September 2014 - Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 17 Sep '14

17 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Free unknown DICT_ATTRs. Closes #795 The unknown DICT_ATTRs are converted to talloc, and various sweeping changes made through the code to accomodate this. Alan T. DeKok@2014-09-17T16:41:54Z Files modified: * src/include/libradius.h * src/lib/dict.c * src/lib/radius.c * src/lib/valuepair.c * src/main/map.c * src/main/tmpl.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_vmps/vqp.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d7238ebd64f4cde5ce8… ====== Make pairsteal() steal only one attribute So that we can call it from other places in valuepair.c Only radsniff calls it for a list of VPs, so we just move the loop to radsniff Alan T. DeKok@2014-09-17T16:41:52Z Files modified: * src/include/libradius.h * src/lib/valuepair.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f81de062526185f05fd… ====== Fix typo from 97b8c9 Alan T. DeKok@2014-09-17T16:03:03Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c46430d9674572b2ad9d… ====== Be less picky about attribute names. Closes #796 Alan T. DeKok@2014-09-17T15:35:07Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32d560c5854b6d44ac2d… ====== Remove duplicate is_wildcard() function Alan T. DeKok@2014-09-17T15:35:06Z Files modified: * src/include/libradius.h * src/lib/misc.c * src/main/client.c * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d51544fdbe0f0200ca79… ====== Be more selective when we fix up prefixes for 'wildcard' clients Arran Cudbard-Bell@2014-09-17T05:08:22Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/537aea8be3c36b67b92e… ====== -- This commit summary was generated @2014-09-18T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 17 Sep '14

17 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Note recent changes Alan T. DeKok@2014-09-17T16:41:00Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f021ec6892ef65ed64e7… ====== Free unknown DICT_ATTRs. Closes #795 The unknown DICT_ATTRs are converted to talloc, and various sweeping changes made through the code to accomodate this. Alan T. DeKok@2014-09-17T16:40:26Z Files modified: * src/include/libradius.h * src/lib/dict.c * src/lib/radius.c * src/lib/valuepair.c * src/main/map.c * src/main/tmpl.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_vmps/vqp.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/76f0ab30e76a2297c592… ====== Make pairsteal() steal only one attribute So that we can call it from other places in valuepair.c Only radsniff calls it for a list of VPs, so we just move the loop to radsniff Alan T. DeKok@2014-09-17T16:17:18Z Files modified: * src/include/libradius.h * src/lib/valuepair.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8459479208ef7bd17444… ====== Fix typo from 97b8c9 Alan T. DeKok@2014-09-17T16:02:49Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/89e2c41cacc0ff01b97d… ====== Whitespace. And merge in the changelog from 3.0.4 Alan T. DeKok@2014-09-17T15:36:37Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffe6431495b6426015ae… ====== Be less picky about attribute names. Closes #796 Alan T. DeKok@2014-09-17T15:34:41Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38541b475492d91b8861… ====== Remove duplicate is_wildcard() function Alan T. DeKok@2014-09-17T15:26:44Z Files modified: * src/include/libradius.h * src/lib/misc.c * src/main/client.c * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97b8c9b83432b1740e6c… ====== Update ChangeLog Arran Cudbard-Bell@2014-09-17T05:23:20Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d1b2cc5507a8f8c884f… ====== Be more selective when we fix up prefixes for 'wildcard' clients Arran Cudbard-Bell@2014-09-17T05:08:30Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfd52e81a66ff965472d… ====== -- This commit summary was generated @2014-09-18T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

