- Freeradius-Devel - lists.freeradius.org

Changes to LDAP configuration and group processing
by Arran Cudbard-Bell 28 Mar '13

28 Mar '13

The configuration for rlm_ldap has changed slightly. There's now a new subsection 'user' which contains: * basedn (allows specification of a specific base dn for users) * scope (defaults to sub) * filter (moved from main configuration section) * positive_access (moved from profile) * access_attribute (moved from profile) Group has three additional config items * basedn (allows specification of a specific base dn for groups) * scope (defaults to sub) * filter (which is combined with the membership filter, and used on its own when converting group names to DNs) * cacheable_name - Retrieves all group memberships as group names * cacheable_dn - Retrieves all group memberships as group DNs basedn in the main config section has been left in, but will be overridden by basedn set in user or group. The default scope of user and group is "sub" which is the same as before, but can be set to one (or base, though i'm not sure why you'd do that). The cacheable_* items if enabled, will convert all memberships to the group attribute created when the module is instantiated (LDAP-Group if no instance name is provided). Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : Waiting for bind result... Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : Bind successful Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : expand: '%{Stripped-User-Name}' -> '' Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : ... expanding second conditional Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : escape: 'arr2036' -> 'arr2036' Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : expand: '%{User-Name}' -> 'arr2036' Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : expand: '(uid=%{%{Stripped-User-Name}:-%{User-Name}})' -> '(uid=arr2036)' Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : expand: 'dc=rm-rfi,dc=com' -> 'dc=rm-rfi,dc=com' Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : Performing search in 'dc=rm-rfi,dc=com' with filter '(uid=arr2036)' Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : Waiting for search result... Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : User object found at DN "uid=arr2036,ou=people,dc=rm-rfi,dc=com" Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : Added Ldap-Group with value "example" to control list Wed Mar 27 17:59:27 2013 : Debug: (2) ldap : Added Ldap-Group with value "nonexistant" to control list Wed Mar 27 17:59:28 2013 : Debug: (2) files : Searching for user in group "example" Wed Mar 27 17:59:28 2013 : Debug: (2) files : User found. Matched cached membership If you want to use cacheable_* the format should match the format of your check items. If you have a check item in a format thats not cached the module will fallback to querying the LDAP directory. For those using Active Directory where all the membership information is in memberOf attributes in the user object, you will see a performance increase by turning on the cacheable_* which matches the format of those attributes, and using check items of that format, even if you don't cache any of the membership attributes. The old code did the following: * query to get user DN * query to get attributes for mapping * query to get access attributes and profile attributes (then one query per profile) * query for every membership check * optional edir query to retrieve password * optional edir query to check authorisation The new code without caching does * query to get DN, mapping, access attributes, profile attributes (then one query per profile) * optional edir query to retrieve password * optional edir query to check authorisation * query for every membership check The new code with caching just does * query to get DN, mapping, access attributes, profile attributes (then one query per profile), membership attributes * optional edir query to retrieve password * optional edir query to check authorisation If you don't want to try out the new features then the only change required in your config is to create a user {} section and move the filter and access config items into it. Profiles for group objects are not supported, looking at the 2.x.x code, i'm not sure they ever were. But if someone knows differently let me know, and i'll try and hack support in for them (though it'll only be for dynamic group lookups until we have nested attributes). The module src has been split out into individual files, attrmap.c deals with mapping attributes, group.c contains the group logic, edir.c contains the edir code, ldap.c contains the main functions (rlm_ldap_bind, rlm_ldap_search, rlm_ldap_modify), and rlm_ldap.c contains the module functions. Any patches that call libldap functions to bind, search or modify attributes will not be accepted. Any code that needs to determine the user's DN must call rlm_ldap_find_user. Error handling has been improved. The module will now always print any error messages provided by the server, and where the server and library errors differ, print information for both. In the case of partial DN matches (due to misconfiguration) it should also print out a string showing where the match failed. That's about all I can think of to improve the LDAP module logic, at some point the module should be split into logic and connection pool, but that can wait a while. -Arran

