December 2014 - Freeradius-Devel - lists.freeradius.org

Commit report for v2.x.x branch
by announce＠freeradius.org 09 Dec '14

09 Dec '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Allow spaces in certificate passwords Alan T. DeKok@2014-12-09T21:58:04Z Files modified: * raddb/certs/.gitignore * raddb/certs/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/252275d01ac9203d4099… ====== -- This commit summary was generated @2014-12-10T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 08 Dec '14

08 Dec '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More tests Alan T. DeKok@2014-12-08T21:31:12Z Files modified: * src/tests/unit/escape.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4a4582066ac5eb38cdcf… ====== Print *data* not *pointer* if it's octets Alan T. DeKok@2014-12-08T21:31:12Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8ff72fed02665faf1e9… ====== Missed cast Arran Cudbard-Bell@2014-12-08T21:01:34Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e870dd464e566add532… ====== Doxygen Arran Cudbard-Bell@2014-12-08T20:56:02Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/54625add39a2e9f3c92e… ====== Fixup LDAP group debugging messages so they're more useful Operations are now idented by group being checked Also fixup quadratic group membership attribute insertion Arran Cudbard-Bell@2014-12-08T20:35:46Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/67444de5f23376826754… ====== Copyright notices Arran Cudbard-Bell@2014-12-08T20:35:46Z Files modified: * src/modules/rlm_cache/rlm_cache.h * src/modules/rlm_cache/serialize.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff4937cc8b61e1a63515… ====== Break out serialization functions from rlm_cache_memcached Arran Cudbard-Bell@2014-12-08T20:35:46Z Files modified: * src/modules/rlm_cache/drivers/rlm_cache_memcached/all.mk.in * src/modules/rlm_cache/drivers/rlm_cache_memcached/rlm_cache_memcached.c * src/modules/rlm_cache/serialize.c * src/modules/rlm_cache/serialize.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5afb80ad8b6b0cbd7906… ====== Add note on pairstrncpy Arran Cudbard-Bell@2014-12-08T20:35:46Z Files modified: * src/lib/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f40ace067a46b3a0468a… ====== Rename fr_print_string to fr_prints Arran Cudbard-Bell@2014-12-08T20:35:46Z Files modified: * src/include/libradius.h * src/lib/dict.c * src/lib/print.c * src/main/auth.c * src/main/collectd.c * src/main/radwho.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e70224115570bdd84546… ====== exfile_open now opens files for read/writing, which is useful if the exfile instance may be used to acquire fds for reading too add 'append' argument, that controls whether exfile_open seeks to the end of the file. Arran Cudbard-Bell@2014-12-08T20:35:45Z Files modified: * src/include/exfile.h * src/main/exfile.