- Freeradius-Devel - lists.freeradius.org

Proxy to realm after eap-ttls authantication
by Mesut Ozturk 23 Nov '20

23 Nov '20

Hello, I desperately need your help. I am noob with FreeRadius so please guide me what i am doing wrong. My point is using freeradius as a Proxy. Because we already have a PAP supported Radius, so i want to do eap auth part on freeradius and then Proxy the Access-request to our own Radius. We are trying 802.1x authantication. According to my readings i did below steps : 1 . Edit clients.conf for my mobile devices to Access freeradius client nevotek { ipaddr = 213.74.143.140 secret = testing1234 } 2. add home_server in proxy.conf home_server IAS { ipaddr = 192.168.0.252 port = 1812 type = "auth" secret = "secret" response_window = 20 max_outstanding = 65536 } home_server_pool jack_pool { type = fail-over home_server = IAS } realm nevotek { auth_pool = jack_pool nostirp } 3. edit eap.cof default_eap_type = ttls and in ttls function : ttls { default_eap_type = md5 copy_request_to_tunnel = no use_tunneled_reply = yes proxy_tunneled_request_as_eap = no virtual_server = "proxy-inner-tunnel" } 4. prepare Proxy.config soft link for sites-enabled, added nevotek in proxy-inner-tunnel: server proxy-inner-tunnel { authorize { update control { Proxy-To-Realm := "nevotek" } } authenticate { eap } post-proxy { eap } } 5. disabled "suffix" part in sites-enabled/default But no chance. Also android and IOS devices has different behaviors. Here is the output of IOS device : (2) Received Access-Request Id 216 from 213.74.143.148:19733 to 10.0.0.4:1812 length 311 (2) User-Name = "iosuser2(a)nevotek.com" (2) Chargeable-User-Identity = 0x00 (2) Operator-Name = "1nevotek.com" (2) Location-Capable = Civic-Location (2) Calling-Station-Id = "74-8d-08-b1-f2-17" (2) Called-Station-Id = "58-f3-9c-43-52-a0:Nevotek" (2) NAS-Port = 4 (2) Cisco-AVPair = "audit-session-id=0a0102e1000001205fbba08c" (2) Acct-Session-Id = "5fbba08c/74:8d:08:b1:f2:17/352" (2) NAS-IP-Address = 10.1.2.225 (2) NAS-Identifier = "aa5a6c45-b2c2-436b-90da-0ed2031" (2) Airespace-Wlan-Id = 7 (2) Service-Type = Framed-User (2) Framed-MTU = 1300 (2) NAS-Port-Type = Wireless-802.11 (2) EAP-Message = 0x020300061500 (2) State = 0xca8e79cacb8d6ce3fd1d37ee8f32d170 (2) Message-Authenticator = 0xc7b01c5b471b2eb70578f1dc7ed6e7ea (2) session-state: No cached attributes (2) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default (2) authorize { (2) policy filter_username { (2) if (&User-Name) { (2) if (&User-Name) -> TRUE (2) if (&User-Name) { (2) if (&User-Name =~ / /) { (2) if (&User-Name =~ / /) -> FALSE (2) if (&User-Name =~ /@[^@]*@/ ) { (2) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (2) if (&User-Name =~ /\.\./ ) { (2) if (&User-Name =~ /\.\./ ) -> FALSE (2) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (2) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (2) if (&User-Name =~ /\.$/) { (2) if (&User-Name =~ /\.$/) -> FALSE (2) if (&User-Name =~ /(a)\./) { (2) if (&User-Name =~ /(a)\./) -> FALSE (2) } # if (&User-Name) = notfound (2) } # policy filter_username = notfound (2) [preprocess] = ok (2) [chap] = noop (2) [mschap] = noop (2) [digest] = noop (2) eap: Peer sent EAP Response (code 2) ID 3 length 6 (2) eap: Continuing tunnel setup (2) [eap] = ok (2) } # authorize = ok (2) Found Auth-Type = eap (2) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (2) authenticate { (2) eap: Expiring EAP session with state 0xca8e79cacb8d6ce3 (2) eap: Finished EAP session with state 0xca8e79cacb8d6ce3 (2) eap: Previous EAP request found for state 0xca8e79cacb8d6ce3, released from the list (2) eap: Peer sent packet with method EAP TTLS (21) (2) eap: Calling submodule eap_ttls to process data (2) eap_ttls: Authenticate (2) eap_ttls: Continuing EAP-TLS (2) eap_ttls: Peer ACKed our handshake fragment (2) eap_ttls: [eaptls verify] = request (2) eap_ttls: [eaptls process] = handled (2) eap: Sending EAP Request (code 1) ID 4 length 336 (2) eap: EAP session adding &reply:State = 0xca8e79cac88a6ce3 (2) [eap] = handled (2) } # authenticate = handled (2) Using Post-Auth-Type Challenge (2) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (2) Challenge { ... } # empty sub-section is ignored (2) Sent Access-Challenge Id 216 from 10.0.0.4:1812 to 213.74.143.148:19733 length 0 (2) EAP-Message = 0x01040150158000000528d123b84f84592a0a7ccb12b23ec09a0c025464d3f258d5090bffa282b17870910449329f906380b0b4340ef2b6a1dc73e72d35763148b65bfc0401010038af8b17d95590598994e5ec35c96642e3e8fce291173f61b7e1ca06aa4b749dd3f2bbe12175a964524311069490e0f6 (2) Message-Authenticator = 0x00000000000000000000000000000000 (2) State = 0xca8e79cac88a6ce3fd1d37ee8f32d170 (2) Finished request And here is the output of Android device : (2) Received Access-Request Id 59 from 213.74.143.148:38031 to 10.0.0.4:1812 length 312 (2) User-Name = "anonymous(a)nevotek.com" (2) Chargeable-User-Identity = 0x00 (2) Operator-Name = "1nevotek.com" (2) Location-Capable = Civic-Location (2) Calling-Station-Id = "04-b1-a1-53-4d-1e" (2) Called-Station-Id = "58-f3-9c-43-52-a0:Nevotek" (2) NAS-Port = 4 (2) Cisco-AVPair = "audit-session-id=0a0102e1000001275fbbbb17" (2) Acct-Session-Id = "5fbbbb17/04:b1:a1:53:4d:1e/359" (2) NAS-IP-Address = 10.1.2.225 (2) NAS-Identifier = "aa5a6c45-b2c2-436b-90da-0ed2031" (2) Airespace-Wlan-Id = 7 (2) Service-Type = Framed-User (2) Framed-MTU = 1300 (2) NAS-Port-Type = Wireless-802.11 (2) EAP-Message = 0x020300061500 (2) State = 0xd875f9c9d976ec270910ae6415adb475 (2) Message-Authenticator = 0xe92ebb9e5e7641c5515a25ae2ee50929 (2) session-state: No cached attributes (2) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default (2) authorize { (2) policy filter_username { (2) if (&User-Name) { (2) if (&User-Name) -> TRUE (2) if (&User-Name) { (2) if (&User-Name =~ / /) { (2) if (&User-Name =~ / /) -> FALSE (2) if (&User-Name =~ /@[^@]*@/ ) { (2) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (2) if (&User-Name =~ /\.\./ ) { (2) if (&User-Name =~ /\.\./ ) -> FALSE (2) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (2) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (2) if (&User-Name =~ /\.$/) { (2) if (&User-Name =~ /\.