March 2015 - Freeradius-Devel - lists.freeradius.org

Last call for 3.0.8
by Alan DeKok 01 Apr '15

01 Apr '15

Can we get that tested? Especially with the TLSv1 / TLSv1.1 / TLSv1.2 changes that went in today. I think we're otherwise good to go. Alan DeKok.

7 16

RFC 5077 ticket key derivation
by Arran Cudbard-Bell 31 Mar '15

31 Mar '15

/** Generate a new session ticket * * Signs the administrator configured key, using the private key associated with the * SSL context, then hashes the signature to get a key of an appropriate length, * which is fed to the hmac and encryption contexts for the session ticket. * * @param out Where to write the derived session ticket key. * @param pkey used to the create the signature. * @param key to be signed using the private key, then hashed. * @param keylen length of key to be signed. * @return 0 on success, -1 on failure. */ static int tls_session_ticket_key(uint8_t out[SHA256_DIGEST_LENGTH], EVP_PKEY *pkey, uint8_t const *key, size_t keylen) { int ret; const EVP_MD *md = EVP_sha256(); EVP_MD_CTX mdctx; unsigned int outlen; uint8_t *sig; EVP_MD_CTX_init(&mdctx); ret = EVP_DigestInit(&mdctx, md); if (ret != 1) { ERROR("Failed initialising digest: %s", ERR_error_string(ERR_get_error(), NULL)); return -1; } ret = EVP_SignInit(&mdctx, md); if (ret != 1) { ERROR("Failed initialising signing context: %s", ERR_error_string(ERR_get_error(), NULL)); error: EVP_MD_CTX_cleanup(&mdctx); return -1; } ret = EVP_SignUpdate(&mdctx, key, keylen); if (ret != 1) { ERROR("Failed signing key: %s", ERR_error_string(ERR_get_error(), NULL)); goto error; } ret = EVP_SignFinal(&mdctx, NULL, &outlen, pkey); if (ret != 1) { ERROR("Failed finalising digest signature: %s", ERR_error_string(ERR_get_error(), NULL)); goto error; } MEM(sig = talloc_array(NULL, uint8_t, outlen)); ret = EVP_SignFinal(&mdctx, sig, &outlen, pkey); if (ret != 1) { ERROR("Failed finalising digest signature: %s", ERR_error_string(ERR_get_error(), NULL)); goto error; } EVP_MD_CTX_cleanup(&mdctx); EVP_MD_CTX_init(&mdctx); ret = EVP_DigestInit(&mdctx, md); if (ret != 1) { ERROR("Failed initialising digest: %s", ERR_error_string(ERR_get_error(), NULL)); talloc_free(sig); goto error; } ret = EVP_DigestUpdate(&mdctx, sig, outlen); if (ret != 1) { ERROR("Failed updating digest: %s", ERR_error_string(ERR_get_error(), NULL)); talloc_free(sig); goto error; } ret = EVP_DigestFinal(&mdctx, out, NULL); talloc_free(sig); if (ret != 1) { ERROR("Failed updating digest: %s", ERR_error_string(ERR_get_error(), NULL)); goto error; } return 0; } Anyone have opinions on this? The idea is to allow multiple RADIUS servers to calculate the same key independently without a common store, and to ensure that the derived keys are sufficiently complex, regardless of what the administrator configures. There's no standard for this that i've seen, nor is there a situation that I can see where deploying heterogeneous RADIUS servers in a HA cluster is useful. RFC5077 recommends periodic key rotations, which is possible, as 'key', is the result of a template expansion, which could be an xlat, attr ref or exec. I've confirmed that if an incorrect key is provided via the SSL_CTX_set_tlsext_ticket_key_cb that auth continues normally as if no ticket had been presented, and a new ticket is generated. -Arran Tue Mar 31 05:57:15 2015 : Debug: (5) eap_peap: New session ticket: 0x6e8b68c6803654c78bf7e6db15d7ea00 Tue Mar 31 05:57:15 2015 : Debug: (5) eap_peap: Session ticket key: 0x35 Tue Mar 31 05:57:15 2015 : Debug: (5) eap_peap: Session ticket key (derived): 0x11ab45219b8ebafac633475ac0a9be597055b26a27c4d196ff542fa6834a860b Tue Mar 31 05:57:15 2015 : Debug: (5) eap_peap: TLS_accept: SSLv3 write session ticket A Tue Mar 31 05:57:15 2015 : Debug: (13) eap_peap: Got session ticket: 0x6e8b68c6803654c78bf7e6db15d7ea00 Tue Mar 31 05:57:15 2015 : Debug: (13) eap_peap: Session ticket key: 0x3133 Tue Mar 31 05:57:15 2015 : Debug: (13) eap_peap: Session ticket key (derived): 0x9a12beeaf8d3a9ed30d50e065c21e2260a62f9bbabd16616873f3923cb8e90a1 Tue Mar 31 05:57:15 2015 : Debug: (16) eap_peap: New session ticket: 0x6928501f7ea2e7cfddc26da251f6d7f2 Tue Mar 31 05:57:15 2015 : Debug: (16) eap_peap: Session ticket key: 0x3136 Tue Mar 31 05:57:15 2015 : Debug: (16) eap_peap: Session ticket key (derived): 0x5979e02312c1b500bd32f3a5ad785c19e4a9f1d0ba4b4c8083b39252ea216ce9 Tue Mar 31 05:57:15 2015 : Debug: (16) eap_peap: TLS_accept: SSLv3 write session ticket A Tue Mar 31 05:57:15 2015 : Debug: (24) eap_peap: Got session ticket: 0x6928501f7ea2e7cfddc26da251f6d7f2 Tue Mar 31 05:57:15 2015 : Debug: (24) eap_peap: Session ticket key: 0x3234 Tue Mar 31 05:57:15 2015 : Debug: (24) eap_peap: Session ticket key (derived): 0x31e2bb458f5d9ef76d0a7d63696e3b33d1f57d1e4ef5a3f2f6d880d6135b8b4a Tue Mar 31 05:57:15 2015 : Debug: (27) eap_peap: New session ticket: 0x62a418806a4c58025628864c5b3a8af0 Tue Mar 31 05:57:15 2015 : Debug: (27) eap_peap: Session ticket key: 0x3237 Tue Mar 31 05:57:15 2015 : Debug: (27) eap_peap: Session ticket key (derived): 0x6c09a944a07cece8fef510427b41041d831f2dd8d8430e9be49e9bb1233ad32f Tue Mar 31 05:57:15 2015 : Debug: (27) eap_peap: TLS_accept: SSLv3 write session ticket A Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

