New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== rlm_otp doesn't need a configure script Arran Cudbard-Bell@2014-07-26T17:08:15Z Files modified: * src/modules/rlm_otp/.gitignore * src/modules/rlm_otp/all.mk * src/modules/rlm_otp/all.mk.in * src/modules/rlm_otp/configure * src/modules/rlm_otp/configure.ac Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e9ecb7be8a290a9f2a419... ====== Import/Export from Apache DS to cleanup formatting Arran Cudbard-Bell@2014-07-26T16:21:42Z Files modified: * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1bb6c2d1982e11362b9cd... ====== Typo in clients schema Arran Cudbard-Bell@2014-07-26T15:23:38Z Files modified: * doc/schemas/ldap/openldap/freeradius-clients.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a4a7837b562818e0d7e0a... ====== Only include pcap.h if we have libpcap Arran Cudbard-Bell@2014-07-26T15:22:25Z Files modified: * src/include/pcap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/753b74f3aa2126bb933c0... ====== Organise LDAP schemas better Arran Cudbard-Bell@2014-07-25T22:06:39Z Files modified: * doc/schemas/ldap/edir/freeradius-clients.ldif * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/iplanet/freeradius.ldif * doc/schemas/ldap/iplanet/freeradius.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema * doc/schemas/ldap/openldap/freeradius-clients.ldif * doc/schemas/ldap/openldap/freeradius-clients.schema * doc/schemas/ldap/openldap/freeradius.ldif * doc/schemas/ldap/openldap/freeradius.schema * doc/schemas/ldap/radiusclients-edirectory.ldif * doc/schemas/ldap/radiusclients-openldap.ldif * doc/schemas/ldap/radiusclients-openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/239ab5540e0d4c6c55b2c... ====== Change IANA number in LDAP schemas from 3317 to 11344 No idea who 'Port Community Rotterdam' are, but we have our own IANA number, so should be using it. Arran Cudbard-Bell@2014-07-25T21:50:08Z Files modified: * doc/schemas/ldap/iplanet.ldif * doc/schemas/ldap/iplanet.schema * doc/schemas/ldap/openldap.ldif * doc/schemas/ldap/openldap.schema Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4087461ac4cb1f502ba2c... ====== Hack to get TLS-PSK-Identity Alan T. DeKok@2014-07-25T20:18:19Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/14507d9e13469cd1ccf55... ====== Needs cast to long long int Arran Cudbard-Bell@2014-07-25T18:47:29Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eba481140f018478411ce... ====== print 64bit rlm_expr result Arran Cudbard-Bell@2014-07-25T18:25:46Z Files modified: * src/modules/rlm_expr/rlm_expr.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5f17c3bd8c8cb79605666... ====== Continue to build functions which don't rely on libpcap, when we don't have libpcap Arran Cudbard-Bell@2014-07-23T18:50:28Z Files modified: * src/include/pcap.h * src/lib/pcap.c * src/main/radsniff.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c465ce2c6ae1d4d15e16c... ====== Fix formatting of switch statements Arran Cudbard-Bell@2014-07-23T18:42:43Z Files modified: * src/lib/dict.c * src/lib/getaddrinfo.c * src/lib/pcap.c * src/lib/print.c * src/lib/radius.c * src/lib/snprintf.c * src/lib/token.c * src/lib/valuepair.c * src/main/acct.c * src/main/auth.c * src/main/collectd.c * src/main/detail.c * src/main/evaluate.c * src/main/modules.c * src/main/radwho.c * src/main/realms.c * src/main/soh.c * src/main/tls.c * src/main/unittest.c * src/main/util.c * src/main/valuepair.c * src/main/xlat.c * src/modules/rlm_cache/rlm_cache.c * src/modules/rlm_couchbase/couchbase.c * src/modules/rlm_couchbase/mod.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c * src/modules/rlm_eap/types/rlm_eap_peap/peap.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c * src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c * src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c * src/modules/rlm_exec/rlm_exec.c * src/modules/rlm_expr/paircmp.c * src/modules/rlm_expr/rlm_expr.c * src/modules/rlm_ippool/rlm_ippool_tool.c * src/modules/rlm_ldap/attrmap.c * src/modules/rlm_ldap/clients.c * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/ldap.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_otp/otp_pw_valid.c * src/modules/rlm_pam/rlm_pam.c * src/modules/rlm_perl/rlm_perl.c * src/modules/rlm_radutmp/rlm_radutmp.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_soh/rlm_soh.c * src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c * src/modules/rlm_sql/rlm_sql.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_unix/rlm_unix.