$/) -> FALSE (2) if (&User-Name =~ /(a)\./) { (2) if (&User-Name =~ /(a)\./) -> FALSE (2) } # if (&User-Name) = notfound (2) } # policy filter_username = notfound (2) [preprocess] = ok (2) [chap] = noop (2) [mschap] = noop (2) [digest] = noop (2) eap: Peer sent EAP Response (code 2) ID 3 length 6 (2) eap: Continuing tunnel setup (2) [eap] = ok (2) } # authorize = ok (2) Found Auth-Type = eap (2) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (2) authenticate { (2) eap: Expiring EAP session with state 0xd875f9c9d976ec27 (2) eap: Finished EAP session with state 0xd875f9c9d976ec27 (2) eap: Previous EAP request found for state 0xd875f9c9d976ec27, released from the list (2) eap: Peer sent packet with method EAP TTLS (21) (2) eap: Calling submodule eap_ttls to process data (2) eap_ttls: Authenticate (2) eap_ttls: Continuing EAP-TLS (2) eap_ttls: Peer ACKed our handshake fragment (2) eap_ttls: [eaptls verify] = request (2) eap_ttls: [eaptls process] = handled (2) eap: Sending EAP Request (code 1) ID 4 length 336 (2) eap: EAP session adding &reply:State = 0xd875f9c9da71ec27 (2) [eap] = handled (2) } # authenticate = handled (2) Using Post-Auth-Type Challenge (2) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (2) Challenge { ... } # empty sub-section is ignored (2) Sent Access-Challenge Id 59 from 10.0.0.4:1812 to 213.74.143.148:38031 length 0 (2) EAP-Message = 0x01040150158000000528a2e03207e6a1163699a1cff7af74692beaafff15b2a3033c4d0238dd7014db04f7f40d669da91832dd39bbdbfca1bdb456f26f4a981b5a820108040100b7a20cf24aad9d35b94575b849f9e8ef528d1b13e7caea59f3cc578845763a601b7fceb8ffda9d989423730b5ea4c0f3 (2) Message-Authenticator = 0x00000000000000000000000000000000 (2) State = 0xd875f9c9da71ec270910ae6415adb475 (2) Finished request Waking up in 4.3 seconds. (3) Received Access-Request Id 60 from 213.74.143.148:38031 to 10.0.0.4:1812 length 319 (3) User-Name = "anonymous(a)nevotek.com" (3) Chargeable-User-Identity = 0x00 (3) Operator-Name = "1nevotek.com" (3) Location-Capable = Civic-Location (3) Calling-Station-Id = "04-b1-a1-53-4d-1e" (3) Called-Station-Id = "58-f3-9c-43-52-a0:Nevotek" (3) NAS-Port = 4 (3) Cisco-AVPair = "audit-session-id=0a0102e1000001275fbbbb17" (3) Acct-Session-Id = "5fbbbb17/04:b1:a1:53:4d:1e/359" (3) NAS-IP-Address = 10.1.2.225 (3) NAS-Identifier = "aa5a6c45-b2c2-436b-90da-0ed2031" (3) Airespace-Wlan-Id = 7 (3) Service-Type = Framed-User (3) Framed-MTU = 1300 (3) NAS-Port-Type = Wireless-802.11 (3) EAP-Message = 0x0204000d150015030300020230 (3) State = 0xd875f9c9da71ec270910ae6415adb475 (3) Message-Authenticator = 0xbd27e9cbdb496b0f8072580915cabc5d (3) session-state: No cached attributes (3) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default (3) authorize { (3) policy filter_username { (3) if (&User-Name) { (3) if (&User-Name) -> TRUE (3) if (&User-Name) { (3) if (&User-Name =~ / /) { (3) if (&User-Name =~ / /) -> FALSE (3) if (&User-Name =~ /@[^@]*@/ ) { (3) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (3) if (&User-Name =~ /\.\./ ) { (3) if (&User-Name =~ /\.\./ ) -> FALSE (3) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (3) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (3) if (&User-Name =~ /\.$/) { (3) if (&User-Name =~ /\.$/) -> FALSE (3) if (&User-Name =~ /(a)\./) { (3) if (&User-Name =~ /(a)\./) -> FALSE (3) } # if (&User-Name) = notfound (3) } # policy filter_username = notfound (3) [preprocess] = ok (3) [chap] = noop (3) [mschap] = noop (3) [digest] = noop (3) eap: Peer sent EAP Response (code 2) ID 4 length 13 (3) eap: Continuing tunnel setup (3) [eap] = ok (3) } # authorize = ok (3) Found Auth-Type = eap (3) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (3) authenticate { (3) eap: Expiring EAP session with state 0xd875f9c9da71ec27 (3) eap: Finished EAP session with state 0xd875f9c9da71ec27 (3) eap: Previous EAP request found for state 0xd875f9c9da71ec27, released from the list (3) eap: Peer sent packet with method EAP TTLS (21) (3) eap: Calling submodule eap_ttls to process data (3) eap_ttls: Authenticate (3) eap_ttls: Continuing EAP-TLS (3) eap_ttls: [eaptls verify] = ok (3) eap_ttls: Done initial handshake (3) eap_ttls: <<< recv TLS 1.2 [length 0002] (3) eap_ttls: ERROR: TLS Alert read:fatal:unknown CA (3) eap_ttls: TLS_accept: Need to read more data: error (3) eap_ttls: ERROR: Failed in __FUNCTION__ (SSL_read): error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca (3) eap_ttls: In SSL Handshake Phase (3) eap_ttls: In SSL Accept mode (3) eap_ttls: SSL Application Data (3) eap_ttls: ERROR: TLS failed during operation (3) eap_ttls: ERROR: [eaptls process] = fail (3) eap: ERROR: Failed continuing EAP TTLS (21) session. EAP sub-module failed (3) eap: Sending EAP Failure (code 4) ID 4 length 4 (3) eap: Failed in EAP select (3) [eap] = invalid (3) } # authenticate = invalid (3) Failed to authenticate the user (3) Using Post-Auth-Type Reject (3) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (3) Post-Auth-Type REJECT { (3) attr_filter.access_reject: EXPAND %{User-Name} (3) attr_filter.access_reject: --> anonymous(a)nevotek.com (3) attr_filter.access_reject: Matched entry DEFAULT at line 11 (3) [attr_filter.access_reject] = updated (3) [eap] = noop (3) policy remove_reply_message_if_eap { (3) if (&reply:EAP-Message && &reply:Reply-Message) { (3) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (3) else { (3) [noop] = noop (3) } # else = noop (3) } # policy remove_reply_message_if_eap = noop (3) } # Post-Auth-Type REJECT = updated (3) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (3) Sending delayed response (3) Sent Access-Reject Id 60 from 10.0.0.4:1812 to 213.74.143.148:38031 length 44 (3) EAP-Message = 0x04040004 (3) Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 3.1 seconds. (0) Cleaning up request packet ID 57 with timestamp +25 Waking up in 0.2 seconds. (1) Cleaning up request packet ID 58 with timestamp +26 Waking up in 0.3 seconds. (2) Cleaning up request packet ID 59 with timestamp +26 Waking up in 0.2 seconds. (3) Cleaning up request packet ID 60 with timestamp +26 Regards. [http://www.nevotek.com/nevotekmail/logo.png] Mesut Ozturk R&D Senior Developer P: +902122867576 E: mesut(a)nevotek.com F: +902122867476 W: www.nevotek.com [http://www.nevotek.com/nevotekmail/maps-icon.png] Santa Clara-CA, USA<https://www.google.com/maps/place/5201+Great+America+Pkwy+%23320,+Santa+Cla…> [http://www.nevotek.com/nevotekmail/maps-icon.png] Istanbul, TURKEY<https://www.google.com/maps/search/teknokent,+Istanbul,+Turkey/@41.106333,2…> [http://www.nevotek.com/nevotekmail/maps-icon.png] Dubai, UAE<https://www.google.com/maps/place/Internet+City,+Building+%2314+-+Dubai+-+U…> [www.nevotek.com]<www.nevotek.com>