1 0

Commit report for master branch
by announce＠freeradius.org 27 Mar '13

27 Mar '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More LDAP fixes Arran Cudbard-Bell@2013-03-27T23:04:31Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c83e0f9ba7e53302ec8e… ====== Fix typo in eap tnc Arran Cudbard-Bell@2013-03-27T21:27:47Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9c540e0dbffd993617ac… ====== Check for null name pointer Arran Cudbard-Bell@2013-03-27T19:45:11Z Files modified: * src/lib/token.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3930f3d40cf1fefa20c4… ====== Allocate enough memory for the data Alan T. DeKok@2013-03-27T19:41:41Z Files modified: * src/modules/rlm_eap/libeap/eapcommon.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c574f9341a1a8b6ae94c… ====== Convert to talloc Alan T. DeKok@2013-03-27T16:31:37Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/19379b3c6864e2717e61… ====== Convert to talloc Alan T. DeKok@2013-03-27T16:27:41Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/88d9980c4b4fd11139f9… ====== Convert to talloc Alan T. DeKok@2013-03-27T16:17:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ikev2/rlm_eap_ikev2.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fb897c76b4a6ee0b7f75… ====== Remove reference to malloc in comments Which makes it easier to find references to malloc in the code Alan T. DeKok@2013-03-27T16:15:29Z Files modified: * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/81c8fe6e367ec7b91fcf… ====== Convert to talloc Some Apple APIs still return malloc'd memory, so we need to call free() for them. Alan T. DeKok@2013-03-27T16:14:21Z Files modified: * src/modules/rlm_mschap/opendir.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b4c4d523a047a4fd6c8c… ====== Check for NULL parameters in pairmove() Alan T. DeKok@2013-03-27T15:40:08Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8210047d469f98785589… ====== EAP_MAX_TYPES is invalid, too Alan T. DeKok@2013-03-27T15:38:07Z Files modified: * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2ef9f905510136ac6844… ====== More fixes Arran Cudbard-Bell@2013-03-27T03:42:38Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00097b505c1ca698588e… ====== Fixes for new group code Arran Cudbard-Bell@2013-03-27T01:23:54Z Files modified: * src/modules/rlm_ldap/all.mk.in * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22c2cebb3faad34ace8b… ====== Fix makefile for eap_tls Arran Cudbard-Bell@2013-03-27T00:07:48Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/all.mk * src/modules/rlm_eap/types/rlm_eap_tls/all.mk.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/061c78b3a68ce3b7cd4a… ====== -- This commit summary was generated @2013-03-28T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v2.x.x branch
by announce＠freeradius.org 26 Mar '13

26 Mar '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Note recent changes Alan T. DeKok@2013-03-26T21:55:47Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e42584ce3bd79be47728… ====== Hacks to remove crash on exit Alan T. DeKok@2013-03-26T21:47:51Z Files modified: * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sql/rlm_sql.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/50cc4ef21d250f8eb6b2… ====== Allow setting Packet-Dst-Port when giaddr is set Alan T. DeKok@2013-03-26T13:23:34Z Files modified: * src/main/dhcpd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eca186b62882e338d0cc… ====== -- This commit summary was generated @2013-03-27T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 26 Mar '13

26 Mar '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Typo in rlm_ldap_xlat_filter Arran Cudbard-Bell@2013-03-26T23:42:27Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11ce7be5511ba60503ec… ====== Fix documentation Arran Cudbard-Bell@2013-03-26T23:05:14Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5d5cf57beb5cfe23d16… ====== Tabs should be allowed in bootstrap.sql files Move version debug statement to after config parsing Arran Cudbard-Bell@2013-03-26T23:02:01Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/379101357e809c274806… ====== Finish cacheable group membership code Add 'user' configuration section, and move enable attribute there Add user and group specific base_dn, filter, and scope Arran Cudbard-Bell@2013-03-26T22:55:32Z Files modified: * raddb/mods-available/ldap * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/80ce245538c143d369c3… ====== Its a directory Arran Cudbard-Bell@2013-03-26T22:55:31Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c0a7ca035b711a4a1ff… ====== Use consitent / simple names Alan T. DeKok@2013-03-26T22:24:32Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/da68bf4a2f2a41e4321c… ====== Use pairfilter, instead of making copies of copies Alan T. DeKok@2013-03-26T22:22:51Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1fc5953c1d74abd4732b… ====== Fix typo. Closes #253 Alan T. DeKok@2013-03-26T22:15:01Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5664a8da8984d07ce8f0… ====== Remove more references to malloc Alan T. DeKok@2013-03-26T21:32:16Z Files modified: * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/libeap/eap_sim.h * src/modules/rlm_eap/libeap/eap_types.h * src/modules/rlm_eap/libeap/eapcommon.c * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3a42ac5f44f798d3adb1… ====== -- This commit summary was generated @2013-03-27T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 25 Mar '13

