- Freeradius-Devel - lists.freeradius.org

make test in master fail - json
by Matthew Newton 15 Sep '15

15 Sep '15

Debian wheezy, make test in master (19d03eeb44c66e2) fails: Failed evaluating jpath: Invalid cast from integer64 to integer Comment out tests 31, 32, 33 and 34 from tests/modules/json/eval.unlang and all is OK. There are comments there something about json-c < 0.10. This is json-c 0.10 (debian 0.10-1.2), so I guess it could be that 0.10 is broken as well? Or just something in flux in master. $ uname -a Linux elk 3.2.0-4-amd64 #1 SMP Debian 3.2.68-1+deb7u3 x86_64 GNU/Linux Matthew Mon Sep 14 22:51:26 2015 : Debug: (0) update request { Mon Sep 14 22:51:26 2015 : Debug: (0) &Tmp-String-0 := "[9223372036854775807, -9223372036854775807, 18446744073709551615, [ 21474 83647, -2147483647, 4294967295, ] ]" Mon Sep 14 22:51:26 2015 : Debug: (0) --> overwriting '{\"my_array\": [0, 1, 2, 3, 4, 5], \"my_object\": { \"foo\": \"bar\", \" num\" : 42 }, \"num\": 99, \"double\": 5.9, \"null\": null, \"bool_true\": true, \"bool_false\": false }' with '[9223372036854775807, -92 23372036854775807, 18446744073709551615, [ 2147483647, -2147483647, 4294967295, ] ]' Mon Sep 14 22:51:26 2015 : Debug: (0) } # update request = noop Mon Sep 14 22:51:26 2015 : Debug: (0) redundant (null) { Mon Sep 14 22:51:26 2015 : Debug: (0) group { Mon Sep 14 22:51:26 2015 : Debug: (0) map json &Tmp-String-0 { Mon Sep 14 22:51:26 2015 : ERROR: (0) Failed evaluating jpath: Invalid cast from integer64 to integer Mon Sep 14 22:51:26 2015 : Debug: (0) } # map json &Tmp-String-0 = fail Mon Sep 14 22:51:26 2015 : Debug: (0) } # group = fail Mon Sep 14 22:51:26 2015 : Debug: (0) modsingle[authorize]: calling noop (rlm_always) for request 0 Mon Sep 14 22:51:26 2015 : Debug: (0) modsingle[authorize]: returned from noop (rlm_always) for request 0 Mon Sep 14 22:51:26 2015 : Debug: (0) [noop] = noop Mon Sep 14 22:51:26 2015 : Debug: (0) } # redundant (null) = noop Mon Sep 14 22:51:26 2015 : Debug: (0) if (noop || (&Tmp-Integer-0 == 4294967295)) { Mon Sep 14 22:51:26 2015 : Debug: (0) if (noop || (&Tmp-Integer-0 == 4294967295)) -> TRUE Mon Sep 14 22:51:26 2015 : Debug: (0) if (noop || (&Tmp-Integer-0 == 4294967295)) { Mon Sep 14 22:51:26 2015 : Debug: (0) policy test_pass { Mon Sep 14 22:51:26 2015 : Debug: (0) update control { Mon Sep 14 22:51:26 2015 : Debug: (0) EXPAND %{expr:%{%{control:Tmp-String-8}:-0} + 1} Mon Sep 14 22:51:26 2015 : Debug: (0) --> 32 Mon Sep 14 22:51:26 2015 : Debug: (0) &Tmp-String-8 := "32" Mon Sep 14 22:51:26 2015 : Debug: (0) --> overwriting '31' with '32' Mon Sep 14 22:51:26 2015 : Debug: (0) &Auth-Type := Accept Mon Sep 14 22:51:26 2015 : Debug: (0) --> overwriting 'Accept' with 'Accept' Mon Sep 14 22:51:26 2015 : Debug: (0) } # update control = noop Mon Sep 14 22:51:26 2015 : Debug: (0) } # policy test_pass = noop Mon Sep 14 22:51:26 2015 : Debug: (0) } # if (noop || (&Tmp-Integer-0 == 4294967295)) = noop Mon Sep 14 22:51:26 2015 : Debug: (0) ... skipping else for request 0: Preceding "if" was taken Mon Sep 14 22:51:26 2015 : Debug: (0) map json &Tmp-String-0 { Mon Sep 14 22:51:26 2015 : ERROR: (0) Failed evaluating jpath: Invalid cast from integer64 to integer Mon Sep 14 22:51:26 2015 : Debug: (0) } # map json &Tmp-String-0 = fail Mon Sep 14 22:51:26 2015 : Debug: (0) } # authorize = fail Mon Sep 14 22:51:26 2015 : Debug: (0) Using Post-Auth-Type Reject Mon Sep 14 22:51:26 2015 : Debug: (0) Post-Auth-Type sub-section not found. Ignoring. Mon Sep 14 22:51:26 2015 : Debug: (0) } # server default Mon Sep 14 22:51:26 2015 : Debug: (0) Virtual server sending reply Access-Reject Output file build/tests/modules/json/eval.attrs does not match attributes in filter build/tests/modules/json/eval.attrs (Attribute value "Response-Packet-Type = Access-Reject" didn't match filter: Response-Packet-Type == Access-Accept) # build/tests/modules/json/eval.log MODULE_TEST_DIR=src/tests/modules/json/ MODULE_TEST_UNLANG=src/tests/modules/json/eval.unlang build/make/jlibtool --quiet --mode=execute ./build/bin/local/unittest -D share -d src/tests/modules/ -i build/tests/modules/json/eval.attrs -f build/tests/modules/json/eval.attrs -xx -- Matthew Newton, Ph.D. <mcn4(a)le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp(a)le.ac.uk>

