- Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 08 Mar '15

08 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Proper fix for "Disable regex \n test. Some engines can't take \n" Arran Cudbard-Bell@2015-03-08T23:55:33Z Files modified: * src/tests/keywords/if-regex-match-comp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/415d2d85fa5b756f24bb… ====== Add notes on 3.1.x branch Arran Cudbard-Bell@2015-03-08T23:25:37Z Files modified: * doc/source/extra/toc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddba456a843a66c2b6a6… ====== Use sh -c in linelog tests, so $PATH is honoured Arran Cudbard-Bell@2015-03-08T22:30:26Z Files modified: * src/tests/modules/linelog/linelog.unlang Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e201cddca71f873a9e97… ====== Allow arbitrary environmental variables to be specified with &control:Exec-Export Arran Cudbard-Bell@2015-03-08T22:27:17Z Files modified: * share/dictionary.freeradius.internal * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c9dd56ee2542eba2362… ====== SSHA attributes should be marked as internal Arran Cudbard-Bell@2015-03-08T22:25:53Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cdb3db2248c71116436… ====== Change exec error messages to the correct severity Arran Cudbard-Bell@2015-03-08T22:25:07Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f390e49a453ee7c124d… ====== Add additional tmpl initialisation functions Arran Cudbard-Bell@2015-03-08T22:12:46Z Files modified: * src/include/tmpl.h * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3d34aeafc450e832449… ====== Fix documentation for exec functions Arran Cudbard-Bell@2015-03-08T16:13:31Z Files modified: * src/main/exec.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/184d2f2f691ded3938ee… ====== Remove redundant declaration Alan T. DeKok@2015-03-08T16:07:24Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9afb660cc80e616a8f94… ====== proxy_new_listener() gets a talloc_ctx so we can clean it up Alan T. DeKok@2015-03-08T16:07:10Z Files modified: * src/include/radiusd.h * src/main/listen.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c4b64eede9615bfea70a… ====== Disable regex \n test. Some engines can't take \n Alan T. DeKok@2015-03-08T14:50:11Z Files modified: * src/tests/keywords/if-regex-match-comp Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/967c44418243772ebbaa… ====== Typo Alan T. DeKok@2015-03-08T01:57:32Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d8140a77214141083ec… ====== Use autofree context Alan T. DeKok@2015-03-08T00:01:08Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8c0cc456aaad2a942e47… ====== Remove SSL mutex memory on clean exit Alan T. DeKok@2015-03-08T00:01:07Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/80918a5e97e3a3b0e918… ====== Clean up hash table on stop Alan T. DeKok@2015-03-08T00:01:05Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6763dfb63a69fcf3a975… ====== Clean up the fifos on clean exit Alan T. DeKok@2015-03-08T00:01:04Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cac9bed22cf1c848363… ====== fr_packet_list_id_alloc returns bool Alan T. DeKok@2015-03-08T00:01:01Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c8b2264076d29361b764… ====== -- This commit summary was generated @2015-03-09T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 07 Mar '15

