- Freeradius-Devel - lists.freeradius.org

Commit report for v3.1.x branch
by announce＠freeradius.org 30 Mar '15

30 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Arran Cudbard-Bell@2015-03-30T23:42:59Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cc7fb3dc7a8f8d77e676… ====== Print the attributes EAP-TLS extension attribute we're not going to add Arran Cudbard-Bell@2015-03-30T18:41:10Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4c8812448151ce053a5… ====== -- This commit summary was generated @2015-03-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 30 Mar '15

30 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Disable TLS 1.2 by default. Causes MPPE key mismatches with eapol_test. Arran Cudbard-Bell@2015-03-30T23:42:51Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ac08a41f0af1ed1c996… ====== Print the attributes EAP-TLS extension attribute we're not going to add Arran Cudbard-Bell@2015-03-30T18:41:27Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0e4deea55c41256ba51… ====== -- This commit summary was generated @2015-03-31T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 29 Mar '15

29 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Another analyzer error Arran Cudbard-Bell@2015-03-29T16:37:53Z Files modified: * src/lib/regex.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59ff00fab21bea45f6f2… ====== Build doxygen docs Arran Cudbard-Bell@2015-03-29T16:36:08Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/36c0be76852f9af2fb9c… ====== Clang scan analyzer errors Arran Cudbard-Bell@2015-03-29T16:19:48Z Files modified: * src/main/command.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_ldap/sasl.c * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/163a7ac965a2a8513408… ====== Fail on scan errors Arran Cudbard-Bell@2015-03-29T05:56:35Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cd157372fdf62437dfe… ====== Doxygen Arran Cudbard-Bell@2015-03-29T04:41:02Z Files modified: * src/include/all.mk * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8507cbd4476b69166b04… ====== Attempt to move to travis container infrastructure Seeing as the linux build farm is currently maxed out at 320 concurrent builds Arran Cudbard-Bell@2015-03-29T04:15:58Z Files modified: * .travis.yml * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e25d1294fab30cdb65f2… ====== Initialize raddb_dir, too Alan T. DeKok@2015-03-28T22:56:01Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45d9a0d49ed20893d9e8… ====== Set "nodup" for DHCP sockets Alan T. DeKok@2015-03-27T18:27:07Z Files modified: * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1cac9a9262330c946e7f… ====== Simplify cleanup logic. Debug the packet prior to sending it. Do cleanup_delay on RADIUS Access-Requests and CoA packets. Everything else gets cleaned up immediately. Alan T. DeKok@2015-03-27T18:27:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/993e3e4eaf024b03f6bc… ====== Cleanup DHCP packets immediately Alan T. DeKok@2015-03-27T18:27:04Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfd0dc6aa89eb9132992… ====== No comment in comment issues Alan T. DeKok@2015-03-27T17:11:04Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d611748693549e1e16e8… ====== Set dict_dir Alan T. DeKok@2015-03-27T16:42:07Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/649ffcc9e16f8f0c619e… ====== Minor formatting in tls.c Arran Cudbard-Bell@2015-03-27T16:21:52Z Files modified: * configure * configure.ac * raddb/mods-available/eap * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a63dd2735b8b54a8e9f2… ====== *out is used Alan T. DeKok@2015-03-27T14:38:26Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dba9fe21da8fa5b1321a… ====== Don't crash when using the NULL driver in select queries Arran Cudbard-Bell (via Alan T. DeKok)@2015-03-27T14:38:13Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da3b921199df263ecedd… ====== Merge pull request #939 from mcnewton/v3.1.x-winbind Improve errors on winbind authentication failure Alan DeKok@2015-03-27T14:34:44Z Files modified: * src/modules/rlm_mschap/auth_wbclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/675ec75fa72923a8dcd8… ====== Improve errors on winbind authentication failure This is very nice, as Samba gives us useful messages like Wrong Password [0xC000006A] Account expired [0xC0000193] Must change password [0xC0000224] Account locked out [0xC0000234] when the authentication fails, which are then pushed into Module-Failure-Message so the admin knows exactly what happened. This also now handles password expiry so mschap returns the "change password" trigger. Matthew Newton@2015-03-27T01:02:11Z Files modified: * src/modules/rlm_mschap/auth_wbclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/034944513b351eccda99… ====== Add -D to radwho and