EAP-FAST phase2 failed
by Ammu Argh 17 Sep '14

17 Sep '14

Hi stephan, As you suggested i tried to connect freeradous to active directory. Freeradius is able to join the active directory and below command also succeeded. radtest -t mschap <user> <password> localhost 0 <sharedsecret> But station failed to connect to AP. I got the below error on freeradius: EAP-FAST: Add EAP-Payload TLV EAP-FAST: Encrypting Phase 2 TLVs - hexdump(len=9): [REMOVED] EAP-FAST: Piggyback Phase 2 data (len=74) with last Phase 1 Message (len=59 used=0) SSL: Generating Request SSL: Sending out 133 bytes (message sent completely) EAP: EAP entering state SEND_REQUEST EAP: EAP entering state IDLE EAP: retransmit timeout 3 seconds (from dynamic back off; retransCount=0) Wed Sep 17 12:06:41 2014 : Debug: ==> Request Wed Sep 17 12:06:41 2014 : Info: ++[eap2] = handled Wed Sep 17 12:06:41 2014 : Info: +} # group EAP = handled Sending Access-Challenge of id 0 to 10.10.2.21 port 32769 EAP-Message = 0x0103008b2b011403010001011603010030ecbaeb0cb34edb4b5a2ba664ee29b3bc10415f193eea62b87aec7010764b27c9214f353e257ba45d088db01395af31921703010020553bf7bacca0e0deaaab76ced600289fa3cfd5e554f12194366f6daebb9457461703010020bfa25876dc10a3be2823cc57da70dacc00ba36be10cac7d3fab63abc9568da76 State = 0x168e1d8b4946cac447e29a10af5f74ab Message-Authenticator = 0x00000000000000000000000000000000 Wed Sep 17 12:06:41 2014 : Info: Finished request 2. Wed Sep 17 12:06:41 2014 : Debug: Going to the next request Wed Sep 17 12:06:41 2014 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 10.10.2.21 port 32769, id=0, length=198 Wed Sep 17 12:06:41 2014 : Info: Cleaning up request 2 ID 0 with timestamp +4 User-Name = "Administrator" NAS-IP-Address = 10.10.2.21 Called-Station-Id = "00904c0dc3c0" Calling-Station-Id = "b0df3a213196" NAS-Identifier = "00904c0dc3c0" NAS-Port = 6 Framed-MTU = 1400 State = 0x168e1d8b4946cac447e29a10af5f74ab NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0203003b2b01170301003095d9ea11cd8534ccc15833857d3abf3d4cde7bcfd6452e90a6376d38a1fbca5cd8866df13873ced31bcddb01b763a05a Message-Authenticator = 0x8436f303447ef2fb778d130a29cde1fe Wed Sep 17 12:06:41 2014 : Info: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Wed Sep 17 12:06:41 2014 : Info: +group authorize { Wed Sep 17 12:06:41 2014 : Info: ++[preprocess] = ok Wed Sep 17 12:06:41 2014 : Info: ++[chap] = noop Wed Sep 17 12:06:41 2014 : Info: ++[mschap] = noop Wed Sep 17 12:06:41 2014 : Info: ++[digest] = noop Wed Sep 17 12:06:41 2014 : Info: [suffix] No '@' in User-Name = "Administrator", looking up realm NULL Wed Sep 17 12:06:41 2014 : Info: [suffix] No such realm "NULL" Wed Sep 17 12:06:41 2014 : Info: ++[suffix] = noop Wed Sep 17 12:06:41 2014 : Info: [eap] EAP packet type response id 3 length 59 Wed Sep 17 12:06:41 2014 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Wed Sep 17 12:06:41 2014 : Info: ++[eap] = updated Wed Sep 17 12:06:41 2014 : Info: [files] users: Matched entry DEFAULT at line 1 Wed Sep 17 12:06:41 2014 : Info: ++[files] = ok Wed Sep 17 12:06:41 2014 : Info: ++[expiration] = noop Wed Sep 17 12:06:41 2014 : Info: ++[logintime] = noop Wed Sep 17 12:06:41 2014 : Info: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. Wed Sep 17 12:06:41 2014 : Info: ++[pap] = noop Wed Sep 17 12:06:41 2014 : Info: +} # group authorize = updated Wed Sep 17 12:06:41 2014 : Info: Found Auth-Type = EAP Wed Sep 17 12:06:41 2014 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/default Wed Sep 17 12:06:41 2014 : Info: +group EAP { Wed Sep 17 12:06:41 2014 : Info: [eap2] Request found, released from the list EAP: EAP entering state RECEIVED EAP: parseEapResp: rxResp=1 respId=3 respMethod=43 respVendor=0 respVendorMethod=0 EAP: EAP entering state INTEGRITY_CHECK EAP: EAP entering state METHOD_RESPONSE SSL: Received packet(len=59) - Flags 0x01 SSL: Received packet: Flags 0x1 Message Length 0 EAP-FAST: Received 53 bytes encrypted data for Phase 2 EAP-FAST: Decrypted Phase 2 TLVs - hexdump(len=22): [REMOVED] EAP-FAST: Received Phase 2: TLV type 9 length 18 (mandatory) EAP-FAST: EAP-Payload TLV - hexdump(len=18): 02 03 00 12 01 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 EAP-FAST: Received Phase 2: code=2 identifier=3 length=18 EAP-Identity: Peer identity - hexdump_ascii(len=13): 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 Administrator EAP-FAST: PHASE2_ID -> PHASE2_METHOD EAP-FAST: try EAP type 26 EAP: EAP entering state METHOD_REQUEST EAP: building EAP-Request: Identifier 4 EAP-MSCHAPV2: Challenge - hexdump(len=16): 3f 59 4c c5 b1 d1 bc 71 62 df c1 49 70 6a 03 b7 EAP-FAST: Phase 2 EAP-Request - hexdump(len=33): [REMOVED] EAP-FAST: Add EAP-Payload TLV EAP-FAST: Encrypting Phase 2 TLVs - hexdump(len=37): [REMOVED] SSL: Generating Request SSL: Sending out 106 bytes (message sent completely) EAP: EAP entering state SEND_REQUEST EAP: EAP entering state IDLE EAP: retransmit timeout 3 seconds (from dynamic back off; retransCount=0) Wed Sep 17 12:06:41 2014 : Debug: ==> Request Wed Sep 17 12:06:41 2014 : Info: ++[eap2] = handled Wed Sep 17 12:06:41 2014 : Info: +} # group EAP = handled Sending Access-Challenge of id 0 to 10.10.2.21 port 32769 EAP-Message = 0x010400702b011703010020e4317e67f52197b376755f279b5e6623bba4be4333673a365d6162ddb21e5ba8170301004034291c01a1da6602565ad1e7ed03b4dd5f7a0f12d7f081fbd12e2fffdb304e1c5294279384159b5c2d8d003b3ef0dbfb15cf87af4db208b7259979816ada26c3 State = 0x9dd8b50daabbda5628fd760dd6fc5d4c Message-Authenticator = 0x00000000000000000000000000000000 Wed Sep 17 12:06:41 2014 : Info: Finished request 3. Wed Sep 17 12:06:41 2014 : Debug: Going to the next request Wed Sep 17 12:06:41 2014 : Debug: Waking up in 4.9 seconds. Wed Sep 17 12:06:46 2014 : Info: Cleaning up request 3 ID 0 with timestamp +4 Wed Sep 17 12:06:46 2014 : Info: Ready to process requests. Please find the attached complete console log for freeradius. Please help me to make it work. Regards Ammu On Fri, Aug 8, 2014 at 3:30 PM, < freeradius-devel-request(a)lists.freeradius.org> wrote: > Send Freeradius-Devel mailing list submissions to > freeradius-devel(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-devel > or, via email, send a message with subject or body 'help' to > freeradius-devel-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-devel-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Devel digest..." > > > Today's Topics: > > 1. RE: EAP-FAST phase2 failed (Stefan Paetow) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 7 Aug 2014 21:25:46 +0000 > From: Stefan Paetow <Stefan.Paetow(a)ja.net> > To: FreeRadius developers mailing list > <freeradius-devel(a)lists.freeradius.org> > Subject: RE: EAP-FAST phase2 failed > Message-ID: <C072996E0B81144DBB9426B44462540C0D6935BF@EXC001> > Content-Type: text/plain; charset="iso-8859-1" > > The log says this: > > EAP-MSCHAPV2: eap_server Password not configured > EAP-FAST: Phase2 method failed > EAP-FAST: PHASE2_METHOD -> FAILURE > > Leads me to believe you either need to configure EAP-FAST to use EAP-GTC > or PAP as the second phase, or connect FR to SAMBA or Active Directory > (which both speak MSCHAPv2). > > Stefan > > ________________________________ > From: freeradius-devel-bounces+stefan.paetow=ja.net(a)lists.freeradius.org > [freeradius-devel-bounces+stefan.paetow=ja.net(a)lists.freeradius.org] on > behalf of Ammu Argh [ammu3634(a)gmail.com] > Sent: 07 August 2014 17:16 > To: freeradius-devel(a)lists.freeradius.org > Subject: EAP-FAST phase2 failed > > Hi, > > I was trying to connect to AP using EAP-FAST authentication. > But Freeradius EAP-FAST failed with below error: > > State = 0x97d5bb340dc1cb0c525e6b44738f3553 > Message-Authenticator = 0xdce2fb540845c5ee76a5f48b505bb4eb > # Executing section authorize from file > /usr/local/etc/raddb/sites-enabled/default > +group authorize { > ++[preprocess] = ok > ++[chap] = noop > ++[mschap] = noop > ++[digest] = noop > [suffix] No '@' in User-Name = "anonymous", looking up realm NULL > [suffix] No such realm "NULL" > ++[suffix] = noop > [eap] EAP packet