March 2015 - Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 18 Mar '15

18 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:28:32Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddabab5df504e100b149… ====== -- This commit summary was generated @2015-03-19T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 17 Mar '15

17 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Invalid assert in _request_free Parent is set for fake requests too (Not just divorced CoA/Disconnect ones). It'd complicate the code more to require parent to be set to NULL before freeing the request, and it'd be pretty pointless. Arran Cudbard-Bell@2015-03-17T18:40:04Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c28426dcb9f7a0f63a2d… ====== -- This commit summary was generated @2015-03-18T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 17 Mar '15

17 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Invalid assert in _request_free Parent is set for fake requests too (Not just divorced CoA/Disconnect ones). It'd complicate the code more to require parent to be set to NULL before freeing the request, and it'd be pretty pointless. Arran Cudbard-Bell@2015-03-17T18:40:45Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb1c7b44ff8c436a0f80… ====== -- This commit summary was generated @2015-03-18T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Using Session State
by Sam Hartman 17 Mar '15

17 Mar '15

Hi. So, as we've discussed previously, setting use_tunneled_reply is really kind of undesirable with methods like mschapv2 that generate their own keys. Also, it tends to do undesirable things and expose the channel binding messages to the outer reply. based on the documentation it sounds like I ought to be able to use the session-state list to move attributes between the inner tunnel and outer tunnel. however, in inner-tunnel's post auth section update session-state { session-state:User-Name = &Request:User-Name } returns noop. First, should session-state work for this purpose? If so, what am I doing wrong?

2 2

Commit report for v3.1.x branch
by announce＠freeradius.org 15 Mar '15

15 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Mark groupobj membership filter as being expanded Arran Cudbard-Bell@2015-03-15T23:43:44Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d14c3a912ff9a19dba48… ====== Create equivalent pairs for all attributes Arran Cudbard-Bell@2015-03-15T06:11:01Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d299181aafdd2d5b560… ====== -- This commit summary was generated @2015-03-16T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 15 Mar '15

15 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Mark groupobj membership filter as being expanded Arran Cudbard-Bell@2015-03-15T23:44:02Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb8762382f14f8c5b460… ====== Update ChangeLog Arran Cudbard-Bell@2015-03-15T20:40:48Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/552eccf62f18ddb09fef… ====== Create equivalent pairs for all attributes Arran Cudbard-Bell@2015-03-15T06:11:13Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea781e89e249954f0765… ====== -- This commit summary was generated @2015-03-16T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 14 Mar '15

14 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Create CONF_PAIRs in client CONF_SECTIONs for string type fields. This is needed by the "%{client:}" xlat Arran Cudbard-Bell@2015-03-14T22:05:37Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae986fd2c4dab33e5f8e… ====== deprecated nastype mucks up dynamic client debug output Arran Cudbard-Bell@2015-03-14T21:14:15Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/80d84419d8a343de5d24… ====== Doxygen for state machine Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-14T02:28:55Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2f2f5daf09e0f0a704a0… ====== Partial linelog escaping tests Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/tests/modules/linelog/linelog-escapes.attrs * src/tests/modules/linelog/linelog-escapes.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46ea332477a5a3f6ead8… ====== Junk test header Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/tests/modules/linelog/linelog-delim.unlang * src/tests/modules/linelog/linelog-multi.unlang * src/tests/modules/linelog/linelog.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23384d3c20ae3fa899b8… ====== CID 1288496 Arran Cudbard-Bell@2015-03-14T02:24:47Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7c5ca8d9fd706970799… ====== -- This commit summary was generated @2015-03-15T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 14 Mar '15

14 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Create CONF_PAIRs in client CONF_SECTIONs for string type fields. This is needed by the "%{client:}" xlat Arran Cudbard-Bell@2015-03-14T22:05:54Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d26e84884f149adc51c1… ====== deprecated nastype mucks up dynamic client debug output Arran Cudbard-Bell@2015-03-14T22:05:50Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45f3dd1fa3eb5b0938aa… ====== CID 1288496 Arran Cudbard-Bell@2015-03-14T02:25:56Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/46056c1205109c6a1400… ====== -- This commit summary was generated @2015-03-15T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

rlm_sql_ocioracle driver v. 0.1
by Ge＠＠ru 14 Mar '15

14 Mar '15

Hi, in attachment patch to add rlm_sql_ocioracle driver to freeradius 2.1.x tree (it seems work yet on 3.x tree). This drivers permit to use function/procedure with CURSOR (through :Ret_Cursor string) like for example: group_membership_query = "begin :Ret_Cursor := \ pkRadius.group_membership_query('%{SQL-User-Name}'); end;" TODO for next release: - add support to oracle connection pool instead of open a new connection for every socket on startup; - enhancement on handle error (through error callback) on do query; - add documentation. Module need oracle instantclient library and ocilib library (http://orclib.sourceforge.net/) Good luck to rlm_sql_ocioracle driver!! Geaaru

