Commit report for master branch

Sun Jul 27 00:00:02 CEST 2014

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server)

======
rlm_otp doesn't need a configure script

Arran Cudbard-Bell at 2014-07-26T17:05:24Z
Files modified:
	* src/modules/rlm_otp/.gitignore
	* src/modules/rlm_otp/all.mk
	* src/modules/rlm_otp/all.mk.in
	* src/modules/rlm_otp/configure
	* src/modules/rlm_otp/configure.ac

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8aa93f0b3e173b3e902369da62730900aad3aef0
====== 
Import/Export from Apache DS to cleanup formatting

Arran Cudbard-Bell at 2014-07-26T16:21:34Z
Files modified:
	* doc/schemas/ldap/openldap/freeradius-clients.schema
	* doc/schemas/ldap/openldap/freeradius.schema

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/81bb286543715754da57f03144456169d43fc131
====== 
Typo in clients schema

Arran Cudbard-Bell at 2014-07-26T15:23:31Z
Files modified:
	* doc/schemas/ldap/openldap/freeradius-clients.schema

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/91e7a4044e224fa10da8a836cbc907ab0c2287a2
====== 
Only include pcap.h if we have libpcap

Arran Cudbard-Bell at 2014-07-26T15:22:50Z
Files modified:
	* src/include/pcap.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/eec5591a844774411ddb49989e1402b0494c9469
====== 
Organise LDAP schemas better

Arran Cudbard-Bell at 2014-07-25T22:06:30Z
Files modified:
	* doc/schemas/ldap/edir/freeradius-clients.ldif
	* doc/schemas/ldap/iplanet.ldif
	* doc/schemas/ldap/iplanet.schema
	* doc/schemas/ldap/iplanet/freeradius.ldif
	* doc/schemas/ldap/iplanet/freeradius.schema
	* doc/schemas/ldap/openldap.ldif
	* doc/schemas/ldap/openldap.schema
	* doc/schemas/ldap/openldap/freeradius-clients.ldif
	* doc/schemas/ldap/openldap/freeradius-clients.schema
	* doc/schemas/ldap/openldap/freeradius.ldif
	* doc/schemas/ldap/openldap/freeradius.schema
	* doc/schemas/ldap/radiusclients-edirectory.ldif
	* doc/schemas/ldap/radiusclients-openldap.ldif
	* doc/schemas/ldap/radiusclients-openldap.schema

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/5f92fc7ae2ecabb4aa2a6ac791980cf8310c4ca3
====== 
Change IANA number in LDAP schemas from 3317 to 11344

No idea who 'Port Community Rotterdam' are, but we have our own IANA number, so should be using it.

Arran Cudbard-Bell at 2014-07-25T21:48:29Z
Files modified:
	* doc/schemas/ldap/iplanet.ldif
	* doc/schemas/ldap/iplanet.schema
	* doc/schemas/ldap/openldap.ldif
	* doc/schemas/ldap/openldap.schema

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/28096ea6c0a851a37f8780b18d2c4268f407538f
====== 
Hack to get TLS-PSK-Identity

Alan T. DeKok at 2014-07-25T20:18:42Z
Files modified:
	* src/main/listen.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/46e74e8b85e297b3ee73d5ac61847741f5c19008
====== 
Needs cast to long long int

Arran Cudbard-Bell at 2014-07-25T18:47:23Z
Files modified:
	* src/modules/rlm_expr/rlm_expr.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/534a9cde330298c9b7f687488a90e52cccaae152
====== 
print 64bit rlm_expr result

Arran Cudbard-Bell at 2014-07-25T18:25:39Z
Files modified:
	* src/modules/rlm_expr/rlm_expr.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c4285d89ddbfbffcfc4c9a986e517a29f836a953
====== 
Continue to build functions which don't rely on libpcap, when we don't have libpcap

