March 2015 - Freeradius-Devel - lists.freeradius.org

Threads and modules
by Matthew Newton 24 Mar '15

24 Mar '15

Hi, I've been working on the belief that each separate thread in FreeRADIUS has a separate instantiation of each module, e.g. a new thread calls mod_instantiate at startup and mod_detach at finish. Therefore an instantiation of the module is all within one thread. I'm now thinking about this further, and believe I'm wrong...? Reason - mschap code: I'm grabbing winbind context in mod_instantiate (assuming that is in one thread), using the context in mod_authenticate, then freeing it in mod_detach. That runs fine for a while (all testing was good...) then exhibits problems that I was seeing with a non-threaded library. As I know the library is now thread-safe because of the use of context, I'm guessing that the module instantiation isn't separated per thread? If two threads use the same context at the same time (e.g. are both running with the same module instantiation simultaneously) then obviously Bad Things are going to happen. If this is the case then I guess I'll need to add a connection pool to make sure the contexts aren't shared... nothing major, but will explain what I'm seeing after running under load for ~20 minutes. Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4(a)le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp(a)le.ac.uk>

3 6

Commit report for v3.0.x branch
by announce＠freeradius.org 23 Mar '15

23 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Proper way of getting TCP connection errors Arran Cudbard-Bell@2015-03-23T16:16:56Z Files modified: * src/lib/socket.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/115b28af86553f1a5e8a… ====== -- This commit summary was generated @2015-03-24T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 23 Mar '15

23 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Proper way of getting TCP connection errors Arran Cudbard-Bell@2015-03-23T16:16:45Z Files modified: * src/lib/socket.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/abbe41a72cc10905767c… ====== -- This commit summary was generated @2015-03-24T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Adding UDP/TCP/Unix socket support to rlm_linelog
by Arran Cudbard-Bell 23 Mar '15

23 Mar '15

I've added UDP/TCP/Unix socket support to rlm_linelog in v3.1.x It's currently write only. It discards all responses. This support is intended to be used with things like carbon collector (graphite) and collectd, and is the result of the discussion on adding a rlm_graphite. The data written can be taken directly from octets type attributes, using an attribute ref as the format CONF_PAIR value. I'd appreciate comments and feedback on the socket code. It was written the code editor open in one window, and pubs.opengroup.org in the other, but that doesn't mean it will actually work the way it was intended across multiple platforms. Doing write(fd, NULL, 0); to check for socket connectedness seems like it's going to blow up somewhere at some point, so suggestions for what to do to get pending errors would be very helpful. I've merged a lot of the socket code back into v3.0.x, as the changes for TCP sockets were very minor, and it'll allow us to implement timeouts easily for RADIUS+TCP/RADSEC/Radmin connections. The main commits are: https://github.com/FreeRADIUS/freeradius-server/commit/7e850301ffd3a43a1808… https://github.com/FreeRADIUS/freeradius-server/commit/97c3e8b01339d66a84a3… I plan to fixup the config parsing a bit. Seems stupid to have to define the destination when it could be inferred from the config sections that are present, but that can't be done currently because of issues in the conf parser. There also needs to be a connect_timeout distinct from the write timeout. But that should probably be added to the connection pool section, as virtually every module that uses the connection pool supports connection timeouts, and putting in the pool section helps with consistency, even if the actual timeout is done by the library. -Arran Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

2 2

Commit report for master branch
by announce＠freeradius.org 22 Mar '15

22 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Cleanup NONNULL According to the compiler documentation putting attributes before the name and argument list of a function definition is not officially supported. Even for static functions. The proper way is to add them add the end of the declaration. This certainly makes doxygen, and my code editor happier. Arran Cudbard-Bell@2015-03-22T05:43:27Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6854477a0af7656cd730… ====== Only try and build with wbclient support if we have the headers *AND* the functions (which act as a version check) Arran Cudbard-Bell@2015-03-22T03:26:56Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7209f81078b71cf23912… ====== Doxygen Arran Cudbard-Bell@2015-03-22T02:31:46Z Files modified: * src/lib/socket.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd1ae1806baa8e84dca7… ====== Install libwebclient-dev in CIT Arran Cudbard-Bell@2015-03-22T00:57:47Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb04773c8ba77cfa72d9… ====== -- This commit summary was generated @2015-03-23T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 22 Mar '15

22 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Docs for request_will_proxy Arran Cudbard-Bell@2015-03-22T22:56:07Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c3dcd89b7e5d9717cec3… ====== Fixup formatting and logging in rlm_chap Arran Cudbard-Bell@2015-03-22T22:48:56Z Files modified: * src/modules/rlm_chap/rlm_chap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a21570da5cdeedd21ef0… ====== Minor changes to meet v3.1.x Alan T. DeKok@2015-03-22T14:11:24Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93abbcba3271c9855edb… ====== Don't initialize the proxy list on check_config Alan T. DeKok@2015-03-22T13:11:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb88b1c8abbafbd03f7f… ====== Cleanup NONNULL According to the compiler documentation putting attributes before the name and argument list of a function definition is not officially supported. Even for static functions. The proper way is to add them add the end of the declaration. This certainly makes doxygen, and my code editor happier. Arran Cudbard-Bell@2015-03-22T05:47:31Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a9a4624436d4eea225cd… ====== Only try and build with wbclient support if we have the headers *AND* the functions (which act as a version check) Arran Cudbard-Bell@2015-03-22T03:26:44Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/32a718611f517f69314b… ====== Doxygen Arran Cudbard-Bell@2015-03-22T02:31:57Z Files modified: * src/lib/socket.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1edb4fd73f77272ccd6d… ====== Install libwebclient-dev in CIT Arran Cudbard-Bell@2015-03-22T00:58:10Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2193e09d50bf24946e38… ====== -- This commit summary was generated @2015-03-23T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 22 Mar '15

