- Freeradius-Devel - lists.freeradius.org

FR3.0 and LDAP
by Maja Wolniewicz 20 Aug '13

20 Aug '13

Now I'm testing FR3.0 with LDAP. PEAP and NT-Password in a LDAP database works now well, but I have a problem with EAP-TTLS. In FR2.2 after authorizing a user in the authorize section of inner-tunnel, Auth-Type=LDAP is set and then authentication goes to the LDAP module. In FR3.0 the Auth-Type=LDAP isn't set in the rlm_ldap module, the authorize section ends with Auth-Type=PAP, so authentication goes to the PAP module. I can't find a place in the FR3.0 source, where Auth-Type=LDAP is set - in a few comments it is mentioned that such a setting happens automatically. Am I missing something? Maja -- Maja Gorecka-Wolniewiczmgw(a)umk.pl Uczelniane Centrum Information & Communication Informatyczne Technology Centre Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574

4 15

Commit report for v2.x.x branch
by announce＠freeradius.org 17 Aug '13

17 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Updates Alan T. DeKok@2013-08-17T20:10:09Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f36b8fdea5c0064c0b77… ====== -- This commit summary was generated @2013-08-18T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 16 Aug '13

16 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Keep track of the number of file descriptors were listening on Arran Cudbard-Bell@2013-08-16T20:28:27Z Files modified: * src/include/event.h * src/lib/event.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9815d0466e246f1c6d98… ====== Don't segv if asked to print a null value Arran Cudbard-Bell@2013-08-16T20:28:27Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/edd08f0ec498a48ff60e… ====== Simplify "proxy anew" code Now that the packet list re-uses Ids less often Alan T. DeKok@2013-08-16T16:11:45Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a0f95352a5cd953f2fd… ====== Simplify ID allocation so that we don't loop over all IDs Instead, we allocate a 256-entry array of random IDs (all unique) and gradually use them. When the array is empty, we re-fill it. Alan T. DeKok@2013-08-16T16:11:42Z Files modified: * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3587f98f305cc3eef508… ====== Unify error logic Alan T. DeKok@2013-08-16T15:03:36Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f09bf3c3bb7f4a858d76… ====== Merge pull request #328 from skids/rbtree Fixes and enhancements for rbtree Alan DeKok@2013-08-16T04:52:28Z Files modified: * src/include/libradius.h * src/lib/rbtree.c * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/995734aec92e6c43de99… ====== A test file for libradius rbtree ops Verifies red/black counts to all child nodes after adds/deletes Tests DeleteOrder; code provided in comments for vanilla rbtree_delete. Build system magic necessary for this is beyond me. It's a start at least skids@2013-06-26T00:52:15Z Files modified: * src/tests/rbmonkey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2011d7689f0fb05d87f1… ====== Add a batch deletion mode to rbtree_walk Walks the tree calling callbacks as per InOrder Allows callback to ask for deletion of records after evaluating criteria All callbacks and deletions done while lock is held skids@2013-06-26T00:47:14Z Files modified: * src/include/libradius.h * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c8685598bbb6c72393f4… ====== Always fixup after deleting a black child node in rbtree This prevents rbtree_delete from creating unbalanced/illegal rbtrees. skids@2013-06-25T02:40:48Z Files modified: * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/863a4f70d7bd876d73da… ====== Use a consistent callback return code This is the one place in the codebase where a positive return code is used in an rbtree_walk callback. Changing it negative should have no effect, and keeps options open as to whether to introduce new symbols for the next patch to follow, or to change the libfreeradius API slightly WRT rbtree callback return codes. Whether any third-party add-ons may use positive return codes is not known. skids@2013-06-20T22:54:31Z Files modified: * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/95949807d08e84ea4526… ====== Add rbtree_callbydata for sane threadsafe/garbage-collected operations When working with an rbtree which is exposed to multiple threads, it is not safe to do much of anything with data retrieved by functions such as rbtree_finddata, other than to feed it directly to rbtree_delete. This is because once rbtree_finddata has returned, another thread may obtain a pointer to that data (and hence may begin mangling non-key material such as container_of or any child allocs.) This is especially true for rbtrees that have a freeNode garbage collection routine defined. This function allows safe operations while the rbtree lock is still held. It also allows for a conditional delete operation based on criteria which may only be safe to ascertain while the lock is held. In addition to short operations, it could be used, with due care, to trylock a more granular lock associated with the key before deleting the key or before operating with it outside of the rbtree lock. skids@2013-06-20T22:03:20Z Files modified: * src/include/libradius.h * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e1b597d1a281e20a10ff… ====== Fix obvious pasto in PostOrder walk. skids@2013-06-20T04:47:33Z Files modified: * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a89132cf443a6f621374… ====== -- This commit summary was generated @2013-08-17T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 15 Aug '13