Arran Cudbard-Bell at 2014-07-23T18:49:32Z
Files modified:
	* src/include/pcap.h
	* src/lib/pcap.c
	* src/main/radsniff.c
	* src/modules/proto_arp/proto_arp.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8be604639e2327998316b8657cb4ffa986159c1c
====== 
Fix formatting of switch statements

Arran Cudbard-Bell at 2014-07-23T18:40:57Z
Files modified:
	* src/lib/dict.c
	* src/lib/getaddrinfo.c
	* src/lib/pcap.c
	* src/lib/print.c
	* src/lib/radius.c
	* src/lib/snprintf.c
	* src/lib/token.c
	* src/lib/valuepair.c
	* src/main/acct.c
	* src/main/auth.c
	* src/main/collectd.c
	* src/main/detail.c
	* src/main/evaluate.c
	* src/main/modules.c
	* src/main/radwho.c
	* src/main/realms.c
	* src/main/soh.c
	* src/main/tls.c
	* src/main/unittest.c
	* src/main/util.c
	* src/main/valuepair.c
	* src/main/xlat.c
	* src/modules/rlm_cache/rlm_cache.c
	* src/modules/rlm_couchbase/couchbase.c
	* src/modules/rlm_couchbase/mod.c
	* src/modules/rlm_couchbase/rlm_couchbase.c
	* src/modules/rlm_eap/libeap/comp128.c
	* src/modules/rlm_eap/types/rlm_eap_mschapv2/rlm_eap_mschapv2.c
	* src/modules/rlm_eap/types/rlm_eap_peap/peap.c
	* src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c
	* src/modules/rlm_eap/types/rlm_eap_tnc/rlm_eap_tnc.c
	* src/modules/rlm_eap/types/rlm_eap_ttls/rlm_eap_ttls.c
	* src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c
	* src/modules/rlm_exec/rlm_exec.c
	* src/modules/rlm_expr/paircmp.c
	* src/modules/rlm_expr/rlm_expr.c
	* src/modules/rlm_ippool/rlm_ippool_tool.c
	* src/modules/rlm_ldap/attrmap.c
	* src/modules/rlm_ldap/clients.c
	* src/modules/rlm_ldap/groups.c
	* src/modules/rlm_ldap/ldap.c
	* src/modules/rlm_ldap/rlm_ldap.c
	* src/modules/rlm_mschap/rlm_mschap.c
	* src/modules/rlm_otp/otp_pw_valid.c
	* src/modules/rlm_pam/rlm_pam.c
	* src/modules/rlm_perl/rlm_perl.c
	* src/modules/rlm_radutmp/rlm_radutmp.c
	* src/modules/rlm_rediswho/rlm_rediswho.c
	* src/modules/rlm_soh/rlm_soh.c
	* src/modules/rlm_sql/drivers/rlm_sql_firebird/sql_fbapi.c
	* src/modules/rlm_sql/rlm_sql.c
	* src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c
	* src/modules/rlm_unix/rlm_unix.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a3baf615892d9fa3b36507ae6cf53a17f45277d4
====== 
Merge pull request #740 from qnet-herwin/debian_var_run_freeradius

Debian: Ensure some directories exist

Arran Cudbard-Bell at 2014-07-21T18:35:59Z
Files modified:
	* debian/freeradius.postinst

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1a761a4fbce0914dd9c462f8a579f34778c0fc3c
====== 
Debian: Ensure some directories exist

This prevents some warnings when installing the package.