22 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Docs for request_will_proxy Arran Cudbard-Bell@2015-03-22T22:55:58Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/345519350e77d1d5fa3f… ====== Fixup formatting and logging in rlm_chap Arran Cudbard-Bell@2015-03-22T22:52:50Z Files modified: * src/modules/rlm_chap/rlm_chap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/634e77807f906d7424fc… ====== Minor changes to meet v3.0.x Alan T. DeKok@2015-03-22T14:11:08Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/44786dfcd7e8158edf7c… ====== Make messages consistent with v3.0.x Alan T. DeKok@2015-03-22T14:04:54Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7719752618f63190e6e0… ====== Use fr_syserror Alan T. DeKok@2015-03-22T14:03:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/201de79e8f3e0b3f800d… ====== Cleanup NONNULL According to the compiler documentation putting attributes before the name and argument list of a function definition is not officially supported. Even for static functions. The proper way is to add them add the end of the declaration. This certainly makes doxygen, and my code editor happier. Arran Cudbard-Bell (via Alan T. DeKok)@2015-03-22T13:58:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c1c235cece131ca577e… ====== Don't use NONNULL here Alan T. DeKok@2015-03-22T13:56:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5314e9b50dcd6f0983d… ====== initialize child state before printing it Alan T. DeKok@2015-03-22T13:54:48Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eeccdca5058ef34d592d… ====== Move request_process_timer() to request_max_time() which simplifies it a lot Alan T. DeKok@2015-03-22T13:54:47Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4066eb441e5268eb9f67… ====== Add CHECK_FOR_STOP macro to state machine functions to check if the request should be stopped Alan T. DeKok@2015-03-22T13:54:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e7a79d3d517a0f8eaaab… ====== Move coa_separate checks to a macro Alan T. DeKok@2015-03-22T13:54:44Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f499cc53281db0b59d9f… ====== coa_separate() doesn't need to take an action. rename coa_timer to coa_retransmit, which is saner Alan T. DeKok@2015-03-22T13:54:42Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7534543938431bad66f… ====== Move cleanup_delay calculations to cleanup_delay function Alan T. DeKok@2015-03-22T13:54:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec80ee8cf3bb9fcb329b… ====== Move response_delay calculations to response_delay function Alan T. DeKok@2015-03-22T13:54:39Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6480dddfe47fae07072b… ====== process_timer shouldn't need to handle child PROXIED state the rest of the state machine takes care of that. Alan T. DeKok@2015-03-22T13:54:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d61ada0d5e57d5407a34… ====== Rely on eol_listener to STOP requests when a socket goes away Alan T. DeKok@2015-03-22T13:54:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/763d9ae4732540bc7f8d… ====== Document process timer function Alan T. DeKok@2015-03-22T13:54:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/29b72c30e2d560c26194… ====== request_common is now only request_process_timer Alan T. DeKok@2015-03-22T13:54:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4220b3b46294c1b82aed… ====== Move complaint for duplicate packets to its own function Which should start simplifying the code Alan T. DeKok@2015-03-22T13:54:34Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d8bdfb9e138a2478f36… ====== Convert some returns to break for style where they're the same Alan T. DeKok@2015-03-22T13:54:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ef4c96ccbf059e15389… ====== Abstract "proxy reply too late" to separate function Alan T. DeKok@2015-03-22T13:54:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8690c70d16fdb073f46f… ====== set request->process = request_response_delay immediately Alan T. DeKok@2015-03-22T13:54:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e537799c7bd5c4f2191… ====== Only try and build with wbclient support if we have the headers *AND* the functions (which act as a version check) Arran Cudbard-Bell@2015-03-22T03:26:38Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/462ba700c00a730d6347… ====== Doxygen Arran Cudbard-Bell@2015-03-22T02:32:05Z Files modified: * src/lib/socket.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/27b7cc46344879f12a81… ====== Install libwebclient-dev in CIT Arran Cudbard-Bell@2015-03-22T00:58:14Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e7bafc9ec2580c29a6e… ====== Use the correct number of fields for stop inserts Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:54Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/oracle/queries.conf * raddb/mods-config/sql/main/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84c6f5a926a423a951f8… ====== Make proxy to virtual server match callers for process_proxy_reply() Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:50Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/239eeb361293d0516605… ====== Remove STATE_MACHINE_DECL for functions, and add dot graphs To document the state machine of the server Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45d980d1abbc5bb08e30… ====== -- This commit summary was generated @2015-03-23T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 21 Mar '15