1 0

[master] function fr_dhcpv4_encode is badly broken
by Chaigneau, Nicolas 06 Nov '20

06 Nov '20

Likely since this commit: https://github.com/FreeRADIUS/freeradius-server/commit/3f3afcee211407fb2931… For example, using dhcpclient: echo "DHCP-Client-Hardware-Address=44:48:42:66:00:5a, DHCP-Transaction-Id=42, DHCP-Gateway-IP-Address=10.11.19.3, Packet-Src-Port=67, Packet-Src-IP-Address=10.11.19.3" | dhcpclient 10.11.19.28 discover Result before (it's working, although the trace looks a bit odd: some things are displayed twice...): Sending DHCP-Discover Id 0000002a from 10.11.19.3:67 to 10.11.19.28:67 length 300 DHCP-Client-Hardware-Address = 44:48:42:66:00:5a DHCP-Transaction-Id = 42 DHCP-Gateway-IP-Address = 10.11.19.3 Packet-Src-Port = 67 Packet-Src-IP-Address = 10.11.19.3 DHCP-Opcode = Client-Message DHCP-Hardware-Type = Ethernet DHCP-Hardware-Address-Length = 6 DHCP-Hop-Count = 0 DHCP-Transaction-Id = 42 DHCP-Number-of-Seconds = 0 DHCP-Flags = 0 DHCP-Client-IP-Address = 0.0.0.0 DHCP-Your-IP-Address = 0.0.0.0 DHCP-Server-IP-Address = 0.0.0.0 DHCP-Gateway-IP-Address = 10.11.19.3 DHCP-Client-Hardware-Address = 44:48:42:66:00:5a DHCP-Message-Type = DHCP-Discover DHCP-Network-Subnet = 10.11.19.3/32 Received DHCP-Offer Id 0000002a from 10.11.19.28:67 to 10.11.19.3:67 via eth1 length 306 (...) Now (KO): Some fields are wrong, for example: the first "DHCP-Gateway-IP-Address" is the value provided, but the second is reversed. There is a "DHCP-Server-Host-Name", "DHCP-Message-Type" is missing, etc. Sending DHCP-Discover Id 0000002a from 10.11.19.3:67 to 10.11.19.28:67 length 300 DHCP-Client-Hardware-Address = 44:48:42:66:00:5a DHCP-Transaction-Id = 42 DHCP-Gateway-IP-Address = 10.11.19.3 Packet-Src-Port = 67 Packet-Src-IP-Address = 10.11.19.3 DHCP-Opcode = Client-Message DHCP-Hardware-Type = 0 DHCP-Hardware-Address-Length = 0 DHCP-Hop-Count = 0 DHCP-Transaction-Id = 42 DHCP-Number-of-Seconds = 0 DHCP-Flags = 0 DHCP-Client-IP-Address = 0.0.0.0 DHCP-Your-IP-Address = 0.0.0.0 DHCP-Server-IP-Address = 0.0.0.0 DHCP-Gateway-IP-Address = 3.19.11.10 DHCP-Server-Host-Name = "\001\006DHBf" DHCP-Network-Subnet = 3.19.11.10/32 Regards, Nicolas. This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