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/907d6227ca0560b472493... ====== Merge pull request #742 from qnet-herwin/rlm_perl_v3.0.x Fix error in attribute copying to rlm_perl Arran Cudbard-Bell@2014-07-22T19:23:22Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d013d4d7a3d2bd48218cf... ====== Fix error in attribute copying to rlm_perl Introduced in commit c225c615760d4c907640ebd249f860d5ab3258dd. It copied the RAD_REPLY hash twice, which had the side effects that some keys dropped out. Herwin Weststrate@2014-07-22T18:06:33Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eca14dcf7b94d69b8ac52... ====== Debian: Ensure some directories exist This prevents some warnings when installing the package. Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-21T18:36:15Z Files modified: * debian/freeradius.postinst Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eb9a2fbd065728b94bd17... ====== Other perl formatting Arran Cudbard-Bell@2014-07-21T16:49:23Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c225c615760d4c907640e... ====== Fix multivalues attributes in rlm_perl. Addresses #731, Addresses #722 Arran Cudbard-Bell@2014-07-21T16:48:18Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8f4e239539802f329555a... ====== Add the gigawords calculation for MSSQL in accounting stop SQL clause root (via Alan T. DeKok)@2014-07-21T14:35:57Z Files modified: * raddb/mods-config/sql/main/mssql/queries.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e41443bb6aace79a781bb... ====== Added a NULL check to rlm_perl Otherwise, trying to start rlm_perl with an invalid file parameter would cause a segfault. Herwin Weststrate (via Alan T. DeKok)@2014-07-20T15:22:57Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd0acc6f1812ea1d7c167... ====== Merge pull request #732 from nchaigne/v3.0.x dhcpclient - timeout and decline, release, inform Arran Cudbard-Bell@2014-07-16T20:51:30Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/eeaca37fd844026e8eff6... ====== dhcpclient - timeout and decline, release, inform Added receive timeout on socket according to -t option (retries are still not handled). Added commands for "decline", "release" and "inform" messages. Updated usage. Nicolas C@2014-07-16T16:16:59Z Files modified: * src/modules/proto_dhcp/dhcpclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/be33e21913803de6d2c3c... ====== Merge pull request #734 from spbnick/switch_cnf_to_sha256 Switch .cnf files to sha256 message digest Arran Cudbard-Bell@2014-07-16T20:50:27Z Files modified: * raddb/certs/ca.cnf * raddb/certs/client.cnf * raddb/certs/server.cnf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/ed2100d9b45ce84404116... ====== Switch .cnf files to sha256 message digest Use sha256 as default_md (message digest) in all .cnf files as it is more secure than the previous, now considered weak, sha1. Nikolai Kondrashov@2014-07-16T19:51:33Z Files modified: * raddb/certs/ca.cnf * raddb/certs/client.cnf * raddb/certs/server.cnf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/515e5e9cf9404d2d80a03... ====== Merge pull request #736 from spbnick/add_rlm_krb5_doc Add minimal rlm_krb5 documentation file Arran Cudbard-Bell@2014-07-16T20:50:08Z Files modified: * doc/modules/rlm_krb5 * raddb/mods-available/krb5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/21bfdf44061184c69f747... ====== Add minimal rlm_krb5 documentation file Add doc/modules/rlm_krb5 - a minimal rlm_krb5 module documentation file, based on the wiki page. Update raddb/mods-available/krb5 comments to point to the actual and proper location. Nikolai Kondrashov@2014-07-16T19:50:49Z Files modified: * doc/modules/rlm_krb5 * raddb/mods-available/krb5 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d4d0246fa51097840a2a... ====== Merge pull request #735 from spbnick/add_P_option_to_man_pages Add description of -P option to man pages Arran Cudbard-Bell@2014-07-16T20:49:51Z Files modified: * man/man1/radclient.1 * man/man1/radtest.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/00c97ec743e475f80a4af... ====== Add description of -P option to man pages Add description of -P option to radtest and radclient man pages. Nikolai Kondrashov@2014-07-16T19:52:30Z Files modified: * man/man1/radclient.1 * man/man1/radtest.1 Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4097b0b7a024d223a2576... ====== Merge pull request #733 from spbnick/clarify_snmp_trap_conditions Clarify conditions of limit hit SNMP notifications Arran Cudbard-Bell@2014-07-16T20:49:22Z Files modified: * mibs/FREERADIUS-NOTIFICATION-MIB.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7a2c7a8d263d5a65cb9ca... ====== Clarify conditions of limit hit SNMP notifications Use "hit" instead of "reach" in the descriptions of serverMaxRequest and serverMaxThreads SNMP notifications to make it clearer that they trigger upon attempt to exceed the limit, not upon reaching the maximum allowed value. Nikolai Kondrashov@2014-07-16T19:52:06Z Files modified: * mibs/FREERADIUS-NOTIFICATION-MIB.