- Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 09 Apr '14

09 Apr '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Always set type correctly Arran Cudbard-Bell@2014-04-09T22:29:42Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b8d16fc0b145560184e2… ====== Coverity #1198850 #1198851 #1198852 Arran Cudbard-Bell@2014-04-09T21:48:00Z Files modified: * src/modules/rlm_unbound/rlm_unbound.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99d3ec7767cb35847b4c… ====== CID #1198853 *sigh* Arran Cudbard-Bell@2014-04-09T21:40:24Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5a91e827a7ecf6b0a9f… ====== For travis tests, allow vulnerable versions of OpenSSL. Strictly for testing Alan T. DeKok@2014-04-09T17:57:29Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3d21794bb76cee00f6f… ====== Use correct talloc type Alan T. DeKok@2014-04-09T17:45:57Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d9f8fb3ac24c5e021bc9… ====== Use correct talloc type Alan T. DeKok@2014-04-09T17:45:56Z Files modified: * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b620c1a4da4c8bc1a4f8… ====== Create reply attributes parented from the reply Alan T. DeKok@2014-04-09T17:45:55Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d0ee3de2cee1c866b47… ====== Use RDEBUG instead of DEBUG Alan T. DeKok@2014-04-09T17:45:54Z Files modified: * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9165dfb331a197a10b9… ====== Check for invalid TLS handshake If the system has a vulnerable version of OpenSSL, and the admin has told us to allow it, we want to catch and stop the problem. Alan T. DeKok@2014-04-09T17:45:53Z Files modified: * src/include/tls-h * src/main/cb.c * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/315eba1c2c6114ad9b05… ====== If we fail during tls handshake, don't send an EAP-Fail msg Because tls_handshake_recv() says there's something wrong with the TLS session. Therefore, we can't use it for anything Alan T. DeKok@2014-04-09T17:45:52Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c2f121b25e8912b008e… ====== Add request number Arran Cudbard-Bell@2014-04-09T17:32:41Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0bb5c8802cf2b7822b15… ====== Extra paranoia. Check panic_action both on startup, and when we attempt to execute it. Arran Cudbard-Bell@2014-04-09T12:19:00Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6f54ae2b430f7353c3d4… ====== Add warning on pattach Arran Cudbard-Bell@2014-04-09T12:06:26Z Files modified: * raddb/radiusd.conf.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ea988f6f8b25efbce4e… ====== -- This commit summary was generated @2014-04-10T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 Apr '14

