- Freeradius-Devel - lists.freeradius.org

Commit report for v2.x.x branch
by announce＠freeradius.org 20 Feb '14

20 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Backport stderr/stdout fixes from v3.0.x Arran Cudbard-Bell@2014-02-20T19:50:37Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e46e822fc9c05087221e… ====== -- This commit summary was generated @2014-02-21T00:00:11Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 19 Feb '14

19 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Close stdin when daemonizing Arran Cudbard-Bell@2014-02-19T23:58:40Z Files modified: * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c754c6ba328b84ffef3e… ====== Note recent changes Alan T. DeKok@2014-02-19T20:14:36Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c362641321ef05fc9cd1… ====== Avoid cs cache double free Arran Cudbard-Bell@2014-02-19T19:22:12Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5af708e6e146be752590… ====== walker needs r/w arguments Arran Cudbard-Bell@2014-02-19T18:49:11Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/packet.c * src/lib/rbtree.c * src/main/process.c * src/main/radclient.c * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7eecf32567c52e3732fb… ====== Fixup variables and definition names in rbtree code Switch to using talloc for rbtree node allocation Arran Cudbard-Bell@2014-02-19T17:36:54Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/packet.c * src/lib/rbtree.c * src/main/conffile.c * src/main/process.c * src/main/radclient.c * src/main/xlat.c * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9f96fbb29648a2e30db2… ====== Missed in previous commits Alan T. DeKok@2014-02-19T15:54:36Z Files modified: * src/include/realms.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56071803551c3c73d0a0… ====== Regularize error message for proxy_new_listener Alan T. DeKok@2014-02-19T15:52:07Z Files modified: * src/main/listen.c * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3eb074fc7eaeee714559… ====== Open SSL sockets only if we have a valid FD Alan T. DeKok@2014-02-19T15:48:39Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/89e79c173c803c9ef31d… ====== Rate-limit connection attempts for "down" home servers To only once per second. Alan T. DeKok@2014-02-19T15:47:18Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7feba38f4d7486a61f68… ====== Free ssn->ssl on error Alan T. DeKok@2014-02-19T15:26:09Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3def9f9dcf5528d9e7a2… ====== Add note on set_auth_type Arran Cudbard-Bell@2014-02-19T14:48:30Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c98ccdbcf550facfc51d… ====== scan warnings Alan T. DeKok@2014-02-19T03:37:27Z Files modified: * src/main/soh.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7682113920a320dbf110… ====== scan warnings Alan T. DeKok@2014-02-19T03:35:24Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c8262b2c662c5bb9cb3e… ====== scan warnings Alan T. DeKok@2014-02-19T03:34:29Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06c3e16b9463091ed299… ====== scan warnings Alan T. DeKok@2014-02-19T03:28:06Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8c6afb11897dc690ad12… ====== scan warnings Alan T. DeKok@2014-02-19T03:27:26Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/57c4cf7373f9ddbf2af4… ====== Both name2's may be NULL Alan T. DeKok@2014-02-19T03:19:35Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8971159261940e8315af… ====== scan warnings Alan T. DeKok@2014-02-19T03:17:52Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0ac0bd2502281208f8ee… ====== Scan warnings Alan T. DeKok@2014-02-19T03:17:45Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7098d5b26e9a0b0e7c4… ====== scan warnings Alan T. DeKok@2014-02-19T03:16:48Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9eaf13c8cb19f26b5670… ====== scan warnings for unused assignments Alan T. DeKok@2014-02-19T03:13:26Z Files modified: * src/modules/rlm_eap/libeap/eapcrypto.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa81738f4b855e8e0e40… ====== Prefer IP_PKTINFO to IP_RECVDSTADDR, if both are defined Alan T. DeKok@2014-02-19T03:11:31Z Files modified: * src/lib/udpfromto.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb545648eaf25b6bc75c… ====== One more destructor for conf_free Alan T. DeKok@2014-02-19T03:04:57Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fec6c1c765b891984bc6… ====== Use talloc destructor for tls_server_conf_free Alan T. DeKok@2014-02-19T02:23:42Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1504bef923abc0bc7138… ====== Revert "Expose tls_server_conf_free() and use it for home->tls" This reverts commit 7c5a3730b5ba8bdac35ad43fe735a44ffefd55c8. It's the wrong fix Alan T. DeKok@2014-02-19T01:16:13Z Files modified: * src/include/tls-h * src/main/realms.c * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/008576f0a819b46ef4a5… ====== Documentation on delete order Alan T. DeKok@2014-02-19T00:42:09Z Files modified: * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6f84acae2750facf02c… ====== Be more descriptive with error messages on exit when cleaning up requests Alan T. DeKok@2014-02-19T00:41:43Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9cf9b828ff5010a1bfc7… ====== Return correct code from delete callback Alan T. DeKok@2014-02-19T00:41:05Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/843e64ff1fb9f0d747f2… ====== No one uses rbtree_insertnode, so don't expose it Alan T. DeKok@2014-02-19T00:29:21Z Files modified: * src/include/libradius.h * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e3e13149b5f0fc79813b… ====== -- This commit summary was generated @2014-02-20T00:00:14Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 19 Feb '14

