July 2014 - Freeradius-Devel - lists.freeradius.org

Commit report for v3.0.x branch
by announce＠freeradius.org 27 Jul '14

27 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove redundant pcap.h include Arran Cudbard-Bell@2014-07-27T17:21:51Z Files modified: * src/include/pcap.h * src/lib/pcap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52e9160bbd0f87803303… ====== Move net functions which don't depend on PCAP libraries into net.c Arran Cudbard-Bell@2014-07-27T17:12:29Z Files modified: * src/include/libradius.h * src/include/net.h * src/include/pcap.h * src/lib/all.mk * src/lib/net.c * src/lib/pcap.c * src/lib/radius.c * src/lib/tcp.c * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d1ca26776530281ff46… ====== Putting every source file on its own line makes it easier to resolve merge errors Arran Cudbard-Bell@2014-07-27T17:12:22Z Files modified: * src/lib/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fe11956a3fa178d1ac3a… ====== The last 2 functions require pcap. Alan T. DeKok@2014-07-27T15:52:32Z Files modified: * src/lib/pcap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6bf39b48a2f244e464b6… ====== -- This commit summary was generated @2014-07-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 27 Jul '14

27 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove redundant pcap.h include Arran Cudbard-Bell@2014-07-27T17:21:58Z Files modified: * src/include/pcap.h * src/lib/pcap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f79fc04604d8b036ba3a… ====== Move net functions which don't depend on PCAP libraries into net.c Arran Cudbard-Bell@2014-07-27T17:06:34Z Files modified: * src/include/libradius.h * src/include/net.h * src/include/pcap.h * src/lib/all.mk * src/lib/net.c * src/lib/pcap.c * src/lib/radius.c * src/lib/tcp.c * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11b2da37ced939ddb9f5… ====== Putting every source file on its own line makes it easier to resolve merge errors Arran Cudbard-Bell@2014-07-27T16:14:56Z Files modified: * src/lib/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/63bc79eef26f0e61fcd1… ====== The last 2 functions require pcap. Alan T. DeKok@2014-07-27T15:52:20Z Files modified: * src/lib/pcap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f2b517319c60923e9c8a… ====== -- This commit summary was generated @2014-07-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

rad_print_hex Data output
by jobhunts02＠aol.com 27 Jul '14

27 Jul '14

Can somebody tell me how to interpret the "Data" output of rad_print_hex? Thank you. Code: 43 Id: 223 Length: 85 Vector: 98c0500fd8560c58906f12dc66aeba5b Data: 2c 22 34 44 31 35 45 39 32 30 2d 41 30 38 38 42 34 42 46 45 33 35 30 2d 30 30 30 30 30 30 30 30 30 32 01 07 64 61 74 61 32 1a 0c 00 00 01 84 0a 06 00 00 00 64 1a 0c 00 00 01 84 0b 06 00 00 00 64

