October 2015 - Freeradius-Devel - lists.freeradius.org

Commit report for v3.0.x branch
by announce＠freeradius.org 23 Oct '15

23 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Don't use CURLOPT_PUT, it does extra things we don't want Arran Cudbard-Bell@2015-10-23T23:16:20Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c60e20e20731c745e900… ====== Remove redundant definition Alan T. DeKok@2015-10-23T22:57:48Z Files modified: * src/include/radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/300bec4d7ee58aee7f4c… ====== Put warnings at the top of the file And not beside every attribute Alan T. DeKok@2015-10-23T22:56:23Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/389594c48fd12bdba9f4… ====== Include dictionary.freeradius, too Alan T. DeKok@2015-10-23T22:56:12Z Files modified: * src/include/all.mk * src/include/radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfd4e692f428b7eb442c… ====== Merge pull request #1346 from jpereira/bug/stats1 Bugfix - increase a wrong list in stats #1339 Alan DeKok@2015-10-23T21:26:37Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0280c1e5cb52803b90d0… ====== Bugfix - increase a wrong stats-list Jorge Pereira@2015-10-23T20:35:46Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/89a81d3c37f093212cea… ====== Merge pull request #1328 from clementhk/wbclient_debian add debian libwbclient-dev path Arran Cudbard-Bell@2015-10-23T20:33:26Z Files modified: * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb60e69304a609f7adf8… ====== Update dictionary Alan Buxey (via Arran Cudbard-Bell)@2015-10-23T20:33:26Z Files modified: * share/dictionary Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/edd5c15e1bf4670a7273… ====== Create dictionary.meraki Alan Buxey (via Arran Cudbard-Bell)@2015-10-23T20:33:26Z Files modified: * share/dictionary.meraki Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c708be405906b4634bd1… ====== Merge pull request #1344 from jpereira/fix/proxy-stats3 Update ChangeLog Arran Cudbard-Bell@2015-10-23T20:30:34Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7088a0f9781a3277c60e… ====== Update ChangeLog Jorge Pereira@2015-10-23T20:03:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/313cb7f132b2a2d49e18… ====== Merge pull request #1343 from jpereira/fix/proxy-stats Fixed bug with coa/acct stats value #1339 Alan DeKok@2015-10-23T19:40:08Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/577b7c7f17c8ec1ce2cd… ====== Fixed bug with coa/acct stats value Jorge Pereira@2015-10-23T19:36:41Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59b8b28a3b19bfb7985d… ====== add vqp.h in, too Alan T. DeKok@2015-10-23T19:38:47Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/78dc5e3847155331b3d7… ====== re-add autoconf.h Alan T. DeKok@2015-10-23T19:29:15Z Files modified: * src/include/build.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c7ab856f2230c0390796… ====== Ignore version checks if cross compiling. Fixes #1340. Avoiding checks is a bad idea, but we don't really have any option when cross compiling Alan T. DeKok@2015-10-23T19:15:47Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/54cf3a6d8ff0faf6281e… ====== Build RFC headers, too Alan T. DeKok@2015-10-23T19:13:40Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72997333d6371009c706… ====== Print coa / disconnect stats. Addresses #1339 Alan T. DeKok@2015-10-23T19:04:42Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9980526bd1152430ecf9… ====== Add missing Alan T. DeKok@2015-10-23T18:46:36Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/813630727e8330b4456f… ====== Increment timeouts for CoA packets, too Alan T. DeKok@2015-10-23T18:44:55Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6f56f71f17a8692f8837… ====== Fix dependencies Simplify the dependencies and the build. Alan T. DeKok@2015-10-23T18:40:24Z Files modified: * scripts/boiler.mk * src/all.mk * src/include/all.mk * src/include/build.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2158ffef3ed935ac4fab… ====== Merge pull request #1341 from qnet-herwin/post_auth_reject Fixed usage os Post-Auth-Type REJECT Arran Cudbard-Bell@2015-10-23T15:17:27Z Files modified: * src/main/auth.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e7a51f9b503cb760e7b2… ====== Fixed usage os Post-Auth-Type REJECT The values had been shifted in the dictionaries in commit d9a9d594e666d70b9762c879c2c69d9a9bb38a64, but this piece of code used a hardcoded magic value instead of the autogenerated constant from include/attributes.h. Fix this by using the constant. Herwin Weststrate@2015-10-23T15:12:37Z Files modified: * src/main/auth.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3f504555a7bde9d3bbf… ====== Add comments about Wichorus-Host-IP Alan T. DeKok@2015-10-23T15:16:20Z Files modified: * share/dictionary.wichorus Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/67fea8542072f4e5253d… ====== note recent changes Alan T. DeKok@2015-10-23T15:16:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/76deb72c27e44d629b54… ====== -- This commit summary was generated @2015-10-24T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 23 Oct '15

