- Freeradius-Devel - lists.freeradius.org

authenticating a guest domain/ntlm_auth in a different AD
by Rui Ribeiro 29 Jan '15

29 Jan '15

Hi, I would like to authenticate a guest domain in a different AD in FR3. I setup up with quite success the guest domain, however when it comes to configure chap, somewhat I cannot get it how to make mschap have too different configurations depending how the domain is called. I tried mschap.newdomain as I saw in some post over here, and it did not work out. The ideia of having to mschap configurations is for calling ntlm_auth with a different Windows DOMAIN. most specifically, this not works. Is it wiser to build a new FR to the guest domain. unlang if (domain == "xxxx" ) { domain.xxxx } mschap module mschap.xxxx -- Regards, -- Rui Ribeiro Senior Sysadm ISCTE-IUL https://www.linkedin.com/pub/rui-ribeiro/16/ab8/434

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 28 Jan '15

28 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Filter out EAP-Message, too. Fixes #893 Alan T. DeKok@2015-01-28T19:53:10Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc0a2062d081c94df834… ====== Notes on new tests Alan T. DeKok@2015-01-28T18:07:09Z Files modified: * src/tests/README Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/feb216136933b714b925… ====== doc cleanups Alan T. DeKok@2015-01-28T17:57:07Z Files modified: * src/tests/xlat/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2649770cc1d05cb45a18… ====== Added simple dynamic xlat tests for stand-alone expansions Alan T. DeKok@2015-01-28T17:54:35Z Files modified: * Makefile * src/main/unittest.c * src/tests/all.mk * src/tests/keywords/all.mk * src/tests/xlat/all.mk * src/tests/xlat/expr.txt * src/tests/xlat/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c053ffc0f55036f66760… ====== We don't need to check for a User-Name in the request to authorize users in rlm_ldap It's not used by the rlm_ldap code, we use a filter to locate the user. Arran Cudbard-Bell@2015-01-28T13:09:22Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ce582dcfce6de15c3d3e… ====== Fix -Winitialize in ippool tool Arran Cudbard-Bell@2015-01-28T11:21:30Z Files modified: * src/modules/rlm_ippool/rlm_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2a8784e348c8b966bf0e… ====== Because GCC 4.4.7 apparently doesn't support the 'noreturn' pragma Arran Cudbard-Bell@2015-01-28T11:21:30Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/297137eef626e179d1f3… ====== Normalise indentation in rlm_ldap configure script Arran Cudbard-Bell@2015-01-28T10:52:58Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/491936873f9e1bff2e46… ====== Link to libldap instead of libldap_r This change may be reverted if it causes issues. Arran Cudbard-Bell@2015-01-28T10:52:57Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b46a0b7547a0b1457ace… ====== -- This commit summary was generated @2015-01-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 28 Jan '15

28 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Filter out EAP-Message, too. Fixes #893 Alan T. DeKok@2015-01-28T19:53:38Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9c050461916761d99e15… ====== Added simple dynamic xlat tests for stand-alone expansions Alan T. DeKok@2015-01-28T17:55:07Z Files modified: * Makefile * src/main/unittest.c * src/tests/all.mk * src/tests/keywords/all.mk * src/tests/xlat/all.mk * src/tests/xlat/expr.txt * src/tests/xlat/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6b88722f2b0a1cf46906… ====== We don't need to check for a User-Name in the request to authorize users in rlm_ldap It's not used by the rlm_ldap code, we use a filter to locate the user. Arran Cudbard-Bell@2015-01-28T13:09:15Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c98b59dc11141fac639… ====== Fix -Winitialize in ippool tool Arran Cudbard-Bell@2015-01-28T11:21:17Z Files modified: * src/modules/rlm_ippool/rlm_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/18ac221b81f4b42ee383… ====== Because GCC 4.4.7 apparently doesn't support the 'noreturn' pragma Arran Cudbard-Bell@2015-01-28T11:21:17Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d340256740d2e25e20c… ====== Normalise indentation in rlm_ldap configure script Arran Cudbard-Bell@2015-01-28T10:53:22Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d118901a6dca768759f6… ====== Link to libldap instead of libldap_r This change may be reverted if it causes issues. Arran Cudbard-Bell@2015-01-28T10:53:22Z Files modified: * src/modules/rlm_ldap/configure * src/modules/rlm_ldap/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a7454cae9f837ea03b5… ====== -- This commit summary was generated @2015-01-29T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 27 Jan '15

