Version 3.2.4 has been released
We have released FreeRADIUS version 3.2.4. It's been a while since the last release, so there's a lot going on this time. Some highlights: - Better TLS debugging output - Simple "radsecret" script to generate good RADIUS secrets - Configurable look back/forward window for TOTP - Preliminary support for TEAP - Less confusing output when requesting client stats - Many bug fixes See doc/ChangeLog for details. There are some minor configuration fixes which are unlikely to affect anyone, notably %{randstr:...} returns the requested length of data, rather than one byte too many. Download from the usual places: https://freeradius.org/releases/ https://freeradius.org/ftp/pub/freeradius/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4 As usual, Network RADIUS is providing pre-built packages for common Linux distributions: https://packages.networkradius.com/ and, lastly, Docker images on Dockerhub: https://hub.docker.com/r/freeradius/freeradius-server -- Matthew
W dniu 29.05.2024 o 21:14, Matthew Newton via Freeradius-Users pisze:
We have released FreeRADIUS version 3.2.4.
It's been a while since the last release, so there's a lot going on this time. Some highlights:
- Better TLS debugging output - Simple "radsecret" script to generate good RADIUS secrets - Configurable look back/forward window for TOTP - Preliminary support for TEAP - Less confusing output when requesting client stats - Many bug fixes
See doc/ChangeLog for details. There are some minor configuration fixes which are unlikely to affect anyone, notably %{randstr:...} returns the requested length of data, rather than one byte too many.
Download from the usual places:
https://freeradius.org/releases/
https://freeradius.org/ftp/pub/freeradius/
ftp://ftp.freeradius.org/pub/freeradius/
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4
As usual, Network RADIUS is providing pre-built packages for common Linux distributions:
https://packages.networkradius.com/
and, lastly, Docker images on Dockerhub:
I have to report that it builds fine and works excellent on FreeBSD. Thank you ! -- Marek Zarychta
Howdy gents, It appears that for Centos/RHEL 7 the 3.2.4 release exists, but not for CentOS/RHEL 8. Maybe the build process barfed up an error, or maybe it's intentional. I thought I'd mention it. As always, superb work by everyone! With kind regards Stefan Paetow Federated Roaming Technical Specialist eduroam(UK), Jisc email/teams: stefan.paetow@jisc.ac.uk gpg: 0x3FCE5142 For eduroam support, please contact the eduroam team via help@jisc.ac.uk and mark it for eduroam’s attention. On Wednesdays and Fridays, I am not available between 12:00 and 15:00 London time (UTC in winter, UTC+0100 in summer). jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB Tel: 020 3697 5800. On 29/05/2024, 20:15, "Freeradius-Users on behalf of Matthew Newton via Freeradius-Users" <freeradius-users-bounces+stefan.paetow=jisc.ac.uk@lists.freeradius.org <mailto:jisc.ac.uk@lists.freeradius.org> on behalf of freeradius-users@lists.freeradius.org <mailto:freeradius-users@lists.freeradius.org>> wrote: We have released FreeRADIUS version 3.2.4. It's been a while since the last release, so there's a lot going on this time. Some highlights: - Better TLS debugging output - Simple "radsecret" script to generate good RADIUS secrets - Configurable look back/forward window for TOTP - Preliminary support for TEAP - Less confusing output when requesting client stats - Many bug fixes See doc/ChangeLog for details. There are some minor configuration fixes which are unlikely to affect anyone, notably %{randstr:...} returns the requested length of data, rather than one byte too many. Download from the usual places: https://freeradius.org/releases/ <https://freeradius.org/releases/> https://freeradius.org/ftp/pub/freeradius/ <https://freeradius.org/ftp/pub/freeradius/> ftp://ftp.freeradius.org/pub/freeradius/ <ftp://ftp.freeradius.org/pub/freeradius/> https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4 <https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_2_4> As usual, Network RADIUS is providing pre-built packages for common Linux distributions: https://packages.networkradius.com/ <https://packages.networkradius.com/> and, lastly, Docker images on Dockerhub: https://hub.docker.com/r/freeradius/freeradius-server <https://hub.docker.com/r/freeradius/freeradius-server> -- Matthew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
On 11/06/2024 00:03, Stefan Paetow via Freeradius-Users wrote:
It appears that for Centos/RHEL 7 the 3.2.4 release exists, but not for CentOS/RHEL 8. Maybe the build process barfed up an error, or maybe it's intentional. I thought I'd mention it.
