- Freeradius-Devel - lists.freeradius.org

Commit report for master branch
by announce＠freeradius.org 16 Jan '13

16 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Dynamically resolve dictionary entrys for control attrs Add control:Cache-Merge, when set to no makes the cache 'wo' Arran Cudbard-Bell@2013-01-16T20:44:17Z Files modified: * share/dictionary.freeradius.internal * src/include/radius.h * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/aeffe365c0ea422e1838… ====== Fix minor issues Arran Cudbard-Bell@2013-01-16T18:06:11Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06a4f41d34aecdcc3aad… ====== Update LDAP default config Arran Cudbard-Bell@2013-01-16T18:04:01Z Files modified: * raddb/mods-available/ldap * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/121f5b9706cda2d27275… ====== Switch to using explicit template types Add support for copying lists to rlm_cache Add more sanity checks to rlm_ldap and rlm_cache Reformat more code in rlm_ldap Arran Cudbard-Bell@2013-01-16T15:30:08Z Files modified: * src/include/libradius.h * src/include/radiusd.h * src/lib/valuepair.c * src/main/valuepair.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1dd6e056b0ab6fcdc91e… ====== -- This commit summary was generated @2013-01-17T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 15 Jan '13

15 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Fixup documentation for valuepair.c Arran Cudbard-Bell@2013-01-15T18:58:48Z Files modified: * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0d71a0f831c13af8353c… ====== Update rlm_cache to use the attrmap API Improve rlm_cache debugging Make copying attributes into current requests dependent on whether the src/dst lists are not the same Arran Cudbard-Bell@2013-01-15T18:49:04Z Files modified: * raddb/mods-available/cache * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b0aa0a082fea21d3e17d… ====== Minor formatting Arran Cudbard-Bell@2013-01-15T18:47:33Z Files modified: * src/main/xlat.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/49a0220ae28273d4d85d… ====== Update attrmap functions to be more flexible, and add CS to map function from rlm_ldap Arran Cudbard-Bell@2013-01-15T18:47:10Z Files modified: * src/include/radiusd.h * src/main/valuepair.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d5a7380207d0574a38f5… ====== Fix typo in cache config item name Arran Cudbard-Bell@2013-01-15T18:45:09Z Files modified: * raddb/mods-available/cache * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b5f82aded37329270a62… ====== Add function for printing lists to request debug log Arran Cudbard-Bell@2013-01-15T18:42:57Z Files modified: * src/include/radiusd.h * src/main/valuepair.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/02b727863436f1cad15a… ====== -- This commit summary was generated @2013-01-16T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

[PATCH] $selected was not properly reinitialized in dialup_admin
by Octavio Alvarez 15 Jan '13

15 Jan '13

Hello. I'm sending this patch to fix a small bug in dialup_admin. This was making weird behavior when a user was member of multiple groups. The $selected array should be reinitialized on each iteration of i to avoid more than one "selected" operator in the dropdown. -- Octavio. Twitter: @alvarezp2000 -- Identi.ca: @alvarezp

1 0

Failed to link to module 'rlm_ldap': file not found
by Martin Silvero 15 Jan '13

15 Jan '13

Hi there, Ihace the following problem, and I can´t find the solution. In have redhat6.0, and freeradius.2.1.10-5.el6 Any know the solution? Many thanks! /etc/raddb/modules/ldap[29]: Failed to link to module 'rlm_ldap': file not found /etc/raddb/sites-enabled/default[287]: Failed to load module "ldap". /etc/raddb/sites-enabled/default[287]: Failed to parse "ldap" entry. 2013/1/9 Alan DeKok <aland(a)deployingradius.com> > Arran Cudbard-Bell wrote: > >> Can we at least maintain backwards compatibility for one major version > to read the old filenames? Surely it can't be that hard to have a short > lookup table from the old names? > > > > So then you take over maintence of a v3.x system and all the > configurations are in this weird format and you can't really see how it > works and, and... > > The config system has provisions for backwards compatibility. We can > leverage that, but deprecate the old system. > > That being said, there is config in 3.x that is backwards compatible > with config from 0.x. That's wrong, and will be fixed. > > For other things, like "User-Password", it *causes* problems. People > read decade-old "howto's", and create broken configurations. It's a > good idea to get that fixed. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html > -- -- Silvero Martin