23 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Typo Arran Cudbard-Bell@2015-10-23T23:56:24Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/89452d0cfb1e659a4ce8… ====== No longer used Arran Cudbard-Bell@2015-10-23T23:32:33Z Files modified: * raddb/mods-available/eap * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/rlm_eap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c42a787a005f7b6457bb… ====== Revert "Put warnings at the top of the file" They're needed for doxygen. Arran Cudbard-Bell@2015-10-23T23:17:38Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff2e3552fbdcf6c2c179… ====== State buffer is now unused so can be removed - woohoo! Arran Cudbard-Bell@2015-10-23T23:16:34Z Files modified: * src/modules/rlm_eap/eap.h * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9dad826f4faf45fd5f28… ====== Extra sanity check Arran Cudbard-Bell@2015-10-23T23:16:34Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/424ac37a742ee9c631e0… ====== Don't use CURLOPT_PUT, it does extra things we don't want Arran Cudbard-Bell@2015-10-23T23:16:34Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1af2791543017c0833e… ====== Only set a content-type if it's not none Arran Cudbard-Bell@2015-10-23T23:16:34Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be7d4f97465fd1674216… ====== Fixup custom data encoder Arran Cudbard-Bell@2015-10-23T23:16:34Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a05458d574517c81da32… ====== Remove redundant definition Alan T. DeKok@2015-10-23T22:58:02Z Files modified: * src/include/radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47605863157fa1b6d814… ====== Put warnings at the top of the file And not beside every attribute Alan T. DeKok@2015-10-23T22:56:47Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7cff52565d4b5385f8c0… ====== Include dictionary.freeradius, too Alan T. DeKok@2015-10-23T22:56:46Z Files modified: * src/include/all.mk * src/include/radius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1dd505e12ced6d9ce46… ====== Bugfix - increase a wrong stats-list Jorge Pereira (via Alan T. DeKok)@2015-10-23T21:27:08Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ad6c60117008d8ff53b… ====== Complete documentation for the request data API Arran Cudbard-Bell@2015-10-23T20:31:20Z Files modified: * src/include/radiusd.h * src/main/request.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5bac2dc81a5d837a0ee4… ====== Merge pull request #1328 from clementhk/wbclient_debian add debian libwbclient-dev path Arran Cudbard-Bell@2015-10-23T20:31:07Z Files modified: * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/401232457bdda8cf339b… ====== add debian libwbclient-dev path Clement Wong@2015-10-15T22:21:55Z Files modified: * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3e09fdb38202c5a8b50… ====== Merge pull request #1342 from alanbuxey/v3.1.x added Meraki dictionary file Arran Cudbard-Bell@2015-10-23T20:30:47Z Files modified: * share/dictionary * share/dictionary.meraki Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5e904d2c88bcd18442b… ====== Update dictionary Alan Buxey@2015-10-23T17:54:16Z Files modified: * share/dictionary Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee36be564a535d4bf388… ====== Create dictionary.meraki Alan Buxey@2015-10-23T17:53:57Z Files modified: * share/dictionary.meraki Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d4a2181c095867d026fa… ====== Fixed bug with coa/acct stats value Jorge Pereira (via Alan T. DeKok)@2015-10-23T19:40:20Z Files modified: * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0872fee8b33be343907d… ====== add vqp.h in, too Alan T. DeKok@2015-10-23T19:39:00Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/568b223a2b0e3383f687… ====== re-add autoconf.h Alan T. DeKok@2015-10-23T19:29:25Z Files modified: * src/include/build.