- Freeradius-Devel - lists.freeradius.org

Commit report for v3.1.x branch
by announce＠freeradius.org 20 Mar '15

20 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Always initialise sockfd (not needed, but compiler complains) Arran Cudbard-Bell@2015-03-20T19:14:05Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12f54245f9df6abb03be… ====== Fix corner case where cursor.next wasn't fixed up correctly on fr_cursor_insert Arran Cudbard-Bell@2015-03-20T17:52:08Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b969473a5cc2193a334a… ====== Fixup cursor.last if we removed the vp it was referring to Arran Cudbard-Bell@2015-03-20T17:34:37Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/339f0b20bf2df8989615… ====== Last should be set to the VP we just inserted Arran Cudbard-Bell@2015-03-20T17:34:14Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c180cc6a14aa7ea4d1d… ====== Formatting Arran Cudbard-Bell@2015-03-20T17:32:28Z Files modified: * src/lib/cursor.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be45b1ad8693d3a56214… ====== Add support for writing to TCP, UDP and Unix sockets in linelog Arran Cudbard-Bell@2015-03-20T16:34:37Z Files modified: * raddb/mods-available/linelog * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97c3e8b01339d66a84a3… ====== Create a standard set of socket connection functions for UNIX/TCP/UDP We should eventually add SCTP too, but the OSX kernel doesn't support it yet *boo*, and I don't have time to compile the 3rd party kext. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/tcp.h * src/lib/all.mk * src/lib/misc.c * src/lib/socket.c * src/lib/tcp.c * src/lib/unix.c * src/main/listen.c * src/main/radclient.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7e850301ffd3a43a1808… ====== Move fr_nonblock and fr_blocking to misc.c. They're useful for files as well as sockets. Arran Cudbard-Bell@2015-03-20T04:51:19Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/misc.c * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ace9ebacf2f07cbfdfff… ====== -- This commit summary was generated @2015-03-21T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Please document dynamic in proxy server section in proxy.conf
by Sam Hartman 19 Mar '15

19 Mar '15

Hi. The dynamic key was introduced to enable realms_realm_add after config parsing. However, it doesn't seem to be documented in the default raddb.

5 6

Commit report for v3.1.x branch
by announce＠freeradius.org 18 Mar '15

18 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #929 from spaetow/patch-1 Update proxy.conf Arran Cudbard-Bell@2015-03-18T23:48:48Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1926b0cfa954ab5d50a7… ====== Update proxy.conf Add a short description for the dynamic option in proxy.conf Stefan Paetow@2015-03-18T23:47:17Z Files modified: * raddb/proxy.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72e240f27467862fc649… ====== document sample ABFAb RP client Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:27Z Files modified: * raddb/sites-available/abfab-tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/042343e0c385147a21d4… ====== dynamic = yes not true The config parser doesn't seem to accept dynamic = true, but only dynamic = yes. Update error message to provide useful description. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:22Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/095c136c4cad4551c793… ====== Updates to abfab policy * Move policy from pre-proxy to authorize because we need to run some of the updates prior to realm because they now influence generated trust router requests. * Include setting reply messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:18Z Files modified: * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tr-idp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3061adacc53d58a4400… ====== trustrouter: permit trust-router-COI and error handling Improve the error handling of the trust router integration. Set Error-Cause to indicate a proxy routing failure if we fail to get a realm via trustrouter. Include the error back from the trust router in Reply-Message. Set trust-router-coi in the trust router code rather than depending on unlang to do so. Permit a previously specified trust-router-coi in the request to override the community in the configuration. Unlang is responsible for performing any authorization checks regarding community. Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:27:13Z Files modified: * src/include/radius.h * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb3c01445169e23bfca6… ====== Permit Error-Cause in access reject messages Sam Hartman (via Arran Cudbard-Bell)@2015-03-18T21:26:56Z Files modified: * raddb/mods-config/attr_filter/access_reject Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a6d755ef967bccb8dde… ====== Add user configurable busy_timeout to rlm_sql_sqlite driver Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * raddb/mods-available/sql * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5bbdbd6f8b66c5bb5182… ====== Convert comment to doxygen Arran Cudbard-Bell@2015-03-18T21:25:25Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f91d8bfcd9aeffd12fd1… ====== Split out unix socket connection function Arran Cudbard-Bell@2015-03-18T18:03:18Z Files modified: * src/include/libradius.h * src/lib/all.mk * src/lib/unix.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20a4082414305f544c52… ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:29:36Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e592703873fca92b6fdd… ====== -- This commit summary was generated @2015-03-19T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 18 Mar '15

