- Freeradius-Devel - lists.freeradius.org

yubikey client dependency in FR 3.0
by John Dennis 18 Jul '13

18 Jul '13

Hi Arran: I figured you would know this because your name seems to be all over the ykclient git repo :-) I noticed when trying to build FR 3.0 that some of the yubikey modules are being skipped because of a failed dependency. configure: WARNING: libykclient missing ykclient_request_process. A later version of libykclient is required. configure: WARNING: silently building without yubicloud support. requires: ykclient Our ykclient is at version 2.7 and it looks like it hasn't been updated in over a year. What version of ykclient is required? Is disabling of yubicloud support a serious determent or just a nice-have feature? Do you know the Fedora maintainer for ykclient? Do we need to give them a prod to get a more current version of ykclient packaged? John -- jdennis(a)redhat.com

3 4

Re: [ANN] Version 3.0.0-rc0
by Stefan Winter 18 Jul '13

18 Jul '13

Hi, (siwtching to -devel) > If you are planning on deploying 3.0 and have an existing 2.x.x > configuration you were planning to migrate when the 3.0 is released, > now would be a good time to try that, and to report any issues or > problematic behaviour changes you notice. In recent days, it seems to be my sisyphos' job to try and shutdown FreeRADIUS cleanly. After falling into SEGVs on 2.x.x repeatedly, I thought I'd try 3.0 because all is shiny, new, better and different. Look what I got: Ready to process requests. Program received signal SIGTERM, Terminated. 0x00007ffff5d84623 in select () from /lib64/libc.so.6 (gdb) c Continuing. Signalled to terminate Exiting normally. rlm_sql (sql-dialup-hash): Removing connection pool rlm_sql (sql-dialup-hash): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-dialup-hash): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-dialup-hash): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-dialup-hash): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-dialup-hash): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-aai-hash): Removing connection pool rlm_sql (sql-aai-hash): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-aai-hash): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-aai-hash): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-aai-hash): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-aai-hash): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-null-acct-cops): Removing connection pool rlm_sql (sql-null-acct-cops): Closing connection (2) rlm_sql (sql-null-acct-cops): Closing connection (1) rlm_sql (sql-null-acct-cops): Closing connection (0) rlm_sql (sql-imap-hash): Removing connection pool rlm_sql (sql-imap-hash): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-imap-hash): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-imap-hash): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-imap-hash): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-imap-hash): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-null-acct-eduroam): Removing connection pool rlm_sql (sql-null-acct-eduroam): Closing connection (2) rlm_sql (sql-null-acct-eduroam): Closing connection (1) rlm_sql (sql-null-acct-eduroam): Closing connection (0) rlm_sql (sql-null-acct-erx): Removing connection pool rlm_sql (sql-null-acct-erx): Closing connection (2) rlm_sql (sql-null-acct-erx): Closing connection (1) rlm_sql (sql-null-acct-erx): Closing connection (0) rlm_sql (sql-null-acct-dialup): Removing connection pool rlm_sql (sql-null-acct-dialup): Closing connection (2) rlm_sql (sql-null-acct-dialup): Closing connection (1) rlm_sql (sql-null-acct-dialup): Closing connection (0) rlm_sql (sql-null-lastusage): Removing connection pool rlm_sql (sql-null-lastusage): Closing connection (2) rlm_sql (sql-null-lastusage): Closing connection (1) rlm_sql (sql-null-lastusage): Closing connection (0) rlm_sql (sql-null-postauth): Removing connection pool rlm_sql (sql-null-postauth): Closing connection (2) rlm_sql (sql-null-postauth): Closing connection (1) rlm_sql (sql-null-postauth): Closing connection (0) rlm_sql (sql-userjabber-hash): Removing connection pool rlm_sql (sql-userjabber-hash): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-userjabber-hash): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-userjabber-hash): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-userjabber-hash): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-userjabber-hash): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-smtp-hash): Removing connection pool rlm_sql (sql-smtp-hash): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-smtp-hash): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-smtp-hash): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-smtp-hash): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-smtp-hash): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-null-staff-tacacsaccounting): Removing connection pool rlm_sql (sql-null-staff-tacacsaccounting): Closing connection (2) rlm_sql (sql-null-staff-tacacsaccounting): Closing connection (1) rlm_sql (sql-null-staff-tacacsaccounting): Closing connection (0) rlm_sql (sql-null-acct-vpn): Removing connection pool rlm_sql (sql-null-acct-vpn): Closing connection (2) rlm_sql (sql-null-acct-vpn): Closing connection (1) rlm_sql (sql-null-acct-vpn): Closing connection (0) rlm_sql (sql-webmailsso): Removing connection pool rlm_sql (sql-webmailsso): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso-users): Removing connection pool rlm_sql (sql-webmailsso-users): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso-users): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso-users): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso-users): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-webmailsso-users): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-vpn-hash): Removing connection pool rlm_sql (sql-vpn-hash): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-vpn-hash): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-vpn-hash): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-vpn-hash): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-vpn-hash): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-eduroam-hash): Removing connection pool rlm_sql (sql-eduroam-hash): Closing connection (4) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-eduroam-hash): Closing connection (3) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-eduroam-hash): Closing connection (2) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-eduroam-hash): Closing connection (1) rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql-eduroam-hash): Closing connection (0) rlm_sql_mysql: Socket destructor called, closing socket Program received signal SIGSEGV, Segmentation fault. modcallable_free (pc=pc@entry=0x7fffffffe3b8) at src/main/modcall.c:2343 2343 next = loop->next; (gdb) print loop $1 = (modcallable *) 0x2527285345554c41 (gdb) print *loop Cannot access memory at address 0x2527285345554c41 (gdb) Note that this is the EXACT same error I get when trying to shut down the most recent 2.x.x branch. Yes, the same invalid hex pointer. Byte-by-byte. So whatever the problem in 2.x.x is, it has survived the numerous changes in the master branch. Needless to say... anyone wanting to use FreeRADIUS 2.2.1 or 3.0.0 with systemd will suffer from this. I think this is a bit of a showstopper for a 3.0 release. Greetings, Stefan Winter > > To provide a single point to test against, the release_3_0_0_rc0 tag has been created. > > Features and behaviours changes since release_3_0_0_beta1: > * Empty xlat expansions are no longer substituted with "_". > * Empty string expansions are no longer treated as failures, though actual failures and invalid operations will continue to bubble up and be translated into return codes. This is a change from 2.x.x where they were ignored. > * Update sections support both types of exec, those which use the output of the program to create an attribute value, and those which use the output to create multiple value pairs. > * Config item names have now been unified. In most cases the server will tell you the new name of the config item. > * rlm_ldap now only registers LDAP-Group for the default instance. It used to register it for every instance which caused inconsistent behaviour. > * New raddb structure. See raddb/README.rst for details. > * Support for ${.:instance} which returns the instance name of a section and ${.:name} which returns the name of a section. Useful when used with relative paths. > * Add support for bulk loading dynamic clients from LDAP. > * Don't re-add default symlinks in raddb/sites-enabled/ raddb/mods-enabled/ > > Bug fixes: > * Attribute instance selection [<n>] [#] [*] have been re-added to the xlat parser. > * PCRE headers and libraries are now detected in a wider range of locations. > * Symbols for PCRE drop in functions are now used in preference to posix functions, previously they weren't and this caused segfaults. > * Fixes in the FreeTDS driver to avoid double frees. > * Fix list to list copies in update sections. > * Fix exec in update statements. > * Fix use of double quoted strings in radclient -f files. > * Many packaging fixes and cleanups. > * Send Access-Rejects when using radsec. > * Various radsec fixes to avoid crashes. > * -HUP now works again. > * Don't wait on execs to finish if they're marked as wait = 'no'. > * Remove support for ranges in comparisons with NAS-Port-ID, these were broken, duplicative, and caused crashes. > * Don't crash when parsing 64bit integer values from text > * Expand ${...} before parsing conditions > * Fix foreach > * Be more lenient about MS-CHAP identity mismatches. > > The tarball is available here: > https://github.com/FreeRADIUS/freeradius-server/archive/release_3_0_0_beta1… > > Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> > FreeRADIUS Development Team > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473