2 1

Commit report for v3.0.x branch
by announce＠freeradius.org 26 Jul '14

26 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== rlm_otp doesn't need a configure script Arran Cudbard-Bell@2014-07-26T17:08:15Z Files modified: * src/modules/rlm_otp/.gitignore * src/modules/rlm_otp/all.mk * src/modules/rlm_otp/all.mk.in * src/modules/rlm_otp/configure * src/modules/rlm_otp/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9ecb7be8a290a9f2a41… ====== Import/Export from Apache DS to cleanup formatting Arran Cudbard-Bell@2014-07-26T16:21:42Z Files modified: * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1bb6c2d1982e11362b9c… ====== Typo in clients schema Arran Cudbard-Bell@2014-07-26T15:23:38Z Files modified: * doc/schemas/ldap/openldap/freeradius-clients.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a4a7837b562818e0d7e0… ====== Only include pcap.h if we have libpcap Arran Cudbard-Bell@2014-07-26T15:22:25Z Files modified: * src/include/pcap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/753b74f3aa2126bb933c… ====== Organise LDAP schemas better Arran Cudbard-Bell@2014-07-25T22:06:39Z Files modified: * doc/schemas/ldap/edir/freeradius-clients.ldif * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/iplanet/freeradius.ldif * doc/schemas/ldap/iplanet/freeradius.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema * doc/schemas/ldap/openldap/freeradius-clients.ldif * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.ldif * doc/schemas/ldap/openldap/freeradius.schema * doc/schemas/ldap/radiusclients-edirectory.ldif * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/239ab5540e0d4c6c55b2… ====== Change IANA number in LDAP schemas from 3317 to 11344 No idea who 'Port Community Rotterdam' are, but we have our own IANA number, so should be using it. Arran Cudbard-Bell@2014-07-25T21:50:08Z Files modified: * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4087461ac4cb1f502ba2… ====== Hack to get TLS-PSK-Identity Alan T. DeKok@2014-07-25T20:18:19Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/14507d9e13469cd1ccf5… ====== Needs cast to long long int Arran Cudbard-Bell@2014-07-25T18:47:29Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eba481140f018478411c… ====== print 64bit rlm_expr result Arran Cudbard-Bell@2014-07-25T18:25:46Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f17c3bd8c8cb7960566… ====== Continue to build functions which don't rely on libpcap, when we don't have libpcap Arran Cudbard-Bell@2014-07-23T18:50:28Z Files modified: * src/include/pcap.h * src/lib/pcap.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c465ce2c6ae1d4d15e16… ====== Fix formatting of switch statements Arran Cudbard-Bell@2014-07-23T18:42:43Z Files modified: * src/lib/dict.c * src/lib/getaddrinfo.c * src/lib/pcap.c * src/lib/print.c * src/lib/radius.c * src/lib/snprintf.c * src/lib/token.c * src/lib/valuepair.c * src/main/acct.c * src/main/auth.c * src/main/collectd.c * src/main/detail.c * src/main/evaluate.c * src/main/modules.c * src/main/radwho.c * src/main/realms.c * src/main/soh.c * src/main/tls.c * src/main/unittest.c * src/main/util.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_couchbase/couchbase.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ippool/rlm_ippool_tool.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_otp/otp_pw_valid.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_unix/rlm_unix.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/907d6227ca0560b47249… ====== Merge pull request #742 from qnet-herwin/rlm_perl_v3.0.x Fix error in attribute copying to rlm_perl Arran Cudbard-Bell@2014-07-22T19:23:22Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d013d4d7a3d2bd48218c… ====== Fix error in attribute copying to rlm_perl Introduced in commit c225c615760d4c907640ebd249f860d5ab3258dd. It copied the RAD_REPLY hash twice, which had the side effects that some keys dropped out. Herwin Weststrate@2014-07-22T18:06:33Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eca14dcf7b94d69b8ac5… ====== Debian: Ensure some directories exist This prevents some warnings when installing the package. Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-21T18:36:15Z Files modified: * debian/freeradius.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb9a2fbd065728b94bd1… ====== Other perl formatting Arran Cudbard-Bell@2014-07-21T16:49:23Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c225c615760d4c907640… ====== Fix multivalues attributes in rlm_perl. Addresses #731, Addresses #722 Arran Cudbard-Bell@2014-07-21T16:48:18Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8f4e239539802f329555… ====== Add the gigawords calculation for MSSQL in accounting stop SQL clause root (via Alan T. DeKok)@2014-07-21T14:35:57Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e41443bb6aace79a781b… ====== Added a NULL check to rlm_perl Otherwise, trying to start rlm_perl with an invalid file parameter would cause a segfault. Herwin Weststrate (via Alan T. DeKok)@2014-07-20T15:22:57Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd0acc6f1812ea1d7c16… ====== Merge pull request #732 from nchaigne/v3.0.x dhcpclient - timeout and decline, release, inform Arran Cudbard-Bell@2014-07-16T20:51:30Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eeaca37fd844026e8eff… ====== dhcpclient - timeout and decline, release, inform Added receive timeout on socket according to -t option (retries are still not handled). Added commands for "decline", "release" and "inform" messages. Updated usage. Nicolas C@2014-07-16T16:16:59Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be33e21913803de6d2c3… ====== Merge pull request #734 from spbnick/switch_cnf_to_sha256 Switch .cnf files to sha256 message digest Arran Cudbard-Bell@2014-07-16T20:50:27Z Files modified: * raddb/certs/ca.cnf * raddb/certs/client.cnf * raddb/certs/server.cnf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed2100d9b45ce8440411… ====== Switch .cnf files to sha256 message digest Use sha256 as default_md (message digest) in all .cnf files as it is more secure than the previous, now considered weak, sha1. Nikolai Kondrashov@2014-07-16T19:51:33Z Files modified: * raddb/certs/ca.cnf * raddb/certs/client.cnf * raddb/certs/server.cnf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/515e5e9cf9404d2d80a0… ====== Merge pull request #736 from spbnick/add_rlm_krb5_doc Add minimal rlm_krb5 documentation file Arran Cudbard-Bell@2014-07-16T20:50:08Z Files modified: * doc/modules/rlm_krb5 * raddb/mods-available/krb5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21bfdf44061184c69f74… ====== Add minimal rlm_krb5 documentation file Add doc/modules/rlm_krb5 - a minimal rlm_krb5 module documentation file, based on the wiki page. Update raddb/mods-available/krb5 comments to point to the actual and proper location. Nikolai Kondrashov@2014-07-16T19:50:49Z Files modified: * doc/modules/rlm_krb5 * raddb/mods-available/krb5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d4d0246fa51097840a2… ====== Merge pull request #735 from spbnick/add_P_option_to_man_pages Add description of -P option to man pages Arran Cudbard-Bell@2014-07-16T20:49:51Z Files modified: * man/man1/radclient.1 * man/man1/radtest.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00c97ec743e475f80a4a… ====== Add description of -P option to man pages Add description of -P option to radtest and radclient man pages. Nikolai Kondrashov@2014-07-16T19:52:30Z Files modified: * man/man1/radclient.1 * man/man1/radtest.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4097b0b7a024d223a257… ====== Merge pull request #733 from spbnick/clarify_snmp_trap_conditions Clarify conditions of limit hit SNMP notifications Arran Cudbard-Bell@2014-07-16T20:49:22Z Files modified: * mibs/FREERADIUS-NOTIFICATION-MIB.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a2c7a8d263d5a65cb9c… ====== Clarify conditions of limit hit SNMP notifications Use "hit" instead of "reach" in the descriptions of serverMaxRequest and serverMaxThreads SNMP notifications to make it clearer that they trigger upon attempt to exceed the limit, not upon reaching the maximum allowed value. Nikolai Kondrashov@2014-07-16T19:52:06Z Files modified: * mibs/FREERADIUS-NOTIFICATION-MIB.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ca930d24d51c512075c… ====== More changes Alan T. DeKok@2014-07-15T14:11:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d257e796f9ad1c62075c… ====== Note recent changes Alan T. DeKok@2014-07-15T14:06:01Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b707d3a44c8e2ba8d48f… ====== Check BN_rand_range return value CVE-2014-4733. In practice, the function should never fail. jvoisin (via Alan T. DeKok)@2014-07-15T01:34:42Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c3e8546f1057754dabdb… ====== Constant time memory comparison. CVE-2014-4731. Non-constant time comparisons usually require millions of packets in order to get enough statistics. This is VERY hard to do with WiFi or wired 802.1X. The delays on switch port open / close are on the order of seconds. jvoisin (via Alan T. DeKok)@2014-07-15T01:31:02Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0e01ff9a9df52ab0270… ====== Use *_clear_free instead of *_free. CVE-2014-4732 jvoisin (via Alan T. DeKok)@2014-07-15T01:29:06Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22297d7bff6f1d5517eb… ====== Update ChangeLog Arran Cudbard-Bell@2014-07-12T21:02:20Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4a382ca4f9342cb3d160… ====== Add module type sanity check Arran Cudbard-Bell@2014-07-12T19:43:07Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8b7756dd63a536099bd… ====== Add support for connection pool reuse Arran Cudbard-Bell@2014-07-12T19:43:07Z Files modified: * src/include/conffile.h * src/include/connection.h * src/include/modpriv.h * src/main/conffile.c * src/main/connection.c * src/main/modules.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93a297a98b16e60dbe2e… ====== Convert another argument to bool Arran Cudbard-Bell@2014-07-12T19:43:06Z Files modified: * src/include/modpriv.h * src/main/command.c * src/main/modcall.c * src/main/modules.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ccffc8631184606a9b5… ====== Merge pull request #730 from nchaigne/v3.0.x dhcpclient - store xid when encoding request Alan DeKok@2014-07-12T15:40:30Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b85d952a0c10afe4d01e… ====== dhcpclient - store xid when encoding request Fixes the incorrect debug message "Encoding DHCP-Discover of id ffffffff". And this will allow to correlate xid from response (should be done by the client, but not yet). Nicolas C@2014-07-11T18:16:46Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69bfb4d61b5de4f672f8… ====== Typo Arran Cudbard-Bell@2014-07-10T18:40:56Z Files modified: * src/include/connection.h * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59c1ef434b7859e7a32b… ====== Formatting and documentation Arran Cudbard-Bell@2014-07-10T18:40:56Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/129d1b166a4d753185f0… ====== find_client: min prefix of 0 needs to work Use signed loop counter to permit 0-1 to be <= min_prefix Sam Hartman (via Alan T. DeKok)@2014-07-10T18:07:27Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5219d3de9a0e1ba8b01f… ====== fr_inaddr_mask fix 0 prefix Don't depend on the behavior of shifting by 32-bits on a 32-bit type. Sam Hartman (via Alan T. DeKok)@2014-07-10T17:28:15Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/41f8259d2f59784d6f23… ====== Allow User-Name in CUI reply Alan T. DeKok@2014-07-10T05:21:52Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42430f41416f06ba8ee7… ====== Use loop index to get description. Closes #729 Alan T. DeKok@2014-07-09T21:33:24Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d25e515d28108e3cb8b… ====== A parent config section might not exist when dynamically adding a home server. Alan T. DeKok@2014-07-09T21:29:09Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cf608881626bcf93ab74… ====== Remove useless extern declarations Arran Cudbard-Bell@2014-07-09T18:35:03Z Files modified: * src/include/libradius.h * src/include/missing-h * src/include/rad_assert.h * src/include/radiusd.h * src/include/tls-h * src/lib/dict.c * src/lib/print.c * src/lib/radius.c * src/main/mainconfig.c * src/main/tls.c * src/main/tls_listen.c * src/modules/rlm_eap/libeap/eap_chbind.h * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_types.h * src/modules/rlm_mschap/opendir.