21 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use the correct number of fields for stop inserts Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:54Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/oracle/queries.conf * raddb/mods-config/sql/main/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84c6f5a926a423a951f8… ====== Make proxy to virtual server match callers for process_proxy_reply() Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:50Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/239eeb361293d0516605… ====== Remove STATE_MACHINE_DECL for functions, and add dot graphs To document the state machine of the server Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45d980d1abbc5bb08e30… ====== Merge pull request #930 from mcnewton/v3.1.x-winbind mschap auth directly to winbind via libwbclient Arran Cudbard-Bell@2015-03-21T23:15:45Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa51a3a48006fe719008… ====== Add mschap module winbind authentication This allows AD/Samba authentication against winbind via libwbclient without having to use ntlm_auth. Matthew Newton@2015-03-21T22:54:59Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bec88d5f5feada809fd5… ====== Configure scripts for libwbclient Matthew Newton@2015-03-21T22:54:50Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab80b4dd9726b443c649… ====== Create rlm_mschap.h (split out from rlm_mschap.c) Matthew Newton@2015-03-20T01:08:51Z Files modified: * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cdc3f37ac1cf45041226… ====== Change boolean do_ntlm_auth to enum MSCHAP_AUTH_METHOD Matthew Newton@2015-03-20T01:08:46Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84132d35f3bb5c5cc363… ====== Fixup some comments in fr_cursor_insert Arran Cudbard-Bell@2015-03-21T15:36:38Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ffe5b70c84b44ff9997… ====== Invalid assert Arran Cudbard-Bell@2015-03-20T19:15:50Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e807428c6045eeba929b… ====== Always initialise sockfd (not needed, but compiler complains) Arran Cudbard-Bell@2015-03-20T19:14:05Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12f54245f9df6abb03be… ====== Fix corner case where cursor.next wasn't fixed up correctly on fr_cursor_insert Arran Cudbard-Bell@2015-03-20T17:52:08Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b969473a5cc2193a334a… ====== Fixup cursor.last if we removed the vp it was referring to Arran Cudbard-Bell@2015-03-20T17:34:37Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/339f0b20bf2df8989615… ====== Last should be set to the VP we just inserted Arran Cudbard-Bell@2015-03-20T17:34:14Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c180cc6a14aa7ea4d1d… ====== Formatting Arran Cudbard-Bell@2015-03-20T17:32:28Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be45b1ad8693d3a56214… ====== Add support for writing to TCP, UDP and Unix sockets in linelog Arran Cudbard-Bell@2015-03-20T16:34:37Z Files modified: * raddb/mods-available/linelog * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97c3e8b01339d66a84a3… ====== Create a standard set of socket connection functions for UNIX/TCP/UDP We should eventually add SCTP too, but the OSX kernel doesn't support it yet *boo*, and I don't have time to compile the 3rd party kext. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/tcp.h * src/lib/all.mk * src/lib/misc.c * src/lib/socket.c * src/lib/tcp.c * src/lib/unix.c * src/main/listen.c * src/main/radclient.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e850301ffd3a43a1808… ====== Move fr_nonblock and fr_blocking to misc.c. They're useful for files as well as sockets. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/misc.c * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ace9ebacf2f07cbfdfff… ====== Merge pull request #929 from spaetow/patch-1 Update proxy.conf Arran Cudbard-Bell@2015-03-18T23:48:48Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1926b0cfa954ab5d50a7… ====== Update proxy.conf Add a short description for the dynamic option in proxy.conf Stefan Paetow@2015-03-18T23:47:17Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72e240f27467862fc649… ====== document sample ABFAb RP client Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:27Z Files modified: * raddb/sites-available/abfab-tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/042343e0c385147a21d4… ====== dynamic = yes not true The config parser doesn't seem to accept dynamic = true, but only dynamic = yes. Update error message to provide useful description. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:22Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/095c136c4cad4551c793… ====== Updates to abfab policy * Move policy from pre-proxy to authorize because we need to run some of the updates prior to realm because they now influence generated trust router requests. * Include setting reply messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:18Z Files modified: * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tr-idp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3061adacc53d58a4400… ====== trustrouter: permit trust-router-COI and error handling Improve the error handling of the trust router integration. Set Error-Cause to indicate a proxy routing failure if we fail to get a realm via trustrouter. Include the error back from the trust router in Reply-Message. Set trust-router-coi in the trust router code rather than depending on unlang to do so. Permit a previously specified trust-router-coi in the request to override the community in the configuration. Unlang is responsible for performing any authorization checks regarding community. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:13Z Files modified: * src/include/radius.h * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb3c01445169e23bfca6… ====== Permit Error-Cause in access reject messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:26:56Z Files modified: * raddb/mods-config/attr_filter/access_reject Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a6d755ef967bccb8dde… ====== Add user configurable busy_timeout to rlm_sql_sqlite driver Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * raddb/mods-available/sql * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5bbdbd6f8b66c5bb5182… ====== Convert comment to doxygen Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f91d8bfcd9aeffd12fd1… ====== Split out unix socket connection function Arran Cudbard-Bell@2015-03-18T18:03:18Z Files modified: * src/include/libradius.h * src/lib/all.mk * src/lib/unix.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20a4082414305f544c52… ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:29:36Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e592703873fca92b6fdd… ====== Invalid assert in _request_free Parent is set for fake requests too (Not just divorced CoA/Disconnect ones). It'd complicate the code more to require parent to be set to NULL before freeing the request, and it'd be pretty pointless. Arran Cudbard-Bell@2015-03-17T18:40:45Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb1c7b44ff8c436a0f80… ====== Mark groupobj membership filter as being expanded Arran Cudbard-Bell@2015-03-15T23:43:44Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d14c3a912ff9a19dba48… ====== Create equivalent pairs for all attributes Arran Cudbard-Bell@2015-03-15T06:11:01Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d299181aafdd2d5b560… ====== Create CONF_PAIRs in client CONF_SECTIONs for string type fields. This is needed by the "%{client:}" xlat Arran Cudbard-Bell@2015-03-14T22:05:37Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae986fd2c4dab33e5f8e… ====== deprecated nastype mucks up dynamic client debug output Arran Cudbard-Bell@2015-03-14T21:14:15Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/80d84419d8a343de5d24… ====== Doxygen for state machine Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-14T02:28:55Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2f2f5daf09e0f0a704a0… ====== Partial linelog escaping tests Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/tests/modules/linelog/linelog-escapes.attrs * src/tests/modules/linelog/linelog-escapes.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46ea332477a5a3f6ead8… ====== Junk test header Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/tests/modules/linelog/linelog-delim.unlang * src/tests/modules/linelog/linelog-multi.unlang * src/tests/modules/linelog/linelog.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23384d3c20ae3fa899b8… ====== CID 1288496 Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7c5ca8d9fd706970799… ====== Not a pointer Arran Cudbard-Bell@2015-03-13T22:29:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/576d1e0dcdfa150ac7f2… ====== Typos Arran Cudbard-Bell@2015-03-13T20:45:19Z Files modified: * src/include/listen.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0007fc8ee7c4c297cd0f… ====== But it's been config_items for N number of decades! Arran Cudbard-Bell@2015-03-13T20:41:51Z Files modified: * src/include/radiusd.h * src/main/acct.c * src/main/auth.c * src/main/client.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/threads.c * src/main/tls.c * src/main/tmpl.c * src/main/util.c * src/modules/proto_dhcp/dhcpd.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_eap/types/rlm_eap_leap/rlm_eap_leap.c * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_yubikey/decrypt.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f17d949a2b5426a4aa89… ====== Cleanup the REQUEST structure Document a few bits of process.c Split out listen structures into their own header Arran Cudbard-Bell@2015-03-13T20:37:16Z Files modified: * src/include/listen.h * src/include/process.h * src/include/radiusd.