radzap Alan T. DeKok@2015-03-27T14:31:01Z Files modified: * src/main/radwho.c * src/main/radzap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/575397d0647da6c75a8a… ====== More dot graphs for state machines Alan T. DeKok@2015-03-26T17:53:15Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b8bc24dac6ca443b99b3… ====== Hyphens Arran Cudbard-Bell@2015-03-26T14:09:13Z Files modified: * share/dictionary.mikrotik Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/005437d9f260c233f165… ====== Update dictionary.mikrotik Update dictionary.mikrotik to have new attributes and values mentioned in Mikrotik wiki: http://wiki.mikrotik.com/index.php?title=Manual:RADIUS_Client/vendor_dictio… Nikolai Kondrashov (via Arran Cudbard-Bell)@2015-03-26T14:05:38Z Files modified: * share/dictionary.mikrotik Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/88332d8e5dc6bae25270… ====== Oops. Define this, too Alan T. DeKok@2015-03-25T23:16:28Z Files modified: * src/include/listen.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6fe518eb02bca4b5bc9b… ====== Freeze proxy sockets on EOL, too. and eol requests only if listener->count > 0 Alan T. DeKok@2015-03-25T23:07:54Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ebfc328692d7ad01059… ====== TCP socket timer limits mean they're marked frozen, not EOL EOL is now only for errors. a frozen socket can still have requests using it. For auth/acct, we can't close the socket until all requests using it have finished. We can't close socket while the client is still sending packets. That's rude. For proxy sockets, most of the same applies. The only difference is that the frozen socket won't be used to proxy new requests. But retransmits will still go out the proxy socket. And replies will still be received from it. Alan T. DeKok@2015-03-25T22:31:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1747b6f026cbf2806449… ====== Freeze the proxy socket on timeout But we don't want to EOL it just yet Alan T. DeKok@2015-03-25T22:31:51Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/114cd12fa5af16fa8ac1… ====== Motorola error message Alan T. DeKok@2015-03-25T22:31:50Z Files modified: * share/dictionary.motorola.wimax Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/849336c73dda97ac2a11… ====== Add systemd unit file for systems that use systemd Arran Cudbard-Bell@2015-03-25T17:39:36Z Files modified: * redhat/freeradius.spec * redhat/radiusd.service Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/530b02a96dc9de40725b… ====== Remove unused assignement Alan T. DeKok@2015-03-25T17:21:00Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ba0af5b68a21ce12014… ====== Allow home server "auth+acct" Alan T. DeKok@2015-03-24T23:50:40Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b17cf2433b479aee3a7c… ====== Better fix for dual home servers Alan T. DeKok@2015-03-24T23:50:39Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5d32f3fbe6d4902ccb8… ====== Use FR_CHANNEL_FAIL / SUCCESS for radmin return codes Alan T. DeKok@2015-03-24T22:13:24Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ca65c5bcabd46f693d7b… ====== Use names instead of numbers for command OK / FAIL And use the same return codes as for the channels Alan T. DeKok@2015-03-24T22:13:20Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4babe22e51ff98108f84… ====== Regularize return codes for radmin commands Alan T. DeKok@2015-03-24T22:13:19Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/798d9a8c4eaf0132827b… ====== Go to status after running a command Alan T. DeKok@2015-03-24T22:13:18Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6629f6e90d808f7f2ae… ====== Use same port for acct if using RadSec Alan T. DeKok@2015-03-24T21:46:25Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2b20849f1a85f4306964… ====== Add option for secret Arran Cudbard-Bell@2015-03-24T21:45:29Z Files modified: * scripts/raduat Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02e1ff5bb3c229b0ddee… ====== Update raduat Arran Cudbard-Bell@2015-03-24T20:09:46Z Files modified: * scripts/raduat Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9b1ac8a033303680959e… ====== Rename fr_connect_pool_delete to fr_connection_pool_free Arran Cudbard-Bell@2015-03-24T17:57:12Z Files modified: * src/include/connection.h * src/main/connection.c * src/modules/rlm_cache/drivers/rlm_cache_memcached/rlm_cache_memcached.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/604144e28b7da6b82b2e… ====== Add reference counter to connection pool to prevent double frees when referenced Arran Cudbard-Bell@2015-03-24T17:57:12Z Files modified: * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a71e5b5ae1f648e08ae8… ====== Cleanup some of the tls code, add doxygen headers etc... Arran Cudbard-Bell@2015-03-24T17:33:12Z Files modified: * src/main/tls.c * src/modules/rlm_eap/libeap/eap_tls.h * src/modules/rlm_eap/libeap/eap_types.