August 2013 - Freeradius-Devel - lists.freeradius.org

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

freeradius 2.2.1 release date?
by Bruce Bauman 01 Oct '13

01 Oct '13

Is 2.2.1 close to release, or is no release planned because 3.0 is so close? We are using 2.2.0 and a few of the features introduced in 2.2.1 would be really useful for us. In particular expansion of the "reference" configuration item to adjust the accounting SQL queries. -- Bruce Bruce Bauman - Systems Administrator Rutgers University Office of Information Technology Campus Computing Services - Central Systems and Services Office ~ (848) 445-6363

4 6

connection pooling
by Aaron Hurt 08 Sep '13

08 Sep '13

I am using the new connection pooling in my module for accounting/authentication against couchbase ( https://github.com/leprechau/rlm_couchbase ). This was working very well until I rebuilt recently (yesterday) against the latest release_branch_3.0.0 branch. I am now seeing the below errors in the logs that cause radiusd to crash. Wed Aug 28 15:39:30 2013 : Info: rlm_couchbase (couchbase): Closing connection (16): Too many free connections (23 > 20) Wed Aug 28 15:39:31 2013 : Info: rlm_couchbase (couchbase): Closing connection (35): Too many free connections (22 > 20) Wed Aug 28 15:39:32 2013 : Info: rlm_couchbase (couchbase): Closing connection (39): Too many free connections (21 > 20) Wed Aug 28 15:39:37 2013 : Info: rlm_couchbase (couchbase): Opening additional connection (53) Wed Aug 28 15:39:40 2013 : Info: rlm_couchbase (couchbase): Opening additional connection (54) Wed Aug 28 15:39:46 2013 : Info: talloc: access after free error - first free may be at src/lib/valuepair.c:146 Wed Aug 28 15:39:46 2013 : Info: Bad talloc magic value - access after free I cannot reproduce it with -X or -xx but can see it plainly when started normally. I also cannot seem to reproduce it if I set the pool start/min/max/spare all to 1 in my module configuration. Has there been a change in the connection pool API that would require a change in my code using this API? -- Aaron

2 3

Commit report for master branch
by announce＠freeradius.org 31 Aug '13

31 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use destructors to do the cleanup for VALUE_PAIRs Arran Cudbard-Bell@2013-08-31T18:56:49Z Files modified: * src/include/libradius.h * src/lib/valuepair.c * src/main/conffile.c * src/main/xlat.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_rest/rest.c * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a92afb6cfe999b61c2af… ====== Add pairsteal function Arran Cudbard-Bell@2013-08-30T18:36:23Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c94f3e6fe32523acd713… ====== -- This commit summary was generated @2013-09-01T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 30 Aug '13

30 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix -Wsometimes-uninitialized Arran Cudbard-Bell@2013-08-30T15:16:52Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16af81b7022154821280… ====== Record whether the server was built with NDEBUG in features.h Arran Cudbard-Bell@2013-08-30T15:16:52Z Files modified: * configure * configure.ac * src/include/autoconf.h.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b54ad42f940c3aeda4d… ====== -- This commit summary was generated @2013-08-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 29 Aug '13

29 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #420 from olivierbeytrison/asa-dict add Cisco ASA Dictionary Arran Cudbard-Bell@2013-08-29T16:14:54Z Files modified: * share/dictionary * share/dictionary.cisco.asa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55c1b9ce5ee444f2bc77… ====== add Cisco ASA Dictionary Olivier Beytrison@2013-08-29T16:13:50Z Files modified: * share/dictionary * share/dictionary.cisco.asa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d656901a5e9c4193da4… ====== -- This commit summary was generated @2013-08-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 28 Aug '13