4 12

Commit report for v2.x.x branch
by announce＠freeradius.org 17 Jul '13

17 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Backport fixes for thread local storage in rlm_python #291 Arran Cudbard-Bell@2013-07-17T19:32:18Z Files modified: * src/include/libradius.h * src/include/threads.h * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6663364db8f6134717bc… ====== More audits of the code for the same problem as the last commit Alan T. DeKok@2013-07-17T12:00:22Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6bb8c44c0a3a0c1fbe65… ====== Proper checks on group-type sections This should really be a flag rather than a compile-time check Alan T. DeKok@2013-07-17T11:45:27Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d79d74d474c3ad68ad8e… ====== -- This commit summary was generated @2013-07-18T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 17 Jul '13

17 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Whitespace fixes Arran Cudbard-Bell@2013-07-17T19:45:41Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/860beca69d4467d5361b… ====== Start of upgrade to 3.0 spec file Alan T. DeKok@2013-07-17T19:40:45Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c9980bb12c0a853d7768… ====== These no longer exist Alan T. DeKok@2013-07-17T19:40:34Z Files modified: * man/man5/rlm_policy.5 * man/man8/radwatch.8 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/35061645823b76caaf94… ====== Be more careful about decoding malformed attributes Alan T. DeKok (via Arran Cudbard-Bell)@2013-07-17T18:24:46Z Files modified: * src/lib/radius.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cda27ca8878c7ae7528d… ====== More audits of the code for the same problem as the last commit Alan T. DeKok (via Arran Cudbard-Bell)@2013-07-17T18:24:31Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d2aad3a747b64975ee7… ====== Allow abinary now the print function is fixed. Arran Cudbard-Bell@2013-07-17T18:07:48Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6310aa82b58db45bb961… ====== Don't segv printing out hexits from malformed filters Arran Cudbard-Bell@2013-07-17T17:59:09Z Files modified: * src/lib/filters.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/91360481c7d4454211ca… ====== Fix indentation in print_abinary Arran Cudbard-Bell@2013-07-17T17:55:52Z Files modified: * src/lib/filters.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/172729159d268efdc3a6… ====== Print the contents of dv if it's NULL, oh, wait... Arran Cudbard-Bell@2013-07-17T17:37:06Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/04657480bd1c270048ce… ====== Behaviour decoding extended attributes is expected Arran Cudbard-Bell@2013-07-17T17:26:27Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e4a2dee520fab0bfd6f2… ====== Ignore nested-extern warning Arran Cudbard-Bell@2013-07-17T16:07:26Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7518d97f7c132c8d0465… ====== FIx signed/unsigned comparison Arran Cudbard-Bell@2013-07-17T15:41:33Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e4648ab9d2fd2d69a4f8… ====== reinit vpc on each loop Arran Cudbard-Bell@2013-07-17T15:39:29Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6b4065ae6feef62151cd… ====== We no longer have a distinct buffer for string type values and values of known length. Arran Cudbard-Bell@2013-07-17T15:39:16Z Files modified: * src/lib/print.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/777d59952b97efb26726… ====== Add the 'debug_attr' xlat for power users At debug lvl 2 it will print all attributes and values matching the attribute name. If a list is passed it will print the contents of the list. At debug lvl 3 it will print out the attribute vendor, type and length. At debug lvl 4 it will print out alternative decodings of the attribute value. This is useful when the dictionaries for a NAS are not available/the NAS is very broken. It also helps with debugging improperly typed attributes. debug_attr: always expands to a zero length string. When debugging is not enabled the xlat function exits immediately. Arran Cudbard-Bell@2013-07-17T13:49:18Z Files modified: * src/include/libradius.h * src/lib/radius.c * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9998dd931369b305a51d… ====== Add macro RDEBUG_ENABLED to check whether a certain level of request debugging is enabled. Arran Cudbard-Bell@2013-07-17T13:44:45Z Files modified: * src/include/log.h * src/main/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ddf76ca0028b6516c56e… ====== Fix for coverity CID 1042354 Arran Cudbard-Bell@2013-07-17T12:31:11Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b482fbc00badcac18498… ====== When printing time_t values, cast to 64bit signed int Arran Cudbard-Bell@2013-07-17T12:01:08Z Files modified: * src/main/command.c * src/main/radwho.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ec047bdabc9511c86cef… ====== Proper checks on group-type sections This should really be a flag rather than a compile-time check Alan T. DeKok@2013-07-17T11:47:38Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/48e41c79c3983d746c41… ====== Minor fixes Arran Cudbard-Bell@2013-07-17T09:37:51Z Files modified: * src/main/log.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/930d7e4604054c7bbc96… ====== Sprinkle VERIFY_VP in paircmp functions Arran Cudbard-Bell@2013-07-17T00:20:32Z Files modified: * src/modules/rlm_expr/paircmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a3b58b6f02662c80b5af… ====== Swap request and req in paircmp functions so we can use debugging macros Arran Cudbard-Bell@2013-07-16T23:54:13Z Files modified: * src/modules/rlm_expr/paircmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc17a19afc8f6ea5dbe1… ====== add option to disable normalizing passwords in rlm_pap. Closes #380 Matthew Newton (via Arran Cudbard-Bell)@2013-07-16T19:40:37Z Files modified: * raddb/mods-available/pap * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2465b251f9129b76629… ====== Update the example configure scripts to use FR_SMART_* Arran Cudbard-Bell@2013-07-16T19:22:41Z Files modified: * src/modules/rlm_example/configure * src/modules/rlm_example/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7adf8934377560883b79… ====== Fix rlm_idn configure script Arran Cudbard-Bell@2013-07-16T19:15:48Z Files modified: * src/modules/rlm_idn/configure * src/modules/rlm_idn/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2156ec7be3a74416a02… ====== Make %{strlen:...} work MUCH better than %{#...}, which was shit Alan T. DeKok@2013-07-16T15:14:34Z Files modified: * man/man5/unlang.5 * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/311fd456cb83e755baf5… ====== Prefix packet types with code, and move them to an enum Arran Cudbard-Bell@2013-07-16T12:00:08Z Files modified: * src/include/radius.h * src/lib/radius.c * src/main/acct.c * src/main/auth.c * src/main/command.c * src/main/detail.c * src/main/listen.c * src/main/process.c * src/main/radclient.c * src/main/radsniff.c * src/main/realms.c * src/main/session.c * src/main/stats.c * src/main/threads.c * src/main/tls_listen.c * src/main/util.c * src/main/valuepair.c * src/modules/proto_vmps/vmps.c * src/modules/proto_vmps/vqp.