07 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Declare proxy_ctx for WITH_PROXY Alan T. DeKok@2015-03-07T23:35:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f9aa0f48ab8ce69e9ff4… ====== Use correct length for printing template names Alan T. DeKok@2015-03-07T22:05:59Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd172e41810e6b55e84a… ====== Use standard functions for sockaddr to ipaddr Alan T. DeKok@2015-03-07T22:05:58Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e75ae07c0d66ec8cb466… ====== If we have no unescaping, there's no need to re-parse it Alan T. DeKok@2015-03-07T22:05:55Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c68d89982a8fc4bc43fc… ====== Limit memcpy to length Alan T. DeKok@2015-03-07T22:05:53Z Files modified: * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f084437881593bc2a118… ====== Result is a void const * Arran Cudbard-Bell@2015-03-07T18:23:47Z Files modified: * src/modules/rlm_ldap/sasl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72688cda312c5b660824… ====== Add support for value_pair_tmpl_t in linelog Arran Cudbard-Bell@2015-03-07T18:23:47Z Files modified: * src/modules/rlm_linelog/rlm_linelog.c * src/tests/modules/linelog/all.mk * src/tests/modules/linelog/linelog.attrs * src/tests/modules/linelog/linelog.unlang * src/tests/modules/linelog/module.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99cf6dca5b83ff654777… ====== Temporarily disable failing regex tests Arran Cudbard-Bell@2015-03-07T02:50:25Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/70eea2085528ac0fe079… ====== Add support for SASL interactive binds Arran Cudbard-Bell@2015-03-07T02:20:31Z Files modified: * raddb/mods-available/ldap * src/modules/rlm_ldap/all.mk.in * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/config.h.in * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_ldap/sasl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6511d016c82bc71b3aaf… ====== No longer a valid error (templates are allowed for module config items) Arran Cudbard-Bell@2015-03-07T01:16:11Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9ea8ccd7619c5ac8112… ====== Remove duplicate CC_HINT Arran Cudbard-Bell@2015-03-07T01:10:51Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb74c42eba0fd5ff13ad… ====== Netmask is not supported in master This reverts commit e4d983291adde85e1473c2e75a98bc89ca1838f4. Arran Cudbard-Bell@2015-03-07T00:15:21Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d1d342f3eda1076fbdb… ====== -- This commit summary was generated @2015-03-08T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 07 Mar '15

07 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Declare proxy_ctx for WITH_PROXY Alan T. DeKok@2015-03-07T23:35:20Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b950d99486a240db9ed… ====== Use correct length for printing template names Alan T. DeKok@2015-03-07T22:02:29Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9fadd1005098e862c1af… ====== Use standard functions for sockaddr to ipaddr Alan T. DeKok@2015-03-07T21:56:19Z Files modified: * src/modules/rlm_realm/trustrouter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/089aca6047e3537c5e64… ====== If we have no unescaping, there's no need to re-parse it Alan T. DeKok@2015-03-07T17:03:55Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dcece49830c0fa39c442… ====== Limit memcpy to length Alan T. DeKok@2015-03-07T16:59:03Z Files modified: * src/lib/value.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/430f71da4d999e68205d… ====== Temporarily disable failing regex tests Arran Cudbard-Bell@2015-03-07T04:41:19Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3bfb4d220c9540376405… ====== No longer a valid error (templates are allowed for module config items) Arran Cudbard-Bell@2015-03-07T04:41:08Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d815a3cc195011561ba4… ====== Remove duplicate CC_HINT Arran Cudbard-Bell@2015-03-07T04:40:37Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5f3716e99a843542033… ====== -- This commit summary was generated @2015-03-08T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 06 Mar '15

06 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== small updates * fixed documentation typos and corrected other sections * modified client loading to respect keys returned from view payloads Aaron Hurt (via Alan T. DeKok)@2015-03-06T20:39:08Z Files modified: * src/modules/rlm_couchbase/README.md * src/modules/rlm_couchbase/mod.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/61d01527f312c5d6ce4d… ====== Make print match parse Alan T. DeKok@2015-03-06T20:38:15Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2f6b76717368e5ce8d1… ====== Relax restrictions on group membership query We don't need to have groupcheck / group reply attrs Alan T. DeKok@2015-03-06T18:35:04Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e62f736f7966077bcb6e… ====== Allow "netmask" to work again Alan T. DeKok@2015-03-06T18:29:51Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e4d983291adde85e1473… ====== Put TCP listeners into a tree in their parent For various talloc issues Alan T. DeKok@2015-03-06T18:29:49Z Files modified: * src/include/radiusd.h * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cfe81ba3959cc0a3be6d… ====== One more regex test Alan T. DeKok@2015-03-06T18:29:48Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c821561fbf36544daafb… ====== Ensure that types can't have value 0 So we don't run into the previous problem again Alan T. DeKok@2015-03-06T00:05:25Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d63cd64b7754581f3eb… ====== -- This commit summary was generated @2015-03-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 06 Mar '15