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37917ad89540da122e5d… ====== Cleanup EAP-SIM macros Arran Cudbard-Bell@2014-07-09T18:35:03Z Files modified: * src/modules/rlm_eap/libeap/eap_sim.h * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b92da9313a5ee8135e6a… ====== Debug condition is now a fr_cond_t Arran Cudbard-Bell@2014-07-09T18:35:02Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d60c47e73727c795b1c… ====== Limit which operators can be used with LDAP group comparison and other minor cleanups Arran Cudbard-Bell@2014-07-09T18:34:55Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62a8a4ed8e505b511179… ====== Formatting Arran Cudbard-Bell@2014-07-09T02:09:19Z Files modified: * src/include/token.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5a743c8be8b7eada07e… ====== Fixup Sqlite schema Arran Cudbard-Bell@2014-07-09T02:09:00Z Files modified: * raddb/mods-config/sql/main/sqlite/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77d7284333b953702b50… ====== Update cui Updated comments to clarify the dual purpose of the unlang fragment. Stefan Paetow (via Arran Cudbard-Bell)@2014-07-08T13:51:32Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/448bc0e0727d406825fa… ====== Try and make dlopen library search messages clearer Arran Cudbard-Bell@2014-07-08T05:24:31Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2059032d31e38393ffd3… ====== Remove reply:User-Name only if there's a reply:CUI Alan T. DeKok@2014-07-08T04:35:28Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d9a6e9957835180e198… ====== Changed integer type for rlm_eap_{ttls,peap} tunnel types to bool where applicable Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-07T20:31:03Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h * src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9851f2c759de4307aeb7… ====== Use enums instead of define lists in rlm_eap_peap But only for the values that are only used internally. Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-07T20:29:54Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/09ea27662cf245be6dc0… ====== Formatting Arran Cudbard-Bell@2014-07-07T20:28:29Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c201641c1527cae7033… ====== As posted to the list Alan T. DeKok@2014-07-07T18:09:51Z Files modified: * share/dictionary * share/dictionary.dragonwave Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8cc903f285be0fcba4ec… ====== Merge pull request #725 from nchaigne/v3.0.x radeapclient - fix send_packet Arran Cudbard-Bell@2014-07-04T17:08:19Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3100c303c7cf6e5f509… ====== radeapclient - fix send_packet I spotted two errors in radeapclient.c, introduced in the following previous commits. With this fix, radeapclient is now useable again. 1) Commit: c8a062a112f17a5810d311dc0e0acfe963b2d440 (2014/06/13) - send_packet(rep, &req); - - if (!req) return -1; + send_packet(req, &rep); + if (!rep) { Arguments got reversed. Hence segmentation fault later when doing: for (vp = req->vps; vp != NULL; vp = vpnext) { Bit of caution on the wording used in radeapclient: "req" is the request coming FROM the server. (because this is not a "request" in RADIUS sense, but an EAP-Request within the EAP-SIM transaction.) "rep" is the response from the client TO the server (EAP-Response). 2) Commit: bc3676835c3dcc220ab518d4c3c35962bc0f8be2 (2014/05/02) In "send_packet": + if (!req || !rep || !*rep) return -1; *rep == NULL is the expected behaviour... Nicolas C@2014-07-04T17:03:33Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/53c1ce349b07a6e51dcc… ====== In redhat spec file, update dependency on json-c to version 0.10 as 0.11 only exists for fedora and 0.10 builds ok Philippe Wooding (via Alan T. DeKok)@2014-07-04T16:01:54Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0e3a5330804c0873621… ====== Update redhat spec file to reflect the fact rlm_host is no longer experimental. Philippe Wooding (via Alan T. DeKok)@2014-07-04T16:01:34Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fb6571b943ae2f1eb48… ====== Use correct type for length Alan T. DeKok@2014-07-03T01:59:51Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b6a39907161cf244351… ====== No need for casting in talloc_array_length() Alan T. DeKok@2014-07-03T01:45:37Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd41bcb584cb30f82713… ====== rad_vp2attr() returns -1 on error, 0 on "not enough room" Alan T. DeKok@2014-07-03T01:43:51Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0000859a6f1b9438559d… ====== Channel bindings fixes -fix size calculation -skip unwanted attrs when copying -add safety check to copy code in case size is wrong -add cast to get correct result from talloc_array_length() Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:58Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c5834ebdd27ccc780ca… ====== Don't call free on talloc'ed channel bindings packet Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:54Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b862293c1e25e33e7cec… ====== Fix cursor initialization bugs in eap_chbind_vp2packet Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:50Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84b7c83d5127d04e9811… ====== Fixed adding attributes with multiple values to rlm_perl Without this fix, the array in Perl would start with the value of the first attribute in the packet, combined with the actual values of the attribute. The debug log would look like this: $RAD_REPLY{'User-Name'}[0] = &reply:User-Name -> 'anonymous' $RAD_REPLY{'h323-credit-amount'}[1] = &reply:h323-credit-amount -> '100' $RAD_REPLY{'h323-credit-amount'}[2] = &reply:h323-credit-amount -> '101' The actual value of $RAD_REPLY{'h323-credit-amount'} is ['anonymous','100','101'] Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-02T19:36:09Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c920cf0ff498b3695040… ====== Merge pull request #719 from nchaigne/v3.0.x 3.0.x - Make EAP-SIM work again - proper encoding of EAP-SIM attributes ... Arran Cudbard-Bell@2014-07-01T19:48:25Z Files modified: * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd45098b462a03a16a47… ====== 3.0.x - Make EAP-SIM work again - proper encoding of EAP-SIM attributes within EAP-Message This fix follows the issue I logged (on the mailing list, not on GitHub) on June 11th. As a reminder, the problem happened after a commit which (among other things) modified the EAP-SIM attributes. Since this commit, EAP-SIM authentication do not work because EAP-Message is not properly encoded anymore by FreeRADIUS. I believe the commit is the following: https://github.com/FreeRADIUS/freeradius-server/commit/39df09e42d80a96363be… So, here is a fix. I also fixed the attributes issue in radeapclient, but at the moment the binary is unusable: it crashes, and I don't have time to look into this. (I tested the fix with another EAP client) Nicolas C@2014-07-01T17:03:03Z Files modified: * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ec3c382665a34595d65… ====== Inline breaks linking? Arran Cudbard-Bell@2014-07-01T15:58:31Z Files modified: * src/include/libradius.h * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06e09be31d59ef4933ba… ====== Fix capitalisation in UKERNA dictionary Fixes #718 Arran Cudbard-Bell@2014-07-01T15:44:50Z Files modified: * share/dictionary.ukerna Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d1ef27ac98f646e5ba0… ====== Other things still reference dict_attr_allowed_chars Arran Cudbard-Bell@2014-07-01T15:43:07Z Files modified: * src/include/libradius.h * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7af44b794161ffbb3201… ====== Fixed reference to config file Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:42:00Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/40bee0edc4b7638717e3… ====== Readability fixes in mods-available/perl Alignment is now stable with any tab width. Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:41:48Z Files modified: * raddb/mods-available/perl Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e7fc3460be51899fefb… ====== Fixed typo in rlm_sql.c s/afftected/affected/ Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:40:19Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5d11402be8624845ef5… ====== Fixed some tabs/spaces in default virtual server Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:40:14Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd6519551d5e09733e1b… ====== Use RFC language in eap.c messages Arran Cudbard-Bell@2014-07-01T13:39:38Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/852f3abe9b521d1b8448… ====== No need to call exit twice Arran Cudbard-Bell@2014-07-01T13:39:38Z Files modified: * src/lib/event.c * src/main/detail.c * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56a66de36cf920b89d4d… ====== Better errors on junk chars in dict.c Arran Cudbard-Bell@2014-07-01T13:39:38Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a77de871d49ba43a33b… ====== We can now use talloc_free() for listeners Alan T. DeKok@2014-06-27T17:04:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77f68022e2f87bf24b83… ====== Proxy sockets use common_socket_free(). Closes #680 Alan T. DeKok@2014-06-27T17:04:32Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4058b7a0b15523253aaf… ====== The default secret is "radsec" Alan T. DeKok@2014-06-27T17:04:31Z Files modified: * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c16bb57372c5c10267b5… ====== Now that we have default IPv6 listeners, have a v6 client, too Alan T. DeKok@2014-06-27T17:04:31Z Files modified: * raddb/clients.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d9e85722ebc45482195… ====== No need for an empty function Alan T. DeKok@2014-06-27T17:04:31Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/997bf775f1366ae5dd5b… ====== Move checks for virtual_server to listen_parse() Which is better than scattering them through the code. Alan T. DeKok@2014-06-27T17:04:31Z Files modified: * src/main/listen.c * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0022bf367c092d2a5843… ====== IKEv2 fixes required on our side Arran Cudbard-Bell@2014-06-27T15:47:07Z Files modified: * configure * configure.ac * src/include/autoconf.h.in * src/modules/rlm_eap/types/rlm_eap_ikev2/logging_impl.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de7fd410a726352bc931… ====== Assume RFC 3542 compliance for IPv6 socket options, which fixes IPv6 support on FreeBSD 10.0 Arran Cudbard-Bell@2014-06-27T13:30:56Z Files modified: * configure * configure.ac * src/include/autoconf.h.in * src/lib/udpfromto.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb3ea70165cee55d14fa… ====== Confusing comments Arran Cudbard-Bell@2014-06-27T12:09:35Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/78c370c0e2c1a3b33ad1… ====== Fix for ptrace check under FreeBSD Arran Cudbard-Bell@2014-06-27T12:01:14Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/012a94628ba7f3090e16… ====== Use standard return codes Arran Cudbard-Bell@2014-06-26T23:09:51Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7c532216d0692be2906… ====== Convert binary values to octets type attributes correctly Arran Cudbard-Bell@2014-06-26T23:09:42Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/78027f0cc9c4e66bd947… ====== Rename vpsname to list_name Add array indexes to multivalued attributes Arran Cudbard-Bell@2014-06-26T23:09:01Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3b852d037c1e50f0376… ====== Fixup debugging and formatting in rlm_perl Arran Cudbard-Bell@2014-06-26T19:13:11Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d7ae9f11e9ff9357238… ====== Improve debug logging of rlm_perl Don't just show the attributes being copied, but also say where they are copied from/to. Herwin Weststrate (via Arran Cudbard-Bell)@2014-06-26T18:41:58Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f6c27a5264b84181e058… ====== Set a timer for marking a home server dead. Closes #712 Alan T. DeKok@2014-06-26T14:33:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7bae7c8ed3ae6420c749… ====== Note recent changes Alan T. DeKok@2014-06-26T14:20:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa93a223ca4d3d903f17… ====== Pass2 for attributes in existence checks if (&foo-LDAP-Group) { ... } Alan T. DeKok@2014-06-26T14:18:34Z Files modified: * src/main/modcall.c * src/main/parser.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6a5bc20fb4b9b34912c3… ====== -- This commit summary was generated @2014-07-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 26 Jul '14

