March 2015 - Freeradius-Devel - lists.freeradius.org

Commit report for v3.1.x branch
by announce＠freeradius.org 13 Mar '15

13 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Not a pointer Arran Cudbard-Bell@2015-03-13T22:29:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/576d1e0dcdfa150ac7f2… ====== Typos Arran Cudbard-Bell@2015-03-13T20:45:19Z Files modified: * src/include/listen.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0007fc8ee7c4c297cd0f… ====== But it's been config_items for N number of decades! Arran Cudbard-Bell@2015-03-13T20:41:51Z Files modified: * src/include/radiusd.h * src/main/acct.c * src/main/auth.c * src/main/client.c * src/main/listen.c * src/main/process.c * src/main/realms.c * src/main/threads.c * src/main/tls.c * src/main/tmpl.c * src/main/util.c * src/modules/proto_dhcp/dhcpd.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_chbind.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_gtc/rlm_eap_gtc.c * src/modules/rlm_eap/types/rlm_eap_leap/rlm_eap_leap.c * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_yubikey/decrypt.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f17d949a2b5426a4aa89… ====== Cleanup the REQUEST structure Document a few bits of process.c Split out listen structures into their own header Arran Cudbard-Bell@2015-03-13T20:37:16Z Files modified: * src/include/listen.h * src/include/process.h * src/include/radiusd.h * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d12e001b8d2c442f207… ====== Formatting Arran Cudbard-Bell@2015-03-13T18:41:49Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f73db71b4b5a5218d3b… ====== -- This commit summary was generated @2015-03-14T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 13 Mar '15

13 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Formatting Arran Cudbard-Bell@2015-03-13T18:41:29Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/36e71f5c5088525476ec… ====== -- This commit summary was generated @2015-03-14T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 12 Mar '15

12 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Build without threads, too Alan T. DeKok@2015-03-12T17:36:11Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/03cbc8902196cd2f0e55… ====== Alwauys build with ASSERT_MASTER Alan T. DeKok@2015-03-12T17:34:57Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f557e2163f7bd6d8c1ed… ====== Better fix for last commit Alan T. DeKok@2015-03-12T16:53:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/882f61d5265093020f1e… ====== Set the reply code from the proxy code Alan T. DeKok@2015-03-12T16:43:31Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22737d11a85772f01a0d… ====== Always build with we_are_master() Alan T. DeKok@2015-03-12T16:14:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5631b581ab5f99671f5… ====== Always call request_finish() after proxy reply, or proxy no reply. Previously, if the Post-Proxy-Type returned "handled" or "fail", it wouldn't reply to the client. This is probably not a good idea. Alan T. DeKok@2015-03-12T16:01:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcdf2b2be98074ca9ced… ====== Use correct value for Auth-Type = Reject Alan T. DeKok@2015-03-12T16:01:17Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f6b91ca327300f3430a4… ====== Remove unnecessary comment Alan T. DeKok@2015-03-12T16:00:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ebac2dc196008596d443… ====== When we originate CoA packets, discard them when we're done We don't need to run request_finish Alan T. DeKok@2015-03-12T16:00:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/801c3f7aef3bc5c7c0c0… ====== Remove redundant argument to cleanup_delay_init Alan T. DeKok@2015-03-12T16:00:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/489f0e319a19dbd9df23… ====== Re-arrange calls to setup_post_proxy_fail So they all follow the same pattern Alan T. DeKok@2015-03-12T16:00:26Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/47122893761099f1efda… ====== -- This commit summary was generated @2015-03-13T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 12 Mar '15

12 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Build without threads, too Alan T. DeKok@2015-03-12T17:35:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/40adcc0a2b0499b20ef3… ====== Alwauys build with ASSERT_MASTER Alan T. DeKok@2015-03-12T17:34:43Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0832d9ba19746bee8991… ====== Better fix for last commit Alan T. DeKok@2015-03-12T16:52:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f337366ee9cc84a18b29… ====== Set the reply code from the proxy code Alan T. DeKok@2015-03-12T16:43:09Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d26fec0c017465d44c2… ====== Always build with we_are_master() Alan T. DeKok@2015-03-12T16:14:46Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a315d89098e58a5826c… ====== Always call request_finish() after proxy reply, or proxy no reply. Previously, if the Post-Proxy-Type returned "handled" or "fail", it wouldn't reply to the client. This is probably not a good idea. Alan T. DeKok@2015-03-12T15:57:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66c47f0536dc937ef96c… ====== Use correct value for Auth-Type = Reject Alan T. DeKok@2015-03-12T15:55:18Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/783675db56a1de305309… ====== Remove unnecessary comment Alan T. DeKok@2015-03-12T15:52:17Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e38d05e639e8336ec451… ====== When we originate CoA packets, discard them when we're done We don't need to run request_finish Alan T. DeKok@2015-03-12T15:48:25Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0da38bef8cdd8d0f36a0… ====== Remove redundant argument to cleanup_delay_init Alan T. DeKok@2015-03-12T15:46:12Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc4719a7c02c1565835c… ====== -- This commit summary was generated @2015-03-13T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 11 Mar '15

