February 2014 - Freeradius-Devel - lists.freeradius.org

Commit report for v3.0.x branch
by announce＠freeradius.org 04 Feb '14

04 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Copy over the tag, too, in pairmove() The rest of the fields for tlv / octets / string can be ignored. They are all the same between the two attributes Alan T. DeKok@2014-02-04T21:00:05Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2f14fe3a6f5c88dffd54… ====== Fix pairmove() To not have talloc issues. And to make sense We've also removed the magic around it's handling of passwords. No one should be affected by this, because it was always stupid to have multiple passwords for a user. Alan T. DeKok@2014-02-04T20:00:02Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/affa766c04c4dccdee89… ====== pair*steal() should take const as second argument Alan T. DeKok@2014-02-04T20:00:01Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ce79276557580ee3de08… ====== Apply sqlite query fix from master Arran Cudbard-Bell@2014-02-04T19:13:03Z Files modified: * raddb/mods-config/sql/cui/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/74f365f0cfb68ca14b01… ====== Typo Arran Cudbard-Bell@2014-02-04T19:10:25Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32d407e8ad473670ffbf… ====== Minor fixes Arran Cudbard-Bell@2014-02-04T19:08:32Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3d649a2aabfb2deb36a… ====== Do proper checks for each individual sqlite_v2 function Arran Cudbard-Bell@2014-02-04T19:03:57Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/config.h.in * src/modules/rlm_sql/drivers/rlm_sql_sqlite/configure * src/modules/rlm_sql/drivers/rlm_sql_sqlite/configure.ac * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1b895b2cdc9563398d8… ====== add Cisco ASA Dictionary Olivier Beytrison (via Arran Cudbard-Bell)@2014-02-04T18:22:47Z Files modified: * share/dictionary * share/dictionary.cisco.asa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e1116b4bb317feef4f8b… ====== Fix compile time warning where we don't have krb5_free_error_message Arran Cudbard-Bell@2014-02-04T16:46:40Z Files modified: * src/modules/rlm_krb5/krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/412fb80867fe4cc96dac… ====== We need a new ccache per conn for heimdal, else on some platforms it defaults to the root ccache which it can't read/write to Arran Cudbard-Bell@2014-02-04T16:37:10Z Files modified: * src/modules/rlm_krb5/krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11d535e782e11a142659… ====== conn isn't always used to depending on library capabilities Arran Cudbard-Bell@2014-02-04T14:17:43Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a57e4b3ca05782633f85… ====== Move return code processing to a single function in rlm_krb5 Arran Cudbard-Bell@2014-02-04T12:54:34Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c371a5739f83dfda7b3e… ====== Check if module was built as threadsafe but library now claims not to be Arran Cudbard-Bell@2014-02-04T12:54:34Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d281af7fba8be1d75b5… ====== Removed duplicate duplication of logging levels Found in rlm_perl/example.pl Herwin Weststrate (via Arran Cudbard-Bell)@2014-02-04T12:54:34Z Files modified: * src/modules/rlm_perl/example.pl Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/98553624749580f048e9… ====== -- This commit summary was generated @2014-02-05T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

usage of "FR_TOKEN op" parameter to pairmake ?
by Chaigneau, Nicolas 04 Feb '14

04 Feb '14

Hello, I'm trying to figure out the purpose of the last parameter to pairmake (FR_TOKEN op). I assumed it was semantically equivalent to the following unlang syntax : Operators The operator used to assign the value of the attribute may be one of the following, with the given meaning. = Add the attribute to the list, if and only if an attribute of the same name is not already present in that list. := Add the attribute to the list. If any attribute of the same name is already present in that list, its value is replaced with the value of the current attribute. += Add the attribute to the tail of the list, even if attributes of the same name are already present in the list. But, whatever the operator I'm using (T_OP_EQ, T_OP_ADD or T_OP_SET), it doesn't seem to have any effect. All attributes added through pairmake to the reply vp list are returned to the client anyway. (I'm using FreeRADIUS 3.0.1) Did I miss something ? Thanks, Nicolas. This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

3 6

3.0.x: persistent TLS session cache
by Stefan Winter 04 Feb '14

04 Feb '14

Hi, now on 3.0.x to follow the die on exit code fixes... and found something else: I've configured TLS session caches in mods-enabled/eap. The directory to cache sessions in exists, and with the user radiusd on the shell I can touch files in that directory. And yet: (3) eap_peap : TLS_accept: SSLv3 write finished A (3) eap_peap : TLS_accept: SSLv3 flush data SSL: adding session 9b8b9b86357428cced36cd4aac564d9b17a6258cd84cf070b38a974eb563f62c to cache SSL: could not open session file %{logdir}/tlscache-eduroam-users/9b8b9b86357428cced36cd4aac564d9b17a6258cd84cf070b38a974eb563f62c.asn1: (3) eap_peap : (other): SSL negotiation finished successfully SSL Connection Established Well, I used %{logdir} in my persist_dir setting in the config alright, but... looking at the code, this debug message prints exactly what's being used for the open() call - so %{logdir} should have been expanded to the literal path, right? Is there some xlat() missing here? Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

2 2

Commit report for master branch
by announce＠freeradius.org 03 Feb '14

03 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Move cached_config_t to talloc Alan T. DeKok@2014-02-03T17:49:55Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3c4265736c7c6dbf29b4… ====== Update queries.conf Arran Cudbard-Bell@2014-02-03T16:40:33Z Files modified: * raddb/mods-config/sql/cui/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b9f55d5cfdc71faf7b15… ====== Rename home_server type to home_server_t Arran Cudbard-Bell@2014-02-03T12:54:11Z Files modified: * src/include/radiusd.h * src/include/realms.h * src/main/command.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/stats.c * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a844851b122008b889d1… ====== -- This commit summary was generated @2014-02-04T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 03 Feb '14

03 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Move cached_config_t to talloc Alan T. DeKok@2014-02-03T17:49:42Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16f14a41e82c1bf4619f… ====== Update queries.conf Arran Cudbard-Bell@2014-02-03T16:35:14Z Files modified: * raddb/mods-config/sql/cui/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32a442c9dd255c5ba352… ====== Update ChangeLog Arran Cudbard-Bell@2014-02-03T13:09:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be1b8c76b2386e99bd37… ====== Update ChangeLog Arran Cudbard-Bell@2014-02-03T13:08:28Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02c707ed6009e64ab731… ====== Rename home_server type to home_server_t Arran Cudbard-Bell@2014-02-03T12:53:39Z Files modified: * src/include/radiusd.h * src/include/realms.h * src/main/command.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/stats.c * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4486645bdbda6753e04f… ====== -- This commit summary was generated @2014-02-04T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 02 Feb '14

02 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Delay cleanup of listeners until all requests using them are done. Also do stats just before we free the request, instead of when we remove it from the request hash. This is because some requests aren't in the hash... Alan T. DeKok@2014-02-02T15:57:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c83f95b6047255554753… ====== -- This commit summary was generated @2014-02-03T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 02 Feb '14

02 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Delay cleanup of listeners until all requests using them are done. Also do stats just before we free the request, instead of when we remove it from the request hash. This is because some requests aren't in the hash... Alan T. DeKok@2014-02-02T15:58:34Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c0adaa730a3d3430eac… ====== -- This commit summary was generated @2014-02-03T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0