26 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== rlm_otp doesn't need a configure script Arran Cudbard-Bell@2014-07-26T17:05:24Z Files modified: * src/modules/rlm_otp/.gitignore * src/modules/rlm_otp/all.mk * src/modules/rlm_otp/all.mk.in * src/modules/rlm_otp/configure * src/modules/rlm_otp/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8aa93f0b3e173b3e9023… ====== Import/Export from Apache DS to cleanup formatting Arran Cudbard-Bell@2014-07-26T16:21:34Z Files modified: * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/81bb286543715754da57… ====== Typo in clients schema Arran Cudbard-Bell@2014-07-26T15:23:31Z Files modified: * doc/schemas/ldap/openldap/freeradius-clients.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/91e7a4044e224fa10da8… ====== Only include pcap.h if we have libpcap Arran Cudbard-Bell@2014-07-26T15:22:50Z Files modified: * src/include/pcap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eec5591a844774411ddb… ====== Organise LDAP schemas better Arran Cudbard-Bell@2014-07-25T22:06:30Z Files modified: * doc/schemas/ldap/edir/freeradius-clients.ldif * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/iplanet/freeradius.ldif * doc/schemas/ldap/iplanet/freeradius.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema * doc/schemas/ldap/openldap/freeradius-clients.ldif * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.ldif * doc/schemas/ldap/openldap/freeradius.schema * doc/schemas/ldap/radiusclients-edirectory.ldif * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f92fc7ae2ecabb4aa2a… ====== Change IANA number in LDAP schemas from 3317 to 11344 No idea who 'Port Community Rotterdam' are, but we have our own IANA number, so should be using it. Arran Cudbard-Bell@2014-07-25T21:48:29Z Files modified: * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/28096ea6c0a851a37f87… ====== Hack to get TLS-PSK-Identity Alan T. DeKok@2014-07-25T20:18:42Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46e74e8b85e297b3ee73… ====== Needs cast to long long int Arran Cudbard-Bell@2014-07-25T18:47:23Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/534a9cde330298c9b7f6… ====== print 64bit rlm_expr result Arran Cudbard-Bell@2014-07-25T18:25:39Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4285d89ddbfbffcfc4c… ====== Continue to build functions which don't rely on libpcap, when we don't have libpcap Arran Cudbard-Bell@2014-07-23T18:49:32Z Files modified: * src/include/pcap.h * src/lib/pcap.c * src/main/radsniff.c * src/modules/proto_arp/proto_arp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8be604639e2327998316… ====== Fix formatting of switch statements Arran Cudbard-Bell@2014-07-23T18:40:57Z Files modified: * src/lib/dict.c * src/lib/getaddrinfo.c * src/lib/pcap.c * src/lib/print.c * src/lib/radius.c * src/lib/snprintf.c * src/lib/token.c * src/lib/valuepair.c * src/main/acct.c * src/main/auth.c * src/main/collectd.c * src/main/detail.c * src/main/evaluate.c * src/main/modules.c * src/main/radwho.c * src/main/realms.c * src/main/soh.c * src/main/tls.c * src/main/unittest.c * src/main/util.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_couchbase/couchbase.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_eap/libeap/comp128.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ippool/rlm_ippool_tool.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_otp/otp_pw_valid.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_unix/rlm_unix.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3baf615892d9fa3b365… ====== Merge pull request #740 from qnet-herwin/debian_var_run_freeradius Debian: Ensure some directories exist Arran Cudbard-Bell@2014-07-21T18:35:59Z Files modified: * debian/freeradius.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a761a4fbce0914dd9c4… ====== Debian: Ensure some directories exist This prevents some warnings when installing the package. Herwin Weststrate@2014-07-21T18:29:59Z Files modified: * debian/freeradius.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fed5bcbb59c3471bddc3… ====== Other perl formatting Arran Cudbard-Bell@2014-07-21T16:54:44Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/316a7c96b780d94e4a61… ====== Fix multivalues attributes in rlm_perl Arran Cudbard-Bell@2014-07-21T16:54:01Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bdf7a9d99a80c7fc90b… ====== Merge pull request #739 from sylphlin/master Add the gigawords calculation for MSSQL in accounting stop SQL clause Alan DeKok@2014-07-21T14:35:35Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ca9068e03aaa62430be… ====== Add the gigawords calculation for MSSQL in accounting stop SQL clause root@2014-07-21T08:42:42Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/83a0e34fcdb86dbf05b8… ====== Merge pull request #737 from herwinw/segfault_invalid_file_perl Added a NULL check to rlm_perl Alan DeKok@2014-07-20T15:22:37Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8df37ad5a8e938d84ec… ====== Added a NULL check to rlm_perl Otherwise, trying to start rlm_perl with an invalid file parameter would cause a segfault. Herwin Weststrate@2014-07-20T10:57:21Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab5a15eb51283727b56c… ====== dhcpclient - timeout and decline, release, inform Added receive timeout on socket according to -t option (retries are still not handled). Added commands for "decline", "release" and "inform" messages. Updated usage. Nicolas C (via Arran Cudbard-Bell)@2014-07-16T20:52:27Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/403230d9264fd0e6ce4f… ====== Add description of -P option to man pages Add description of -P option to radtest and radclient man pages. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:51:00Z Files modified: * man/man1/radclient.1 * man/man1/radtest.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55f203ae0898fb702b18… ====== Clarify conditions of limit hit SNMP notifications Use "hit" instead of "reach" in the descriptions of serverMaxRequest and serverMaxThreads SNMP notifications to make it clearer that they trigger upon attempt to exceed the limit, not upon reaching the maximum allowed value. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:56Z Files modified: * mibs/FREERADIUS-NOTIFICATION-MIB.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1970606d45bfd82c143… ====== Switch .cnf files to sha256 message digest Use sha256 as default_md (message digest) in all .cnf files as it is more secure than the previous, now considered weak, sha1. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:53Z Files modified: * raddb/certs/ca.cnf * raddb/certs/client.cnf * raddb/certs/server.cnf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ec21dd0d1772471e34f… ====== Add minimal rlm_krb5 documentation file Add doc/modules/rlm_krb5 - a minimal rlm_krb5 module documentation file, based on the wiki page. Update raddb/mods-available/krb5 comments to point to the actual and proper location. Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:50Z Files modified: * doc/modules/rlm_krb5 * raddb/mods-available/krb5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/54b984f780ffafaf93bb… ====== Check BN_rand_range return value CVE-2014-4733. In practice, the function should never fail. jvoisin (via Alan T. DeKok)@2014-07-15T01:37:05Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52328081b0afb6b756c2… ====== Constant time memory comparison. CVE-2014-4731. Non-constant time comparisons usually require millions of packets in order to get enough statistics. This is VERY hard to do with WiFi or wired 802.1X. The delays on switch port open / close are on the order of seconds. jvoisin (via Alan T. DeKok)@2014-07-15T01:37:03Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/403722205996c5d53692… ====== Use *_clear_free instead of *_free. CVE-2014-4732 jvoisin (via Alan T. DeKok)@2014-07-15T01:37:02Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c272a5cd9cc6c9ba420a… ====== dhcpclient - store xid when encoding request Fixes the incorrect debug message "Encoding DHCP-Discover of id ffffffff". And this will allow to correlate xid from response (should be done by the client, but not yet). Nicolas C (via Alan T. DeKok)@2014-07-13T19:29:07Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/227a946b2c35efebad26… ====== Add module type sanity check Arran Cudbard-Bell@2014-07-12T19:41:47Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7911d9dd94c0afd8b215… ====== Add support for connection pool reuse Arran Cudbard-Bell@2014-07-12T16:53:34Z Files modified: * src/include/conffile.h * src/include/connection.h * src/include/modpriv.h * src/main/conffile.c * src/main/connection.c * src/main/modules.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/05740186b3a30d9bab81… ====== Convert another argument to bool Arran Cudbard-Bell@2014-07-12T16:28:21Z Files modified: * src/include/modpriv.h * src/main/command.c * src/main/modcall.c * src/main/modules.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0a203fab54b3524d461… ====== Typo Arran Cudbard-Bell@2014-07-10T18:40:43Z Files modified: * src/include/connection.h * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fee86a05bbed6f174eac… ====== Formatting and documentation Arran Cudbard-Bell@2014-07-10T18:40:43Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c9b6bf4accdc4d59487… ====== find_client: min prefix of 0 needs to work Use signed loop counter to permit 0-1 to be <= min_prefix Sam Hartman (via Alan T. DeKok)@2014-07-10T18:07:50Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dfcb6f2270bfe5a0b897… ====== fr_inaddr_mask fix 0 prefix Don't depend on the behavior of shifting by 32-bits on a 32-bit type. Sam Hartman (via Alan T. DeKok)@2014-07-10T18:07:48Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59c761e8ccfd50c7d813… ====== Allow User-Name in CUI reply Alan T. DeKok@2014-07-10T05:22:18Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/195a17d58a2224c00124… ====== Remove useless extern declarations Arran Cudbard-Bell@2014-07-10T00:28:58Z Files modified: * src/include/libradius.h * src/include/missing-h * src/include/rad_assert.h * src/include/radiusd.h * src/include/tls-h * src/lib/dict.c * src/lib/print.c * src/lib/radius.c * src/main/mainconfig.c * src/main/tls.c * src/main/tls_listen.c * src/modules/rlm_eap/libeap/eap_chbind.h * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_types.h * src/modules/rlm_mschap/opendir.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e0e86e10681c70f4afba… ====== Cleanup EAP-SIM macros Arran Cudbard-Bell@2014-07-10T00:28:58Z Files modified: * src/modules/rlm_eap/libeap/eap_sim.h * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/31eebf381775229b14fe… ====== Debug condition is now a fr_cond_t Arran Cudbard-Bell@2014-07-10T00:28:58Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ae938982d3df106d51d… ====== Limit which operators can be used with LDAP group comparison and other minor cleanups Arran Cudbard-Bell@2014-07-10T00:28:58Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff7c91c08d3bc20c4f60… ====== Use loop index to get description. Closes #729 Alan T. DeKok@2014-07-09T21:33:52Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/836edc3d32acec6433e1… ====== A parent config section might not exist when dynamically adding a home server. Alan T. DeKok@2014-07-09T21:29:21Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d0b35b201537621f452… ====== Formatting Arran Cudbard-Bell@2014-07-09T02:09:29Z Files modified: * src/include/token.