March 2015 - Freeradius-Devel - lists.freeradius.org

Commit report for v3.1.x branch
by announce＠freeradius.org 13 Mar '15

13 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Not a pointer Arran Cudbard-Bell@2015-03-13T22:29:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/576d1e0dcdfa150ac7f2… ====== Typos Arran Cudbard-Bell@2015-03-13T20:45:19Z Files modified: * src/include/listen.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0007fc8ee7c4c297cd0f… ====== But it's been config_items for N number of decades! Arran Cudbard-Bell@2015-03-13T20:41:51Z Files modified: * src/include/radiusd.h * src/main/acct.c * src/main/auth.c * src/main/client.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/threads.c * src/main/tls.c * src/main/tmpl.c * src/main/util.c * src/modules/proto_dhcp/dhcpd.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_eap/types/rlm_eap_leap/rlm_eap_leap.c * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_yubikey/decrypt.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f17d949a2b5426a4aa89… ====== Cleanup the REQUEST structure Document a few bits of process.c Split out listen structures into their own header Arran Cudbard-Bell@2015-03-13T20:37:16Z Files modified: * src/include/listen.h * src/include/process.h * src/include/radiusd.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d12e001b8d2c442f207… ====== Formatting Arran Cudbard-Bell@2015-03-13T18:41:49Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f73db71b4b5a5218d3b… ====== -- This commit summary was generated @2015-03-14T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 13 Mar '15

13 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Formatting Arran Cudbard-Bell@2015-03-13T18:41:29Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/36e71f5c5088525476ec… ====== -- This commit summary was generated @2015-03-14T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 12 Mar '15

12 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Build without threads, too Alan T. DeKok@2015-03-12T17:36:11Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/03cbc8902196cd2f0e55… ====== Alwauys build with ASSERT_MASTER Alan T. DeKok@2015-03-12T17:34:57Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f557e2163f7bd6d8c1ed… ====== Better fix for last commit Alan T. DeKok@2015-03-12T16:53:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/882f61d5265093020f1e… ====== Set the reply code from the proxy code Alan T. DeKok@2015-03-12T16:43:31Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22737d11a85772f01a0d… ====== Always build with we_are_master() Alan T. DeKok@2015-03-12T16:14:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5631b581ab5f99671f5… ====== Always call request_finish() after proxy reply, or proxy no reply. Previously, if the Post-Proxy-Type returned "handled" or "fail", it wouldn't reply to the client. This is probably not a good idea. Alan T. DeKok@2015-03-12T16:01:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcdf2b2be98074ca9ced… ====== Use correct value for Auth-Type = Reject Alan T. DeKok@2015-03-12T16:01:17Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f6b91ca327300f3430a4… ====== Remove unnecessary comment Alan T. DeKok@2015-03-12T16:00:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ebac2dc196008596d443… ====== When we originate CoA packets, discard them when we're done We don't need to run request_finish Alan T. DeKok@2015-03-12T16:00:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/801c3f7aef3bc5c7c0c0… ====== Remove redundant argument to cleanup_delay_init Alan T. DeKok@2015-03-12T16:00:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/489f0e319a19dbd9df23… ====== Re-arrange calls to setup_post_proxy_fail So they all follow the same pattern Alan T. DeKok@2015-03-12T16:00:26Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47122893761099f1efda… ====== -- This commit summary was generated @2015-03-13T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 12 Mar '15

12 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Build without threads, too Alan T. DeKok@2015-03-12T17:35:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/40adcc0a2b0499b20ef3… ====== Alwauys build with ASSERT_MASTER Alan T. DeKok@2015-03-12T17:34:43Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0832d9ba19746bee8991… ====== Better fix for last commit Alan T. DeKok@2015-03-12T16:52:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f337366ee9cc84a18b29… ====== Set the reply code from the proxy code Alan T. DeKok@2015-03-12T16:43:09Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d26fec0c017465d44c2… ====== Always build with we_are_master() Alan T. DeKok@2015-03-12T16:14:46Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a315d89098e58a5826c… ====== Always call request_finish() after proxy reply, or proxy no reply. Previously, if the Post-Proxy-Type returned "handled" or "fail", it wouldn't reply to the client. This is probably not a good idea. Alan T. DeKok@2015-03-12T15:57:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66c47f0536dc937ef96c… ====== Use correct value for Auth-Type = Reject Alan T. DeKok@2015-03-12T15:55:18Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/783675db56a1de305309… ====== Remove unnecessary comment Alan T. DeKok@2015-03-12T15:52:17Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e38d05e639e8336ec451… ====== When we originate CoA packets, discard them when we're done We don't need to run request_finish Alan T. DeKok@2015-03-12T15:48:25Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0da38bef8cdd8d0f36a0… ====== Remove redundant argument to cleanup_delay_init Alan T. DeKok@2015-03-12T15:46:12Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc4719a7c02c1565835c… ====== -- This commit summary was generated @2015-03-13T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 11 Mar '15