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eapcommon.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_leap/rlm_eap_leap.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_example/rlm_example.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_securid/rlm_securid.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sometimes/rlm_sometimes.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/04c888667b6eeb948b7d… ====== Fix heimdal krb5 Arran Cudbard-Bell@2013-07-16T01:09:56Z Files modified: * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.ac * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c5dfef1bf34a85f83cb… ====== Remove spurious -rpath Arran Cudbard-Bell@2013-07-16T00:46:16Z Files modified: * src/modules/rlm_counter/configure * src/modules/rlm_eap/types/rlm_eap_ikev2/configure * src/modules/rlm_eap/types/rlm_eap_tnc/configure * src/modules/rlm_idn/configure * src/modules/rlm_ippool/configure * src/modules/rlm_krb5/configure * src/modules/rlm_ldap/configure * src/modules/rlm_python/configure * src/modules/rlm_redis/configure * src/modules/rlm_rediswho/configure * src/modules/rlm_rest/configure * src/modules/rlm_securid/configure * src/modules/rlm_sql/drivers/rlm_sql_db2/configure * src/modules/rlm_sql/drivers/rlm_sql_firebird/configure * src/modules/rlm_sql/drivers/rlm_sql_freetds/configure * src/modules/rlm_sql/drivers/rlm_sql_iodbc/configure * src/modules/rlm_sql/drivers/rlm_sql_mysql/configure * src/modules/rlm_sql/drivers/rlm_sql_postgresql/configure * src/modules/rlm_sql/drivers/rlm_sql_sqlite/configure * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/configure * src/modules/rlm_yubikey/configure Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d6909879da3899b2fbe… ====== Check for _talloc in libtalloc, this adds the library path when it's in an unusual place, which fixes header/lib tests on FreeBSD. Remove spurious -rpath argument from FR_SMART_CHECK_LIB Arran Cudbard-Bell@2013-07-16T00:39:20Z Files modified: * acinclude.m4 * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfa2bca580eb19eac06a… ====== Add notes on threading.local Arran Cudbard-Bell@2013-07-15T20:27:44Z Files modified: * raddb/mods-available/python Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/71c334eed2ff75ed872a… ====== Only call PyGILState_ensure from within threads, this should allow thread.local to function predictably for instantiation and destruction. Arran Cudbard-Bell@2013-07-15T20:27:44Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f6dfc51c281a7538dbc… ====== Fix thread local storage in python Closes #291 Arran Cudbard-Bell@2013-07-15T20:27:43Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/302d68acbfa6d3b594e4… ====== Define macros to abstract away the details of thread local storage Arran Cudbard-Bell@2013-07-15T20:27:43Z Files modified: * src/include/libradius.h * src/include/threads.h * src/lib/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/752331f8a416749c2e1b… ====== Correct order of parameters in radius_get_vp to be consistent with similar functions Arran Cudbard-Bell@2013-07-15T20:27:43Z Files modified: * src/include/radiusd.h * src/main/modcall.c * src/main/valuepair.c * src/main/xlat.c * src/modules/proto_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4afc7b4300fbc5ddd967… ====== Print out more helpful error messages on condition evaluation failure Arran Cudbard-Bell@2013-07-15T20:27:26Z Files modified: * src/main/evaluate.c * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb870889245a5d39466c… ====== Correct rcode check Arran Cudbard-Bell@2013-07-15T19:06:27Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8b5bff2d8a2cd2be1da5… ====== Merge pull request #376 from mcnewton/master remove debug output from main server Arran Cudbard-Bell@2013-07-15T15:46:41Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e52ad4c793b2ab07c8e7… ====== remove spurious VPs being printed out Matthew Newton@2013-07-15T15:34:17Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73ca404f9b966df0136c… ====== Fix confusing debug messages Arran Cudbard-Bell@2013-07-15T14:51:24Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da73caf06b2cc04ed96c… ====== Check for dst list and src literal or xlat Closes #372 Arran Cudbard-Bell@2013-07-15T12:53:17Z Files modified: * src/main/map.c * src/main/modcall.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69cf92c54529b8686466… ====== Update postgres postpaid to use the new query format Arran Cudbard-Bell@2013-07-15T12:41:24Z Files modified: * raddb/mods-config/sql/main/postgresql/extras/voip-postpaid.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/14c4efda645a3ae19bd7… ====== Fixup default SQL configs and rlm_sql man pages Arran Cudbard-Bell@2013-07-15T12:32:13Z Files modified: * man/man5/rlm_sql.5 * raddb/mods-available/cui * raddb/mods-available/sql * raddb/mods-config/sql/main/mssql/queries.conf * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/oracle/queries.conf * raddb/mods-config/sql/main/postgresql/extras/voip-postpaid.conf * raddb/mods-config/sql/main/postgresql/queries.conf * raddb/mods-config/sql/main/sqlite/queries.conf * redhat/freeradius-logrotate * redhat/radiusd-logrotate * suse/radiusd-logrotate Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be67e6787dda04b0b330… ====== For sql logging, if we have a section use that, else use the main log file Arran Cudbard-Bell@2013-07-15T12:19:55Z Files modified: * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9367b30ad404e8e81436… ====== Make RFC 6929 attributes standard. Alan T. DeKok@2013-07-15T11:17:08Z Files modified: * share/dictionary * share/dictionary.extended * share/dictionary.rfc6929 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21d8e8b19e945a0ac569… ====== Compare both offset and data fields when determining if there's a replacement for deprecated config items Arran Cudbard-Bell@2013-07-15T11:14:20Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/991d5a0082f8774b1801… ====== Merge pull request #373 from olivierbeytrison/ldap-schema Add edirectory schema for radius clients Arran Cudbard-Bell@2013-07-15T10:52:25Z Files modified: * doc/schemas/ldap/radiusclients-edirectory.ldif * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1226a52949a27a15f01e… ====== Add edirectory schema for radius clients Olivier Beytrison@2013-07-15T10:23:54Z Files modified: * doc/schemas/ldap/radiusclients-edirectory.ldif * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ae3b5621b6c661100e4… ====== /[ \t]+$// Or author has discovered his text editor decided to insert random whitespace after many lines, and has now discovered how to turn this off, and needs to fix all the current lines where this occurs, so that there's no spurious white space changes in future commits. Arran Cudbard-Bell@2013-07-14T21:43:53Z Files modified: * scripts/jlibtool.c * src/include/base64.h * src/include/libradius.h * src/include/log.h * src/include/modules.h * src/include/radiusd.h * src/include/realms.h * src/lib/base64.c * src/lib/dict.c * src/lib/event.c * src/lib/fifo.c * src/lib/hash.c * src/lib/heap.c * src/lib/hmac.c * src/lib/log.c * src/lib/misc.c * src/lib/packet.c * src/lib/print.c * src/lib/radius.c * src/lib/tcp.c * src/lib/token.c * src/lib/udpfromto.c * src/lib/valuepair.c * src/main/auth.c * src/main/client.c * src/main/command.c * src/main/conffile.c * src/main/connection.c * src/main/detail.c * src/main/evaluate.c * src/main/exec.c * src/main/files.c * src/main/listen.c * src/main/log.c * src/main/mainconfig.c * src/main/modcall.c * src/main/modules.c * src/main/parser.c * src/main/process.c * src/main/radattr.c * src/main/radclient.c * src/main/radiusd.c * src/main/radmin.c * src/main/radsniff.c * src/main/radwho.c * src/main/realms.c * src/main/stats.c * src/main/threads.c * src/main/tls.c * src/main/tls_listen.c * src/main/util.c * src/main/valuepair.c * src/main/version.c * src/main/xlat.c * src/modules/proto_dhcp/dhcp.c * src/modules/proto_dhcp/dhcpclient.c * src/modules/proto_dhcp/dhcpd.c * src/modules/proto_dhcp/rlm_dhcp.c * src/modules/proto_vmps/vqp.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/eap.h * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_types.h * src/modules/rlm_eap/libeap/eapcommon.c * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/mem.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/rlm_eap.h * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.c * src/modules/rlm_eap/types/rlm_eap_ikev2/ike_conf.h * src/modules/rlm_eap/types/rlm_eap_ikev2/rlm_eap_ikev2.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_example/rlm_example.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_idn/rlm_idn.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_ippool/rlm_ippool_tool.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/edir.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/opendir.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/extern.h * src/modules/rlm_otp/otp_mppe.c * src/modules/rlm_otp/otp_pw_valid.c * src/modules/rlm_otp/otp_pwe.c * src/modules/rlm_otp/otp_radstate.c * src/modules/rlm_otp/otp_util.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_securid/mem.c * src/modules/rlm_securid/rlm_securid.c * src/modules/rlm_securid/rlm_securid.h * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/drivers/rlm_sql_db2/rlm_sql_db2.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/rlm_sql_firebird.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.h * src/modules/rlm_sql/drivers/rlm_sql_freetds/rlm_sql_freetds.c * src/modules/rlm_sql/drivers/rlm_sql_iodbc/rlm_sql_iodbc.c * src/modules/rlm_sql/drivers/rlm_sql_mysql/rlm_sql_mysql.c * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c * src/modules/rlm_sql/drivers/rlm_sql_postgresql/rlm_sql_postgresql.c * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/rlm_sql_unixodbc.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h * src/modules/rlm_sql/sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_unix/rlm_unix.c * src/modules/rlm_wimax/rlm_wimax.c * src/modules/rlm_yubikey/decrypt.c * src/modules/rlm_yubikey/rlm_yubikey.c * src/modules/rlm_yubikey/rlm_yubikey.h * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7333cfd78366ac8b7ed8… ====== Set rcode on parse error Arran Cudbard-Bell@2013-07-14T16:18:38Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3e10b328b8a6c3f619c5… ====== More regex fixes Arran Cudbard-Bell@2013-07-14T15:45:12Z Files modified: * acinclude.m4 * configure * src/lib/valuepair.c * src/modules/rlm_python/configure * src/modules/rlm_sql/configure Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/294f58ae9f5e4ce38672… ====== Clean up code around map function Alan T. DeKok@2013-07-14T11:27:24Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1287f5a4493f10f69ba4… ====== Remove erroneous assert Alan T. DeKok@2013-07-14T09:31:11Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e6681facf0e308345f27… ====== The head of the list may be empty. If so, don't VERIFY it Alan T. DeKok@2013-07-13T20:54:35Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bb98d9922e108a1bc97c… ====== Update capitalization of CalledStationId Closes #217 Arran Cudbard-Bell@2013-07-13T16:18:17Z Files modified: * raddb/mods-config/sql/main/postgresql/extras/update_radacct_group.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7324fcd88719f5484204… ====== Add example config for the python module Arran Cudbard-Bell@2013-07-13T12:45:30Z Files modified: * raddb/mods-available/python Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f74b1eef9bc98cc9d980… ====== Don't pass value to pairmake if the pair will be marked up for xlat later Arran Cudbard-Bell@2013-07-13T10:04:49Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02a3e287fef902d0b8ba… ====== Fix -Werror warning Alan T. DeKok@2013-07-13T09:36:56Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ca3387d94707a7fad9f… ====== Back out hacks which worked around xlat ATTRIBUTE returning NULL Alan T. DeKok@2013-07-13T09:08:52Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ffa46996c59f30abecb… ====== Should return NOOP if function is not available Arran Cudbard-Bell@2013-07-12T23:29:24Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5458be18681a68daa3cc… ====== Config strings don't need to be freed explicitly Arran Cudbard-Bell@2013-07-12T23:29:24Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b06820bb4ea6cbbb2089… ====== Don't override signal handlers Arran Cudbard-Bell@2013-07-12T23:29:23Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ed98f58d3283eabf804… ====== Look for python in newer locations Arran Cudbard-Bell@2013-07-12T23:00:38Z Files modified: * src/modules/rlm_python/configure * src/modules/rlm_python/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49d04e5c85324cbaf50f… ====== Merge pull request #366 from mcnewton/master Debian package fixups for v3 Arran Cudbard-Bell@2013-07-12T19:04:57Z Files modified: * debian/freeradius.postinst * debian/freeradius.prerm * debian/libfreeradius3.install * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/668a5e4a492367b7ebf4… ====== dpkg: install libfreeradius-server.so Matthew Newton@2013-07-12T18:57:56Z Files modified: * debian/libfreeradius3.install Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5639b9a8f967aa274cd… ====== dpkg: don't mangle statoverride file Matthew Newton@2013-07-12T18:57:16Z Files modified: * debian/freeradius.prerm Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e236265ba0b0adbd4c83… ====== ensure var/log/freeradius is created in debian pkg Matthew Newton@2013-07-12T18:39:04Z Files modified: * debian/rules Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7a0ef9a27c6912f0bac… ====== typos in debian package postinst/prerm Matthew Newton@2013-07-12T18:12:40Z Files modified: * debian/freeradius.postinst * debian/freeradius.prerm Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/12eeb818754e691f769d… ====== Minor cleanups Arran Cudbard-Bell@2013-07-12T19:03:40Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/23a5fb8e8ad4ab207fde… ====== Cleanups Arran Cudbard-Bell@2013-07-12T19:01:24Z Files modified: * INSTALL.