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8ca930d24d51c512075c6... ====== More changes Alan T. DeKok@2014-07-15T14:11:50Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d257e796f9ad1c62075c5... ====== Note recent changes Alan T. DeKok@2014-07-15T14:06:01Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b707d3a44c8e2ba8d48fb... ====== Check BN_rand_range return value CVE-2014-4733. In practice, the function should never fail. jvoisin (via Alan T. DeKok)@2014-07-15T01:34:42Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c3e8546f1057754dabdb1... ====== Constant time memory comparison. CVE-2014-4731. Non-constant time comparisons usually require millions of packets in order to get enough statistics. This is VERY hard to do with WiFi or wired 802.1X. The delays on switch port open / close are on the order of seconds. jvoisin (via Alan T. DeKok)@2014-07-15T01:31:02Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d0e01ff9a9df52ab02707... ====== Use *_clear_free instead of *_free. CVE-2014-4732 jvoisin (via Alan T. DeKok)@2014-07-15T01:29:06Z Files modified: * src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c * src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/22297d7bff6f1d5517eb6... ====== Update ChangeLog Arran Cudbard-Bell@2014-07-12T21:02:20Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4a382ca4f9342cb3d1609... ====== Add module type sanity check Arran Cudbard-Bell@2014-07-12T19:43:07Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a8b7756dd63a536099bde... ====== Add support for connection pool reuse Arran Cudbard-Bell@2014-07-12T19:43:07Z Files modified: * src/include/conffile.h * src/include/connection.h * src/include/modpriv.h * src/main/conffile.c * src/main/connection.c * src/main/modules.c * src/modules/rlm_couchbase/rlm_couchbase.c * src/modules/rlm_krb5/rlm_krb5.c * src/modules/rlm_ldap/rlm_ldap.c * src/modules/rlm_redis/rlm_redis.c * src/modules/rlm_rest/rlm_rest.c * src/modules/rlm_smsotp/rlm_smsotp.c * src/modules/rlm_sql/sql.c * src/modules/rlm_yubikey/validate.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/93a297a98b16e60dbe2e6... ====== Convert another argument to bool Arran Cudbard-Bell@2014-07-12T19:43:06Z Files modified: * src/include/modpriv.h * src/main/command.c * src/main/modcall.c * src/main/modules.c * src/modules/rlm_rediswho/rlm_rediswho.c * src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c * src/modules/rlm_sqlippool/rlm_sqlippool.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7ccffc8631184606a9b52... ====== Merge pull request #730 from nchaigne/v3.0.x dhcpclient - store xid when encoding request Alan DeKok@2014-07-12T15:40:30Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b85d952a0c10afe4d01eb... ====== dhcpclient - store xid when encoding request Fixes the incorrect debug message "Encoding DHCP-Discover of id ffffffff". And this will allow to correlate xid from response (should be done by the client, but not yet). Nicolas C@2014-07-11T18:16:46Z Files modified: * src/modules/proto_dhcp/dhcp.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/69bfb4d61b5de4f672f84... ====== Typo Arran Cudbard-Bell@2014-07-10T18:40:56Z Files modified: * src/include/connection.h * src/main/connection.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/59c1ef434b7859e7a32b7... ====== Formatting and documentation Arran Cudbard-Bell@2014-07-10T18:40:56Z Files modified: * src/main/conffile.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/129d1b166a4d753185f0a... ====== find_client: min prefix of 0 needs to work Use signed loop counter to permit 0-1 to be <= min_prefix Sam Hartman (via Alan T. DeKok)@2014-07-10T18:07:27Z Files modified: * src/main/client.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5219d3de9a0e1ba8b01f3... ====== fr_inaddr_mask fix 0 prefix Don't depend on the behavior of shifting by 32-bits on a 32-bit type. Sam Hartman (via Alan T. DeKok)@2014-07-10T17:28:15Z Files modified: * src/lib/misc.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/41f8259d2f59784d6f23b... ====== Allow User-Name in CUI reply Alan T. DeKok@2014-07-10T05:21:52Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/42430f41416f06ba8ee75... ====== Use loop index to get description. Closes #729 Alan T. DeKok@2014-07-09T21:33:24Z Files modified: * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d25e515d28108e3cb8b8... ====== A parent config section might not exist when dynamically adding a home server. Alan T. DeKok@2014-07-09T21:29:09Z Files modified: * src/main/realms.