- Freeradius-Devel - lists.freeradius.org

rlm_perl compile error with cvs snapshot
by Bernell Williams 07 Dec '05

07 Dec '05

Making all in rlm_perl... gmake[6]: Entering directory `/home/bernell/rpm/CVS/radiusd.build/src/modules/rlm_perl' /home/bernell/rpm/CVS/radiusd.build/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/home/bernell/rpm/CVS/radiusd.build/src `perl -MExtUtils::Embed -e ccopts` -c rlm_perl.c mkdir .libs gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/home/bernell/rpm/CVS/radiusd.build/src -DPERL_DISABLE_PMC -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -I/usr/lib/perl5/5.8.6/i386-linux/CORE -c rlm_perl.c -fPIC -DPIC -o .libs/rlm_perl.o In file included from rlm_perl.c:43: /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:750: warning: redundant redeclaration of 'sockatmark' /usr/include/sys/socket.h:223: warning: previous declaration of 'sockatmark' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:819: warning: redundant redeclaration of 'strerror' /usr/include/string.h:256: warning: previous declaration of 'strerror' was here In file included from rlm_perl.c:43: /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2522: warning: redundant redeclaration of 'getuid' /usr/include/unistd.h:618: warning: previous declaration of 'getuid' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2523: warning: redundant redeclaration of 'geteuid' /usr/include/unistd.h:621: warning: previous declaration of 'geteuid' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2524: warning: redundant redeclaration of 'getgid' /usr/include/unistd.h:624: warning: previous declaration of 'getgid' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2525: warning: redundant redeclaration of 'getegid' /usr/include/unistd.h:627: warning: previous declaration of 'getegid' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2817: warning: redundant redeclaration of 'mktemp' /usr/include/stdlib.h:691: warning: previous declaration of 'mktemp' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2819: warning: redundant redeclaration of 'atof' /usr/include/stdlib.h:393: warning: previous definition of 'atof' was here In file included from rlm_perl.c:43: /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2910: warning: redundant redeclaration of 'crypt' /usr/include/unistd.h:1020: warning: previous declaration of 'crypt' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2916: warning: redundant redeclaration of 'getenv' /usr/include/stdlib.h:654: warning: previous declaration of 'getenv' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2927: warning: redundant redeclaration of 'getlogin' /usr/include/unistd.h:761: warning: previous declaration of 'getlogin' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2940: warning: redundant redeclaration of 'setresuid' /usr/include/unistd.h:684: warning: previous declaration of 'setresuid' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:2944: warning: redundant redeclaration of 'setresgid' /usr/include/unistd.h:688: warning: previous declaration of 'setresgid' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:3032: warning: redundant redeclaration of 'environ' /usr/include/unistd.h:474: warning: previous declaration of 'environ' was here In file included from rlm_perl.c:43: /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:3421: warning: declaration of 'exp' shadows a global declaration /usr/include/bits/mathcalls.h:101: warning: shadowed declaration is here In file included from /usr/lib/perl5/5.8.6/i386-linux/CORE/perl.h:3557, from rlm_perl.c:43: /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:84: warning: declaration of 'floor' shadows a global declaration /usr/include/bits/mathinline.h:530: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:366: warning: declaration of 'send' shadows a global declaration /usr/include/sys/socket.h:136: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:480: warning: declaration of 'floor' shadows a global declaration /usr/include/bits/mathinline.h:530: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:484: warning: declaration of 'floor' shadows a global declaration /usr/include/bits/mathinline.h:530: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:495: warning: declaration of 'floor' shadows a global declaration /usr/include/bits/mathinline.h:530: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:597: warning: declaration of 'exp' shadows a global declaration /usr/include/bits/mathcalls.h:101: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:794: warning: declaration of 'floor' shadows a global declaration /usr/include/bits/mathinline.h:530: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:794: warning: declaration of 'version' shadows a global declaration /home/bernell/rpm/CVS/radiusd.build/src/freeradius-devel/radiusd.h:385: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:806: warning: redundant redeclaration of 'Perl_utf8n_to_uvuni' /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:805: warning: previous declaration of 'Perl_utf8n_to_uvuni' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:808: warning: redundant redeclaration of 'Perl_uvuni_to_utf8' /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:807: warning: previous declaration of 'Perl_uvuni_to_utf8' was here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:903: warning: declaration of 'floor' shadows a global declaration /usr/include/bits/mathinline.h:530: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:904: warning: declaration of 'floor' shadows a global declaration /usr/include/bits/mathinline.h:530: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:905: warning: declaration of 'floor' shadows a global declaration /usr/include/bits/mathinline.h:530: warning: shadowed declaration is here /usr/lib/perl5/5.8.6/i386-linux/CORE/proto.h:1328: warning: declaration of 'clone' shadows a global declaration /usr/include/bits/sched.h:72: warning: shadowed declaration is here rlm_perl.c: In function 'xs_init': rlm_perl.c:597: warning: initialization discards qualifiers from pointer target type rlm_perl.c:600: warning: passing argument 1 of 'Perl_newXS' discards qualifiers from pointer target type rlm_perl.c: In function 'XS_radiusd_radlog': rlm_perl.c:610: warning: unused parameter 'cv' rlm_perl.c: In function 'perl_instantiate': rlm_perl.c:759: warning: assignment discards qualifiers from pointer target type rlm_perl.c:763: warning: assignment discards qualifiers from pointer target type rlm_perl.c:767: error: 'interp' undeclared (first use in this function) rlm_perl.c:767: error: (Each undeclared identifier is reported only once rlm_perl.c:767: error: for each function it appears in.) rlm_perl.c:812: warning: passing argument 1 of 'Perl_newXS' discards qualifiers from pointer target type rlm_perl.c:812: warning: passing argument 3 of 'Perl_newXS' discards qualifiers from pointer target type rlm_perl.c:826: warning: assignment discards qualifiers from pointer target type rlm_perl.c:828: warning: assignment discards qualifiers from pointer target type rlm_perl.c:831: warning: passing argument 2 of 'xlat_register' from incompatible pointer type rlm_perl.c: In function 'perl_detach': rlm_perl.c:1268: warning: passing argument 2 of 'xlat_unregister' from incompatible pointer type gmake[6]: *** [rlm_perl.lo] Error 1 gmake[6]: Leaving directory `/home/bernell/rpm/CVS/radiusd.build/src/modules/rlm_perl' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/home/bernell/rpm/CVS/radiusd.build/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/home/bernell/rpm/CVS/radiusd.build/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/home/bernell/rpm/CVS/radiusd.build/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/home/bernell/rpm/CVS/radiusd.build/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/home/bernell/rpm/CVS/radiusd.build' make: *** [all] Error 2