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/935bc8fe9d8d6349087e… ====== Fix invalid assert in state.c If there's a previous linked state, we want to assert that the entry can't be *head* of the list not the tail Arran Cudbard-Bell@2015-03-24T17:33:06Z Files modified: * src/main/state.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de4dde44e5c9dea3e72f… ====== Merge pull request #935 from mcnewton/v3.1.x-wbpool Add connection pool to rlm_mschap for wbclient contexts Arran Cudbard-Bell@2015-03-24T01:26:38Z Files modified: * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/970d1b0bc295e51fa36d… ====== Add connection pool to rlm_mschap for wbclient contexts Matthew Newton@2015-03-24T00:13:45Z Files modified: * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b24cf26da337fc234199… ====== Some libldap packagers define LDAP_VENDOR_VERSION_PATCH as X ... thanks for that ltb-project. Arran Cudbard-Bell@2015-03-24T00:08:41Z Files modified: * src/modules/rlm_ldap/ldap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73a7c7e917fa84b428a9… ====== Print proper error for unknown attributes in rlm_ldap mapping sections Arran Cudbard-Bell@2015-03-24T00:07:26Z Files modified: * src/modules/rlm_ldap/attrmap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a95ff7357ee3ae70340b… ====== Proper way of getting TCP connection errors Arran Cudbard-Bell@2015-03-23T16:16:45Z Files modified: * src/lib/socket.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/abbe41a72cc10905767c… ====== Docs for request_will_proxy Arran Cudbard-Bell@2015-03-22T22:55:58Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/345519350e77d1d5fa3f… ====== Fixup formatting and logging in rlm_chap Arran Cudbard-Bell@2015-03-22T22:52:50Z Files modified: * src/modules/rlm_chap/rlm_chap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/634e77807f906d7424fc… ====== Minor changes to meet v3.0.x Alan T. DeKok@2015-03-22T14:11:08Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/44786dfcd7e8158edf7c… ====== Make messages consistent with v3.0.x Alan T. DeKok@2015-03-22T14:04:54Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7719752618f63190e6e0… ====== Use fr_syserror Alan T. DeKok@2015-03-22T14:03:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/201de79e8f3e0b3f800d… ====== Cleanup NONNULL According to the compiler documentation putting attributes before the name and argument list of a function definition is not officially supported. Even for static functions. The proper way is to add them add the end of the declaration. This certainly makes doxygen, and my code editor happier. Arran Cudbard-Bell (via Alan T. DeKok)@2015-03-22T13:58:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c1c235cece131ca577e… ====== Don't use NONNULL here Alan T. DeKok@2015-03-22T13:56:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5314e9b50dcd6f0983d… ====== initialize child state before printing it Alan T. DeKok@2015-03-22T13:54:48Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eeccdca5058ef34d592d… ====== Move request_process_timer() to request_max_time() which simplifies it a lot Alan T. DeKok@2015-03-22T13:54:47Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4066eb441e5268eb9f67… ====== Add CHECK_FOR_STOP macro to state machine functions to check if the request should be stopped Alan T. DeKok@2015-03-22T13:54:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e7a79d3d517a0f8eaaab… ====== Move coa_separate checks to a macro Alan T. DeKok@2015-03-22T13:54:44Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f499cc53281db0b59d9f… ====== coa_separate() doesn't need to take an action. rename coa_timer to coa_retransmit, which is saner Alan T. DeKok@2015-03-22T13:54:42Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7534543938431bad66f… ====== Move cleanup_delay calculations to cleanup_delay function Alan T. DeKok@2015-03-22T13:54:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec80ee8cf3bb9fcb329b… ====== Move response_delay calculations to response_delay function Alan T. DeKok@2015-03-22T13:54:39Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6480dddfe47fae07072b… ====== process_timer shouldn't need to handle child PROXIED state the rest of the state machine takes care of that. Alan T. DeKok@2015-03-22T13:54:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d61ada0d5e57d5407a34… ====== Rely on eol_listener to STOP requests when a socket goes away Alan T. DeKok@2015-03-22T13:54:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/763d9ae4732540bc7f8d… ====== Document process timer function Alan T. DeKok@2015-03-22T13:54:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/29b72c30e2d560c26194… ====== request_common is now only request_process_timer