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cf608881626bcf93ab74c... ====== Remove useless extern declarations Arran Cudbard-Bell@2014-07-09T18:35:03Z Files modified: * src/include/libradius.h * src/include/missing-h * src/include/rad_assert.h * src/include/radiusd.h * src/include/tls-h * src/lib/dict.c * src/lib/print.c * src/lib/radius.c * src/main/mainconfig.c * src/main/tls.c * src/main/tls_listen.c * src/modules/rlm_eap/libeap/eap_chbind.h * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/libeap/eap_types.h * src/modules/rlm_mschap/opendir.c * src/modules/rlm_mschap/rlm_mschap.c * src/modules/rlm_opendirectory/rlm_opendirectory.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/37917ad89540da122e5d0... ====== Cleanup EAP-SIM macros Arran Cudbard-Bell@2014-07-09T18:35:03Z Files modified: * src/modules/rlm_eap/libeap/eap_sim.h * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b92da9313a5ee8135e6a7... ====== Debug condition is now a fr_cond_t Arran Cudbard-Bell@2014-07-09T18:35:02Z Files modified: * src/main/mainconfig.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1d60c47e73727c795b1c6... ====== Limit which operators can be used with LDAP group comparison and other minor cleanups Arran Cudbard-Bell@2014-07-09T18:34:55Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/62a8a4ed8e505b511179b... ====== Formatting Arran Cudbard-Bell@2014-07-09T02:09:19Z Files modified: * src/include/token.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/e5a743c8be8b7eada07ed... ====== Fixup Sqlite schema Arran Cudbard-Bell@2014-07-09T02:09:00Z Files modified: * raddb/mods-config/sql/main/sqlite/schema.sql Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77d7284333b953702b509... ====== Update cui Updated comments to clarify the dual purpose of the unlang fragment. Stefan Paetow (via Arran Cudbard-Bell)@2014-07-08T13:51:32Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/448bc0e0727d406825fa6... ====== Try and make dlopen library search messages clearer Arran Cudbard-Bell@2014-07-08T05:24:31Z Files modified: * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2059032d31e38393ffd30... ====== Remove reply:User-Name only if there's a reply:CUI Alan T. DeKok@2014-07-08T04:35:28Z Files modified: * raddb/policy.d/cui Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3d9a6e9957835180e1982... ====== Changed integer type for rlm_eap_{ttls,peap} tunnel types to bool where applicable Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-07T20:31:03Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h * src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9851f2c759de4307aeb75... ====== Use enums instead of define lists in rlm_eap_peap But only for the values that are only used internally. Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-07T20:29:54Z Files modified: * src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/09ea27662cf245be6dc0a... ====== Formatting Arran Cudbard-Bell@2014-07-07T20:28:29Z Files modified: * src/modules/rlm_ldap/groups.c * src/modules/rlm_ldap/rlm_ldap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7c201641c1527cae70331... ====== As posted to the list Alan T. DeKok@2014-07-07T18:09:51Z Files modified: * share/dictionary * share/dictionary.dragonwave Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8cc903f285be0fcba4ec6... ====== Merge pull request #725 from nchaigne/v3.0.x radeapclient - fix send_packet Arran Cudbard-Bell@2014-07-04T17:08:19Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f3100c303c7cf6e5f5098... ====== radeapclient - fix send_packet I spotted two errors in radeapclient.c, introduced in the following previous commits. With this fix, radeapclient is now useable again. 1) Commit: c8a062a112f17a5810d311dc0e0acfe963b2d440 (2014/06/13) - send_packet(rep, &req); - - if (!req) return -1; + send_packet(req, &rep); + if (!rep) { Arguments got reversed. Hence segmentation fault later when doing: for (vp = req->vps; vp != NULL; vp = vpnext) { Bit of caution on the wording used in radeapclient: "req" is the request coming FROM the server. (because this is not a "request" in RADIUS sense, but an EAP-Request within the EAP-SIM transaction.) "rep" is the response from the client TO the server (EAP-Response). 2) Commit: bc3676835c3dcc220ab518d4c3c35962bc0f8be2 (2014/05/02) In "send_packet": + if (!req || !rep || !*rep) return -1; *rep == NULL is the expected behaviour... Nicolas C@2014-07-04T17:03:33Z Files modified: * src/modules/rlm_eap/radeapclient.