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62dd9869f06b3c89637b… ====== Ignore version checks if cross compiling. Fixes #1340. Avoiding checks is a bad idea, but we don't really have any option when cross compiling Alan T. DeKok@2015-10-23T19:16:59Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9cfbb1823518091df9a8… ====== Build RFC headers, too Alan T. DeKok@2015-10-23T19:13:52Z Files modified: * src/include/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f98b70d390dd4937bc80… ====== Print coa / disconnect stats. Addresses #1339 Alan T. DeKok@2015-10-23T19:05:00Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f6aedb662c441842283… ====== Increment timeouts for CoA packets, too Alan T. DeKok@2015-10-23T18:46:55Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/572a4e58f2df74b444e6… ====== Fix dependencies Simplify the dependencies and the build. Alan T. DeKok@2015-10-23T18:46:47Z Files modified: * scripts/boiler.mk * src/all.mk * src/include/all.mk * src/include/build.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/63e65210f6998e0f663a… ====== Quiet gcc some more Arran Cudbard-Bell@2015-10-23T15:19:46Z Files modified: * src/main/request.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/067a40189354ad791380… ====== Add comments about Wichorus-Host-IP Alan T. DeKok@2015-10-23T15:16:50Z Files modified: * share/dictionary.wichorus Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73f87fa1d1c5781663fb… ====== Doxygen Arran Cudbard-Bell@2015-10-23T07:27:10Z Files modified: * src/modules/rlm_eap/libeap/eapcommon.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77f57eeff957fe18637b… ====== quiet gcc Arran Cudbard-Bell@2015-10-23T07:25:49Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6df9b5e701d8749810d6… ====== Use RWARN for the certificate compatibility message Arran Cudbard-Bell@2015-10-23T06:57:05Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02b93b14eb87ebad6608… ====== Move EAP to using only the new state API Need to test proxying inner methods (and add tests) as this functionality may be broken. We now use the state API to automagically persist and restore request_data_t that have been marked with the persist flag (this will work for anything, not just EAP). For fake child requests we use the same session index, capturing it from the fake request after it returns, and setting it in the next fake request. This avoids using the state tree for inner requests, and is fairly self contained, so isn't too hacky. The first time we get a child eap_session, its lifetime is bound to its parent. If the parent gets freed then the child will be also. This probably won't happen ever, except possibly if the supplicant started sending malformed outer EAP packets after the tunnel had been setup. Arran Cudbard-Bell@2015-10-23T06:53:58Z Files modified: * src/include/state.h * src/main/state.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/eap.h * src/modules/rlm_eap/libeap/eapcommon.c * src/modules/rlm_eap/mem.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e889512101794c12661… ====== Extra debugging Arran Cudbard-Bell@2015-10-23T06:51:34Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/524391d6b5c0d4a4c150… ====== Formatting Arran Cudbard-Bell@2015-10-23T06:51:25Z Files modified: * src/main/state.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5ceba90e1dcc1ff9783… ====== Fix request data api functions Arran Cudbard-Bell@2015-10-23T06:51:21Z Files modified: * src/main/request.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cf2ad2ec34d73333d89d… ====== Extend request data API to distinguish between persistable and non persistable request data Arran Cudbard-Bell@2015-10-23T00:44:25Z Files modified: * src/include/radiusd.h * src/main/command.c * src/main/modcall.c * src/main/regex.c * src/main/request.c * src/modules/rlm_eap/eap.h * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0eff3b644d292f75ad6b… ====== s/fr_link_talloc_ctx_free/fr_talloc_link_ctx/ Arran Cudbard-Bell@2015-10-22T23:15:37Z Files modified: * src/include/libradius.h * src/lib/misc.c * src/main/connection.c * src/main/state.c * src/modules/rlm_cache/drivers/rlm_cache_memcached/rlm_cache_memcached.c * src/modules/rlm_cache/drivers/rlm_cache_rbtree/rlm_cache_rbtree.c * src/modules/rlm_redis/cluster.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c4a6bd51ab73bc89028… ====== -- This commit summary was generated @2015-10-24T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 22 Oct '15