11 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Revert "Enable state machine tracing for debug builds on RDEBUG3" Arran Cudbard-Bell@2015-03-11T21:47:14Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62c181e8d8013803eed7… ====== Cast base to char Because apparently the format checker is too stupid to do the implicit cast Arran Cudbard-Bell@2015-03-11T20:35:05Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f080bf9784283786e80… ====== Magic values aren't fun Arran Cudbard-Bell@2015-03-11T19:47:00Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8199374392e3723ec4f… ====== Enable state machine tracing for debug builds on RDEBUG3 Arran Cudbard-Bell@2015-03-11T19:45:00Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16d62c7d8fba8bc74543… ====== More parentheses Arran Cudbard-Bell@2015-03-11T19:17:17Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/365d400663330cf8270e… ====== Rename value_pair_tmpl_t to vp_tmpl_t Like vp_cursor_t Arran Cudbard-Bell@2015-03-11T18:25:37Z Files modified: * src/include/conffile.h * src/include/map.h * src/include/parser.h * src/include/radiusd.h * src/include/tmpl.h * src/main/conffile.c * src/main/evaluate.c * src/main/map.c * src/main/modcall.c * src/main/pair.c * src/main/parser.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9e45802e2f5bc16273a5… ====== Add support for logging multiple attribute instances Values are separated by the line delimiter, and the write in combined with writev Arran Cudbard-Bell@2015-03-11T18:23:02Z Files modified: * src/main/tmpl.c * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/linelog-multi.attrs * src/tests/modules/linelog/linelog-multi.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/51d1b9a72858ed13a77d… ====== -- This commit summary was generated @2015-03-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 11 Mar '15

11 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Don't touch request after calling request_finish() Alan T. DeKok@2015-03-11T22:52:58Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/74b61aef9c07232d914e… ====== Move unlinking to assertions Alan T. DeKok@2015-03-11T22:39:45Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7633a8fe826364e1510… ====== Ensure log_name is talloc'd Alan T. DeKok@2015-03-11T21:59:33Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ec04db6d28bd3ca01c9… ====== Revert "Enable state machine tracing for debug builds on RDEBUG3" This reverts commit fd2c20480503ebbe2a97775974c2d28e4c32cfd4. Arran Cudbard-Bell@2015-03-11T21:46:05Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e812c1b1567d672e213d… ====== We don't need this many ASSERT_MASTER Alan T. DeKok@2015-03-11T21:33:28Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd348bf8f14967810044… ====== Update log_name after we've discovered the port Alan T. DeKok@2015-03-11T21:33:28Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a7db7af57aecfab770e… ====== Magic values aren't fun Arran Cudbard-Bell@2015-03-11T19:46:48Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1e6c1b652514bb48656e… ====== Enable state machine tracing for debug builds on RDEBUG3 Arran Cudbard-Bell@2015-03-11T19:44:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd2c20480503ebbe2a97… ====== Rename value_pair_tmpl_t for v3.0.x too, else merging with be a nightmare Arran Cudbard-Bell@2015-03-11T18:29:32Z Files modified: * src/include/conffile.h * src/include/map.h * src/include/parser.h * src/include/radiusd.h * src/include/tmpl.h * src/main/conffile.c * src/main/evaluate.c * src/main/map.c * src/main/modcall.c * src/main/pair.c * src/main/parser.c * src/main/tmpl.c * src/main/xlat.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21f8f055528b226c41be… ====== Fix uses of cleanup_delay_init() and child threading Alan T. DeKok@2015-03-11T17:10:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c705418a7dd903b18c05… ====== Rename option to debug level Alan T. DeKok@2015-03-11T15:05:49Z Files modified: * src/include/radiusd.h * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5811451f4413b41a200… ====== -- This commit summary was generated @2015-03-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