19 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Avoid cs cache double free Arran Cudbard-Bell@2014-02-19T19:26:29Z Files modified: * src/main/mainconfig.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b3733c73e5fd339aa50a… ====== const error in radsniff Arran Cudbard-Bell@2014-02-19T19:24:26Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2c991de9269f19b7067… ====== walker needs r/w arguments Arran Cudbard-Bell@2014-02-19T18:50:05Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/packet.c * src/lib/rbtree.c * src/main/process.c * src/main/radclient.c * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8fc90201dfc5ae73e33… ====== constify things properly in fr_udp_checksum Arran Cudbard-Bell@2014-02-19T17:43:09Z Files modified: * src/lib/pcap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ec95185ff6243e37ec6… ====== Fixup variable and definition names in rbtree code Arran Cudbard-Bell@2014-02-19T17:37:28Z Files modified: * src/include/libradius.h * src/include/packet.h * src/lib/packet.c * src/lib/rbtree.c * src/main/conffile.c * src/main/process.c * src/main/radclient.c * src/main/xlat.c * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a1ffd5c99401c0136f6… ====== Free ssn->ssl on error Alan T. DeKok@2014-02-19T15:26:23Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b166e69d2542ab1d7ca2… ====== Add UDP checksum validation to radsniff Arran Cudbard-Bell@2014-02-19T15:24:18Z Files modified: * src/include/pcap.h * src/lib/pcap.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5d6c1e0a3c20bd8693d… ====== Add note on set_auth_type Arran Cudbard-Bell@2014-02-19T13:45:38Z Files modified: * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9bb06cd230b29310119a… ====== scan warnings Alan T. DeKok@2014-02-19T03:40:03Z Files modified: * src/main/soh.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d86b833c83cf22c28846… ====== scan warnings Alan T. DeKok@2014-02-19T03:39:48Z Files modified: * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aa196cb0adefacb793ba… ====== scan warnings Alan T. DeKok@2014-02-19T03:37:55Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ea1473c0da14e38e590… ====== scan warnings Alan T. DeKok@2014-02-19T03:37:54Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ef2d57cd61c4176621b2… ====== scan warnings Alan T. DeKok@2014-02-19T03:37:53Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da2f6238609f1c6863b4… ====== Both name2's may be NULL Alan T. DeKok@2014-02-19T03:21:24Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1aa7aa2295d4321614e6… ====== scan warnings Alan T. DeKok@2014-02-19T03:21:23Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d412c61561079742dd46… ====== Scan warnings Alan T. DeKok@2014-02-19T03:21:21Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e8fe5a00ed834de368f8… ====== scan warnings Alan T. DeKok@2014-02-19T03:21:01Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be89b06e449fe28a0ab3… ====== scan warnings for unused assignments Alan T. DeKok@2014-02-19T03:20:28Z Files modified: * src/modules/rlm_eap/libeap/eapcrypto.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/574ad33ea22749e27841… ====== Prefer IP_PKTINFO to IP_RECVDSTADDR, if both are defined Alan T. DeKok@2014-02-19T03:20:27Z Files modified: * src/lib/udpfromto.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/792b146f8ac4c27c6144… ====== One more destructor for conf_free Alan T. DeKok@2014-02-19T03:05:14Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/31bf681d9d793b6b3604… ====== Use talloc destructor for tls_server_conf_free Alan T. DeKok@2014-02-19T02:24:10Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4707c73350b0831df133… ====== Revert "Expose tls_server_conf_free() and use it for home->tls" This reverts commit 7c5a3730b5ba8bdac35ad43fe735a44ffefd55c8. It's the wrong fix Alan T. DeKok@2014-02-19T02:24:09Z Files modified: * src/include/tls-h * src/main/realms.c * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f93dcd83701df95a07b… ====== Documentation on delete order Alan T. DeKok@2014-02-19T00:43:59Z Files modified: * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8543b6171d8b05509d82… ====== Be more descriptive with error messages on exit when cleaning up requests Alan T. DeKok@2014-02-19T00:43:58Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a2829fa63b9c4a5c49d6… ====== Return correct code from delete callback Alan T. DeKok@2014-02-19T00:43:57Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cca611c8e03a59dad1d2… ====== -- This commit summary was generated @2014-02-20T00:00:14Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 19 Feb '14