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6f135de3d7160fdacb89… ====== Update and rename INSTALL to INSTALL.rst Arran Cudbard-Bell@2013-07-12T18:57:13Z Files modified: * INSTALL * INSTALL.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/24410536f3f1057c5b50… ====== Merge pull request #365 from olivierbeytrison/ldap-schema Add schemas for ldap clients, correct ldap attribute names Arran Cudbard-Bell@2013-07-12T18:50:49Z Files modified: * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b21c3468633de2a766d4… ====== Add schemas for ldap clients, correct ldap attribute names Olivier Beytrison@2013-07-12T17:57:43Z Files modified: * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59682f3d3e9469176b9c… ====== Fix arguments for RDEBUG Alan T. DeKok@2013-07-12T16:44:35Z Files modified: * src/modules/rlm_opendirectory/rlm_opendirectory.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/58643639baaa00b581fe… ====== Fix debug statement Arran Cudbard-Bell@2013-07-12T16:17:37Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a95ffd356703f53968fc… ====== --with-edir is now always on Arran Cudbard-Bell@2013-07-12T15:51:57Z Files modified: * INSTALL Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4f9d0d7e1e34056dbc5f… ====== Files get the double backtick treatment Arran Cudbard-Bell@2013-07-12T15:32:46Z Files modified: * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6909035bcb965a445c56… ====== update INSTALL and README.rst for v3 Matthew Newton (via Arran Cudbard-Bell)@2013-07-12T15:29:37Z Files modified: * INSTALL * README.rst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f94389110ae3d3f73ae6… ====== Don't return -1 from a module function, it'll make the code in modcall angry Arran Cudbard-Bell@2013-07-12T15:20:30Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/27bb01e52cd8bbaae75d… ====== Fix test for TLS Arran Cudbard-Bell@2013-07-12T13:53:47Z Files modified: * acinclude.m4 * configure Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab81252faa58260b725c… ====== More changes Arran Cudbard-Bell@2013-07-12T00:45:22Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1b369335fac0fcc04a89… ====== Merge pull request #361 from alanbuxey/master windows phone needs CRLDP or it wont validate the cert and will fail the connection. Arran Cudbard-Bell@2013-07-12T00:01:40Z Files modified: * raddb/certs/README * raddb/certs/ca.cnf * raddb/certs/xpextensions Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1ac72a05118d506002f7… ====== Windows Phone needs CRL Distribution Point to be set or it isn't happy to validate a RADIUS cert after debugging with eduroam members, Windows Phone needs CRLDP attribute in the RADIUS/CA vert or its not happy and refuses the connection. Alan Buxey@2013-07-11T23:44:03Z Files modified: * raddb/certs/README * raddb/certs/ca.cnf * raddb/certs/xpextensions Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/35ea7a2c1b72e36b6f9d… ====== Add libpcre3-dev to .travis.yml Arran Cudbard-Bell@2013-07-11T17:20:14Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/67a2b4c511be8aa263d1… ====== inst->xlat_name not needed for debug messages in rlm_redis Arran Cudbard-Bell@2013-07-11T17:09:02Z Files modified: * src/modules/rlm_redis/rlm_redis.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/82961d74ffcbf1ec4a4f… ====== -lregex is required for mingw, but is apparently not available on other systems Arran Cudbard-Bell@2013-07-11T17:07:17Z Files modified: * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d6b4f43eb394b7314c55… ====== inst->xlat_name not needed for debug messages in rlm_krb5 Arran Cudbard-Bell@2013-07-11T16:36:35Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4715310cf9b01ee63615… ====== Notes on rlm_ruby Arran Cudbard-Bell@2013-07-11T16:34:03Z Files modified: * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a156edf61c03476504a6… ====== Fix invalid format strings and bugs revealed by the previous change Arran Cudbard-Bell@2013-07-11T16:15:53Z Files modified: * src/modules/rlm_eap/eap.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_ruby/rlm_ruby.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a4d1d5aff780f76ff53c… ====== Enable format string validation for module_failure_msg Arran Cudbard-Bell@2013-07-11T16:09:10Z Files modified: * src/include/radiusd.h * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7b079d6afa82abf6510d… ====== Use <INVALID> instead of ¿unknown? to be consistent with the rest of the server Arran Cudbard-Bell@2013-07-11T15:57:48Z Files modified: * src/main/conffile.c * src/main/map.c * src/main/util.c * src/main/valuepair.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_replicate/rlm_replicate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49c0ba4227b13decb50c… ====== We don't skip, we just stop processing the update section Arran Cudbard-Bell@2013-07-11T15:57:48Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/344529b9c0377b09da37… ====== Fix typo Alan T. DeKok@2013-07-11T14:46:25Z Files modified: * raddb/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f826c7b971fece4fb266… ====== Installed links depend on the installation dir. Closes #360 Through the simple expedient of having the rules for the links active ONLY when the directory doesn't exist. If the directory exists, the rules aren't active, and no links are created Alan T. DeKok@2013-07-11T14:05:44Z Files modified: * raddb/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4783873eb740a2dc3b9c… ====== Don't echo if we do nothing Alan T. DeKok@2013-07-11T14:05:25Z Files modified: * raddb/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2fd92b8433ab6c7806c… ====== Re-enable [n] [#] and [*]. Closes #354. This code was deleted during the change to cursors. Alan T. DeKok@2013-07-11T09:38:09Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4b9be42a2f1b45e97ee1… ====== Buffer may be NULL. Closes #358 Alan T. DeKok@2013-07-11T09:38:09Z Files modified: * src/main/evaluate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/25be6e05b0974a08a6e3… ====== Restructure map2request and dependencies to return a status code instead of VALUE_PAIRs Arran Cudbard-Bell@2013-07-11T01:01:07Z Files modified: * src/include/radiusd.h * src/main/modcall.c * src/main/valuepair.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/babe0270ddc675c7a12d… ====== Remove invalid assert, this could fail for VALUE_PAIR producing execs Arran Cudbard-Bell@2013-07-10T20:16:08Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a7bf7507dfb3d7b21b0… ====== Set map operator on copied filtered attributes Arran Cudbard-Bell@2013-07-10T20:14:54Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9b652e01b20ec2927120… ====== -- This commit summary was generated @2013-07-18T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