2 1

rlm_krb5 hardware preauth
by Benjamin Bennett 06 Dec '05

06 Dec '05

Hi, I posted a patch to bugzilla (http://bugs.freeradius.org/show_bug.cgi?id=296) which adds kerberos hardware preauthentication support to rlm_krb5 when using MIT krb5 libs. Also pasted below. Any feedback from people involved with rlm_krb5 or other modules which use challenge-response would be appreciated. This patch takes advantage of the krb5 libs (and hence rlm_krb5) being thread-unsafe already, but could be changed if that bothers people. --ben --- src/modules/rlm_krb5/rlm_krb5.c.dist 2005-11-18 18:06:03.000000000 -0500 +++ src/modules/rlm_krb5/rlm_krb5.c 2005-11-18 21:44:49.000000000 -0500 @@ -20,6 +20,7 @@ * Copyright 2000 The FreeRADIUS server project * Copyright 2000 Nathan Neulinger <nneul(a)umr.edu> * Copyright 2000 Alan DeKok <aland(a)ox.org> + * Copyright 2005 Benjamin Bennett <ben(a)psc.edu> */ @@ -39,6 +40,8 @@ #include <krb5.h> #include <com_err.h> +REQUEST *global_request; + typedef struct rlm_krb5_t { const char *keytab; const char *service_princ; @@ -205,12 +208,83 @@ return 0; } +#ifndef HEIMDAL_KRB5 +static krb5_error_code KRB5_CALLCONV +krb5_radius_prompter(krb5_context context, void *data, const char *name, + const char *banner, int num_prompts, + krb5_prompt prompts[]) +{ + VALUE_PAIR *state; + VALUE_PAIR *reply; + char *challenge; + char *newstate; + int clen; + int r; + + /* Squelch unused param warnings */ + context = context; + data = data; + + if(num_prompts != 1) { + radlog(L_DBG, "rlm_krb5: [%s] krb5_radius_prompter failed: num_prompts (%d) != 1", global_request->username->strvalue, num_prompts); + global_request->reply->code = PW_AUTHENTICATION_REJECT; + return KRB5_LIBOS_CANTREADPWD; + } + + state = pairfind(global_request->packet->vps, PW_STATE); + + if(!state) { /* NEW Request */ + radlog(L_DBG, "rlm_krb5: [%s] krb5_radius_prompter: additional token required", global_request->username->strvalue); + + /* Setup challenge prompt */ + clen = strlen(name)+strlen(banner)+strlen(prompts[0].prompt)+5; + challenge = rad_malloc(clen); + snprintf(challenge, clen, "%s\n%s\n%s: ", name, banner, + prompts[0].prompt); + + /* Re-encode User-Password to send back */ + rad_pwencode((char *)global_request->password->strvalue, + &global_request->password->length, + global_request->secret, + (char *)global_request->packet->vector); + + /* Setup State with current Authenticator and User-Password */ + newstate = rad_malloc(AUTH_VECTOR_LEN+ + global_request->password->length+1); + memcpy(newstate, global_request->packet->vector, AUTH_VECTOR_LEN); + memcpy(newstate+AUTH_VECTOR_LEN, global_request->password->strvalue, + global_request->password->length+1); + + /* Put State into a challenge reply */ + reply = pairmake("Reply-Message", challenge, T_OP_EQ); + pairadd(&global_request->reply->vps, reply); + state = pairmake("State", newstate, T_OP_EQ); + pairadd(&global_request->reply->vps, state); + global_request->reply->code = PW_ACCESS_CHALLENGE; + free(challenge); + free(newstate); + r = KRB5_LIBOS_CANTREADPWD; + } else { /* Challenge Response */ + radlog(L_DBG, "rlm_krb5: [%s] krb5_radius_prompter: using additional token", global_request->username->strvalue); + + strncpy(prompts[0].reply->data, + (char *)global_request->password->strvalue, + prompts[0].reply->length); + prompts[0].reply->data[(prompts[0].reply->length)-1] = '\0'; + prompts[0].reply->length = strlen(prompts[0].reply->data); + r = 0; + } + return r; +} +#endif + /* validate userid/passwd */ /* MIT case */ #ifndef HEIMDAL_KRB5 static int krb5_auth(void *instance, REQUEST *request) { int r; + VALUE_PAIR *state; krb5_data tgtname = { 0, @@ -218,11 +292,13 @@ KRB5_TGS_NAME }; krb5_creds kcreds; + krb5_get_init_creds_opt opts; krb5_ccache ccache; char cache_name[L_tmpnam + 8]; krb5_context context = *((rlm_krb5_t *)instance)->context; /* copy data */ - const char *user, *pass; + const char *user; + char *pass; /* * We can only authenticate user requests which HAVE @@ -271,6 +347,8 @@ /* * Actually perform the authentication */ + krb5_get_init_creds_opt_init(&opts); + memset((char *)&kcreds, 0, sizeof(kcreds)); if ( (r = krb5_parse_name(context, user, &kcreds.client)) ) { @@ -302,22 +380,40 @@ return RLM_MODULE_REJECT; } - if ( (r = krb5_get_in_tkt_with_password(context, - 0, NULL, NULL, NULL, pass, ccache, &kcreds, 0)) ) { - radlog(L_AUTH, "rlm_krb5: [%s] krb5_g_i_t_w_p failed: %s", - user, error_message(r)); - krb5_free_cred_contents(context, &kcreds); - krb5_cc_destroy(context, ccache); - return RLM_MODULE_REJECT; - } else { + global_request = request; + state = pairfind(request->packet->vps, PW_STATE); + if(state) { + radlog(L_DBG, "rlm_krb5: [%s] challenge response", user); + if(state->length <= AUTH_VECTOR_LEN) { + radlog(L_AUTH, "rlm_krb5: [%s] BAD State data", user); + return RLM_MODULE_REJECT; + } + pass = (char *)state->strvalue+AUTH_VECTOR_LEN; + rad_pwdecode(pass, state->length-AUTH_VECTOR_LEN, + request->secret, (char *)state->strvalue); + } + + if(!(r = krb5_get_init_creds_password(context, &kcreds, + kcreds.client, pass, krb5_radius_prompter, NULL, + (krb5_deltat)0, NULL, &opts))) { + if( (r = krb5_cc_store_cred(context, ccache, &kcreds)) ) { + radlog(L_AUTH, "rlm_krb5: [%s] krb5_cc_store_cred failed: %s", + user, error_message(r)); + return RLM_MODULE_REJECT; + } /* Now verify the KDC's identity. */ r = verify_krb5_tgt(context, (rlm_krb5_t *)instance, user, ccache); - krb5_free_cred_contents(context, &kcreds); - krb5_cc_destroy(context, ccache); - return r; + } else if(r == KRB5_LIBOS_CANTREADPWD) { + r = RLM_MODULE_HANDLED; + } else { + radlog(L_AUTH, "rlm_krb5: [%s] krb5_g_i_c_p failed: %s", user, + error_message(r)); + r = RLM_MODULE_REJECT; } - return RLM_MODULE_REJECT; + krb5_free_cred_contents(context, &kcreds); + krb5_cc_destroy(context, ccache); + return r; } #else /* HEIMDAL_KRB5 */

4 6

Maybe a 1.1.0?
by Alan DeKok 02 Dec '05

02 Dec '05

I've taken a quick look at porting a few features from the CVS head to 1.0.x. Specifically, the new dictionaries, dictionary parser, and the weird VSA handling. So far, it looks like it works. Should I commit it to 1.0.x, for maybe 1.0.6? Or make a 1.1.x branch off of 1.0.x, and call the new code 1.1.0? It's been over a year since 1.0 was released, and having a 1.1.0 with a few new features would be cool. We could also back-port a few other things, like some of the module cleanups. These should be relatively easy to back-port, and can have significant useful impact for people running the server. In the mean time, the CVS head can continue with it's re-writes, and IPv6 work. Also, having a 1.1.0 with a few minor changes means that the step to 2.x is less problematic. Thoughts? Opinions? Rocks & bricks? Alan DeKok.

7 16

EAP-AKA
by kalyani gopalabhatla 01 Dec '05

01 Dec '05

Hi, Thanks a lot Alan for your reply. We have got a few questions 1. Is hostapd server used for Windows or for Linux? 2. Is hostapd used in the place of free RADIUS in windows? 3. Writing code for AKA is difficult on Linux or Windows? 4. Do we need to use Cisco Aironet 340 series accesspoint or is there any other accesspoint that supports for AKA 5.To write code for AKA, do we need to understand the all the SIM files. We are finding it difficult to understand the code. What files are mostly common for EAP-SIM and EAP-AKA. Thanks kal Raji --------------------------------- Yahoo! DSL Something to write home about. Just $16.99/mo. or less

2 1

Automatic report from sources (radiusd) between 30.11.2005 - 01.12.2005 GMT
by Automatic cvs log generator 01 Dec '05