type response id 4 length 107 > [eap] No EAP Start, assuming it's an on-going EAP conversation > ++[eap] = updated > [files] users: Matched entry DEFAULT at line 202 > ++[files] = ok > ++[expiration] = noop > ++[logintime] = noop > [pap] WARNING! No "known good" password found for the user. > Authentication may fail because of this. > ++[pap] = noop > +} # group authorize = updated > Found Auth-Type = EAP > # Executing group from file /usr/local/etc/raddb/sites-enabled/default > +group EAP { > [eap2] Request found, released from the list > EAP: EAP entering state RECEIVED > EAP: parseEapResp: rxResp=1 respId=4 respMethod=43 respVendor=0 > respVendorMethod=0 > EAP: EAP entering state INTEGRITY_CHECK > EAP: EAP entering state METHOD_RESPONSE > SSL: Received packet(len=107) - Flags 0x01 > SSL: Received packet: Flags 0x1 Message Length 0 > EAP-FAST: Received 101 bytes encrypted data for Phase 2 > EAP-FAST: Decrypted Phase 2 TLVs - hexdump(len=67): [REMOVED] > EAP-FAST: Received Phase 2: TLV type 9 length 63 (mandatory) > EAP-FAST: EAP-Payload TLV - hexdump(len=63): 02 04 00 3f 1a 02 04 00 3a 31 > 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 > 67 a5 fd 37 80 a6 91 10 ed 46 97 b2 70 75 aa cc 57 27 17 4e dc 0c 6c 00 77 > 69 66 69 > EAP-FAST: Received Phase 2: code=2 identifier=4 length=63 > EAP-MSCHAPV2: eap_server Password not configured > EAP-FAST: Phase2 method failed > EAP-FAST: PHASE2_METHOD -> FAILURE > EAP: EAP entering state SELECT_ACTION > EAP: getDecision: method failed -> FAILURE > EAP: EAP entering state FAILURE > EAP: Building EAP-Failure (id=4) > ==> Fail > [eap2] Freeing handler > EAP: Server state machine removed > ++[eap2] = reject > +} # group EAP = reject > Failed to authenticate the user. > Using Post-Auth-Type REJECT > # Executing group from file /usr/local/etc/raddb/sites-enabled/default > +group REJECT { > [attr_filter.access_reject] expand: %{User-Name} -> anonymous > attr_filter: Matched entry DEFAULT at line 11 > ++[attr_filter.access_reject] = updated > +} # group REJECT = updated > Delaying reject of request 4 for 1 seconds > Going to the next request > Waking up in 0.9 seconds. > Sending delayed reject for request 4 > Sending Access-Reject of id 117 to 10.10.2.2 port 46531 > EAP-Message = 0x04040004 > Message-Authenticator = 0x00000000000000000000000000000000 > Waking up in 3.9 seconds. > > > Other details are as below" > > Users file" > wifi Auth-Type := EAP, Cleartext-Password := "welcome123" > > eap.conf > eap2 { > fast { > pac_opaque_encr_key = > 000102030405060708090a0b0c0d0e0f > eap_fast_a_id = tjsys > eap_fast_a_id_info = my_server > eap_fast_prov = 3 > pac_key_lifetime = 604800 # 7 days > pac_key_refresh_tim = 86400 > } > > tls { > ca_cert = /usr/local/etc/raddb/certs/ca.pem > server_cert = /usr/local/etc/raddb/certs/server.pem > private_key_file = > /usr/local/etc/raddb/certs/server.key > private_key_password = whatever > dh_file = /usr/local/etc/raddb/certs/dh > random_file = /usr/local/etc/raddb/certs/random > } > } > > > Sites-enabled/default: > Added in authenticate block > Auth-Type EAP { > eap2 > } > > > > wpa_supplicant.conf > update_config=1 > ap_scan=1 > fast_reauth=1 > > network={ > ssid="WiFi-11g" > key_mgmt=WPA-EAP > proto=WPA > pairwise=TKIP > group=TKIP > eap=FAST > anonymous_identity="fast" > identity="fast" > password="koro" > phase1="fast_provisioning=3" > pac_file="/data/misc/wifi/eap_fast.pac" > } > > > > FreeRADIUS Version 2.2.5, > OpenSSL 1.0.1e 11 > Ubuntu 14.04.1 > > Please help me to get it work. > > Regards > Ammu > > Janet(UK) is a trading name of Jisc Collections and Janet Limited, a > not-for-profit company which is registered in England under No. 2881024 > and whose Registered Office is at Lumen House, Library Avenue, > Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238 > > > > ------------------------------ > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html > > > End of Freeradius-Devel Digest, Vol 112, Issue 6 > ************************************************ >