Alan T. DeKok@2015-03-22T13:54:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4220b3b46294c1b82aed… ====== Move complaint for duplicate packets to its own function Which should start simplifying the code Alan T. DeKok@2015-03-22T13:54:34Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d8bdfb9e138a2478f36… ====== Convert some returns to break for style where they're the same Alan T. DeKok@2015-03-22T13:54:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ef4c96ccbf059e15389… ====== Abstract "proxy reply too late" to separate function Alan T. DeKok@2015-03-22T13:54:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8690c70d16fdb073f46f… ====== set request->process = request_response_delay immediately Alan T. DeKok@2015-03-22T13:54:30Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e537799c7bd5c4f2191… ====== Only try and build with wbclient support if we have the headers *AND* the functions (which act as a version check) Arran Cudbard-Bell@2015-03-22T03:26:38Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/462ba700c00a730d6347… ====== Doxygen Arran Cudbard-Bell@2015-03-22T02:32:05Z Files modified: * src/lib/socket.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/27b7cc46344879f12a81… ====== Install libwebclient-dev in CIT Arran Cudbard-Bell@2015-03-22T00:58:14Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6e7bafc9ec2580c29a6e… ====== Use the correct number of fields for stop inserts Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:54Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/oracle/queries.conf * raddb/mods-config/sql/main/sqlite/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84c6f5a926a423a951f8… ====== Make proxy to virtual server match callers for process_proxy_reply() Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:50Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/239eeb361293d0516605… ====== Remove STATE_MACHINE_DECL for functions, and add dot graphs To document the state machine of the server Alan T. DeKok (via Arran Cudbard-Bell)@2015-03-21T23:36:33Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45d980d1abbc5bb08e30… ====== Merge pull request #930 from mcnewton/v3.1.x-winbind mschap auth directly to winbind via libwbclient Arran Cudbard-Bell@2015-03-21T23:15:45Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa51a3a48006fe719008… ====== Add mschap module winbind authentication This allows AD/Samba authentication against winbind via libwbclient without having to use ntlm_auth. Matthew Newton@2015-03-21T22:54:59Z Files modified: * debian/control * raddb/mods-available/mschap * src/modules/rlm_mschap/auth_wbclient.c * src/modules/rlm_mschap/auth_wbclient.h * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bec88d5f5feada809fd5… ====== Configure scripts for libwbclient Matthew Newton@2015-03-21T22:54:50Z Files modified: * src/modules/rlm_mschap/config.h.in * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab80b4dd9726b443c649… ====== Create rlm_mschap.h (split out from rlm_mschap.c) Matthew Newton@2015-03-20T01:08:51Z Files modified: * src/modules/rlm_mschap/configure * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_mschap/rlm_mschap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cdc3f37ac1cf45041226… ====== Change boolean do_ntlm_auth to enum MSCHAP_AUTH_METHOD Matthew Newton@2015-03-20T01:08:46Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84132d35f3bb5c5cc363… ====== Fixup some comments in fr_cursor_insert Arran Cudbard-Bell@2015-03-21T15:36:38Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ffe5b70c84b44ff9997… ====== Invalid assert Arran Cudbard-Bell@2015-03-20T19:15:50Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e807428c6045eeba929b… ====== Always initialise sockfd (not needed, but compiler complains) Arran Cudbard-Bell@2015-03-20T19:14:05Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12f54245f9df6abb03be… ====== Fix corner case where cursor.next wasn't fixed up correctly on fr_cursor_insert Arran Cudbard-Bell@2015-03-20T17:52:08Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b969473a5cc2193a334a… ====== Fixup cursor.last if we removed the vp it was referring to Arran Cudbard-Bell@2015-03-20T17:34:37Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/339f0b20bf2df8989615… ====== Last should be set to the VP we just inserted Arran Cudbard-Bell@2015-03-20T17:34:14Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c180cc6a14aa7ea4d1d… ====== Formatting Arran Cudbard-Bell@2015-03-20T17:32:28Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be45b1ad8693d3a56214… ====== Add support for writing to TCP, UDP and Unix sockets in linelog Arran Cudbard-Bell@2015-03-20T16:34:37Z Files modified: * raddb/mods-available/linelog * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97c3e8b01339d66a84a3… ====== Create a standard set of socket connection functions for UNIX/TCP/UDP We should eventually add SCTP too, but the OSX kernel doesn't support it yet *boo*, and I don't have time to compile the 3rd party kext. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/tcp.h * src/lib/all.mk * src/lib/misc.c * src/lib/socket.c * src/lib/tcp.c * src/lib/unix.c * src/main/listen.c * src/main/radclient.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e850301ffd3a43a1808… ====== Move fr_nonblock and fr_blocking to misc.c. They're useful for files as well as sockets. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/misc.c * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ace9ebacf2f07cbfdfff… ====== Merge pull request #929 from spaetow/patch-1 Update proxy.conf Arran Cudbard-Bell@2015-03-18T23:48:48Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1926b0cfa954ab5d50a7… ====== Update proxy.conf Add a short description for the dynamic option in proxy.conf Stefan Paetow@2015-03-18T23:47:17Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72e240f27467862fc649… ====== document sample ABFAb RP client Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:27Z Files modified: * raddb/sites-available/abfab-tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/042343e0c385147a21d4… ====== dynamic = yes not true The config parser doesn't seem to accept dynamic = true, but only dynamic = yes. Update error message to provide useful description. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:22Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/095c136c4cad4551c793… ====== Updates to abfab policy * Move policy from pre-proxy to authorize because we need to run some of the updates prior to realm because they now influence generated trust router requests. * Include setting reply messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:18Z Files modified: * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tr-idp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3061adacc53d58a4400… ====== trustrouter: permit trust-router-COI and error handling Improve the error handling of the trust router integration. Set Error-Cause to indicate a proxy routing failure if we fail to get a realm via trustrouter. Include the error back from the trust router in Reply-Message. Set trust-router-coi in the trust router code rather than depending on unlang to do so. Permit a previously specified trust-router-coi in the request to override the community in the configuration. Unlang is responsible for performing any authorization checks regarding community. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:13Z Files modified: * src/include/radius.h * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb3c01445169e23bfca6… ====== Permit Error-Cause in access reject messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:26:56Z Files modified: * raddb/mods-config/attr_filter/access_reject Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a6d755ef967bccb8dde… ====== Add user configurable busy_timeout to rlm_sql_sqlite driver Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * raddb/mods-available/sql * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5bbdbd6f8b66c5bb5182… ====== Convert comment to doxygen Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f91d8bfcd9aeffd12fd1… ====== Split out unix socket connection function Arran Cudbard-Bell@2015-03-18T18:03:18Z Files modified: * src/include/libradius.h * src/lib/all.mk * src/lib/unix.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20a4082414305f544c52… ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:29:36Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e592703873fca92b6fdd… ====== -- This commit summary was generated @2015-03-30T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 29 Mar '15

29 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix error message to be correct Alan T. DeKok@2015-03-29T16:03:11Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0acb76276208399162b… ====== -- This commit summary was generated @2015-03-30T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 29 Mar '15