08 Apr '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Tweak visual grouping to make ssl version easier to read Arran Cudbard-Bell@2014-04-08T23:45:06Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6f3ef396f7fdb57663a… ====== Don't be lazy when printing openssl version numbers Arran Cudbard-Bell@2014-04-08T23:35:49Z Files modified: * src/main/tls.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00acb8d5e4f5522709a0… ====== A simple framework to deal with future security issues in libssl Arran Cudbard-Bell@2014-04-08T23:21:08Z Files modified: * src/include/radiusd.h * src/include/tls-h * src/main/mainconfig.c * src/main/tls.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e462720de2d64609e27b… ====== Don't replicate reply packets. The code never handled it, so it's safe to delete the functions Alan T. DeKok@2014-04-08T22:05:45Z Files modified: * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/504942da714c159afb59… ====== The input packet can't be an Access-Challenge Alan T. DeKok@2014-04-08T22:05:43Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b03898ea0f343035cc4… ====== Remove "auto_header" functionality. It's not used anywhere. Alan T. DeKok@2014-04-08T22:05:41Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a0b828c1de16cc1f3dee… ====== Removed conf2xml and conf2file functionality. No one uses it, and we shouldn't carry around legacy code Alan T. DeKok@2014-04-08T20:47:07Z Files modified: * man/man8/radconf2xml.8 * redhat/freeradius.spec * src/include/conffile.h * src/main/all.mk * src/main/command.c * src/main/conffile.c * src/main/radconf2xml.c * src/main/radconf2xml.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b76dc7f26f127c1b4ae2… ====== Remove unused functions Alan T. DeKok@2014-04-08T20:46:21Z Files modified: * src/include/conffile.h * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25fadd8248d2ab0b2a24… ====== Hacks for allow_vulnerable_openssl=yes and tests Alan T. DeKok@2014-04-08T18:26:05Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c9cf1e173e0e123d0dd… ====== Use src/tests/test.conf instead of raddb/test.conf And fix up the various config items so that it works. Add allow_vulnerable_openssl=yes, too Alan T. DeKok@2014-04-08T18:23:48Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2338da20a20dd452ea33… ====== Warn about duplicate configuration items. Only the first one will be found. The second will be ignored. Alan T. DeKok@2014-04-08T18:23:40Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75a331e79a773c4167fe… ====== Include vqp dictionary in the tests Alan T. DeKok@2014-04-08T18:22:35Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52f886a2ab9c213f8586… ====== Remove duplicate policies. They're now in ./eap Alan T. DeKok@2014-04-08T18:22:33Z Files modified: * raddb/policy.d/filter Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a961928a6984421f376… ====== Allow vulnerable OpenSSL for testing purposes Alan T. DeKok@2014-04-08T17:26:49Z Files modified: * src/tests/auth/radiusd.conf * src/tests/config/test.conf * src/tests/keywords/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/abe0ab86e7c83986c699… ====== Fix mainconfig API and use consistent names Alan T. DeKok@2014-04-08T17:19:34Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7beb80a9271d3709c3a… ====== Fix module API and use consistent names Alan T. DeKok@2014-04-08T17:19:33Z Files modified: * src/include/modules.h * src/main/mainconfig.c * src/main/modules.c * src/main/radiusd.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f887b68b68e87f27fe7… ====== We now have to load the modules manually Alan T. DeKok@2014-04-08T16:48:42Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/90feb75fd4a6caac5506… ====== Load modules *after* initialising OpenSSL Arran Cudbard-Bell@2014-04-08T16:13:19Z Files modified: * src/main/mainconfig.c * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/778330c8602eebc44bed… ====== Add config item to toggle openssl vulnerability check Arran Cudbard-Bell@2014-04-08T15:09:58Z Files modified: * raddb/radiusd.conf.in * src/include/radiusd.h * src/include/tls-h * src/main/mainconfig.c * src/main/radiusd.c * src/main/tls.c * src/main/version.c * src/tests/auth/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52b4c2f1950c05e0086b… ====== Refuse to start with OpenSSL 1.0.1 - 1.0.1f Arran Cudbard-Bell@2014-04-08T12:11:07Z Files modified: * src/include/tls-h * src/main/radiusd.c * src/main/tls.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d427a7c13ea85ca8549a… ====== Revert "Patch for OpenSSL insanity" This reverts commit 62fa43b6a837964038beaeb694f03c1d6110cfe7. Arran Cudbard-Bell@2014-04-08T12:09:45Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/602cd3e2311f72b45dfa… ====== Patch for OpenSSL insanity https://www.openssl.org/news/secadv_20140407.txt Alan T. DeKok@2014-04-08T00:06:10Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62fa43b6a837964038be… ====== -- This commit summary was generated @2014-04-09T00:00:24Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 08 Apr '14