18 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Update ChangeLog Arran Cudbard-Bell@2015-03-18T21:38:06Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/60082d14f9063e2ae90f… ====== Add user configurable busy_timeout to rlm_sql_sqlite driver Arran Cudbard-Bell@2015-03-18T21:26:32Z Files modified: * raddb/mods-available/sql * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/756819f5d5f30c80891a… ====== Convert comment to doxygen Arran Cudbard-Bell@2015-03-18T21:25:43Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d9fdc2ac00a57bf3de6… ====== Merge pull request #928 from painless-security/to_submit Abfab policy and trust router changes Arran Cudbard-Bell@2015-03-18T21:23:56Z Files modified: * raddb/mods-config/attr_filter/access_reject * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tls * raddb/sites-available/abfab-tr-idp * src/include/radius.h * src/main/realms.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bad426b78c357b790081… ====== document sample ABFAb RP client Sam Hartman@2015-03-18T20:50:09Z Files modified: * raddb/sites-available/abfab-tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ccb534bcb0396a39a9e… ====== dynamic = yes not true The config parser doesn't seem to accept dynamic = true, but only dynamic = yes. Update error message to provide useful description. Sam Hartman@2015-03-18T20:50:09Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3ba6af3b42b6c794ca7… ====== sqlite: include busy wait for locks Previously, sqlite would fail any query if there was a lock held on the database, such as an outstanding write. In practice this generated failures even with low-volume writes to the database. Permit a query to hang for up to 200 ms. Sam Hartman@2015-03-18T20:49:28Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/81f0219dfde554457fda… ====== Updates to abfab policy * Move policy from pre-proxy to authorize because we need to run some of the updates prior to realm because they now influence generated trust router requests. * Include setting reply messages Sam Hartman@2015-03-18T20:49:28Z Files modified: * raddb/policy.d/abfab-tr * raddb/sites-available/abfab-tr-idp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3182652dc38323b3e6d5… ====== trustrouter: permit trust-router-COI and error handling Improve the error handling of the trust router integration. Set Error-Cause to indicate a proxy routing failure if we fail to get a realm via trustrouter. Include the error back from the trust router in Reply-Message. Set trust-router-coi in the trust router code rather than depending on unlang to do so. Permit a previously specified trust-router-coi in the request to override the community in the configuration. Unlang is responsible for performing any authorization checks regarding community. Sam Hartman@2015-03-18T20:49:28Z Files modified: * src/include/radius.h * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_realm/trustrouter.c * src/modules/rlm_realm/trustrouter.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93f87d96cfac20b22092… ====== Permit Error-Cause in access reject messages Sam Hartman@2015-03-18T20:49:28Z Files modified: * raddb/mods-config/attr_filter/access_reject Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/caaca8da2eede537270a… ====== Split out unix socket connection function Arran Cudbard-Bell@2015-03-18T18:03:11Z Files modified: * src/include/libradius.h * src/lib/all.mk * src/lib/unix.c * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/26aff74b4da7d61928bf… ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:29:30Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7636bc54d4fb6be1c493… ====== -- This commit summary was generated @2015-03-19T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 18 Mar '15

18 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Process profiles too Arran Cudbard-Bell@2015-03-18T17:28:32Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddabab5df504e100b149… ====== -- This commit summary was generated @2015-03-19T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 17 Mar '15

17 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Invalid assert in _request_free Parent is set for fake requests too (Not just divorced CoA/Disconnect ones). It'd complicate the code more to require parent to be set to NULL before freeing the request, and it'd be pretty pointless. Arran Cudbard-Bell@2015-03-17T18:40:04Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c28426dcb9f7a0f63a2d… ====== -- This commit summary was generated @2015-03-18T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.1.x branch
by announce＠freeradius.org 17 Mar '15

17 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Invalid assert in _request_free Parent is set for fake requests too (Not just divorced CoA/Disconnect ones). It'd complicate the code more to require parent to be set to NULL before freeing the request, and it'd be pretty pointless. Arran Cudbard-Bell@2015-03-17T18:40:45Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb1c7b44ff8c436a0f80… ====== -- This commit summary was generated @2015-03-18T00:00:05Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Using Session State
by Sam Hartman 17 Mar '15

17 Mar '15

Hi. So, as we've discussed previously, setting use_tunneled_reply is really kind of undesirable with methods like mschapv2 that generate their own keys. Also, it tends to do undesirable things and expose the channel binding messages to the outer reply. based on the documentation it sounds like I ought to be able to use the session-state list to move attributes between the inner tunnel and outer tunnel. however, in inner-tunnel's post auth section update session-state { session-state:User-Name = &Request:User-Name } returns noop. First, should session-state work for this purpose? If so, what am I doing wrong?

2 2

Commit report for v3.1.x branch
by announce＠freeradius.org 15 Mar '15

15 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Mark groupobj membership filter as being expanded Arran Cudbard-Bell@2015-03-15T23:43:44Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d14c3a912ff9a19dba48… ====== Create equivalent pairs for all attributes Arran Cudbard-Bell@2015-03-15T06:11:01Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d299181aafdd2d5b560… ====== -- This commit summary was generated @2015-03-16T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 15 Mar '15

15 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Mark groupobj membership filter as being expanded Arran Cudbard-Bell@2015-03-15T23:44:02Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb8762382f14f8c5b460… ====== Update ChangeLog Arran Cudbard-Bell@2015-03-15T20:40:48Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/552eccf62f18ddb09fef… ====== Create equivalent pairs for all attributes Arran Cudbard-Bell@2015-03-15T06:11:13Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea781e89e249954f0765… ====== -- This commit summary was generated @2015-03-16T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0