25 Mar '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Sanitize some inst field names Add additional documentation. Arran Cudbard-Bell@2013-03-25T18:33:06Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/75986eed73cd8f485d41… ====== convert talloc_size to talloc_zero_array Arran Cudbard-Bell@2013-03-25T16:12:18Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa094f5ccbd2243cc527… ====== Fix typo Arran Cudbard-Bell@2013-03-25T07:56:51Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f8398b2343057ebc8fa0… ====== Add allocation checks around more things Arran Cudbard-Bell@2013-03-25T07:38:43Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_sqlite/rlm_sql_sqlite.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1f808f239a7299f9a0b7… ====== Fixup Oracle driver Arran Cudbard-Bell@2013-03-25T05:18:00Z Files modified: * src/modules/rlm_sql/drivers/rlm_sql_oracle/all.mk.in * src/modules/rlm_sql/drivers/rlm_sql_oracle/rlm_sql_oracle.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/efe404ed2ef86868dbc1… ====== Remove references to malloc Alan T. DeKok@2013-03-25T02:20:29Z Files modified: * src/main/util.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d7d96a3334602e81e931… ====== Added talloc_get_type_abort for the pointers to ensure that nothing was free'd or otherwise broken Alan T. DeKok@2013-03-25T01:34:40Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/869133805044b85d2e02… ====== Spaces are spaces, not tabs No tabs or wings in this project Alan T. DeKok@2013-03-25T01:18:07Z Files modified: * src/main/modcall.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cbd639b7cff52af42429… ====== Steal the SSL session pointer so it's attached to the handle, and not to the CONF_SECTION Alan T. DeKok@2013-03-25T01:05:49Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/697c61e075d03fe83462… ====== Use talloc, not malloc for packet->data and talloc_steal the SSL session, so that it's parented off of the socket, and not off of the CONF_SECTION Alan T. DeKok@2013-03-25T01:05:49Z Files modified: * src/main/tls_listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/76824db15ba07d414d36… ====== Allow begin/commit to be silently empty Alan T. DeKok@2013-03-25T01:05:49Z Files modified: * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/982c19de67410166ed56… ====== The *-rollback aren't used. So we delete them Alan T. DeKok@2013-03-25T01:05:49Z Files modified: * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4ce0bace08f02b2c8040… ====== -- This commit summary was generated @2013-03-26T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Initial support of Multi Valued Attributes operators
by Olivier Beytrison 25 Mar '13

25 Mar '13

Hello, I've sent a pull request to add the initial support of MVA operators. This add 4 new operators to perform basic comparison with multivalued attributes * |== At least one attribute should equal the value * &== All attributes should equal the value * |=~ At least one attribute should match the regular expression * &=~ All attributes should match the regular expression The allowed syntax are attribute-name &==/|== "double quoted string with xlat expansion" attribute-name &==/|== 'single quoted string for a fixed value' attribute-name &=~/|=~ /regular expression/flag With the regexp, we're not matching against group. It will not populate the %{0} %{1} variables Their inverse is not available. Simply encapsulate their call inside !() For example, this will allow to simply check ldap-group with unlang without building a foreach loop or using huntfile. Arran is in the process to add this feature to rlm_ldap. With those operators, it would also make sense to retrieve all values with sql/ldap xlat. But this is to be discussed. The code has been tested here and it performs well. I tried to make it as clean as possible. What's left to do is update the unlang man page and the wiki. Well, if it is merged :) Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier(a)heliosnet.org

4 13

Commit report for v2.x.x branch
by announce＠freeradius.org 24 Mar '13

24 Mar '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fix horrible hack The core of rlm_eap expects that "inst" is the structure containing the parsed config variables. Using "inst->conf" instead confuses things. And is a horrible idea. So... we just put the conf stuff as the first structure in 'inst' It's horrid, but simpler than going through and fixing it correctly. Alan T. DeKok@2013-03-24T14:54:31Z Files modified: * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/45bd705df5d4d5137e7c… ====== -- This commit summary was generated @2013-03-25T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 24 Mar '13

24 Mar '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== More RDEBUGE Arran Cudbard-Bell@2013-03-24T21:04:58Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/73db0cf6d80cc73033fe… ====== krb5_kt_close doesn't check for NULL pointers, so we have to Arran Cudbard-Bell@2013-03-24T20:54:04Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a37b664ced6ca70de960… ====== The big WARNING: should be enough indentation Arran Cudbard-Bell@2013-03-23T23:34:03Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/09881e6b9734ae2034bf… ====== Rename pairmove2 pairfilter Arran Cudbard-Bell@2013-03-23T23:32:19Z Files modified: * src/include/libradius.h * src/lib/valuepair.c * src/main/process.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5c6191e76871f0450ecc… ====== -- This commit summary was generated @2013-03-25T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 23 Mar '13

23 Mar '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #246 from olivierbeytrison/pairmove2 move vps with pairmove2 in SoH Arran Cudbard-Bell@2013-03-23T23:22:07Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/peap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f6d9689e2d7882b35d43… ====== move vps with pairmove2 in SoH Olivier Beytrison@2013-03-23T23:18:34Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/peap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a71225de9e179f75b893… ====== Logintime no longer removes all reply messages if user is locked out (this was wrong) Logintime no longer sets a reply message, this can be done from unlang, and so this is duplicative functionality Cleanup logintime code Arran Cudbard-Bell@2013-03-23T22:05:38Z Files modified: * src/modules/rlm_logintime/rlm_logintime.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a10989bd5fdfe3abda9f… ====== Call talloc_zero, not talloc in ttls And remove an unused function in EAP-MD5 Alan T. DeKok@2013-03-23T15:04:41Z Files modified: * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3b1f0ab0460a7096143… ====== Use pairmove2() instead of foo->vps = bar->vps;bar->vps = NULL; There are probably other instances of this in the code Alan T. DeKok@2013-03-23T14:59:05Z Files modified: * src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_peap/rlm_eap_peap.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/802c288b69569f109caf… ====== Fix typo Arran Cudbard-Bell@2013-03-23T14:55:31Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/380e510ef3b1b2224d91… ====== Merge pull request #244 from olivierbeytrison/rlm_ldap_fix fix warnings in ldap.c Arran Cudbard-Bell@2013-03-23T13:45:31Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f4fd4f043102c45f35bf… ====== fix warnings in ldap.c Olivier Beytrison@2013-03-23T11:49:08Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e070ebd27a266bf939c1… ====== Doxygen doesn't like it when you document function variables Arran Cudbard-Bell@2013-03-23T05:42:50Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0ba4eb6e2ebe43692858… ====== More cleanups Arran Cudbard-Bell@2013-03-23T05:27:50Z Files modified: * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2595e18c9d4e1148d22f… ====== Fixup doxygen documentation Arran Cudbard-Bell@2013-03-23T04:54:33Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ab314d4e5d505b5db0e9… ====== Phase 0.5 of cacheable group membership Arran Cudbard-Bell@2013-03-23T04:49:53Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f7feb1d95ac95b482a7d… ====== Don't stop processing if we hit a zero length profile Arran Cudbard-Bell@2013-03-23T04:47:39Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd46e0c320860e240288… ====== Need to include base filter when searching for groups Arran Cudbard-Bell@2013-03-23T04:46:46Z Files modified: * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0f20d918b083fea6a08e… ====== Minor formatting fixes Arran Cudbard-Bell@2013-03-23T04:46:08Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/868f1162a973146181bb… ====== Assert if we don't have a valid connection Arran Cudbard-Bell@2013-03-23T04:45:03Z Files modified: * src/modules/rlm_ldap/ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9f4d121ea7cf88a912d5… ====== -- This commit summary was generated @2013-03-24T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 22 Mar '13