2 1

Commit report for v3.0.x branch
by announce＠freeradius.org 16 Sep '14

16 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Depend on krb5-libs, not krb5 Alan T. DeKok@2014-09-16T14:54:20Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0018d9117aef8c024313… ====== Allow debian builds with libcurl4-gnutls-dev The only relevant part of this package is the content of /usr/include/curl, these are the same for libcurl4-openssl-dev and libcurl4-gnutls-dev. Herwin Weststrate (via Arran Cudbard-Bell)@2014-09-16T14:41:36Z Files modified: * debian/control Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e4f71a7e6ec04502c018… ====== Set CURLOPT_NOSIGNAL in rest module This is required for multithreaded applications (see http://curl.haxx.se/libcurl/c/libcurl-tutorial.html#Multi-threading) Once in a while, this would result in a longjump error: *** longjmp causes uninitialized stack frame ***: freeradius terminated ======= Backtrace: ========= /lib/i386-linux-gnu/i686/cmov/libc.so.6(__fortify_fail+0x50)[0xf73b16a0] /lib/i386-linux-gnu/i686/cmov/libc.so.6(+0xeb60a)[0xf73b160a] /usr/lib/i386-linux-gnu/libcurl-gnutls.so.4(+0x8085)[0xf71bf085] (file and memory locations may vary among platforms). The crash occured about once or twice per hour while under continuous load, there is no definite way to reproduce it. I haven't seen it anymore with these changes after several hours of testing. Herwin Weststrate (via Arran Cudbard-Bell)@2014-09-16T14:40:31Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/134921ee0bd71029753e… ====== fr_ipaddr_cmp should compare prefixes too 0.0.0.0/1 != 0.0.0.0/0 Arran Cudbard-Bell@2014-09-16T06:18:00Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e659f925f996a1d3e9e… ====== Fix dynamic client debug messages Arran Cudbard-Bell@2014-09-16T06:11:03Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/09f32b0165b2a017f5f1… ====== Check for null leaf values when parsing JSON structures. Fixes #790 Arran Cudbard-Bell@2014-09-16T03:59:11Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/630189e43dee9484f5af… ====== Fix previous commit... should be setting prefix on src_ipaddr field Arran Cudbard-Bell@2014-09-16T03:15:25Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a844db7c887b9825c3d… ====== Fixes for deprecated libcouchbase functions Arran Cudbard-Bell@2014-09-16T03:09:53Z Files modified: * src/modules/rlm_couchbase/couchbase.c * src/modules/rlm_couchbase/couchbase.h * src/modules/rlm_couchbase/mod.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dadd3abfb4c786d7a21d… ====== -- This commit summary was generated @2014-09-17T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 16 Sep '14