The Rocky 8 packages can be used with RHEL 8. Nick -- Nick Porter
Nick, That's lovely, but if you're using the repo for centos as it is, an announcement that it's being 'discontinued' (i.e. not updated), would be nice, or be updated until RHEL 8 goes EOL. Just a thought. Kind regards Stefan Paetow Federated Roaming Technical Specialist eduroam(UK), Jisc email/teams: stefan.paetow@jisc.ac.uk gpg: 0x3FCE5142 For eduroam support, please contact the eduroam team via help@jisc.ac.uk and mark it for eduroam’s attention. On Wednesdays and Fridays, I am not available between 12:00 and 15:00 London time (UTC in winter, UTC+0100 in summer). jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB Tel: 020 3697 5800. On 11/06/2024, 08:00, "Freeradius-Users on behalf of Nick Porter" <freeradius-users-bounces+stefan.paetow=jisc.ac.uk@lists.freeradius.org <mailto:jisc.ac.uk@lists.freeradius.org> on behalf of nick@portercomputing.co.uk <mailto:nick@portercomputing.co.uk>> wrote: On 11/06/2024 00:03, Stefan Paetow via Freeradius-Users wrote:
It appears that for Centos/RHEL 7 the 3.2.4 release exists, but not for CentOS/RHEL 8. Maybe the build process barfed up an error, or maybe it's intentional. I thought I'd mention it.
The Rocky 8 packages can be used with RHEL 8. Nick -- Nick Porter
Hi Stefan, On 11/06/2024 11:13, Stefan Paetow via Freeradius-Users wrote:
That's lovely, but if you're using the repo for centos as it is, an announcement that it's being 'discontinued' (i.e. not updated), would be nice, or be updated until RHEL 8 goes EOL.
CentOS 8 went out of support in 2021, RHEL 8 and CentOS Stream 8 (which we've never built for) both went EOL a couple of weeks ago, around when 3.2.4 was released. Support for RHEL has always relied on using packages for one of the free distributions. Given CentOS 8 was always a bit of a disaster from the start, I'd recommend upgrading to Rocky 9 (or Debian :) ) anyway. I've updated the packages site to recommend the rocky repository by default for RHEL/CentOS 8 and give a note to say to switch over to that if still using the centos repository. -- Matthew
Matthew Newton wrote:
for one of the free distributions. Given CentOS 8 was always a bit of a disaster from the start, I'd recommend upgrading to Rocky 9 (or Debian :) ) anyway.
If Rocky9, just watch out for lots of changes to network config, including a slightly too assertive tendency to install firewalld on unsuspecting iptables users. Question: who's issue tracker should a wishlist for building an alternate rlm_mod_mschap that has libwbclient support compiled in go to... FR or Rocky? I realize it is probably left it out to avoid pulling in wbclient libs when they are not wanted. That was the only thing that kept us from using the stock packages on this last iteration of our servers.
On 12 June 2024 23:11:08 CEST, Brian Julin <BJulin@clarku.edu> wrote:
Question: who's issue tracker should a wishlist for building an alternate rlm_mod_mschap that has libwbclient support compiled in go to... FR or Rocky? I realize it is probably left it out to avoid pulling in wbclient libs when they are not wanted.
We released 3.2.3-2 RPMs a few weeks ago which fixed this, and so it's included in 3.2.4, too.
That was the only thing that kept us from using the stock packages on this last iteration of our servers.
You should be good to go now. -- Matthew
Thank you Matthew. Technically, RHEL 8 goes EOL in a couple of years, but I appreciate that the support was based on CentOS 8, which, as you say, went goodbye. I'll switch our repositories to the Rocky ones, since they technically are binary-compatible. Kind regards Stefan Paetow Federated Roaming Technical Specialist eduroam(UK), Jisc email/teams: stefan.paetow@jisc.ac.uk gpg: 0x3FCE5142 For eduroam support, please contact the eduroam team via help@jisc.ac.uk and mark it for eduroam’s attention. On Wednesdays and Fridays, I am not available between 12:00 and 15:00 London time (UTC in winter, UTC+0100 in summer). jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB Tel: 020 3697 5800. On 12/06/2024, 21:30, "Freeradius-Users on behalf of Matthew Newton via Freeradius-Users" <freeradius-users-bounces+stefan.paetow=jisc.ac.uk@lists.freeradius.org <mailto:jisc.ac.uk@lists.freeradius.org> on behalf of freeradius-users@lists.freeradius.org <mailto:freeradius-users@lists.freeradius.org>> wrote: Hi Stefan, On 11/06/2024 11:13, Stefan Paetow via Freeradius-Users wrote:
That's lovely, but if you're using the repo for centos as it is, an announcement that it's being 'discontinued' (i.e. not updated), would be nice, or be updated until RHEL 8 goes EOL.
CentOS 8 went out of support in 2021, RHEL 8 and CentOS Stream 8 (which we've never built for) both went EOL a couple of weeks ago, around when 3.2.4 was released. Support for RHEL has always relied on using packages for one of the free distributions. Given CentOS 8 was always a bit of a disaster from the start, I'd recommend upgrading to Rocky 9 (or Debian :) ) anyway. I've updated the packages site to recommend the rocky repository by default for RHEL/CentOS 8 and give a note to say to switch over to that if still using the centos repository. -- Matthew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
participants (5)
-
Brian Julin -
Marek Zarychta -
Matthew Newton -
Nick Porter -
Stefan Paetow