3 7

Commit report for v3.0.x branch
by announce＠freeradius.org 31 Mar '15

31 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Servers are freed individually on server exit, so can't be parented off of the client Arran Cudbard-Bell@2015-03-31T23:39:32Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a299f712c9b2d9ecdd26… ====== note recent changes Alan T. DeKok@2015-03-31T22:59:03Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f2b15c5866d2b92a2842… ====== Warn on use of expanded EAP types Alan T. DeKok@2015-03-31T22:57:49Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/370224f8024e52168c28… ====== Convert expanded EAP to normal EAP Alan T. DeKok@2015-03-31T22:45:46Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc993849f42d8f44a110… ====== First stab at supporting Expanded Type EAP packets Only for vendor 0 (IETF). And only for known EAP types. Untested, so it's ifdef'd out. Once it's tested, we can enable it. Alan T. DeKok@2015-03-31T21:58:29Z Files modified: * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_types.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc85cd89b3740ba4a156… ====== Only call tr_init if trust router is configured And only call "get realm" on the same conditions Alan T. DeKok@2015-03-31T21:16:33Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f95d9705320fea5b84ff… ====== Fail safely if there's no trust router Alan T. DeKok@2015-03-31T19:39:20Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ff00c9f20a0ab5b490e… ====== Be a bit more careful about locking files We try to lock it non-blocking. If fail, close the file, re-open it, and try to lock it again. This lets us catch the corner case of the reader re-naming the file after we opened it, locking it, and trying again. Alan T. DeKok@2015-03-31T18:38:56Z Files modified: * src/main/exfile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ea91d68ac9a7f586fc6… ====== Unlock file while waiting for the DB Otherwise the server might block forever waiting for our lock to be released Alan T. DeKok@2015-03-31T18:38:56Z Files modified: * scripts/sql/radsqlrelay Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a91017d3c39109349375… ====== Remove unnecessary comment Alan T. DeKok@2015-03-31T18:38:56Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1c39850f5b26ed058f99… ====== Add version strings for TLS 1.1, 1.2 and 1.3 Arran Cudbard-Bell@2015-03-31T18:25:26Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/557ed07e0f4e4bb41005… ====== Update ChangeLog Arran Cudbard-Bell@2015-03-31T18:14:59Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5b7e07d2033db04305e… ====== Re-enable TLS 1.2 by default Arran Cudbard-Bell@2015-03-31T17:25:29Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b8f422cfadbdcfc5e58… ====== Typos Arran Cudbard-Bell@2015-03-31T16:50:06Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee7d8718bd973e1ffa11… ====== Use SSL_export_keying_material if available. This generates keys using the correct PRF with TLS 1.2 Arran Cudbard-Bell@2015-03-31T16:44:15Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/254c61cfadd20f100a7e… ====== note recent changes Alan T. DeKok@2015-03-31T15:59:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0221f099aed3b1c18aff… ====== Allow disabling of tlsv1 Alan T. DeKok@2015-03-31T15:57:41Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/61888b71c166b258493d… ====== Stop on no next entry Alan T. DeKok@2015-03-31T15:14:55Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/455cfe145183318ce47a… ====== Fix compilation errors Alan T. DeKok@2015-03-31T15:14:41Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6f7e32f21ed96612088d… ====== Update for 3.0.8 Alan T. DeKok@2015-03-31T04:46:35Z Files modified: * man/man5/users.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c5d65a962db06dc89826… ====== Comments Alan T. DeKok@2015-03-31T04:46:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9781b68c7b9f9e0892d0… ====== Don't use 2 names for the same thing Alan T. DeKok@2015-03-31T04:46:34Z Files modified: * raddb/mods-available/files Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d95c034eae276137e807… ====== Merge pull request #931 from nchaigne/3.0.x-fb4-rc radeapclient - eap context struct Arran Cudbard-Bell@2015-03-31T02:25:11Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a595cd6efd7ba6228150… ====== radeapclient - fixed EAP-MD5 EAP-MD5 works again now. Nicolas C@2015-03-25T16:49:56Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/628ef0b2945255dec549… ====== radeapclient - union for eap context Use an union to separate sim and md5 specific members. Nicolas C@2015-03-25T11:47:10Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7b8827318b399cbe8a96… ====== radeapclient - code clean-up Fixes, formatting, and code clean-up. Removed old (now unused) functions: - debug_packet - send_packet - sendrecv_eap Nicolas C@2015-03-25T09:09:40Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/970cef796898ce6b7286… ====== radeapclient - process special attributes Last commit did not build on Travis. Fixed. Added processing of special attributes in input vps (copied from radclient). And some other minor stuff. Nicolas C@2015-03-24T18:27:04Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dffc9fc4b8d2f85aaa2a… ====== radeapclient - parallel mode (now working) This one is larger. (but this was necessary.) The new stuff is now in use, and working! The old "sendrecv_eap" sequential function is no longer called. Instead a main loop handles: starting new transactions and sending packets, receiving and handling responses, checking for timeouts and handling retransmissions. Some minor things needs to be addressed, but I feel this is very close to being mergeable. New option added: "-p <parallel>". I removed option "-i", which has been broken for ages and I think will never be fixed (since we use FreeRADIUS's packet list library, the ID is automatically allocated). Nicolas C@2015-03-24T16:54:49Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0cdbe1ee471ed595066b… ====== radeapclient - receive using packet list Added an event list (not yet used). Added new functions: - rc_finish_transaction - rc_send_transaction_packet - rc_deallocate_id - rc_recv_one_packet (not yet used) Nicolas C@2015-03-24T10:48:15Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8b224602e139d538d357… ====== radeapclient - preparing packet list use Cleaned-up main. Added a packet list (not yet used) Added new functions: - rc_add_socket - rc_resolve_hostname - rc_send_one_packet (not yet used) These I stole from radclient: - rc_request_types[] array - rc_get_port function - rc_get_code function Nicolas C@2015-03-24T09:37:03Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b66a5612bbfaabb4d30… ====== radeapclient - now use the transactions Now load the input data and use it to properly initialize transactions. These are then used to do the EAP-SIM workflow. Nicolas C@2015-03-23T19:34:32Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3d569bdbf0853814a96… ====== radeapclient - init transactions New functions (not yet used) to initialize transactions, and yank elements from the input list of vps. Nicolas C@2015-03-23T18:29:21Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c07db3c97a8ff83e429… ====== radeapclient - new structures (input, transactions) New structures added to hold: - input value pairs read from file or stdin. - transactions contexts (similar to radclient's 'rc_request_t'). And new functions (not yet used) to read input vps and load them into a list. Nicolas C@2015-03-23T17:47:00Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/43238920dba379c4f590… ====== radeapclient - use eap context Make use of the previously defined eap context struct. Nicolas C@2015-03-23T16:35:04Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/421bc55cce3d0505a4ba… ====== radeapclient - eap context struct Definition of a structure which will hold the EAP context information. This will also make easier to merge with radclient later on. As requested, small commits on purpose. If they are too small please let me know, I will adjust :) Nicolas C@2015-03-23T09:32:03Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b575dbd81f54263dd836… ====== New travis apt plugin config structure Arran Cudbard-Bell@2015-03-31T00:01:06Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/deaa3b2c36f5f9a8dbf0… ====== -- This commit summary was generated @2015-04-01T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 31 Mar '15