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c3019bde4da44771a1fa… ====== Make fr_print_string take -1 to signify that it should calculate the length of inlen Fix fr_print_string_len to produce the correct length (fr_print_string was modified without equivalent modifications being made to fr_print_string_len) Add fr_aprints to allocate a printable string Arran Cudbard-Bell@2014-12-08T20:35:45Z Files modified: * src/include/libradius.h * src/lib/print.c * src/main/radwho.c * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b27298b276a53a3e9e4… ====== Make it clear why the xlat failed Arran Cudbard-Bell@2014-12-08T20:35:45Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dfb65ed351b75ff1d6a6… ====== Convert all calls to ldap_get_values (now deprecated) to ldap_get_values_len Arran Cudbard-Bell@2014-12-08T20:35:45Z Files modified: * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/config.h.in * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b95ba011e5b8351e55e5… ====== Fixup stupidity around rlm_ldap URL handling We can accept URLs in either format irrespective of whether ldap_initialize() is available or not Arran Cudbard-Bell@2014-12-08T20:35:45Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c9837621636379a1ec9a… ====== Use cf_log_err to log config errors in rlm_ldap Arran Cudbard-Bell@2014-12-08T20:35:45Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/253ee66fe60777076626… ====== Note recent changes Alan T. DeKok@2014-12-08T17:04:44Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d148e39443b67de79623… ====== Merge pull request #850 from mcnewton/patch-dpkg set debian package format to native Alan DeKok@2014-12-08T17:04:18Z Files modified: * debian/source/format * debian/source/local-options Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/90067bddbe6ab25a805a… ====== set debian package format to native With the quilt format you can't build a dpkg from git unless you package up into a tarball first as well. Removes local-options (unapply patches) so that make deb still works with a native format package. Matthew Newton@2014-12-05T22:06:42Z Files modified: * debian/source/format * debian/source/local-options Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/65fb900e576b8eda0514… ====== Save Module-Failure-Message to the outer session-state Alan T. DeKok@2014-12-08T16:38:05Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/70f769d0f2c217399a32… ====== Mark requests as alloc'd Alan T. DeKok@2014-12-08T14:24:55Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7449eb29596e189087d… ====== Quiet scanner Alan T. DeKok@2014-12-08T00:42:27Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/57240b91cd91b77e5248… ====== Quiet scan. We really need to take a pass through the source marking up every function with CC_HINT(nonnull). Just like we fixed all of the other compiler warnings Alan T. DeKok@2014-12-08T00:36:35Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7abb76d2aef51fac7851… ====== -- This commit summary was generated @2014-12-09T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 Dec '14