19 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Both name2's may be NULL Alan T. DeKok@2014-02-19T03:20:00Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/687726ef90180c00b5b2… ====== -- This commit summary was generated @2014-02-20T00:00:10Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

No authenticate method (Auth-Type) found when using eap2 (eap-psk)
by Bourgeois gilles 19 Feb '14

19 Feb '14

Hi, i am willing to experiment openPAN/Panatiki implementation , thus using eap-psk . I build and run the whole thing using cooja and openpaa then, regarding Radiusd and OpenPana user manual I've been told to use eap2 : May be I don't know who to follow the instruction from experimental.conf, which says : * You MUST force # the server to choose "eap2" for authentication, because this # module has no "authorize" section.* How do I do that ? Because , EAP exchange starts well up to radius then Radius reject in this way : ***************** rad_recv: Access-Request packet from host 127.0.0.1 port 47462, id=0, length=103 User-Name = "usera" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "00-00-00-00-00-00" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT" EAP-Message = 0x0249000a017573657261 Message-Authenticator = 0xf338498fefb32b0cb5f94bc46f13 fa09 # Executing section authorize from file /home/gilles/freeradius-server-2.2.3/etc/raddb/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop [suffix] No '@' in User-Name = "usera", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop ++[unix] = notfound ++[files] = noop ++[expiration] = noop ++[logintime] = noop +} # group authorize = ok *ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user* Failed to authenticate the user. ******************* Thanks for help Regards Gilles

5 16

Release of 3.0.2 is imminent
by Alan DeKok 19 Feb '14

19 Feb '14

Please test. One major cosmetic change is the hiding of secret keys when using "radiusd -X" ... client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = <<< secret >>> ... They still show up when using "radiusd -Xx". I've historically opposed this. The reason has been that the keys are needed for debugging, which is correct. However, the number of people who've screwed up and posted their secrets publicly is growing. In the interest of not letting people hurt themselves, the secrets are now secret by default. If anyone objects, please let me know. Alan DeKok.

5 9

Commit report for v2.x.x branch
by announce＠freeradius.org 18 Feb '14

18 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Be more careful in name2_cmp Alan T. DeKok@2014-02-18T18:08:18Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/90c3ccd2637178f345da… ====== back-port changes to sub_find_name2 from v3.0.x Alan T. DeKok@2014-02-18T18:07:26Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2bcef46590ccbec88d29… ====== -- This commit summary was generated @2014-02-19T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 18 Feb '14