31 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Servers are freed individually on server exit, so can't be parented off of the client Arran Cudbard-Bell@2015-03-31T23:39:47Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c51035b17083e20a5df3… ====== Allow disabling of tlsv1 Alan T. DeKok@2015-03-31T23:12:05Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a9277b02d5b03e9af23b… ====== Warn on use of expanded EAP types Alan T. DeKok@2015-03-31T22:58:06Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f7bb82a4a37d5b45f6a… ====== Convert expanded EAP to normal EAP Alan T. DeKok@2015-03-31T22:46:10Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0fade2883091ada55e9… ====== First stab at supporting Expanded Type EAP packets Only for vendor 0 (IETF). And only for known EAP types. Untested, so it's ifdef'd out. Once it's tested, we can enable it. Alan T. DeKok@2015-03-31T22:46:09Z Files modified: * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_types.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6668c0e119c7e9c5f8a9… ====== Only call tr_init if trust router is configured And only call "get realm" on the same conditions Alan T. DeKok@2015-03-31T21:17:08Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/01167e55b9867dee9d71… ====== Fail safely if there's no trust router Alan T. DeKok@2015-03-31T19:39:34Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c809912aa3248e9af37… ====== Be a bit more careful about locking files We try to lock it non-blocking. If fail, close the file, re-open it, and try to lock it again. This lets us catch the corner case of the reader re-naming the file after we opened it, locking it, and trying again. Alan T. DeKok@2015-03-31T18:40:17Z Files modified: * src/main/exfile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7817327f6869c9fa586b… ====== Unlock file while waiting for the DB Otherwise the server might block forever waiting for our lock to be released Alan T. DeKok@2015-03-31T18:40:16Z Files modified: * scripts/sql/radsqlrelay Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3f028f8e0a48bb95bf05… ====== Remove unnecessary comment Alan T. DeKok@2015-03-31T18:40:07Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c55705170d5438c5a6d… ====== Add version strings for TLS 1.1, 1.2 and 1.3 Arran Cudbard-Bell@2015-03-31T18:25:00Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93076379bf91ba414f21… ====== Re-enable TLS 1.2 by default Arran Cudbard-Bell@2015-03-31T17:25:37Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6fd66f55c865ff2a9186… ====== Typos Arran Cudbard-Bell@2015-03-31T16:50:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c5c22be8f423e53c79e6… ====== Use SSL_export_keying_material if available. This generates keys using the correct PRF with TLS 1.2 Arran Cudbard-Bell@2015-03-31T16:43:45Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7b709816262a0322672b… ====== Fix for 3.1.x Alan T. DeKok@2015-03-31T15:55:45Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2e577136b77199ebb72f… ====== Stop on no next entry Alan T. DeKok@2015-03-31T15:15:22Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/08688632abef67e1e8b4… ====== Fix compilation errors Alan T. DeKok@2015-03-31T15:15:21Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/380df4a51f798931e760… ====== Update for 3.0.8 Alan T. DeKok@2015-03-31T04:52:04Z Files modified: * man/man5/users.5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fe7d87cbe31f3ac8dd9e… ====== Comments Alan T. DeKok@2015-03-31T04:52:03Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f0bc9e8db614c45d96f… ====== Don't use 2 names for the same thing Alan T. DeKok@2015-03-31T04:52:01Z Files modified: * raddb/mods-available/files Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc31066bf7c641cbb809… ====== radeapclient - fixed EAP-MD5 EAP-MD5 works again now. Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:27:02Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/295e451bcfce7331a1ae… ====== radeapclient - union for eap context Use an union to separate sim and md5 specific members. Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:57Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b098524176ea3727f4db… ====== radeapclient - code clean-up Fixes, formatting, and code clean-up. Removed old (now unused) functions: - debug_packet - send_packet - sendrecv_eap Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:51Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a1a2c1164933eedb20f… ====== radeapclient - process special attributes Last commit did not build on Travis. Fixed. Added processing of special attributes in input vps (copied from radclient). And some other minor stuff. Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:46Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/079698348710a6d6f1f5… ====== radeapclient - parallel mode (now working) This one is larger. (but this was necessary.) The new stuff is now in use, and working! The old "sendrecv_eap" sequential function is no longer called. Instead a main loop handles: starting new transactions and sending packets, receiving and handling responses, checking for timeouts and handling retransmissions. Some minor things needs to be addressed, but I feel this is very close to being mergeable. New option added: "-p <parallel>". I removed option "-i", which has been broken for ages and I think will never be fixed (since we use FreeRADIUS's packet list library, the ID is automatically allocated). Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:41Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8dcc99feb6577cf0949… ====== radeapclient - receive using packet list Added an event list (not yet used). Added new functions: - rc_finish_transaction - rc_send_transaction_packet - rc_deallocate_id - rc_recv_one_packet (not yet used) Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:36Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5ae37e44513f4ea867f… ====== radeapclient - preparing packet list use Cleaned-up main. Added a packet list (not yet used) Added new functions: - rc_add_socket - rc_resolve_hostname - rc_send_one_packet (not yet used) These I stole from radclient: - rc_request_types[] array - rc_get_port function - rc_get_code function Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:30Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d0e53431206b432d393… ====== radeapclient - now use the transactions Now load the input data and use it to properly initialize transactions. These are then used to do the EAP-SIM workflow. Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:23Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ceb70b60046409e27cb6… ====== radeapclient - init transactions New functions (not yet used) to initialize transactions, and yank elements from the input list of vps. Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:18Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/994f4c2bcb83430bf539… ====== radeapclient - new structures (input, transactions) New structures added to hold: - input value pairs read from file or stdin. - transactions contexts (similar to radclient's 'rc_request_t'). And new functions (not yet used) to read input vps and load them into a list. Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:13Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3038dbc322998a9e1fb3… ====== radeapclient - use eap context Make use of the previously defined eap context struct. Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:07Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2c627ec4f472476cdce… ====== radeapclient - eap context struct Definition of a structure which will hold the EAP context information. This will also make easier to merge with radclient later on. As requested, small commits on purpose. If they are too small please let me know, I will adjust :) Nicolas C (via Arran Cudbard-Bell)@2015-03-31T02:26:01Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/88c35c59542942956408… ====== New travis apt plugin config structure Arran Cudbard-Bell@2015-03-31T00:01:13Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/92c5685435e577041711… ====== -- This commit summary was generated @2015-04-01T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 31 Mar '15