%{debug_attr:}
by Arran Cudbard-Bell 17 Jul '13

17 Jul '13

There's a new undocumented expansion '%{debug_attr:<attribute>}' in what will be 3.0.1. At debug level 2 it just prints out the names and values of attributes which match <attribute>. At debug level 3 it also prints out the type length and vendor. At debug level 4 it writes the attribute back out into wire format and attempts to decode it as different things. It is absolutely not recommended for production use, but can be helpful in determining what those unknown VSAs actually contain, and for finding the state of the various lists and attributes at various points in your policies. Here's some example output: Wed Jul 17 16:58:01 2013 : Info: (0) Attributes matching "request:" Wed Jul 17 16:58:01 2013 : Info: (0) request:User-Name = 'footed' Wed Jul 17 16:58:01 2013 : Debug: (0) type : string Wed Jul 17 16:58:01 2013 : Debug: (0) length : 6 Wed Jul 17 16:58:01 2013 : Debug: (0) as abinary : 0x666f6f746564 Wed Jul 17 16:58:01 2013 : Debug: (0) as octets : 0x666f6f746564 Wed Jul 17 16:58:01 2013 : Debug: (0) as ipv6prefix : 6f74:6564::/111 Wed Jul 17 16:58:01 2013 : Info: (0) request:User-Password = 'barram' Wed Jul 17 16:58:01 2013 : Debug: (0) type : string Wed Jul 17 16:58:01 2013 : Debug: (0) length : 6 Wed Jul 17 16:58:01 2013 : Debug: (0) as abinary : 0x62617272616d Wed Jul 17 16:58:01 2013 : Debug: (0) as octets : 0x62617272616d Wed Jul 17 16:58:01 2013 : Debug: (0) as ipv6prefix : 7272:616d::/97 Wed Jul 17 16:58:01 2013 : Info: (0) request:NAS-IP-Address = 172.16.184.1 Wed Jul 17 16:58:01 2013 : Debug: (0) type : ipaddr Wed Jul 17 16:58:01 2013 : Debug: (0) length : 4 Wed Jul 17 16:58:01 2013 : Debug: (0) as integer : 2886776833 Wed Jul 17 16:58:01 2013 : Debug: (0) as string : '\254\020\270\001' Wed Jul 17 16:58:01 2013 : Debug: (0) as date : 'Jun 23 2061 18:27:13 GMT' Wed Jul 17 16:58:01 2013 : Debug: (0) as abinary : 0xac10b801 Wed Jul 17 16:58:01 2013 : Debug: (0) as octets : 0xac10b801 Wed Jul 17 16:58:01 2013 : Debug: (0) as ipv6prefix : b801::/16 Wed Jul 17 16:58:01 2013 : Debug: (0) as signed : -1056964609 Wed Jul 17 16:58:01 2013 : Debug: (0) as uint32 : 2886776833 Wed Jul 17 16:58:01 2013 : Debug: (0) as int32 : -1056964609 Wed Jul 17 16:58:01 2013 : Info: (0) request:NAS-Port = 0 Wed Jul 17 16:58:01 2013 : Debug: (0) type : integer Wed Jul 17 16:58:01 2013 : Debug: (0) length : 4 Wed Jul 17 16:58:01 2013 : Debug: (0) as string : '\000\000\000' Wed Jul 17 16:58:01 2013 : Debug: (0) as ipaddr : 0.0.0.0 Wed Jul 17 16:58:01 2013 : Debug: (0) as date : 'Jan 1 1970 01:00:00 BST' Wed Jul 17 16:58:01 2013 : Debug: (0) as abinary : 0x00000000 Wed Jul 17 16:58:01 2013 : Debug: (0) as octets : 0x00000000 Wed Jul 17 16:58:01 2013 : Debug: (0) as ipv6prefix : ::/0 Wed Jul 17 16:58:01 2013 : Debug: (0) as signed : -1056964609 Wed Jul 17 16:58:01 2013 : Debug: (0) as int32 : -1056964609 Wed Jul 17 16:58:01 2013 : Info: (0) request:Message-Authenticator = 0xc085d8999a4255079ae9bdfda9a81161 Wed Jul 17 16:58:01 2013 : Debug: (0) type : octets Wed Jul 17 16:58:01 2013 : Debug: (0) length : 16 Wed Jul 17 16:58:01 2013 : Debug: (0) as string : '\300\205??\232BU\007\232\351\275\375\251\250\021a' Wed Jul 17 16:58:01 2013 : Debug: (0) as abinary : 0xc085d8999a4255079ae9bdfda9a81161 Wed Jul 17 16:58:01 2013 : Debug: (0) as ipv6addr : c085:d899:9a42:5507:9ae9:bdfd:a9a8:1161 Wed Jul 17 16:58:01 2013 : Debug: (0) expand: "%{debug_attr:request:}" -> '' Just wrote it to feed random crap into the parser really, and to see if decoding/re-encoding might be a good way to do attribute conversions where there's a type mismatch, but figured it might be useful as a diagnostic tool. Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS Development Team

1 0

FR3 on FreeBSD
by Валерій Степанюк 17 Jul '13

17 Jul '13

4 17

in 3.0.0
by Arran Cudbard-Bell 17 Jul '13

17 Jul '13

I can probably find some time to take this on if development hasn't already started. Could the JRadius maintainers provide the latest code for the JRadius module, and i'll work from that. -Arran Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS Development Team

1 0

Commit report for master branch
by announce＠freeradius.org 16 Jul '13