2 4

Commit report for v3.0.x branch
by announce＠freeradius.org 15 Sep '15

15 Sep '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Missed slash Arran Cudbard-Bell@2015-09-15T23:05:08Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a9c2d457e8fc56885a82… ====== Remove extraneous debug Alan T. DeKok@2015-09-15T18:01:30Z Files modified: * src/lib/filters.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8aa6fc5104cfcf490bd5… ====== Package memcached Arran Cudbard-Bell@2015-09-15T16:15:26Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2be6577fb308c436e708… ====== Revert "Include rlm_cache_memcached in spec file" libmemcached on Centos is too old for this to work Arran Cudbard-Bell@2015-09-15T15:53:52Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7dde8505b1b58cda3e8a… ====== Document and fix args Arran Cudbard-Bell@2015-09-15T15:43:56Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/68d57919d259f330d51b… ====== Allow dots in policy / module names. Fixes #1237 Alan T. DeKok@2015-09-15T15:22:38Z Files modified: * src/main/modcall.c * src/tests/keywords/radiusd.conf * src/tests/keywords/with_dots Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d089f8a1527c6fe4e09… ====== Lower the default pool size Alan T. DeKok@2015-09-15T15:09:52Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ce5709b584507f0d24b… ====== -- This commit summary was generated @2015-09-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 15 Sep '15

15 Sep '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Missed slash Arran Cudbard-Bell@2015-09-15T23:04:51Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c5a33fe0fb94725993f… ====== Remove extraneous debug Alan T. DeKok@2015-09-15T18:01:42Z Files modified: * src/lib/filters.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/baa622051cfe979cca26… ====== Allow maps to be used in redundant sections. Fixes #1233 Alan T. DeKok@2015-09-15T17:22:10Z Files modified: * src/main/modcall.c * src/main/unittest.c * src/tests/keywords/redundant-map-fail Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/400b6b16c5b5cc36e4c2… ====== Use one buffer for reading conf files. Fixes #1234 Alan T. DeKok@2015-09-15T17:06:30Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/451ee37610a26ed9900e… ====== Package memcached Arran Cudbard-Bell@2015-09-15T16:15:07Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e2373b111709a05984e… ====== Document and fix args Arran Cudbard-Bell@2015-09-15T15:44:50Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/67ec699f8f641dfdd9c1… ====== Allow dots in policy / module names. Fixes #1237 Alan T. DeKok@2015-09-15T15:24:03Z Files modified: * src/main/modcall.c * src/tests/keywords/radiusd.conf * src/tests/keywords/with_dots Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99596ef94e571a0444f3… ====== Lower the default pool size Alan T. DeKok@2015-09-15T15:10:01Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a86f16b8c755e49cea64… ====== json-c wraps values higher than INT32_MAX on travis Arran Cudbard-Bell@2015-09-15T13:53:50Z Files modified: * src/tests/modules/json/eval.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c92519e34ef112aa3ab7… ====== Missing ':' in OCSP message Arran Cudbard-Bell@2015-09-15T13:53:22Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a73b4f7fbfae750cd5a… ====== Fix json-c tests Arran Cudbard-Bell@2015-09-15T13:25:07Z Files modified: * src/tests/modules/json/eval.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93395fe41dc1213dd83f… ====== Use proper types for int32 vs int64 in json.c Arran Cudbard-Bell@2015-09-15T13:21:38Z Files modified: * src/modules/rlm_json/json.c * src/modules/rlm_json/json_missing.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cbffe08f9ef79bfe26b… ====== -- This commit summary was generated @2015-09-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 14 Sep '15