11 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Revert "Enable state machine tracing for debug builds on RDEBUG3" Arran Cudbard-Bell@2015-03-11T21:47:14Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62c181e8d8013803eed7… ====== Cast base to char Because apparently the format checker is too stupid to do the implicit cast Arran Cudbard-Bell@2015-03-11T20:35:05Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f080bf9784283786e80… ====== Magic values aren't fun Arran Cudbard-Bell@2015-03-11T19:47:00Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8199374392e3723ec4f… ====== Enable state machine tracing for debug builds on RDEBUG3 Arran Cudbard-Bell@2015-03-11T19:45:00Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16d62c7d8fba8bc74543… ====== More parentheses Arran Cudbard-Bell@2015-03-11T19:17:17Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/365d400663330cf8270e… ====== Rename value_pair_tmpl_t to vp_tmpl_t Like vp_cursor_t Arran Cudbard-Bell@2015-03-11T18:25:37Z Files modified: * src/include/conffile.h * src/include/map.h * src/include/parser.h * src/include/radiusd.h * src/include/tmpl.h * src/main/conffile.c * src/main/evaluate.c * src/main/map.c * src/main/modcall.c * src/main/pair.c * src/main/parser.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e45802e2f5bc16273a5… ====== Add support for logging multiple attribute instances Values are separated by the line delimiter, and the write in combined with writev Arran Cudbard-Bell@2015-03-11T18:23:02Z Files modified: * src/main/tmpl.c * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/linelog-multi.attrs * src/tests/modules/linelog/linelog-multi.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/51d1b9a72858ed13a77d… ====== -- This commit summary was generated @2015-03-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 11 Mar '15

11 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Don't touch request after calling request_finish() Alan T. DeKok@2015-03-11T22:52:58Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/74b61aef9c07232d914e… ====== Move unlinking to assertions Alan T. DeKok@2015-03-11T22:39:45Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7633a8fe826364e1510… ====== Ensure log_name is talloc'd Alan T. DeKok@2015-03-11T21:59:33Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ec04db6d28bd3ca01c9… ====== Revert "Enable state machine tracing for debug builds on RDEBUG3" This reverts commit fd2c20480503ebbe2a97775974c2d28e4c32cfd4. Arran Cudbard-Bell@2015-03-11T21:46:05Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e812c1b1567d672e213d… ====== We don't need this many ASSERT_MASTER Alan T. DeKok@2015-03-11T21:33:28Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd348bf8f14967810044… ====== Update log_name after we've discovered the port Alan T. DeKok@2015-03-11T21:33:28Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a7db7af57aecfab770e… ====== Magic values aren't fun Arran Cudbard-Bell@2015-03-11T19:46:48Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1e6c1b652514bb48656e… ====== Enable state machine tracing for debug builds on RDEBUG3 Arran Cudbard-Bell@2015-03-11T19:44:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd2c20480503ebbe2a97… ====== Rename value_pair_tmpl_t for v3.0.x too, else merging with be a nightmare Arran Cudbard-Bell@2015-03-11T18:29:32Z Files modified: * src/include/conffile.h * src/include/map.h * src/include/parser.h * src/include/radiusd.h * src/include/tmpl.h * src/main/conffile.c * src/main/evaluate.c * src/main/map.c * src/main/modcall.c * src/main/pair.c * src/main/parser.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21f8f055528b226c41be… ====== Fix uses of cleanup_delay_init() and child threading Alan T. DeKok@2015-03-11T17:10:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c705418a7dd903b18c05… ====== Rename option to debug level Alan T. DeKok@2015-03-11T15:05:49Z Files modified: * src/include/radiusd.h * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5811451f4413b41a200… ====== -- This commit summary was generated @2015-03-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

"authorize" etc. in v3.1
by Alan DeKok 11 Mar '15

11 Mar '15

The “authorize”, etc. sections are increasingly mis-named. After some discussion with Arran, we’ve come up with what seems like a better approach. I’d like to get other peoples feedback on the suggested design. The idea is to get rid of the randomly named “authorize”, “authenticate”, etc. sections. Instead, we will have a standard set of names. These names are predictable, which is good. The new names can be mapped (hand-waving here) to the old methods, so upgrading from 3.0 to 3.1 won’t require major changes to the config. The idea is to use the following naming scheme: recv foo — run this section when receiving a packet “foo”. process foo - run this section to process a packet “foo” send foo - run this section before sending a packet “foo” The mapping between the new types and old is as follows: recv Access-Request == authorize process Access-Request == authenticate (mostly) send Access-Accept == post-auth send Access-Challenge == no matching section send Access-Reject == Post-Auth-Type Reject recv Accounting-Request == preacct process Accounting-Request == accounting send Accounting-Request == no matching section For proxying, we no longer have pre-proxy and post-proxy, instead we have: send Access-Request == pre-proxy recv Access-Accept == post-proxy recv Access-Reject == post-proxy (oops, that’s probably not a good idea) recv Access-Challenge == post-proxy (oops again) send Accounting-Request = pre-proxy recv Accounting-Reply == post-proxy This suggestion isn’t entirely perfect. The “authenticate” section is really a wrapper for each Auth-Type section. We need to find a way to address that. There’s also the Autz-Type section, which exists, but is very weird. Can it just go away? Does anyone use it? There’s also the “session” section. It doesn’t match the above naming scheme. Maybe we need something else? And what about fail and timeouts? e.g. “no reply to proxied request” should probably be: timeout Access-Request ??? Or “no live home server” could be: fail Access-Request? I’m leaning towards that method, instead of the existing Post-Proxy-Type Fail, etc. That method is confusing for end users, and hard to code. e.g. Why is “fail” inside of post-proxy? Is Post-Proxy-Type Fail run for normal proxying, because it’s inside of the post-proxy section? It not, why not? These things are hard to explain. If, instead, we had consistent names, it becomes trivial to know what to do. It becomes trivial to know what the names are, and what each section does. I *believe* we can set up aliases, etc. which will map the new method to the old one. So no one has to butcher their configuration for 3.1. BUT the benefit of using the new naming scheme is legion. The code becomes MUCH simpler, as does the configuration. Comments? Stones? Alan DeKok.