28 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== and one more.. Arran Cudbard-Bell@2013-08-28T10:26:56Z Files modified: * share/dictionary.altiga Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d54d4b7a417f230680d3… ====== Fixup dictionary formatting Arran Cudbard-Bell@2013-08-28T10:15:12Z Files modified: * share/dictionary.3gpp * share/dictionary.3gpp2 * share/dictionary.alcatel.sr * share/dictionary.alvarion * share/dictionary.bskyb * share/dictionary.chillispot * share/dictionary.dante * share/dictionary.dhcp * share/dictionary.freeradius * share/dictionary.freeradius.internal * share/dictionary.huawei * share/dictionary.infonet * share/dictionary.motorola.wimax * share/dictionary.nokia.conflict * share/dictionary.paloalto * share/dictionary.prosoft * share/dictionary.rfc4603 * share/dictionary.rfc5176 * share/dictionary.rfc6519 * share/dictionary.rfc6677 * share/dictionary.siemens * share/dictionary.starent * share/dictionary.starent.vsa1 * share/dictionary.ukerna * share/dictionary.wimax * share/dictionary.wimax.wichorus * share/dictionary.zyxel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b74309bccaba44abc00… ====== Add brocade dictionary Arran Cudbard-Bell@2013-08-28T10:13:43Z Files modified: * share/dictionary * share/dictionary.brocade Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16e3d5ee33fa3fd636b6… ====== -- This commit summary was generated @2013-08-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 28 Aug '13

28 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Sprinkle VERIFY_VP throughout the encoder Arran Cudbard-Bell@2013-08-28T15:38:32Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a47576d1bc26efd79304… ====== Add brocade dictionary Arran Cudbard-Bell@2013-08-28T10:12:29Z Files modified: * share/dictionary * share/dictionary.brocade Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e17e0c2c411134b8489b… ====== -- This commit summary was generated @2013-08-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 27 Aug '13

27 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Typo Arran Cudbard-Bell@2013-08-27T21:10:10Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82bfdcdc1d3f26b3d056… ====== Fix typo in --with-shared-libs --with-shared-libs=no is useful in multiversion environments as libfreeradius is compiled into the various utilities and the server library is compiled into radiusd Arran Cudbard-Bell@2013-08-27T19:21:11Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b3182e49384913ea5bd… ====== Correct typo. We should use foreach_depth as the request data index not stack depth. Various whitespace fixes Arran Cudbard-Bell@2013-08-27T18:43:19Z Files modified: * src/main/modcall.c * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c220c8bdef8f79b04afa… ====== Make sure our temporary attribute isn't accidentally freed Arran Cudbard-Bell@2013-08-27T17:31:30Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7548f99aee393f6b8118… ====== -- This commit summary was generated @2013-08-28T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 26 Aug '13

26 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make libpcap location configurable from the commandline because of stupid solaris systems which don't search for it in the default installation dir Arran Cudbard-Bell@2013-08-26T20:14:21Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2b0f5ed1975b46fcc731… ====== Remove extraneous assertion. Closes #414. Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-26T14:48:21Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fa2b045c54bc149138d… ====== Correct logic for "elsif" Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-26T14:41:45Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46f0eb7e90d86e160548… ====== Clean up debug / info messages Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-26T14:41:34Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4a99774fc02dcc746ec7… ====== Initialize "found" Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-26T14:41:30Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49d63e208444ea0ac9e7… ====== Fix typo in debug message Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-26T14:41:25Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11287601506462c9e587… ====== Fix placement of parse error in condition Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-26T14:41:20Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/67216006372ffdb095d7… ====== Manage dl handle properly in rlm_python, else coverity detects this as a resource leak Arran Cudbard-Bell@2013-08-26T13:36:17Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e5a63b33b3df1f181c3… ====== -- This commit summary was generated @2013-08-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 24 Aug '13

24 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Load Python with RTLD_GLOBAL to ensure symbols are accessible by dynload libraries / C extensions (by Zach Kanzler) Arran Cudbard-Bell@2013-08-24T20:25:19Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/229cc969c899b488d5dc… ====== Move the stringify macros to build.h Arran Cudbard-Bell@2013-08-24T19:04:08Z Files modified: * src/include/build.h * src/include/conffile.h * src/main/detail.c * src/main/mainconfig.c * src/main/realms.c * src/main/xlat.c * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ee0aee1791b6d0a821b… ====== If there's no packet, don't add module_failure_msg. Closes #407 Alan T. DeKok@2013-08-24T16:09:24Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b42f7e23505998c10da… ====== -- This commit summary was generated @2013-08-25T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 23 Aug '13