15 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== don't segv printing interfaceid Arran Cudbard-Bell@2013-08-15T19:17:01Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da5f8e2702e2e185a075… ====== Remove redundant headers Alan T. DeKok@2013-08-15T15:39:09Z Files modified: * src/main/command.c * src/main/connection.c * src/main/log.c * src/main/mainconfig.c * src/main/process.c * src/main/radattr.c * src/main/radiusd.c * src/main/radmin.c * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4bc52eb8a5e8c5a71af4… ====== Remove redundant headers Alan T. DeKok@2013-08-15T15:38:32Z Files modified: * src/lib/base64.c * src/lib/hash.c * src/lib/heap.c * src/lib/hmac.c * src/lib/hmacsha1.c * src/lib/print.c * src/lib/tcp.c * src/lib/token.c * src/lib/udpfromto.c * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d64b4a71cdfbbdc977f5… ====== Add pairvalidate_relaxed. This matches if not all attributes in the list are specified by the filter. Fix !* operator in pairvalidate (this has to be done outside of paircmp) Arran Cudbard-Bell@2013-08-15T14:29:08Z Files modified: * src/include/libradius.h * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ce0b5cfd95360c1de5fa… ====== If the DA doesn't say the attribute is meant to be tagged, then ignore tag values when searching Also rename dattr to da Arran Cudbard-Bell@2013-08-15T14:29:08Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b687f98682365ec9b918… ====== -- This commit summary was generated @2013-08-16T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 14 Aug '13

14 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Make it bool Alan T. DeKok@2013-08-14T18:45:52Z Files modified: * src/include/packet.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37a76484cca62157d76e… ====== packet list id alloc/free now inserts / yanks the packet, too Alan T. DeKok@2013-08-14T18:38:22Z Files modified: * src/include/packet.h * src/lib/packet.c * src/main/process.c * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0af11e8c0fa406936a06… ====== Made more functions return bool Alan T. DeKok@2013-08-14T18:36:18Z Files modified: * src/include/packet.h * src/lib/packet.c * src/main/process.c * src/main/radclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2fb60646d9a62fbe63a… ====== Return codes are boolean Alan T. DeKok@2013-08-14T18:34:16Z Files modified: * src/include/libradius.h * src/lib/rbtree.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a13936b236aa3437761d… ====== Check return code of packet_list_yank Alan T. DeKok@2013-08-14T18:32:24Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0a699978dcb69fc12fec… ====== Made packet_list_yank return a bool for success/failure Alan T. DeKok@2013-08-14T18:32:22Z Files modified: * src/lib/packet.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/124aba085f55bb323643… ====== Typo Arran Cudbard-Bell@2013-08-14T12:27:30Z Files modified: * src/include/radsniff.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5849e9e4310a787f4355… ====== Rewrite the majority of the packet processing logic Introduce a request structure like we use in the server core, and use this to represent the request/response link. This allows us to detect lost packets (where we never saw a response even after multiple requests), retransmissions where we see packets with the same src/dst parameters and request authenticator/nonce, and premature reuse of packet IDs. This also implements the first required dequeueing scheme (previously there was none), which remove requests from the rbtree. The second dequeuing scheme removes requests/responses immediately as soon as a response is received, and the third never bothers inserting requests/responses into the queue. The other schemes need to be implemented later, and specified by the user for individual packet types. Arran Cudbard-Bell@2013-08-14T12:06:23Z Files modified: * src/include/radsniff.h * src/main/collectd.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed0c55a578da56fe1512… ====== -- This commit summary was generated @2013-08-15T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 13 Aug '13