31 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix for v2 Alan T. DeKok@2015-03-31T18:07:29Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef0dd4cea3f2b83d5ebb… ====== Note recent changes Alan T. DeKok@2015-03-31T17:34:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ea41d85d40627da81db… ====== Revert "Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test." This reverts commit d541351bba3f874bcb9d51483679970981892c49. No longer necessary after previous commit Alan T. DeKok@2015-03-31T17:34:23Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48d2fdf6d9d5af8f6afd… ====== Use SSL_export_keying_material for TLSv1.2 PRF derivation Alan T. DeKok@2015-03-31T17:33:12Z Files modified: * src/modules/rlm_eap/libeap/mppe_keys.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bdff82cdc5bbd6e9079b… ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Manual port of commit 8ac08a4 to v2. Alan T. DeKok@2015-03-31T04:51:09Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d541351bba3f874bcb9d… ====== -- This commit summary was generated @2015-04-01T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 30 Mar '15

30 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Print the attributes EAP-TLS extension attribute we're not going to add Arran Cudbard-Bell@2015-03-30T18:40:35Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/89ae815aa9ce9943101f… ====== -- This commit summary was generated @2015-03-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 30 Mar '15

30 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Arran Cudbard-Bell@2015-03-30T23:42:59Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cc7fb3dc7a8f8d77e676… ====== Print the attributes EAP-TLS extension attribute we're not going to add Arran Cudbard-Bell@2015-03-30T18:41:10Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4c8812448151ce053a5… ====== -- This commit summary was generated @2015-03-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 30 Mar '15

30 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Arran Cudbard-Bell@2015-03-30T23:42:51Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ac08a41f0af1ed1c996… ====== Print the attributes EAP-TLS extension attribute we're not going to add Arran Cudbard-Bell@2015-03-30T18:41:27Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0e4deea55c41256ba51… ====== -- This commit summary was generated @2015-03-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 29 Mar '15