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/53c1ce349b07a6e51dcc0... ====== In redhat spec file, update dependency on json-c to version 0.10 as 0.11 only exists for fedora and 0.10 builds ok Philippe Wooding (via Alan T. DeKok)@2014-07-04T16:01:54Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c0e3a5330804c0873621c... ====== Update redhat spec file to reflect the fact rlm_host is no longer experimental. Philippe Wooding (via Alan T. DeKok)@2014-07-04T16:01:34Z Files modified: * redhat/freeradius.spec Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/3fb6571b943ae2f1eb489... ====== Use correct type for length Alan T. DeKok@2014-07-03T01:59:51Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0b6a39907161cf2443511... ====== No need for casting in talloc_array_length() Alan T. DeKok@2014-07-03T01:45:37Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cd41bcb584cb30f827131... ====== rad_vp2attr() returns -1 on error, 0 on "not enough room" Alan T. DeKok@2014-07-03T01:43:51Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0000859a6f1b9438559d3... ====== Channel bindings fixes -fix size calculation -skip unwanted attrs when copying -add safety check to copy code in case size is wrong -add cast to get correct result from talloc_array_length() Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:58Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4c5834ebdd27ccc780ca6... ====== Don't call free on talloc'ed channel bindings packet Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:54Z Files modified: * src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/b862293c1e25e33e7cec1... ====== Fix cursor initialization bugs in eap_chbind_vp2packet Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:39:50Z Files modified: * src/modules/rlm_eap/libeap/eap_chbind.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/84b7c83d5127d04e98110... ====== Fixed adding attributes with multiple values to rlm_perl Without this fix, the array in Perl would start with the value of the first attribute in the packet, combined with the actual values of the attribute. The debug log would look like this: $RAD_REPLY{'User-Name'}[0] = &reply:User-Name -> 'anonymous' $RAD_REPLY{'h323-credit-amount'}[1] = &reply:h323-credit-amount -> '100' $RAD_REPLY{'h323-credit-amount'}[2] = &reply:h323-credit-amount -> '101' The actual value of $RAD_REPLY{'h323-credit-amount'} is ['anonymous','100','101'] Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-02T19:36:09Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c920cf0ff498b36950402... ====== Merge pull request #719 from nchaigne/v3.0.x 3.0.x - Make EAP-SIM work again - proper encoding of EAP-SIM attributes ... Arran Cudbard-Bell@2014-07-01T19:48:25Z Files modified: * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fd45098b462a03a16a472... ====== 3.0.x - Make EAP-SIM work again - proper encoding of EAP-SIM attributes within EAP-Message This fix follows the issue I logged (on the mailing list, not on GitHub) on June 11th. As a reminder, the problem happened after a commit which (among other things) modified the EAP-SIM attributes. Since this commit, EAP-SIM authentication do not work because EAP-Message is not properly encoded anymore by FreeRADIUS. I believe the commit is the following: https://github.com/FreeRADIUS/freeradius-server/commit/39df09e42d80a96363be0... So, here is a fix. I also fixed the attributes issue in radeapclient, but at the moment the binary is unusable: it crashes, and I don't have time to look into this. (I tested the fix with another EAP client) Nicolas C@2014-07-01T17:03:03Z Files modified: * src/modules/rlm_eap/libeap/eapsimlib.c * src/modules/rlm_eap/radeapclient.c * src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9ec3c382665a34595d658... ====== Inline breaks linking? Arran Cudbard-Bell@2014-07-01T15:58:31Z Files modified: * src/include/libradius.h * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/06e09be31d59ef4933ba4... ====== Fix capitalisation in UKERNA dictionary Fixes #718 Arran Cudbard-Bell@2014-07-01T15:44:50Z Files modified: * share/dictionary.ukerna Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/2d1ef27ac98f646e5ba0c... ====== Other things still reference dict_attr_allowed_chars Arran Cudbard-Bell@2014-07-01T15:43:07Z Files modified: * src/include/libradius.h * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7af44b794161ffbb32016... ====== Fixed reference to config file Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:42:00Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/40bee0edc4b7638717e30... ====== Readability fixes in mods-available/perl Alignment is now stable with any tab width. Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:41:48Z Files modified: * raddb/mods-available/perl Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/8e7fc3460be51899fefb0... ====== Fixed typo in rlm_sql.c s/afftected/affected/ Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:40:19Z Files modified: * src/modules/rlm_sql/rlm_sql.