23 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Don't set home server to NULL. It's needed for other things Alan T. DeKok@2013-08-23T21:37:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8bab9a741e561eedf0c… ====== Clean up "close socket" routines. We use the new rbtree DeleteOrder when walking over the packet list. When the "eol tcp/proxy listener" callback is run, it can return "please delete this node", instead of calling rbtree_delete. Doing that allows the walker to be aware of deletions, unlike before. This turned out to make the code simpler, and the whole event fd handling has become more robust. Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-23T15:20:05Z Files modified: * src/include/packet.h * src/include/radiusd.h * src/lib/packet.c * src/main/command.c * src/main/listen.c * src/main/process.c * src/main/radclient.c * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7801a82ecba3cecb108f… ====== Build the rbmonkey test tool Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-23T15:09:33Z Files modified: * src/all.mk * src/tests/all.mk * src/tests/rbmonkey.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4b2f82bdc6384467dc8… ====== Formatting and warning fixes Alan T. DeKok (via Arran Cudbard-Bell)@2013-08-23T15:09:33Z Files modified: * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0054a61aafbbb6eddafb… ====== Fix a typo Alan T. DeKok@2013-08-23T15:06:46Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d10d00d252d6b09a2edf… ====== Whoops... handle MOD_CASE, too Alan T. DeKok@2013-08-23T14:46:24Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4acea73e87b945c6c8a9… ====== Rewrite the modcall MOD_* handlers. Updates #404. The old code wasn't worth debugging. With a few hours work, the new code is simpler, more understandable, and avoids the bug entirely. Alan T. DeKok@2013-08-23T14:32:15Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/43389b7be6e9e5c121a1… ====== Merge pull request #413 from olivierbeytrison/rlm_cache-refresh enhancements to rlm_cache Arran Cudbard-Bell@2013-08-23T10:38:28Z Files modified: * raddb/mods-available/cache * share/dictionary.freeradius.internal * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a38aea824e5e4766510… ====== Allow to delete and recreate a cache entry with a single call to cache Olivier Beytrison@2013-08-22T17:20:38Z Files modified: * raddb/mods-available/cache * share/dictionary.freeradius.internal * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffa9ec8fa5cab1d4f025… ====== Typo Arran Cudbard-Bell@2013-08-23T00:51:35Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ceed95e64be43e2441e… ====== -- This commit summary was generated @2013-08-24T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

3.0 release schedule
by John Dennis 23 Aug '13

23 Aug '13

rc0 was released on July 11th. Since then I haven't heard anything about the release schedule. Monitoring the list shows some issues were discovered in rc0 which needed attention. Will there be an rc1? If so when? Is there an anticipated release date for 3.0 gold? I ask because RHEL-7 is moving along and I think everyone would like to see FreeRADIUS 3.0 be in RHEL-7 instead of 2.2.0. But the window of opportunity is rapidly closing. I cannot give you internal milestone dates, but I can say that an exception is being made for FreeRADIUS and management is quite concerned about a major new version landing in RHEL-7 without adequate preparation and a significant discussion is occurring on this topic and it would help if I could provide some clarifying information for our planning purposes. -- John

2 2

Commit report for master branch
by announce＠freeradius.org 22 Aug '13

22 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #412 from armitasp/master cui sql fixes Arran Cudbard-Bell@2013-08-22T14:39:56Z Files modified: * raddb/mods-available/cui * raddb/mods-config/sql/cui/mysql/queries.conf * raddb/mods-config/sql/cui/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d68402e8b2afb992ef6d… ====== added helpful comments to cui module GEANT GN3 JRA3 T1@2013-08-22T14:10:40Z Files modified: * raddb/mods-available/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a8da02bc1e37c30ba08… ====== fixed cui post-auth queries for mysql GEANT GN3 JRA3 T1@2013-08-22T13:56:00Z Files modified: * raddb/mods-config/sql/cui/mysql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4286dfc461327b5032b3… ====== fixed cui post-auth queries for sqlite GEANT GN3 JRA3 T1@2013-08-22T13:54:24Z Files modified: * raddb/mods-config/sql/cui/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d7315be59eaeed639c7… ====== -- This commit summary was generated @2013-08-23T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 21 Aug '13