01 Dec '05

CVS log entries from 30.11.2005 (Wed) 09:00:00 - 01.12.2005 (Thu) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/share/dictionary.starent; Revisions: 1.3.2.1 File: radiusd/share/dictionary.aptis; Revisions: 1.2.6.1 File: radiusd/share/dictionary.cisco.bbsm; Revisions: 1.1.8.1 File: radiusd/share/dictionary.redcreek; Revisions: 1.1.6.1 File: radiusd/share/dictionary.itk; Revisions: 1.1.6.1 File: radiusd/share/dictionary.waverider; Revisions: 1.4.2.1 File: radiusd/share/dictionary.telebit; Revisions: 1.1.6.1 File: radiusd/share/dictionary.freeradius; Revisions: 1.3.4.1 File: radiusd/share/dictionary.lucent; Revisions: 1.3.2.1 File: radiusd/share/dictionary.aruba; Revisions: 1.2.2.1 File: radiusd/src/main/radclient.c; Revisions: 1.72.2.1.2.1 File: radiusd/share/dictionary.3gpp2; Revisions: 1.2.4.1 File: radiusd/share/dictionary.airespace; Revisions: 1.3.2.1 File: radiusd/share/dictionary.ascend; Revisions: 1.11.2.1.2.1 File: radiusd/share/format.pl; Revisions: 1.3.2.1 File: radiusd/src/lib/radius.c; Revisions: 1.125.2.5.2.1 File: radiusd/share/dictionary.rfc3576; Revisions: 1.2.2.1 File: radiusd/share/dictionary; Revisions: 1.93.2.5.2.1 File: radiusd/share/dictionary.altiga; Revisions: 1.2.8.1 File: radiusd/share/dictionary.wispr; Revisions: 1.1.6.1 File: radiusd/share/dictionary.microsoft; Revisions: 1.6.8.1 File: radiusd/share/dictionary.alcatel; Revisions: 1.3.4.1 File: radiusd/share/dictionary.juniper; Revisions: 1.2.6.1 File: radiusd/share/dictionary.digest; Revisions: 1.1, 1.1.2.1 File: radiusd/share/dictionary.alteon; Revisions: 1.1.8.1 File: radiusd/share/dictionary.ipunplugged; Revisions: 1.2.2.1 File: radiusd/share/attrsort.pl; Revisions: 1.1.2.1 File: radiusd/share/dictionary.rfc3580; Revisions: 1.2.2.1 File: radiusd/src/lib/dict.c; Revisions: 1.50.2.4.2.1 File: radiusd/share/dictionary.sonicwall; Revisions: 1.2.4.1 File: radiusd/share/dictionary.motorola; Revisions: 1.1.2.1 File: radiusd/share/dictionary.columbia_university; Revisions: 1.1.10.1 File: radiusd/INSTALL; Revisions: 1.6.4.1.2.1 File: radiusd/share/dictionary.propel; Revisions: 1.1.4.1 File: radiusd/COPYRIGHT; Revisions: 1.3.8.1 File: radiusd/src/lib/Makefile; Revisions: 1.20.4.1 File: radiusd/share/dictionary.issanni; Revisions: 1.2.2.1 File: radiusd/share/dictionary.freeradius.internal; Revisions: 1.6.2.1 File: radiusd/share/dictionary.ntua; Revisions: 1.3.2.1 File: radiusd/share/dictionary.cisco.vpn5000; Revisions: 1.1.8.1 File: radiusd/src/include/libradius.h; Revisions: 1.76.2.2.2.2, 1.76.2.2.2.1 File: radiusd/share/dictionary.cablelabs; Revisions: 1.2.2.1 File: radiusd/share/dictionary.cabletron; Revisions: 1.1.6.1 File: radiusd/share/dictionary.valemount; Revisions: 1.1.2.1.2.1 File: radiusd/share/dictionary.trapeze; Revisions: 1.3.2.2.2.1 File: radiusd/share/dictionary.gemtek; Revisions: 1.1.2.2.2.1 File: radiusd/man/man5/dictionary.5; Revisions: 1.5.4.1 File: radiusd/share/dictionary.bristol; Revisions: 1.2.4.1 File: radiusd/share/dictionary.colubris; Revisions: 1.1.8.1 File: radiusd/share/dictionary.compat; Revisions: 1.5.4.1 File: radiusd/share/dictionary.ericsson; Revisions: 1.1.2.1 File: radiusd/share/dictionary.acc; Revisions: 1.2.4.1.2.1 File: radiusd/share/dictionary.versanet; Revisions: 1.1.1.1.10.1 File: radiusd/share/dictionary.roaringpenguin; Revisions: 1.2.2.1 File: radiusd/share/dictionary.mikrotik; Revisions: 1.1.4.1 File: radiusd/share/dictionary.xedia; Revisions: 1.1.6.1 File: radiusd/share/dictionary.fortinet; Revisions: 1.1.2.1 File: radiusd/src/lib/rbtree.c; Revisions: 1.10.4.1 File: radiusd/share/dictionary.redback; Revisions: 1.7.2.1.2.1 File: radiusd/share/dictionary.erx; Revisions: 1.9.4.1 File: radiusd/share/dictionary.rfc2865; Revisions: 1.3.2.1 File: radiusd/share/dictionary.nomadix; Revisions: 1.4.2.1.2.1 File: radiusd/share/dictionary.rfc2866; Revisions: 1.2.2.1 File: radiusd/share/dictionary.cisco; Revisions: 1.12.4.1 File: radiusd/share/dictionary.rfc2867; Revisions: 1.2.2.1 File: radiusd/share/dictionary.3com; Revisions: 1.3.2.1.2.1 File: radiusd/share/dictionary.nokia; Revisions: 1.1.6.1 File: radiusd/share/dictionary.rfc2868; Revisions: 1.3.2.1 File: radiusd/share/dictionary.quintum; Revisions: 1.2.10.1 File: radiusd/share/dictionary.rfc2869; Revisions: 1.2.2.1 File: radiusd/share/dictionary.packeteer; Revisions: 1.2.2.1 File: radiusd/share/dictionary.tunnel; Revisions: 1.8.4.1 File: radiusd/share/dictionary.garderos; Revisions: 1.2.2.1.2.1 File: radiusd/share/dictionary.extreme; Revisions: 1.2.4.1 File: radiusd/share/dictionary.shiva; Revisions: 1.2.10.1 File: radiusd/share/dictionary.bay; Revisions: 1.4.10.1 File: radiusd/share/dictionary.t_systems_nova; Revisions: 1.2.2.1 File: radiusd/configure.in; Revisions: 1.198.2.15.2.1 File: radiusd/share/dictionary.cosine; Revisions: 1.2.2.1 File: radiusd/share/dictionary.merit; Revisions: 1.1.4.1 File: radiusd/share/dictionary.unix; Revisions: 1.1.4.1 File: radiusd/share/dictionary.shasta; Revisions: 1.1.10.1 File: radiusd/share/dictionary.navini; Revisions: 1.1.4.1 File: radiusd/share/dictionary.rfc3162; Revisions: 1.2.2.1 File: radiusd/doc/ChangeLog; Revisions: 1.72, 1.57.2.31.2.2, 1.57.2.31.2.1 File: radiusd/share/dictionary.foundry; Revisions: 1.2.4.1 File: radiusd/share/dictionary.netscreen; Revisions: 1.1.6.1 File: radiusd/README; Revisions: 1.7.6.1 File: radiusd/share/dictionary.localweb; Revisions: 1.1.2.1.2.1 File: radiusd/share/attrnew.pl; Revisions: 1.1.2.1 File: radiusd/share/dictionary.xylan; Revisions: 1.2.2.1 File: radiusd/share/dictionary.gandalf; Revisions: 1.1.4.1 File: radiusd/share/dictionary.livingston; Revisions: 1.2.10.1 File: radiusd/share/dictionary.karlnet; Revisions: 1.1.4.1 File: radiusd/share/dictionary.avaya; Revisions: 1.3.2.1 File: radiusd/share/dictionary.bintec; Revisions: 1.1.6.1 File: radiusd/share/dictionary.cisco.vpn3000; Revisions: 1.7.4.1 File: radiusd/share/dictionary.springtide; Revisions: 1.1.6.1 File: radiusd/src/main/request_list.c; Revisions: 1.40.2.2.2.1 File: radiusd/share/dictionary.usr; Revisions: 1.9.2.1.2.1 File: radiusd/share/dictionary.3gpp; Revisions: 1.1.4.1 File: radiusd/share/dictionary.zyxel; Revisions: 1.1.2.1 File: radiusd/share/dictionary.epygi; Revisions: 1.4.2.1 ===================================================== Combined list of identical log entries ===================================================== Description: Pull rbtree.c from the CVS head, to get fixes for writing to "static" memory locations that should really be "const". Modified files: File: radiusd/src/include/libradius.h; Revision: 1.76.2.2.2.2; Date: 2005/11/30 22:40:18; Author: aland; Lines: (+4 -3) File: radiusd/src/lib/rbtree.c; Revision: 1.10.4.1; Date: 2005/11/30 22:40:19; Author: aland; Lines: (+86 -56) File: radiusd/src/main/radclient.c; Revision: 1.72.2.1.2.1; Date: 2005/11/30 22:40:18; Author: aland; Lines: (+7 -5) ------------------------------- Description: Updated for 1.1.x Modified files: File: radiusd/COPYRIGHT; Revision: 1.3.8.1; Date: 2005/12/01 00:01:12; Author: aland; Lines: (+99 -21) File: radiusd/README; Revision: 1.7.6.1; Date: 2005/12/01 00:01:12; Author: aland; Lines: (+5 -15) ------------------------------- Description: First pass at adding work on the 1.1.x branch. Copied share/* from the CVS head to this branch. Updated src/lib/dict.c && src/lib/radius.c to handle (encode and decode) VSA's with weird formats, with code copied from the CVS head. Updated "configure.in" to look for sys/stat.h, which is now needed by src/lib/dict.c. Updated "configure.in" with the new version number (1.1.0-pre0), but did NOT re-run "configure" Modified files: File: radiusd/configure.in; Revision: 1.198.2.15.2.1; Date: 2005/11/30 22:17:17; Author: aland; Lines: (+3 -2) File: radiusd/share/attrnew.pl; Revision: 1.1.2.1; Date: 2005/11/30 22:17:18; Author: aland; Lines: (+1 -1) File: radiusd/share/attrsort.pl; Revision: 1.1.2.1; Date: 2005/11/30 22:17:18; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary; Revision: 1.93.2.5.2.1; Date: 2005/11/30 22:17:18; Author: aland; Lines: (+75 -685) File: radiusd/share/dictionary.3com; Revision: 1.3.2.1.2.1; Date: 2005/11/30 22:17:18; Author: aland; Lines: (+11 -6) File: radiusd/share/dictionary.3gpp; Revision: 1.1.4.1; Date: 2005/11/30 22:17:18; Author: aland; Lines: (+23 -19) File: radiusd/share/dictionary.3gpp2; Revision: 1.2.4.1; Date: 2005/11/30 22:17:18; Author: aland; Lines: (+79 -77) File: radiusd/share/dictionary.acc; Revision: 1.2.4.1.2.1; Date: 2005/11/30 22:17:19; Author: aland; Lines: (+246 -239) File: radiusd/share/dictionary.airespace; Revision: 1.3.2.1; Date: 2005/11/30 22:17:19; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.alcatel; Revision: 1.3.4.1; Date: 2005/11/30 22:17:19; Author: aland; Lines: (+93 -59) File: radiusd/share/dictionary.alteon; Revision: 1.1.8.1; Date: 2005/11/30 22:17:19; Author: aland; Lines: (+14 -9) File: radiusd/share/dictionary.altiga; Revision: 1.2.8.1; Date: 2005/11/30 22:17:19; Author: aland; Lines: (+78 -77) File: radiusd/share/dictionary.aptis; Revision: 1.2.6.1; Date: 2005/11/30 22:17:20; Author: aland; Lines: (+176 -41) File: radiusd/share/dictionary.aruba; Revision: 1.2.2.1; Date: 2005/11/30 22:17:20; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.ascend; Revision: 1.11.2.1.2.1; Date: 2005/11/30 22:17:20; Author: aland; Lines: (+1070 -816) File: radiusd/share/dictionary.avaya; Revision: 1.3.2.1; Date: 2005/11/30 22:17:20; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.bay; Revision: 1.4.10.1; Date: 2005/11/30 22:17:21; Author: aland; Lines: (+170 -165) File: radiusd/share/dictionary.bintec; Revision: 1.1.6.1; Date: 2005/11/30 22:17:21; Author: aland; Lines: (+36 -31) File: radiusd/share/dictionary.bristol; Revision: 1.2.4.1; Date: 2005/11/30 22:17:21; Author: aland; Lines: (+12 -7) File: radiusd/share/dictionary.cablelabs; Revision: 1.2.2.1; Date: 2005/11/30 22:17:21; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.cabletron; Revision: 1.1.6.1; Date: 2005/11/30 22:17:21; Author: aland; Lines: (+20 -15) File: radiusd/share/dictionary.cisco; Revision: 1.12.4.1; Date: 2005/11/30 22:17:21; Author: aland; Lines: (+122 -114) File: radiusd/share/dictionary.cisco.bbsm; Revision: 1.1.8.1; Date: 2005/11/30 22:17:22; Author: aland; Lines: (+6 -5) File: radiusd/share/dictionary.cisco.vpn3000; Revision: 1.7.4.1; Date: 