2 5

Commit report for v3.0.x branch
by announce＠freeradius.org 13 Mar '15

13 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Not a pointer Arran Cudbard-Bell@2015-03-13T22:30:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e1377214e3a1a1338f0… ====== Doxygen for state machine Alan T. DeKok@2015-03-13T22:25:43Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7195ecbeca6d5ebb2af… ====== typos Alan T. DeKok@2015-03-13T22:25:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a36832b00702a117ffd… ====== Typos Arran Cudbard-Bell@2015-03-13T20:45:13Z Files modified: * src/include/listen.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dcfa128051826c8ca290… ====== But it's been config_items for N number of decades! Arran Cudbard-Bell@2015-03-13T20:44:39Z Files modified: * src/include/radiusd.h * src/main/acct.c * src/main/auth.c * src/main/client.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/threads.c * src/main/tls.c * src/main/tmpl.c * src/main/util.c * src/modules/proto_dhcp/dhcpd.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_eap/types/rlm_eap_leap/rlm_eap_leap.c * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_yubikey/decrypt.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/993431657b79d6e53242… ====== Cleanup the REQUEST structure Document a few bits of process.c Split out listen structures into their own header Arran Cudbard-Bell@2015-03-13T20:38:13Z Files modified: * src/include/listen.h * src/include/process.h * src/include/radiusd.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/abce6d63044f0670acf1… ====== Formatting Arran Cudbard-Bell@2015-03-13T18:41:16Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/408c2d1f0e6e55142665… ====== initialize child state before printing it Alan T. DeKok@2015-03-13T18:22:12Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0387ca90d5a4d728eaa5… ====== Move request_process_timer() to request_max_time() which simplifies it a lot Alan T. DeKok@2015-03-13T18:22:12Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/19586270617df8ea586c… ====== Add CHECK_FOR_STOP macro to state machine functions to check if the request should be stopped Alan T. DeKok@2015-03-13T18:22:07Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3591cbb60d6094846e52… ====== Move coa_separate checks to a macro Alan T. DeKok@2015-03-13T18:20:22Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2cf2525ea9acade8717d… ====== coa_separate() doesn't need to take an action. rename coa_timer to coa_retransmit, which is saner Alan T. DeKok@2015-03-13T18:20:17Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23fed2bf6ff8d03e291b… ====== Move cleanup_delay calculations to cleanup_delay function Alan T. DeKok@2015-03-13T14:35:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6907593edde125c90d5b… ====== Move response_delay calculations to response_delay function Alan T. DeKok@2015-03-13T14:33:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8059ffb0aa7f8061aa27… ====== process_timer shouldn't need to handle child PROXIED state the rest of the state machine takes care of that. Alan T. DeKok@2015-03-13T14:27:42Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/afa7eed4efe294b09ca1… ====== Rely on eol_listener to STOP requests when a socket goes away Alan T. DeKok@2015-03-13T14:20:25Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02bf9cb89c4dd0f179b8… ====== Document process timer function Alan T. DeKok@2015-03-13T14:16:55Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a48cc045aa4be8b469c… ====== request_common is now only request_process_timer Alan T. DeKok@2015-03-13T04:29:53Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9689423de8d6b7cf5cd9… ====== Move complaint for duplicate packets to its own function Which should start simplifying the code Alan T. DeKok@2015-03-13T04:27:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/720c157bfbc8d0eeb616… ====== Convert some returns to break for style where they're the same Alan T. DeKok@2015-03-13T04:16:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6613f453f16582c5a933… ====== Abstract "proxy reply too late" to separate function Alan T. DeKok@2015-03-13T04:12:50Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1eab7fc303f630e35737… ====== set request->process = request_response_delay immediately Alan T. DeKok@2015-03-13T04:02:23Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/90612302d21ab35889ee… ====== -- This commit summary was generated @2015-03-14T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0