16 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Sprinkle VP_VERIFY in paircmp functions Arran Cudbard-Bell@2013-07-16T23:58:00Z Files modified: * src/modules/rlm_expr/paircmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f98c33b8621607588c66… ====== Swap request and req in paircmp functions so we can use debugging macros Arran Cudbard-Bell@2013-07-16T23:54:13Z Files modified: * src/modules/rlm_expr/paircmp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bc17a19afc8f6ea5dbe1… ====== add option to disable normalizing passwords in rlm_pap. Closes #380 Matthew Newton (via Arran Cudbard-Bell)@2013-07-16T19:40:37Z Files modified: * raddb/mods-available/pap * src/modules/rlm_pap/rlm_pap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c2465b251f9129b76629… ====== Update the example configure scripts to use FR_SMART_* Arran Cudbard-Bell@2013-07-16T19:22:41Z Files modified: * src/modules/rlm_example/configure * src/modules/rlm_example/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7adf8934377560883b79… ====== Fix rlm_idn configure script Arran Cudbard-Bell@2013-07-16T19:15:48Z Files modified: * src/modules/rlm_idn/configure * src/modules/rlm_idn/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d2156ec7be3a74416a02… ====== Make %{strlen:...} work MUCH better than %{#...}, which was shit Alan T. DeKok@2013-07-16T15:14:34Z Files modified: * man/man5/unlang.5 * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/311fd456cb83e755baf5… ====== Prefix packet types with code, and move them to an enum Arran Cudbard-Bell@2013-07-16T12:00:08Z Files modified: * src/include/radius.h * src/lib/radius.c * src/main/acct.c * src/main/auth.c * src/main/command.c * src/main/detail.c * src/main/listen.c * src/main/process.c * src/main/radclient.c * src/main/radsniff.c * src/main/realms.c * src/main/session.c * src/main/stats.c * src/main/threads.c * src/main/tls_listen.c * src/main/util.c * src/main/valuepair.c * src/modules/proto_vmps/vmps.c * src/modules/proto_vmps/vqp.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eapcommon.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_leap/rlm_eap_leap.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_example/rlm_example.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_securid/rlm_securid.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sometimes/rlm_sometimes.c * src/modules/rlm_yubikey/rlm_yubikey.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/04c888667b6eeb948b7d… ====== Fix heimdal krb5 Arran Cudbard-Bell@2013-07-16T01:09:56Z Files modified: * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.ac * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0c5dfef1bf34a85f83cb… ====== Remove spurious -rpath Arran Cudbard-Bell@2013-07-16T00:46:16Z Files modified: * src/modules/rlm_counter/configure * src/modules/rlm_eap/types/rlm_eap_ikev2/configure * src/modules/rlm_eap/types/rlm_eap_tnc/configure * src/modules/rlm_idn/configure * src/modules/rlm_ippool/configure * src/modules/rlm_krb5/configure * src/modules/rlm_ldap/configure * src/modules/rlm_python/configure * src/modules/rlm_redis/configure * src/modules/rlm_rediswho/configure * src/modules/rlm_rest/configure * src/modules/rlm_securid/configure * src/modules/rlm_sql/drivers/rlm_sql_db2/configure * src/modules/rlm_sql/drivers/rlm_sql_firebird/configure * src/modules/rlm_sql/drivers/rlm_sql_freetds/configure * src/modules/rlm_sql/drivers/rlm_sql_iodbc/configure * src/modules/rlm_sql/drivers/rlm_sql_mysql/configure * src/modules/rlm_sql/drivers/rlm_sql_postgresql/configure * src/modules/rlm_sql/drivers/rlm_sql_sqlite/configure * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/configure * src/modules/rlm_yubikey/configure Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d6909879da3899b2fbe… ====== Check for _talloc in libtalloc, this adds the library path when it's in an unusual place, which fixes header/lib tests on FreeBSD. Remove spurious -rpath argument from FR_SMART_CHECK_LIB Arran Cudbard-Bell@2013-07-16T00:39:20Z Files modified: * acinclude.m4 * configure * configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfa2bca580eb19eac06a… ====== -- This commit summary was generated @2013-07-17T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 15 Jul '13

