Alan DeKok wrote:

This version comes 3 months after 2.1.3, which is a bit more of a delay than we would like. However, it includes a number of minor bug fixes, and some interesting new features.

Thank you Alan and everyone else for the new release, your community efforts are very much appreciated. I noticed a couple of small problems in building the new release. There was an incorrect #elif in radassert.h which causes the compile to fail (it was a typo #elsif). The Makefile in etc/raddb contained a dangling reference otp.conf which is no longer present. I've included a patch for these two problems. I also noticed the patch for the the unixODBC type changes was not in the 2.1.4 release. I've attached this patch as well. -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/

Hi, Is CPPFLAGS used? I see it defined in Make.inc, but I don't see it actually used. I've been adding it to CFLAGS to make sure it gets included. Thanks. -John Alan DeKok wrote:

This version comes 3 months after 2.1.3, which is a bit more of a delay than we would like. However, it includes a number of minor bug fixes, and some interesting new features.

The best new feature is one that has been needed for a long time. The (easy) ability to see debugging output from a "live" server. You can now do this via the "raddebug" command.

FreeRADIUS 2.1.4 Thu Dec 25 17:40:00 CEST 2008; , urgency=medium Feature improvements * Permit multiple "-e" in radmin. * Add support for originating CoA-Request and Disconnect-Request. See raddb/sites-available/originate-coa. * Added "lifetime" and "max_queries" to raddb/sql.conf. This helps address the problem of hung SQL sockets. * Allow packets to be injected via radmin. See "inject help" in radmin. * Answer VMPS reconfirmation request. Patch from Hermann Lauer. * Sample logrotate script in scripts/logrotate.freeradius * Add configurable poll interval for "detail" listeners * New "raddebug" command. This prints debugging information from a running server. See "man raddebug. * Add "require_message_authenticator" configuration to home_server configuration. This makes the server add Message-Authenticator to all outgoing Access-Request packets. * Added smsotp module, as contributed by Siemens. * Enabled the administration socket in the default install. See raddb/sites-available/control-socket, and "man radmin" * Handle duplicate clients, such as with replicated or load-balanced SQL servers and "readclients = yes"

Bug fixes * Clean up control sockets when they are closed, so that we don't leak memory. * Define SUN_LEN for systems that don't have it. * Correct some boundary conditions in the conditional checker ("if") in "unlang". Bug noted by Arran Cudbard-Bell. * Work around minor building issues in gmake. This should only have affected developers. * Change how we manage unprivileged user/group, so that we do not create control sockets owned by root. * Fixed more minor issues found by Coverity. * Allow raddb/certs/bootstrap to run when there is no "make" command installed. * In radiusd.conf, run_dir depends on the name of the program, and isn't hard-coded to "..../radiusd" * Check for EOF in more places in the "detail" file reader. * Added Freeswitch dictionary. * Chop ethernet frames in VMPS, rather than droppping packets. * Fix EAP-TLS bug. Patch from Arnaud Ebalard * Don't lose string for regex-compares in the "users" file. * Expose more functions in rlm_sql to rlm_sqlippool, which helps on systems where RTLD_GLOBAL is off. * Fix typos in MySQL schemas for ippools. * Remove macro that was causing build issues on some platforms. * Fixed issues with dead home servers. Bug noted by Chris Moules. * Fixed "access after free" with some dynamic clients. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi Alan, Another thing I noticed, if you set WITH_VMPS=no, it isn't consistent: "listen.c", line 1795: undefined symbol: RAD_LISTEN_VQP cc: acomp failed for listen.c gmake[4]: *** [listen.lo] Error 1 This code is not surrounded with #defines: if (this->type == RAD_LISTEN_VQP) { sock = this->data; if (server_ipaddr.af == AF_UNSPEC) { server_ipaddr = sock->ipaddr; } port = sock->port + 1; break; } HTH -John Alan DeKok wrote:

This version comes 3 months after 2.1.3, which is a bit more of a delay than we would like. However, it includes a number of minor bug fixes, and some interesting new features.

The best new feature is one that has been needed for a long time. The (easy) ability to see debugging output from a "live" server. You can now do this via the "raddebug" command.