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/785a190d49d7f5f845b8… ====== Fixup Sqlite schema Arran Cudbard-Bell@2014-07-09T02:09:26Z Files modified: * raddb/mods-config/sql/main/sqlite/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1153cd0d46a803deacf… ====== Merge pull request #728 from spaetow/patch-1 Update cui Arran Cudbard-Bell@2014-07-08T13:50:47Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56f0bd126467af919f17… ====== Update cui Updated comments to clarify the dual purpose of the unlang fragment. Stefan Paetow@2014-07-08T10:45:01Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3875518cef0a654e744b… ====== Try and make dlopen library search messages clearer Arran Cudbard-Bell@2014-07-08T05:24:53Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a063aa327d86ab3554db… ====== Remove reply:User-Name only if there's a reply:CUI Alan T. DeKok@2014-07-08T04:35:41Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1827f88607f287d841ea… ====== Formatting Arran Cudbard-Bell@2014-07-07T20:28:21Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fe4970c8613e232e63b0… ====== Merge pull request #726 from herwinw/peap_proxy_as_eap_boolean Some cleanups in rlm_eap{peap,ttls} headers Arran Cudbard-Bell@2014-07-07T20:04:01Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h * src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5929a1d63f19881b276f… ====== Use enums instead of define lists in rlm_eap_peap But only for the values that are only used internally. Herwin Weststrate@2014-07-06T12:55:03Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06ebd7ef91a97ab19f18… ====== Changed integer type for rlm_eap_{ttls,peap} tunnel types to bool where applicable Herwin Weststrate@2014-07-06T12:37:27Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h * src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/995e77fb5c260f28feff… ====== As posted to the list Alan T. DeKok@2014-07-07T18:10:05Z Files modified: * share/dictionary * share/dictionary.dragonwave Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d88c3145fa9c361850a4… ====== radeapclient - fix send_packet I spotted two errors in radeapclient.c, introduced in the following previous commits. With this fix, radeapclient is now useable again. 1) Commit: c8a062a112f17a5810d311dc0e0acfe963b2d440 (2014/06/13) - send_packet(rep, &req); - - if (!req) return -1; + send_packet(req, &rep); + if (!rep) { Arguments got reversed. Hence segmentation fault later when doing: for (vp = req->vps; vp != NULL; vp = vpnext) { Bit of caution on the wording used in radeapclient: "req" is the request coming FROM the server. (because this is not a "request" in RADIUS sense, but an EAP-Request within the EAP-SIM transaction.) "rep" is the response from the client TO the server (EAP-Response). 2) Commit: bc3676835c3dcc220ab518d4c3c35962bc0f8be2 (2014/05/02) In "send_packet": + if (!req || !rep || !*rep) return -1; *rep == NULL is the expected behaviour... Nicolas C (via Arran Cudbard-Bell)@2014-07-04T17:09:17Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f50d728a9e3f5fb6aea… ====== Merge pull request #724 from pwdng/master Update redhat spec file Arran Cudbard-Bell@2014-07-04T15:54:54Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ff282afcc477b90869d… ====== In redhat spec file, update dependency on json-c to version 0.10 as 0.11 only exists for fedora and 0.10 builds ok Philippe Wooding@2014-07-04T14:03:19Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30efae5bc96185eab3e9… ====== Update list of installed files in redhat spec file Philippe Wooding@2014-07-04T14:03:19Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/472b5574d7423bc4fb5e… ====== Update redhat spec file to reflect the fact rlm_host is no longer experimental. Philippe Wooding@2014-07-04T12:30:39Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a9084db4c17dc77d2d32… ====== Revert version to 3.1.0 in redhat spec. Philippe Wooding@2014-07-04T12:13:30Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1ce69e0e2fd9f290759… ====== Use correct type for length Alan T. DeKok@2014-07-03T02:00:10Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee44b6952e13b082573e… ====== No need for casting in talloc_array_length() Alan T. DeKok@2014-07-03T01:45:57Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/572c38c5823fd6551bd3… ====== Channel bindings fixes -fix size calculation -skip unwanted attrs when copying -add safety check to copy code in case size is wrong -add cast to get correct result from talloc_array_length() Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:44:25Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9900f1166dec32c5818a… ====== Don't call free on talloc'ed channel bindings packet Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:44:24Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fddcb36c9eb2eaa5716e… ====== Fix cursor initialization bugs in eap_chbind_vp2packet Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:44:23Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56bb6254260b52a44042… ====== Merge pull request #720 from qnet-herwin/perl_arrays Fixed adding attributes with multiple values to rlm_perl Arran Cudbard-Bell@2014-07-02T19:35:36Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/136839028c267856bc3c… ====== Fixed adding attributes with multiple values to rlm_perl Without this fix, the array in Perl would start with the value of the first attribute in the packet, combined with the actual values of the attribute. The debug log would look like this: $RAD_REPLY{'User-Name'}[0] = &reply:User-Name -> 'anonymous' $RAD_REPLY{'h323-credit-amount'}[1] = &reply:h323-credit-amount -> '100' $RAD_REPLY{'h323-credit-amount'}[2] = &reply:h323-credit-amount -> '101' The actual value of $RAD_REPLY{'h323-credit-amount'} is ['anonymous','100','101'] Herwin Weststrate@2014-07-02T19:21:01Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bff37ca5088181511f59… ====== 3.0.x - Make EAP-SIM work again - proper encoding of EAP-SIM attributes within EAP-Message This fix follows the issue I logged (on the mailing list, not on GitHub) on June 11th. As a reminder, the problem happened after a commit which (among other things) modified the EAP-SIM attributes. Since this commit, EAP-SIM authentication do not work because EAP-Message is not properly encoded anymore by FreeRADIUS. I believe the commit is the following: https://github.com/FreeRADIUS/freeradius-server/commit/39df09e42d80a96363be… So, here is a fix. I also fixed the attributes issue in radeapclient, but at the moment the binary is unusable: it crashes, and I don't have time to look into this. (I tested the fix with another EAP client) Nicolas C (via Arran Cudbard-Bell)@2014-07-01T19:48:43Z Files modified: * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1fcbd068f044ce76aa03… ====== Inline breaks linking? Arran Cudbard-Bell@2014-07-01T15:58:37Z Files modified: * src/include/libradius.h * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab02411d66ed3ba2cb94… ====== Fix capitalisation in UKERNA dictionary Fixes #718 Arran Cudbard-Bell@2014-07-01T15:44:55Z Files modified: * share/dictionary.ukerna Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb1f9a7cf7480b1458a9… ====== Other things still reference dict_attr_allowed_chars Arran Cudbard-Bell@2014-07-01T15:42:53Z Files modified: * src/include/libradius.h * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d992482da429cf205e79… ====== Fixed reference to config file Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:53Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00e8e42f1bb7cd2aca41… ====== Formatting fixes in rlm_perl Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:53Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3e6a8995cd1e3738b2d… ====== Readability fixes in mods-available/perl Alignment is now stable with any tab width. Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:52Z Files modified: * raddb/mods-available/perl Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9cd5f614a80d8e2a7eb… ====== Fixed typo in rlm_sql.c s/afftected/affected/ Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:52Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c45895ef69a40edaf9b… ====== Fixed some tabs/spaces in default virtual server Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:52Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4116dc1c672062dfcf69… ====== Use RFC language in eap.c messages Arran Cudbard-Bell@2014-07-01T13:38:57Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38327a7337b4aac18e7c… ====== No need to call exit twice Arran Cudbard-Bell@2014-07-01T13:38:57Z Files modified: * src/lib/event.c * src/main/detail.c * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c615ec735ce17d07f6cb… ====== Better errors on junk chars in dict.c Arran Cudbard-Bell@2014-07-01T13:38:57Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93ec9e971dab7a95fe2b… ====== We can now use talloc_free() for listeners Alan T. DeKok@2014-06-27T17:05:23Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6489092c694f2ae5f50… ====== Proxy sockets use common_socket_free(). Closes #680 Alan T. DeKok@2014-06-27T17:05:22Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12041693e38b6db2b2b9… ====== The default secret is "radsec" Alan T. DeKok@2014-06-27T17:05:20Z Files modified: * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d9b8a151b76b3688fea8… ====== Now that we have default IPv6 listeners, have a v6 client, too Alan T. DeKok@2014-06-27T17:05:18Z Files modified: * raddb/clients.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a84361f81ab84b633b1… ====== No need for an empty function Alan T. DeKok@2014-06-27T17:05:16Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d70e948848ca2e6430e… ====== Move checks for virtual_server to listen_parse() Which is better than scattering them through the code. Alan T. DeKok@2014-06-27T17:05:08Z Files modified: * src/main/listen.c * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/57fd01d5559ab9ce53d0… ====== Merge pull request #715 from qnet-herwin/perl_remove_rad_config Removed RAD_CONFIG entry in Perl Arran Cudbard-Bell@2014-06-27T15:59:06Z Files modified: * raddb/mods-available/perl * raddb/mods-config/perl/example.pl * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/099f9948a416d010e357… ====== Removed RAD_CHECK entry in Perl, protomed RAD_CONFIG RAD_CONFIG used to be an undocumented read-only clone of RAD_CHECK, where RAD_CHECK was named incorrectly. Remove the RAD_CHECK, make RAD_CONFIG read/write. This should not be merged to 3.0.x, as it breaks backwards compatibility. Herwin Weststrate@2014-06-27T13:13:29Z Files modified: * raddb/mods-available/perl * raddb/mods-config/perl/example.pl * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f923e1861c582f2ece87… ====== IKEv2 fixes required on our side Arran Cudbard-Bell@2014-06-27T15:47:12Z Files modified: * configure * configure.ac * src/include/autoconf.h.in * src/modules/rlm_eap/types/rlm_eap_ikev2/logging_impl.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/860e93eaf5b75f5a8cee… ====== Assume RFC 3542 compliance for IPv6 socket options, which fixes IPv6 support on FreeBSD 10.0 Arran Cudbard-Bell@2014-06-27T13:30:49Z Files modified: * configure * configure.ac * src/include/autoconf.h.in * src/lib/udpfromto.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d672bc5874694ddc6f9c… ====== Confusing comments Arran Cudbard-Bell@2014-06-27T12:09:29Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82f40d28b7cd1b213ff8… ====== Fix for ptrace check under FreeBSD Arran Cudbard-Bell@2014-06-27T12:01:08Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3327c68e5a36a792af83… ====== Typos Arran Cudbard-Bell@2014-06-27T09:21:07Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8f5c60da443c5e35c49c… ====== Use standard return codes Arran Cudbard-Bell@2014-06-26T22:41:22Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6b0ba314ffb33355d0bf… ====== Convert binary values to octets type attributes correctly Arran Cudbard-Bell@2014-06-26T21:34:38Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8021cc4b1a0983c3f625… ====== Rename vpsname to list_name Add array indexes to multivalued attributes Arran Cudbard-Bell@2014-06-26T21:34:12Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3b21c1f80481b61b3157… ====== Fixup debugging and formatting in rlm_perl Arran Cudbard-Bell@2014-06-26T19:12:24Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4fedb631564b7aae92d… ====== Merge pull request #714 from qnet-herwin/perl_more_debugging Improve debug logging of rlm_perl Arran Cudbard-Bell@2014-06-26T16:28:24Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08aa3cf49d391798fc9f… ====== Improve debug logging of rlm_perl Don't just show the attributes being copied, but also say where they are copied from/to. Herwin Weststrate@2014-06-26T15:47:37Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c03155f522205b60a373… ====== Set a timer for marking a home server dead. Closes #712 Alan T. DeKok@2014-06-26T14:33:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52d8e49e90c519c2017c… ====== Pass2 for attributes in existence checks if (&foo-LDAP-Group) { ... } Alan T. DeKok@2014-06-26T14:18:43Z Files modified: * src/main/modcall.c * src/main/parser.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dbca6aecf64d21e160e5… ====== Remove redundant includes of netinet/in.h Arran Cudbard-Bell@2014-06-26T12:56:07Z Files modified: * src/include/pcap.h * src/include/radsniff.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ebd509389f47e2137381… ====== -- This commit summary was generated @2014-07-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 25 Jul '14