Herwin Weststrate at 2014-07-21T18:29:59Z
Files modified:
	* debian/freeradius.postinst

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/fed5bcbb59c3471bddc3018c711e83f87b627931
====== 
Other perl formatting

Arran Cudbard-Bell at 2014-07-21T16:54:44Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/316a7c96b780d94e4a614fb64635d8eda72f1184
====== 
Fix multivalues attributes in rlm_perl

Arran Cudbard-Bell at 2014-07-21T16:54:01Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/2bdf7a9d99a80c7fc90b246f3d6e3933cd92b1dd
====== 
Merge pull request #739 from sylphlin/master

Add the gigawords calculation for MSSQL in accounting stop SQL clause

Alan DeKok at 2014-07-21T14:35:35Z
Files modified:
	* raddb/mods-config/sql/main/mssql/queries.conf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9ca9068e03aaa62430beb0b9dc7fa8fba6b0022b
====== 
Add the gigawords calculation for MSSQL in accounting stop SQL clause

root at 2014-07-21T08:42:42Z
Files modified:
	* raddb/mods-config/sql/main/mssql/queries.conf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/83a0e34fcdb86dbf05b8bc8700b11f0a7d0f7532
====== 
Merge pull request #737 from herwinw/segfault_invalid_file_perl

Added a NULL check to rlm_perl

Alan DeKok at 2014-07-20T15:22:37Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f8df37ad5a8e938d84ec73b3f6c01c7ae5da74dc
====== 
Added a NULL check to rlm_perl

Otherwise, trying to start rlm_perl with an invalid file parameter would cause a segfault.

Herwin Weststrate at 2014-07-20T10:57:21Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/ab5a15eb51283727b56c8c0eddef03fb57ee0d5c
====== 
dhcpclient - timeout and decline, release, inform

Added receive timeout on socket according to -t option (retries are
still not handled).
Added commands for "decline", "release" and "inform" messages.
Updated usage.

Nicolas C (via Arran Cudbard-Bell)@2014-07-16T20:52:27Z
Files modified:
	* src/modules/proto_dhcp/dhcpclient.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/403230d9264fd0e6ce4fabf9a5aee95940d654b0
====== 
Add description of -P option to man pages

Add description of -P option to radtest and radclient man pages.

Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:51:00Z
Files modified:
	* man/man1/radclient.1
	* man/man1/radtest.1

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/55f203ae0898fb702b18aca8ef46e04a334fb48e
====== 
Clarify conditions of limit hit SNMP notifications

Use "hit" instead of "reach" in the descriptions of serverMaxRequest and
serverMaxThreads SNMP notifications to make it clearer that they trigger
upon attempt to exceed the limit, not upon reaching the maximum allowed
value.

Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:56Z
Files modified:
	* mibs/FREERADIUS-NOTIFICATION-MIB.txt

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c1970606d45bfd82c14306b25453dd22e1d10ae6
====== 
Switch .cnf files to sha256 message digest

Use sha256 as default_md (message digest) in all .cnf files as it is
more secure than the previous, now considered weak, sha1.

Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:53Z
Files modified:
	* raddb/certs/ca.cnf
	* raddb/certs/client.cnf
	* raddb/certs/server.cnf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/2ec21dd0d1772471e34fbe37541bf74d5c847f29
====== 
Add minimal rlm_krb5 documentation file

Add doc/modules/rlm_krb5 - a minimal rlm_krb5 module documentation file,
based on the wiki page. Update raddb/mods-available/krb5 comments to
point to the actual and proper location.

Nikolai Kondrashov (via Arran Cudbard-Bell)@2014-07-16T20:50:50Z
Files modified:
	* doc/modules/rlm_krb5
	* raddb/mods-available/krb5

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/54b984f780ffafaf93bb0a392f6409a37fc75983
====== 
Check BN_rand_range return value

CVE-2014-4733.

In practice, the function should never fail.

jvoisin (via Alan T. DeKok)@2014-07-15T01:37:05Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/52328081b0afb6b756c2bfa15a3c1203a9ec50f3
====== 
Constant time memory comparison.

CVE-2014-4731.

Non-constant time comparisons usually require millions of packets
in order to get enough statistics.  This is VERY hard to do with
WiFi or wired 802.1X.  The delays on switch port open / close
are on the order of seconds.

jvoisin (via Alan T. DeKok)@2014-07-15T01:37:03Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/403722205996c5d536921669d413aa5ae42d0459
====== 
Use *_clear_free instead of *_free.