2005/11/30 22:17:22; Author: aland; Lines: (+112 -4) File: radiusd/share/dictionary.cisco.vpn5000; Revision: 1.1.8.1; Date: 2005/11/30 22:17:22; Author: aland; Lines: (+4 -3) File: radiusd/share/dictionary.colubris; Revision: 1.1.8.1; Date: 2005/11/30 22:17:22; Author: aland; Lines: (+8 -6) File: radiusd/share/dictionary.columbia_university; Revision: 1.1.10.1; Date: 2005/11/30 22:17:22; Author: aland; Lines: (+16 -11) File: radiusd/share/dictionary.compat; Revision: 1.5.4.1; Date: 2005/11/30 22:17:22; Author: aland; Lines: (+37 -36) File: radiusd/share/dictionary.cosine; Revision: 1.2.2.1; Date: 2005/11/30 22:17:22; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.digest; Revision: 1.1.2.1; Date: 2005/11/30 22:17:23; Author: aland; Lines: (+16 -0) File: radiusd/share/dictionary.epygi; Revision: 1.4.2.1; Date: 2005/11/30 22:17:23; Author: aland; Lines: (+0 -0) File: radiusd/share/dictionary.ericsson; Revision: 1.1.2.1; Date: 2005/11/30 22:17:23; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.erx; Revision: 1.9.4.1; Date: 2005/11/30 22:17:23; Author: aland; Lines: (+91 -67) File: radiusd/share/dictionary.extreme; Revision: 1.2.4.1; Date: 2005/11/30 22:17:24; Author: aland; Lines: (+20 -8) File: radiusd/share/dictionary.fortinet; Revision: 1.1.2.1; Date: 2005/11/30 22:17:24; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.foundry; Revision: 1.2.4.1; Date: 2005/11/30 22:17:24; Author: aland; Lines: (+28 -22) File: radiusd/share/dictionary.freeradius; Revision: 1.3.4.1; Date: 2005/11/30 22:17:24; Author: aland; Lines: (+5 -4) File: radiusd/share/dictionary.freeradius.internal; Revision: 1.6.2.1; Date: 2005/11/30 22:17:24; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.gandalf; Revision: 1.1.4.1; Date: 2005/11/30 22:17:24; Author: aland; Lines: (+75 -70) File: radiusd/share/dictionary.garderos; Revision: 1.2.2.1.2.1; Date: 2005/11/30 22:17:25; Author: aland; Lines: (+9 -4) File: radiusd/share/dictionary.gemtek; Revision: 1.1.2.2.2.1; Date: 2005/11/30 22:17:25; Author: aland; Lines: (+9 -8) File: radiusd/share/dictionary.ipunplugged; Revision: 1.2.2.1; Date: 2005/11/30 22:17:25; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.issanni; Revision: 1.2.2.1; Date: 2005/11/30 22:17:25; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.itk; Revision: 1.1.6.1; Date: 2005/11/30 22:17:25; Author: aland; Lines: (+39 -34) File: radiusd/share/dictionary.juniper; Revision: 1.2.6.1; Date: 2005/11/30 22:17:25; Author: aland; Lines: (+12 -7) File: radiusd/share/dictionary.karlnet; Revision: 1.1.4.1; Date: 2005/11/30 22:17:25; Author: aland; Lines: (+2084 -2084) File: radiusd/share/dictionary.livingston; Revision: 1.2.10.1; Date: 2005/11/30 22:17:26; Author: aland; Lines: (+55 -50) File: radiusd/share/dictionary.localweb; Revision: 1.1.2.1.2.1; Date: 2005/11/30 22:17:26; Author: aland; Lines: (+21 -16) File: radiusd/share/dictionary.lucent; Revision: 1.3.2.1; Date: 2005/11/30 22:17:26; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.merit; Revision: 1.1.4.1; Date: 2005/11/30 22:17:27; Author: aland; Lines: (+8 -6) File: radiusd/share/dictionary.microsoft; Revision: 1.6.8.1; Date: 2005/11/30 22:17:27; Author: aland; Lines: (+55 -55) File: radiusd/share/dictionary.mikrotik; Revision: 1.1.4.1; Date: 2005/11/30 22:17:27; Author: aland; Lines: (+23 -5) File: radiusd/share/dictionary.motorola; Revision: 1.1.2.1; Date: 2005/11/30 22:17:27; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.navini; Revision: 1.1.4.1; Date: 2005/11/30 22:17:27; Author: aland; Lines: (+8 -3) File: radiusd/share/dictionary.netscreen; Revision: 1.1.6.1; Date: 2005/11/30 22:17:27; Author: aland; Lines: (+18 -13) File: radiusd/share/dictionary.nokia; Revision: 1.1.6.1; Date: 2005/11/30 22:17:27; Author: aland; Lines: (+28 -7) File: radiusd/share/dictionary.nomadix; Revision: 1.4.2.1.2.1; Date: 2005/11/30 22:17:28; Author: aland; Lines: (+22 -17) File: radiusd/share/dictionary.ntua; Revision: 1.3.2.1; Date: 2005/11/30 22:17:28; Author: aland; Lines: (+0 -0) File: radiusd/share/dictionary.packeteer; Revision: 1.2.2.1; Date: 2005/11/30 22:17:28; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.propel; Revision: 1.1.4.1; Date: 2005/11/30 22:17:28; Author: aland; Lines: (+4 -2) File: radiusd/share/dictionary.quintum; Revision: 1.2.10.1; Date: 2005/11/30 22:17:28; Author: aland; Lines: (+31 -27) File: radiusd/share/dictionary.redback; Revision: 1.7.2.1.2.1; Date: 2005/11/30 22:17:28; Author: aland; Lines: (+450 -369) File: radiusd/share/dictionary.redcreek; Revision: 1.1.6.1; Date: 2005/11/30 22:17:29; Author: aland; Lines: (+16 -11) File: radiusd/share/dictionary.rfc2865; Revision: 1.3.2.1; Date: 2005/11/30 22:17:29; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.rfc2866; Revision: 1.2.2.1; Date: 2005/11/30 22:17:30; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.rfc2867; Revision: 1.2.2.1; Date: 2005/11/30 22:17:30; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.rfc2868; Revision: 1.3.2.1; Date: 2005/11/30 22:17:30; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.rfc2869; Revision: 1.2.2.1; Date: 2005/11/30 22:17:30; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.rfc3162; Revision: 1.2.2.1; Date: 2005/11/30 22:17:30; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.rfc3576; Revision: 1.2.2.1; Date: 2005/11/30 22:17:31; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.rfc3580; Revision: 1.2.2.1; Date: 2005/11/30 22:17:31; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.roaringpenguin; Revision: 1.2.2.1; Date: 2005/11/30 22:17:31; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.shasta; Revision: 1.1.10.1; Date: 2005/11/30 22:17:31; Author: aland; Lines: (+13 -8) File: radiusd/share/dictionary.shiva; Revision: 1.2.10.1; Date: 2005/11/30 22:17:31; Author: aland; Lines: (+87 -51) File: radiusd/share/dictionary.sonicwall; Revision: 1.2.4.1; Date: 2005/11/30 22:17:31; Author: aland; Lines: (+11 -7) File: radiusd/share/dictionary.springtide; Revision: 1.1.6.1; Date: 2005/11/30 22:17:31; Author: aland; Lines: (+23 -10) File: radiusd/share/dictionary.starent; Revision: 1.3.2.1; Date: 2005/11/30 22:17:32; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.t_systems_nova; Revision: 1.2.2.1; Date: 2005/11/30 22:17:32; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.telebit; Revision: 1.1.6.1; Date: 2005/11/30 22:17:32; Author: aland; Lines: (+11 -6) File: radiusd/share/dictionary.trapeze; Revision: 1.3.2.2.2.1; Date: 2005/11/30 22:17:32; Author: aland; Lines: (+15 -10) File: radiusd/share/dictionary.unix; Revision: 1.1.4.1; Date: 2005/11/30 22:17:32; Author: aland; Lines: (+9 -8) File: radiusd/share/dictionary.usr; Revision: 1.9.2.1.2.1; Date: 2005/11/30 22:17:33; Author: aland; Lines: (+1252 -986) File: radiusd/share/dictionary.valemount; Revision: 1.1.2.1.2.1; Date: 2005/11/30 22:17:33; Author: aland; Lines: (+10 -9) File: radiusd/share/dictionary.versanet; Revision: 1.1.1.1.10.1; Date: 2005/11/30 22:17:33; Author: aland; Lines: (+54 -50) File: radiusd/share/dictionary.waverider; Revision: 1.4.2.1; Date: 2005/11/30 22:17:33; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.wispr; Revision: 1.1.6.1; Date: 2005/11/30 22:17:33; Author: aland; Lines: (+18 -13) File: radiusd/share/dictionary.xedia; Revision: 1.1.6.1; Date: 2005/11/30 22:17:34; Author: aland; Lines: (+15 -8) File: radiusd/share/dictionary.xylan; Revision: 1.2.2.1; Date: 2005/11/30 22:17:34; Author: aland; Lines: (+1 -1) File: radiusd/share/dictionary.zyxel; Revision: 1.1.2.1; Date: 2005/11/30 22:17:34; Author: aland; Lines: (+1 -1) File: radiusd/share/format.pl; Revision: 1.3.2.1; Date: 2005/11/30 22:17:34; Author: aland; Lines: (+1 -1) File: radiusd/src/include/libradius.h; Revision: 1.76.2.2.2.1; Date: 2005/11/30 22:17:34; Author: aland; Lines: (+46 -5) File: radiusd/src/lib/Makefile; Revision: 1.20.4.1; Date: 2005/11/30 22:17:35; Author: aland; Lines: (+1 -1) File: radiusd/src/lib/dict.c; Revision: 1.50.2.4.2.1; Date: 2005/11/30 22:17:35; Author: aland; Lines: (+583 -312) File: radiusd/src/lib/radius.c; Revision: 1.125.2.5.2.1; Date: 2005/11/30 22:17:35; Author: aland; Lines: (+1236 -979) ===================================================== Log entries ===================================================== Description: Update for 1.1.x Modified files: File: radiusd/INSTALL; Revision: 1.6.4.1.2.1; Date: 2005/12/01 00:02:56; Author: aland; Lines: (+0 -8) ------------------------------- Description: Made it 2.0.0, and removed the changes that are in 1.1.x, as we don't need to mention them twice Modified files: File: radiusd/doc/ChangeLog; Revision: 1.72; Date: 2005/11/30 22:32:02; Author: aland; Lines: (+1 -14) ------------------------------- Description: Pull changes from the (now-2.0) head Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.2; Date: 2005/11/30 22:32:27; Author: aland; Lines: (+6 -1) ------------------------------- Description: Updated for 1.1.0 Modified files: File: radiusd/doc/ChangeLog; Revision: 1.57.2.31.2.1; Date: 2005/11/30 22:20:14; Author: aland; Lines: (+3 -1) ------------------------------- Description: Document the new dictionary format Modified files: File: radiusd/man/man5/dictionary.5; Revision: 1.5.4.1; Date: 2005/11/30 22:18:52; Author: aland; Lines: (+36 -8) ------------------------------- Description: file dictionary.digest was initially added on branch branch_1_1. Modified files: File: radiusd/share/dictionary.digest; Revision: 1.1; Date: 2005/11/30 22:17:23; Author: aland; ------------------------------- Description: Don't need this any more in the 1.1.x branch Modified files: File: radiusd/share/dictionary.tunnel; Revision: 1.8.4.1; Date: 2005/11/30 22:19:26; Author: aland; Lines: (+1 -1) ------------------------------- Description: Remember the proxying IP address. This makes udpfromto work again Modified files: File: radiusd/src/main/request_list.c; Revision: 1.40.2.2.2.1; Date: 2005/11/30 22:21:43; Author: aland; Lines: (+6 -2) ===================================================== Summary of modified files ===================================================== File: radiusd/COPYRIGHT Revisions: 1.3.8.1 Authors: aland (+99 -21) ------------------------------- File: radiusd/INSTALL Revisions: 1.6.4.1.2.1 Authors: aland (+0 -8) ------------------------------- File: radiusd/README Revisions: 1.7.6.1 Authors: aland (+5 -15) ------------------------------- File: radiusd/configure.in Revisions: 1.198.2.15.2.1 Authors: aland (+3 -2) ------------------------------- File: radiusd/doc/ChangeLog Revisions: 1.72, 1.57.2.31.2.2, 1.57.2.31.2.1 Authors: aland (+1 -14), aland (+6 -1), aland (+3 -1) ------------------------------- File: radiusd/man/man5/dictionary.5 Revisions: 1.5.4.1 Authors: aland (+36 -8) ------------------------------- File: radiusd/share/attrnew.pl Revisions: 1.1.