6 11

Commit report for v3.0.x branch
by announce＠freeradius.org 10 Mar '15

10 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update Aruba dictionary (from ClearPass 6.5.0) Alexis La Goutte (via Arran Cudbard-Bell)@2015-03-10T21:41:43Z Files modified: * share/dictionary.aruba Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a94a3e5515d24cc5bd7… ====== Simplify stats counting Alan T. DeKok@2015-03-10T17:31:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eef2324c481ab3fcceec… ====== More assertions on free request Alan T. DeKok@2015-03-10T16:20:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ed35a01b22d5b0da12b… ====== md4 == nt Alan T. DeKok@2015-03-10T14:55:15Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c9dfd26804df2ee87f1… ====== -- This commit summary was generated @2015-03-11T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 10 Mar '15

10 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add support for custom delimiters in linelog Arran Cudbard-Bell@2015-03-10T22:27:10Z Files modified: * raddb/mods-available/linelog * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/linelog-delim.attrs * src/tests/modules/linelog/linelog-delim.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16ab1f6a599e62e1af4a… ====== Merge pull request #923 from alagoutte/master Update Aruba dictionary (from ClearPass 6.5.0) Arran Cudbard-Bell@2015-03-10T21:24:27Z Files modified: * share/dictionary.aruba Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb6d2ac5ca8eab761152… ====== Update Aruba dictionary (from ClearPass 6.5.0) Alexis La Goutte@2015-03-10T21:16:56Z Files modified: * share/dictionary.aruba Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/629b5a5df0d9d73df497… ====== Simplify stats counting Alan T. DeKok@2015-03-10T18:47:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4927ecf732328ba4540c… ====== More assertions on free request Alan T. DeKok@2015-03-10T18:47:40Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dfdcd9eded4f73bd58cf… ====== md4 == nt Alan T. DeKok@2015-03-10T18:47:39Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5f95c0604df1ab207ee… ====== Fix Cisco attributes. Fixes #921 Alan T. DeKok@2015-03-10T18:47:29Z Files modified: * share/dictionary.cisco.asa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37620296eb862aedafe8… ====== -- This commit summary was generated @2015-03-11T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 10 Mar '15

10 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== md5 == nt Alan T. DeKok@2015-03-10T14:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== -- This commit summary was generated @2015-03-11T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 09 Mar '15

09 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix Cisco attributes. Fixes #921 Alan T. DeKok@2015-03-09T21:06:50Z Files modified: * share/dictionary.cisco.asa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f4d1e488b182d005f9cd… ====== Re-enable "Temporarily disable failing regex tests" This reverts commit 3bfb4d220c95403764056d28588b8f7d7fca2775. Alan T. DeKok@2015-03-09T20:48:21Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b091655bb4c12a5592e… ====== typo Alan T. DeKok@2015-03-09T20:13:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0e4ec0aa5df4afe56f9b… ====== note recent changes Alan T. DeKok@2015-03-09T20:00:19Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/247601217c9646ee2040… ====== Re-run command after connection failure Alan T. DeKok@2015-03-09T17:53:49Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c75cf0a14ec0764f1ea9… ====== Clean up statistics handling Alan T. DeKok@2015-03-09T17:48:32Z Files modified: * src/main/listen.c * src/main/process.c * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b5d4290041d79e80a88… ====== last may be NULL Alan T. DeKok@2015-03-09T17:45:20Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e822eb8de25ada708e9… ====== Mark home server state unknown after "response_window" if now > last_packet + response_window, the state is unknown otherwise, we got a packet recently, so it's still alive Alan T. DeKok@2015-03-09T17:03:20Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a7d7aa0b721b7371fdc… ====== Realloc string to the correct length Alan T. DeKok@2015-03-09T14:58:27Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/70ba651d66bfbae037ac… ====== Rename 2.x.x branch to long term support Arran Cudbard-Bell@2015-03-09T03:18:53Z Files modified: * doc/source/extra/toc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d909bf1064293a0a2654… ====== Merge pull request #919 from nchaigne/3.0.x-fb3 Use proper DHCP vendor Arran Cudbard-Bell@2015-03-09T00:00:48Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/592318b95e8619d80d45… ====== Use proper DHCP vendor DHCP-Message-Type is from dhcp "vendor". And internal attributes such as Packet-Type have no vendor. Nicolas C@2015-03-04T18:42:41Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee858f2a50c4c589d774… ====== -- This commit summary was generated @2015-03-10T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 09 Mar '15