2 2

Commit report for master branch
by announce＠freeradius.org 14 Jan '13

14 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #166 from olivierbeytrison/master rlm_cache : Operator not retrieved in cache_verify Arran Cudbard-Bell@2013-01-14T11:51:47Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b978659ab949ae89da9… ====== Add missing cf_pair_operator to cache_verify Olivier Beytrison@2013-01-14T11:48:31Z Files modified: * src/modules/rlm_cache/rlm_cache.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/64deffd649c095e1acaa… ====== -- This commit summary was generated @2013-01-15T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 12 Jan '13

12 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add index files for module and client Arran Cudbard-Bell@2013-01-12T00:24:48Z Files modified: * doc/source/extra/client.c * doc/source/extra/module.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5afe006e4869326062c3… ====== Move license declarations outside of file descriptions Arran Cudbard-Bell@2013-01-12T00:17:53Z Files modified: * src/include/connection.h * src/include/libradius.h * src/include/md5.h * src/include/modules.h * src/include/radiusd.h * src/include/soh.h * src/include/tcp.h * src/include/tls-h * src/include/token.h * src/include/udpfromto.h * src/include/vmps.h * src/include/vqp.h * src/lib/radius.c * src/main/connection.c * src/main/exec.c * src/main/process.c * src/main/soh.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_rest/rest.c * src/modules/rlm_rest/rest.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6474a01c17bd3fece412… ====== -- This commit summary was generated @2013-01-13T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 11 Jan '13

11 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Define HAVE_JSON when generating docs Arran Cudbard-Bell@2013-01-11T21:16:16Z Files modified: * doc/source/Doxyfile * src/modules/rlm_rest/rest.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bfa42f2bb2a6bc6d943e… ====== Fix minor formatting issue Arran Cudbard-Bell@2013-01-11T21:01:00Z Files modified: * src/include/modules.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ee6dfe4f993c23b71cd1… ====== More doxygen tweaking Arran Cudbard-Bell@2013-01-11T20:10:58Z Files modified: * doc/source/Doxyfile * doc/source/extra/freeradius.png Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b2decec8bf882b78d17d… ====== Add documentation to modules.h Add proper return code type rlm_rcode_t, and update signatures of all module functions that return rcodes Arran Cudbard-Bell@2013-01-11T16:28:59Z Files modified: * src/include/modules.h * src/main/modules.c * src/modules/rlm_acctlog/rlm_acctlog.c * src/modules/rlm_always/rlm_always.c * src/modules/rlm_attr_filter/rlm_attr_filter.c * src/modules/rlm_attr_rewrite/rlm_attr_rewrite.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_chap/rlm_chap.c * src/modules/rlm_checkval/rlm_checkval.c * src/modules/rlm_counter/rlm_counter.c * src/modules/rlm_cram/rlm_cram.c * src/modules/rlm_dbm/rlm_dbm.c * src/modules/rlm_detail/rlm_detail.c * src/modules/rlm_digest/rlm_digest.c * src/modules/rlm_dynamic_clients/rlm_dynamic_clients.c * src/modules/rlm_eap/rlm_eap.c * src/modules/rlm_eap2/rlm_eap2.c * src/modules/rlm_example/rlm_example.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expiration/rlm_expiration.c * src/modules/rlm_fastusers/rlm_fastusers.c * src/modules/rlm_files/rlm_files.c * src/modules/rlm_ippool/rlm_ippool.c * src/modules/rlm_jradius/rlm_jradius.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_linelog/rlm_linelog.c * src/modules/rlm_logintime/rlm_logintime.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c * src/modules/rlm_otp/rlm_otp.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_pap/rlm_pap.c * src/modules/rlm_passwd/rlm_passwd.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_policy/rlm_policy.c * src/modules/rlm_preprocess/rlm_preprocess.c * src/modules/rlm_python/rlm_python.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_radutmp/rlm_radutmp2.c * src/modules/rlm_realm/rlm_realm.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_replicate/rlm_replicate.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_ruby/rlm_ruby.c * src/modules/rlm_securid/rlm_securid.c * src/modules/rlm_sim_files/rlm_sim_files.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sometimes/rlm_sometimes.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlcounter/rlm_sqlcounter.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c * src/modules/rlm_unix/rlm_unix.c * src/modules/rlm_utf8/rlm_utf8.c * src/modules/rlm_wimax/rlm_wimax.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5cea788fd3972a584952… ====== -- This commit summary was generated @2013-01-12T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Multithreaded krb5
by Arran Cudbard-Bell 11 Jan '13