06 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== note recent changes Alan T. DeKok@2015-03-06T22:30:33Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c38b63bb724d7c651d44… ====== proxy_new_listener() gets a talloc_ctx so we can clean it up Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/include/radiusd.h * src/main/listen.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b77259eac3dc9b9147d… ====== Use autofree context Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf3d49374338efad7e5a… ====== Remove SSL mutex memory on clean exit Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/325e9ad5d611bd1f25ed… ====== Clean up hash table on stop Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e990c8a4bb3d611e6c14… ====== Clean up the fifos on clean exit Alan T. DeKok@2015-03-06T22:22:56Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/efa611f3fea4c7b2d22a… ====== fr_packet_list_id_alloc returns bool Alan T. DeKok@2015-03-06T22:21:03Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da98684d242fda14b401… ====== Merge pull request #920 from leprechau/small_updates small updates Alan DeKok@2015-03-06T20:38:54Z Files modified: * src/modules/rlm_couchbase/README.md * src/modules/rlm_couchbase/mod.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/accf635b43c094493d79… ====== small updates * fixed documentation typos and corrected other sections * modified client loading to respect keys returned from view payloads Aaron Hurt@2015-03-06T19:58:58Z Files modified: * src/modules/rlm_couchbase/README.md * src/modules/rlm_couchbase/mod.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eda922b47388adfdbcf5… ====== Make print match parse Alan T. DeKok@2015-03-06T20:37:58Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4640e6dc08225790a2d3… ====== Leave regexes unmolested. The regex compiler can do necessary de-quoting Alan T. DeKok@2015-03-06T18:40:29Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7629ce4ec640c65610e0… ====== Relax restrictions on group membership query We don't need to have groupcheck / group reply attrs Alan T. DeKok@2015-03-06T18:33:38Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb307a24f9b2ac3446a8… ====== Allow "netmask" to work again Alan T. DeKok@2015-03-06T18:29:29Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bcd1433a38caf0232d11… ====== note recent changes Alan T. DeKok@2015-03-06T17:42:37Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9f02733bf070651d6e8c… ====== Put TCP listeners into a tree in their parent For various talloc issues Alan T. DeKok@2015-03-06T17:42:13Z Files modified: * src/include/radiusd.h * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/119f974cec528834d8a1… ====== One more regex test Alan T. DeKok@2015-03-06T17:41:05Z Files modified: * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/97470a99383ffb769667… ====== note recent changes Alan T. DeKok@2015-03-06T00:07:26Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0d77c62afc024fa10e2… ====== Ensure that types can't have value 0 So we don't run into the previous problem again Alan T. DeKok@2015-03-06T00:04:45Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/308a45f1f5b421c0d85b… ====== -- This commit summary was generated @2015-03-07T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

regular expression error in 3.0.x not present in 3.0.6
by Aaron Hurt 06 Mar '15

06 Mar '15

I have a policy.d file containing a regular expression that works in 3.0.6 that I’ve tried with two different flavors. Both flavors load and work in 3.0.6 but error in the latest 3.0.x branch. Flavor1: simple_nt_regexp = "^([^\\\\]*)(\\\\(.*))$" Flavor2: simple_nt_regexp = "^([^\\\\]*)\\\\(.*)$” In 3.0.x from today: /opt/local/etc/raddb/policy.d/strip-user-domain[9]: Invalid regular expression: /opt/local/etc/raddb/policy.d/strip-user-domain[9]: ^([^\\]*)\\(.*)$ /opt/local/etc/raddb/policy.d/strip-user-domain[9]: ^ Pattern study failed: unknown or incorrect option bit(s) set /opt/local/etc/raddb/policy.d/strip-user-domain[10]: Invalid regular expression: /opt/local/etc/raddb/policy.d/strip-user-domain[10]: ^([^\\]*)(\\(.*))$ /opt/local/etc/raddb/policy.d/strip-user-domain[10]: ^ Pattern study failed: unknown or incorrect option bit(s) set Is there something obvious that I am missing? — Aaron