15 Jul '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add notes on threading.local Arran Cudbard-Bell@2013-07-15T20:27:44Z Files modified: * raddb/mods-available/python Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/71c334eed2ff75ed872a… ====== Only call PyGILState_ensure from within threads, this should allow thread.local to function predictably for instantiation and destruction. Arran Cudbard-Bell@2013-07-15T20:27:44Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f6dfc51c281a7538dbc… ====== Fix thread local storage in python Closes #291 Arran Cudbard-Bell@2013-07-15T20:27:43Z Files modified: * src/modules/rlm_python/rlm_python.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/302d68acbfa6d3b594e4… ====== Define macros to abstract away the details of thread local storage Arran Cudbard-Bell@2013-07-15T20:27:43Z Files modified: * src/include/libradius.h * src/include/threads.h * src/lib/log.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/752331f8a416749c2e1b… ====== Correct order of parameters in radius_get_vp to be consistent with similar functions Arran Cudbard-Bell@2013-07-15T20:27:43Z Files modified: * src/include/radiusd.h * src/main/modcall.c * src/main/valuepair.c * src/main/xlat.c * src/modules/proto_dhcp/rlm_dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4afc7b4300fbc5ddd967… ====== Print out more helpful error messages on condition evaluation failure Arran Cudbard-Bell@2013-07-15T20:27:26Z Files modified: * src/main/evaluate.c * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb870889245a5d39466c… ====== Correct rcode check Arran Cudbard-Bell@2013-07-15T19:06:27Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8b5bff2d8a2cd2be1da5… ====== Merge pull request #376 from mcnewton/master remove debug output from main server Arran Cudbard-Bell@2013-07-15T15:46:41Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e52ad4c793b2ab07c8e7… ====== remove spurious VPs being printed out Matthew Newton@2013-07-15T15:34:17Z Files modified: * src/main/parser.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73ca404f9b966df0136c… ====== Fix confusing debug messages Arran Cudbard-Bell@2013-07-15T14:51:24Z Files modified: * src/modules/rlm_realm/rlm_realm.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da73caf06b2cc04ed96c… ====== Check for dst list and src literal or xlat Closes #372 Arran Cudbard-Bell@2013-07-15T12:53:17Z Files modified: * src/main/map.c * src/main/modcall.c * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69cf92c54529b8686466… ====== Update postgres postpaid to use the new query format Arran Cudbard-Bell@2013-07-15T12:41:24Z Files modified: * raddb/mods-config/sql/main/postgresql/extras/voip-postpaid.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/14c4efda645a3ae19bd7… ====== Fixup default SQL configs and rlm_sql man pages Arran Cudbard-Bell@2013-07-15T12:32:13Z Files modified: * man/man5/rlm_sql.5 * raddb/mods-available/cui * raddb/mods-available/sql * raddb/mods-config/sql/main/mssql/queries.conf * raddb/mods-config/sql/main/mysql/queries.conf * raddb/mods-config/sql/main/oracle/queries.conf * raddb/mods-config/sql/main/postgresql/extras/voip-postpaid.conf * raddb/mods-config/sql/main/postgresql/queries.conf * raddb/mods-config/sql/main/sqlite/queries.conf * redhat/freeradius-logrotate * redhat/radiusd-logrotate * suse/radiusd-logrotate Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be67e6787dda04b0b330… ====== For sql logging, if we have a section use that, else use the main log file Arran Cudbard-Bell@2013-07-15T12:19:55Z Files modified: * src/modules/rlm_sql/sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9367b30ad404e8e81436… ====== Make RFC 6929 attributes standard. Alan T. DeKok@2013-07-15T11:17:08Z Files modified: * share/dictionary * share/dictionary.extended * share/dictionary.rfc6929 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21d8e8b19e945a0ac569… ====== Compare both offset and data fields when determining if there's a replacement for deprecated config items Arran Cudbard-Bell@2013-07-15T11:14:20Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/991d5a0082f8774b1801… ====== Merge pull request #373 from olivierbeytrison/ldap-schema Add edirectory schema for radius clients Arran Cudbard-Bell@2013-07-15T10:52:25Z Files modified: * doc/schemas/ldap/radiusclients-edirectory.ldif * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1226a52949a27a15f01e… ====== Add edirectory schema for radius clients Olivier Beytrison@2013-07-15T10:23:54Z Files modified: * doc/schemas/ldap/radiusclients-edirectory.ldif * raddb/mods-available/ldap Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5ae3b5621b6c661100e4… ====== -- This commit summary was generated @2013-07-16T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Re: Blow-up in username filter?
by Alan Buxey 15 Jul '13

15 Jul '13

Everyone using 3.x beta etc should be running the latest code. .. and reporting bugs/issues they find rather than sitting on them. .. or it will go out with those issues present (imagine day 0 of the release when someone says "Oh. It still crashes when you xxxx in the xxxx file I thought that would get fixed") :/ alan

2 2