27 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Document attribute filtering. Fixes #893 Alan T. DeKok@2015-01-27T17:59:39Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/570f1ada1dedc5c5e20d… ====== build cleanly WITH_GCD Alan T. DeKok@2015-01-27T17:59:39Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5ae1de093d424ab75b7… ====== Set query timeout correctly in the MySQL driver read timeout is t * 3 write timeout is t * 2 and connect timeout is t *sigh* Which means the effective minimum query timeout is 3. Arran Cudbard-Bell@2015-01-27T08:17:16Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bca3d4d1277a8e510232… ====== Disable MySQL autoreconnect We need to know when a connection has failed Arran Cudbard-Bell@2015-01-27T08:17:16Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9aad4e83d57fdfa736d7… ====== Fix cppcheck complaints Alan T. DeKok@2015-01-27T04:21:34Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/359358d49ce6420c01c1… ====== Rearrange code to quiet cppcheck Alan T. DeKok@2015-01-27T04:21:32Z Files modified: * src/modules/rlm_digest/rlm_digest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f1054be1f61dbb54dc5… ====== fix cppcheck warnings Alan T. DeKok@2015-01-27T04:21:31Z Files modified: * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3de92eafa06ee1f96e2… ====== -- This commit summary was generated @2015-01-28T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 27 Jan '15

27 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Document attribute filtering. Fixes #893 Alan T. DeKok@2015-01-27T17:57:30Z Files modified: * raddb/sites-available/inner-tunnel Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c0d6230e673ea7dd0f5… ====== build cleanly WITH_GCD Alan T. DeKok@2015-01-27T14:51:09Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/215ee7ed358c5660dc07… ====== Set query timeout correctly in the MySQL driver read timeout is t * 3 write timeout is t * 2 and connect timeout is t *sigh* Which means the effective minimum query timeout is 3. Arran Cudbard-Bell@2015-01-27T08:16:24Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7d185d45b260e0457f88… ====== Disable MySQL autoreconnect We need to know when a connection has failed Arran Cudbard-Bell@2015-01-27T08:16:24Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5ff2eda3e4ce742bfbc… ====== Fix cppcheck complaints Alan T. DeKok@2015-01-27T04:21:11Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3406bc251a4e72148ef7… ====== Rearrange code to quiet cppcheck Alan T. DeKok@2015-01-27T04:04:08Z Files modified: * src/modules/rlm_digest/rlm_digest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/34c9c2cdff11202f222e… ====== fix cppcheck warnings Alan T. DeKok@2015-01-27T04:01:12Z Files modified: * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5a10eda0fad21fa8eba… ====== -- This commit summary was generated @2015-01-28T00:00:04Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 26 Jan '15