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d12e001b8d2c442f207… ====== Formatting Arran Cudbard-Bell@2015-03-13T18:41:49Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f73db71b4b5a5218d3b… ====== Build without threads, too Alan T. DeKok@2015-03-12T17:36:11Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/03cbc8902196cd2f0e55… ====== Alwauys build with ASSERT_MASTER Alan T. DeKok@2015-03-12T17:34:57Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f557e2163f7bd6d8c1ed… ====== Better fix for last commit Alan T. DeKok@2015-03-12T16:53:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/882f61d5265093020f1e… ====== Set the reply code from the proxy code Alan T. DeKok@2015-03-12T16:43:31Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22737d11a85772f01a0d… ====== Always build with we_are_master() Alan T. DeKok@2015-03-12T16:14:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5631b581ab5f99671f5… ====== Always call request_finish() after proxy reply, or proxy no reply. Previously, if the Post-Proxy-Type returned "handled" or "fail", it wouldn't reply to the client. This is probably not a good idea. Alan T. DeKok@2015-03-12T16:01:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcdf2b2be98074ca9ced… ====== Use correct value for Auth-Type = Reject Alan T. DeKok@2015-03-12T16:01:17Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f6b91ca327300f3430a4… ====== Remove unnecessary comment Alan T. DeKok@2015-03-12T16:00:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ebac2dc196008596d443… ====== When we originate CoA packets, discard them when we're done We don't need to run request_finish Alan T. DeKok@2015-03-12T16:00:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/801c3f7aef3bc5c7c0c0… ====== Remove redundant argument to cleanup_delay_init Alan T. DeKok@2015-03-12T16:00:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/489f0e319a19dbd9df23… ====== Re-arrange calls to setup_post_proxy_fail So they all follow the same pattern Alan T. DeKok@2015-03-12T16:00:26Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47122893761099f1efda… ====== Don't touch request after calling request_finish() Alan T. DeKok@2015-03-11T22:53:15Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ca89d94a8ff240c0b223… ====== Ensure log_name is talloc'd Alan T. DeKok@2015-03-11T22:00:00Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/548ba7f63c764c7aef6a… ====== Revert "Enable state machine tracing for debug builds on RDEBUG3" Arran Cudbard-Bell@2015-03-11T21:45:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e8c828eb20a4b1bea4c… ====== We don't need this many ASSERT_MASTER Alan T. DeKok@2015-03-11T21:33:48Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfe2d69e4fa5c1228e75… ====== Update log_name after we've discovered the port Alan T. DeKok@2015-03-11T21:33:47Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c7a504196a792e9bb6d… ====== Cast base to char Because apparently the format checker is too stupid to do the implicit cast Arran Cudbard-Bell@2015-03-11T20:34:56Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f4540dde0ca52961fa4… ====== Enable state machine tracing for debug builds on RDEBUG3 Arran Cudbard-Bell@2015-03-11T19:44:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b14dac3d8b4e60a37437… ====== Magic values aren't fun Arran Cudbard-Bell@2015-03-11T19:30:54Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4e2bf764d75d62df4ff7… ====== More parentheses Arran Cudbard-Bell@2015-03-11T19:16:55Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e9fc277680e3a23b38a… ====== Rename value_pair_tmpl_t to vp_tmpl_t Like vp_cursor_t Arran Cudbard-Bell@2015-03-11T18:25:21Z Files modified: * src/include/conffile.h * src/include/map.h * src/include/parser.h * src/include/radiusd.h * src/include/tmpl.h * src/main/conffile.c * src/main/evaluate.c * src/main/map.c * src/main/modcall.c * src/main/pair.c * src/main/parser.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/29a87c8d2bd4a2af1d86… ====== Add support for logging multiple attribute instances Values are separated by the line delimiter, and the write in combined with writev Arran Cudbard-Bell@2015-03-11T18:23:22Z Files modified: * src/main/tmpl.c * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/linelog-multi.attrs * src/tests/modules/linelog/linelog-multi.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22ee62c16fb247bc6318… ====== Fix uses of cleanup_delay_init() and child threading Alan T. DeKok@2015-03-11T17:10:51Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7cc09b020b8aca3aff2… ====== Rename OPTION to LVL Alan T. DeKok@2015-03-11T15:40:53Z Files modified: * src/modules/proto_bfd/bfd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddf62420c145a752fe72… ====== Rename option to debug level Alan T. DeKok@2015-03-11T15:06:30Z Files modified: * src/include/radiusd.h * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9037dd5bace95549f9d6… ====== Remove PW_TYPE_DEPRECATED config items. perl -n -i -e '/\{.*?PW_TYPE_DEPRECATED.*\},/ or print' $(find src/modules/ -name "*.c" -print) Alan T. DeKok@2015-03-11T15:06:01Z Files modified: * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ca52b005d3cdec074367… ====== Add support for custom delimiters in linelog Arran Cudbard-Bell@2015-03-10T22:27:03Z Files modified: * raddb/mods-available/linelog * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/linelog-delim.attrs * src/tests/modules/linelog/linelog-delim.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1293d258d124a22e4119… ====== Update Aruba dictionary (from ClearPass 6.5.0) Alexis La Goutte (via Arran Cudbard-Bell)@2015-03-10T21:41:55Z Files modified: * share/dictionary.aruba Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8ebcea67deea75eb01c… ====== Simplify stats counting Alan T. DeKok@2015-03-10T17:32:08Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/51c6315a0c500dcb45f6… ====== More assertions on free request Alan T. DeKok@2015-03-10T16:20:23Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/024c7b321e0897c93bcc… ====== md4 == nt Alan T. DeKok@2015-03-10T14:55:25Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d4cdc43b727a5f0c772… ====== Fix Cisco attributes. Fixes #921 Alan T. DeKok@2015-03-09T21:07:10Z Files modified: * share/dictionary.cisco.asa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc9b8a9a0dc79e603ca2… ====== Re-enable "Temporarily disable failing regex tests" This reverts commit 3bfb4d220c95403764056d28588b8f7d7fca2775. Alan T. DeKok@2015-03-09T20:49:25Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a18c41868380575aba7… ====== Leave regexes unmolested. The regex compiler can do necessary de-quoting Alan T. DeKok@2015-03-09T20:47:30Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a58bb946621dddbdeca… ====== Re-run command after connection failure Alan T. DeKok@2015-03-09T17:54:12Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42988c8455e5c472cc79… ====== Clean up statistics handling Alan T. DeKok@2015-03-09T17:49:08Z Files modified: * src/main/listen.c * src/main/process.c * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/722dc40e31a4e4c91e03… ====== last may be NULL Alan T. DeKok@2015-03-09T17:49:07Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2487fe3d91b757da9f9… ====== Mark home server state unknown after "response_window" if now > last_packet + response_window, the state is unknown otherwise, we got a packet recently, so it's still alive Alan T. DeKok@2015-03-09T17:07:43Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ab74fb6f4f1bcc9aff2… ====== Die correct_escapes/cf_new_escape Arran Cudbard-Bell@2015-03-09T04:36:41Z Files modified: * raddb/proxy.conf * raddb/radiusd.conf.in * src/include/conffile.h * src/main/conffile.c * src/main/modcall.c * src/main/parser.c * src/main/radattr.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_realm/rlm_realm.c * src/tests/config/test.conf * src/tests/keywords/radiusd.conf * src/tests/modules/radiusd.conf * src/tests/xlat/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2fcf1ae17f447fdef88… ====== Rename 2.x.x branch to long term support Arran Cudbard-Bell@2015-03-09T03:19:05Z Files modified: * doc/source/extra/toc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d1e2b5ced77fc54938c2… ====== Outdent reformed code PDD (via Arran Cudbard-Bell)@2015-03-09T00:37:58Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/221be8eec325c5317f88… ====== Reform if so that the error just returns, and otherwise code continues PDD (via Arran Cudbard-Bell)@2015-03-09T00:36:13Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b15c3791f595eaf80510… ====== Timestamp typo PDD (via Arran Cudbard-Bell)@2015-03-09T00:34:31Z Files modified: * src/modules/rlm_yubikey/decrypt.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d7de15d9e0698e52eae… ====== Update documentation to describe the attribute's values PDD (via Arran Cudbard-Bell)@2015-03-09T00:33:18Z Files modified: * raddb/mods-available/yubikey Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0a34e99f6e68ed38189… ====== Document the module's additions to the site configuration PDD (via Arran Cudbard-Bell)@2015-03-09T00:26:50Z Files modified: * raddb/mods-available/yubikey Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/09683600dd99db97529d… ====== Reduce the calculation of counter and timestamp to a single instance. PDD (via Arran Cudbard-Bell)@2015-03-09T00:23:22Z Files modified: * src/modules/rlm_yubikey/decrypt.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dfaf9c613b332829cfd7… ====== Combined equal size password length with greater than sized. This should fix both the issues: if this was not split, it would not be checked; and if equal sized and split it would not create the Yubikey-OTP attribute (although it was sufficient). PDD (via Arran Cudbard-Bell)@2015-03-09T00:11:51Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a546ba2af142cc34b1a… ====== Changed Auth-Type assignment until after Public-ID possible failure PDD (via Arran Cudbard-Bell)@2015-03-09T00:05:52Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bed37c88641c74dc1845… ====== Reduced extra passcode and len assignment PDD (via Arran Cudbard-Bell)@2015-03-09T00:04:32Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c9f3e815853ed237ad28… ====== Eliminate redundant return PDD (via Arran Cudbard-Bell)@2015-03-09T00:03:02Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/682682bc9e4131c879b7… ====== Merge pull request #919 from nchaigne/3.0.x-fb3 Use proper DHCP vendor Arran Cudbard-Bell@2015-03-09T00:01:20Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/57f4528b763fd3f25476… ====== Proper fix for "Disable regex \n test. Some engines can't take \n" Arran Cudbard-Bell@2015-03-08T23:55:19Z Files modified: * src/tests/keywords/if-regex-match-comp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa527a3bc7c3fa168039… ====== Add notes on 3.1.x branch Arran Cudbard-Bell@2015-03-08T23:25:24Z Files modified: * doc/source/extra/toc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df3844d134b40f674930… ====== Use sh -c in linelog tests, so $PATH is honoured Arran Cudbard-Bell@2015-03-08T23:09:49Z Files modified: * src/tests/modules/linelog/linelog.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6929daae24ce761d63e0… ====== Allow arbitrary environmental variables to be specified with &control:Exec-Export Arran Cudbard-Bell@2015-03-08T23:09:44Z Files modified: * share/dictionary.freeradius.internal * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e84aa1e46290d4793237… ====== SSHA attributes should be marked as internal Arran Cudbard-Bell@2015-03-08T23:09:39Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d5fbbb036a00e8577da… ====== Change exec error messages to the correct severity Arran Cudbard-Bell@2015-03-08T23:09:34Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7590aa15bd7bf8863fff… ====== -- This commit summary was generated @2015-03-22T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 21 Mar '15