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a5d11402be8624845ef52... ====== Fixed some tabs/spaces in default virtual server Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T13:40:14Z Files modified: * raddb/sites-available/default Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/bd6519551d5e09733e1bd... ====== Use RFC language in eap.c messages Arran Cudbard-Bell@2014-07-01T13:39:38Z Files modified: * src/modules/rlm_eap/eap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/852f3abe9b521d1b84484... ====== No need to call exit twice Arran Cudbard-Bell@2014-07-01T13:39:38Z Files modified: * src/lib/event.c * src/main/detail.c * src/main/radiusd.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/56a66de36cf920b89d4d1... ====== Better errors on junk chars in dict.c Arran Cudbard-Bell@2014-07-01T13:39:38Z Files modified: * src/lib/dict.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5a77de871d49ba43a33b1... ====== We can now use talloc_free() for listeners Alan T. DeKok@2014-06-27T17:04:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/77f68022e2f87bf24b831... ====== Proxy sockets use common_socket_free(). Closes #680 Alan T. DeKok@2014-06-27T17:04:32Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/4058b7a0b15523253aafb... ====== The default secret is "radsec" Alan T. DeKok@2014-06-27T17:04:31Z Files modified: * raddb/sites-available/tls Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/c16bb57372c5c10267b5c... ====== Now that we have default IPv6 listeners, have a v6 client, too Alan T. DeKok@2014-06-27T17:04:31Z Files modified: * raddb/clients.conf Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d9e85722ebc454821954... ====== No need for an empty function Alan T. DeKok@2014-06-27T17:04:31Z Files modified: * src/main/listen.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/997bf775f1366ae5dd5b7... ====== Move checks for virtual_server to listen_parse() Which is better than scattering them through the code. Alan T. DeKok@2014-06-27T17:04:31Z Files modified: * src/main/listen.c * src/main/modules.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/0022bf367c092d2a58430... ====== IKEv2 fixes required on our side Arran Cudbard-Bell@2014-06-27T15:47:07Z Files modified: * configure * configure.ac * src/include/autoconf.h.in * src/modules/rlm_eap/types/rlm_eap_ikev2/logging_impl.h Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/de7fd410a726352bc931e... ====== Assume RFC 3542 compliance for IPv6 socket options, which fixes IPv6 support on FreeBSD 10.0 Arran Cudbard-Bell@2014-06-27T13:30:56Z Files modified: * configure * configure.ac * src/include/autoconf.h.in * src/lib/udpfromto.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/cb3ea70165cee55d14fa9... ====== Confusing comments Arran Cudbard-Bell@2014-06-27T12:09:35Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/78c370c0e2c1a3b33ad1d... ====== Fix for ptrace check under FreeBSD Arran Cudbard-Bell@2014-06-27T12:01:14Z Files modified: * src/lib/debug.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/012a94628ba7f3090e161... ====== Use standard return codes Arran Cudbard-Bell@2014-06-26T23:09:51Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/a7c532216d0692be29069... ====== Convert binary values to octets type attributes correctly Arran Cudbard-Bell@2014-06-26T23:09:42Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/78027f0cc9c4e66bd9476... ====== Rename vpsname to list_name Add array indexes to multivalued attributes Arran Cudbard-Bell@2014-06-26T23:09:01Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/d3b852d037c1e50f03767... ====== Fixup debugging and formatting in rlm_perl Arran Cudbard-Bell@2014-06-26T19:13:11Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/5d7ae9f11e9ff93572384... ====== Improve debug logging of rlm_perl Don't just show the attributes being copied, but also say where they are copied from/to. Herwin Weststrate (via Arran Cudbard-Bell)@2014-06-26T18:41:58Z Files modified: * src/modules/rlm_perl/rlm_perl.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/f6c27a5264b84181e0589... ====== Set a timer for marking a home server dead. Closes #712 Alan T. DeKok@2014-06-26T14:33:32Z Files modified: * src/main/process.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/7bae7c8ed3ae6420c749f... ====== Note recent changes Alan T. DeKok@2014-06-26T14:20:15Z Files modified: * doc/ChangeLog Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/fa93a223ca4d3d903f17d... ====== Pass2 for attributes in existence checks if (&foo-LDAP-Group) { ... } Alan T. DeKok@2014-06-26T14:18:34Z Files modified: * src/main/modcall.c * src/main/parser.c * src/tests/unit/condition.txt Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/6a5bc20fb4b9b34912c3d... ====== -- This commit summary was generated @2014-07-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).