22 Mar '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Missed in previous commits Alan T. DeKok@2013-03-22T22:26:58Z Files modified: * src/modules/rlm_eap/types/rlm_eap_leap/configure * src/modules/rlm_eap/types/rlm_eap_leap/configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f2ac54347a9e4182b96b… ====== No reason to use a fixed service name length Arran Cudbard-Bell@2013-03-22T21:46:13Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c80b1f391a2ed250f21a… ====== We don't need Makefile in .gitignore Alan T. DeKok@2013-03-22T21:44:43Z Files modified: * src/modules/rlm_attr_rewrite/.gitignore * src/modules/rlm_checkval/.gitignore * src/modules/rlm_counter/.gitignore * src/modules/rlm_eap/.gitignore * src/modules/rlm_eap/types/rlm_eap_ikev2/.gitignore * src/modules/rlm_eap/types/rlm_eap_pwd/.gitignore * src/modules/rlm_eap/types/rlm_eap_tnc/.gitignore * src/modules/rlm_example/.gitignore * src/modules/rlm_ippool/.gitignore * src/modules/rlm_krb5/.gitignore * src/modules/rlm_ldap/.gitignore * src/modules/rlm_opendirectory/.gitignore * src/modules/rlm_otp/.gitignore * src/modules/rlm_pam/.gitignore * src/modules/rlm_perl/.gitignore * src/modules/rlm_python/.gitignore * src/modules/rlm_radutmp/.gitignore * src/modules/rlm_redis/.gitignore * src/modules/rlm_rediswho/.gitignore * src/modules/rlm_rest/.gitignore * src/modules/rlm_ruby/.gitignore * src/modules/rlm_smsotp/.gitignore * src/modules/rlm_sql/.gitignore * src/modules/rlm_sql/drivers/.gitignore * src/modules/rlm_sql/drivers/rlm_sql_iodbc/.gitignore * src/modules/rlm_sql/drivers/rlm_sql_mysql/.gitignore * src/modules/rlm_sql/drivers/rlm_sql_oracle/.gitignore * src/modules/rlm_sql/drivers/rlm_sql_postgresql/.gitignore * src/modules/rlm_sql/drivers/rlm_sql_unixodbc/.gitignore * src/modules/rlm_sqlcounter/.gitignore * src/modules/rlm_sqlhpwippool/.gitignore * src/modules/rlm_sqlippool/.gitignore * src/modules/rlm_unix/.gitignore * src/modules/rlm_wimax/.gitignore * src/modules/rlm_yubikey/.gitignore Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/466f0dba682119814d26… ====== These modules have no dependencies, and don't need configure If you don't want to build them, edit the all.mk file. If you don't want to install them, 'rm' the files Configure is slow and ugly. Removing it is a Good Thing Alan T. DeKok@2013-03-22T21:44:42Z Files modified: * src/modules/rlm_eap/types/rlm_eap_gtc/.gitignore * src/modules/rlm_eap/types/rlm_eap_gtc/all.mk * src/modules/rlm_eap/types/rlm_eap_gtc/all.mk.in * src/modules/rlm_eap/types/rlm_eap_gtc/configure * src/modules/rlm_eap/types/rlm_eap_gtc/configure.in * src/modules/rlm_eap/types/rlm_eap_leap/.gitignore * src/modules/rlm_eap/types/rlm_eap_leap/all.mk * src/modules/rlm_eap/types/rlm_eap_leap/all.mk.in * src/modules/rlm_eap/types/rlm_eap_md5/.gitignore * src/modules/rlm_eap/types/rlm_eap_md5/all.mk * src/modules/rlm_eap/types/rlm_eap_md5/all.mk.in * src/modules/rlm_eap/types/rlm_eap_md5/configure * src/modules/rlm_eap/types/rlm_eap_md5/configure.in * src/modules/rlm_eap/types/rlm_eap_mschapv2/.gitignore * src/modules/rlm_eap/types/rlm_eap_mschapv2/all.mk * src/modules/rlm_eap/types/rlm_eap_mschapv2/all.mk.in * src/modules/rlm_eap/types/rlm_eap_mschapv2/configure * src/modules/rlm_eap/types/rlm_eap_mschapv2/configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1bd6c9be4f9ddbe84142… ====== We don't need configure checks for tls, peap, or ttls. The top-level "configure" script checks for OpenSSL. These modules have no special requirements for OpenSSL, so there's no need for configure checks (which are slow). They can just inherit the top-level checks, and use GNU Make rules to build (or not) the modules Alan T. DeKok@2013-03-22T21:44:42Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/.gitignore * src/modules/rlm_eap/types/rlm_eap_peap/all.mk * src/modules/rlm_eap/types/rlm_eap_peap/all.mk.in * src/modules/rlm_eap/types/rlm_eap_peap/config.h.in * src/modules/rlm_eap/types/rlm_eap_peap/configure * src/modules/rlm_eap/types/rlm_eap_peap/configure.in * src/modules/rlm_eap/types/rlm_eap_pwd/configure.in * src/modules/rlm_eap/types/rlm_eap_tls/.gitignore * src/modules/rlm_eap/types/rlm_eap_tls/all.mk * src/modules/rlm_eap/types/rlm_eap_tls/config.h.in * src/modules/rlm_eap/types/rlm_eap_tls/configure * src/modules/rlm_eap/types/rlm_eap_tls/configure.in * src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c * src/modules/rlm_eap/types/rlm_eap_ttls/.gitignore * src/modules/rlm_eap/types/rlm_eap_ttls/all.mk * src/modules/rlm_eap/types/rlm_eap_ttls/all.mk.in * src/modules/rlm_eap/types/rlm_eap_ttls/config.h.in * src/modules/rlm_eap/types/rlm_eap_ttls/configure * src/modules/rlm_eap/types/rlm_eap_ttls/configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/76e9e4023e03ad22434b… ====== Finish tallocising rlm_krb5 Arran Cudbard-Bell@2013-03-22T21:42:45Z Files modified: * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/dd6560f362e4178de9ef… ====== Probably better to use krb5_verify_user_opt to detect heimdal Arran Cudbard-Bell@2013-03-22T21:10:45Z Files modified: * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3bfa6ef37505efa9481… ====== Many fixes for rlm_krb5 Arran Cudbard-Bell@2013-03-22T20:31:54Z Files modified: * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.in * src/modules/rlm_krb5/rlm_krb5.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a03a4c82f735e197054f… ====== Cleanup variable names in eap.c Arran Cudbard-Bell@2013-03-22T20:31:43Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7761ed568f0a22c8c7f4… ====== Remove second_file example Arran Cudbard-Bell@2013-03-22T17:55:52Z Files modified: * raddb/mods-available/second_files Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9a0540afbbe8574529aa… ====== Fix krb5 configure script Arran Cudbard-Bell@2013-03-22T17:47:30Z Files modified: * src/modules/rlm_krb5/all.mk.in * src/modules/rlm_krb5/configure * src/modules/rlm_krb5/configure.in Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/415d77515d6712f8f49b… ====== Disable auto reconfig Arran Cudbard-Bell@2013-03-22T16:40:41Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/11e71f8e587eb79700e6… ====== Check for libssl too Arran Cudbard-Bell@2013-03-22T16:21:20Z Files modified: * .travis.yml * src/modules/rlm_eap/rlm_eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/347fa0148580e4e34ce7… ====== Run radiusd -XC from the build directory before running any more detailed tests Alan T. DeKok@2013-03-22T14:17:33Z Files modified: * Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/116bbeb28629067b4675… ====== That's a paddlin. Alan T. DeKok@2013-03-22T14:02:47Z Files modified: * src/lib/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e0fae954d0fc6ed8132a… ====== Wimax isn't always built Alan T. DeKok@2013-03-22T14:02:47Z Files modified: * raddb/all.mk Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c09a09995eb338f632b0… ====== Flakey build mystery solved Arran Cudbard-Bell@2013-03-22T05:54:01Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed626ee9ac099fb1b273… ====== Experimentally make travis build single threaded Arran Cudbard-Bell@2013-03-22T05:18:18Z Files modified: * .travis.yml Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bec7b2eea8d2601beb68… ====== Really quiet Arran Cudbard-Bell@2013-03-22T05:16:48Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/782b2720dfd3436108df… ====== Use higher debugging level for test Arran Cudbard-Bell@2013-03-22T05:15:25Z Files modified: * src/tests/Makefile Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/abff02c762e53b71e709… ====== Check access to libraries (quietly) Arran Cudbard-Bell@2013-03-22T05:15:25Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/87171ab2c9667783ab84… ====== Return ldap_rcode_t from rlm_ldap_bind for consistency Arran Cudbard-Bell@2013-03-22T04:34:50Z Files modified: * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/ldap.h * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a68ebcf1e9856e525734… ====== Various minor fixes in rlm_eap Arran Cudbard-Bell@2013-03-22T00:31:13Z Files modified: * src/modules/rlm_eap/eap.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap/rlm_eap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5684d2f97d524a3d0d56… ====== -- This commit summary was generated @2013-03-23T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0