22 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use correct context. Fixes #1338 Alan T. DeKok@2015-10-22T15:56:31Z Files modified: * src/modules/rlm_exec/rlm_exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ff1448316714d72a59d… ====== -- This commit summary was generated @2015-10-23T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 22 Oct '15

22 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== No longer relevant Arran Cudbard-Bell@2015-10-22T23:10:00Z Files modified: * src/main/state.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3f818ed188ec2fffadb0… ====== Remove unused fields Arran Cudbard-Bell@2015-10-22T23:07:39Z Files modified: * src/modules/rlm_eap/rlm_eap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d51d6f755800e766b48c… ====== Use the same tree for global state tracking and EAP We'll likely split this later into multiple trees with a hash to reduce contention. Arran Cudbard-Bell@2015-10-22T23:04:08Z Files modified: * raddb/mods-available/eap * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/rlm_eap.c * src/tests/eapol_test/config/servers.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d68558c878d3a7dd9cc… ====== All state functions should take a state tree Arran Cudbard-Bell@2015-10-22T22:56:41Z Files modified: * src/include/state.h * src/main/auth.c * src/main/process.c * src/main/radiusd.c * src/main/state.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6573363f8107a356f551… ====== Don't need to retain a reference to the state tree, as it's freed automatically Arran Cudbard-Bell@2015-10-22T22:47:05Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48ba7c2113a9aa5daa71… ====== Apparently WITH_THREADS doesn't depend on HAVE_PTHREAD_H *sigh* Arran Cudbard-Bell@2015-10-22T22:32:26Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9a6a42a032f6a265cee… ====== cleanup cpp in threads.c Arran Cudbard-Bell@2015-10-22T22:28:44Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d6e7130cd4ebdc00c195… ====== radiusd needs map_proc Arran Cudbard-Bell@2015-10-22T22:17:46Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff119753f806e38fb7bd… ====== Cleanup the state tree properly, and remove any talloc relationship between fr_state_entry_t and fr_state_tree_t. Arran Cudbard-Bell@2015-10-22T22:17:30Z Files modified: * src/include/state.h * src/main/radiusd.c * src/main/request.c * src/main/state.c * src/main/unittest.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/rlm_eap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/38faca7f520e30093906… ====== Fix EAP running in -X mode Arran Cudbard-Bell@2015-10-22T22:17:29Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/183045b193b4df9fcdcf… ====== Better names Arran Cudbard-Bell@2015-10-22T20:50:54Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7226317867bfd3a7b66… ====== Only call thread_pool_conf if we were built with threads Arran Cudbard-Bell@2015-10-22T20:28:11Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da8b90ca763e58e8b59f… ====== quick hack to ensure the proc tree is always freed Arran Cudbard-Bell@2015-10-22T20:25:12Z Files modified: * src/include/map_proc.h * src/main/map_proc.c * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ff707b58787f5f1efe2… ====== Move OpenSSL mutexes to talloc Arran Cudbard-Bell@2015-10-22T20:24:25Z Files modified: * src/include/tls-h * src/main/radiusd.c * src/main/threads.c * src/main/tls.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0824cc617c3f2d667568… ====== Build threads as part of the server library Arran Cudbard-Bell@2015-10-22T17:31:48Z Files modified: * src/main/libfreeradius-server.mk * src/main/radiusd.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c51506d4354ebad305b3… ====== Use correct context. Fixes #1338 Alan T. DeKok@2015-10-22T15:57:15Z Files modified: * src/modules/rlm_exec/rlm_exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd730bcd9604fbdd70cd… ====== Initialise each of OpenSSL's locks on a different line, so they're easier to identify in profiling tools This is so bad, there's no excuse for this stupidity, the OpenSSL guys... If you cracked one over the head with an iron bar, it'd be shit that came dripping out, not brains. What the hell were they thinking. Even if you initialise PER-THREAD contexts, you STILL have mutex overhead. You end up serialising or session initialisation, because even with different contexts, and different certificates, you're locking the SAME GODDAMN MUTEX. Arran Cudbard-Bell@2015-10-22T05:02:19Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/28f3b1b1f34a605e321f… ====== Configure thread pool earlier Arran Cudbard-Bell@2015-10-22T01:36:04Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/process.c * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff9baee18b62c4a08ee2… ====== Allocate multiple contexts per TLS config Prior to this commit, if the server was running with a single instance of rlm_eap, it was, essentially single threaded, due to locking around the SSL_CTX. This solution isn't perfect, but we'd require a massive rearchitecture of the server to be able to associate all the requests of an EAP session with a single thread. Arran Cudbard-Bell@2015-10-22T01:36:04Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d6543082b55024eb1e3… ====== tls_ctx client argument should be bool Arran Cudbard-Bell@2015-10-22T00:17:17Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/632c3665a4cce75522e4… ====== Expose thread_pool.max_threads so it can be used to automatically determine the number of SSL contexts we need Arran Cudbard-Bell@2015-10-22T00:16:46Z Files modified: * src/include/radiusd.h * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ffed135ac2d8e93751eb… ====== -- This commit summary was generated @2015-10-23T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