21 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #930 from mcnewton/v3.1.x-winbind mschap auth directly to winbind via libwbclient Arran Cudbard-Bell@2015-03-21T23:15:45Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa51a3a48006fe719008… ====== Add mschap module winbind authentication This allows AD/Samba authentication against winbind via libwbclient without having to use ntlm_auth. Matthew Newton@2015-03-21T22:54:59Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bec88d5f5feada809fd5… ====== Configure scripts for libwbclient Matthew Newton@2015-03-21T22:54:50Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab80b4dd9726b443c649… ====== Create rlm_mschap.h (split out from rlm_mschap.c) Matthew Newton@2015-03-20T01:08:51Z Files modified: * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cdc3f37ac1cf45041226… ====== Change boolean do_ntlm_auth to enum MSCHAP_AUTH_METHOD Matthew Newton@2015-03-20T01:08:46Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84132d35f3bb5c5cc363… ====== Fixup some comments in fr_cursor_insert Arran Cudbard-Bell@2015-03-21T15:36:38Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ffe5b70c84b44ff9997… ====== Invalid assert Arran Cudbard-Bell@2015-03-20T19:15:50Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e807428c6045eeba929b… ====== -- This commit summary was generated @2015-03-22T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 21 Mar '15

21 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Use the correct number of fields for stop inserts Alan T. DeKok@2015-03-21T23:28:39Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/oracle/queries.conf * raddb/mods-config/sql/main/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d568a5c65a593f7e0d16… ====== Make proxy to virtual server match callers for process_proxy_reply() Alan T. DeKok@2015-03-21T23:22:26Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52796bc1eb3c0895033d… ====== Remove STATE_MACHINE_DECL for functions, and add dot graphs To document the state machine of the server Alan T. DeKok@2015-03-21T23:20:43Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/70db5f66b05b9e506703… ====== Add mschap module winbind authentication This allows AD/Samba authentication against winbind via libwbclient without having to use ntlm_auth. Matthew Newton (via Arran Cudbard-Bell)@2015-03-21T23:17:08Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ab36a19439d63e1c637… ====== Configure scripts for libwbclient Matthew Newton (via Arran Cudbard-Bell)@2015-03-21T23:17:03Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/218b95d0b7696ebb3216… ====== Create rlm_mschap.h (split out from rlm_mschap.c) Matthew Newton (via Arran Cudbard-Bell)@2015-03-21T23:16:57Z Files modified: * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0ef3dfad5c873e9476f5… ====== Change boolean do_ntlm_auth to enum MSCHAP_AUTH_METHOD Matthew Newton (via Arran Cudbard-Bell)@2015-03-21T23:16:51Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1c924d43f7e02658407… ====== Fixup some comments in fr_cursor_insert Arran Cudbard-Bell@2015-03-21T15:37:06Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7d06404acd733a484fde… ====== Invalid assert Arran Cudbard-Bell@2015-03-21T15:37:06Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a133651178bd6cbf30ba… ====== -- This commit summary was generated @2015-03-22T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 20 Mar '15