18 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Expose tls_server_conf_free() and use it for home->tls So that home servers don't leak memory on exit Alan T. DeKok@2014-02-18T23:58:09Z Files modified: * src/include/tls-h * src/main/realms.c * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c5a3730b5ba8bdac35a… ====== On exit, do the following: mark all requests as STOP. Clean up ones which are stopped. If we have child threads wait for them all to exit if we want a memory report, walk the requests again The second pass thru walking the requests should clean up all requests which were running in a child thread Alan T. DeKok@2014-02-18T22:17:57Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3ca19d0924ff4cdf33e3… ====== Note when we clean up requests on exit So we can tell what's going on. But only do this when using -M, so that normal exits don't have 100's of "cleaning up" messages Alan T. DeKok@2014-02-18T22:16:23Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fecbfbcde4eb61e5355e… ====== Expose memory_report in mainconfig Alan T. DeKok@2014-02-18T22:14:53Z Files modified: * src/include/radiusd.h * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b8c299819ed06a3e8ffb… ====== We don't need to know about virtual modules being loaded Alan T. DeKok@2014-02-18T22:14:14Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c67fb4eb9911893e39c… ====== Don't stop the thread pool if it wasn't started Alan T. DeKok@2014-02-18T22:13:43Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2194baf417f6a88046f4… ====== Always free sock->ssn for TLS listeners Alan T. DeKok@2014-02-18T21:53:28Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4406f68420f372c30a4a… ====== Only complain once for ignored modules Alan T. DeKok@2014-02-18T21:30:22Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed3150c77d7597b062f2… ====== Move assertion. If a thread is still alive, the request is alive Alan T. DeKok@2014-02-18T20:50:54Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c23450586a056e2f10c0… ====== Clean up sub_find_name2 It turns out we don't insert ourselves into the name2 tree. When we don't find (name1, name2) in the name2 tree, we have to check if *we* are the thing being looked for Alan T. DeKok@2014-02-18T18:07:58Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc3216e14dcb889df218… ====== Be more careful in name2_cmp Alan T. DeKok@2014-02-18T18:07:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/10dd2f61d8cebbaa09b3… ====== Fix double insert error When we have tls = ${tls}, we should *copy* the section, instead of adding it as a reference. When it's added as a reference, it's inserted into the parents linked list of children. Having multiple references to the same section means that the linked lists get completely screwed up. Alan T. DeKok@2014-02-18T18:07:57Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56a53679f6a9493be23c… ====== Fixed quoting in a comment It really screwed up the syntax hilighting in Vim (and possibly other editors too) Herwin Weststrate (via Arran Cudbard-Bell)@2014-02-18T15:44:49Z Files modified: * raddb/sites-available/virtual.example.com Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4de050a207f749911d03… ====== It's not an assert if the section tree doesn't exist Alan T. DeKok@2014-02-18T14:59:30Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d6e4113a950cdb30c06… ====== Fix build problem Alan T. DeKok@2014-02-18T05:22:19Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69f9819df0d893e78bf1… ====== Revert to working code Alan T. DeKok@2014-02-18T03:41:24Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0d7e84992add76a5f18… ====== name2_tree may be NULL and do checks if there's only one sub-section Alan T. DeKok@2014-02-18T03:34:41Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b7b1dd1d164e2fdf1aa5… ====== Clean up code Alan T. DeKok@2014-02-18T02:55:22Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/05db3b74567370899ea7… ====== Fix typo in last commit Alan T. DeKok@2014-02-18T02:54:01Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/63cec927a430da031d50… ====== more clang analyzer fixes. Alan T. DeKok@2014-02-18T01:48:01Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9cbd19924736cbb51e29… ====== Check for (name, NULL) properly Alan T. DeKok@2014-02-18T01:47:50Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f21d94513236b4f36e85… ====== clang scan complaint Alan T. DeKok@2014-02-18T01:43:39Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f0a7df4bcd53c6b06cbb… ====== Fix clang analyzer complaints Alan T. DeKok@2014-02-18T01:38:24Z Files modified: * src/modules/rlm_sqlcounter/rlm_sqlcounter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e108ea0e41bd3ca62b37… ====== Add missing -o to analyze rule Alan T. DeKok@2014-02-18T01:34:30Z Files modified: * scripts/boiler.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7adbd235711253532b10… ====== Remove statoverride for mysql and postgresql Network RADIUS@2014-02-18T01:26:22Z Files modified: * debian/freeradius-mysql.postinst * debian/freeradius-postgresql.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dc49ec70ccf39e6a9490… ====== -- This commit summary was generated @2014-02-19T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 18 Feb '14