CVE-2014-4732

jvoisin (via Alan T. DeKok)@2014-07-15T01:37:02Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_pwd/eap_pwd.c
	* src/modules/rlm_eap/types/rlm_eap_pwd/rlm_eap_pwd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c272a5cd9cc6c9ba420a2743a395f5ae12633d1f
====== 
dhcpclient - store xid when encoding request

Fixes the incorrect debug message "Encoding DHCP-Discover of id
ffffffff".
And this will allow to correlate xid from response (should be done by
the client, but not yet).

Nicolas C (via Alan T. DeKok)@2014-07-13T19:29:07Z
Files modified:
	* src/modules/proto_dhcp/dhcp.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/227a946b2c35efebad26cd0eafa3ce876d8817d1
====== 
Add module type sanity check

Arran Cudbard-Bell at 2014-07-12T19:41:47Z
Files modified:
	* src/main/modules.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/7911d9dd94c0afd8b21535eb5cc702fbe36fd247
====== 
Add support for connection pool reuse

Arran Cudbard-Bell at 2014-07-12T16:53:34Z
Files modified:
	* src/include/conffile.h
	* src/include/connection.h
	* src/include/modpriv.h
	* src/main/conffile.c
	* src/main/connection.c
	* src/main/modules.c
	* src/modules/rlm_couchbase/rlm_couchbase.c
	* src/modules/rlm_krb5/rlm_krb5.c
	* src/modules/rlm_ldap/rlm_ldap.c
	* src/modules/rlm_redis/rlm_redis.c
	* src/modules/rlm_rest/rlm_rest.c
	* src/modules/rlm_smsotp/rlm_smsotp.c
	* src/modules/rlm_sql/sql.c
	* src/modules/rlm_yubikey/validate.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/05740186b3a30d9bab81b1f4c9c714d132ca8f85
====== 
Convert another argument to bool

Arran Cudbard-Bell at 2014-07-12T16:28:21Z
Files modified:
	* src/include/modpriv.h
	* src/main/command.c
	* src/main/modcall.c
	* src/main/modules.c
	* src/modules/rlm_rediswho/rlm_rediswho.c
	* src/modules/rlm_sqlhpwippool/rlm_sqlhpwippool.c
	* src/modules/rlm_sqlippool/rlm_sqlippool.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/b0a203fab54b3524d461c968bae06905ea064739
====== 
Typo

Arran Cudbard-Bell at 2014-07-10T18:40:43Z
Files modified:
	* src/include/connection.h
	* src/main/connection.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/fee86a05bbed6f174eac0f35eaba16c3c4affbc9
====== 
Formatting and documentation

Arran Cudbard-Bell at 2014-07-10T18:40:43Z
Files modified:
	* src/main/conffile.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/6c9b6bf4accdc4d5948708717b88bceb7ff97709
====== 
find_client: min prefix of 0 needs to work

Use signed loop counter to permit 0-1 to be <= min_prefix

Sam Hartman (via Alan T. DeKok)@2014-07-10T18:07:50Z
Files modified:
	* src/main/client.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/dfcb6f2270bfe5a0b89765017f1d26903dbd8989
====== 
fr_inaddr_mask fix 0 prefix

Don't depend on the behavior of shifting by 32-bits on a 32-bit type.

Sam Hartman (via Alan T. DeKok)@2014-07-10T18:07:48Z
Files modified:
	* src/lib/misc.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/59c761e8ccfd50c7d813c2756bd36bcf08a97407
====== 
Allow User-Name in CUI reply

Alan T. DeKok at 2014-07-10T05:22:18Z
Files modified:
	* raddb/policy.d/cui

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/195a17d58a2224c00124680279291bea96f31d29
====== 
Remove useless extern declarations