14 Sep '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Include rlm_cache_memcached in spec file Arran Cudbard-Bell@2015-09-14T22:32:52Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed28457b89f35c54ad8e… ====== Merge pull request #1235 from FreeRADIUS/revert-1204-patch-1 Revert "Fix libs" - Only memcached will actually be built Arran Cudbard-Bell@2015-09-14T22:29:50Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/404785de2401a5d433c7… ====== Revert "Fix libs" Arran Cudbard-Bell@2015-09-14T22:29:20Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b75b8d26d7327b950cf2… ====== This was never backported Arran Cudbard-Bell@2015-09-14T19:27:36Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5565e15411e24e4ee2ae… ====== Update ChangeLog Arran Cudbard-Bell@2015-09-14T19:20:03Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c6d016d203bdbdc1e8e… ====== No ocsp_ok label either Arran Cudbard-Bell@2015-09-14T18:23:15Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de70e8fe585579d70acf… ====== No skipped label in v3.0.x Arran Cudbard-Bell@2015-09-14T18:21:35Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e62b88084fc1254205e3… ====== Try to open client socket in fr_server_domain_socket_perm() Just like in fr_server_domain_socket_peercred() Alan T. DeKok@2015-09-14T18:19:10Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00cb830b014df2b5fd94… ====== Should skip the OCSP check Arran Cudbard-Bell@2015-09-14T18:18:10Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e64074ec288cd7809c66… ====== Typo Arran Cudbard-Bell@2015-09-14T18:13:55Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7288661816b4b051161c… ====== Don't unlink socket if we can't open it Alan T. DeKok@2015-09-14T17:50:03Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c184a7313ae1fe2582c2… ====== Truncate to actual length, not by trailing zeros Alan T. DeKok@2015-09-14T17:50:03Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20f011b1875b1f1f13f3… ====== If there's no OCSP URLs in the certificates, and we have a configured OCSP URL, we should fall back to that URL Arran Cudbard-Bell@2015-09-14T17:16:17Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50754043056ad7fb2776… ====== For encrypted attributes, set explicit length if given for MS-CHAP-MPPE-Keys Alan T. DeKok@2015-09-14T14:51:09Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a23380840ecbfd52945e… ====== Set explicit length for MS-CHAP-MPPE-Key Because it's encrypted with the same method as User-Password, BUT it contains binary data. So it may have embedded zeros. Which means the decoder needs to make it a fixed length, instead of looking for zeros Alan T. DeKok@2015-09-14T14:50:00Z Files modified: * share/dictionary.microsoft Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00f041d6599929abc85d… ====== Enforce more restraints, and allow "octets[24] encrypt=1" dict_addattr() can be called from places other than process_attribute() so we move some of the checks to process_attribute() This lets us do more checks on the "length" flag. And to allow "octets[24] encrypt=1" for MS-CHAP-MPPE-Key. Alan T. DeKok@2015-09-14T14:47:56Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d9c08b21ecf3ee0591b… ====== The MS-CHAP-MPPE-Keys attribute has 24 octets of data, not 32 This makes no difference to anyone, as the receiver will always truncate it at 24 octets, and ignore the trailing zeros Alan T. DeKok@2015-09-14T14:21:40Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6a624caa2530436a1249… ====== -- This commit summary was generated @2015-09-15T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 14 Sep '15