25 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Only include pcap.h if we have libpcap Arran Cudbard-Bell@2014-07-25T22:47:46Z Files modified: * src/include/pcap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4277e3c53e40f43d4c7d… ====== Add Proxy-To-Realm and Replicate-To-Realm attributes to LDAP schema Arran Cudbard-Bell@2014-07-25T22:45:08Z Files modified: * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.ldif * doc/schemas/ldap/openldap/freeradius.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2d9684338b24e866c9b… ====== Organise LDAP schemas better Arran Cudbard-Bell@2014-07-25T22:06:30Z Files modified: * doc/schemas/ldap/edir/freeradius-clients.ldif * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/iplanet/freeradius.ldif * doc/schemas/ldap/iplanet/freeradius.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema * doc/schemas/ldap/openldap/freeradius-clients.ldif * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.ldif * doc/schemas/ldap/openldap/freeradius.schema * doc/schemas/ldap/radiusclients-edirectory.ldif * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f92fc7ae2ecabb4aa2a… ====== Change IANA number in LDAP schemas from 3317 to 11344 No idea who 'Port Community Rotterdam' are, but we have our own IANA number, so should be using it. Arran Cudbard-Bell@2014-07-25T21:48:29Z Files modified: * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/28096ea6c0a851a37f87… ====== Hack to get TLS-PSK-Identity Alan T. DeKok@2014-07-25T20:18:42Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46e74e8b85e297b3ee73… ====== Needs cast to long long int Arran Cudbard-Bell@2014-07-25T18:47:23Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/534a9cde330298c9b7f6… ====== print 64bit rlm_expr result Arran Cudbard-Bell@2014-07-25T18:25:39Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4285d89ddbfbffcfc4c… ====== -- This commit summary was generated @2014-07-26T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 25 Jul '14