Arran Cudbard-Bell at 2014-07-10T00:28:58Z
Files modified:
	* src/include/libradius.h
	* src/include/missing-h
	* src/include/rad_assert.h
	* src/include/radiusd.h
	* src/include/tls-h
	* src/lib/dict.c
	* src/lib/print.c
	* src/lib/radius.c
	* src/main/mainconfig.c
	* src/main/tls.c
	* src/main/tls_listen.c
	* src/modules/rlm_eap/libeap/eap_chbind.h
	* src/modules/rlm_eap/libeap/eap_tls.c
	* src/modules/rlm_eap/libeap/eap_types.h
	* src/modules/rlm_mschap/opendir.c
	* src/modules/rlm_mschap/rlm_mschap.c
	* src/modules/rlm_opendirectory/rlm_opendirectory.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/e0e86e10681c70f4afbae3a9d21578a7f86e3ee2
====== 
Cleanup EAP-SIM macros

Arran Cudbard-Bell at 2014-07-10T00:28:58Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_sim.h
	* src/modules/rlm_eap/libeap/eapsimlib.c
	* src/modules/rlm_eap/radeapclient.c
	* src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/31eebf381775229b14fe6ef4a8eff4cdd90c9b84
====== 
Debug condition is now a fr_cond_t

Arran Cudbard-Bell at 2014-07-10T00:28:58Z
Files modified:
	* src/main/mainconfig.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9ae938982d3df106d51d2310ff27e6ed2032f052
====== 
Limit which operators can be used with LDAP group comparison

and other minor cleanups

Arran Cudbard-Bell at 2014-07-10T00:28:58Z
Files modified:
	* src/modules/rlm_ldap/groups.c
	* src/modules/rlm_ldap/rlm_ldap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/ff7c91c08d3bc20c4f600d3ca46a02d133baf8f4
====== 
Use loop index to get description.  Closes #729

Alan T. DeKok at 2014-07-09T21:33:52Z
Files modified:
	* src/main/tls.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/836edc3d32acec6433e115192bdfdf217e75889e
====== 
A parent config section might not exist

when dynamically adding a home server.

Alan T. DeKok at 2014-07-09T21:29:21Z
Files modified:
	* src/main/realms.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1d0b35b201537621f452ea1fe0c1df67a88b1269
====== 
Formatting

Arran Cudbard-Bell at 2014-07-09T02:09:29Z
Files modified:
	* src/include/token.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/785a190d49d7f5f845b8688645e0b54c9dc72553
====== 
Fixup Sqlite schema

Arran Cudbard-Bell at 2014-07-09T02:09:26Z
Files modified:
	* raddb/mods-config/sql/main/sqlite/schema.sql

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c1153cd0d46a803deacfd81c6984da7334b8d7d6
====== 
Merge pull request #728 from spaetow/patch-1

Update cui

Arran Cudbard-Bell at 2014-07-08T13:50:47Z
Files modified:
	* raddb/policy.d/cui

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/56f0bd126467af919f176fb46cc9a766216598ff
====== 
Update cui

Updated comments to clarify the dual purpose of the unlang fragment.

Stefan Paetow at 2014-07-08T10:45:01Z
Files modified:
	* raddb/policy.d/cui

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3875518cef0a654e744b2929b1f26e84b6315437
====== 
Try and make dlopen library search messages clearer

Arran Cudbard-Bell at 2014-07-08T05:24:53Z
Files modified:
	* src/main/modules.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a063aa327d86ab3554db2cfcf8552b1414265f2e
====== 
Remove reply:User-Name only if there's a reply:CUI

Alan T. DeKok at 2014-07-08T04:35:41Z
Files modified:
	* raddb/policy.d/cui

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1827f88607f287d841eaf980dabb9f7b78c118af
====== 
Formatting

Arran Cudbard-Bell at 2014-07-07T20:28:21Z
Files modified:
	* src/modules/rlm_ldap/groups.c
	* src/modules/rlm_ldap/rlm_ldap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/fe4970c8613e232e63b02ed30891c0521e469140
====== 
Merge pull request #726 from herwinw/peap_proxy_as_eap_boolean

Some cleanups in rlm_eap{peap,ttls} headers

Arran Cudbard-Bell at 2014-07-07T20:04:01Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h
	* src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/5929a1d63f19881b276f20929a018c16a69a30f0
====== 
Use enums instead of define lists in rlm_eap_peap

But only for the values that are only used internally.