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/attrsort.pl Revisions: 1.1.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary Revisions: 1.93.2.5.2.1 Authors: aland (+75 -685) ------------------------------- File: radiusd/share/dictionary.3com Revisions: 1.3.2.1.2.1 Authors: aland (+11 -6) ------------------------------- File: radiusd/share/dictionary.3gpp Revisions: 1.1.4.1 Authors: aland (+23 -19) ------------------------------- File: radiusd/share/dictionary.3gpp2 Revisions: 1.2.4.1 Authors: aland (+79 -77) ------------------------------- File: radiusd/share/dictionary.acc Revisions: 1.2.4.1.2.1 Authors: aland (+246 -239) ------------------------------- File: radiusd/share/dictionary.airespace Revisions: 1.3.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.alcatel Revisions: 1.3.4.1 Authors: aland (+93 -59) ------------------------------- File: radiusd/share/dictionary.alteon Revisions: 1.1.8.1 Authors: aland (+14 -9) ------------------------------- File: radiusd/share/dictionary.altiga Revisions: 1.2.8.1 Authors: aland (+78 -77) ------------------------------- File: radiusd/share/dictionary.aptis Revisions: 1.2.6.1 Authors: aland (+176 -41) ------------------------------- File: radiusd/share/dictionary.aruba Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.ascend Revisions: 1.11.2.1.2.1 Authors: aland (+1070 -816) ------------------------------- File: radiusd/share/dictionary.avaya Revisions: 1.3.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.bay Revisions: 1.4.10.1 Authors: aland (+170 -165) ------------------------------- File: radiusd/share/dictionary.bintec Revisions: 1.1.6.1 Authors: aland (+36 -31) ------------------------------- File: radiusd/share/dictionary.bristol Revisions: 1.2.4.1 Authors: aland (+12 -7) ------------------------------- File: radiusd/share/dictionary.cablelabs Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.cabletron Revisions: 1.1.6.1 Authors: aland (+20 -15) ------------------------------- File: radiusd/share/dictionary.cisco Revisions: 1.12.4.1 Authors: aland (+122 -114) ------------------------------- File: radiusd/share/dictionary.cisco.bbsm Revisions: 1.1.8.1 Authors: aland (+6 -5) ------------------------------- File: radiusd/share/dictionary.cisco.vpn3000 Revisions: 1.7.4.1 Authors: aland (+112 -4) ------------------------------- File: radiusd/share/dictionary.cisco.vpn5000 Revisions: 1.1.8.1 Authors: aland (+4 -3) ------------------------------- File: radiusd/share/dictionary.colubris Revisions: 1.1.8.1 Authors: aland (+8 -6) ------------------------------- File: radiusd/share/dictionary.columbia_university Revisions: 1.1.10.1 Authors: aland (+16 -11) ------------------------------- File: radiusd/share/dictionary.compat Revisions: 1.5.4.1 Authors: aland (+37 -36) ------------------------------- File: radiusd/share/dictionary.cosine Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.digest Revisions: 1.1, 1.1.2.1 Authors: aland, aland (+16 -0) ------------------------------- File: radiusd/share/dictionary.epygi Revisions: 1.4.2.1 Authors: aland (+0 -0) ------------------------------- File: radiusd/share/dictionary.ericsson Revisions: 1.1.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.erx Revisions: 1.9.4.1 Authors: aland (+91 -67) ------------------------------- File: radiusd/share/dictionary.extreme Revisions: 1.2.4.1 Authors: aland (+20 -8) ------------------------------- File: radiusd/share/dictionary.fortinet Revisions: 1.1.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.foundry Revisions: 1.2.4.1 Authors: aland (+28 -22) ------------------------------- File: radiusd/share/dictionary.freeradius Revisions: 1.3.4.1 Authors: aland (+5 -4) ------------------------------- File: radiusd/share/dictionary.freeradius.internal Revisions: 1.6.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.gandalf Revisions: 1.1.4.1 Authors: aland (+75 -70) ------------------------------- File: radiusd/share/dictionary.garderos Revisions: 1.2.2.1.2.1 Authors: aland (+9 -4) ------------------------------- File: radiusd/share/dictionary.gemtek Revisions: 1.1.2.2.2.1 Authors: aland (+9 -8) ------------------------------- File: radiusd/share/dictionary.ipunplugged Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.issanni Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.itk Revisions: 1.1.6.1 Authors: aland (+39 -34) ------------------------------- File: radiusd/share/dictionary.juniper Revisions: 1.2.6.1 Authors: aland (+12 -7) ------------------------------- File: radiusd/share/dictionary.karlnet Revisions: 1.1.4.1 Authors: aland (+2084 -2084) ------------------------------- File: radiusd/share/dictionary.livingston Revisions: 1.2.10.1 Authors: aland (+55 -50) ------------------------------- File: radiusd/share/dictionary.localweb Revisions: 1.1.2.1.2.1 Authors: aland (+21 -16) ------------------------------- File: radiusd/share/dictionary.lucent Revisions: 1.3.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.merit Revisions: 1.1.4.1 Authors: aland (+8 -6) ------------------------------- File: radiusd/share/dictionary.microsoft Revisions: 1.6.8.1 Authors: aland (+55 -55) ------------------------------- File: radiusd/share/dictionary.mikrotik Revisions: 1.1.4.1 Authors: aland (+23 -5) ------------------------------- File: radiusd/share/dictionary.motorola Revisions: 1.1.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.navini Revisions: 1.1.4.1 Authors: aland (+8 -3) ------------------------------- File: radiusd/share/dictionary.netscreen Revisions: 1.1.6.1 Authors: aland (+18 -13) ------------------------------- File: radiusd/share/dictionary.nokia Revisions: 1.1.6.1 Authors: aland (+28 -7) ------------------------------- File: radiusd/share/dictionary.nomadix Revisions: 1.4.2.1.2.1 Authors: aland (+22 -17) ------------------------------- File: radiusd/share/dictionary.ntua Revisions: 1.3.2.1 Authors: aland (+0 -0) ------------------------------- File: radiusd/share/dictionary.packeteer Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.propel Revisions: 1.1.4.1 Authors: aland (+4 -2) ------------------------------- File: radiusd/share/dictionary.quintum Revisions: 1.2.10.1 Authors: aland (+31 -27) ------------------------------- File: radiusd/share/dictionary.redback Revisions: 1.7.2.1.2.1 Authors: aland (+450 -369) ------------------------------- File: radiusd/share/dictionary.redcreek Revisions: 1.1.6.1 Authors: aland (+16 -11) ------------------------------- File: radiusd/share/dictionary.rfc2865 Revisions: 1.3.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.rfc2866 Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.rfc2867 Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.rfc2868 Revisions: 1.3.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.rfc2869 Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.rfc3162 Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.rfc3576 Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.rfc3580 Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.roaringpenguin Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.shasta Revisions: 1.1.10.1 Authors: aland (+13 -8) ------------------------------- File: radiusd/share/dictionary.shiva Revisions: 1.2.10.1 Authors: aland (+87 -51) ------------------------------- File: radiusd/share/dictionary.sonicwall Revisions: 1.2.4.1 Authors: aland (+11 -7) ------------------------------- File: radiusd/share/dictionary.springtide Revisions: 1.1.6.1 Authors: aland (+23 -10) ------------------------------- File: radiusd/share/dictionary.starent Revisions: 1.3.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.t_systems_nova Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.telebit Revisions: 1.1.6.1 Authors: aland (+11 -6) ------------------------------- File: radiusd/share/dictionary.trapeze Revisions: 1.3.2.2.2.1 Authors: aland (+15 -10) ------------------------------- File: radiusd/share/dictionary.tunnel Revisions: 1.8.4.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.unix Revisions: 1.1.4.1 Authors: aland (+9 -8) ------------------------------- File: radiusd/share/dictionary.usr Revisions: 1.9.2.1.2.1 Authors: aland (+1252 -986) ------------------------------- File: radiusd/share/dictionary.valemount Revisions: 1.1.2.1.2.1 Authors: aland (+10 -9) ------------------------------- File: radiusd/share/dictionary.versanet Revisions: 1.1.1.1.10.1 Authors: aland (+54 -50) ------------------------------- File: radiusd/share/dictionary.waverider Revisions: 1.4.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.wispr Revisions: 1.1.6.1 Authors: aland (+18 -13) ------------------------------- File: radiusd/share/dictionary.xedia Revisions: 1.1.6.1 Authors: aland (+15 -8) ------------------------------- File: radiusd/share/dictionary.xylan Revisions: 1.2.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/dictionary.zyxel Revisions: 1.1.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/share/format.pl Revisions: 1.3.2.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/include/libradius.h Revisions: 1.76.2.2.2.2, 1.76.2.2.2.1 Authors: aland (+4 -3), aland (+46 -5) ------------------------------- File: radiusd/src/lib/Makefile Revisions: 1.20.4.1 Authors: aland (+1 -1) ------------------------------- File: radiusd/src/lib/dict.c Revisions: 1.50.2.4.2.1 Authors: aland (+583 -312) ------------------------------- File: radiusd/src/lib/radius.c Revisions: 1.125.2.5.2.1 Authors: aland (+1236 -979) ------------------------------- File: radiusd/src/lib/rbtree.c Revisions: 1.10.4.1 Authors: aland (+86 -56) ------------------------------- File: radiusd/src/main/radclient.c Revisions: 1.72.2.1.2.1 Authors: aland (+7 -5) ------------------------------- File: radiusd/src/main/request_list.c Revisions: 1.40.2.2.2.1 Authors: aland (+6 -2) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