25 Jul '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Only include pcap.h if we have libpcap Arran Cudbard-Bell@2014-07-25T22:47:51Z Files modified: * src/include/pcap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6cb44b85de3eb396c173… ====== Add Proxy-To-Realm and Replicate-To-Realm attributes to LDAP schema Arran Cudbard-Bell@2014-07-25T22:45:14Z Files modified: * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.ldif * doc/schemas/ldap/openldap/freeradius.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f818856428e4f69eee32… ====== Organise LDAP schemas better Arran Cudbard-Bell@2014-07-25T22:06:39Z Files modified: * doc/schemas/ldap/edir/freeradius-clients.ldif * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/iplanet/freeradius.ldif * doc/schemas/ldap/iplanet/freeradius.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema * doc/schemas/ldap/openldap/freeradius-clients.ldif * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.ldif * doc/schemas/ldap/openldap/freeradius.schema * doc/schemas/ldap/radiusclients-edirectory.ldif * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/239ab5540e0d4c6c55b2… ====== Change IANA number in LDAP schemas from 3317 to 11344 No idea who 'Port Community Rotterdam' are, but we have our own IANA number, so should be using it. Arran Cudbard-Bell@2014-07-25T21:50:08Z Files modified: * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4087461ac4cb1f502ba2… ====== Hack to get TLS-PSK-Identity Alan T. DeKok@2014-07-25T20:18:19Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/14507d9e13469cd1ccf5… ====== Needs cast to long long int Arran Cudbard-Bell@2014-07-25T18:47:29Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eba481140f018478411c… ====== print 64bit rlm_expr result Arran Cudbard-Bell@2014-07-25T18:25:46Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f17c3bd8c8cb7960566… ====== -- This commit summary was generated @2014-07-26T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