09 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Re-enable "Temporarily disable failing regex tests" This reverts commit 3bfb4d220c95403764056d28588b8f7d7fca2775. Alan T. DeKok@2015-03-09T20:49:15Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e7ac205f8aaac62d57de… ====== Leave regexes unmolested. The regex compiler can do necessary de-quoting Alan T. DeKok@2015-03-09T20:49:06Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfb3a20c8e3f8cf3bbcd… ====== Re-run command after connection failure Alan T. DeKok@2015-03-09T17:54:06Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ae03181df247ae021aa… ====== Clean up statistics handling Alan T. DeKok@2015-03-09T17:48:54Z Files modified: * src/main/listen.c * src/main/process.c * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ecf0aa528602bd553d2… ====== last may be NULL Alan T. DeKok@2015-03-09T17:48:53Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f309dad067d7c3034208… ====== Mark home server state unknown after "response_window" if now > last_packet + response_window, the state is unknown otherwise, we got a packet recently, so it's still alive Alan T. DeKok@2015-03-09T17:07:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b45ff837c596f9176fd1… ====== Die correct_escapes/cf_new_escape Arran Cudbard-Bell@2015-03-09T04:36:50Z Files modified: * raddb/proxy.conf * raddb/radiusd.conf.in * src/include/conffile.h * src/main/conffile.c * src/main/modcall.c * src/main/parser.c * src/main/radattr.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_realm/rlm_realm.c * src/tests/config/test.conf * src/tests/keywords/radiusd.conf * src/tests/modules/radiusd.conf * src/tests/xlat/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e035c606ba8ea50266e9… ====== Rename 2.x.x branch to long term support Arran Cudbard-Bell@2015-03-09T03:18:33Z Files modified: * doc/source/extra/toc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a8001fad8a9fbe350e6… ====== Outdent reformed code PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:59Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7d7030ea05d879982f89… ====== Reform if so that the error just returns, and otherwise code continues PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:55Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab2ccebf03851c9816a7… ====== Timestamp typo PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:51Z Files modified: * src/modules/rlm_yubikey/decrypt.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/452d390bba15030e36b6… ====== Update documentation to describe the attribute's values PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:47Z Files modified: * raddb/mods-available/yubikey Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2f666072ddbf367d1cb9… ====== Document the module's additions to the site configuration PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:43Z Files modified: * raddb/mods-available/yubikey Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c882917d97c1b0a9899c… ====== Reduce the calculation of counter and timestamp to a single instance. PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:39Z Files modified: * src/modules/rlm_yubikey/decrypt.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e67b6b991c45f2f645dd… ====== Combined equal size password length with greater than sized. This should fix both the issues: if this was not split, it would not be checked; and if equal sized and split it would not create the Yubikey-OTP attribute (although it was sufficient). PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:35Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8c30b21c5b3b6f20fbb6… ====== Changed Auth-Type assignment until after Public-ID possible failure PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:31Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/857f418e23f98ae3626f… ====== Reduced extra passcode and len assignment PDD (via Arran Cudbard-Bell)@2015-03-09T00:41:26Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39492a5399fdc58a210a… ====== Eliminate redundant return PDD (via Arran Cudbard-Bell)@2015-03-09T00:40:53Z Files modified: * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e7c9345aa79dadf6c1d9… ====== Merge pull request #919 from nchaigne/3.0.x-fb3 Use proper DHCP vendor Arran Cudbard-Bell@2015-03-09T00:01:27Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2596573be8a0b0baf070… ====== -- This commit summary was generated @2015-03-10T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

53f527be190 - symlinking /dev/urandom into raddb/certs
by Phil Mayers 09 Mar '15

09 Mar '15

I just got surprised by this; one possible side effect that might have been missed here, it stops you doing this: grep -r something /etc/raddb ...as it spins forever on the random device. Not sure why I've never seen it before when testing 3.0.x

4 3

Another leak: tls_new_client_session
by Sam Hartman 09 Mar '15

09 Mar '15

hi. 3.0.7 also seems to be leaking client proxy ssl state. First, where does SSL_free get called for the ssl created in tls_new_client_session? It seems that a talloc destructor is used for tls_new_session, but I don't see the logic that causes the session state to be freed for client sessions? Is there a missing set_destructor call? Secondly, I seem to be getting tls_new_client_session objects leaking some of the time. Causing errors like killing the process on the other end of the connection makes it more likely. I'm judging this because I do have a few sessions allocated on tls.c line 219 still around even after I've shut down the home server that the tls_session was for. Why is the TLS client session hanging off the configuration talloc context not a socket context of some kind?

