my locale for Segmentation fault. gdb during termination time shows that there's something wrong inside free'ing eap types, it seems: Listening on authentication address :: port 1812 Listening on accounting address :: port 1813 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on proxy address :: port 1814 Ready to process requests. Program received signal SIGTERM, Terminated. 0x00007ffff6608623 in select () from /lib64/libc.so.6 (gdb) bt #0 0x00007ffff6608623 in select () from /lib64/libc.so.6 #1 0x00007ffff7bca538 in fr_event_loop (el=0x889640) at event.c:391 #2 0x0000000000429f21 in radius_event_process () at event.c:3800 #3 0x0000000000409f7c in main (argc=<optimized out>, argv=<optimized out>) at radiusd.c:421 (gdb) c Continuing. Ready to process requests. Signalled to terminate Exiting normally. Program received signal SIGSEGV, Segmentation fault. 0x00007ffff65a5634 in free () from /lib64/libc.so.6 (gdb) bt #0 0x00007ffff65a5634 in free () from /lib64/libc.so.6 #1 0x000000000040e2c0 in cf_section_parse_free (cs=0x675240, base=0x8209c0) at conffile.c:344 #2 0x00007ffff56e0d31 in eaptype_free (i=0x8247f0) at mem.c:253 #3 0x00007ffff56de877 in eap_detach (instance=0x823ad0) at rlm_eap.c:69 #4 0x000000000041ad31 in module_instance_free (data=0x823990) at modules.c:385 #5 0x00007ffff7bc3dfd in FreeWalker (tree=0x7f8130, X=0x825a70) at rbtree.c:63 #6 0x00007ffff7bc3dee in FreeWalker (tree=0x7f8130, X=0x81a9c0) at rbtree.c:61 #7 0x00007ffff7bc3ddd in FreeWalker (tree=0x7f8130, X=0x7f9f50) at rbtree.c:60 #8 0x00007ffff7bc3ddd in FreeWalker (tree=0x7f8130, X=0x822d30) at rbtree.c:60 #9 0x00007ffff7bc418d in rbtree_free (tree=0x7f8130) at rbtree.c:74 #10 0x000000000041bc40 in detach_modules () at modules.c:441 #11 0x0000000000409fd4 in main (argc=<optimized out>, argv=<optimized out>) at radiusd.c:465 (gdb) Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473