directory prefix in freeradius-devel vs. include
by Eran Pasternak 22 Oct '15

22 Oct '15

Hello, I'm developing FR which is not installed in the standard location. Specifically raddb dir is not the default so when running radclient (and other applications) I have to add its location (with the '-d' flag). This is required even though the compilation is configured with the appropriate @prefix@ for this location. I noticed that radclient.c (and others) use h files from 'freeradius-devel' and not 'include'. Now in the 'include' dir 'build-radpaths-h' uses my configured prefix while in 'freeradius-devel' it doesn't which is obviously the reason why the prefix have no effect for radclient. I couldn't find a way to make the configure script or whatever to place the prefix in 'freeradius-devel' as well. Bottom line is why are these two separate directories which are identical (aside from the paths)? And how to "convey" the prefix to the files in 'freeradius-devel'. Thank you, Eran WARNING - CONFIDENTIAL INFORMATION: ________________________________ The information contained in the e-mail may contain confidential and privileged information and is intended solely for the use of the intended recipient(s). Access for any review, re-transmission, dissemination or other use of, or taking of any action in regard and reliance upon this e-mail by persons or entities other than the intended recipient(s) is unauthorized and prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message and any attachments.

2 4

Commit report for v3.0.x branch
by announce＠freeradius.org 21 Oct '15

21 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove unused options Alan T. DeKok@2015-10-21T22:17:30Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/465e9fdf4544bc1cf0f6… ====== Allow selective disabling of single dh use Which should be on by default, but can be disabled for high-load situations where the DH parameters are sufficiently secure Alan T. DeKok@2015-10-21T21:36:55Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7fa5fd731e8b18b0a8d7… ====== Merge pull request #1336 from jpereira/better/less-magic-number1 trust, magic values aren't fun Arran Cudbard-Bell@2015-10-21T05:53:58Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7bbd043a667008b07f6a… ====== Trust, magic values aren't fun Jorge Pereira@2015-10-21T04:46:41Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c7020bbda867e9d002a… ====== Merge pull request #1335 from jpereira/leak/dhcp1 Fix memory leak on invalid dhcp packet Arran Cudbard-Bell@2015-10-21T05:52:29Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55d8e02c69d0a2b61faa… ====== Fix memory leak on invalid dhcp packet Jorge Pereira@2015-10-21T04:13:04Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8e3394f1e78b7d635e2… ====== Check Option length more carefully. Closes #1334 Arran Cudbard-Bell@2015-10-21T03:22:19Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37ca754aeb1629c30837… ====== -- This commit summary was generated @2015-10-22T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 21 Oct '15