08 Dec '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More tests Alan T. DeKok@2014-12-08T21:31:26Z Files modified: * src/tests/unit/escape.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d1f411ec3e1ae26449e… ====== Print *data* not *pointer* if it's octets Alan T. DeKok@2014-12-08T21:31:25Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/40426826afec98ab9305… ====== Missed cast Arran Cudbard-Bell@2014-12-08T21:01:39Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/95215ca48c9cb30e645c… ====== Doxygen Arran Cudbard-Bell@2014-12-08T20:56:08Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21f762ba20b77e501202… ====== Fixup LDAP group debugging messages so they're more useful Operations are now idented by group being checked Also fixup quadratic group membership attribute insertion Arran Cudbard-Bell@2014-12-08T20:35:31Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0c20d10dcd220c6fd44… ====== Copyright notices Arran Cudbard-Bell@2014-12-08T20:35:30Z Files modified: * src/modules/rlm_cache/rlm_cache.h * src/modules/rlm_cache/serialize.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0257a1c7bc257f338d73… ====== Break out serialization functions from rlm_cache_memcached Arran Cudbard-Bell@2014-12-08T20:35:30Z Files modified: * src/modules/rlm_cache/drivers/rlm_cache_memcached/all.mk.in * src/modules/rlm_cache/drivers/rlm_cache_memcached/rlm_cache_memcached.c * src/modules/rlm_cache/serialize.c * src/modules/rlm_cache/serialize.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9cf9ff7496c86a528f1f… ====== Add note on pairstrncpy Arran Cudbard-Bell@2014-12-08T20:35:30Z Files modified: * src/lib/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4af6a6deb1a37a1378b7… ====== Rename fr_print_string to fr_prints Arran Cudbard-Bell@2014-12-08T20:35:30Z Files modified: * src/include/libradius.h * src/lib/dict.c * src/lib/print.c * src/main/auth.c * src/main/collectd.c * src/main/radwho.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d517e5672bd6e720ffb… ====== exfile_open now opens files for read/writing, which is useful if the exfile instance may be used to acquire fds for reading too add 'append' argument, that controls whether exfile_open seeks to the end of the file. Arran Cudbard-Bell@2014-12-08T20:35:30Z Files modified: * src/include/exfile.h * src/main/exfile.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/224b599ed06c99366261… ====== Make fr_print_string take -1 to signify that it should calculate the length of inlen Fix fr_print_string_len to produce the correct length (fr_print_string was modified without equivalent modifications being made to fr_print_string_len) Add fr_aprints to allocate a printable string Arran Cudbard-Bell@2014-12-08T20:35:30Z Files modified: * src/include/libradius.h * src/lib/print.c * src/main/radwho.c * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/15e17bfe2c5cd1e9942c… ====== Make it clear why the xlat failed Arran Cudbard-Bell@2014-12-08T20:35:30Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d02dad62d821d21e055… ====== Convert all calls to ldap_get_values (now deprecated) to ldap_get_values_len Arran Cudbard-Bell@2014-12-08T20:35:30Z Files modified: * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/config.h.in * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c45c3a13fd8c229802c8… ====== Fixup stupidity around rlm_ldap URL handling We can accept URLs in either format irrespective of whether ldap_initialize() is available or not Arran Cudbard-Bell@2014-12-08T20:35:29Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e7fc120fc592c0c6fa1… ====== Use cf_log_err to log config errors in rlm_ldap Arran Cudbard-Bell@2014-12-08T20:35:29Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e4366c661ce90a3d76c… ====== set debian package format to native With the quilt format you can't build a dpkg from git unless you package up into a tarball first as well. Removes local-options (unapply patches) so that make deb still works with a native format package. Matthew Newton (via Alan T. DeKok)@2014-12-08T17:04:55Z Files modified: * debian/source/format * debian/source/local-options Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/44badb9c5d5ea0f679d6… ====== Save Module-Failure-Message to the outer session-state Alan T. DeKok@2014-12-08T16:38:53Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae02002fa6101619d166… ====== Mark requests as alloc'd Alan T. DeKok@2014-12-08T14:25:10Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7760b575751b1db451ef… ====== Be less aggressive about casting to octets Alan T. DeKok@2014-12-08T14:06:25Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62d36c0f24146090b861… ====== Quiet scanner Alan T. DeKok@2014-12-08T00:42:42Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/67e81cdb0ee2b90e38ee… ====== Quiet scan. We really need to take a pass through the source marking up every function with CC_HINT(nonnull). Just like we fixed all of the other compiler warnings Alan T. DeKok@2014-12-08T00:42:41Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c6c89d81458e4cd1ea78… ====== -- This commit summary was generated @2014-12-09T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 07 Dec '14