2 6

[master] function fr_pair_list_afrom_file seems broken right now
by Chaigneau, Nicolas 02 Nov '20

02 Nov '20

It returns with only the first value pair in the output vps list (checked with dhcpclient). I think this commit broke it: https://github.com/FreeRADIUS/freeradius-server/commit/9fe44ec5f9655d84d86c… I tried to rebuild with the previous version of this function, it works fine again. Regards, Nicolas. This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

2 4

[master] questions about recent changes in xlat
by Chaigneau, Nicolas 26 Oct '20

26 Oct '20

Hello, A couple of recent changes I've noticed in FreeRADIUS xlat framework: 1) "%%" is no longer transformed to "%" (it remains %%). Function xlat_eval_one_letter has a case for '%' but it seems it's not called anymore. In function xlat_sync_eval which should call xlat_eval_one_letter, I see that node->type is 1 (XLAT_LITERAL) instead of 2 (XLAT_ONE_LETTER). Is this change intended ? According to the documentation it should work: https://github.com/FreeRADIUS/freeradius-server/blob/master/doc/antora/modu… 2) Using a form of xlat functions with no parameter is no longer working. For example: %{myxlat} This used to work (not too long ago). This is useful to me, although I can still get the same result with: %{myxlat:} But this is a bit ugly though... Do you think we could get this to work again without the colon ? Regards, Nicolas. This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

3 12

[Auto-Reply] I'm driving right now - I'll get bac...
by 4794094048＠vtext.com 26 Oct '20

26 Oct '20

[Auto-Reply] I'm driving right now - I'll get back to you later.

1 0

Your Amazon.com Inquiry
by Amazon.com 24 Oct '20

24 Oct '20

Thank you for writing to Amazon.com to bring this to our attention. Your message has been forwarded to our security department, and we will investigate the situation. Please note that you may not receive a personal response. In all likelihood, the message you received was not sent to you by Amazon.com. We strongly advise that you *not* send any information about yourself back to this individual (especially your credit card number or any personal information). If you have already submitted any personal information to this person via e-mail or on a potentially fraudulent web site, you may wish to contact Customer Service for assistance. To send an e-mail to Customer Service, please visit https://www.amazon.com/contact-us In the future, if you are ever uncertain of the validity of an e-mail, even from us, don't click on any supplied links--instead, type our web site address "https://www.amazon.com" directly into your browser and follow the regular links to Your Account. Many unscrupulous spoofers mislead consumers by displaying one URL while taking the visitor to another. By typing in a well-known address you can avoid this trick. Also, please be assured that Amazon.com is not in the business of selling customer information. Many spammers and spoofers use programs that randomly generate e-mail addresses, in the hope that some percentage of these randomly-generated addresses will actually exist. If you are trying to contact us about something other than a spoofed e-mail message, please contact Customer Service for assistance. To send an e-mail to Customer Service, please visit https://www.amazon.com/contact-us/ If you encounter any other uses of the Amazon.com name that you think may be fraudulent, please do not hesitate to contact us again. Thank you again for taking the time to notify us of this situation. Sincerely, Amazon.com https://www.amazon.com/

1 0

Your Amazon.com Inquiry
by Amazon.com 24 Oct '20

24 Oct '20

Thank you for writing to Amazon.com to bring this to our attention. Your message has been forwarded to our security department, and we will investigate the situation. Please note that you may not receive a personal response. In all likelihood, the message you received was not sent to you by Amazon.com. We strongly advise that you *not* send any information about yourself back to this individual (especially your credit card number or any personal information). If you have already submitted any personal information to this person via e-mail or on a potentially fraudulent web site, you may wish to contact Customer Service for assistance. To send an e-mail to Customer Service, please visit https://www.amazon.com/contact-us In the future, if you are ever uncertain of the validity of an e-mail, even from us, don't click on any supplied links--instead, type our web site address "https://www.amazon.com" directly into your browser and follow the regular links to Your Account. Many unscrupulous spoofers mislead consumers by displaying one URL while taking the visitor to another. By typing in a well-known address you can avoid this trick. Also, please be assured that Amazon.com is not in the business of selling customer information. Many spammers and spoofers use programs that randomly generate e-mail addresses, in the hope that some percentage of these randomly-generated addresses will actually exist. If you are trying to contact us about something other than a spoofed e-mail message, please contact Customer Service for assistance. To send an e-mail to Customer Service, please visit https://www.amazon.com/contact-us/ If you encounter any other uses of the Amazon.com name that you think may be fraudulent, please do not hesitate to contact us again. Thank you again for taking the time to notify us of this situation. Sincerely, Amazon.com https://www.amazon.com/

1 0

Juno Auto Response. Re: [master] questions about recent changes in xlat
by higgy.towffer＠juno.com 24 Oct '20

24 Oct '20

The Gardener is a group of ALPA loyal pilots who have taken on the responsibility of protecting the profession from ALPA leadership that has gone astray. Years ago the group protected the pilots as an extended hand of the MEC, but unfortunately since we've had a member of our pilot group sitting on the United Airlines Board of Directors the company has used this as a tool against us, and there hasn't been one master chairman who hasn't been influenced by the position. The gardener group has grown in recent months and represents both LUAL & LCAL pilots, most have served on past MEC's or volunteered for years, but all have always been staunch unionists. there are about 30+ gardeners. Most of our information comes from the current MEC members serving. As members, we pay the dues dollars and we have the right to speak out when Master Chairman or puppet MEC members decide our future to the detriment of the profession. This is our union; despite the association created by-laws that keep the dues paying members from really being involved. We usually do not respond to emails or comment on our own opinion, it is for you to decide whether you are going to sit on your hands, or take a stand. But recently, we understand the emotion revolving around this corona virus and what might happen to us. You have a choice to ask to be removed from our email list - we always comply. Knowledge is truth, and we will always give you updated information that helps you prepare, because this master chairman isn't going to do it for you. Notify your representatives that you are done with concessionary negotiations, and further that you are done with outsourcing our domestic, and soon international operation. Preserve the profession! Ya'all take care now The Gardener (s)