29 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Another analyzer error Arran Cudbard-Bell@2015-03-29T16:37:53Z Files modified: * src/lib/regex.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59ff00fab21bea45f6f2… ====== Build doxygen docs Arran Cudbard-Bell@2015-03-29T16:36:08Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/36c0be76852f9af2fb9c… ====== Clang scan analyzer errors Arran Cudbard-Bell@2015-03-29T16:19:48Z Files modified: * src/main/command.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_ldap/sasl.c * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/163a7ac965a2a8513408… ====== Fail on scan errors Arran Cudbard-Bell@2015-03-29T05:56:35Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cd157372fdf62437dfe… ====== Doxygen Arran Cudbard-Bell@2015-03-29T04:41:02Z Files modified: * src/include/all.mk * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8507cbd4476b69166b04… ====== Attempt to move to travis container infrastructure Seeing as the linux build farm is currently maxed out at 320 concurrent builds Arran Cudbard-Bell@2015-03-29T04:15:58Z Files modified: * .travis.yml * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e25d1294fab30cdb65f2… ====== Initialize raddb_dir, too Alan T. DeKok@2015-03-28T22:56:01Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45d9a0d49ed20893d9e8… ====== Set "nodup" for DHCP sockets Alan T. DeKok@2015-03-27T18:27:07Z Files modified: * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1cac9a9262330c946e7f… ====== Simplify cleanup logic. Debug the packet prior to sending it. Do cleanup_delay on RADIUS Access-Requests and CoA packets. Everything else gets cleaned up immediately. Alan T. DeKok@2015-03-27T18:27:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/993e3e4eaf024b03f6bc… ====== Cleanup DHCP packets immediately Alan T. DeKok@2015-03-27T18:27:04Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfd0dc6aa89eb9132992… ====== No comment in comment issues Alan T. DeKok@2015-03-27T17:11:04Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d611748693549e1e16e8… ====== Set dict_dir Alan T. DeKok@2015-03-27T16:42:07Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/649ffcc9e16f8f0c619e… ====== Minor formatting in tls.c Arran Cudbard-Bell@2015-03-27T16:21:52Z Files modified: * configure * configure.ac * raddb/mods-available/eap * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a63dd2735b8b54a8e9f2… ====== *out is used Alan T. DeKok@2015-03-27T14:38:26Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dba9fe21da8fa5b1321a… ====== Don't crash when using the NULL driver in select queries Arran Cudbard-Bell (via Alan T. DeKok)@2015-03-27T14:38:13Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da3b921199df263ecedd… ====== Merge pull request #939 from mcnewton/v3.1.x-winbind Improve errors on winbind authentication failure Alan DeKok@2015-03-27T14:34:44Z Files modified: * src/modules/rlm_mschap/auth_wbclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/675ec75fa72923a8dcd8… ====== Improve errors on winbind authentication failure This is very nice, as Samba gives us useful messages like Wrong Password [0xC000006A] Account expired [0xC0000193] Must change password [0xC0000224] Account locked out [0xC0000234] when the authentication fails, which are then pushed into Module-Failure-Message so the admin knows exactly what happened. This also now handles password expiry so mschap returns the "change password" trigger. Matthew Newton@2015-03-27T01:02:11Z Files modified: * src/modules/rlm_mschap/auth_wbclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/034944513b351eccda99… ====== Add -D to radwho and radzap Alan T. DeKok@2015-03-27T14:31:01Z Files modified: * src/main/radwho.c * src/main/radzap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/575397d0647da6c75a8a… ====== More dot graphs for state machines Alan T. DeKok@2015-03-26T17:53:15Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b8bc24dac6ca443b99b3… ====== Hyphens Arran Cudbard-Bell@2015-03-26T14:09:13Z Files modified: * share/dictionary.mikrotik Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/005437d9f260c233f165… ====== Update dictionary.mikrotik Update dictionary.mikrotik to have new attributes and values mentioned in Mikrotik wiki: http://wiki.mikrotik.com/index.php?title=Manual:RADIUS_Client/vendor_dictio… Nikolai Kondrashov (via Arran Cudbard-Bell)@2015-03-26T14:05:38Z Files modified: * share/dictionary.mikrotik Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/88332d8e5dc6bae25270… ====== Oops. Define this, too Alan T. DeKok@2015-03-25T23:16:28Z Files modified: * src/include/listen.