14 Sep '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Try to open client socket in fr_server_domain_socket_perm() Just like in fr_server_domain_socket_peercred() Alan T. DeKok@2015-09-14T18:19:20Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e926ea92c4ec049ab71… ====== Should skip the OCSP check Arran Cudbard-Bell@2015-09-14T18:18:31Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ccbb63216c088dec142… ====== Don't unlink socket if we can't open it Alan T. DeKok@2015-09-14T17:50:47Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e0c7a1f223281947782… ====== Truncate to actual length, not by trailing zeros Alan T. DeKok@2015-09-14T17:50:44Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e830c5f33ace8ba8b1e… ====== Typo Arran Cudbard-Bell@2015-09-14T17:17:28Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b53e7b97e5478604396e… ====== For encrypted attributes, set explicit length if given for MS-CHAP-MPPE-Keys Alan T. DeKok@2015-09-14T14:51:49Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/225174b593f2e2fb505c… ====== Set explicit length for MS-CHAP-MPPE-Key Because it's encrypted with the same method as User-Password, BUT it contains binary data. So it may have embedded zeros. Which means the decoder needs to make it a fixed length, instead of looking for zeros Alan T. DeKok@2015-09-14T14:51:48Z Files modified: * share/dictionary.microsoft Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25b1e8b2c748b42f1335… ====== Enforce more restraints, and allow "octets[24] encrypt=1" dict_addattr() can be called from places other than process_attribute() so we move some of the checks to process_attribute() This lets us do more checks on the "length" flag. And to allow "octets[24] encrypt=1" for MS-CHAP-MPPE-Key. Alan T. DeKok@2015-09-14T14:51:47Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e07e0661602ae23df395… ====== The MS-CHAP-MPPE-Keys attribute has 24 octets of data, not 32 This makes no difference to anyone, as the receiver will always truncate it at 24 octets, and ignore the trailing zeros Alan T. DeKok@2015-09-14T14:51:46Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e92ee2b8b60122a18a6e… ====== update explanation of what we're doing Alan T. DeKok@2015-09-14T14:51:43Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fe740b120df45c818c06… ====== CID 1324334 Arran Cudbard-Bell@2015-09-14T00:34:24Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/af0887c1685f8b047950… ====== -- This commit summary was generated @2015-09-15T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 13 Sep '15

13 Sep '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== update explanation of what we're doing Alan T. DeKok@2015-09-13T16:30:45Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd320580c30241279619… ====== More debugging around session-state Alan T. DeKok@2015-09-13T16:30:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/192827b07818715a8a72… ====== -- This commit summary was generated @2015-09-14T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 13 Sep '15

13 Sep '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Typo Arran Cudbard-Bell@2015-09-13T20:16:45Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d64a55d8232da1fbe4d… ====== Quiet clang scan Arran Cudbard-Bell@2015-09-13T20:08:55Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b796028101808d02b92… ====== If there's no OCSP URLs in the certificates, and we have a configured OCSP URL, we should fall back to that URL Arran Cudbard-Bell@2015-09-13T19:43:23Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4239284222f34cfec33a… ====== TLS-Session-Data is written to &request:TLS-Session-Data and read from &control:TLS-Session-Data Arran Cudbard-Bell@2015-09-13T19:08:59Z Files modified: * raddb/mods-available/cache_tls * raddb/sites-available/tls-cache * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a2d3cd7ee344b34b651… ====== Free certificate attributes on error Arran Cudbard-Bell@2015-09-13T18:28:04Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60068499377b2c736f85… ====== TLS-Cert attributes are now only available in the &session-state lists. Arran Cudbard-Bell@2015-09-13T18:23:17Z Files modified: * raddb/README.rst * src/include/tls-h * src/main/tls.c * src/main/tls_listen.c * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d42c1c4e52b68ae8352e… ====== This should be in the tls global init function Arran Cudbard-Bell@2015-09-13T18:20:24Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6cc6f10e45a815f28ed2… ====== Add note on rlm_rest Arran Cudbard-Bell@2015-09-13T18:17:32Z Files modified: * raddb/README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/63b9b7152cf65d556f64… ====== TLS-OCSP-Cert-Valid should go in the request too. Arran Cudbard-Bell@2015-09-13T18:01:09Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d665a8276803badc526… ====== Rest-HTTP-Code should be inserted into the &request: not the &reply: Arran Cudbard-Bell@2015-09-13T17:56:34Z Files modified: * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/393b241fa26e8a80d21b… ====== Clearer debug messages Arran Cudbard-Bell@2015-09-13T13:47:03Z Files modified: * src/main/state.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4072b8b4aee11aa658e… ====== Fix adding cert attributes Arran Cudbard-Bell@2015-09-13T12:37:28Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/34f03685b1a86d512f8c… ====== Doxygen Arran Cudbard-Bell@2015-09-13T02:08:41Z Files modified: * src/main/pair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c71788ca368ecc753a9c… ====== Make storing certificate attributes more efficient Arran Cudbard-Bell@2015-09-13T02:07:08Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2903fd2c0350f4b14e0… ====== Nicer errors on json parser failure Arran Cudbard-Bell@2015-09-13T01:28:24Z Files modified: * src/modules/rlm_json/rlm_json.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/347367c1cc25130aef59… ====== Prefix all the things! Specifically sent and received attributes (with their list names) Arran Cudbard-Bell@2015-09-13T01:22:52Z Files modified: * src/include/radiusd.h * src/main/listen.c * src/main/pair.c * src/main/state.c * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d02164270276078a3ed8… ====== Add comments and docs Arran Cudbard-Bell@2015-09-13T01:00:14Z Files modified: * raddb/README.rst * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c8fd7800891878f575fc… ====== Add all the certificate VPs to session-state Eventually (FreeRADIUS 3.2/4.0) they should no longer be inserted into the request, but doing it now would break lots of working configurations, so we just shove them in session-state, which, importantly, makes them available to the OCSP virtual server. It wasn't clear where the attributes were actually being inserted, and whether adding them to the request in cbtls_verify would have lead to duplicate multivalued attributes. Arran Cudbard-Bell@2015-09-13T00:44:35Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb9713dc9988734628b0… ====== s/certs/cert_vps/ Arran Cudbard-Bell@2015-09-13T00:16:52Z Files modified: * src/include/listen.h * src/include/tls-h * src/main/tls.c * src/main/tls_listen.c * src/modules/rlm_eap/eap.h * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8fb69c817dda25435a13… ====== Fix config variable expansions in map sections Arran Cudbard-Bell@2015-09-13T00:02:18Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/045b80f5c6c68e31d1e7… ====== -- This commit summary was generated @2015-09-14T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Re: rlm_detail header not expanding \t
by Matthew Newton 12 Sep '15