Herwin Weststrate at 2014-07-06T12:55:03Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/06ebd7ef91a97ab19f18e9fa8d9655d66ef37051
====== 
Changed integer type for rlm_eap_{ttls,peap} tunnel types to bool where applicable

Herwin Weststrate at 2014-07-06T12:37:27Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_peap/eap_peap.h
	* src/modules/rlm_eap/types/rlm_eap_ttls/eap_ttls.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/995e77fb5c260f28feffb94c88852f912bea5afa
====== 
As posted to the list

Alan T. DeKok at 2014-07-07T18:10:05Z
Files modified:
	* share/dictionary
	* share/dictionary.dragonwave

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d88c3145fa9c361850a4b9391bd5a00209973693
====== 
radeapclient - fix send_packet

I spotted two errors in radeapclient.c, introduced in the following
previous commits.
With this fix, radeapclient is now useable again.

1)
Commit: c8a062a112f17a5810d311dc0e0acfe963b2d440
(2014/06/13)

- send_packet(rep, &req);
-
- if (!req) return -1;
+ send_packet(req, &rep);
+ if (!rep) {

Arguments got reversed. Hence segmentation fault later when doing:

for (vp = req->vps; vp != NULL; vp = vpnext) {

Bit of caution on the wording used in radeapclient:
"req" is the request coming FROM the server. (because this is not a
"request" in RADIUS sense, but an EAP-Request within the EAP-SIM
transaction.)
"rep" is the response from the client TO the server (EAP-Response).

2)
Commit: bc3676835c3dcc220ab518d4c3c35962bc0f8be2
(2014/05/02)

In "send_packet":

+ if (!req || !rep || !*rep) return -1;

*rep == NULL is the expected behaviour...

Nicolas C (via Arran Cudbard-Bell)@2014-07-04T17:09:17Z
Files modified:
	* src/modules/rlm_eap/radeapclient.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/4f50d728a9e3f5fb6aea6653d127fadcb83eea9d
====== 
Merge pull request #724 from pwdng/master

Update redhat spec file

Arran Cudbard-Bell at 2014-07-04T15:54:54Z
Files modified:
	* redhat/freeradius.spec

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1ff282afcc477b90869d2690ce22f0601a5cc6a7
====== 
In redhat spec file, update dependency on json-c to version 0.10 as 0.11 only exists for fedora and 0.10 builds ok

Philippe Wooding at 2014-07-04T14:03:19Z
Files modified:
	* redhat/freeradius.spec

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/30efae5bc96185eab3e9b0701b27c08d822b4686
====== 
Update list of installed files in redhat spec file

Philippe Wooding at 2014-07-04T14:03:19Z
Files modified:
	* redhat/freeradius.spec

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/472b5574d7423bc4fb5e9852ccea049087324ce6
====== 
Update redhat spec file to reflect the fact rlm_host is no longer experimental.

Philippe Wooding at 2014-07-04T12:30:39Z
Files modified:
	* redhat/freeradius.spec

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/a9084db4c17dc77d2d329e1b5249905d6673169a
====== 
Revert version to 3.1.0 in redhat spec.