08 Apr '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Tweak visual grouping to make ssl version easier to read Arran Cudbard-Bell@2014-04-08T23:44:48Z Files modified: * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/008c8af5957627d40b8c… ====== Don't be lazy when printing openssl version numbers Arran Cudbard-Bell@2014-04-08T23:35:26Z Files modified: * src/main/tls.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/afabc2cc8b21b0667110… ====== A simple framework to deal with future security issues in libssl Arran Cudbard-Bell@2014-04-08T23:22:20Z Files modified: * src/include/radiusd.h * src/include/tls-h * src/main/mainconfig.c * src/main/tls.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd20d3f92c1aef349f81… ====== Revert "Use correct URL" This reverts commit 8146612b7849e785bc2039a6ce15395027ec2161. Alan T. DeKok@2014-04-08T23:13:33Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d1e9855abd402732ebf1… ====== Use correct URL Alan T. DeKok@2014-04-08T22:26:19Z Files modified: * src/modules/rlm_eap/mem.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8146612b7849e785bc20… ====== Don't replicate reply packets. The code never handled it, so it's safe to delete the functions Alan T. DeKok@2014-04-08T22:04:48Z Files modified: * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8a75be13c98cee37dda4… ====== The input packet can't be an Access-Challenge Alan T. DeKok@2014-04-08T21:14:09Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56792b62ec8c22ce6499… ====== Remove "auto_header" functionality. It's not used anywhere. Alan T. DeKok@2014-04-08T20:57:13Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d76a777425b5b864ec5d… ====== Note recent changes Alan T. DeKok@2014-04-08T20:49:09Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6f9da317e4ef8b4e6d5… ====== Removed conf2xml and conf2file functionality. No one uses it, and we shouldn't carry around legacy code Alan T. DeKok@2014-04-08T20:45:42Z Files modified: * man/man8/radconf2xml.8 * redhat/freeradius.spec * src/include/conffile.h * src/main/all.mk * src/main/command.c * src/main/conffile.c * src/main/radconf2xml.c * src/main/radconf2xml.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6162ebb73d05f4b5c79d… ====== Remove unused functions Alan T. DeKok@2014-04-08T20:40:59Z Files modified: * src/include/conffile.h * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/92212123678130cf8a1d… ====== Remove extraneous -n debug Alan T. DeKok@2014-04-08T18:26:14Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/15f560ad94d33a923c25… ====== Hacks for allow_vulnerable_openssl=yes and tests Alan T. DeKok@2014-04-08T18:22:06Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/613298c0f64ac0f236a1… ====== Use src/tests/test.conf instead of raddb/test.conf And fix up the various config items so that it works. Add allow_vulnerable_openssl=yes, too Alan T. DeKok@2014-04-08T18:19:23Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02b150be3017e084e738… ====== Warn about duplicate configuration items. Only the first one will be found. The second will be ignored. Alan T. DeKok@2014-04-08T18:08:58Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/39dd08b5f4dbaab9dc6c… ====== Remove duplicate policies. They're now in ./eap Alan T. DeKok@2014-04-08T18:00:19Z Files modified: * raddb/policy.d/filter Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b2dc61993c219b24397… ====== Include vqp dictionary in the tests Alan T. DeKok@2014-04-08T17:36:43Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2b90680c40136ecbe3b… ====== Allow vulnerable OpenSSL for testing purposes Alan T. DeKok@2014-04-08T17:25:59Z Files modified: * src/tests/auth/radiusd.conf * src/tests/config/test.conf * src/tests/keywords/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02e3d4ce3b4c9b854d8f… ====== Fix mainconfig API and use consistent names Alan T. DeKok@2014-04-08T17:19:14Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e1c0acf8c8852fd6b719… ====== Fix module API and use consistent names Alan T. DeKok@2014-04-08T17:15:26Z Files modified: * src/include/modules.h * src/main/mainconfig.c * src/main/modules.c * src/main/radiusd.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9460045647cad9471e1c… ====== We now have to load the modules manually Alan T. DeKok@2014-04-08T16:48:20Z Files modified: * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bf8b8568558fe5f84083… ====== Load modules *after* initialising OpenSSL Arran Cudbard-Bell (via Alan T. DeKok)@2014-04-08T16:41:45Z Files modified: * src/main/mainconfig.c * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/66a89cfe62bd73e7a6bf… ====== Add config item to toggle openssl vulnerability check Arran Cudbard-Bell (via Alan T. DeKok)@2014-04-08T16:41:44Z Files modified: * raddb/radiusd.conf.in * src/include/radiusd.h * src/include/tls-h * src/main/mainconfig.c * src/main/radiusd.c * src/main/tls.c * src/main/version.c * src/tests/auth/radiusd.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5d48f55faab89e45d86… ====== Note recent changes Alan T. DeKok@2014-04-08T15:22:58Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/63a8724b430cb6ccffc9… ====== Refuse to start with OpenSSL 1.0.1 - 1.0.1f Arran Cudbard-Bell@2014-04-08T12:11:46Z Files modified: * src/include/tls-h * src/main/radiusd.c * src/main/tls.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/91be789c368331e6558d… ====== Revert "Patch for OpenSSL insanity" This reverts commit a3445ff46490af5b4064347cec76995f902ba5b3. Arran Cudbard-Bell@2014-04-08T12:11:40Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/625fd6763c2810d576b1… ====== Patch for OpenSSL insanity https://www.openssl.org/news/secadv_20140407.txt Alan T. DeKok@2014-04-08T00:03:42Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3445ff46490af5b4064… ====== -- This commit summary was generated @2014-04-09T00:00:24Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 08 Apr '14