18 Feb '14

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Expose tls_server_conf_free() and use it for home->tls So that home servers don't leak memory on exit Alan T. DeKok@2014-02-18T23:58:42Z Files modified: * src/include/tls-h * src/main/realms.c * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4fcff4082a23e7e7d92… ====== On exit, do the following: mark all requests as STOP. Clean up ones which are stopped. If we have child threads wait for them all to exit if we want a memory report, walk the requests again The second pass thru walking the requests should clean up all requests which were running in a child thread Alan T. DeKok@2014-02-18T22:20:44Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5db4c62b3f71296de7e0… ====== Note when we clean up requests on exit So we can tell what's going on. But only do this when using -M, so that normal exits don't have 100's of "cleaning up" messages Alan T. DeKok@2014-02-18T22:19:59Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3f9a21b1ed9da8b4dc8f… ====== Expose memory_report in mainconfig Alan T. DeKok@2014-02-18T22:19:58Z Files modified: * src/include/radiusd.h * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/09620a009c8088ae37e5… ====== We don't need to know about virtual modules being loaded Alan T. DeKok@2014-02-18T22:19:57Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/72b6b7a47cb154d6461a… ====== Don't stop the thread pool if it wasn't started Alan T. DeKok@2014-02-18T22:19:56Z Files modified: * src/main/threads.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11a549be3e8a01522295… ====== Always free sock->ssn for TLS listeners Alan T. DeKok@2014-02-18T21:59:04Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/64757f6411df58cfade1… ====== Only complain once for ignored modules Alan T. DeKok@2014-02-18T21:31:09Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/58848a0c7f65a82e5d5f… ====== Move assertion. If a thread is still alive, the request is alive Alan T. DeKok@2014-02-18T20:51:35Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d9cb0f523f8dcf22eefb… ====== Clean up sub_find_name2 It turns out we don't insert ourselves into the name2 tree. When we don't find (name1, name2) in the name2 tree, we have to check if *we* are the thing being looked for Alan T. DeKok@2014-02-18T18:09:09Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0552708b71bd9f51e7da… ====== Be more careful in name2_cmp Alan T. DeKok@2014-02-18T18:09:07Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/54932f023f87f3998e11… ====== Fix double insert error When we have tls = ${tls}, we should *copy* the section, instead of adding it as a reference. When it's added as a reference, it's inserted into the parents linked list of children. Having multiple references to the same section means that the linked lists get completely screwed up. Alan T. DeKok@2014-02-18T18:09:06Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9d8200d60121f9f830c5… ====== Merge pull request #525 from qnet-herwin/syntax_hilight_virtual.example.com Fixed quoting in a comment Arran Cudbard-Bell@2014-02-18T15:41:25Z Files modified: * raddb/sites-available/virtual.example.com Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de3989e30e28c5aec521… ====== Fixed quoting in a comment It really screwed up the syntax hilighting in Vim (and possibly other editors too) Herwin Weststrate@2014-02-18T15:37:31Z Files modified: * raddb/sites-available/virtual.example.com Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/629cbcd4e620c7cf648a… ====== It's not an assert if the section tree doesn't exist Alan T. DeKok@2014-02-18T14:59:56Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7d6c12849217963f07c… ====== Fix build problem Alan T. DeKok@2014-02-18T05:22:33Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/792f6014cf423c5cf8d4… ====== Revert to working code Alan T. DeKok@2014-02-18T03:41:39Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0cb84cf22ed0f9efc59e… ====== name2_tree may be NULL and do checks if there's only one sub-section Alan T. DeKok@2014-02-18T03:41:38Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1ddf56dc5470ce686e5… ====== Clean up code Alan T. DeKok@2014-02-18T02:55:42Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/633ab613c09432d14b0f… ====== Fix typo in last commit Alan T. DeKok@2014-02-18T02:55:41Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a2e2acba2364ff90d8e1… ====== Fix typo Alan T. DeKok@2014-02-18T01:54:30Z Files modified: * scripts/boiler.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ee56a4dfeac50dfcba0… ====== more clang analyzer fixes. Alan T. DeKok@2014-02-18T01:51:15Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b418df341c5d43ad5d87… ====== Check for (name, NULL) properly Alan T. DeKok@2014-02-18T01:51:14Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cc7b1854396ff2c3008d… ====== clang scan complaint Alan T. DeKok@2014-02-18T01:51:13Z Files modified: * src/main/radattr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c7ffc60a25e710803c1… ====== Fix clang analyzer complaints Alan T. DeKok@2014-02-18T01:51:12Z Files modified: * src/modules/rlm_sqlcounter/rlm_sqlcounter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/996ed1bb41cc4c1fbdf0… ====== Add missing -o to analyze rule Alan T. DeKok@2014-02-18T01:51:03Z Files modified: * scripts/boiler.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99a62e96ea1124bd7b1e… ====== Remove statoverride for mysql and postgresql Network RADIUS (via Arran Cudbard-Bell)@2014-02-18T01:43:52Z Files modified: * debian/freeradius-mysql.postinst * debian/freeradius-postgresql.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/891ed20ea3131bd99de7… ====== -- This commit summary was generated @2014-02-19T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

How are TLS session freed when the exchange fails?
by Yannick Koehler 18 Feb '14

18 Feb '14

Hi, First, I am new to this mailing list, so I am trying to be extra careful. I am using FreeRADIUS locally and its memory in a particular situation keep increasing by a lot. Basically, I see a RADIUS exchange that fails (timeout) before reaching the ACCEPT/REJECT. I traced the memory and debugged a lot to find out that the tls_new_session() inside tls.c is invoked and allocated a tls_session_t of 64k, then that structure is kept in memory without any means that I could found to be cleared when the RADIUS exchanged terminate abruptly. I can repeat this over and over and there appear to be no limit as to how much FreeRADIUS can steal from my main memory. Considering that I saw that memory leak in the past are seen as security issue, I am therefore wondering if I am right or not. I could not find any timeout or clean up behavior to ensure that first the number of TLS session is capped and second that if the RADIUS exchange is stopped before the end that the associated tls session gets cleared, so I help here would be appreciated. One could reproduce something like that by sending a RADIUS Access Request with a EAP Identity Response and at the reception of the RADIUS Access Challenge, just ignore it and keep sending new RADIUS Access Request with new EAP Identity Response. -- Yannick Koehler

2 3