11 Jan '13

A while back there was some discussion about the current krb5 module in FreeRADIUS being single threaded, and that it may no longer be necessary for it to be single threaded. It transpires that both MIT and Heimdal libraries are now thread safe, MIT since either 1.4.x or 1.4.4 (unsure) and Heimdal since around 0.7 (documentation is fuzzy). I can't test beyond compiling the code against the kerberos library, and maybe setting up a test KDC/TGS. But for this to be put into the stable branch it really needs to be tested under load, against a range of keberos implementations. Were looking for volunteers, preferably a mix of deployments using either MIT or Heimdal. The new module should just drop in for any v2.1.x deployment once compiled, as it doesn't use any new core API functions. Change list: * Both - Check that krb5 library was compiled with threading support on startup. * Both - Clone context on each request to ensure thread safety. * Both - Move service principal parsing so it's done at intialisation only (instead of on every request). * Both - Improved return codes, will now reflect revoked access/password expiry (USERLOCK), Uknown client principal (NOTFOUND), as well as bad password (REJECT), and other errors (FAIL). Before the module returned REJECT for almost everything. * Both - Mark module as thread safe, config check safe (will be validated on -C), and hup safe (config will be reloaded on SIGHUP) * Both - Switch more messages to use RDEBUG so they'll be printed in conditional debug (useful for production servers with radmin enabled). * MIT - Move service principal string to service principal conversion so that it's done at initialisation only (instead of on every request). * MIT - Move options configuration so they're done at initialisation only (instead of on every request). * MIT - Switch to using krb5_get_init_creds_password and krb5_verify_init_creds to validate TGT instead of old twisty logic. * MIT - Cache option removed as krb5_verify_init_creds disables the replay cache on its own. For those wanting to test: git clone git@github.com:arr2036/freeradius-server.git cd freeradius-server git checkout threaded_krb5 Report issues on: http://bugs.freeradius.org, and send feedback to either the list or me directly. -Arran

1 0

Commit report for master branch
by announce＠freeradius.org 10 Jan '13

10 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Merge pull request #163 from alanbuxey/master CUI MD5 shouldnt change if User plays with format of their identity , new F5 dictionary entry Arran Cudbard-Bell@2013-01-10T00:25:17Z Files modified: * raddb/policy.d/cui * share/dictionary.f5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a1222a570d73f784bfbe… ====== added new dictionary entry as per http://support.f5.com/kb/en-us/solutions/public/11000/400/sol11431.html Alan Buxey@2013-01-10T00:19:50Z Files modified: * share/dictionary.f5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fc62f61bc121af7d3290… ====== make CUI MD5 not reliant on case of User-Name MD5 for CUI would change if User put their name in different case Alan Buxey@2013-01-10T00:19:35Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a2aeaf5c0e81355d09c5… ====== -- This commit summary was generated @2013-01-11T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for master branch
by announce＠freeradius.org 08 Jan '13

08 Jan '13

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== Add stats on last packet sent / recv for home server Alan T. DeKok@2013-01-08T19:14:49Z Files modified: * share/dictionary.freeradius * src/main/stats.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9aabc03ae49c5633e9c8… ====== Updates for new changes Alan T. DeKok@2013-01-08T00:44:52Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f87ee5c96cb2f4ed102c… ====== Be more graceful about reporting home server state Alan T. DeKok@2013-01-08T00:44:52Z Files modified: * src/main/command.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d29207bd76805fe7eea1… ====== Add "unknown" for home server state Alan T. DeKok@2013-01-08T00:44:52Z Files modified: * share/dictionary.freeradius Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e61e676948803dda7cfb… ====== -- This commit summary was generated @2013-01-09T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0