EAp-AKA
by kalyani gopalabhatla 29 Nov '05

29 Nov '05

Hi, We are implementing EAP-AKA mechanism. As free RADIUS does not support AKA, we want to write the code for AKA. Can any one help us how to get started with it? Thanks Kal Raji --------------------------------- Yahoo! Personals Single? There's someone we'd like you to meet. Lots of someones, actually. Yahoo! Personals

2 1

Automatic report from sources (radiusd) between 28.11.2005 - 29.11.2005 GMT
by Automatic cvs log generator 29 Nov '05

29 Nov '05

CVS log entries from 28.11.2005 (Mon) 09:00:00 - 29.11.2005 (Tue) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/modules/rlm_exec/rlm_exec.c; Revisions: 1.20 File: radiusd/src/main/request_list.c; Revisions: 1.71 File: radiusd/src/include/radius.h; Revisions: 1.78 File: radiusd/share/dictionary.freeradius.internal; Revisions: 1.6 ===================================================== Combined list of identical log entries ===================================================== Description: Re-implemented Exec-Program && Exec-Program-Wait in rlm_exec, in the post-auth section. We may want to add this in the "accounting" section, too Modified files: File: radiusd/share/dictionary.freeradius.internal; Revision: 1.6; Date: 2005/11/28 21:47:01; Author: aland; Lines: (+3 -1) File: radiusd/src/include/radius.h; Revision: 1.78; Date: 2005/11/28 21:47:01; Author: aland; Lines: (+3 -1) File: radiusd/src/modules/rlm_exec/rlm_exec.c; Revision: 1.20; Date: 2005/11/28 21:47:01; Author: aland; Lines: (+66 -4) ===================================================== Log entries ===================================================== Description: Clean up time passed calculation (again) Modified files: File: radiusd/src/main/request_list.c; Revision: 1.71; Date: 2005/11/28 21:39:44; Author: aland; Lines: (+5 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/share/dictionary.freeradius.internal Revisions: 1.6 Authors: aland (+3 -1) ------------------------------- File: radiusd/src/include/radius.h Revisions: 1.78 Authors: aland (+3 -1) ------------------------------- File: radiusd/src/main/request_list.c Revisions: 1.71 Authors: aland (+5 -3) ------------------------------- File: radiusd/src/modules/rlm_exec/rlm_exec.c Revisions: 1.20 Authors: aland (+66 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