21 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #406 from alanbuxey/master removed 2 compilation warnings in rlm_python Arran Cudbard-Bell@2013-08-21T17:25:48Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d444dbf6c4db4781828… ====== removed 2 compilation warnings in rlm_python warning: suggest explicit braces to avoid ambiguous ‘else’ - used braces to remove these warnings. Alan Buxey@2013-08-18T23:45:49Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/006d0db1b335eb5876cd… ====== -- This commit summary was generated @2013-08-22T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Request - Modification to Status Server to have Clients Stats in separate VSAs
by Peter Lambrechtsen 21 Aug '13

21 Aug '13

I'm currently playing around with the Status Server for stats gathering and was hoping to have a minor change in the interface to support extracting the Client information under different VSAs rather than reusing the current "FreeRADIUS-Total-*" VSAs. It's not particularly logical in my view to have the same VSA returned twice in a Access-Accept, and then needing to determine if it's the client related one or the global server related one by it's sequence in the payload. It would make more sense in my mind to have the Client stats as separate VSAs. For this new VSAs for the FreeRADIUS-Client-* or FreeRADIUS-Stats-Client-* would be required since then the Total server values vs . I'm suggesting adding add them onto the current list numbering scheme or the other option is to add 100 to the current numbers. https://github.com/FreeRADIUS/freeradius-server/blob/master/share/dictionar… # # Client authentication statistics for packets received by the server. # ATTRIBUTE FreeRADIUS-Client-Access-Requests 186 integer ... ATTRIBUTE FreeRADIUS-Client-Auth-Unknown-Types 195 integer # # Client accounting statistics for packets received by the server. # ATTRIBUTE FreeRADIUS-Client-Accounting-Requests 196 integer ... ATTRIBUTE FreeRADIUS-Client-Acct-Unknown-Types 202 integer or # # Client authentication statistics for packets received by the server. # ATTRIBUTE FreeRADIUS-Client-Access-Requests 228 integer ... ATTRIBUTE FreeRADIUS-Client-Auth-Unknown-Types 237 integer # # Client accounting statistics for packets received by the server. # ATTRIBUTE FreeRADIUS-Client-Accounting-Requests 248 integer ... ATTRIBUTE FreeRADIUS-Client-Acct-Unknown-Types 254 integer Then update the stats to use those AVPs: https://github.com/FreeRADIUS/freeradius-server/blob/master/src/main/stats.c Line 406: static fr_stats2vp client_authvp[] = { { 186, offsetof(fr_stats_t, total_requests) }, ... { 195, offsetof(fr_stats_t, total_unknown_types) }, { 0, 0 } }; #ifdef WITH_ACCOUNTING static fr_stats2vp client_acctvp[] = { { 196, offsetof(fr_stats_t, total_requests) }, ... { 202, offsetof(fr_stats_t, total_unknown_types) }, { 0, 0 } }; #endif Which ever you believe is the more appropriate range to use either adding onto the sequential numbering scheme, or adding 100 (I suspect adding onto the existing range would be better) And also change around line 624 where it does the validation to see if you want client information or not: if ((flag->vp_integer & 0x01) != 0) { request_stats_addvp(request, client_authvp, &client->auth); } #ifdef WITH_ACCOUNTING if ((flag->vp_integer & 0x01) != 0) { request_stats_addvp(request, client_acctvp, &client->acct); } #endif I would just add the client VSA attributes in no matter what since if you are requesting client information with bit 0x20 you wanted client information, no point in having a check to see if the auth bit is turned on, so I would have it: request_stats_addvp(request, client_authvp, &client->auth); #ifdef WITH_ACCOUNTING request_stats_addvp(request, client_acctvp, &client->acct); #endif Another idiosyncrasy is if you query by "FreeRADIUS-Stats-Client-IP-Address" then that vp gets copied back as per line 590: pairadd(&request->reply->vps, paircopyvp(request->reply, vp)); But you have no way to know which client number was used in that response and if that client was a static clients.conf client, a dynamic client or one defined in the status-server . Since the other interesting thing I noticed was Clients that are defined in the Status Server site also add onto the total list of clients assigned to the server. So if your clients.conf has 8 clients defined, clients 0 -> 7 are from the clients.conf, client 8 is the first client defined in the status server config. So it would be nice if the "Client-Type" or "Client belongs to server base/dynamic/status/xxx" could be returned as an extra VSA. The other thing that would be nice would be to add IPv6 support into the Stats engine too, but that would require changes to client.c as well since the "client_find" function would need to be updated to include v6 lookup as well as the current v4. I know patches are welcome and I will work on getting a patch for the client to always return the client values and to have client specific VSAs, but thought I should ask first as the status server is part of the server core before I created something. Thoughts and comments? Cheers Peter