08 Apr '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Allow vulnerable OpenSSL for testing purposes Alan T. DeKok@2014-04-08T17:31:27Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6ef56a6ae49587a31b82… ====== Check for vulnerable OpenSSL versions Alan T. DeKok@2014-04-08T17:10:11Z Files modified: * src/include/radiusd.h * src/main/mainconfig.c * src/main/radiusd.c * src/main/version.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7c772be9689f33b566e… ====== Add "allow_vulnerable_openssl" configuration item. Alan T. DeKok@2014-04-08T17:05:16Z Files modified: * raddb/radiusd.conf.in * src/include/radiusd.h * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12a0b142cbf38e9a75fe… ====== Note recent changes Alan T. DeKok@2014-04-08T16:49:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/15cc299e66e50bbc81ce… ====== Patch for OpenSSL insanity https://www.openssl.org/news/secadv_20140407.txt Alan T. DeKok@2014-04-08T00:02:10Z Files modified: * configure * configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30a1e7c5e10743bd9753… ====== -- This commit summary was generated @2014-04-09T00:00:13Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

BigData & AI Lab - мои интерны
by Ruslan Shevchenko 08 Apr '14

08 Apr '14

Привет Такой вопрос -- я хочу привести на BigData интернов которых веду в GoSave (по теме Machine Learning.) (скорее всего 2, но может и 3 ). Можно ли им сделать скидку в платеже за участие процентов так в 50 ? -- Ruslan Shevchenko Software Engineer. http://ua.linkedin.com/in/ruslanshevchenko

2 3

Commit report for master branch
by announce＠freeradius.org 07 Apr '14

07 Apr '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Limit output. Fixes CID #1197124 Alan T. DeKok@2014-04-07T23:11:32Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd2fb5173ac3afc33493… ====== Don't return pointer out of scope. Fixes CID #1197126 Alan T. DeKok@2014-04-07T23:11:32Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e5110104ac59b432783… ====== Clean up packets which are ONLY in the proxy hash Alan T. DeKok@2014-04-07T20:28:40Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/14268229be3b6935ce56… ====== De-reference based on proxy, not packet Alan T. DeKok@2014-04-07T20:28:39Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5000a877342c4f6fbe67… ====== Move #ifdef wrapper. The child state is always updated Alan T. DeKok@2014-04-07T20:00:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8fe245f7bad590a2da5d… ====== We only have child_pid and child_state when building with threads Arran Cudbard-Bell@2014-04-07T19:45:38Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e4c36f48169313245422… ====== Move sysresource.h include Arran Cudbard-Bell@2014-04-07T19:03:37Z Files modified: * src/lib/debug.c * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1c2495a2fc1304cd3c0… ====== More fixes for CoA When we've proxied it, mark it as no child thread. When we fail it, set it DONE Alan T. DeKok@2014-04-07T18:12:47Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/511d2f75faad9a940410… ====== Use proper value for DONE Alan T. DeKok@2014-04-07T18:12:46Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee858b0c1b0907512196… ====== Print message if the CoA server didn't respond When originating a CoA request Alan T. DeKok@2014-04-07T18:12:44Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/78eb18814cd599fdd867… ====== Typo Arran Cudbard-Bell@2014-04-07T17:54:49Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1fd1302462ac16b34b19… ====== Move fr_set_dumpable code into debug.c, it's useful for utilities too Arran Cudbard-Bell@2014-04-07T17:51:33Z Files modified: * src/include/libradius.h * src/lib/debug.c * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/167daa846670719d66a8… ====== If we can figure out which binary is being used for panic_action ensure it's not world writeable to stop exploit vectors involving exec Arran Cudbard-Bell@2014-04-07T17:51:32Z Files modified: * src/lib/debug.c * src/main/radattr.c * src/main/radclient.c * src/main/radconf2xml.c * src/main/radiusd.c * src/main/radmin.c * src/main/radsniff.c * src/main/radwho.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d3066409faea9bc5a30… ====== Doxygen Alan T. DeKok@2014-04-07T17:39:30Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4eb696d4f813539a3d85… ====== Handle more corner cases with CoA cleanups Alan T. DeKok@2014-04-07T17:21:43Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d87db41e1611bc52b066… ====== Better checks for cleaning up requests on exit Alan T. DeKok@2014-04-07T17:21:41Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4892972288539e18cff7… ====== radius_copy_packet for coa->packet instead of memcpy. Avoids talloc errors Alan T. DeKok@2014-04-07T17:21:39Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/610efd66e2238593baf4… ====== Set parent of VP properly. Alan T. DeKok@2014-04-07T17:21:37Z Files modified: * src/main/evaluate.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/356301a530493279bf02… ====== Enable -D, and document it in -h Alan T. DeKok@2014-04-07T17:21:36Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/681c45acb5f936d2e2bd… ====== Remove pointless debug message Alan T. DeKok@2014-04-07T17:21:33Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/31a4c4054e9044d7ef8c… ====== radius_verify() to recursively check talloc relationships Alan T. DeKok@2014-04-07T17:21:23Z Files modified: * src/include/radiusd.h * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/921469a038985155c96e… ====== fake->packet has parent fake, not request Alan T. DeKok@2014-04-07T17:19:25Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/04cb01cab5157f405e60… ====== Added copy packet functionality Mainly for CoA. May be useful elsewhere Alan T. DeKok@2014-04-07T17:19:23Z Files modified: * src/include/libradius.h * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e3a1c418ff8736ae8f28… ====== When separating coa requests, talloc_steal them, too Alan T. DeKok@2014-04-07T17:19:22Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2dca2108ec26cc90a8a… ====== Use a mutex around writing to the SQL log fcntl locks aren't reflected internally within the process that created them, even if it's a completely different thread is attempting to log the file descriptor Arran Cudbard-Bell@2014-04-07T12:24:47Z Files modified: * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bade7e84fb935878ef01… ====== Print the name of the VALUE_PAIR with the inconsistent value pointer Arran Cudbard-Bell@2014-04-07T10:17:43Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49905502d18636ae6cc0… ====== Formatting Arran Cudbard-Bell@2014-04-07T10:12:42Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/57d28a431767d117d9c7… ====== -- This commit summary was generated @2014-04-08T00:00:20Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 07 Apr '14