"authorize" etc. in v3.1
by Alan DeKok 11 Mar '15

11 Mar '15

The “authorize”, etc. sections are increasingly mis-named. After some discussion with Arran, we’ve come up with what seems like a better approach. I’d like to get other peoples feedback on the suggested design. The idea is to get rid of the randomly named “authorize”, “authenticate”, etc. sections. Instead, we will have a standard set of names. These names are predictable, which is good. The new names can be mapped (hand-waving here) to the old methods, so upgrading from 3.0 to 3.1 won’t require major changes to the config. The idea is to use the following naming scheme: recv foo — run this section when receiving a packet “foo”. process foo - run this section to process a packet “foo” send foo - run this section before sending a packet “foo” The mapping between the new types and old is as follows: recv Access-Request == authorize process Access-Request == authenticate (mostly) send Access-Accept == post-auth send Access-Challenge == no matching section send Access-Reject == Post-Auth-Type Reject recv Accounting-Request == preacct process Accounting-Request == accounting send Accounting-Request == no matching section For proxying, we no longer have pre-proxy and post-proxy, instead we have: send Access-Request == pre-proxy recv Access-Accept == post-proxy recv Access-Reject == post-proxy (oops, that’s probably not a good idea) recv Access-Challenge == post-proxy (oops again) send Accounting-Request = pre-proxy recv Accounting-Reply == post-proxy This suggestion isn’t entirely perfect. The “authenticate” section is really a wrapper for each Auth-Type section. We need to find a way to address that. There’s also the Autz-Type section, which exists, but is very weird. Can it just go away? Does anyone use it? There’s also the “session” section. It doesn’t match the above naming scheme. Maybe we need something else? And what about fail and timeouts? e.g. “no reply to proxied request” should probably be: timeout Access-Request ??? Or “no live home server” could be: fail Access-Request? I’m leaning towards that method, instead of the existing Post-Proxy-Type Fail, etc. That method is confusing for end users, and hard to code. e.g. Why is “fail” inside of post-proxy? Is Post-Proxy-Type Fail run for normal proxying, because it’s inside of the post-proxy section? It not, why not? These things are hard to explain. If, instead, we had consistent names, it becomes trivial to know what to do. It becomes trivial to know what the names are, and what each section does. I *believe* we can set up aliases, etc. which will map the new method to the old one. So no one has to butcher their configuration for 3.1. BUT the benefit of using the new naming scheme is legion. The code becomes MUCH simpler, as does the configuration. Comments? Stones? Alan DeKok.

6 11

Commit report for v3.0.x branch
by announce＠freeradius.org 10 Mar '15

10 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update Aruba dictionary (from ClearPass 6.5.0) Alexis La Goutte (via Arran Cudbard-Bell)@2015-03-10T21:41:43Z Files modified: * share/dictionary.aruba Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a94a3e5515d24cc5bd7… ====== Simplify stats counting Alan T. DeKok@2015-03-10T17:31:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eef2324c481ab3fcceec… ====== More assertions on free request Alan T. DeKok@2015-03-10T16:20:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ed35a01b22d5b0da12b… ====== md4 == nt Alan T. DeKok@2015-03-10T14:55:15Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c9dfd26804df2ee87f1… ====== -- This commit summary was generated @2015-03-11T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 10 Mar '15

10 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add support for custom delimiters in linelog Arran Cudbard-Bell@2015-03-10T22:27:10Z Files modified: * raddb/mods-available/linelog * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/linelog-delim.attrs * src/tests/modules/linelog/linelog-delim.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/16ab1f6a599e62e1af4a… ====== Merge pull request #923 from alagoutte/master Update Aruba dictionary (from ClearPass 6.5.0) Arran Cudbard-Bell@2015-03-10T21:24:27Z Files modified: * share/dictionary.aruba Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb6d2ac5ca8eab761152… ====== Update Aruba dictionary (from ClearPass 6.5.0) Alexis La Goutte@2015-03-10T21:16:56Z Files modified: * share/dictionary.aruba Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/629b5a5df0d9d73df497… ====== Simplify stats counting Alan T. DeKok@2015-03-10T18:47:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4927ecf732328ba4540c… ====== More assertions on free request Alan T. DeKok@2015-03-10T18:47:40Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dfdcd9eded4f73bd58cf… ====== md4 == nt Alan T. DeKok@2015-03-10T18:47:39Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5f95c0604df1ab207ee… ====== Fix Cisco attributes. Fixes #921 Alan T. DeKok@2015-03-10T18:47:29Z Files modified: * share/dictionary.cisco.asa Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37620296eb862aedafe8… ====== -- This commit summary was generated @2015-03-11T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 10 Mar '15

10 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== md5 == nt Alan T. DeKok@2015-03-10T14:54:44Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cafd478b805c923bd6aa… ====== -- This commit summary was generated @2015-03-11T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0