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6fe518eb02bca4b5bc9b… ====== Freeze proxy sockets on EOL, too. and eol requests only if listener->count > 0 Alan T. DeKok@2015-03-25T23:07:54Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ebfc328692d7ad01059… ====== TCP socket timer limits mean they're marked frozen, not EOL EOL is now only for errors. a frozen socket can still have requests using it. For auth/acct, we can't close the socket until all requests using it have finished. We can't close socket while the client is still sending packets. That's rude. For proxy sockets, most of the same applies. The only difference is that the frozen socket won't be used to proxy new requests. But retransmits will still go out the proxy socket. And replies will still be received from it. Alan T. DeKok@2015-03-25T22:31:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1747b6f026cbf2806449… ====== Freeze the proxy socket on timeout But we don't want to EOL it just yet Alan T. DeKok@2015-03-25T22:31:51Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/114cd12fa5af16fa8ac1… ====== Motorola error message Alan T. DeKok@2015-03-25T22:31:50Z Files modified: * share/dictionary.motorola.wimax Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/849336c73dda97ac2a11… ====== Add systemd unit file for systems that use systemd Arran Cudbard-Bell@2015-03-25T17:39:36Z Files modified: * redhat/freeradius.spec * redhat/radiusd.service Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/530b02a96dc9de40725b… ====== Remove unused assignement Alan T. DeKok@2015-03-25T17:21:00Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ba0af5b68a21ce12014… ====== Allow home server "auth+acct" Alan T. DeKok@2015-03-24T23:50:40Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b17cf2433b479aee3a7c… ====== Better fix for dual home servers Alan T. DeKok@2015-03-24T23:50:39Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5d32f3fbe6d4902ccb8… ====== Use FR_CHANNEL_FAIL / SUCCESS for radmin return codes Alan T. DeKok@2015-03-24T22:13:24Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ca65c5bcabd46f693d7b… ====== Use names instead of numbers for command OK / FAIL And use the same return codes as for the channels Alan T. DeKok@2015-03-24T22:13:20Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4babe22e51ff98108f84… ====== Regularize return codes for radmin commands Alan T. DeKok@2015-03-24T22:13:19Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/798d9a8c4eaf0132827b… ====== Go to status after running a command Alan T. DeKok@2015-03-24T22:13:18Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6629f6e90d808f7f2ae… ====== Use same port for acct if using RadSec Alan T. DeKok@2015-03-24T21:46:25Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2b20849f1a85f4306964… ====== Add option for secret Arran Cudbard-Bell@2015-03-24T21:45:29Z Files modified: * scripts/raduat Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02e1ff5bb3c229b0ddee… ====== Update raduat Arran Cudbard-Bell@2015-03-24T20:09:46Z Files modified: * scripts/raduat Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9b1ac8a033303680959e… ====== Rename fr_connect_pool_delete to fr_connection_pool_free Arran Cudbard-Bell@2015-03-24T17:57:12Z Files modified: * src/include/connection.h * src/main/connection.c * src/modules/rlm_cache/drivers/rlm_cache_memcached/rlm_cache_memcached.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/604144e28b7da6b82b2e… ====== Add reference counter to connection pool to prevent double frees when referenced Arran Cudbard-Bell@2015-03-24T17:57:12Z Files modified: * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a71e5b5ae1f648e08ae8… ====== Cleanup some of the tls code, add doxygen headers etc... Arran Cudbard-Bell@2015-03-24T17:33:12Z Files modified: * src/main/tls.c * src/modules/rlm_eap/libeap/eap_tls.h * src/modules/rlm_eap/libeap/eap_types.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/935bc8fe9d8d6349087e… ====== Fix invalid assert in state.c If there's a previous linked state, we want to assert that the entry can't be *head* of the list not the tail Arran Cudbard-Bell@2015-03-24T17:33:06Z Files modified: * src/main/state.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de4dde44e5c9dea3e72f… ====== Merge pull request #935 from mcnewton/v3.1.x-wbpool Add connection pool to rlm_mschap for wbclient contexts Arran Cudbard-Bell@2015-03-24T01:26:38Z Files modified: * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/970d1b0bc295e51fa36d… ====== Add connection pool to rlm_mschap for wbclient contexts Matthew Newton@2015-03-24T00:13:45Z Files modified: * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b24cf26da337fc234199… ====== Some libldap packagers define LDAP_VENDOR_VERSION_PATCH as X ... thanks for that ltb-project. Arran Cudbard-Bell@2015-03-24T00:08:41Z Files modified: * src/modules/rlm_ldap/ldap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73a7c7e917fa84b428a9… ====== Print proper error for unknown attributes in rlm_ldap mapping sections Arran Cudbard-Bell@2015-03-24T00:07:26Z Files modified: * src/modules/rlm_ldap/attrmap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a95ff7357ee3ae70340b… ====== Proper way of getting TCP connection errors Arran Cudbard-Bell@2015-03-23T16:16:45Z Files modified: * src/lib/socket.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/abbe41a72cc10905767c… ====== Docs for request_will_proxy Arran Cudbard-Bell@2015-03-22T22:55:58Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/345519350e77d1d5fa3f… ====== Fixup formatting and logging in rlm_chap Arran Cudbard-Bell@2015-03-22T22:52:50Z Files modified: * src/modules/rlm_chap/rlm_chap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/634e77807f906d7424fc… ====== Minor changes to meet v3.0.x Alan T. DeKok@2015-03-22T14:11:08Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/44786dfcd7e8158edf7c… ====== Make messages consistent with v3.0.x Alan T. DeKok@2015-03-22T14:04:54Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7719752618f63190e6e0… ====== Use fr_syserror Alan T. DeKok@2015-03-22T14:03:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/201de79e8f3e0b3f800d… ====== Cleanup NONNULL According to the compiler documentation putting