1 0

Commit report for master branch
by announce＠freeradius.org 25 Jul '20

25 Jul '20

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8cro4ACgkQ/6TVgp+2 18prEg/+NJkMqp23zZsVf1PcDAZXR8i3/HyL6fTNiOH+5HLl2PZ3uvYwlzWXl6XI EC1F4qxJkSgKGugpEqR9pa3GavFHoDYiThVrJX3dlbahor2Xs2C0IFCRBRX3YnW8 /40io4t91AumSwdoFpMc8SAaVeOsCkT7decP2VEVpPizC5i2BACG32xhGMEo7iBo PKi6F2oOYjejlrpHB97pE67YCBDY9iuREune7kHXllQL5DWcQmUXW/VftvfT6Drd LhzWsvAmL8Xquh2XBJu7AZrQlECxIMyPUo+jm6e1jqTOrKuWzNt7kuphebHxTcqd rOw1fhKfliqhP1GabqUIfFaaHiPiss+BJWEqkWXFDig41FJpcEotvywSoF4+EkXY qIsH3HnfleImlrIGFO+ANx0WvxXZa5WMbiaofOPViOIdQGe8mqO9FsyxtmD51+7A V/mJd1faEHrza7qVrGU/YqQj6IUTi9KTSowABOPqjIw3bIM8lvOTwIMRWUlS81O1 QTM9KG+DfHJYHPg1YsbNRlcXGTWBIY9DSc+jZbmmpl+BejxwCBo0tzhYwBy+QJtc q+gh0GkO8FQKXqGkZ5LuyHcUgXR8u1vB/qSl71kEPTclcPxa2nr2ezDrgHI3udSp W+8qlYQTzDlg5N1I48bRKiDkw0s9gkbsJW9VkCrOddHvOebDQl4= =NAtm -----END PGP SIGNATURE----- sbuff: I suppose we should use standard names Arran Cudbard-Bell@2020-07-25T22:13:34Z Files modified: * src/lib/util/sbuff.c * src/lib/util/sbuff.h * src/lib/util/sbuff_tests.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b766b63662fca010299e… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8crbUACgkQ/6TVgp+2 18qEXA/+O09bV3P0Rf15bM0ykKyPzGHfMi+/K/dJgWNPq/53I5wzeLwERXLM0SJC BcIiPDSoDzsFSZaeR3HLgqwxdnyR2LHJKDEtkxz1Rw3WiHwMDFjzFrsCcDEWnGl1 prM90i4yOzLqvWR8V41oVQEdkW6TmjINgjYB30rsOgUQYpsp3iSp4SYRRoERv3zD t4Xqk4UwLwz4c7ZUlpKwBLhxAmDIya2iwoH7MnxTg/22SIrHUhzh2+EiOCrWWzou Fy96VEdoZE0oHFXhZbQ/yVJdTPWI7c3OiSKJb3OAl5J0fxjwwKvpKfSQSK0SobMO dt+cgoRYb5kIzgq34ifTXpaavwf8euNkrQhSR8v9gfVUZFEsgOOmnGOAYbIoWoPP erZB0/sfi6GPJqzBJWFG1IQyBkg7z8qtDCEbghe354a/nC8k6nxPilURzfAy2bq/ WwcMU0pKwgTBCTGVTSIeWC0V5v/DkcEcuzlfFoIslsHe5qD+/JGaXQPH82S0Kayl sGsJtLCckqXqAkfhKRL+BdMtsNrX0JMxTGs4K4c4VXW+uQV4/mCiP2tkDgMx1bWk FgvkGAtvnGvkwXEAOwpsF8qPfhHYA8/wU9bdF2PoqAf9UNs4DLRroB56t0kZGf2h 6KoqSnK8NNWQ0o1NXGsDj3Sy4M2F9XFCAMFo0nDkMYhscnfd0/Q= =0Oss -----END PGP SIGNATURE----- sbuff: Add function to de-escape strings when copying them out of an sbuff This makes dealing with config strings easier Arran Cudbard-Bell@2020-07-25T22:09:57Z Files modified: * src/lib/util/sbuff.c * src/lib/util/sbuff.h * src/lib/util/sbuff_tests.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3ea67c939f40f11c7c0d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8crZMACgkQ/6TVgp+2 18oVXQ/+NEZgDTWgnu0hQbQgsXlBEwr4QB9R/zvZbSo8T16T2lkVzahDxwu8/DLz lVcnWCG2WGJdqy0gfY67y1hCHkHhB0XYX+5S/zKNbT3Dlip0O3x7ElsKnngoPa8K b/aArLxkx1fD14hhiDc1C8BEIP7DP7lpvNbDnZdJqeFA0r51pPXKB1kSkAuk0++Q zUYH/BveCtistWtmqSQSjyIxzzVV7oyxcC/T9uGTVOzxHLvzHQ9heF9UjEvzQUoq kPMXDBWtBxd8upWLSB90hBPFblr/wJjXaIvyhQYur713Ss7hRKGp1M+FPLMlKMAz yolzeJRysc9LqmncHjk/o51PdCw7flto5YoFuumxMnY20A6nYr+I8FPK4mNk7BaR vFmua7K8wTvmyFyNY8p7TUaaYr3gZ8Ero3FG/fp1/pyDnfMbVxmyP5Y5SnfbDjDo AaX/cMsHnGBGK7L07MYsnUp/i6u4CTrg4af7hkZg/0P3nrAPbeS3aUUdXSrK3jR0 3IuELeMhVRuTg+3LB2Xi6E3CZ6Aa9QoM5Nvu90L8Wx3kx25sjAhsLFP48dOIIQEn 3RcNcqtwKa6C6xp/LqVjSL2NsIU1CCFxB0xC03fY3auNAseXPjdz7Pno3gC9Q/4/ ZgfDsKLAGoe6/tdGXtETwEIYe+5/yrD32PC84LOt8E0cu+esXPQ= =Mmmv -----END PGP SIGNATURE----- sbuff: Protect against errant copies Arran Cudbard-Bell@2020-07-25T22:09:23Z Files modified: * src/lib/util/sbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/308be7957dc43d35d62d… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8cpWcACgkQ/6TVgp+2 18plCg//Znx9M8vTz+cCpD5aZUBEzAY7RZYLJGR4FwkjDwmpL/jz8wyq1DNLNYUh KTO8hkqdRaH30SgG4k1u63Jy+BARlTg1hypDOpKEZ90KWfO47M/COnGpNIeFdn2g rRTIzTJO3YJ/wSH6yZnI6U+KNqyrHt6kDbp6lB1LH/o9fyG+sIr+6fxYo50N494Y mkMK4dq10kEWEviz9AFur7LSzRPR0ySCjohomraYwSIrFFi/W6KeJUIwfg6g/7aQ Wr5KUZUXy7rvokPVtZ9AdXrPoNn+pXCDyIOxRoQqrfytzLMcOF82g/H7z0sDzVWp TZF1ap3H/narbgQ+75i9pcU2A02xBc9iR8YGEeRZWZY/IvVRXIMGyVQuMqUZt3Q5 TkdG5hYylaLnW8qmWxD/ekLU4jffunLp7w2zWlBXmMm3XCSRMmQuMeddEf6aq3Is 8ZPPlzoc+QsYQnovfngad2WY4SnqHbI0+t8AvwDWO7yRH1CaLW2YCyFxqjDA87Ia vWQU4WwXboD7bWjFU8QTtkQRfsmznZMSDJU9mcWw9IufbjdgsA9aiVxHxkM9+Q2W c4fzTga73EJKpdUs+JvZS4QJ3UZFQK/iQIPAsa4aecKorJXvT18gQesdrgaaFEGR +pTtTAIlGR6T053GrIvrsEKHOkwtiD0V5lm5cCHhne/pXKYAmFI= =Jb0Y -----END PGP SIGNATURE----- sbuff: Verify length constrained functions terminate output on zero length input Arran Cudbard-Bell@2020-07-25T21:34:31Z Files modified: * src/lib/util/sbuff.c * src/lib/util/sbuff.h * src/lib/util/sbuff_tests.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/04d73777f2a330ca87bc… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8cpNYACgkQ/6TVgp+2 18qM4Q/+PWpl2aoiHXUaU3zhzd4lPjt6gfj2W+FzeULrD3su11mnDF+o0MtpTjB0 /qyIvToyEO1bmkIM2/ljY6EATjvCai2LEhzQ0TvN1QxzNi9L2KssuG1F839y2UQs d/+Z2qJnK0Ghgt5cBnFBmP71LjvkkxQ98KMpuraQ4eseAt8xVUrB5Hm6ILwzJ5KC o8fuYFtAKhfwPZE98msrTNgaqW9eIKzGKuxbJt3cOH42rMYSDK4V+8W0ftjCcdIw JOYyC05QUfrPvwd6BNT7F6IZWspTpCaQFs7bOcYswSTGxnBzECr1hJNsRFaWxAf5 G7ORbUa5Am1+s+j/yE6UFo7f/azlsYlX66dPwVzB5lA8fQaFkGIaucIkKHZ7sfX2 1rnYJg/sLXdWHfYl9BeKv5gdv+YyJmSmBnSoirQO7iAgGWf2Rs+USQXHcax3/6qy lEBAbK70zYkRdzfIycbMqDBVGhQVFUNmdW0P/yvNEv9t3ykhmxhMlXKRkMKfRDSW aOavykEXAzUsVi1JvsiOQ/EtqqIwnnicRzPMfW6N8+uO85dnEvtys+KTIPORQnjM vfp8VSyXDY11w8I8Cd0XK8tOWgx2MHY+GC7Dxd6LwEJiJ5x2gVgZRrq7goKHtn08 r8Id2jD8diYlfgtkKz3occ77/H1sQK5mH157LRyZyWZzkvpimOE= =Cj+4 -----END PGP SIGNATURE----- sbuff: Add a char class for hex chars Arran Cudbard-Bell@2020-07-25T21:32:06Z Files modified: * src/lib/util/sbuff.c * src/lib/util/sbuff.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fcc51936f9ad274369d7… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8bsIQACgkQ/6TVgp+2 18ogPRAApJ9DsMHb9ZOxUdC74Vf5BYxDm51NBnFil75y9PHGMhAw2HMcm/8VFPbO rBD4H/wa/1OzxalNKN3fJH/eDjMI228e/zT1pTMp8aS+jxR+kR+GT0pytGe9BRR6 QSbSm7c7gbQ0d8VYKHsSJDSkBePZjBy5OGAJX8Lr2emTwpQ33SCy56RQEpkvH7Ri WDbrAm2+WVxvt/gpa+CCms2Dsv0WddgmWTuNgeCSM5Q6+VuZL7BxxSViJvJdN5FL IIeY+QQa2H+A0KG/X+u95U2MsJSaW9Uz/ARArBb5a8d/v+jBiA6tcRTudDTM/j+u 4barlanBkM2Y/K230F9msnWuZ5QkKOJoSRfHzjXQIG57ZtqsnX0ouDEeuYVBy4l7 3tuUbByvMR1S3dYXl5O+ZRvKohCNYn2SO8F+KNW4BshGnEk4Kut+TGkRs08xHSt2 59QDAQdj1OPJhOrjz40NzEf4SIwruHJN9a1ii6up9VMJ+oze1yB0UuiVkkiRDDSp otbdjiHQWhpwhYFTi99YnUoasRFfQUOcMFsDtTE5chxWFbhmBuMrHyKv0A3kx7en ogYkUXivBhsPmiA6AXNZmdy0IukdCSBug6aUjWOdfAoLDtg/NppdUms4ctxddiC2 79Dba3TUqR0nsNenYh7iC1SHkoYPIXVq7zwC4NxYIhVRudGvZHM= =1fwh -----END PGP SIGNATURE----- sbuff: no_trailing should only fail if the trailing char is a digit... Arran Cudbard-Bell@2020-07-25T04:09:40Z Files modified: * src/lib/util/sbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9b74f6cef457f83b1fcb… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8br4UACgkQ/6TVgp+2 18oICw/7BArA5B9KVEukwr48AIkNTX9l+mdoOSTYBe+QO1SLXisUt28LcN02svr9 sdUdVcaHxsHI9TlcKQr2HtxqnTpKY5IzFoX3Ut+JEEwr87nk9u/icHAY3neJIJxz S3woP3GlTNL0OyxnqCthDxukShT7MV9Jve3H/YDQTsxzHX9oHoagDVcxY92ntNpA 4u17fU6POs7Sac3qZrfHL07HsRddgggFYzxJDMMVqPl1sWRZ6KKYDLGsBQdgbxav DsJ/ZiOX8PqxSo7qTeXg3qQW4Twp7/71W00y88GfGWaAu+oKDcHppyDoZ8EQylou wVmdiDm3WSTOG0Qvbtfv0fcM/3WBAvhRnf3tgIWyjll04sss5T/mOmIG/Z2Xdzix JzVM3qV+1wOkNNztk9Jlgjfy0Vqy3fvKK723zFf/RyNAxvp2sFlkIcJzY2RRu/sW pR7ero7/1Rd8LfNQ8V65G9B5B5Z/ENIHh8jWX20XRNyeKRCk9s7bJXYezaO+vNnp wCOPH78/yt0Yp/bZU0rOnUDIX98NmGo9ae5XtuM/p4vlTT76TWqOm+8WiXF/Tp23 9xBvI4VtPWXgNY5jD8RacJQimy5oVS/glkPyCmo5xfElivXQHHGQXnVE9Bpai0l2 