FreeRADIUS 2.1.4 Thu Dec 25 17:40:00 CEST 2008; , urgency=medium Feature improvements * Permit multiple "-e" in radmin. * Add support for originating CoA-Request and Disconnect-Request. See raddb/sites-available/originate-coa. * Added "lifetime" and "max_queries" to raddb/sql.conf. This helps address the problem of hung SQL sockets. * Allow packets to be injected via radmin. See "inject help" in radmin. * Answer VMPS reconfirmation request. Patch from Hermann Lauer. * Sample logrotate script in scripts/logrotate.freeradius * Add configurable poll interval for "detail" listeners * New "raddebug" command. This prints debugging information from a running server. See "man raddebug. * Add "require_message_authenticator" configuration to home_server configuration. This makes the server add Message-Authenticator to all outgoing Access-Request packets. * Added smsotp module, as contributed by Siemens. * Enabled the administration socket in the default install. See raddb/sites-available/control-socket, and "man radmin" * Handle duplicate clients, such as with replicated or load-balanced SQL servers and "readclients = yes"

Bug fixes * Clean up control sockets when they are closed, so that we don't leak memory. * Define SUN_LEN for systems that don't have it. * Correct some boundary conditions in the conditional checker ("if") in "unlang". Bug noted by Arran Cudbard-Bell. * Work around minor building issues in gmake. This should only have affected developers. * Change how we manage unprivileged user/group, so that we do not create control sockets owned by root. * Fixed more minor issues found by Coverity. * Allow raddb/certs/bootstrap to run when there is no "make" command installed. * In radiusd.conf, run_dir depends on the name of the program, and isn't hard-coded to "..../radiusd" * Check for EOF in more places in the "detail" file reader. * Added Freeswitch dictionary. * Chop ethernet frames in VMPS, rather than droppping packets. * Fix EAP-TLS bug. Patch from Arnaud Ebalard * Don't lose string for regex-compares in the "users" file. * Expose more functions in rlm_sql to rlm_sqlippool, which helps on systems where RTLD_GLOBAL is off. * Fix typos in MySQL schemas for ippools. * Remove macro that was causing build issues on some platforms. * Fixed issues with dead home servers. Bug noted by Chris Moules. * Fixed "access after free" with some dynamic clients. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi, 2009/3/10 Alan DeKok aland@deployingradius.com

The best new feature is one that has been needed for a long time. The (easy) ability to see debugging output from a "live" server. You can now do this via the "raddebug" command.

Brilliant feature - however I needed to mod the shell script. Path to radmin was set to "/Users/alandekok/git/2_1_x.git.freeradius.org/src/main/". Hardly the end of the world, but thought I'd mention it. Thanks for your (and the rest of the development teams) continued efforts.

Hi Alan, Compiling for 64-bit Solaris 10 (SPARC) using Sun Studio 12, see the following warnings (with appropriate lines): "ttls.c", line 78: warning: integer overflow detected: op "<<" if ((length & (1 << 31)) != 0) { "ttls.c", line 217: warning: integer overflow detected: op "<<" if ((length & (1 << 31)) != 0) { "ttls.c", line 509: warning: integer overflow detected: op "<<" length |= (1 << 31); "client.c", line 206: warning: initializer does not fit or is out of range: -1 uint32_t mask = ~0; "radwho.c", line 314: warning: initializer does not fit or is out of range: -1 uint32_t nas_port = ~0; "mainconfig.c", line 167: warning: initializer does not fit or is out of range: -1 { "file", PW_TYPE_STRING_PTR, -1, &mainconfig.log_file, "${logdir}/radius.log" }, "mainconfig.c", line 168: warning: initializer does not fit or is out of range: -1 { "requests", PW_TYPE_STRING_PTR, -1, &request_log_file, NULL }, "mainconfig.c", line 175: warning: initializer does not fit or is out of range: -1 { "log_file", PW_TYPE_STRING_PTR, -1, &mainconfig.log_file, NULL }, "mainconfig.c", line 176: warning: initializer does not fit or is out of range: -1 { "log_destination", PW_TYPE_STRING_PTR, -1, &radlog_dest, NULL }, "mainconfig.c", line 184: warning: initializer does not fit or is out of range: -1 { "auth", PW_TYPE_BOOLEAN, -1, &mainconfig.log_auth, "no" }, "mainconfig.c", line 235: warning: initializer does not fit or is out of range: -1 { "log_auth", PW_TYPE_BOOLEAN, -1, &mainconfig.log_auth, NULL }, Are these anything to be concerned about? Thanks. -John

I saw that there is a new tar file for the new release so I downloaded it and tried to build it, alas it won't build because the new tar file is schizophrenic with multiple identities. The tar file is named 2.1.4. The tar root directory is named 2.1.4. But the file freeradius-server-2.1.4/VERSION declares 2.1.5. This mismatch between the name of the archive and the VERSION file causes build failures (aside from thwarting the expectations of RPM based build and it's spec file it seems to confuse libtool when it names libraries resulting in missing libraries). I noticed there was no freeradius-server-2.1.5.tar.bz2 file in the download area. It looks like what was to have been the contents of 2.1.5 got rolled up as a 2.1.4 distribution. -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/