3 30

3.1.x branch
by Arran Cudbard-Bell 09 Mar '15

09 Mar '15

From this point onwards v3.0.x no major new features will be accepted into v3.0.x. A new branch, v3.1.x, has been forked from master. All new feature development should be done on the v3.1.x branch. All new pull requests for features should be submitted against v3.1.x. Major re-architecturing will then start in master. v3.1.x will be used for development/preview releases. We'll add tags regularly but versions will not be released on the freeRADIUS website. Changes in v3.1.x will be merged to master. Bug fixes in v3.0.x will be merged into v3.1.x and master where relevant. The primary reasons for creating a new branch are: - We need to stabilise v3.0.x, but still need to add new features to the server. - Maintaining compatibility with v3.0.x is getting difficult. The new/old escapes code is particularly annoying to unpick. In v3.1.x all the code that allowed for the old escaping mode will be removed, as will support for the old client syntax, and all the config items currently marked as deprecated in v3.0.x. - There's code in the current master than should have been merged into v3.0.x a while back, but hasn't. The code concerns error handling in update sections and conditions. Restoring atomic behaviour for the update sections, and having xlats trigger abort and rollback behaviour on errors is the behaviour we should aim for. However, if we reintroduced atomic update sections in v3.0.x it might break lots of existing configs. Master will not be config compatible. Unlang, and the majority of the module syntax will be. So it won't be as painful as migrating from v2 to v3, but the authorize, authenticate, post-auth sections won't exist in their current form. We need a syntax that can describe processing flows for multiple protocols, not just RADIUS. Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 08 Mar '15

08 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Proper fix for "Disable regex \n test. Some engines can't take \n" Arran Cudbard-Bell@2015-03-08T23:55:26Z Files modified: * src/tests/keywords/if-regex-match-comp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a66b4bf47dce2f3b881a… ====== Add notes on 3.1.x branch Arran Cudbard-Bell@2015-03-08T23:25:32Z Files modified: * doc/source/extra/toc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72c19531cc1799752807… ====== Disable regex \n test. Some engines can't take \n Alan T. DeKok@2015-03-08T14:49:51Z Files modified: * src/tests/keywords/if-regex-match-comp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ce586358ee345841d5c3… ====== Typo Alan T. DeKok@2015-03-08T01:57:21Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f811874d152e647df252… ====== -- This commit summary was generated @2015-03-09T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 Mar '15

08 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Proper fix for "Disable regex \n test. Some engines can't take \n" Arran Cudbard-Bell@2015-03-08T23:55:33Z Files modified: * src/tests/keywords/if-regex-match-comp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/415d2d85fa5b756f24bb… ====== Add notes on 3.1.x branch Arran Cudbard-Bell@2015-03-08T23:25:37Z Files modified: * doc/source/extra/toc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddba456a843a66c2b6a6… ====== Use sh -c in linelog tests, so $PATH is honoured Arran Cudbard-Bell@2015-03-08T22:30:26Z Files modified: * src/tests/modules/linelog/linelog.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e201cddca71f873a9e97… ====== Allow arbitrary environmental variables to be specified with &control:Exec-Export Arran Cudbard-Bell@2015-03-08T22:27:17Z Files modified: * share/dictionary.freeradius.internal * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9dd56ee2542eba2362… ====== SSHA attributes should be marked as internal Arran Cudbard-Bell@2015-03-08T22:25:53Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cdb3db2248c71116436… ====== Change exec error messages to the correct severity Arran Cudbard-Bell@2015-03-08T22:25:07Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f390e49a453ee7c124d… ====== Add additional tmpl initialisation functions Arran Cudbard-Bell@2015-03-08T22:12:46Z Files modified: * src/include/tmpl.h * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3d34aeafc450e832449… ====== Fix documentation for exec functions Arran Cudbard-Bell@2015-03-08T16:13:31Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/184d2f2f691ded3938ee… ====== Remove redundant declaration Alan T. DeKok@2015-03-08T16:07:24Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9afb660cc80e616a8f94… ====== proxy_new_listener() gets a talloc_ctx so we can clean it up Alan T. DeKok@2015-03-08T16:07:10Z Files modified: * src/include/radiusd.h * src/main/listen.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4b64eede9615bfea70a… ====== Disable regex \n test. Some engines can't take \n Alan T. DeKok@2015-03-08T14:50:11Z Files modified: * src/tests/keywords/if-regex-match-comp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/967c44418243772ebbaa… ====== Typo Alan T. DeKok@2015-03-08T01:57:32Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d8140a77214141083ec… ====== Use autofree context Alan T. DeKok@2015-03-08T00:01:08Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8c0cc456aaad2a942e47… ====== Remove SSL mutex memory on clean exit Alan T. DeKok@2015-03-08T00:01:07Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/80918a5e97e3a3b0e918… ====== Clean up hash table on stop Alan T. DeKok@2015-03-08T00:01:05Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6763dfb63a69fcf3a975… ====== Clean up the fifos on clean exit Alan T. DeKok@2015-03-08T00:01:04Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cac9bed22cf1c848363… ====== fr_packet_list_id_alloc returns bool Alan T. DeKok@2015-03-08T00:01:01Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c8b2264076d29361b764… ====== -- This commit summary was generated @2015-03-09T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 07 Mar '15