07 Dec '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Added low-level escaping tests Alan T. DeKok@2014-12-07T17:40:35Z Files modified: * src/tests/unit/all.mk * src/tests/unit/escape.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/454ccdcf8a63ddcc64b8… ====== Auto-cast octet strings So ("bob" == 0x626f62) will work Alan T. DeKok@2014-12-07T17:40:34Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/141b1c777e53aa3a9e07… ====== -- This commit summary was generated @2014-12-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 07 Dec '14

07 Dec '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Be less aggressive about casting to octets Alan T. DeKok@2014-12-07T17:55:01Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4618a613dd1dbcafdac6… ====== Don't do full debugging on tests Alan T. DeKok@2014-12-07T17:53:26Z Files modified: * src/tests/unit/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42d9c0b952e542117c33… ====== Added low-level escaping tests Alan T. DeKok@2014-12-07T17:33:06Z Files modified: * src/tests/unit/all.mk * src/tests/unit/escape.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf7ffc698478ceb1bf6a… ====== Auto-cast octet strings So ("bob" == 0x626f62) will work Alan T. DeKok@2014-12-07T17:31:12Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/92dcbf5f54e7dc7be591… ====== -- This commit summary was generated @2014-12-08T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 06 Dec '14

06 Dec '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Ensure data.ptr is always initialized Alan T. DeKok@2014-12-06T22:59:01Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/842463307110efa798ba… ====== Doxygen Alan T. DeKok@2014-12-06T16:51:43Z Files modified: * src/lib/value.c * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb46d81802956ed54f5f… ====== Don't free thing until we're done Alan T. DeKok@2014-12-06T16:49:30Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/adf4d18e72f47a156b76… ====== Quiet scanner Alan T. DeKok@2014-12-06T16:45:27Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a28bf065dea8a1aa83ec… ====== Remove unneeded variable Alan T. DeKok@2014-12-06T16:42:30Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10944ad216cf45f714bf… ====== Quiet scanner Alan T. DeKok@2014-12-06T16:42:18Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/70a9ff0d58547c01cf12… ====== Quiet scanner Alan T. DeKok@2014-12-06T16:42:08Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8efb716a1d00d36f6fd9… ====== Quiet compiler Alan T. DeKok@2014-12-06T16:34:19Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df7f4a6423d57e3e7430… ====== More escaping / unescaping fixes. The template names are now binary-safe if cf_new_escape The various parsing functions take a quotation character, so that they can do the correct de-escaping. The tests have been audited and updated. Alan T. DeKok@2014-12-06T16:18:14Z Files modified: * src/include/libradius.h * src/include/radiusd.h * src/include/tmpl.h * src/lib/pair.c * src/lib/value.c * src/main/evaluate.c * src/main/map.c * src/main/modcall.c * src/main/parser.c * src/main/tmpl.c * src/main/xlat.c * src/tests/keywords/escape * src/tests/keywords/escape-sequences * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ddd9b98085b10adf50d… ====== Number failure cases Alan T. DeKok@2014-12-06T16:18:14Z Files modified: * src/tests/keywords/length * src/tests/keywords/sha2 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d599bf3e95d94085520e… ====== Fix PREREQS so that the cache module builds Alan T. DeKok@2014-12-06T16:18:14Z Files modified: * src/modules/rlm_cache/rlm_cache.mk * src/tests/keywords/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0f76d337fa65f3f24d2… ====== %n is allowed, too Alan T. DeKok@2014-12-06T16:18:14Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfdda386c7e031ea0da3… ====== Make tmpl_alloc be binary safe Alan T. DeKok@2014-12-06T16:18:14Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25e06cdf835566a57e28… ====== Use the new escaping for the tests Alan T. DeKok@2014-12-06T16:18:14Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e857d868df9939e28cc7… ====== Call fr_print_string instead of doing things ourselves Alan T. DeKok@2014-12-06T16:18:14Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9c932807eac090591030… ====== Clarify fr_print_string Alan T. DeKok@2014-12-06T16:18:13Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1af8b03400726acc5436… ====== Fix fr_print_string_len, too Alan T. DeKok@2014-12-06T16:18:13Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8c29f52f04f449022c83… ====== Add filename unescape Arran Cudbard-Bell@2014-12-06T04:41:33Z Files modified: * src/include/radiusd.h * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f9547b9e634ca0dec714… ====== Missed const Arran Cudbard-Bell@2014-12-06T04:41:26Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d1b75e3307ecd3552ad… ====== Formatting Arran Cudbard-Bell@2014-12-06T03:58:38Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d4520478bb026387567… ====== Move exclusive file access functions into their own source file (exfile.c) Arran Cudbard-Bell@2014-12-06T03:57:24Z Files modified: * src/include/exfile.h * src/include/log.h * src/main/exfile.c * src/main/libfreeradius-server.mk * src/main/log.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9b3dad8830348632d267… ====== -- This commit summary was generated @2014-12-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 06 Dec '14