attributes before the name and argument list of a function definition is not officially supported. Even for static functions. The proper way is to add them add the end of the declaration. This certainly makes doxygen, and my code editor happier. Arran Cudbard-Bell (via Alan T. DeKok)@2015-03-22T13:58:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c1c235cece131ca577e… ====== Don't use NONNULL here Alan T. DeKok@2015-03-22T13:56:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5314e9b50dcd6f0983d… ====== initialize child state before printing it Alan T. DeKok@2015-03-22T13:54:48Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eeccdca5058ef34d592d… ====== Move request_process_timer() to request_max_time() which simplifies it a lot Alan T. DeKok@2015-03-22T13:54:47Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4066eb441e5268eb9f67… ====== Add CHECK_FOR_STOP macro to state machine functions to check if the request should be stopped Alan T. DeKok@2015-03-22T13:54:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e7a79d3d517a0f8eaaab… ====== Move coa_separate checks to a macro Alan T. DeKok@2015-03-22T13:54:44Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f499cc53281db0b59d9f… ====== coa_separate() doesn't need to take an action. rename coa_timer to coa_retransmit, which is saner Alan T. DeKok@2015-03-22T13:54:42Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7534543938431bad66f… ====== Move cleanup_delay calculations to cleanup_delay function Alan T. DeKok@2015-03-22T13:54:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec80ee8cf3bb9fcb329b… ====== Move response_delay calculations to response_delay function Alan T. DeKok@2015-03-22T13:54:39Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6480dddfe47fae07072b… ====== process_timer shouldn't need to handle child PROXIED state the rest of the state machine takes care of that. Alan T. DeKok@2015-03-22T13:54:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d61ada0d5e57d5407a34… ====== Rely on eol_listener to STOP requests when a socket goes away Alan T. DeKok@2015-03-22T13:54:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/763d9ae4732540bc7f8d… ====== Document process timer function Alan T. DeKok@2015-03-22T13:54:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/29b72c30e2d560c26194… ====== request_common is now only request_process_timer Alan T. DeKok@2015-03-22T13:54:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4220b3b46294c1b82aed… ====== Move complaint for duplicate packets to its own function Which should start simplifying the code Alan T. DeKok@2015-03-22T13:54:34Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d8bdfb9e138a2478f36… ====== Convert some returns to break for style where they're the same Alan T. DeKok@2015-03-22T13:54:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ef4c96ccbf059e15389… ====== Abstract "proxy reply too late" to separate function Alan T. DeKok@2015-03-22T13:54:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8690c70d16fdb073f46f… ====== set request->process = request_response_delay immediately Alan T. DeKok@2015-03-22T13:54:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e537799c7bd5c4f2191… ====== Only try and build with wbclient support if we have the headers *AND* the functions (which act as a version check) Arran Cudbard-Bell@2015-03-22T03:26:38Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/462ba700c00a730d6347… ====== Doxygen Arran Cudbard-Bell@2015-03-22T02:32:05Z Files modified: * src/lib/socket.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/27b7cc46344879f12a81… ====== Install libwebclient-dev in CIT Arran Cudbard-Bell@2015-03-22T00:58:14Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e7bafc9ec2580c29a6e… ====== Use the correct number of fields for stop inserts Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:54Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/oracle/queries.conf * raddb/mods-config/sql/main/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84c6f5a926a423a951f8… ====== Make proxy to virtual server match callers for process_proxy_reply() Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:50Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/239eeb361293d0516605… ====== Remove STATE_MACHINE_DECL for functions, and add dot graphs To document the state machine of the server Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45d980d1abbc5bb08e30… ====== Merge pull request #930 from mcnewton/v3.1.x-winbind mschap auth directly to winbind via libwbclient Arran Cudbard-Bell@2015-03-21T23:15:45Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa51a3a48006fe719008… ====== Add mschap module winbind authentication This allows AD/Samba authentication against winbind via libwbclient without having to use ntlm_auth. Matthew Newton@2015-03-21T22:54:59Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bec88d5f5feada809fd5… ====== Configure scripts for libwbclient Matthew Newton@2015-03-21T22:54:50Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab80b4dd9726b443c649… ====== Create rlm_mschap.h (split out from rlm_mschap.c) Matthew Newton@2015-03-20T01:08:51Z Files modified: * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cdc3f37ac1cf45041226… ====== Change boolean do_ntlm_auth to enum MSCHAP_AUTH_METHOD Matthew Newton@2015-03-20T01:08:46Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84132d35f3bb5c5cc363… ====== Fixup some comments in