07 Apr '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Limit output. Fixes CID #1197124 Alan T. DeKok@2014-04-07T23:10:19Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c10d43db98a221aa8d08… ====== Don't return pointer out of scope. Fixes CID #1197126 Alan T. DeKok@2014-04-07T23:08:03Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1eb058a4738f5c9b4b97… ====== Clean up packets which are ONLY in the proxy hash Alan T. DeKok@2014-04-07T20:28:19Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb52897b1d252058307f… ====== De-reference based on proxy, not packet Alan T. DeKok@2014-04-07T20:21:20Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3cdc54aa41a194818aac… ====== More generic coa separation Alan T. DeKok@2014-04-07T20:13:18Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7e29b2fc1db6fcab2d1… ====== Move #ifdef wrapper. The child state is always updated Alan T. DeKok@2014-04-07T19:59:52Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/384a2095eb8bf7a53adb… ====== We only have child_pid and child_state when building with threads Arran Cudbard-Bell@2014-04-07T19:45:31Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cae93b2eb847372a6238… ====== Fix merge issue... Arran Cudbard-Bell@2014-04-07T19:32:14Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d86a7278b7344c906b2… ====== Move sysresource.h include Arran Cudbard-Bell@2014-04-07T19:02:54Z Files modified: * src/lib/debug.c * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11987da1dbbd8e1c4a8b… ====== More fixes for CoA When we've proxied it, mark it as no child thread. When we fail it, set it DONE Alan T. DeKok@2014-04-07T18:12:27Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06a27537c2f034069b1c… ====== Use proper value for DONE Alan T. DeKok@2014-04-07T18:12:27Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1e7b3bb6d2618f086a43… ====== Print message if the CoA server didn't respond When originating a CoA request Alan T. DeKok@2014-04-07T18:12:27Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fccc4f6e21f415cd6f42… ====== Typo Arran Cudbard-Bell@2014-04-07T17:54:55Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/841a32f40cd412ab239a… ====== Move fr_set_dumpable code into debug.c, it's useful for utilities too Arran Cudbard-Bell@2014-04-07T17:50:23Z Files modified: * src/include/libradius.h * src/lib/debug.c * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc808b94c95977c1e0b6… ====== If we can figure out which binary is being used for panic_action ensure it's not world writeable to stop exploit vectors involving exec Arran Cudbard-Bell@2014-04-07T17:50:23Z Files modified: * src/lib/debug.c * src/main/radattr.c * src/main/radclient.c * src/main/radconf2xml.c * src/main/radiusd.c * src/main/radmin.c * src/main/radsniff.c * src/main/radwho.c * src/main/unittest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6c6401885f3676ca733f… ====== Doxygen Alan T. DeKok@2014-04-07T17:39:15Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/965fec0854b2a25d19a9… ====== Note recent changes Alan T. DeKok@2014-04-07T17:19:02Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/30e01939f13f0ed2bbf3… ====== Handle more corner cases with CoA cleanups Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d10413dc09467798fc2… ====== Better checks for cleaning up requests on exit Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5ff533957d173598320… ====== radius_copy_packet for coa->packet instead of memcpy. Avoids talloc errors Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b8b9b564b145c8879e6f… ====== Set parent of VP properly. Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/main/evaluate.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ae081652a2e122bacc00… ====== Enable -D, and document it in -h Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/main/radmin.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b888515318de6fc2fba9… ====== Remove pointless debug message Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d4a566cc59127f90d63… ====== radius_verify() to recursively check talloc relationships Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/include/radiusd.h * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e30358afaf6dbb4e706b… ====== fake->packet has parent fake, not request Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/89cbaf7eafe00efd8059… ====== Added copy packet functionality Mainly for CoA. May be useful elsewhere Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/include/libradius.h * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0de5b5bef1d0185b2cd4… ====== When separating coa requests, talloc_steal them, too Alan T. DeKok@2014-04-07T17:18:37Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1415818493f4965d58cb… ====== Update ChangeLog Arran Cudbard-Bell@2014-04-07T13:37:56Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec2d5d99f13a1c88f700… ====== Use a mutex around writing to the SQL log fcntl locks aren't reflected internally within the process that created them, even if it's a completely different thread is attempting to log the file descriptor Arran Cudbard-Bell@2014-04-07T12:25:03Z Files modified: * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a2a04cd15bc3886ceb7d… ====== Print the name of the VALUE_PAIR with the inconsistent value pointer Arran Cudbard-Bell@2014-04-07T10:17:58Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/31ac30612112f3489870… ====== Formatting Arran Cudbard-Bell@2014-04-07T10:17:52Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cf6a87c9c23ae81eba6f… ====== -- This commit summary was generated @2014-04-08T00:00:20Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