16 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #789 from qnet-herwin/debian_libcurl_gnutls Allow debian builds with libcurl4-gnutls-dev Arran Cudbard-Bell@2014-09-16T14:40:18Z Files modified: * debian/control Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6cb12c2392617d1c54f8… ====== Allow debian builds with libcurl4-gnutls-dev The only relevant part of this package is the content of /usr/include/curl, these are the same for libcurl4-openssl-dev and libcurl4-gnutls-dev. Herwin Weststrate@2014-09-12T14:09:15Z Files modified: * debian/control Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1fa1974ca686cd99841a… ====== Merge pull request #793 from qnet-herwin/curl_nosignal Set CURLOPT_NOSIGNAL in rest module Arran Cudbard-Bell@2014-09-16T14:39:31Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9c45009f770d184367c6… ====== Set CURLOPT_NOSIGNAL in rest module This is required for multithreaded applications (see http://curl.haxx.se/libcurl/c/libcurl-tutorial.html#Multi-threading) Once in a while, this would result in a longjump error: *** longjmp causes uninitialized stack frame ***: freeradius terminated ======= Backtrace: ========= /lib/i386-linux-gnu/i686/cmov/libc.so.6(__fortify_fail+0x50)[0xf73b16a0] /lib/i386-linux-gnu/i686/cmov/libc.so.6(+0xeb60a)[0xf73b160a] /usr/lib/i386-linux-gnu/libcurl-gnutls.so.4(+0x8085)[0xf71bf085] (file and memory locations may vary among platforms). The crash occured about once or twice per hour while under continuous load, there is no definite way to reproduce it. I haven't seen it anymore with these changes after several hours of testing. Herwin Weststrate@2014-09-16T09:31:06Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fca3d3303a80fd6a5cb0… ====== fr_ipaddr_cmp should compare prefixes too 0.0.0.0/1 != 0.0.0.0/0 Arran Cudbard-Bell@2014-09-16T06:18:09Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df058237f2ee3f07ab42… ====== Fix dynamic client debug messages Arran Cudbard-Bell@2014-09-16T06:11:38Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02723550e4a8486e0bee… ====== Check for null leaf values when parsing JSON structures. Fixes #790 Arran Cudbard-Bell@2014-09-16T03:59:19Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cacf08c8a27fe90fe8b5… ====== Fix previous commit... should be setting prefix on src_ipaddr field Arran Cudbard-Bell@2014-09-16T03:17:54Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/43740db5e63d21a083c7… ====== Depend on krb5-libs, not krb5 Alan T. DeKok (via Arran Cudbard-Bell)@2014-09-16T03:17:49Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dff7f1fd00e4b6212c97… ====== Set prefix for Client-Src-IP-Address, too Alan T. DeKok (via Arran Cudbard-Bell)@2014-09-16T03:17:45Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d92a080ae741a41c2a3… ====== Fixes for deprecated libcouchbase functions Arran Cudbard-Bell@2014-09-16T03:07:56Z Files modified: * src/modules/rlm_couchbase/couchbase.c * src/modules/rlm_couchbase/couchbase.h * src/modules/rlm_couchbase/mod.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11757000f28a9a1dd737… ====== -- This commit summary was generated @2014-09-17T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 15 Sep '14

15 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update ChangeLog Arran Cudbard-Bell@2014-09-15T21:50:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/094a78f4fe113b2c9058… ====== Depend on krb5-libs, not krb5 Alan T. DeKok@2014-09-15T19:33:36Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f85d8aa44c45048cecec… ====== Set prefix for Client-Src-IP-Address, too Alan T. DeKok@2014-09-15T17:03:08Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/355dce620f0854e662ed… ====== Added RFC 7155 Alan T. DeKok@2014-09-15T15:27:31Z Files modified: * share/dictionary * share/dictionary.rfc7155 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b9185226f292aa932cd4… ====== -- This commit summary was generated @2014-09-16T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 15 Sep '14

15 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Added RFC 7155 Alan T. DeKok@2014-09-15T15:27:44Z Files modified: * share/dictionary * share/dictionary.rfc7155 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3ad54fdf7e148f5e6184… ====== -- This commit summary was generated @2014-09-16T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

FR_SMART_CHECK_INCLUDE prefixes
by Aaron Hurt 15 Sep '14

15 Sep '14

The newish smart_prefix parts in FR_SMART_CHECK_INCLUDE don’t seem to be working as intended in testing on my OSX and Linux systems. Example: $smart_prefix = "json json-c” The code checks with: "-isystem json/" and "-isystem json-c/“ but does not succeed when json.h is present under /usr/include/json-c/json.h The intent appears to be that the compiler (clang / gcc) will prepend the system default search paths but this doesn’t seem to be the case. Under OSX the overall function works when it falls through to the ‘guessing’ section when the file is present under /usr/local/include/json-c/json.h This could possibly be fixed by simply adding "/usr/include" to the start of _smart_include_dir and doing away with the previous check that was attempting to use the default search paths with prefixes. Anyone have any other thoughts? — Aaron