5 29

Commit report for master branch
by announce＠freeradius.org 14 Jul '13

14 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== /[ \t]+$// Or author has discovered his text editor decided to insert random whitespace after many lines, and has now discovered how to turn this off, and needs to fix all the current lines where this occurs, so that there's no spurious white space changes in future commits. Arran Cudbard-Bell@2013-07-14T21:43:53Z Files modified: * scripts/jlibtool.c * src/include/base64.h * src/include/libradius.h * src/include/log.h * src/include/modules.h * src/include/radiusd.h * src/include/realms.h * src/lib/base64.c * src/lib/dict.c * src/lib/event.c * src/lib/fifo.c * src/lib/hash.c * src/lib/heap.c * src/lib/hmac.c * src/lib/log.c * src/lib/misc.c * src/lib/packet.c * src/lib/print.c * src/lib/radius.c * src/lib/tcp.c * src/lib/token.c * src/lib/udpfromto.c * src/lib/valuepair.c * src/main/auth.c * src/main/client.c * src/main/command.c * src/main/conffile.c * src/main/connection.c * src/main/detail.c * src/main/evaluate.c * src/main/exec.c * src/main/files.c * src/main/listen.c * src/main/log.c * src/main/mainconfig.c * src/main/modcall.c * src/main/modules.c * src/main/parser.c * src/main/process.c * src/main/radattr.c * src/main/radclient.c * src/main/radiusd.c * src/main/radmin.c * src/main/radsniff.c * src/main/radwho.c * src/main/realms.c * src/main/stats.c * src/main/threads.c * src/main/tls.c * src/main/tls_listen.c * src/main/util.c * src/main/valuepair.c * src/main/version.c * src/main/xlat.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_dhcp/dhcpclient.c * src/modules/proto_dhcp/dhcpd.c * src/modules/proto_dhcp/rlm_dhcp.c * src/modules/proto_vmps/vqp.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/eap.h * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_types.h * src/modules/rlm_eap/libeap/eapcommon.c * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/mem.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/rlm_eap.h * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.c * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.h * src/modules/rlm_eap/types/rlm_eap_ikev2/rlm_eap_ikev2.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_example/rlm_example.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_idn/rlm_idn.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ippool/rlm_ippool_tool.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/edir.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/opendir.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/extern.h * src/modules/rlm_otp/otp_mppe.c * src/modules/rlm_otp/otp_pw_valid.c * src/modules/rlm_otp/otp_pwe.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_otp/otp_util.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_securid/mem.c * src/modules/rlm_securid/rlm_securid.c * src/modules/rlm_securid/rlm_securid.h * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/drivers/rlm_sql_db2/rlm_sql_db2.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/rlm_sql_firebird.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.h * src/modules/rlm_sql/drivers/rlm_sql_freetds/rlm_sql_freetds.c * src/modules/rlm_sql/drivers/rlm_sql_iodbc/rlm_sql_iodbc.c * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/rlm_sql_unixodbc.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_unix/rlm_unix.c * src/modules/rlm_wimax/rlm_wimax.c * src/modules/rlm_yubikey/decrypt.c * src/modules/rlm_yubikey/rlm_yubikey.c * src/modules/rlm_yubikey/rlm_yubikey.h * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7333cfd78366ac8b7ed8… ====== Set rcode on parse error Arran Cudbard-Bell@2013-07-14T16:18:38Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3e10b328b8a6c3f619c5… ====== More regex fixes Arran Cudbard-Bell@2013-07-14T15:45:12Z Files modified: * acinclude.m4 * configure * src/lib/valuepair.c * src/modules/rlm_python/configure * src/modules/rlm_sql/configure Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/294f58ae9f5e4ce38672… ====== Clean up code around map function Alan T. DeKok@2013-07-14T11:27:24Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1287f5a4493f10f69ba4… ====== Remove erroneous assert Alan T. DeKok@2013-07-14T09:31:11Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6681facf0e308345f27… ====== -- This commit summary was generated @2013-07-15T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

master branch radius_xlat() expected behavior?
by Aaron Hurt 14 Jul '13

14 Jul '13

I have the following code in the accounting function of my rlm_couchbase module: radius_xlat(key, sizeof(key), request, inst->key, NULL, NULL) inst->key is set in the config to the following: key = "radacct_%{%{Acct-Unique-Session-Id}:-%{Acct-Session-Id}}" I have the acct_unique policy loaded in the preacct section of the config but it isn't finding it in that expansion. This is what I see in radiusd -X (8) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/ena (8) group preacct { (8) - entering group preacct {...} (8) [preprocess] = ok (8) policy acct_unique { (8) - entering policy acct_unique {...} (8) ? if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) (8) expand: "%{string:Class}" -> 'I\314\005\263\000\000\0017\000\001\002\000\254\033\002\003\000\000\000\000\000\000\000\000\000\000\000\000\001\316t\0250\303G\204\000\000\000\000\000\001\237\365' (8) ? if ("%{string:Class}" =~ /ai:([0-9a-f]{32})/i) -> FALSE (8) else else { (8) - entering else else {...} (8) update request { (8) expand: "%{md5:%{User-Name},%{Acct-Session-ID},%{NAS-IP-Address},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}" -> '1ed32dfe64d37d100c15550f2e7c55c7' (8) Acct-Unique-Session-Id := "1ed32dfe64d37d100c15550f2e7c55c7" (8) } # update request = ok (8) - else else returns ok (8) - policy acct_unique returns ok (8) [couchbase] = ok (8) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/ena (8) group accounting { (8) - entering group accounting {...} rlm_couchbase (couchbase): Reserved connection (4) (8) couchbase : expand: "radacct_%{%{Acct-Unique-Session-Id}:-%{Acct-Session-Id}}" -> 'radacct_51D241BE-00000565' Is this the expected behavior? If so, what am I doing wrong? Thank You, Aaron