07 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Declare proxy_ctx for WITH_PROXY Alan T. DeKok@2015-03-07T23:35:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f9aa0f48ab8ce69e9ff4… ====== Use correct length for printing template names Alan T. DeKok@2015-03-07T22:05:59Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd172e41810e6b55e84a… ====== Use standard functions for sockaddr to ipaddr Alan T. DeKok@2015-03-07T22:05:58Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e75ae07c0d66ec8cb466… ====== If we have no unescaping, there's no need to re-parse it Alan T. DeKok@2015-03-07T22:05:55Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c68d89982a8fc4bc43fc… ====== Limit memcpy to length Alan T. DeKok@2015-03-07T22:05:53Z Files modified: * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f084437881593bc2a118… ====== Result is a void const * Arran Cudbard-Bell@2015-03-07T18:23:47Z Files modified: * src/modules/rlm_ldap/sasl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72688cda312c5b660824… ====== Add support for value_pair_tmpl_t in linelog Arran Cudbard-Bell@2015-03-07T18:23:47Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/all.mk * src/tests/modules/linelog/linelog.attrs * src/tests/modules/linelog/linelog.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99cf6dca5b83ff654777… ====== Temporarily disable failing regex tests Arran Cudbard-Bell@2015-03-07T02:50:25Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/70eea2085528ac0fe079… ====== Add support for SASL interactive binds Arran Cudbard-Bell@2015-03-07T02:20:31Z Files modified: * raddb/mods-available/ldap * src/modules/rlm_ldap/all.mk.in * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/config.h.in * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_ldap/sasl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6511d016c82bc71b3aaf… ====== No longer a valid error (templates are allowed for module config items) Arran Cudbard-Bell@2015-03-07T01:16:11Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9ea8ccd7619c5ac8112… ====== Remove duplicate CC_HINT Arran Cudbard-Bell@2015-03-07T01:10:51Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb74c42eba0fd5ff13ad… ====== Netmask is not supported in master This reverts commit e4d983291adde85e1473c2e75a98bc89ca1838f4. Arran Cudbard-Bell@2015-03-07T00:15:21Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d1d342f3eda1076fbdb… ====== -- This commit summary was generated @2015-03-08T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 07 Mar '15

07 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Declare proxy_ctx for WITH_PROXY Alan T. DeKok@2015-03-07T23:35:20Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b950d99486a240db9ed… ====== Use correct length for printing template names Alan T. DeKok@2015-03-07T22:02:29Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9fadd1005098e862c1af… ====== Use standard functions for sockaddr to ipaddr Alan T. DeKok@2015-03-07T21:56:19Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/089aca6047e3537c5e64… ====== If we have no unescaping, there's no need to re-parse it Alan T. DeKok@2015-03-07T17:03:55Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dcece49830c0fa39c442… ====== Limit memcpy to length Alan T. DeKok@2015-03-07T16:59:03Z Files modified: * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/430f71da4d999e68205d… ====== Temporarily disable failing regex tests Arran Cudbard-Bell@2015-03-07T04:41:19Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3bfb4d220c9540376405… ====== No longer a valid error (templates are allowed for module config items) Arran Cudbard-Bell@2015-03-07T04:41:08Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d815a3cc195011561ba4… ====== Remove duplicate CC_HINT Arran Cudbard-Bell@2015-03-07T04:40:37Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5f3716e99a843542033… ====== -- This commit summary was generated @2015-03-08T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 06 Mar '15

06 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== small updates * fixed documentation typos and corrected other sections * modified client loading to respect keys returned from view payloads Aaron Hurt (via Alan T. DeKok)@2015-03-06T20:39:08Z Files modified: * src/modules/rlm_couchbase/README.md * src/modules/rlm_couchbase/mod.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/61d01527f312c5d6ce4d… ====== Make print match parse Alan T. DeKok@2015-03-06T20:38:15Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2f6b76717368e5ce8d1… ====== Relax restrictions on group membership query We don't need to have groupcheck / group reply attrs Alan T. DeKok@2015-03-06T18:35:04Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e62f736f7966077bcb6e… ====== Allow "netmask" to work again Alan T. DeKok@2015-03-06T18:29:51Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e4d983291adde85e1473… ====== Put TCP listeners into a tree in their parent For various talloc issues Alan T. DeKok@2015-03-06T18:29:49Z Files modified: * src/include/radiusd.h * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfe81ba3959cc0a3be6d… ====== One more regex test Alan T. DeKok@2015-03-06T18:29:48Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c821561fbf36544daafb… ====== Ensure that types can't have value 0 So we don't run into the previous problem again Alan T. DeKok@2015-03-06T00:05:25Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d63cd64b7754581f3eb… ====== -- This commit summary was generated @2015-03-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 06 Mar '15