BxEueCcseEqlmAx7/tFMCumYpZo33MY4XcRqEVkEOKWk8T4EcrA= =wKz5 -----END PGP SIGNATURE----- sbuff: Avoid useless loop iteration in fr_sbuff_out_* Arran Cudbard-Bell@2020-07-25T04:05:25Z Files modified: * src/lib/util/sbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00324869c3b6214ef2db… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8br3MACgkQ/6TVgp+2 18rylw//Rnd8g5ziYqarp8n3owsT04xWiyfD252h2NtSL5jMQ8VA6MPbS8WzsLlu xFexayPmMOQf64SQ9DWjN90p97ZbzEr4Y4b7wn43LWumKE9PFWHbKhu0qV0wsP6A wPLk1z7DzdC3CZqE01RtT+AzZWs43XlZzHwGYpxhycdtqnkQFuJ69gv3+7UGGLYv C7YC92lNzrHLEuFrIM4Bwiz3b260i1WabxHLZhhVB/p6SYXNjQ96xSqIW7cp9xtf FieiPNU8hk/pzSfsQ/GC5nn0YWBe78L6BzRNT4uVlz2/ak9MDxyRgbmUO9cSJzoq ZXNhlTPO9MNot1ipl6XJZEDohub7WuAOYbuAN8Wsd9NznHrI8Kssd9FbLAQLjGTL OVEQKTezg6UU9AY/AEyUVgsm1u6TRweJG9kqp5mbzSqpAEu/toTk5NIDMcH0t2c0 Yda/QFU+O6RKcPX+1qJeFMrG6R4XJGdn2eKN4V7B6iiAdy9BzRvACXxpQV1FYYe6 kTW7s1m0VN6vbeggkXxMd8TE1OnxhvXEUO6KzwEIbEGs3US1H3XZbIKuMGF4rewp uCsR1OaDmokHSTQ/ojBPXXECiFM327moCBuhLhyMIG7cMtpAuOUtkZV6rML77RKj gupQvrhUWxKdmlYYaIkHOGzUVfkdnySOJNJwXj3YOm6E/dSRHHU= =XwYc -----END PGP SIGNATURE----- sbuff: Fix trailing char detection and uint8_t parsing Arran Cudbard-Bell@2020-07-25T04:05:07Z Files modified: * src/lib/util/sbuff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5b8629a96cb8fc74dc96… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8bh10ACgkQ/6TVgp+2 18pvvw//TH1rh4wHk8v4/hnf42JUubppaEzg3gCyJIiM+A0djMDGLQAbK8SpBFa0 syzUCV4hiINUXOgGJ4FtJiszNlN4zF71EevTQJS7gJyxGlel3MX6wf35qw7IlY2F eFUbewQa1jaSmQWe8Aha7Vx5pw+cZCSFPRqtC8/q0ZqAzCWgvIreRzs9sh0AkBw8 SSIb+g+d6r9psdhL5hJRGan9QDo74sV9s7hW/epegtfePHqO4eF1RTd2oVxEGqZt IK7IRNmLpmBcfU26r2E7qKdveaqYL3BNLXwfC+Qy6LqERYTiwjcbn5LH5KRjd1s8 ufcl1U3xqXqRQfT9EHBlX0JqRQYakQsQBtdgyVKzzZlk/aDGFN2F9THzyGkGGayL +RSn9UfEEOT7eR3GyO5at8pyfbiajAkQh/F58ISKjELlHHA79T3obw6t9SaK5g5Z 3K+e0OgFvnWGsgY5EbD9SKIs9HdrMQekllBXmp5cQRGJ0gVticBNJaq+bymMN5pH 2UtvZpP19NhdpXLgeG53MpSnOj9RezNf8cHSIs2DfZprakbvi88wAo9lO0SJl89a mHcXSYNBJzBJKjjvhQe9PGjmn+rXcpcoJBru6VE8xy5WB0ymoGJBC6gkL4H6VCyc qLupktteiiEo5E4Lv5kEkW3gdr+ZEbXGsmD20JJixldV4qikwhs= =9iEh -----END PGP SIGNATURE----- sbuff: Add escapes to fr_sbuff_out_bstrncpy_until Arran Cudbard-Bell@2020-07-25T01:14:05Z Files modified: * src/lib/util/sbuff.c * src/lib/util/sbuff.h * src/lib/util/sbuff_tests.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c83a772d2655922d09f8… ====== gpgsig -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEE6VbEmJeQrF8361hu/6TVgp+218oFAl8bgAMACgkQ/6TVgp+2 18pqfA/+IRl0QgcoNuScuiWGNUcO6JEIURRAA40uDJxjSTsc7jERZL+UyLtnKqHn aTG4/0llS6AWmuF3NCxyT5aeeZH5vE+3nmVfJQI0XKOKOjegNMzZRxPGzgsKFNGi RBpCsXl7oY1AqlzcusXWOqgBtFXoE9gpHfUcgioAlUEz/mwYIwNF15t+sPiAH6DL CeQVIup1LOqJolhh+zsYkKQdnIOWuaePv6FYPZ9p6JH5+HCRiRDzlqWd1NRhc7l/ de5vdUbKsYc7ExBusQzbGAZSh1jHaZjbv4a2nqc4NY53CRydHh2jy7nf3BKP+KJa EqLPjymEqxnO9Hbmju5n4FCB/cABTwVgpw7lSxOoasbjMSN/paT2iZr8amh/AgCq rBHho1a+K6YA3qG761NI6iwTNwsQMW4HOg5xTKJPS+hIoA7tWzHBR7t1DfDm9dTv 3wvDsPKQd2bP/1GZChAzloxj/ldy1LkJoOQD0xGODh1IOeD3uYCbxDIm0+ob72tR S5EDE2xTZQdHtGUsnMD7CPSxz02yeOz5nh4UfrR7x8+/6tHGXDLuHGvNL9rLKPZn fSEIBUtlH1LCEBLLm9CgiYTkh1o28m8VhLz9q+8TF5NpzfiO0xgjQ9rC6rhsPykc 0KXK3UCVFNXxEa8511vPUSyoSyO9ru7Kw0QEmD63p3z6pzGekhk= =4/yl -----END PGP SIGNATURE----- sbuff: Add some standard char classes add support for escapes in fr_sbuff_adv_until Arran Cudbard-Bell@2020-07-25T00:42:43Z Files modified: * src/lib/util/sbuff.c * src/lib/util/sbuff.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/20026784437417332798… ====== -- This commit summary was generated @2020-07-26T00:00:03Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0