In auth request packet, Stripped-User-Name attribute value wrongly rewritten by radius server
by Adarsha S 07 Apr '14

07 Apr '14

Hi, I'm currently using free radius server versioned 2.1.12 [freeradius-server-2.1.12]. I'm having a setup where clients get authenticated by Windows AD 2003 server. It uses stripped-user-name attribute. I'm having free radius 2.1.12 as the radius server. The username are provided as DomainName\Username. Various combination of Domain name and user name worked but when ever the username starts with "t" or "n" the authentication failed. Network capture showed that the backslash delimiter between domain and username combined with specific letters are translated to special characters. \n = new line \r = return \t = tab Eg: During authentication, the usernames goes as "DOMAIN\timcopy. We are supposed to strip the domain name along with the "\" and populate the sAMAccount name with the username timcopy. But the username gets converted as "DOMAIN imcopy" which is then used as the sAMAccount name. I was getting the authentication problem when I used "timcopy" as the username and success when I used "kiran" as the username. On further looking into code could make out , On receiving the request packet at radius server side, rlm is adding the the new attribute stripped-user-name [attr number 1043] and updating the value as "DOMAIN imcopy" Here \timcopy got converted as "<tab space>imcopy" Please let me know the solution for this problem. Thanks, Adarsha

1 0

Commit report for master branch
by announce＠freeradius.org 06 Apr '14

06 Apr '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add special handlers for SIGUSR1 and SIGUSR2 Arran Cudbard-Bell@2014-04-06T23:24:52Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/811c8f94dfbfd187053b… ====== Make pairtypeset private It's too evil to be in the public name space Arran Cudbard-Bell@2014-04-06T23:00:56Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3e0cc9cf4a93f4d0f96f… ====== Make soft asserts less soft in debug builds Arran Cudbard-Bell@2014-04-06T22:59:43Z Files modified: * src/include/libradius.h * src/lib/debug.c * src/lib/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c1d8137b8df77139dd39… ====== Move more things to doing pairmemcpy instead of calling individual functions Arran Cudbard-Bell@2014-04-06T22:59:43Z Files modified: * src/lib/radius.c * src/lib/valuepair.c * src/main/evaluate.c * src/main/process.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c8ca84b3aee71cc9d91… ====== Formatting Arran Cudbard-Bell@2014-04-06T19:23:27Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0fa503336ae70357461… ====== Rename daemon_mode to daemonize to be consistent with radsniff, which also operates as a daemon Arran Cudbard-Bell@2014-04-06T19:19:29Z Files modified: * src/include/log.h * src/main/log.c * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a78aa94d8ad827e5e6b… ====== Typo Arran Cudbard-Bell@2014-04-06T11:40:01Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b1789b2260bf0df47ea2… ====== CID 1197120 Arran Cudbard-Bell@2014-04-06T11:28:34Z Files modified: * src/modules/proto_bfd/bfd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6017b96ccbccd77757b4… ====== CID 1197121 Arran Cudbard-Bell@2014-04-06T11:25:45Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/64436a3ada38f6111e8e… ====== CID 1197122 Arran Cudbard-Bell@2014-04-06T11:20:46Z Files modified: * src/modules/rlm_radutmp/rlm_radutmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/155a1ff53b087069bc34… ====== CID 1197124 Arran Cudbard-Bell@2014-04-06T11:17:02Z Files modified: * src/modules/rlm_unbound/rlm_unbound.