assert on listen.c:565
by Joe Maimon 28 Nov '05

28 Nov '05

CVS 11/27 On older CVS versions I had this patch, which I am testing again as a solution. Server starts to log below after running fine for close to 12 hours...... Mon Nov 28 04:05:18 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 32 Mon Nov 28 04:05:18 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 35 Mon Nov 28 04:05:18 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 36 Mon Nov 28 04:05:19 2005 : Proxy: marking accounting server 90.90.90.15:1646 for realm jnet dead Mon Nov 28 04:05:21 2005 : Proxy: marking accounting server 90.90.90.15:1646 for realm jnet dead Mon Nov 28 04:05:22 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 37 Mon Nov 28 04:05:23 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 35 Mon Nov 28 04:05:23 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 33 Mon Nov 28 04:05:23 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 36 Mon Nov 28 04:05:23 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 34 Mon Nov 28 04:05:23 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 32 Mon Nov 28 04:05:24 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 37 Mon Nov 28 04:05:24 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 38 Mon Nov 28 04:05:24 2005 : Auth: Login incorrect: [CCCCCCC/cisco] (from client noc08rt08 port 805372387) Mon Nov 28 04:05:24 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 39 Mon Nov 28 04:05:25 2005 : Auth: Login OK: [ruth@CCCCCCC] (from client noc08rt08 port 805372387) Mon Nov 28 04:05:26 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 35 Mon Nov 28 04:05:26 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 36 Mon Nov 28 04:05:27 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 38 Mon Nov 28 04:05:27 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 37 Mon Nov 28 04:05:29 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 39 Mon Nov 28 04:05:32 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 38 Mon Nov 28 04:05:34 2005 : Proxy: No outstanding request was found for proxy reply from home server 90.90.90.15 port 1646 - ID 39 Mon Nov 28 04:05:59 2005 : Auth: Login incorrect: [XXXX/cisco] (from client noc08rt08 port 810287241) Mon Nov 28 04:06:05 2005 : Error: Assertion failed in listen.c, line 565 #! /bin/sh /usr/share/dpatch/dpatch-run ## 090-assert-listen-proxy.dpatch by <joe(a)nameserver3.ttec.com> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: No description. @DPATCH@ diff -urNad freeradius-1.1.0~/src/main/listen.c freeradius-1.1.0/src/main/listen.c --- freeradius-1.1.0~/src/main/listen.c 2005-11-27 15:47:21.000000000 -0500 +++ freeradius-1.1.0/src/main/listen.c 2005-11-28 08:08:57.000000000 -0500 @@ -562,8 +562,10 @@ */ static int auth_socket_send(rad_listen_t *listener, REQUEST *request) { - rad_assert(request->listener == listener); - rad_assert(listener->send == auth_socket_send); + if (request->proxy_listener != listener) { + rad_assert(request->listener == listener); + rad_assert(listener->send == auth_socket_send); + } /* * Ensure that the reply is sane

2 3

Automatic report from sources (radiusd) between 27.11.2005 - 28.11.2005 GMT
by Automatic cvs log generator 28 Nov '05

28 Nov '05

CVS log entries from 27.11.2005 (Sun) 09:00:00 - 28.11.2005 (Mon) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/debian/rules; Revisions: 1.62 ===================================================== Log entries ===================================================== Description: Pull a few downstream fixes: - don't rerun configure during the build. - don't install CVS files. - add phony targets. Modified files: File: radiusd/debian/rules; Revision: 1.62; Date: 2005/11/27 15:14:51; Author: nbk; Lines: (+4 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/debian/rules Revisions: 1.62 Authors: nbk (+4 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

[PATCH] policy module controlling where attributes are inserted into the reply
by Joe Maimon 27 Nov '05