20 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update ChangeLog Arran Cudbard-Bell@2015-03-20T21:31:38Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9b322fcce694f225f2b0… ====== Fix corner case where cursor.next wasn't fixed up correctly on fr_cursor_insert Arran Cudbard-Bell@2015-03-20T17:52:44Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e35c86a9ede28e3b910… ====== Fixup cursor.last if we removed the vp it was referring to Arran Cudbard-Bell@2015-03-20T17:52:39Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f60637e8e50fa2156542… ====== Last should be set to the VP we just inserted Arran Cudbard-Bell@2015-03-20T17:52:34Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cbdc09eef9b1ce96a7ab… ====== Formatting Arran Cudbard-Bell@2015-03-20T17:52:30Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/36626b7df51fb986951b… ====== Create a standard set of socket connection functions for UNIX/TCP/UDP We should eventually add SCTP too, but the OSX kernel doesn't support it yet *boo*, and I don't have time to compile the 3rd party kext. Arran Cudbard-Bell@2015-03-20T04:51:44Z Files modified: * src/include/libradius.h * src/include/tcp.h * src/lib/all.mk * src/lib/misc.c * src/lib/socket.c * src/lib/tcp.c * src/lib/unix.c * src/main/listen.c * src/main/radclient.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/585546d8f3b7a2960601… ====== Move fr_nonblock and fr_blocking to misc.c. They're useful for files as well as sockets. Arran Cudbard-Bell@2015-03-20T04:51:44Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/misc.c * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/43ff58401c9b67869714… ====== -- This commit summary was generated @2015-03-21T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 20 Mar '15

20 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Always initialise sockfd (not needed, but compiler complains) Arran Cudbard-Bell@2015-03-20T19:14:05Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12f54245f9df6abb03be… ====== Fix corner case where cursor.next wasn't fixed up correctly on fr_cursor_insert Arran Cudbard-Bell@2015-03-20T17:52:08Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b969473a5cc2193a334a… ====== Fixup cursor.last if we removed the vp it was referring to Arran Cudbard-Bell@2015-03-20T17:34:37Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/339f0b20bf2df8989615… ====== Last should be set to the VP we just inserted Arran Cudbard-Bell@2015-03-20T17:34:14Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c180cc6a14aa7ea4d1d… ====== Formatting Arran Cudbard-Bell@2015-03-20T17:32:28Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be45b1ad8693d3a56214… ====== Add support for writing to TCP, UDP and Unix sockets in linelog Arran Cudbard-Bell@2015-03-20T16:34:37Z Files modified: * raddb/mods-available/linelog * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97c3e8b01339d66a84a3… ====== Create a standard set of socket connection functions for UNIX/TCP/UDP We should eventually add SCTP too, but the OSX kernel doesn't support it yet *boo*, and I don't have time to compile the 3rd party kext. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/tcp.h * src/lib/all.mk * src/lib/misc.c * src/lib/socket.c * src/lib/tcp.c * src/lib/unix.c * src/main/listen.c * src/main/radclient.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e850301ffd3a43a1808… ====== Move fr_nonblock and fr_blocking to misc.c. They're useful for files as well as sockets. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/misc.c * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ace9ebacf2f07cbfdfff… ====== -- This commit summary was generated @2015-03-21T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Please document dynamic in proxy server section in proxy.conf
by Sam Hartman 19 Mar '15

19 Mar '15

Hi. The dynamic key was introduced to enable realms_realm_add after config parsing. However, it doesn't seem to be documented in the default raddb.