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b096357072640b81607b… ====== CID 1197128 Arran Cudbard-Bell@2014-04-06T11:11:10Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a703ad723786d265c181… ====== Fix coverity scan token Arran Cudbard-Bell@2014-04-06T10:50:46Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/55497a0642cf25a0135c… ====== Add note, regarding macro which was removed from libradius.h Arran Cudbard-Bell@2014-04-06T10:16:10Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2cd73278c2fad8d527f8… ====== Limit zombie period start. Fixes #579 If we've received a packet in the last 1/4 zombie period, don't go to zombie. If the last packet was earlier than that, set the zombie period start to that time. We don't set it to home->last_packet, because that could have been minutes or hours in the past Alan T. DeKok@2014-04-06T03:51:09Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4367280dde5f45bb432c… ====== -- This commit summary was generated @2014-04-07T00:00:24Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 06 Apr '14

06 Apr '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add special handlers for SIGUSR1 and SIGUSR2 Arran Cudbard-Bell@2014-04-06T23:25:58Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/148317489ccdca839ab1… ====== Make pairtypeset private It's too evil to be in the public name space Arran Cudbard-Bell@2014-04-06T23:25:37Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f2a2c719d8a6cb802acf… ====== Make soft asserts less soft in debug builds Arran Cudbard-Bell@2014-04-06T23:25:32Z Files modified: * src/include/libradius.h * src/lib/debug.c * src/lib/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ec95ac3fdbb684197f4… ====== Move more things to doing pairmemcpy instead of calling individual functions Arran Cudbard-Bell@2014-04-06T23:25:20Z Files modified: * src/lib/radius.c * src/lib/valuepair.c * src/main/evaluate.c * src/main/process.c * src/modules/rlm_preprocess/rlm_preprocess.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d77ce8ac629a95422d3… ====== Rename daemon_mode to daemonize to be consistent with radsniff, which also operates as a daemon Arran Cudbard-Bell@2014-04-06T19:19:37Z Files modified: * src/include/log.h * src/main/log.c * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/949f25e78391c73e04f7… ====== CID 1197122 Arran Cudbard-Bell@2014-04-06T11:21:01Z Files modified: * src/modules/rlm_radutmp/rlm_radutmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0445731e6a8b8effb726… ====== CID 1197124 Arran Cudbard-Bell@2014-04-06T11:16:55Z Files modified: * src/modules/rlm_unbound/rlm_unbound.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2c89a406052ff0f77d22… ====== CID 1197128 Arran Cudbard-Bell@2014-04-06T11:11:17Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7d0133f5e953d97f13c9… ====== Fix coverity scan token Arran Cudbard-Bell@2014-04-06T10:49:53Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7423cb9f6b62e5ccb477… ====== Add note, regarding macro which was removed from libradius.h Arran Cudbard-Bell@2014-04-06T10:16:02Z Files modified: * src/include/libradius.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ea1428742588d8f8314… ====== Limit zombie period start. Fixes #579 If we've received a packet in the last 1/4 zombie period, don't go to zombie. If the last packet was earlier than that, set the zombie period start to that time. We don't set it to home->last_packet, because that could have been minutes or hours in the past Alan T. DeKok@2014-04-06T03:50:27Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3efcbbdf1b8b24bdd902… ====== -- This commit summary was generated @2014-04-07T00:00:24Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0