13 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add spaces after breaks Arran Cudbard-Bell@2013-08-13T23:11:28Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/495a1fb5b1794dc96104… ====== Add missing break Arran Cudbard-Bell@2013-08-13T23:09:35Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5db2a2706fd56071de0… ====== Fix more issues for new v3 API Alan T. DeKok@2013-08-13T15:06:36Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f1e50cd76ae6c0b8f572… ====== Update help text Arran Cudbard-Bell@2013-08-13T12:39:14Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1cf039917f395ad4c4db… ====== Batch up packet processing Arran Cudbard-Bell@2013-08-13T12:39:09Z Files modified: * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1bcdcd90053820fbf5fe… ====== Set start_pcap outside of the processing loop Arran Cudbard-Bell@2013-08-13T12:39:03Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/135cd5eed241608bff67… ====== Support decoding IPv6 headers Fixes decode errors when IPv6 loopback address is used, and allows radsniff to be used to decode RADIUS over IPv6. Arran Cudbard-Bell@2013-08-13T12:38:58Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/672e0234eb81a16e82d7… ====== Freeing the filter tree should be one of the last things we do... Arran Cudbard-Bell@2013-08-13T12:38:51Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7000fef9f4ded1bdecc6… ====== Move default secret to radsniff.h Arran Cudbard-Bell@2013-08-13T12:38:44Z Files modified: * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4d5f119448f1a9f9c24b… ====== Fix email in copyright Arran Cudbard-Bell@2013-08-13T12:38:38Z Files modified: * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a218a1c847d241312220… ====== Better checks for drops Arran Cudbard-Bell@2013-08-13T12:38:32Z Files modified: * src/include/pcap.h * src/include/radsniff.h * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c52fd27a1915f35300e… ====== Update stats structure (remove separate loss structure) Arran Cudbard-Bell@2013-08-13T12:38:26Z Files modified: * src/include/radsniff.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb8b30c1084a54a48e1f… ====== Merge pull request #405 from olivierbeytrison/fix-radeapclient Correct call to paircreate in radeapclient Arran Cudbard-Bell@2013-08-13T11:54:26Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49cefa38b42d0f234d04… ====== Correct call to paircreate in radeapclient Olivier Beytrison@2013-08-13T11:56:44Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/482d00492403e962ab6d… ====== -- This commit summary was generated @2013-08-14T00:00:11Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 12 Aug '13

12 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix horrific spacing issue. Alan T. DeKok@2013-08-12T21:40:29Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c94e0d9abcf7bc35dacd… ====== Actually use virtual server when proxying to it. Closes #375 Alan T. DeKok@2013-08-12T16:22:26Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9f0f66ff67508476efcc… ====== free -> talloc_free Alan T. DeKok@2013-08-12T15:17:17Z Files modified: * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73a88aa2d8136f9ff8ae… ====== -- This commit summary was generated @2013-08-13T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 11 Aug '13

11 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Only print foreach close brace once. Closes #377 Alan T. DeKok@2013-08-11T16:39:34Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20192a93d53a9a17e97f… ====== -- This commit summary was generated @2013-08-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 10 Aug '13

10 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== %{foo:1} is a module if "foo" isn't a dictionary attribute Alan T. DeKok@2013-08-10T03:38:24Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e3c21c390deea2d47290… ====== -- This commit summary was generated @2013-08-11T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 09 Aug '13

09 Aug '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Remove from the proxy list if we can't insert it Alan T. DeKok@2013-08-09T17:16:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e2bee599692a99ba67dc… ====== Merge pull request #402 from olivierbeytrison/fix-policies check for attribute existance in policies Arran Cudbard-Bell@2013-08-09T16:14:54Z Files modified: * raddb/policy.d/canonicalization * raddb/policy.d/filter Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/99f8a085653314b0f6c2… ====== check for attribute existance in policies Olivier Beytrison@2013-08-09T15:43:35Z Files modified: * raddb/policy.d/canonicalization * raddb/policy.d/filter Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/335ee6e539f0ef11bb5f… ====== Don't smash passwords with newly alloc'd zero array Alan T. DeKok@2013-08-09T15:27:05Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/52e0e97b765215652d32… ====== -- This commit summary was generated @2013-08-10T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0