5 13

Commit report for master branch
by announce＠freeradius.org 05 Mar '15

05 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make tls_new_client_session set a destructor, too. So that ssn->ssl gets freed Alan T. DeKok@2015-03-05T18:27:51Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8859800057bc4efbda29… ====== No need for these functions to be exported Alan T. DeKok@2015-03-05T18:27:50Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/333d513a9c91856a49bb… ====== More doc fixes Arran Cudbard-Bell@2015-03-05T18:07:46Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc5bc238cbfc13ceea8d… ====== Don't use 0 for any value. It's reserved for the default section Alan T. DeKok@2015-03-05T17:36:36Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a0e25556df90adfe18fc… ====== Limit talloc report depth So that we don't blow up on talloc loops. Which shouldn't happen. Alan T. DeKok@2015-03-05T15:08:30Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/68b0559e7f09e991d381… ====== use separate definitions and declarations for mod_* functions in rlm_sql Arran Cudbard-Bell@2015-03-05T05:56:22Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25bb029aeb444410f73d… ====== rlm_sql should return noop if we can't find a matching query section Arran Cudbard-Bell@2015-03-05T05:45:58Z Files modified: * src/main/conffile.c * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d165e7e966009a37be9c… ====== Only print cleanup messages if a message about the request was logged Arran Cudbard-Bell@2015-03-05T04:45:53Z Files modified: * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6cd1ad3ced56a76d29f7… ====== Fix @return in tmpl_*expand Arran Cudbard-Bell@2015-03-05T04:36:07Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6d5cf233573addca49f1… ====== Return int not bool for all tmpl functions Arran Cudbard-Bell@2015-03-05T02:35:48Z Files modified: * src/include/tmpl.h * src/main/map.c * src/main/modcall.c * src/main/parser.c * src/main/tmpl.c * src/modules/rlm_cache/serialize.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4fe59c14764dccbb7d40… ====== Complete documentation for templates Arran Cudbard-Bell@2015-03-05T01:42:46Z Files modified: * src/include/tmpl.h * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7fc9b7a664e67b4ae333… ====== tmpl_free function is no longer needed, as value_pair_tmpl_t have an internal buffer for storing unknown attributes. Arran Cudbard-Bell@2015-03-05T01:14:48Z Files modified: * src/include/tmpl.h * src/main/modcall.c * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/841444db010aac694789… ====== -- This commit summary was generated @2015-03-06T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 05 Mar '15

05 Mar '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make tls_new_client_session set a destructor, too. So that ssn->ssl gets freed Alan T. DeKok@2015-03-05T18:27:15Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e4dcf8c962e0f2e6ff8d… ====== No need for these functions to be exported Alan T. DeKok@2015-03-05T18:23:59Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1727234870e4a5c545fe… ====== Don't use 0 for any value. It's reserved for the default section Alan T. DeKok@2015-03-05T17:36:29Z Files modified: * share/dictionary.freeradius.internal Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d9a9d594e666d70b9762… ====== More doc fixes Arran Cudbard-Bell@2015-03-05T17:22:41Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/71c4361b6acc316c5d32… ====== Limit talloc report depth So that we don't blow up on talloc loops. Which shouldn't happen. Alan T. DeKok@2015-03-05T15:07:46Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c00210cb32efa1e59018… ====== use separate definitions and declarations for mod_* functions in rlm_sql Arran Cudbard-Bell@2015-03-05T05:56:14Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cf1529ec894cecee0a35… ====== rlm_sql should return noop if we can't find a matching query section Arran Cudbard-Bell@2015-03-05T05:45:51Z Files modified: * src/main/conffile.c * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc294bc82c908290cf8f… ====== Only print cleanup messages if a message about the request was logged Arran Cudbard-Bell@2015-03-05T04:44:37Z Files modified: * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0fc782a609681ec300cf… ====== Fix @return in tmpl_*expand Arran Cudbard-Bell@2015-03-05T04:33:48Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b09b10b1819b43d474c8… ====== Return int not bool for all tmpl functions Arran Cudbard-Bell@2015-03-05T02:35:24Z Files modified: * src/include/tmpl.h * src/main/map.c * src/main/modcall.c * src/main/parser.c * src/main/tmpl.c * src/modules/rlm_cache/serialize.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d60a54f16b69bd278510… ====== Minor corrections Arran Cudbard-Bell@2015-03-05T01:43:04Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2e3188751bfed12d29ed… ====== Complete documentation for templates Arran Cudbard-Bell@2015-03-05T01:13:29Z Files modified: * src/include/tmpl.h * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/422c3b4744e3ee28f4d8… ====== tmpl_free function is no longer needed, as value_pair_tmpl_t have an internal buffer for storing unknown attributes. Arran Cudbard-Bell@2015-03-05T01:11:31Z Files modified: * src/include/tmpl.h * src/main/modcall.c * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/626114ab37064ee6d55c… ====== -- This commit summary was generated @2015-03-06T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