27 Nov '05

The attached patch (tested to varying degrees in different points of its lifetime, compiles and performs as expected on my system) adds the ability to perform these operations Also attached is a patch that uses pairxlatmove instead of pairmove, which is the way I actually use it. The patch adds these operations reply ^= { } reply ^== () { } reply ^. { } reply ^.= () { } reply $= { } reply $== () { } reply $. { } reply $.= () { } ======================================== reply ^= { Attribute1 += "Value1" } Will insert the attribute at the top of the list. reply ^== ( Attribute2 == "Value2" ) { Attribute1 += "Value1" } Will insert attribute1 before Attribute2 if found, otherwise it behaves like ^= ^. and ^.= have the same difference as .= and = namely they call pairadd instead of pairmove Otherwise they are the same. Likewise provided are $= , $. , $== and $.= which insert AFTER the attribute. IOW $= and $. are synonymous with = and .= but are provided for completeness. $== and $.= are quite usefull in and of themselves. ========================================== Motivation: Cisco NAS's will kick users who assign a VRF after assigning an IP address. The VRF must come first. This allows this form in my policy.txt file. ====cut here========= policy add_inter_vrf { reply ^== ( reply:Cisco-Avpair =~ "lcp:interface-config") { Cisco-Avpair += "lcp:interface-config=ip vrf forwarding CHL-PRIVATE" } if (!(reply:Cisco-Avpair =~ "lcp:interface-config=ip address.*")) { reply $== (reply:Cisco-AVpair == "lcp:interface-config=ip vrf forwarding CHL-PRIVATE") { Cisco-Avpair += "lcp:interface-config=ip unnumbered l10" } } if (!(reply:Framed-IP-Address =* "")) { reply = { Cisco-Avpair += "ip:addr-pool=privatepool" } } } ====cut here========= Enjoy! #! /bin/sh /usr/share/dpatch/dpatch-run ## 240-before-after-where-head-tail.dpatch by <joe(a)nameserver3.ttec.com> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: No description. @DPATCH@ diff -urNad freeradius-1.1.0~/src/modules/rlm_policy/evaluate.c freeradius-1.1.0/src/modules/rlm_policy/evaluate.c --- freeradius-1.1.0~/src/modules/rlm_policy/evaluate.c 2005-11-27 12:22:35.000000000 -0500 +++ freeradius-1.1.0/src/modules/rlm_policy/evaluate.c 2005-11-27 12:22:35.000000000 -0500 @@ -882,6 +882,7 @@ VALUE_PAIR **vps = NULL; VALUE_PAIR *vp, *head, **tail; const policy_item_t *attr; + policy_lex_t this_how; this = (const policy_attributes_t *) item; @@ -932,20 +933,119 @@ tail = &(vp->next); } - switch (this->how) { + this_how = this->how; +retry_how: + switch (this_how) { case POLICY_LEX_SET_EQUALS: /* dangerous: removes all previous things! */ pairfree(vps); *vps = head; break; + case POLICY_LEX_AFTER_TAIL_ASSIGN: case POLICY_LEX_ASSIGN: /* 'union' */ - pairmove(vps, head); + pairmove(vps, &head); pairfree(&head); break; + case POLICY_LEX_BEFORE_HEAD_ASSIGN: + pairmove(&head, &vps); + pairfree(vps); + *vps = head; + break; + + case POLICY_LEX_AFTER_TAIL_EQUALS: case POLICY_LEX_CONCAT_EQUALS: pairadd(vps, head); break; + + case POLICY_LEX_BEFORE_HEAD_EQUALS: + pairadd(&head, *vps); + *vps = head; + break; + + case POLICY_LEX_BEFORE_WHERE_EQUALS: + case POLICY_LEX_AFTER_WHERE_EQUALS: + case POLICY_LEX_BEFORE_WHERE_ASSIGN: + case POLICY_LEX_AFTER_WHERE_ASSIGN: + /* find location*/ + { + VALUE_PAIR *vpprev = NULL, *vpnext = NULL, *lvp; + + for(lvp = *vps; lvp; vpprev = lvp, lvp = lvp->next) { + vpnext = lvp->next; + lvp->next = NULL; + if (evaluate_condition(state, this->where_loc)) + break; + lvp->next = vpnext; + } + + if (lvp) { + switch(this_how) { + case POLICY_LEX_BEFORE_WHERE_EQUALS: + case POLICY_LEX_BEFORE_WHERE_ASSIGN: + if (vpprev) { + lvp->next = vpnext; + vpnext = lvp; + vpprev->next = NULL; + lvp = vpprev; + } + default: /* always reached */ + break; + } + + switch(this_how) { + case POLICY_LEX_BEFORE_WHERE_EQUALS: + if (vpprev) + pairadd(&lvp, head); + else + *vps = lvp = head; + break; + case POLICY_LEX_AFTER_WHERE_EQUALS: + pairadd(&lvp, head); + break; + case POLICY_LEX_BEFORE_WHERE_ASSIGN: + if (vpprev) { + pairmove(&lvp, &head); + pairfree(&head); + } + else + *vps = lvp = head; + break; + case POLICY_LEX_AFTER_WHERE_ASSIGN: + pairmove(&lvp, &head); + pairfree(&head); + break; + default:/*never reached*/ + break; + } + for( ; lvp && lvp->next; lvp = lvp->next); + if (lvp) + lvp->next = vpnext; + break; + } + + switch(this_how) { + case POLICY_LEX_BEFORE_WHERE_EQUALS: + this_how = POLICY_LEX_BEFORE_HEAD_EQUALS; + break; + case POLICY_LEX_AFTER_WHERE_EQUALS: + this_how = POLICY_LEX_AFTER_TAIL_EQUALS; + break; + case POLICY_LEX_BEFORE_WHERE_ASSIGN: + this_how = POLICY_LEX_BEFORE_HEAD_ASSIGN; + break; + case POLICY_LEX_AFTER_WHERE_ASSIGN: + this_how = POLICY_LEX_AFTER_TAIL_ASSIGN; + break; + default: /*never reached*/ + break; + } + goto retry_how; + } + fprintf(stderr, "HUH?\n"); + pairfree(&head); + return 0; + break; /* never reach here */ default: fprintf(stderr, "HUH?\n"); diff -urNad freeradius-1.1.0~/src/modules/rlm_policy/parse.c freeradius-1.1.0/src/modules/rlm_policy/parse.c --- freeradius-1.1.0~/src/modules/rlm_policy/parse.c 2005-11-27 12:22:35.000000000 -0500 +++ freeradius-1.1.0/src/modules/rlm_policy/parse.c 2005-11-27 12:22:35.000000000 -0500 @@ -106,6 +106,14 @@ { ">=", POLICY_LEX_GT }, { "=~", POLICY_LEX_RX_EQUALS }, { "!~", POLICY_LEX_RX_NOT_EQUALS }, + { "^=", POLICY_LEX_BEFORE_HEAD_ASSIGN }, + { "^==", POLICY_LEX_BEFORE_WHERE_ASSIGN }, + { "^.", POLICY_LEX_BEFORE_HEAD_EQUALS }, + { "^.=", POLICY_LEX_BEFORE_WHERE_EQUALS }, + { "$=", POLICY_LEX_AFTER_TAIL_ASSIGN }, + { "$==", POLICY_LEX_AFTER_WHERE_ASSIGN }, + { "$.", POLICY_LEX_AFTER_TAIL_EQUALS }, + { "$.=", POLICY_LEX_AFTER_WHERE_EQUALS }, { ".=", POLICY_LEX_CONCAT_EQUALS }, { ":=", POLICY_LEX_SET_EQUALS }, { "-=", POLICY_LEX_MINUS_EQUALS }, @@ -219,6 +227,56 @@ } *token = POLICY_LEX_BAD; return input + 1; + + case '^': + if (input[1] == '.' ) { + if (input[2] == '=') { + *token = POLICY_LEX_BEFORE_WHERE_EQUALS; + return input + 3; + } + else { + *token = POLICY_LEX_BEFORE_HEAD_EQUALS; + return input + 2; + } + } + else if (input[1] == '=') { + if (input[2] == '=') { + *token = POLICY_LEX_BEFORE_WHERE_ASSIGN; + return input + 3; + } + else { + *token = POLICY_LEX_BEFORE_HEAD_ASSIGN; + return input + 2; + } + } + + *token = POLICY_LEX_BAD; + return input + 1; + + case '$': + if (input[1] == '.' ) { + if (input[2] == '=') { + *token = POLICY_LEX_AFTER_WHERE_EQUALS; + return input + 3; + } + else { + *token = POLICY_LEX_AFTER_TAIL_EQUALS; + return input + 2; + } + } + else if (input[1] == '=') { + if (input[2] == '=') { + *token = POLICY_LEX_AFTER_WHERE_ASSIGN; + return input + 3; + } + else { + *token = POLICY_LEX_AFTER_TAIL_ASSIGN; + return input + 2; + } + } + + *token = POLICY_LEX_BAD; + return input + 1; case ':': if (input[1] == '=') { @@ -935,9 +993,31 @@ policy_lex_t token; policy_attributes_t *this; char buffer[32]; + + this = rad_malloc(sizeof(*this)); + if (!this) { + fprintf(stderr, "%s[%d]: rad_malloc failed\n", + lexer->filename, lexer->lineno); + return 0; + } + memset(this, 0, sizeof(*this)); + this->item.type = POLICY_TYPE_ATTRIBUTE_LIST; token = policy_lex_file(lexer, 0, buffer, sizeof(buffer)); switch (token) { + case POLICY_LEX_BEFORE_WHERE_EQUALS: + case POLICY_LEX_AFTER_WHERE_EQUALS: + case POLICY_LEX_BEFORE_WHERE_ASSIGN: + case POLICY_LEX_AFTER_WHERE_ASSIGN: + if (!parse_condition(lexer, &(this->where_loc))) { + rlm_policy_free_item((policy_item_t *)this); + return 0; + } + break; + case POLICY_LEX_BEFORE_HEAD_EQUALS: + case POLICY_LEX_AFTER_TAIL_EQUALS: + case POLICY_LEX_BEFORE_HEAD_ASSIGN: + case POLICY_LEX_AFTER_TAIL_ASSIGN: case POLICY_LEX_ASSIGN: case POLICY_LEX_SET_EQUALS: case POLICY_LEX_CONCAT_EQUALS: @@ -947,13 +1027,10 @@ fprintf(stderr, "%s[%d]: Unexpected token %s\n", lexer->filename, lexer->lineno, lrad_int2str(rlm_policy_tokens, token, "?")); + rlm_policy_free_item((policy_item_t *)this); return 0; /* unknown */ } - - this = rad_malloc(sizeof(*this)); - memset(this, 0, sizeof(*this)); - this->item.type = POLICY_TYPE_ATTRIBUTE_LIST; this->item.lineno = lexer->lineno; this->where = where; this->how = token; diff -urNad freeradius-1.1.0~/src/modules/rlm_policy/rlm_policy.h freeradius-1.1.0/src/modules/rlm_policy/rlm_policy.h --- freeradius-1.1.0~/src/modules/rlm_policy/rlm_policy.h 2005-11-27 12:22:35.000000000 -0500 +++ freeradius-1.1.0/src/modules/rlm_policy/rlm_policy.h 2005-11-27 12:23:09.000000000 -0500 @@ -80,6 +80,14 @@ POLICY_LEX_CONCAT_EQUALS, /* .= */ POLICY_LEX_VARIABLE, /* %{foo} */ POLICY_LEX_FUNCTION, /* Hmmm... */ + POLICY_LEX_BEFORE_HEAD_ASSIGN, /* ^= */ + POLICY_LEX_BEFORE_WHERE_ASSIGN, /* ^== */ + POLICY_LEX_BEFORE_HEAD_EQUALS, /* ^. */ + POLICY_LEX_BEFORE_WHERE_EQUALS, /* ^.= */ + POLICY_LEX_AFTER_TAIL_ASSIGN, /* $= */ + POLICY_LEX_AFTER_WHERE_ASSIGN, /* $== */ + POLICY_LEX_AFTER_TAIL_EQUALS, /* $. */ + POLICY_LEX_AFTER_WHERE_EQUALS, /* $.= */ POLICY_LEX_DOUBLE_QUOTED_STRING, POLICY_LEX_SINGLE_QUOTED_STRING, POLICY_LEX_BACK_QUOTED_STRING, @@ -157,6 +165,7 @@ policy_reserved_word_t where; /* where to do it */ policy_lex_t how; /* how to do */ policy_item_t *attributes; /* things to do */ + policy_item_t *where_loc; /* search for location in list*/ /* FIXME: VALUE_PAIR *vps; */ } policy_attributes_t; #! /bin/sh /usr/share/dpatch/dpatch-run ## 245-policy-xlat.dpatch by <joe(a)nameserver3.ttec.com> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: No description. @DPATCH@ diff -urNad freeradius-1.1.0~/src/modules/rlm_policy/evaluate.c freeradius-1.1.0/src/modules/rlm_policy/evaluate.c --- freeradius-1.1.0~/src/modules/rlm_policy/evaluate.c 2005-11-27 11:39:20.000000000 -0500 +++ freeradius-1.1.0/src/modules/rlm_policy/evaluate.c 2005-11-27 11:40:02.000000000 -0500 @@ -943,12 +943,12 @@ case POLICY_LEX_AFTER_TAIL_ASSIGN: case POLICY_LEX_ASSIGN: /* 'union' */ - pairmove(vps, &head); + pairxlatmove(NULL, vps, &head); pairfree(&head); break; case POLICY_LEX_BEFORE_HEAD_ASSIGN: - pairmove(&head, &vps); + pairxlatmove(NULL, &head, &vps); pairfree(vps); *vps = head; break; @@ -1005,14 +1005,14 @@ break; case POLICY_LEX_BEFORE_WHERE_ASSIGN: if (vpprev) { - pairmove(&lvp, &head); + pairxlatmove(NULL, &lvp, &head); pairfree(&head); } else *vps = lvp = head; break; case POLICY_LEX_AFTER_WHERE_ASSIGN: - pairmove(&lvp, &head); + pairxlatmove(NULL, &lvp, &head); pairfree(&head); break; default:/*never reached*/

1 0