06 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== note recent changes Alan T. DeKok@2015-03-06T22:30:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c38b63bb724d7c651d44… ====== proxy_new_listener() gets a talloc_ctx so we can clean it up Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/include/radiusd.h * src/main/listen.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b77259eac3dc9b9147d… ====== Use autofree context Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf3d49374338efad7e5a… ====== Remove SSL mutex memory on clean exit Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325e9ad5d611bd1f25ed… ====== Clean up hash table on stop Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e990c8a4bb3d611e6c14… ====== Clean up the fifos on clean exit Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/efa611f3fea4c7b2d22a… ====== fr_packet_list_id_alloc returns bool Alan T. DeKok@2015-03-06T22:21:03Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da98684d242fda14b401… ====== Merge pull request #920 from leprechau/small_updates small updates Alan DeKok@2015-03-06T20:38:54Z Files modified: * src/modules/rlm_couchbase/README.md * src/modules/rlm_couchbase/mod.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/accf635b43c094493d79… ====== small updates * fixed documentation typos and corrected other sections * modified client loading to respect keys returned from view payloads Aaron Hurt@2015-03-06T19:58:58Z Files modified: * src/modules/rlm_couchbase/README.md * src/modules/rlm_couchbase/mod.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eda922b47388adfdbcf5… ====== Make print match parse Alan T. DeKok@2015-03-06T20:37:58Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4640e6dc08225790a2d3… ====== Leave regexes unmolested. The regex compiler can do necessary de-quoting Alan T. DeKok@2015-03-06T18:40:29Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7629ce4ec640c65610e0… ====== Relax restrictions on group membership query We don't need to have groupcheck / group reply attrs Alan T. DeKok@2015-03-06T18:33:38Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb307a24f9b2ac3446a8… ====== Allow "netmask" to work again Alan T. DeKok@2015-03-06T18:29:29Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bcd1433a38caf0232d11… ====== note recent changes Alan T. DeKok@2015-03-06T17:42:37Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9f02733bf070651d6e8c… ====== Put TCP listeners into a tree in their parent For various talloc issues Alan T. DeKok@2015-03-06T17:42:13Z Files modified: * src/include/radiusd.h * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/119f974cec528834d8a1… ====== One more regex test Alan T. DeKok@2015-03-06T17:41:05Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97470a99383ffb769667… ====== note recent changes Alan T. DeKok@2015-03-06T00:07:26Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0d77c62afc024fa10e2… ====== Ensure that types can't have value 0 So we don't run into the previous problem again Alan T. DeKok@2015-03-06T00:04:45Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/308a45f1f5b421c0d85b… ====== -- This commit summary was generated @2015-03-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

regular expression error in 3.0.x not present in 3.0.6
by Aaron Hurt 06 Mar '15

06 Mar '15

I have a policy.d file containing a regular expression that works in 3.0.6 that I’ve tried with two different flavors. Both flavors load and work in 3.0.6 but error in the latest 3.0.x branch. Flavor1: simple_nt_regexp = "^([^\\\\]*)(\\\\(.*))$" Flavor2: simple_nt_regexp = "^([^\\\\]*)\\\\(.*)$” In 3.0.x from today: /opt/local/etc/raddb/policy.d/strip-user-domain[9]: Invalid regular expression: /opt/local/etc/raddb/policy.d/strip-user-domain[9]: ^([^\\]*)\\(.*)$ /opt/local/etc/raddb/policy.d/strip-user-domain[9]: ^ Pattern study failed: unknown or incorrect option bit(s) set /opt/local/etc/raddb/policy.d/strip-user-domain[10]: Invalid regular expression: /opt/local/etc/raddb/policy.d/strip-user-domain[10]: ^([^\\]*)(\\(.*))$ /opt/local/etc/raddb/policy.d/strip-user-domain[10]: ^ Pattern study failed: unknown or incorrect option bit(s) set Is there something obvious that I am missing? — Aaron

5 13

Commit report for master branch
by announce＠freeradius.org 05 Mar '15

05 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make tls_new_client_session set a destructor, too. So that ssn->ssl gets freed Alan T. DeKok@2015-03-05T18:27:51Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8859800057bc4efbda29… ====== No need for these functions to be exported Alan T. DeKok@2015-03-05T18:27:50Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/333d513a9c91856a49bb… ====== More doc fixes Arran Cudbard-Bell@2015-03-05T18:07:46Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc5bc238cbfc13ceea8d… ====== Don't use 0 for any value. It's reserved for the default section Alan T. DeKok@2015-03-05T17:36:36Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a0e25556df90adfe18fc… ====== Limit talloc report depth So that we don't blow up on talloc loops. Which shouldn't happen. Alan T. DeKok@2015-03-05T15:08:30Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/68b0559e7f09e991d381… ====== use separate definitions and declarations for mod_* functions in rlm_sql Arran Cudbard-Bell@2015-03-05T05:56:22Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25bb029aeb444410f73d… ====== rlm_sql should return noop if we can't find a matching query section Arran Cudbard-Bell@2015-03-05T05:45:58Z Files modified: * src/main/conffile.c * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d165e7e966009a37be9c… ====== Only print cleanup messages if a message about the request was logged Arran Cudbard-Bell@2015-03-05T04:45:53Z Files modified: * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6cd1ad3ced56a76d29f7… ====== Fix @return in tmpl_*expand Arran Cudbard-Bell@2015-03-05T04:36:07Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d5cf233573addca49f1… ====== Return int not bool for all tmpl functions Arran Cudbard-Bell@2015-03-05T02:35:48Z Files modified: * src/include/tmpl.h * src/main/map.c * src/main/modcall.c * src/main/parser.c * src/main/tmpl.c * src/modules/rlm_cache/serialize.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fe59c14764dccbb7d40… ====== Complete documentation for templates Arran Cudbard-Bell@2015-03-05T01:42:46Z Files modified: * src/include/tmpl.h * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7fc9b7a664e67b4ae333… ====== tmpl_free function is no longer needed, as value_pair_tmpl_t have an internal buffer for storing unknown attributes. Arran Cudbard-Bell@2015-03-05T01:14:48Z Files modified: * src/include/tmpl.h * src/main/modcall.c * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/841444db010aac694789… ====== -- This commit summary was generated @2015-03-06T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 05 Mar '15