5 6

Commit report for v3.1.x branch
by announce＠freeradius.org 18 Mar '15

18 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #929 from spaetow/patch-1 Update proxy.conf Arran Cudbard-Bell@2015-03-18T23:48:48Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1926b0cfa954ab5d50a7… ====== Update proxy.conf Add a short description for the dynamic option in proxy.conf Stefan Paetow@2015-03-18T23:47:17Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72e240f27467862fc649… ====== document sample ABFAb RP client Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:27Z Files modified: * raddb/sites-available/abfab-tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/042343e0c385147a21d4… ====== dynamic = yes not true The config parser doesn't seem to accept dynamic = true, but only dynamic = yes. Update error message to provide useful description. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:22Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/095c136c4cad4551c793… ====== Updates to abfab policy * Move policy from pre-proxy to authorize because we need to run some of the updates prior to realm because they now influence generated trust router requests. * Include setting reply messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:18Z Files modified: * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tr-idp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3061adacc53d58a4400… ====== trustrouter: permit trust-router-COI and error handling Improve the error handling of the trust router integration. Set Error-Cause to indicate a proxy routing failure if we fail to get a realm via trustrouter. Include the error back from the trust router in Reply-Message. Set trust-router-coi in the trust router code rather than depending on unlang to do so. Permit a previously specified trust-router-coi in the request to override the community in the configuration. Unlang is responsible for performing any authorization checks regarding community. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:13Z Files modified: * src/include/radius.h * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb3c01445169e23bfca6… ====== Permit Error-Cause in access reject messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:26:56Z Files modified: * raddb/mods-config/attr_filter/access_reject Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a6d755ef967bccb8dde… ====== Add user configurable busy_timeout to rlm_sql_sqlite driver Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * raddb/mods-available/sql * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5bbdbd6f8b66c5bb5182… ====== Convert comment to doxygen Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f91d8bfcd9aeffd12fd1… ====== Split out unix socket connection function Arran Cudbard-Bell@2015-03-18T18:03:18Z Files modified: * src/include/libradius.h * src/lib/all.mk * src/lib/unix.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20a4082414305f544c52… ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:29:36Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e592703873fca92b6fdd… ====== -- This commit summary was generated @2015-03-19T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 18 Mar '15

18 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update ChangeLog Arran Cudbard-Bell@2015-03-18T21:38:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60082d14f9063e2ae90f… ====== Add user configurable busy_timeout to rlm_sql_sqlite driver Arran Cudbard-Bell@2015-03-18T21:26:32Z Files modified: * raddb/mods-available/sql * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/756819f5d5f30c80891a… ====== Convert comment to doxygen Arran Cudbard-Bell@2015-03-18T21:25:43Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d9fdc2ac00a57bf3de6… ====== Merge pull request #928 from painless-security/to_submit Abfab policy and trust router changes Arran Cudbard-Bell@2015-03-18T21:23:56Z Files modified: * raddb/mods-config/attr_filter/access_reject * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tls * raddb/sites-available/abfab-tr-idp * src/include/radius.h * src/main/realms.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bad426b78c357b790081… ====== document sample ABFAb RP client Sam Hartman@2015-03-18T20:50:09Z Files modified: * raddb/sites-available/abfab-tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ccb534bcb0396a39a9e… ====== dynamic = yes not true The config parser doesn't seem to accept dynamic = true, but only dynamic = yes. Update error message to provide useful description. Sam Hartman@2015-03-18T20:50:09Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3ba6af3b42b6c794ca7… ====== sqlite: include busy wait for locks Previously, sqlite would fail any query if there was a lock held on the database, such as an outstanding write. In practice this generated failures even with low-volume writes to the database. Permit a query to hang for up to 200 ms. Sam Hartman@2015-03-18T20:49:28Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/81f0219dfde554457fda… ====== Updates to abfab policy * Move policy from pre-proxy to authorize because we need to run some of the updates prior to realm because they now influence generated trust router requests. * Include setting reply messages Sam Hartman@2015-03-18T20:49:28Z Files modified: * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tr-idp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3182652dc38323b3e6d5… ====== trustrouter: permit trust-router-COI and error handling Improve the error handling of the trust router integration. Set Error-Cause to indicate a proxy routing failure if we fail to get a realm via trustrouter. Include the error back from the trust router in Reply-Message. Set trust-router-coi in the trust router code rather than depending on unlang to do so. Permit a previously specified trust-router-coi in the request to override the community in the configuration. Unlang is responsible for performing any authorization checks regarding community. Sam Hartman@2015-03-18T20:49:28Z Files modified: * src/include/radius.h * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93f87d96cfac20b22092… ====== Permit Error-Cause in access reject messages Sam Hartman@2015-03-18T20:49:28Z Files modified: * raddb/mods-config/attr_filter/access_reject Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/caaca8da2eede537270a… ====== Split out unix socket connection function Arran Cudbard-Bell@2015-03-18T18:03:11Z Files modified: * src/include/libradius.h * src/lib/all.mk * src/lib/unix.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26aff74b4da7d61928bf… ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:29:30Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7636bc54d4fb6be1c493… ====== -- This commit summary was generated @2015-03-19T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 18 Mar '15

18 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:28:32Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddabab5df504e100b149… ====== -- This commit summary was generated @2015-03-19T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 17 Mar '15

17 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Invalid assert in _request_free Parent is set for fake requests too (Not just divorced CoA/Disconnect ones). It'd complicate the code more to require parent to be set to NULL before freeing the request, and it'd be pretty pointless. Arran Cudbard-Bell@2015-03-17T18:40:04Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c28426dcb9f7a0f63a2d… ====== -- This commit summary was generated @2015-03-18T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 17 Mar '15

17 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Invalid assert in _request_free Parent is set for fake requests too (Not just divorced CoA/Disconnect ones). It'd complicate the code more to require parent to be set to NULL before freeing the request, and it'd be pretty pointless. Arran Cudbard-Bell@2015-03-17T18:40:45Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb1c7b44ff8c436a0f80… ====== -- This commit summary was generated @2015-03-18T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Using Session State
by Sam Hartman 17 Mar '15

17 Mar '15

Hi. So, as we've discussed previously, setting use_tunneled_reply is really kind of undesirable with methods like mschapv2 that generate their own keys. Also, it tends to do undesirable things and expose the channel binding messages to the outer reply. based on the documentation it sounds like I ought to be able to use the session-state list to move attributes between the inner tunnel and outer tunnel. however, in inner-tunnel's post auth section update session-state { session-state:User-Name = &Request:User-Name } returns noop. First, should session-state work for this purpose? If so, what am I doing wrong?