12 Sep '15

[moving to -devel to save boring everyone] On Sat, Sep 12, 2015 at 09:58:03AM -0400, Alan DeKok wrote: > On Sep 9, 2015, at 5:22 PM, Matthew Newton <mcn4(a)leicester.ac.uk> wrote: > > Thanks - better than before, but not what I was expecting. Now "\" > > is always literal: "%t\t...", '%t\t...' with correct_escapes set > > to either true or false always outputs: > > > > Wed Sep 9 22:17:14 2015\t127.0.0.1 > > > > But at least it's consistent :) > > The solution is probably to smash \t, \n, etc. to their > respective characters. The location to do so would be in the > same place I put that last patch. Hmm. I'm not so sure? - The \t, \n etc are there to indicate that particular char in the user-given string. Once it's made it into the server from the config file it should be represented by its binary character. Otherwise e.g. a string that comes from LDAP or a database could contain "\t" in it, which would be expanded by xlat. That seems to be asking for trouble. The usual perl expectation (and granted this is not directly relevant, but it's still a common convention) is that "-quoted strings are expanded, but '-quoted strings are not. So header = "%t\thello" would be read in to the server as "%t<tabchar>hello", whereas header = '%t\thello' I'd expect to be read in as a literal "%t\thello". I think the \-expansion should really belong in the config parser? Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4(a)le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp(a)le.ac.uk>

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 12 Sep '15

12 Sep '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update ChangeLog Arran Cudbard-Bell@2015-09-12T21:07:45Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ccb17f449614f19fcaa… ====== note recent changes Alan T. DeKok@2015-09-12T03:58:42Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5ba9933a863944e4cf6… ====== Merge pull request #1231 from mcnewton/v3.0.x small documentation fix/cleanups [ci skip] Arran Cudbard-Bell@2015-09-12T00:11:05Z Files modified: * doc/README * doc/bugs Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/96b9e7a548947fab2f48… ====== small documentation fix/cleanups Matthew Newton@2015-09-12T00:07:27Z Files modified: * doc/README * doc/bugs Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1df68aa24de34eaca778… ====== -- This commit summary was generated @2015-09-13T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 12 Sep '15

12 Sep '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Allocate temporary buffers for cf_section_read on the heap This will allow us to enlarge them later (if we keep this style of parser), and prevents stack memory exhaustion (which was becoming a possibility given that cf_section_read is probably called recursively) Arran Cudbard-Bell@2015-09-12T23:36:04Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f5e201cee8d404d81f6f… ====== Wait... it needs to be documented too?! pfft Arran Cudbard-Bell@2015-09-12T22:16:15Z Files modified: * raddb/mods-available/rest Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0810a820b89ad045d3d… ====== Add support for proxies to rlm_rest Because some people, despite knowing the dependencies of various services, don't make them available in the testing environment *sigh* Arran Cudbard-Bell@2015-09-12T22:12:45Z Files modified: * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h * src/modules/rlm_rest/rlm_rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcfd2146461796b82a07… ====== small documentation fix/cleanups Matthew Newton (via Arran Cudbard-Bell)@2015-09-12T00:12:59Z Files modified: * doc/README * doc/bugs Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62e3e868553c244d19c1… ====== -- This commit summary was generated @2015-09-13T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0