update request ... seems not to be working
by Sam Hartman 25 Jul '14

25 Jul '14

Hi. debug output from the pre-proxy policy I submitted a pull request for recently. As far as I can tell the update request block is not doing anything. %{client:trust_router_coi} (0) --> apc.painless-security.com (0) if ("%{client:trust_router_coi}") -> TRUE (0) if ("%{client:trust_router_coi}") { (0) update request { (0) EXPAND %{client:trust_router_coi} (0) --> apc.painless-security.com (0) trust-router-coi := "apc.painless-security.com" (0) } # update request = noop (0) } # if ("%{client:trust_router_coi}") = noop (0) if ("%{client:gss_acceptor_realm_name}") (0) EXPAND %{client:gss_acceptor_realm_name} (0) --> painless-security.com (0) if ("%{client:gss_acceptor_realm_name}") -> TRUE (0) if ("%{client:gss_acceptor_realm_name}") { (0) update request { (0) EXPAND %{client:gss_acceptor_realm_name} (0) --> painless-security.com (0) gss-acceptor-realm-name := "painless-security.com" (0) } # update request = noop (0) } # if ("%{client:gss_acceptor_realm_name}") = noop (0) } # abfab_pre_proxy abfab_pre_proxy = noop (0) } # pre-proxy = noop Opening new proxy socket 'proxy (0.0.0.0, 0) -> home_server (54.210.169.190, 208 3)' Trying SSL to port 2083 Requiring Server certificate (0) (other): before/connect initialization (0) TLS_connect: before/connect initialization (0) >>> TLS 1.0 Handshake [length 003d], ClientHello (0) TLS_connect: SSLv3 write client hello A (0) <<< TLS 1.0 Handshake [length 0036], ServerHello ... (0) Sending Access-Request packet to host 54.210.169.190 port 2083, id=100, leng th=0 (0) User-Name = '@staff.painless-security.com' (0) GSS-Acceptor-Service-Name = 'gss' (0) GSS-Acceptor-Host-Name = 'painless-security.com' (0) EAP-Message = 0x02000021014073746166662e7061696e6c6573732d73656375726974 792e636f6d (0) Message-Authenticator = 0x93d2db00804f0168b47e8213de6dcf21 (0) NAS-IP-Address = 127.0.0.1 (0) Realm = 'apc.painless-security.com%staff.painless-security.com' (0) EAP-Type = Identity (0) Proxy-State = 0x30 Sending Access-Request Id 100 from 10.1.10.90:44014 to 54.210.169.190:2083 User-Name = '@staff.painless-security.com' GSS-Acceptor-Service-Name = 'gss' GSS-Acceptor-Host-Name = 'painless-security.com' EAP-Message = 0x02000021014073746166662e7061696e6c6573732d73656375726974 792e636f6d Message-Authenticator = 0x93d2db00804f0168b47e8213de6dcf21 NAS-IP-Address = 127.0.0.1 Proxy-State = 0x30 Unlang: abfab_pre_proxy { # check acceptor host name is correct if ("%{client:gss_acceptor_host_name}" && "%{gss-acceptor-host-name}") { if ("%{client:gss_acceptor_host_name}" != "%{gss-acceptor-host-name}") { reject } } # set trust-router-coi attribute from client configuration if ("%{client:trust_router_coi}") { update request { trust-router-coi := "%{client:trust_router_coi}" } } # set gss-acceptor-realm-name attribute from client configuration if ("%{client:gss_acceptor_realm_name}") { update request { gss-acceptor-realm-name := "%{client:gss_acceptor_realm_name}" } } } What I'd expect to happen is for my outgoing request to have gss-acceptor-realm-name and trust-router-coi attributes set.

2 1

rlm_expr overflow bug
by Gabriel Blanchard 25 Jul '14

25 Jul '14

Found a bug while trying to use the acct_counters64 policy acct_counters64.preacct { update request { Acct-Input-Octets64 = "%{expr:(%{%{Acct-Input-Gigawords}:-0} * 4294967296) + %{%{Acct-Input-Octets}:-0}}" Acct-Output-Octets64 = "%{expr:(%{%{Acct-Output-Gigawords}:-0} * 4294967296) + %{%{Acct-Output-Octets}:-0}}" } } expr was returning 32 bit signed numbers and overflowing...it should return 64 bit numbers. I believe this needs to be changed in rlm_expr.c static int get_number(REQUEST *request, char const **string, int64_t *answer) - snprintf(out, outlen, "%ld", (long int) result); + snprintf(out, outlen, "%lld", (int64_t) result); -Gabe

2 1

length of value_pair value is only 127
by Hagen Muench 24 Jul '14

24 Jul '14

Hello, I have to process a vendor specific attribute from cisco, i.e. the Cisco-SSG-Account-Info attribute. ---snip--- #define PW_SSG_ACCOUNT_INFO 250 #define CISCO2ATTR(x) ((9 << 16) | (x)) ... vp = pairfind(request->packet->vps, CISCO2ATTR(PW_SSG_ACCOUNT_INFO)); if (!vp) { radlog(L_INFO, "Value pair not found!"); } else{ radlog(L_INFO, "%s, %i", vp->vp_strvalue, strlen(vp->vp_strvalue)); } ... ---snip--- If I send an authentication request the attribute is found. The problem is that the vp->vp_strvalue is cut after 128 chars and strlen(vp->vp_strvalue)) is 127. Though the length of vp_strvalue is defined in libradius.h by MAX_STRING_LEN (0-253 octets) according to RFC. I have sent the request by the NTRadPing test utility. Is it a known issue? Thank you for help. - Hagen

2 4