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 11 Sep '14

11 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fixup map_from_str to work correctly with list qualifiers Arran Cudbard-Bell@2014-09-11T22:02:29Z Files modified: * src/include/token.h * src/lib/token.c * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dba9609299b3c358a585… ====== Add getop (get an operator) Arran Cudbard-Bell@2014-09-11T22:02:29Z Files modified: * src/include/token.h * src/lib/token.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/548526ac9589954a43ea… ====== tok should be a bool Arran Cudbard-Bell@2014-09-11T22:02:29Z Files modified: * src/lib/token.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21c89f46c3fc06e34355… ====== Rename map_from_str to map_from_fields Arran Cudbard-Bell@2014-09-11T22:02:28Z Files modified: * src/include/map.h * src/main/map.c * src/main/modcall.c * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1314687b093ebfb92ebc… ====== Should be T_INVALID not T_OP_INVALID Arran Cudbard-Bell@2014-09-11T22:02:28Z Files modified: * src/include/token.h * src/lib/print.c * src/lib/token.c * src/lib/valuepair.c * src/main/conffile.c * src/main/exec.c * src/main/files.c * src/main/parser.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddb15f08b6b9031cb72c… ====== Revert "tls: Set umask before creating temporary file" This reverts commit 1fc1558e7ac11102a4bc479a57de76c4f4f42c46. There are a few issues with this change. 1) verify_tmp_dir is created 0700 *before* mkstemp() is called So the umask for the temporary file doesn't matter 2) the server is threaded, and umask() is *global* to the process So there is no "before" mkstemp() and "after" mkstemp(). The Coverity warning is (in this case) a false positive. Alan T. DeKok@2014-09-11T21:11:31Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/79db10e27346ffa8f01f… ====== Allow NULL user object filter If the DN of the user object can be constructed from attributes in the request, there's no need to apply a filter, and scope = base can be used. Arran Cudbard-Bell@2014-09-11T17:55:04Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/31cb321cd63ed9da00ac… ====== Formatting Arran Cudbard-Bell@2014-09-11T17:55:03Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32463ba73a196a24dcc5… ====== Remove netmask Alan T. DeKok@2014-09-11T16:49:51Z Files modified: * raddb/sites-available/dynamic-clients Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6a4dee068c8bc4dbf02c… ====== API error should probably be debug Arran Cudbard-Bell@2014-09-11T14:32:31Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3e2049b531012f7c138… ====== -- This commit summary was generated @2014-09-12T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 11 Sep '14

11 Sep '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fixup map_from_str to work correctly with list qualifiers Arran Cudbard-Bell@2014-09-11T21:57:50Z Files modified: * src/include/token.h * src/lib/token.c * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/278306422eda760c0b06… ====== Add getop (get an operator) Arran Cudbard-Bell@2014-09-11T21:57:50Z Files modified: * src/include/token.h * src/lib/token.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c9ef2580574923f41141… ====== tok should be a bool Arran Cudbard-Bell@2014-09-11T21:57:49Z Files modified: * src/lib/token.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82d584253990faee767f… ====== Rename map_from_str to map_from_fields Arran Cudbard-Bell@2014-09-11T21:57:49Z Files modified: * src/include/map.h * src/main/map.c * src/main/modcall.c * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6f18a6af9c0edfd10f44… ====== Should be T_INVALID not T_OP_INVALID Arran Cudbard-Bell@2014-09-11T21:45:56Z Files modified: * src/include/token.h * src/lib/print.c * src/lib/token.c * src/lib/valuepair.c * src/main/conffile.c * src/main/exec.c * src/main/files.c * src/main/parser.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf1ca552ca63a72c1b5b… ====== Allow NULL user object filter If the DN of the user object can be constructed from attributes in the request, there's no need to apply a filter, and scope = base can be used. Arran Cudbard-Bell@2014-09-11T17:55:14Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc58511171a7e678665f… ====== Formatting Arran Cudbard-Bell@2014-09-11T17:55:14Z Files modified: * src/main/map.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82531005df30834c0abf… ====== Remove netmask Alan T. DeKok@2014-09-11T16:50:04Z Files modified: * raddb/sites-available/dynamic-clients Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/039a29566017e1c54ff7… ====== API error should probably be debug Arran Cudbard-Bell@2014-09-11T14:32:24Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9df65eb2cd7c020006a3… ====== -- This commit summary was generated @2014-09-12T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0