26 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== un-confuse cppcheck Alan T. DeKok@2015-01-26T23:29:31Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d10b01947ba03b19b352… ====== checks for start_tls were accidentally deleted Alan T. DeKok@2015-01-26T23:11:55Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87a2a40581b8487f34f0… ====== Shut up C compiler by including header files Alan T. DeKok@2015-01-26T22:49:07Z Files modified: * src/main/collectd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ad7aa297a48905c9b54… ====== signed int issues Alan T. DeKok@2015-01-26T22:49:06Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/76e07a8baea98e349d3d… ====== Shut up cppcheck Alan T. DeKok@2015-01-26T22:49:04Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/40760074d6a73d2b9308… ====== Simplify many #ifdef's Alan T. DeKok@2015-01-26T22:49:03Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2e57b6209ec69dfe2aa… ====== Ensure we close FILEs. Alan T. DeKok@2015-01-26T22:49:02Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bcd3d99be2e4c02e173c… ====== Ensure we initialize variables Alan T. DeKok@2015-01-26T22:49:01Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37bf8c199dac01b711b6… ====== Ensure we initialize variables Alan T. DeKok@2015-01-26T22:49:00Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77e93c5ac382077189d6… ====== Remove unneeded assertion. Alan T. DeKok@2015-01-26T22:28:58Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/245920295aa932f05972… ====== #ifdef out CURLOPT_PROTOCOLS if not defined Arran Cudbard-Bell@2015-01-26T20:15:30Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/43e2c3c6b0c7f88e18fc… ====== As found on the net Alan T. DeKok@2015-01-26T19:08:43Z Files modified: * share/dictionary * share/dictionary.travelping Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/852f15c72d41c6378657… ====== Fix nested #ifdef HAVE_SETUID Arran Cudbard-Bell@2015-01-26T14:15:55Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7af15ac8a7e227ac13ae… ====== Merge pull request #890 from kokel/dict-perle add perle dictionary Arran Cudbard-Bell@2015-01-26T13:48:19Z Files modified: * share/dictionary * share/dictionary.perle Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7f3d8904a5430dc3a108… ====== add perle dictionary Tobias Hachmer@2015-01-26T13:45:04Z Files modified: * share/dictionary * share/dictionary.perle Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/53bf263d6ca9010acdc0… ====== Move suid* functions to util.c so they're included in libfreeradius-server This fixes linking issues, when they're called from other libfreeradius-server functions Arran Cudbard-Bell@2015-01-26T13:10:25Z Files modified: * src/include/libradius.h * src/include/radiusd.h * src/lib/debug.c * src/main/command.c * src/main/listen.c * src/main/mainconfig.c * src/main/process.c * src/main/util.c * src/modules/proto_arp/proto_arp.c * src/modules/proto_bfd/bfd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c4c9c8a9d1a9e33df4a… ====== Helps to write the result to the result buffer... Arran Cudbard-Bell@2015-01-26T07:52:09Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0f23410c5d36bdef45d… ====== Move socket permissions code into fr_server_domain_socket Arran Cudbard-Bell@2015-01-26T07:52:09Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d8fff09954a9d904ca1… ====== Partially revert "call rad_mkdir to make the path for the control socket, and modify the default config to place the control socket into a 'control' subdirectory" This reverts commit 2268bddadaf2d3aab09f18eea863895c9a01ce7a. Better to keep the new logic entirely separate Conflicts: src/main/command.c src/main/util.c Arran Cudbard-Bell@2015-01-26T07:52:09Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ea2410627742d03ac82… ====== Address (some) potential TOCTOU attack vectors in rad_mkdir We now leave ownership as the effective UID (which should be sufficiently restrictive) whilst creating the directory structure, and set initial permissions to 0700. When setting final permissions, we first open the directory, check we still have write permissions by doing fchmod with our effective UID/GID (which should not be super user), then suid_up, and use fchown to set the owner. Arran Cudbard-Bell@2015-01-26T07:52:09Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/df48102bc5a975094616… ====== Rename directory to dir in rad_mkdir, and add doxygen header Arran Cudbard-Bell@2015-01-26T07:52:09Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3529bdd25ea5c4065be9… ====== Cleanups to match the rest of the server formatting Alan T. DeKok@2015-01-26T00:00:30Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ddd1299406182786462… ====== Minor cleanups Alan T. DeKok@2015-01-26T00:00:28Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7bf807492aa87e8395eb… ====== dhcpclient - allow to specify interface and send/recv at raw packet level As discussed earlier on the list: - if the client host has multiple interfaces, - and at least one of them already has an IP address, Then the source IP address cannot be 0.0.0.0 (even with "Packet-Src-IP-Address=0.0.0.0"). An actual IP address is automatically used as source. This is modified by the device driver. This patch does the following: - Add an option to dhcpclient allowing to specify which network interface to use. - Open a raw socket on the low level packet interface. This allows packet data to be left unchanged by the device driver. - Encode Ethernet (send to ff:ff:ff:ff:ff:ff), IP and UDP layers manually. And let FreeRADIUS do the DHCP stuff, as before. (This required new specific socket / send / recv functions.) The existing behaviour of dhcpclient is unchanged, it is used if the new option -i is not set (or if destination is not broadcast). Conflicts: src/modules/proto_dhcp/dhcpclient.c Nicolas C (via Alan T. DeKok)@2015-01-26T00:00:27Z Files modified: * src/include/dhcp.h * src/include/net.h * src/lib/net.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8dd26a1c16e38a9ceb1c… ====== -- This commit summary was generated @2015-01-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 26 Jan '15