2 3

Commit report for master branch
by announce＠freeradius.org 20 Aug '13

20 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #410 from theY4Kman/patch-2 PySys_SetPath must go after Py_Initialize Arran Cudbard-Bell@2013-08-20T23:14:37Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e69d9fd66b1f88efcd7… ====== PySys_SetPath must go after Py_Initialize I believe (but have not confirmed) it is because PySys_SetPath calls PySys_SetObject, which retrieves the sysdict from the Python thread state, which is not initialized until Py_Initialize. Cheers! Zach Kanzler@2013-08-20T23:03:48Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/625fcb5e76410c31d624… ====== Merge pull request #409 from theY4Kman/patch-1 Fix braces in rlm_python Arran Cudbard-Bell@2013-08-20T22:24:41Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16cda528408d3158fbe3… ====== goto your corner Braces around multiple statements in an if block. Naughty, naughty! :) Zach Kanzler@2013-08-20T22:10:18Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be189e4a8f9968242f83… ====== Fix segv in rlm_expiration vp_strvalue no longer available for none string attributes Arran Cudbard-Bell@2013-08-20T15:10:55Z Files modified: * src/modules/rlm_expiration/rlm_expiration.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f66d41109ad4798f76f5… ====== -- This commit summary was generated @2013-08-21T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

FR3.0 and LDAP
by Maja Wolniewicz 20 Aug '13

20 Aug '13

Now I'm testing FR3.0 with LDAP. PEAP and NT-Password in a LDAP database works now well, but I have a problem with EAP-TTLS. In FR2.2 after authorizing a user in the authorize section of inner-tunnel, Auth-Type=LDAP is set and then authentication goes to the LDAP module. In FR3.0 the Auth-Type=LDAP isn't set in the rlm_ldap module, the authorize section ends with Auth-Type=PAP, so authentication goes to the PAP module. I can't find a place in the FR3.0 source, where Auth-Type=LDAP is set - in a few comments it is mentioned that such a setting happens automatically. Am I missing something? Maja -- Maja Gorecka-Wolniewiczmgw(a)umk.pl Uczelniane Centrum Information & Communication Informatyczne Technology Centre Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574

4 15

Commit report for v2.x.x branch
by announce＠freeradius.org 17 Aug '13

17 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Updates Alan T. DeKok@2013-08-17T20:10:09Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f36b8fdea5c0064c0b77… ====== -- This commit summary was generated @2013-08-18T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 16 Aug '13