3 7

Commit report for v2.x.x branch
by announce＠freeradius.org 13 Jul '13

13 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update capitalization of CalledStationId (and others) Closes #217 Arran Cudbard-Bell@2013-07-13T16:14:34Z Files modified: * raddb/sql/postgresql/update_radacct_group_trigger.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a95df4c5eb9d7b6a8361… ====== -- This commit summary was generated @2013-07-14T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 13 Jul '13

13 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== The head of the list may be empty. If so, don't VERIFY it Alan T. DeKok@2013-07-13T20:54:35Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb98d9922e108a1bc97c… ====== Update capitalization of CalledStationId Closes #217 Arran Cudbard-Bell@2013-07-13T16:18:17Z Files modified: * raddb/mods-config/sql/main/postgresql/extras/update_radacct_group.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7324fcd88719f5484204… ====== Add example config for the python module Arran Cudbard-Bell@2013-07-13T12:45:30Z Files modified: * raddb/mods-available/python Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f74b1eef9bc98cc9d980… ====== Don't pass value to pairmake if the pair will be marked up for xlat later Arran Cudbard-Bell@2013-07-13T10:04:49Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02a3e287fef902d0b8ba… ====== Fix -Werror warning Alan T. DeKok@2013-07-13T09:36:56Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ca3387d94707a7fad9f… ====== Back out hacks which worked around xlat ATTRIBUTE returning NULL Alan T. DeKok@2013-07-13T09:08:52Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ffa46996c59f30abecb… ====== -- This commit summary was generated @2013-07-14T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 12 Jul '13

12 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Should return NOOP if function is not available Arran Cudbard-Bell@2013-07-12T23:29:24Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5458be18681a68daa3cc… ====== Config strings don't need to be freed explicitly Arran Cudbard-Bell@2013-07-12T23:29:24Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b06820bb4ea6cbbb2089… ====== Don't override signal handlers Arran Cudbard-Bell@2013-07-12T23:29:23Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ed98f58d3283eabf804… ====== Look for python in newer locations Arran Cudbard-Bell@2013-07-12T23:00:38Z Files modified: * src/modules/rlm_python/configure * src/modules/rlm_python/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49d04e5c85324cbaf50f… ====== Merge pull request #366 from mcnewton/master Debian package fixups for v3 Arran Cudbard-Bell@2013-07-12T19:04:57Z Files modified: * debian/freeradius.postinst * debian/freeradius.prerm * debian/libfreeradius3.install * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/668a5e4a492367b7ebf4… ====== dpkg: install libfreeradius-server.so Matthew Newton@2013-07-12T18:57:56Z Files modified: * debian/libfreeradius3.install Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5639b9a8f967aa274cd… ====== dpkg: don't mangle statoverride file Matthew Newton@2013-07-12T18:57:16Z Files modified: * debian/freeradius.prerm Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e236265ba0b0adbd4c83… ====== ensure var/log/freeradius is created in debian pkg Matthew Newton@2013-07-12T18:39:04Z Files modified: * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7a0ef9a27c6912f0bac… ====== typos in debian package postinst/prerm Matthew Newton@2013-07-12T18:12:40Z Files modified: * debian/freeradius.postinst * debian/freeradius.prerm Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12eeb818754e691f769d… ====== Minor cleanups Arran Cudbard-Bell@2013-07-12T19:03:40Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23a5fb8e8ad4ab207fde… ====== Cleanups Arran Cudbard-Bell@2013-07-12T19:01:24Z Files modified: * INSTALL.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6f135de3d7160fdacb89… ====== Update and rename INSTALL to INSTALL.rst Arran Cudbard-Bell@2013-07-12T18:57:13Z Files modified: * INSTALL * INSTALL.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/24410536f3f1057c5b50… ====== Merge pull request #365 from olivierbeytrison/ldap-schema Add schemas for ldap clients, correct ldap attribute names Arran Cudbard-Bell@2013-07-12T18:50:49Z Files modified: * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b21c3468633de2a766d4… ====== Add schemas for ldap clients, correct ldap attribute names Olivier Beytrison@2013-07-12T17:57:43Z Files modified: * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59682f3d3e9469176b9c… ====== Fix arguments for RDEBUG Alan T. DeKok@2013-07-12T16:44:35Z Files modified: * src/modules/rlm_opendirectory/rlm_opendirectory.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/58643639baaa00b581fe… ====== Fix debug statement Arran Cudbard-Bell@2013-07-12T16:17:37Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a95ffd356703f53968fc… ====== --with-edir is now always on Arran Cudbard-Bell@2013-07-12T15:51:57Z Files modified: * INSTALL Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f9d0d7e1e34056dbc5f… ====== Files get the double backtick treatment Arran Cudbard-Bell@2013-07-12T15:32:46Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6909035bcb965a445c56… ====== update INSTALL and README.rst for v3 Matthew Newton (via Arran Cudbard-Bell)@2013-07-12T15:29:37Z Files modified: * INSTALL * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f94389110ae3d3f73ae6… ====== Don't return -1 from a module function, it'll make the code in modcall angry Arran Cudbard-Bell@2013-07-12T15:20:30Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/27bb01e52cd8bbaae75d… ====== Fix test for TLS Arran Cudbard-Bell@2013-07-12T13:53:47Z Files modified: * acinclude.m4 * configure Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab81252faa58260b725c… ====== More changes Arran Cudbard-Bell@2013-07-12T00:45:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b369335fac0fcc04a89… ====== Merge pull request #361 from alanbuxey/master windows phone needs CRLDP or it wont validate the cert and will fail the connection. Arran Cudbard-Bell@2013-07-12T00:01:40Z Files modified: * raddb/certs/README * raddb/certs/ca.cnf * raddb/certs/xpextensions Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ac72a05118d506002f7… ====== Windows Phone needs CRL Distribution Point to be set or it isn't happy to validate a RADIUS cert after debugging with eduroam members, Windows Phone needs CRLDP attribute in the RADIUS/CA vert or its not happy and refuses the connection. Alan Buxey@2013-07-11T23:44:03Z Files modified: * raddb/certs/README * raddb/certs/ca.cnf * raddb/certs/xpextensions Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/35ea7a2c1b72e36b6f9d… ====== -- This commit summary was generated @2013-07-13T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 12 Jul '13