26 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== un-confuse cppcheck Alan T. DeKok@2015-01-26T23:29:19Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7845593dff149004a02b… ====== %u for unsigned ints Alan T. DeKok@2015-01-26T23:19:32Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1a98a7c02144a0a0bbad… ====== We don't need unused structs Alan T. DeKok@2015-01-26T23:18:51Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10b736a39439cbfe14f3… ====== checks for start_tls were accidentally deleted Alan T. DeKok@2015-01-26T23:11:22Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a8b942263e96b4d814e… ====== Shut up C compiler by including header files Alan T. DeKok@2015-01-26T22:48:33Z Files modified: * src/main/collectd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30256db635553a579354… ====== signed int issues Alan T. DeKok@2015-01-26T22:47:05Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef5468d28b3ac2c77269… ====== Shut up cppcheck Alan T. DeKok@2015-01-26T22:47:05Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a6de645299f8155387f6… ====== Simplify many #ifdef's Alan T. DeKok@2015-01-26T22:47:05Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1399aac87f11c511abd0… ====== Ensure we close FILEs. Alan T. DeKok@2015-01-26T22:47:05Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ff19b1993999b27a7cba… ====== Ensure we initialize variables Alan T. DeKok@2015-01-26T22:47:05Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d68a5b05c0d3f268551… ====== Ensure we initialize variables Alan T. DeKok@2015-01-26T22:32:53Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d548fb8268a606f5c0fb… ====== Remove unneeded assertion. Alan T. DeKok@2015-01-26T22:28:35Z Files modified: * src/main/tmpl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22eab179210c4246b2eb… ====== Notes on alcatel format Alan T. DeKok@2015-01-26T20:48:14Z Files modified: * share/dictionary.alcatel.sr Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f61ca232d5d912edb2b6… ====== #ifdef out CURLOPT_PROTOCOLS if not defined Arran Cudbard-Bell@2015-01-26T20:15:07Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4334ff5410a6c4acd9c8… ====== As found on the net Alan T. DeKok@2015-01-26T19:08:21Z Files modified: * share/dictionary * share/dictionary.travelping Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ea8aea66a3e65b4e4788… ====== Fix nested #ifdef HAVE_SETUID Arran Cudbard-Bell@2015-01-26T14:15:20Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0873b87a6e94cdecfa1b… ====== add perle dictionary Tobias Hachmer (via Arran Cudbard-Bell)@2015-01-26T14:05:08Z Files modified: * share/dictionary * share/dictionary.perle Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc5d3833b3fe257cb98b… ====== Move suid* functions to util.c so they're included in libfreeradius-server This fixes linking issues, when they're called from other libfreeradius-server functions Arran Cudbard-Bell@2015-01-26T14:04:40Z Files modified: * src/include/libradius.h * src/include/radiusd.h * src/lib/debug.c * src/main/command.c * src/main/listen.c * src/main/mainconfig.c * src/main/process.c * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b20c021aef60a3d3f206… ====== Merge pull request #891 from qnet-herwin/indention_changelog_3_0_7 Fixed indention of ChangeLog for release 3.0.7 Arran Cudbard-Bell@2015-01-26T14:00:16Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/07b88938ce26739b7830… ====== Fixed indention of ChangeLog for release 3.0.7 It was a mess of tabs and spaces, and impossible to read with a tabwidth other than 8. Herwin Weststrate@2015-01-26T13:56:47Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5e7375843b6139d12938… ====== Helps to write the result to the result buffer... Arran Cudbard-Bell@2015-01-26T07:53:48Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7cf1b0af5143ef100b7… ====== Move socket permissions code into fr_server_domain_socket Arran Cudbard-Bell@2015-01-26T07:53:43Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/57124688855a19772683… ====== Partially revert "call rad_mkdir to make the path for the control socket, and modify the default config to place the control socket into a 'control' subdirectory" This reverts commit 2268bddadaf2d3aab09f18eea863895c9a01ce7a. Better to keep the new logic entirely separate Conflicts: src/main/command.c src/main/util.c Arran Cudbard-Bell@2015-01-26T07:53:39Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0514d8731390879e9570… ====== Address (some) potential TOCTOU attack vectors in rad_mkdir We now leave ownership as the effective UID (which should be sufficiently restrictive) whilst creating the directory structure, and set initial permissions to 0700. When setting final permissions, we first open the directory, check we still have write permissions by doing fchmod with our effective UID/GID (which should not be super user), then suid_up, and use fchown to set the owner. Arran Cudbard-Bell@2015-01-26T07:53:32Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2d227a3e5146ca192cd… ====== Rename directory to dir in rad_mkdir, and add doxygen header Arran Cudbard-Bell@2015-01-26T07:53:28Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8d0d87c57350530ee04a… ====== Cleanups to match the rest of the server formatting Alan T. DeKok@2015-01-26T00:00:06Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c879a4d24f3438e4e30… ====== Minor cleanups Alan T. DeKok@2015-01-25T23:51:18Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a33216a3ff68241de70d… ====== dhcpclient - allow to specify interface and send/recv at raw packet level As discussed earlier on the list: - if the client host has multiple interfaces, - and at least one of them already has an IP address, Then the source IP address cannot be 0.0.0.0 (even with "Packet-Src-IP-Address=0.0.0.0"). An actual IP address is automatically used as source. This is modified by the device driver. This patch does the following: - Add an option to dhcpclient allowing to specify which network interface to use. - Open a raw socket on the low level packet interface. This allows packet data to be left unchanged by the device driver. - Encode Ethernet (send to ff:ff:ff:ff:ff:ff), IP and UDP layers manually. And let FreeRADIUS do the DHCP stuff, as before. (This required new specific socket / send / recv functions.) The existing behaviour of dhcpclient is unchanged, it is used if the new option -i is not set (or if destination is not broadcast). Conflicts: src/modules/proto_dhcp/dhcpclient.c Nicolas C (via Alan T. DeKok)@2015-01-25T23:39:46Z Files modified: * src/include/dhcp.h * src/include/net.h * src/lib/net.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7deeac78b8fc50cdcd4e… ====== -- This commit summary was generated @2015-01-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Code review - alternative autz scheme for control sockets
by Arran Cudbard-Bell 26 Jan '15