16 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Keep track of the number of file descriptors were listening on Arran Cudbard-Bell@2013-08-16T20:28:27Z Files modified: * src/include/event.h * src/lib/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9815d0466e246f1c6d98… ====== Don't segv if asked to print a null value Arran Cudbard-Bell@2013-08-16T20:28:27Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/edd08f0ec498a48ff60e… ====== Simplify "proxy anew" code Now that the packet list re-uses Ids less often Alan T. DeKok@2013-08-16T16:11:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a0f95352a5cd953f2fd… ====== Simplify ID allocation so that we don't loop over all IDs Instead, we allocate a 256-entry array of random IDs (all unique) and gradually use them. When the array is empty, we re-fill it. Alan T. DeKok@2013-08-16T16:11:42Z Files modified: * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3587f98f305cc3eef508… ====== Unify error logic Alan T. DeKok@2013-08-16T15:03:36Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f09bf3c3bb7f4a858d76… ====== Merge pull request #328 from skids/rbtree Fixes and enhancements for rbtree Alan DeKok@2013-08-16T04:52:28Z Files modified: * src/include/libradius.h * src/lib/rbtree.c * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/995734aec92e6c43de99… ====== A test file for libradius rbtree ops Verifies red/black counts to all child nodes after adds/deletes Tests DeleteOrder; code provided in comments for vanilla rbtree_delete. Build system magic necessary for this is beyond me. It's a start at least skids@2013-06-26T00:52:15Z Files modified: * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2011d7689f0fb05d87f1… ====== Add a batch deletion mode to rbtree_walk Walks the tree calling callbacks as per InOrder Allows callback to ask for deletion of records after evaluating criteria All callbacks and deletions done while lock is held skids@2013-06-26T00:47:14Z Files modified: * src/include/libradius.h * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c8685598bbb6c72393f4… ====== Always fixup after deleting a black child node in rbtree This prevents rbtree_delete from creating unbalanced/illegal rbtrees. skids@2013-06-25T02:40:48Z Files modified: * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/863a4f70d7bd876d73da… ====== Use a consistent callback return code This is the one place in the codebase where a positive return code is used in an rbtree_walk callback. Changing it negative should have no effect, and keeps options open as to whether to introduce new symbols for the next patch to follow, or to change the libfreeradius API slightly WRT rbtree callback return codes. Whether any third-party add-ons may use positive return codes is not known. skids@2013-06-20T22:54:31Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/95949807d08e84ea4526… ====== Add rbtree_callbydata for sane threadsafe/garbage-collected operations When working with an rbtree which is exposed to multiple threads, it is not safe to do much of anything with data retrieved by functions such as rbtree_finddata, other than to feed it directly to rbtree_delete. This is because once rbtree_finddata has returned, another thread may obtain a pointer to that data (and hence may begin mangling non-key material such as container_of or any child allocs.) This is especially true for rbtrees that have a freeNode garbage collection routine defined. This function allows safe operations while the rbtree lock is still held. It also allows for a conditional delete operation based on criteria which may only be safe to ascertain while the lock is held. In addition to short operations, it could be used, with due care, to trylock a more granular lock associated with the key before deleting the key or before operating with it outside of the rbtree lock. skids@2013-06-20T22:03:20Z Files modified: * src/include/libradius.h * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e1b597d1a281e20a10ff… ====== Fix obvious pasto in PostOrder walk. skids@2013-06-20T04:47:33Z Files modified: * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a89132cf443a6f621374… ====== -- This commit summary was generated @2013-08-17T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 15 Aug '13

15 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== don't segv printing interfaceid Arran Cudbard-Bell@2013-08-15T19:17:01Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da5f8e2702e2e185a075… ====== Remove redundant headers Alan T. DeKok@2013-08-15T15:39:09Z Files modified: * src/main/command.c * src/main/connection.c * src/main/log.c * src/main/mainconfig.c * src/main/process.c * src/main/radattr.c * src/main/radiusd.c * src/main/radmin.c * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4bc52eb8a5e8c5a71af4… ====== Remove redundant headers Alan T. DeKok@2013-08-15T15:38:32Z Files modified: * src/lib/base64.c * src/lib/hash.c * src/lib/heap.c * src/lib/hmac.c * src/lib/hmacsha1.c * src/lib/print.c * src/lib/tcp.c * src/lib/token.c * src/lib/udpfromto.c * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d64b4a71cdfbbdc977f5… ====== Add pairvalidate_relaxed. This matches if not all attributes in the list are specified by the filter. Fix !* operator in pairvalidate (this has to be done outside of paircmp) Arran Cudbard-Bell@2013-08-15T14:29:08Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ce0b5cfd95360c1de5fa… ====== If the DA doesn't say the attribute is meant to be tagged, then ignore tag values when searching Also rename dattr to da Arran Cudbard-Bell@2013-08-15T14:29:08Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b687f98682365ec9b918… ====== -- This commit summary was generated @2013-08-16T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 14 Aug '13