12 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #363 from mcnewton/v2.x.x add more error messages when config error in realms or home servers Arran Cudbard-Bell@2013-07-12T12:26:37Z Files modified: * src/main/mainconfig.c * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b22183ae870f01dc97a0… ====== add more error messages when config error in realms or home servers Matthew Newton@2013-07-12T12:18:07Z Files modified: * src/main/mainconfig.c * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b8e936caaaea5efa3f6a… ====== Merge pull request #362 from alanbuxey/v2.x.x windows phone doesn't accept vert for validation if it doesn't contain CRLCP Arran Cudbard-Bell@2013-07-12T00:02:12Z Files modified: * raddb/certs/README * raddb/certs/ca.cnf * raddb/certs/xpextensions Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e74bb43dd9abc57d5eb… ====== windows phone doesn't accept vert for validation if it doesn't contain CRLCP CRLDP attribute needs to be present in CA/RADIUS vert or Windows Phone won't validate the cert. as found by eduroam people struggling with windows phone (same fix in 3.x) Alan Buxey@2013-07-11T23:46:41Z Files modified: * raddb/certs/README * raddb/certs/ca.cnf * raddb/certs/xpextensions Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/862a6b7cd606c6f69221… ====== -- This commit summary was generated @2013-07-13T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Blow-up in username filter?
by stefan.paetow＠diamond.ac.uk 12 Jul '13

12 Jul '13

Hi, I've been across the road to one of our partners who used beta1 of FR 3.0 for their test server. We discovered that in debug mode (radiusd -X) the standard username filter apparently blew up with a stack trace mentioning a double free? *grimace* I'll try to reproduce this in FR 3 RC0, but I just wanted to check whether you guys (Arran, Alan D, etc) possibly made any changes in that area between Beta1 and RC0 that might make this go away and not reproduce? Regards Stefan Paetow Software Engineer +44 1235 778812 Diamond Light Source Ltd. Diamond House, Harwell Science and Innovation Campus Didcot, Oxfordshire, OX11 0DE -- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom

2 2