06 Dec '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Ensure data.ptr is always initialized Alan T. DeKok@2014-12-06T22:59:13Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be9442b903666a0983e8… ====== Doxygen Alan T. DeKok@2014-12-06T16:51:51Z Files modified: * src/lib/value.c * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6dbeaf2a7e1e2cccd025… ====== Don't free thing until we're done Alan T. DeKok@2014-12-06T16:49:56Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/71b1957c82ab9c928aa7… ====== Quiet scanner Alan T. DeKok@2014-12-06T16:49:55Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b031495c2608faf0e67a… ====== Remove unneeded variable Alan T. DeKok@2014-12-06T16:49:54Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2b0bcfe11874f9b812c… ====== Quiet scanner Alan T. DeKok@2014-12-06T16:49:51Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/942f2f5805d7b63aa0c2… ====== Quiet scanner Alan T. DeKok@2014-12-06T16:49:50Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8e37660628a10b81c2a… ====== Quiet compiler Alan T. DeKok@2014-12-06T16:49:49Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8058c8c00e6dd472c7f0… ====== More escaping / unescaping fixes. The template names are now binary-safe if cf_new_escape The various parsing functions take a quotation character, so that they can do the correct de-escaping. The tests have been audited and updated. Alan T. DeKok@2014-12-06T16:19:07Z Files modified: * src/include/libradius.h * src/include/radiusd.h * src/include/tmpl.h * src/lib/pair.c * src/lib/value.c * src/main/evaluate.c * src/main/map.c * src/main/modcall.c * src/main/parser.c * src/main/tmpl.c * src/main/xlat.c * src/tests/keywords/escape * src/tests/keywords/escape-sequences * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21d541eba2eeb926bda1… ====== Number failure cases Alan T. DeKok@2014-12-06T16:19:06Z Files modified: * src/tests/keywords/length * src/tests/keywords/sha2 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/664bb816721b97eecfbe… ====== Fix PREREQS so that the cache module builds Alan T. DeKok@2014-12-06T16:19:04Z Files modified: * src/tests/keywords/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9aba84936a9965e8855a… ====== %n is allowed, too Alan T. DeKok@2014-12-06T16:19:02Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2ec18c19db7e1fa0cd1… ====== Make tmpl_alloc be binary safe Alan T. DeKok@2014-12-06T16:19:00Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c73488384a10d4b1dfe2… ====== Use the new escaping for the tests Alan T. DeKok@2014-12-06T16:18:58Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2898b5fc0e4e2307a696… ====== Call fr_print_string instead of doing things ourselves Alan T. DeKok@2014-12-06T16:18:56Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0811d78d003a8bfc37d7… ====== Clarify fr_print_string Alan T. DeKok@2014-12-06T16:18:55Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b6c0c1c8416fb48b2395… ====== Fix fr_print_string_len, too Alan T. DeKok@2014-12-06T16:18:54Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/848da208a3daf8c98382… ====== Add filename unescape Arran Cudbard-Bell@2014-12-06T04:41:09Z Files modified: * src/include/radiusd.h * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7d795853dca518d1d36… ====== Missed const Arran Cudbard-Bell@2014-12-06T04:36:39Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da544605c25f1d9c16ca… ====== Formatting Arran Cudbard-Bell@2014-12-06T03:58:58Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf36750a8fbf9bd50a7f… ====== Move exclusive file access functions into their own source file (exfile.c) Arran Cudbard-Bell@2014-12-06T03:58:51Z Files modified: * src/include/exfile.h * src/include/log.h * src/main/exfile.c * src/main/libfreeradius-server.mk * src/main/log.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c947aa9b7c99f19c0793… ====== -- This commit summary was generated @2014-12-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Build issues - library paths, and debian pkg format
by Matthew Newton 05 Dec '14

05 Dec '14

Hi, Got a couple of issues building at the moment with v3.0.x - First, the libraries are getting the wrong paths again. I've been building over the last few days and have to run from within the build directory (even after --enable-developer=no and make install) otherwise I get something like /etc/freeradius/mods-enabled/cache_eap[4]: Failed to link to module 'rlm_cache': build/lib/.libs/rlm_cache_rbtree.so: cannot open shared object file: No such file or directory I've just build a debian package, and get the same thing trying to run the installed binary, so something's not building right. I seem to remember it coming up before, but can't find what the solution was at the time. Have I missed something obvious, or is something broken? Second, debian/source/format contains "3.0 (quilt)" which means that the debian build wants to find a tarball to create a diff. It can't find a tarball, so crashes out. Any reason not to set this to "3.0 (native)"? (I believe that's generally frowned upon for official Debian packages as they want an upstream tarball to diff against, but for the upstream distribution it doesn't make much sense...) Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4(a)le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp(a)le.ac.uk>