26 Jan '15

Inviting comments from the community on this one too: https://github.com/FreeRADIUS/freeradius-server/pull/892 Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

3 2

Commit report for v3.0.x branch
by announce＠freeradius.org 25 Jan '15

25 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Honor Packet-Src-Port in radclient. Fixes #889 Alan T. DeKok@2015-01-25T15:37:23Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1007fd2b68e540d38539… ====== These variables are "static" Alan T. DeKok@2015-01-25T15:32:27Z Files modified: * src/modules/rlm_ippool/rlm_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b61bcf3cec1170c31330… ====== fix compiler warnings Alan T. DeKok@2015-01-25T15:32:17Z Files modified: * src/modules/rlm_idn/rlm_idn.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c98fdb6a5e87e36a2d87… ====== -- This commit summary was generated @2015-01-26T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 25 Jan '15

25 Jan '15

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Honor Packet-Src-Port in radclient. Fixes #889 Alan T. DeKok@2015-01-25T15:38:04Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/511d0b3eb546d565e57e… ====== These variables are "static" Alan T. DeKok@2015-01-25T15:38:03Z Files modified: * src/modules/rlm_ippool/rlm_ippool_tool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b75579548770ceb5d3ad… ====== fix compiler warnings Alan T. DeKok@2015-01-25T15:38:02Z Files modified: * src/modules/rlm_idn/rlm_idn.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c0c7411af0a38b32128… ====== -- This commit summary was generated @2015-01-26T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0