21 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Should be bool Arran Cudbard-Bell@2015-10-21T23:07:52Z Files modified: * src/main/tls.c * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d6dee36c9eee7f75337… ====== Include profiler.h Arran Cudbard-Bell@2015-10-21T22:21:51Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/29697f6ecbabc77e626b… ====== Register threads with the profiler Arran Cudbard-Bell@2015-10-21T22:19:27Z Files modified: * src/main/libfreeradius-server.mk * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5fd86acf5b9d6d4ee8b… ====== Remove unused parameters Alan T. DeKok@2015-10-21T22:17:17Z Files modified: * src/include/tls-h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/db223d4b2f7eeab594cc… ====== Remove unused options Alan T. DeKok@2015-10-21T22:14:51Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bab77a55e2928994dd99… ====== Clean up debug output Alan T. DeKok@2015-10-21T22:04:13Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48322dd121f51cb97f45… ====== spawn_workers Arran Cudbard-Bell@2015-10-21T22:02:01Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/126ce7d69af1c491b6e0… ====== Allow selective disabling of single dh use Which should be on by default, but can be disabled for high-load situations where the DH parameters are sufficiently secure Alan T. DeKok@2015-10-21T21:38:35Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c99b29e0644604f715d… ====== Don't close STDOUT/STDERR running in foreground mode Arran Cudbard-Bell@2015-10-21T20:42:36Z Files modified: * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c59999298b9478fd522… ====== Some crazy compilers have a builtin macro for unix Arran Cudbard-Bell@2015-10-21T20:09:32Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2545c266217e366fc2a0… ====== Formatting Arran Cudbard-Bell@2015-10-21T20:09:32Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e7ad84ebe4c7d7dc04d… ====== Trust, magic values aren't fun Jorge Pereira (via Arran Cudbard-Bell)@2015-10-21T05:56:58Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e778b18352090705a0b… ====== Fix memory leak on invalid dhcp packet Jorge Pereira (via Arran Cudbard-Bell)@2015-10-21T05:54:36Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/57137ece2f968183d197… ====== Check Option length more carefully. Closes #1334 Arran Cudbard-Bell@2015-10-21T03:22:55Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c5b095c038838e8b53f4… ====== -- This commit summary was generated @2015-10-22T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Support for SSL_MODE_NO_AUTO_CHAIN
by Chenggang Tang (chentang) 21 Oct '15

21 Oct '15

Hi all, Currently freeradius seems not supporting SSL_MODE_NO_AUTO_CHAIN. However, in some situations, that is needed. Following is the patch we used to enable that support in our work. Please consider to add this to code repository. Thanks a lot! -------------------------------------------------------------------------------- diff --git a/raddb/mods-available/eap b/raddb/mods-available/eap index 10026ec..5c3d0bf 100644 --- a/raddb/mods-available/eap +++ b/raddb/mods-available/eap @@ -264,6 +264,8 @@ eap { # # include_length = yes + # enable_auto_chain = yes + # Check the Certificate Revocation List # # 1) Copy CA certificates and CRLs to same directory. diff --git a/src/include/tls-h b/src/include/tls-h index a41c6f5..f4345fd 100644 --- a/src/include/tls-h +++ b/src/include/tls-h @@ -338,6 +338,7 @@ struct fr_tls_server_conf_t { uint32_t verify_depth; bool file_type; bool include_length; + bool enable_auto_chain; bool disable_tlsv1; bool disable_tlsv1_1; bool disable_tlsv1_2; diff --git a/src/main/tls.c b/src/main/tls.c index 9df48b4..caa8713 100644 --- a/src/main/tls.c +++ b/src/main/tls.c @@ -998,6 +998,7 @@ static CONF_PARSER tls_server_config[] = { { "random_file", FR_CONF_OFFSET(PW_TYPE_STRING, fr_tls_server_conf_t, random_file), NULL }, { "fragment_size", FR_CONF_OFFSET(PW_TYPE_INTEGER, fr_tls_server_conf_t, fragment_size), "1024" }, { "include_length", FR_CONF_OFFSET(PW_TYPE_BOOLEAN, fr_tls_server_conf_t, include_length), "yes" }, + { "enable_auto_chain", FR_CONF_OFFSET(PW_TYPE_BOOLEAN, fr_tls_server_conf_t, enable_auto_chain), "yes" }, { "check_crl", FR_CONF_OFFSET(PW_TYPE_BOOLEAN, fr_tls_server_conf_t, check_crl), "no" }, #ifdef X509_V_FLAG_CRL_CHECK_ALL { "check_all_crl", FR_CONF_OFFSET(PW_TYPE_BOOLEAN, fr_tls_server_conf_t, check_all_crl), "no" }, @@ -2565,6 +2566,10 @@ post_ca: #endif #endif + if (!conf->enable_auto_chain) { + SSL_CTX_set_mode(ctx, SSL_MODE_NO_AUTO_CHAIN); + } + /* Set Info callback */ SSL_CTX_set_info_callback(ctx, cbtls_info); -------------------------------------------------------------------------------- -- Best Regards, Chenggang Tang | 汤承刚