4 5

mschap via ntlm_auth over a socket
by Matthew Newton 04 Dec '14

04 Dec '14

Hi, We've been hit with the same issue that a lot of other sites seem to have seen, which is that one freeradius server just doesn't seem to be able to authenticate over a certain number of users per second, somewhere around 30 or so, to our AD domain controllers. Standard ntlm_auth -> winbind -> AD stuff. We've done things like tweak "winbind max domain connections" and "winbind max clients", but can't seem to get winbind to connect to more than one DC, or seemingly parallelise anything in any way. Though reading archives it looks like we may have to use Samba 4 for that (though I still don't understand the reason for the max connections option if it can't/won't do it; I must me missing something). I've done some digging, and looking at the winbind debug logs, it seems to be taking around 3ms to do an auth, give or take. However, using sysdig to watch the ntlm_auth process, it takes around 30ms to run. That would figure with the maximum ~30 auths per second. Now I'm not entirely sure either of these times are completely accurate, but they were far enough off to get me looking. It seems ntlm_auth has a "--helper-protocol" option to enable it to start and then process requests over stdin/stdout. This should at least cut out the process exec time. So I've hacked around and updated the mschap module in a couple of ways to allow use of this. First is to add a new option to mschap, "method", which specifies the auth method to use. Currently this can be internal, or ntlm_auth, selected depending on whether ntlm_auth is defined or not. That will now still work for backwards compatibility, but if the new "method" option is set, that overrides it. The second is to add a new method, "ntlmauth_socket", which uses a connection pool to talk to a UNIX socket to send/receive auth data to ntlm_auth. To use it you then have to add ntlm_auth to inetd to create the socket. That handles spawning enough ntlm_auth processes off to meet demand as the connection pool stuff opens the sockets. I've not been able to test it in production yet; a) because I only just wrote it, and b) because our servers are still FR2. So if anyone else is running FR3 with a heavy load and willing to try, it would be good. I fear with the amount of change control (and/or paranoia) we have now, it's going to take me a while to get FR3 near the wireless controllers :( I have tried it both standalone against Samba, and against the domain. I'm getting these results. Note that the test (eapol_test) is run sequentially, so I'm artificially limiting the throughput there. All tests PEAP/EAP-MSCHAPv2 and FR threaded (not in debug mode). Standalone machine, Samba 3, not AD. 1,000 auths: internal mschap: 21.7s using ntlm_auth exec: 29.7s with socket: 22.9s so the socket looks decidedly faster, close to the internal mschap auth speed. Domain joined machine, Samba 3, 100 auths, eapol_test being run across the network from another machine: internal mschap: 6.3s using ntlm_auth exec: 8.1s with socket: 6.5s Only 100 auths in a loop this time (not to hammer the DC too much), but the socket version still manages to get 3 more auths in per second. Finally, domain joined machine, Samba 3, 100 auths, but direct mschap with radtest on the FR host rather than eapol_test remotely: internal mschap: 4.7s using ntlm_auth exec: 6.3s with socket: 4.9s So the real question (apart from whether I've completely missed something in the above results) is whether it's actually any better under real load. I've just done a pull request, but I'm sure there are things that need looking at or fixing even if the idea possibly sane. Let me know. Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4(a)le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp(a)le.ac.uk>

5 17

Commit report for master branch
by announce＠freeradius.org 04 Dec '14

04 Dec '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Escape filename expansions Attributes used in xlat expansions involving filenames will now be subject to tight escaping rules to prevent injection attacks, and to allow maximum compatibility. A little scary this wasn't done already, but for most systems it would have been pretty hard to exploit in a useful way. Arran Cudbard-Bell@2014-12-04T20:40:39Z Files modified: * src/include/radiusd.h * src/main/util.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b2710d117ef16f24f4f… ====== Formatting Arran Cudbard-Bell@2014-12-04T20:40:35Z Files modified: * src/lib/print.c * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d51b7ba2dd0a169e0d7… ====== Note on why we don't need to escaping for execve Arran Cudbard-Bell@2014-12-04T20:40:30Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5b90e786bd1fdd5ca2e… ====== Cache Stripped-User-Domain too Arran Cudbard-Bell@2014-12-04T16:15:01Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4a3457405567008a400… ====== Update range of cached TLS attributes Arran Cudbard-Bell@2014-12-04T16:12:14Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/938e0dcadd5533f2ccfb… ====== Formatting Arran Cudbard-Bell@2014-12-04T16:12:00Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1b64fbe57a05f92dee1… ====== Duplicate init Arran Cudbard-Bell@2014-12-04T16:11:56Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0f096fa7d08f67f0f35… ====== Slightly better debug output Arran Cudbard-Bell@2014-12-04T02:45:36Z Files modified: * src/lib/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ac378fd1d8725ec7376a… ====== Escape backslashes only when necessary Alan T. DeKok (via Arran Cudbard-Bell)@2014-12-04T02:36:15Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/884edf7addb6038c4df1… ====== Fix issue that caused radclient to default to sending Accounting-Request when auto was specified and Packet-Type was set Arran Cudbard-Bell@2014-12-04T02:35:48Z Files modified: * src/main/radclient.c * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c48eaecad4c04aacd2b… ====== -- This commit summary was generated @2014-12-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0