2 2

Commit report for v3.1.x branch
by announce＠freeradius.org 15 Mar '15

15 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Mark groupobj membership filter as being expanded Arran Cudbard-Bell@2015-03-15T23:43:44Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d14c3a912ff9a19dba48… ====== Create equivalent pairs for all attributes Arran Cudbard-Bell@2015-03-15T06:11:01Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d299181aafdd2d5b560… ====== -- This commit summary was generated @2015-03-16T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 15 Mar '15

15 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Mark groupobj membership filter as being expanded Arran Cudbard-Bell@2015-03-15T23:44:02Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb8762382f14f8c5b460… ====== Update ChangeLog Arran Cudbard-Bell@2015-03-15T20:40:48Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/552eccf62f18ddb09fef… ====== Create equivalent pairs for all attributes Arran Cudbard-Bell@2015-03-15T06:11:13Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea781e89e249954f0765… ====== -- This commit summary was generated @2015-03-16T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 14 Mar '15

14 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Create CONF_PAIRs in client CONF_SECTIONs for string type fields. This is needed by the "%{client:}" xlat Arran Cudbard-Bell@2015-03-14T22:05:37Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae986fd2c4dab33e5f8e… ====== deprecated nastype mucks up dynamic client debug output Arran Cudbard-Bell@2015-03-14T21:14:15Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/80d84419d8a343de5d24… ====== Doxygen for state machine Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-14T02:28:55Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2f2f5daf09e0f0a704a0… ====== Partial linelog escaping tests Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/tests/modules/linelog/linelog-escapes.attrs * src/tests/modules/linelog/linelog-escapes.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46ea332477a5a3f6ead8… ====== Junk test header Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/tests/modules/linelog/linelog-delim.unlang * src/tests/modules/linelog/linelog-multi.unlang * src/tests/modules/linelog/linelog.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23384d3c20ae3fa899b8… ====== CID 1288496 Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7c5ca8d9fd706970799… ====== -- This commit summary was generated @2015-03-15T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 14 Mar '15

14 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Create CONF_PAIRs in client CONF_SECTIONs for string type fields. This is needed by the "%{client:}" xlat Arran Cudbard-Bell@2015-03-14T22:05:54Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d26e84884f149adc51c1… ====== deprecated nastype mucks up dynamic client debug output Arran Cudbard-Bell@2015-03-14T22:05:50Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45f3dd1fa3eb5b0938aa… ====== CID 1288496 Arran Cudbard-Bell@2015-03-14T02:25:56Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46056c1205109c6a1400… ====== -- This commit summary was generated @2015-03-15T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

Commit report for v3.0.x branch
by announce＠freeradius.org 13 Mar '15

13 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Not a pointer Arran Cudbard-Bell@2015-03-13T22:30:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e1377214e3a1a1338f0… ====== Doxygen for state machine Alan T. DeKok@2015-03-13T22:25:43Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7195ecbeca6d5ebb2af… ====== typos Alan T. DeKok@2015-03-13T22:25:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a36832b00702a117ffd… ====== Typos Arran Cudbard-Bell@2015-03-13T20:45:13Z Files modified: * src/include/listen.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dcfa128051826c8ca290… ====== But it's been config_items for N number of decades! Arran Cudbard-Bell@2015-03-13T20:44:39Z Files modified: * src/include/radiusd.h * src/main/acct.c * src/main/auth.c * src/main/client.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/threads.c * src/main/tls.c * src/main/tmpl.c * src/main/util.c * src/modules/proto_dhcp/dhcpd.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_eap/types/rlm_eap_leap/rlm_eap_leap.c * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_yubikey/decrypt.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/993431657b79d6e53242… ====== Cleanup the REQUEST structure Document a few bits of process.c Split out listen structures into their own header Arran Cudbard-Bell@2015-03-13T20:38:13Z Files modified: * src/include/listen.h * src/include/process.h * src/include/radiusd.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/abce6d63044f0670acf1… ====== Formatting Arran Cudbard-Bell@2015-03-13T18:41:16Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/408c2d1f0e6e55142665… ====== initialize child state before printing it Alan T. DeKok@2015-03-13T18:22:12Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0387ca90d5a4d728eaa5… ====== Move request_process_timer() to request_max_time() which simplifies it a lot Alan T. DeKok@2015-03-13T18:22:12Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/19586270617df8ea586c… ====== Add CHECK_FOR_STOP macro to state machine functions to check if the request should be stopped Alan T. DeKok@2015-03-13T18:22:07Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3591cbb60d6094846e52… ====== Move coa_separate checks to a macro Alan T. DeKok@2015-03-13T18:20:22Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2cf2525ea9acade8717d… ====== coa_separate() doesn't need to take an action. rename coa_timer to coa_retransmit, which is saner Alan T. DeKok@2015-03-13T18:20:17Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23fed2bf6ff8d03e291b… ====== Move cleanup_delay calculations to cleanup_delay function Alan T. DeKok@2015-03-13T14:35:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6907593edde125c90d5b… ====== Move response_delay calculations to response_delay function Alan T. DeKok@2015-03-13T14:33:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8059ffb0aa7f8061aa27… ====== process_timer shouldn't need to handle child PROXIED state the rest of the state machine takes care of that. Alan T. DeKok@2015-03-13T14:27:42Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/afa7eed4efe294b09ca1… ====== Rely on eol_listener to STOP requests when a socket goes away Alan T. DeKok@2015-03-13T14:20:25Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02bf9cb89c4dd0f179b8… ====== Document process timer function Alan T. DeKok@2015-03-13T14:16:55Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a48cc045aa4be8b469c… ====== request_common is now only request_process_timer Alan T. DeKok@2015-03-13T04:29:53Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9689423de8d6b7cf5cd9… ====== Move complaint for duplicate packets to its own function Which should start simplifying the code Alan T. DeKok@2015-03-13T04:27:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/720c157bfbc8d0eeb616… ====== Convert some returns to break for style where they're the same Alan T. DeKok@2015-03-13T04:16:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6613f453f16582c5a933… ====== Abstract "proxy reply too late" to separate function Alan T. DeKok@2015-03-13T04:12:50Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1eab7fc303f630e35737… ====== set request->process = request_response_delay immediately Alan T. DeKok@2015-03-13T04:02:23Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/90612302d21ab35889ee… ====== -- This commit summary was generated @2015-03-14T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0