29 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove references to ${certdir}/random, and replace with /dev/urandom Alan T. DeKok@2015-03-29T21:49:12Z Files modified: * raddb/certs/Makefile * raddb/mods-available/eap * raddb/mods-available/inner-eap * raddb/mods-available/ldap * raddb/mods-available/rest * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/db21433622c0602eaef6… ====== Another analyzer error Arran Cudbard-Bell@2015-03-29T16:38:23Z Files modified: * src/lib/regex.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d752430782029167683… ====== Build doxygen docs Arran Cudbard-Bell@2015-03-29T16:38:19Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4298de4c4fd04e1947f… ====== Clang scan analyzer errors Arran Cudbard-Bell@2015-03-29T16:19:56Z Files modified: * src/main/command.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_ldap/sasl.c * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3850dd6a4b113d2a947a… ====== Fail on scan errors Arran Cudbard-Bell@2015-03-29T05:56:50Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d69cf4923b9d2117408c… ====== Doxygen Arran Cudbard-Bell@2015-03-29T04:41:15Z Files modified: * src/include/all.mk * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f598e47a984281e627aa… ====== Attempt to move to travis container infrastructure Seeing as the linux build farm is currently maxed out at 320 concurrent builds Arran Cudbard-Bell@2015-03-29T04:15:58Z Files modified: * .travis.yml * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e25d1294fab30cdb65f2… ====== -- This commit summary was generated @2015-03-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 29 Mar '15

29 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Note recent changes Alan T. DeKok@2015-03-29T21:55:05Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4984f96c39fa1bee898c… ====== Remove references to ${certdir}/random, and replace with /dev/urandom Alan T. DeKok@2015-03-29T21:48:39Z Files modified: * raddb/certs/Makefile * raddb/mods-available/eap * raddb/mods-available/inner-eap * raddb/mods-available/ldap * raddb/mods-available/rest * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/335428b91cc3f16aea92… ====== Another analyzer error Arran Cudbard-Bell@2015-03-29T16:38:13Z Files modified: * src/lib/regex.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f4e12b61516d45764ac… ====== Build doxygen docs Arran Cudbard-Bell@2015-03-29T16:38:10Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/459836d76ece09a4526e… ====== Clang scan analyzer errors Arran Cudbard-Bell@2015-03-29T16:21:12Z Files modified: * src/main/command.c * src/modules/rlm_couchbase/rlm_couchbase.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a7b78154d9acb7694a4… ====== Fail on scan errors Arran Cudbard-Bell@2015-03-29T05:56:43Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60525823170c782c39e4… ====== Doxygen Arran Cudbard-Bell@2015-03-29T04:41:09Z Files modified: * src/include/all.mk * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e82a244ae8e19f683e91… ====== Attempt to move to travis container infrastructure Seeing as the linux build farm is currently maxed out at 320 concurrent builds Arran Cudbard-Bell@2015-03-29T04:15:40Z Files modified: * .travis.yml * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5cc3c570cc20dfb998fc… ====== -- This commit summary was generated @2015-03-30T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 28 Mar '15

28 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Initialize raddb_dir, too Alan T. DeKok@2015-03-28T22:56:01Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45d9a0d49ed20893d9e8… ====== -- This commit summary was generated @2015-03-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 28 Mar '15

28 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Initialize raddb_dir, too Alan T. DeKok@2015-03-28T22:55:38Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7d9be4e7665cf7f6a840… ====== -- This commit summary was generated @2015-03-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 27 Mar '15

27 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== note recent changes Alan T. DeKok@2015-03-27T18:30:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3bb962ba7fff447fc1a0… ====== Set "nodup" for DHCP sockets Alan T. DeKok@2015-03-27T18:26:39Z Files modified: * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcb6eefbf56040ca0c72… ====== Simplify cleanup logic. Debug the packet prior to sending it. Do cleanup_delay on RADIUS Access-Requests and CoA packets. Everything else gets cleaned up immediately. Alan T. DeKok@2015-03-27T18:20:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/54fe6988b440593c3585… ====== Cleanup DHCP packets immediately Alan T. DeKok@2015-03-27T18:11:16Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/972ac585b6a06d9c2073… ====== No comment in comment issues Alan T. DeKok@2015-03-27T17:10:48Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf5844b40cee6f3fece4… ====== Set dict_dir Alan T. DeKok@2015-03-27T16:41:52Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3550598707fe5b6eb1a… ====== Better fix for previous commit Alan T. DeKok@2015-03-27T14:37:05Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c92916d772c7dbe531a… ====== Improve errors on winbind authentication failure This is very nice, as Samba gives us useful messages like Wrong Password [0xC000006A] Account expired [0xC0000193] Must change password [0xC0000224] Account