2 2

Commit report for v3.1.x branch
by announce＠freeradius.org 20 Oct '15

20 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fake unit_test server needs a name too! Arran Cudbard-Bell@2015-10-20T23:55:56Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/edca0e859e9cdde5a580… ====== Move request functions out into a separate source file util.c is getting quite big Arran Cudbard-Bell@2015-10-20T23:54:49Z Files modified: * src/main/libfreeradius-server.mk * src/main/request.c * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c8a0ffd168e2daaa694… ====== Server sections must have a name Arran Cudbard-Bell@2015-10-20T21:14:22Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0bab826c75f80b677bec… ====== Emit error when we can find a module referenced in a redundant section v3.0.x already seems to do this, not sure why it was removed Arran Cudbard-Bell@2015-10-20T20:35:21Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/43003ddb0a17c38bbbd9… ====== Fix DH size in example Alan T. DeKok@2015-10-20T15:48:42Z Files modified: * raddb/mods-available/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f53a263f27c1195e795… ====== Enable auto_chain. Fixes #1330 Alan T. DeKok@2015-10-20T15:48:31Z Files modified: * raddb/mods-available/eap * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e60a9543a03152b77a5c… ====== Move state structure allocation and population outside of the critical region Should help lower contention more. Only other optimisation we could make is to store EAP session pointer at the same time as the VPs. Arran Cudbard-Bell@2015-10-20T01:32:26Z Files modified: * src/main/state.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/430728328118085503e9… ====== Basic documentation for the state API Arran Cudbard-Bell@2015-10-20T01:32:26Z Files modified: * src/main/state.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5cfb44189a12fb7ca461… ====== -- This commit summary was generated @2015-10-21T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 20 Oct '15

20 Oct '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Print attribute name, too Alan T. DeKok@2015-10-20T18:23:19Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a9d4412912704de64565… ====== note recent changes Alan T. DeKok@2015-10-20T17:13:13Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a7d83977e906f39ed1d… ====== Fix DH size in example Alan T. DeKok@2015-10-20T15:47:13Z Files modified: * raddb/mods-available/eap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc87455a0b581205dc2a… ====== Enable auto_chain. Fixes #1330 Alan T. DeKok@2015-10-20T15:46:34Z Files modified: * raddb/mods-available/eap * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/64e7a15e34b147b90e0a… ====== Add request->state_ctx for session state. So that we can just move the pointers instead of copying data. This means less mutex contention in state.c Alan T. DeKok@2015-10-19T20:48:52Z Files modified: * src/include/radiusd.h * src/main/state.c * src/main/tmpl.c * src/main/util.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49c6146a7c81e5553012… ====== -- This commit summary was generated @2015-10-21T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0