fr_cursor_insert Arran Cudbard-Bell@2015-03-21T15:36:38Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ffe5b70c84b44ff9997… ====== Invalid assert Arran Cudbard-Bell@2015-03-20T19:15:50Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e807428c6045eeba929b… ====== Always initialise sockfd (not needed, but compiler complains) Arran Cudbard-Bell@2015-03-20T19:14:05Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12f54245f9df6abb03be… ====== Fix corner case where cursor.next wasn't fixed up correctly on fr_cursor_insert Arran Cudbard-Bell@2015-03-20T17:52:08Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b969473a5cc2193a334a… ====== Fixup cursor.last if we removed the vp it was referring to Arran Cudbard-Bell@2015-03-20T17:34:37Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/339f0b20bf2df8989615… ====== Last should be set to the VP we just inserted Arran Cudbard-Bell@2015-03-20T17:34:14Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c180cc6a14aa7ea4d1d… ====== Formatting Arran Cudbard-Bell@2015-03-20T17:32:28Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be45b1ad8693d3a56214… ====== Add support for writing to TCP, UDP and Unix sockets in linelog Arran Cudbard-Bell@2015-03-20T16:34:37Z Files modified: * raddb/mods-available/linelog * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97c3e8b01339d66a84a3… ====== Create a standard set of socket connection functions for UNIX/TCP/UDP We should eventually add SCTP too, but the OSX kernel doesn't support it yet *boo*, and I don't have time to compile the 3rd party kext. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/tcp.h * src/lib/all.mk * src/lib/misc.c * src/lib/socket.c * src/lib/tcp.c * src/lib/unix.c * src/main/listen.c * src/main/radclient.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e850301ffd3a43a1808… ====== Move fr_nonblock and fr_blocking to misc.c. They're useful for files as well as sockets. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/misc.c * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ace9ebacf2f07cbfdfff… ====== Merge pull request #929 from spaetow/patch-1 Update proxy.conf Arran Cudbard-Bell@2015-03-18T23:48:48Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1926b0cfa954ab5d50a7… ====== Update proxy.conf Add a short description for the dynamic option in proxy.conf Stefan Paetow@2015-03-18T23:47:17Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72e240f27467862fc649… ====== document sample ABFAb RP client Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:27Z Files modified: * raddb/sites-available/abfab-tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/042343e0c385147a21d4… ====== dynamic = yes not true The config parser doesn't seem to accept dynamic = true, but only dynamic = yes. Update error message to provide useful description. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:22Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/095c136c4cad4551c793… ====== Updates to abfab policy * Move policy from pre-proxy to authorize because we need to run some of the updates prior to realm because they now influence generated trust router requests. * Include setting reply messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:18Z Files modified: * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tr-idp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3061adacc53d58a4400… ====== trustrouter: permit trust-router-COI and error handling Improve the error handling of the trust router integration. Set Error-Cause to indicate a proxy routing failure if we fail to get a realm via trustrouter. Include the error back from the trust router in Reply-Message. Set trust-router-coi in the trust router code rather than depending on unlang to do so. Permit a previously specified trust-router-coi in the request to override the community in the configuration. Unlang is responsible for performing any authorization checks regarding community. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:13Z Files modified: * src/include/radius.h * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb3c01445169e23bfca6… ====== Permit Error-Cause in access reject messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:26:56Z Files modified: * raddb/mods-config/attr_filter/access_reject Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a6d755ef967bccb8dde… ====== Add user configurable busy_timeout to rlm_sql_sqlite driver Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * raddb/mods-available/sql * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5bbdbd6f8b66c5bb5182… ====== Convert comment to doxygen Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f91d8bfcd9aeffd12fd1… ====== Split out unix socket connection function Arran Cudbard-Bell@2015-03-18T18:03:18Z Files modified: * src/include/libradius.h * src/lib/all.mk * src/lib/unix.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20a4082414305f544c52… ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:29:36Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e592703873fca92b6fdd… ====== -- This commit summary was generated @2015-03-30T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 29 Mar '15

29 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix error message to be correct Alan T. DeKok@2015-03-29T16:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== -- This commit summary was generated @2015-03-30T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0