14 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make it bool Alan T. DeKok@2013-08-14T18:45:52Z Files modified: * src/include/packet.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37a76484cca62157d76e… ====== packet list id alloc/free now inserts / yanks the packet, too Alan T. DeKok@2013-08-14T18:38:22Z Files modified: * src/include/packet.h * src/lib/packet.c * src/main/process.c * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0af11e8c0fa406936a06… ====== Made more functions return bool Alan T. DeKok@2013-08-14T18:36:18Z Files modified: * src/include/packet.h * src/lib/packet.c * src/main/process.c * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2fb60646d9a62fbe63a… ====== Return codes are boolean Alan T. DeKok@2013-08-14T18:34:16Z Files modified: * src/include/libradius.h * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a13936b236aa3437761d… ====== Check return code of packet_list_yank Alan T. DeKok@2013-08-14T18:32:24Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a699978dcb69fc12fec… ====== Made packet_list_yank return a bool for success/failure Alan T. DeKok@2013-08-14T18:32:22Z Files modified: * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/124aba085f55bb323643… ====== Typo Arran Cudbard-Bell@2013-08-14T12:27:30Z Files modified: * src/include/radsniff.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5849e9e4310a787f4355… ====== Rewrite the majority of the packet processing logic Introduce a request structure like we use in the server core, and use this to represent the request/response link. This allows us to detect lost packets (where we never saw a response even after multiple requests), retransmissions where we see packets with the same src/dst parameters and request authenticator/nonce, and premature reuse of packet IDs. This also implements the first required dequeueing scheme (previously there was none), which remove requests from the rbtree. The second dequeuing scheme removes requests/responses immediately as soon as a response is received, and the third never bothers inserting requests/responses into the queue. The other schemes need to be implemented later, and specified by the user for individual packet types. Arran Cudbard-Bell@2013-08-14T12:06:23Z Files modified: * src/include/radsniff.h * src/main/collectd.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed0c55a578da56fe1512… ====== -- This commit summary was generated @2013-08-15T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 13 Aug '13

13 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add spaces after breaks Arran Cudbard-Bell@2013-08-13T23:11:28Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/495a1fb5b1794dc96104… ====== Add missing break Arran Cudbard-Bell@2013-08-13T23:09:35Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5db2a2706fd56071de0… ====== Fix more issues for new v3 API Alan T. DeKok@2013-08-13T15:06:36Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1e50cd76ae6c0b8f572… ====== Update help text Arran Cudbard-Bell@2013-08-13T12:39:14Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1cf039917f395ad4c4db… ====== Batch up packet processing Arran Cudbard-Bell@2013-08-13T12:39:09Z Files modified: * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1bcdcd90053820fbf5fe… ====== Set start_pcap outside of the processing loop Arran Cudbard-Bell@2013-08-13T12:39:03Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/135cd5eed241608bff67… ====== Support decoding IPv6 headers Fixes decode errors when IPv6 loopback address is used, and allows radsniff to be used to decode RADIUS over IPv6. Arran Cudbard-Bell@2013-08-13T12:38:58Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/672e0234eb81a16e82d7… ====== Freeing the filter tree should be one of the last things we do... Arran Cudbard-Bell@2013-08-13T12:38:51Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7000fef9f4ded1bdecc6… ====== Move default secret to radsniff.h Arran Cudbard-Bell@2013-08-13T12:38:44Z Files modified: * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d5f119448f1a9f9c24b… ====== Fix email in copyright Arran Cudbard-Bell@2013-08-13T12:38:38Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a218a1c847d241312220… ====== Better checks for drops Arran Cudbard-Bell@2013-08-13T12:38:32Z Files modified: * src/include/pcap.h * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c52fd27a1915f35300e… ====== Update stats structure (remove separate loss structure) Arran Cudbard-Bell@2013-08-13T12:38:26Z Files modified: * src/include/radsniff.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb8b30c1084a54a48e1f… ====== Merge pull request #405 from olivierbeytrison/fix-radeapclient Correct call to paircreate in radeapclient Arran Cudbard-Bell@2013-08-13T11:54:26Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49cefa38b42d0f234d04… ====== Correct call to paircreate in radeapclient Olivier Beytrison@2013-08-13T11:56:44Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/482d00492403e962ab6d… ====== -- This commit summary was generated @2013-08-14T00:00:11Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 12 Aug '13

12 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix horrific spacing issue. Alan T. DeKok@2013-08-12T21:40:29Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c94e0d9abcf7bc35dacd… ====== Actually use virtual server when proxying to it. Closes #375 Alan T. DeKok@2013-08-12T16:22:26Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9f0f66ff67508476efcc… ====== free -> talloc_free Alan T. DeKok@2013-08-12T15:17:17Z Files modified: * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73a88aa2d8136f9ff8ae… ====== -- This commit summary was generated @2013-08-13T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 11 Aug '13

11 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Only print foreach close brace once. Closes #377 Alan T. DeKok@2013-08-11T16:39:34Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20192a93d53a9a17e97f… ====== -- This commit summary was generated @2013-08-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0