locked out [0xC0000234] when the authentication fails, which are then pushed into Module-Failure-Message so the admin knows exactly what happened. This also now handles password expiry so mschap returns the "change password" trigger. Matthew Newton (via Alan T. DeKok)@2015-03-27T14:35:00Z Files modified: * src/modules/rlm_mschap/auth_wbclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/134f14d18d5065c8ebc2… ====== note recent changes Alan T. DeKok@2015-03-27T14:33:24Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3bf6d2d1cfbe1cde766a… ====== Add -D to radwho and radzap Alan T. DeKok@2015-03-27T14:30:48Z Files modified: * src/main/radwho.c * src/main/radzap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f70a4afc99b8f9a6f59… ====== Minor formatting in tls.c Arran Cudbard-Bell@2015-03-27T14:11:18Z Files modified: * configure * configure.ac * raddb/mods-available/eap * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/349cefe83bb7ec4e75a4… ====== Don't crash when using the NULL driver in select queries Arran Cudbard-Bell@2015-03-27T14:11:18Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23139c3c7bb1d7563767… ====== Merge pull request #940 from nchaigne/3.0.x-fb5-fqdn DHCP-Client-FQDN is not a string Arran Cudbard-Bell@2015-03-27T13:31:59Z Files modified: * share/dictionary.dhcp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7de5416ffcfc6f011725… ====== DHCP-Client-FQDN is not a string See RFC 4702. DHCP-Client-FQDN (DHCP option 81) is actually a record composed of: - first octet: "Flags" - second octet: "RCODE1" - third octet: "RCODE2" - and then "Domain Name" (which is a string) But I don't think that FreeRADIUS dictionaries support encoding / decoding such a format, so octets is the best option we have. Nicolas C@2015-03-27T12:38:23Z Files modified: * share/dictionary.dhcp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e496f3bb53d3572b8621… ====== -- This commit summary was generated @2015-03-28T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 27 Mar '15

27 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Set "nodup" for DHCP sockets Alan T. DeKok@2015-03-27T18:27:07Z Files modified: * src/modules/proto_dhcp/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1cac9a9262330c946e7f… ====== Simplify cleanup logic. Debug the packet prior to sending it. Do cleanup_delay on RADIUS Access-Requests and CoA packets. Everything else gets cleaned up immediately. Alan T. DeKok@2015-03-27T18:27:06Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/993e3e4eaf024b03f6bc… ====== Cleanup DHCP packets immediately Alan T. DeKok@2015-03-27T18:27:04Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfd0dc6aa89eb9132992… ====== No comment in comment issues Alan T. DeKok@2015-03-27T17:11:04Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d611748693549e1e16e8… ====== Set dict_dir Alan T. DeKok@2015-03-27T16:42:07Z Files modified: * src/main/radwho.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/649ffcc9e16f8f0c619e… ====== Minor formatting in tls.c Arran Cudbard-Bell@2015-03-27T16:21:52Z Files modified: * configure * configure.ac * raddb/mods-available/eap * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a63dd2735b8b54a8e9f2… ====== *out is used Alan T. DeKok@2015-03-27T14:38:26Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dba9fe21da8fa5b1321a… ====== Don't crash when using the NULL driver in select queries Arran Cudbard-Bell (via Alan T. DeKok)@2015-03-27T14:38:13Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_null/rlm_sql_null.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da3b921199df263ecedd… ====== Merge pull request #939 from mcnewton/v3.1.x-winbind Improve errors on winbind authentication failure Alan DeKok@2015-03-27T14:34:44Z Files modified: * src/modules/rlm_mschap/auth_wbclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/675ec75fa72923a8dcd8… ====== Improve errors on winbind authentication failure This is very nice, as Samba gives us useful messages like Wrong Password [0xC000006A] Account expired [0xC0000193] Must change password [0xC0000224] Account locked out [0xC0000234] when the authentication fails, which are then pushed into Module-Failure-Message so the admin knows exactly what happened. This also now handles password expiry so mschap returns the "change password" trigger. Matthew Newton@2015-03-27T01:02:11Z Files modified: * src/modules/rlm_mschap/auth_wbclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/034944513b351eccda99… ====== Add -D to radwho and radzap Alan T. DeKok@2015-03-27T14:31:01Z Files modified: * src/main/radwho.c * src/main/radzap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/575397d0647da6c75a8a… ====== -- This commit summary was generated @2015-03-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0