Commit report for v3.0.x branch
by announce＠freeradius.org 24 Jul '20

24 Jul '20

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- wsBcBAABCAAQBQJfGvcGCRBK7hj4Ov3rIwAAdHIIAIN64LvFmLRGMw1TzGV52Rpv bb3KruCvsjkM2F31EUKWco7DIAUm7rf42T/Tvcg2u/e/cDR8DwjJPo0kHdX2YUL3 sxUoE6NIzr/SmA0ThsrWAKnYm3V/497CGBpleFhUQETqWJGisdvYs/pCKSuGRIFQ QkoTjtmkzB1mqnUB1jbJ2ignW731phWTOvwEhuqmjAISsuRDpopbNb7lyMOYrTWS j5HON4RuDTYb6yElKcNdT3eiOhTsaxMfcq/wcfna1Bxs4AG9B2UHmHeNQ9qTVgrM zgnTlT8MUcjCOVOBbYDcdjR0zd9e1joItDWuO5ivwIUPkRsBhbc8C+1SPcGts1I= =Qxh4 -----END PGP SIGNATURE----- V3 dhcp queries (#3535) * PostgreSQL query improvements Changes to queries to improve performance, remove un-used queries and make pool_key the unique identifier of a client within a pool. * MySQL query improvements Changes to queries to improve performance, remove un-used queries and make pool_key the unique identifier of a client within a pool. Also remove inconsistencies around expiry_time being able to be NULL - certain combinations of suggested queries would have ended up using the pool and never re-issuing expired IPs. * SQLite query improvements Changes to queries to improve performance, remove un-used queries and make pool_key the unique identifier of a client within a pool. Also remove inconsistencies around expiry_time being able to be NULL - certain combinations of suggested queries would have ended up using the pool and never re-issuing expired IPs. * MS SQL query improvements Changes to queries to improve performance, remove un-used queries and make pool_key the unique identifier of a client within a pool. Also remove inconsistencies around expiry_time being able to be NULL - certain combinations of suggested queries would have ended up using the pool and never re-issuing expired IPs. * Oracle query improvements Changes to queries to improve performance, remove un-used queries and make pool_key the unique identifier of a client within a pool. Add suggested queries for Oracle >= 12c Amend schema so pool population can be done with just values for pool_name and framedipaddress. * MySQL query using UNION Using a UNION allows index use in selection of either the existing client IP or an unused one. * SQLite query using a UNION Use of a UNION allows index searching * PostgreSQL queries using UNION Limitation on row locking in PostgreSQL means a table lock - however this is over 2 orders of magnitude faster than a query with an OR. Due to this, the suggested default is to use stored procedures which avoid the lock issues. * Add templates for MS SQL, Oracle and SQLite * Fixed Oracle queries Oracle's locking mechanism limitations prevents the use of a single query to find either a client's previous address or the next available one and reliably gain a lock on that record. Therefore, for normal DHCP behaviour, stored procedures are the only workable solution. * Optimised MS SQL query Using locking instructions on the individual parts of a UNION query to rapidly identify either the current address or a free one, ensuring no two simultaneous requests end up with the same address. * Optimised PostgreSQL stored procedure Taking advantage of UPDATE ... RETURNING to reduce the number of queries Nick Porter (via GitHub)@2020-07-24T14:58:14Z Files modified: * raddb/mods-config/sql/ippool-dhcp/mssql/procedure.sql * raddb/mods-config/sql/ippool-dhcp/mssql/queries.conf * raddb/mods-config/sql/ippool-dhcp/mssql/schema.sql * raddb/mods-config/sql/ippool-dhcp/mysql/procedure-no-skip-locked.sql * raddb/mods-config/sql/ippool-dhcp/mysql/procedure.sql * raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf * raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql * raddb/mods-config/sql/ippool-dhcp/oracle/procedure.sql * raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf * raddb/mods-config/sql/ippool-dhcp/oracle/schema.sql * raddb/mods-config/sql/ippool-dhcp/postgresql/procedure.sql * raddb/mods-config/sql/ippool-dhcp/postgresql/queries.conf * raddb/mods-config/sql/ippool-dhcp/postgresql/schema.sql * raddb/mods-config/sql/ippool-dhcp/sqlite/queries.conf * raddb/mods-config/sql/ippool-dhcp/sqlite/schema.sql * scripts/sql/align_sql_pools.pl Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8bd9a810858064312d49… ====== -- This commit summary was generated @2020-07-25T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed)

1 0