filter_username and regexps broken
by Sam Hartman 05 Mar '15

05 Mar '15

I'm getting a request denied because the username matches \.\., but I don't see why that should be true Thread 3 handling request 0, (1 handled so far) (0) Received Access-Request Id 0 from 127.0.0.1:53392 to 0.0.0.0:2083 length 130 (0) User-Name = '@apc.painless-security.com' (0) GSS-Acceptor-Service-Name = 'trustidentity' (0) GSS-Acceptor-Host-Name = 'hartmans.local' (0) EAP-Message = 0x0200001f01406170632e7061696e6c6573732d73656375726974792e636f6d (0) Message-Authenticator = 0xc977441e8dda36e128cbd617a7f16ed1 (0) # Executing section authorize from file /etc/freeradius/sites-enabled/abfab-tr-idp (0) authorize { (0) policy psk_authorize { (0) if (tls-psk-identity =* ANY) { (0) if (tls-psk-identity =* ANY) -> FALSE (0) } # policy psk_authorize = notfound (0) policy filter_username { (0) if (!&User-Name) { (0) if (!&User-Name) -> FALSE (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@.*@/ ) { (0) if (&User-Name =~ /@.*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> TRUE (0) if (&User-Name =~ /\.\./ ) { (0) update reply { (0) &Reply-Message += 'Rejected: Username contains ..s' (0) } # update reply = noop (0) [reject] = reject (0) } # if (&User-Name =~ /\.\./ ) = reject (0) } # policy filter_username = reject (0) } # authorize = reject (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/sites-enabled/abfab-tr-idp (0) Post-Auth-Type REJECT { (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> @apc.painless-security.com (0) attr_filter.access_reject: Matched entry DEFAULT at line 18 (0) [attr_filter.access_reject] = updated (0) if &reply:Eap-Message { (0) if &reply:Eap-Message -> FALSE (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Thread 3 waiting to be assigned a request Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 0 from 0.0.0.0:2083 to 127.0.0.1:53392 length 53 (0) Reply-Message += 'Rejected: Username contains ..s' Waking up in 3.9 seconds. Closing TLS socket from client port 53392 (0) >>> TLS 1.0 Alert [length 0002], warning close_notify Client has closed connection Waking up in 3.9 seconds.

2 1

Reply-Message and Eap
by Sam Hartman 05 Mar '15

05 Mar '15

so, I understand why it would be confusing to have both a Reply-Message and an Eap-Message in the same packet. I'm a bit confused why it's desirable to insert an EAP failure into a packet in an access reject case. We'd like to do a better job of error reporting back to ABFAB clients than "Uh, it failed." for some things we can use Error-Cause as we discussed previously. However it would be really nice to get a text string back too. What I'd like to do is send back a packet with no EAP message and a Reply-Message. Will that break things? would it be reasonable to update policy to prefer keeping Reply-Message over replacing Reply-Message with an EAP failure in the case where we're handling a reject that currently has no EAP message at all? I.E. we rejected before eap got called in authorize/authenticate, or unlang removed Eap-Message. --Sam

3 7