05 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make tls_new_client_session set a destructor, too. So that ssn->ssl gets freed Alan T. DeKok@2015-03-05T18:27:15Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e4dcf8c962e0f2e6ff8d… ====== No need for these functions to be exported Alan T. DeKok@2015-03-05T18:23:59Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1727234870e4a5c545fe… ====== Don't use 0 for any value. It's reserved for the default section Alan T. DeKok@2015-03-05T17:36:29Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d9a9d594e666d70b9762… ====== More doc fixes Arran Cudbard-Bell@2015-03-05T17:22:41Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/71c4361b6acc316c5d32… ====== Limit talloc report depth So that we don't blow up on talloc loops. Which shouldn't happen. Alan T. DeKok@2015-03-05T15:07:46Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c00210cb32efa1e59018… ====== use separate definitions and declarations for mod_* functions in rlm_sql Arran Cudbard-Bell@2015-03-05T05:56:14Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cf1529ec894cecee0a35… ====== rlm_sql should return noop if we can't find a matching query section Arran Cudbard-Bell@2015-03-05T05:45:51Z Files modified: * src/main/conffile.c * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc294bc82c908290cf8f… ====== Only print cleanup messages if a message about the request was logged Arran Cudbard-Bell@2015-03-05T04:44:37Z Files modified: * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0fc782a609681ec300cf… ====== Fix @return in tmpl_*expand Arran Cudbard-Bell@2015-03-05T04:33:48Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b09b10b1819b43d474c8… ====== Return int not bool for all tmpl functions Arran Cudbard-Bell@2015-03-05T02:35:24Z Files modified: * src/include/tmpl.h * src/main/map.c * src/main/modcall.c * src/main/parser.c * src/main/tmpl.c * src/modules/rlm_cache/serialize.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d60a54f16b69bd278510… ====== Minor corrections Arran Cudbard-Bell@2015-03-05T01:43:04Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2e3188751bfed12d29ed… ====== Complete documentation for templates Arran Cudbard-Bell@2015-03-05T01:13:29Z Files modified: * src/include/tmpl.h * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/422c3b4744e3ee28f4d8… ====== tmpl_free function is no longer needed, as value_pair_tmpl_t have an internal buffer for storing unknown attributes. Arran Cudbard-Bell@2015-03-05T01:11:31Z Files modified: * src/include/tmpl.h * src/main/modcall.c * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/626114ab37064ee6d55c… ====== -- This commit summary was generated @2015-03-06T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

filter_username and regexps broken
by Sam Hartman 05 Mar '15

05 Mar '15

I'm getting a request denied because the username matches \.\., but I don't see why that should be true Thread 3 handling request 0, (1 handled so far) (0) Received Access-Request Id 0 from 127.0.0.1:53392 to 0.0.0.0:2083 length 130 (0) User-Name = '@apc.painless-security.com' (0) GSS-Acceptor-Service-Name = 'trustidentity' (0) GSS-Acceptor-Host-Name = 'hartmans.local' (0) EAP-Message = 0x0200001f01406170632e7061696e6c6573732d73656375726974792e636f6d (0) Message-Authenticator = 0xc977441e8dda36e128cbd617a7f16ed1 (0) # Executing section authorize from file /etc/freeradius/sites-enabled/abfab-tr-idp (0) authorize { (0) policy psk_authorize { (0) if (tls-psk-identity =* ANY) { (0) if (tls-psk-identity =* ANY) -> FALSE (0) } # policy psk_authorize = notfound (0) policy filter_username { (0) if (!&User-Name) { (0) if (!&User-Name) -> FALSE (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@.*@/ ) { (0) if (&User-Name =~ /@.*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> TRUE (0) if (&User-Name =~ /\.\./ ) { (0) update reply { (0) &Reply-Message += 'Rejected: Username contains ..s' (0) } # update reply = noop (0) [reject] = reject (0) } # if (&User-Name =~ /\.\./ ) = reject (0) } # policy filter_username = reject (0) } # authorize = reject (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/sites-enabled/abfab-tr-idp (0) Post-Auth-Type REJECT { (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> @apc.painless-security.com (0) attr_filter.access_reject: Matched entry DEFAULT at line 18 (0) [attr_filter.access_reject] = updated (0) if &reply:Eap-Message { (0) if &reply:Eap-Message -> FALSE (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Thread 3 waiting to be assigned a request Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 0 from 0.0.0.0:2083 to 127.0.0.1:53392 length 53 (0) Reply-Message += 'Rejected: Username contains ..s' Waking up in 3.9 seconds. Closing TLS socket from client port 53392 (0) >>> TLS 1.0 Alert [length 0002], warning close_notify Client has closed connection Waking up in 3.9 seconds.

2 1