Philippe Wooding at 2014-07-04T12:13:30Z
Files modified:
	* redhat/freeradius.spec

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/b1ce69e0e2fd9f29075996f2dd8e194e8ae74ab3
====== 
Use correct type for length

Alan T. DeKok at 2014-07-03T02:00:10Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/ee44b6952e13b082573e3f31e992a2b83f3484c8
====== 
No need for casting in talloc_array_length()

Alan T. DeKok at 2014-07-03T01:45:57Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/572c38c5823fd6551bd3752bf99af399e5ef5026
====== 
Channel bindings fixes

-fix size calculation
-skip unwanted attrs when copying
-add safety check to copy code in case size is wrong
-add cast to get correct result from talloc_array_length()

Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:44:25Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9900f1166dec32c5818a2b11a188b0800791d288
====== 
Don't call free on talloc'ed channel bindings packet

Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:44:24Z
Files modified:
	* src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/fddcb36c9eb2eaa5716eb0e897fc8fb6b02fb132
====== 
Fix cursor initialization bugs in eap_chbind_vp2packet

Kevin Wasserman (via Alan T. DeKok)@2014-07-03T01:44:23Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_chbind.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/56bb6254260b52a44042c88790523531b17a2b87
====== 
Merge pull request #720 from qnet-herwin/perl_arrays

Fixed adding attributes with multiple values to rlm_perl

Arran Cudbard-Bell at 2014-07-02T19:35:36Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/136839028c267856bc3c189b5e12f1d61317b7a3
====== 
Fixed adding attributes with multiple values to rlm_perl

Without this fix, the array in Perl would start with the value of the
first attribute in the packet, combined with the actual values of the
attribute.

The debug log would look like this:

$RAD_REPLY{'User-Name'}[0] = &reply:User-Name -> 'anonymous'
$RAD_REPLY{'h323-credit-amount'}[1] = &reply:h323-credit-amount -> '100'
$RAD_REPLY{'h323-credit-amount'}[2] = &reply:h323-credit-amount -> '101'

The actual value of $RAD_REPLY{'h323-credit-amount'} is
['anonymous','100','101']

Herwin Weststrate at 2014-07-02T19:21:01Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/bff37ca5088181511f590c7a8182a11fb34f702c
====== 
3.0.x - Make EAP-SIM work again - proper encoding of EAP-SIM attributes within EAP-Message

This fix follows the issue I logged (on the mailing list, not on GitHub)
on June 11th.

As a reminder, the problem happened after a commit which (among other
things) modified the EAP-SIM attributes.
Since this commit, EAP-SIM authentication do not work because
EAP-Message is not properly encoded anymore by FreeRADIUS.

I believe the commit is the following:

https://github.com/FreeRADIUS/freeradius-server/commit/39df09e42d80a96363be0bddee2ff0ba97fdb035

So, here is a fix.

I also fixed the attributes issue in radeapclient, but at the moment the
binary is unusable: it crashes, and I don't have time to look into this.
(I tested the fix with another EAP client)

Nicolas C (via Arran Cudbard-Bell)@2014-07-01T19:48:43Z
Files modified:
	* src/modules/rlm_eap/libeap/eapsimlib.c
	* src/modules/rlm_eap/radeapclient.c
	* src/modules/rlm_eap/types/rlm_eap_sim/rlm_eap_sim.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1fcbd068f044ce76aa0353deed611deb7cd4e46a
====== 
Inline breaks linking?

Arran Cudbard-Bell at 2014-07-01T15:58:37Z
Files modified:
	* src/include/libradius.h
	* src/lib/dict.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/ab02411d66ed3ba2cb94d2eec8d02b27e60e5d1b
====== 
Fix capitalisation in UKERNA dictionary Fixes #718

Arran Cudbard-Bell at 2014-07-01T15:44:55Z
Files modified:
	* share/dictionary.ukerna

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/fb1f9a7cf7480b1458a962882c904326d38d9f47
====== 
Other things still reference dict_attr_allowed_chars

Arran Cudbard-Bell at 2014-07-01T15:42:53Z
Files modified:
	* src/include/libradius.h
	* src/lib/dict.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d992482da429cf205e79b19aa1b1a7615f152d6b
====== 
Fixed reference to config file

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:53Z
Files modified:
	* raddb/sites-available/default

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/00e8e42f1bb7cd2aca413043864aaa2b9e8cf43b
====== 
Formatting fixes in rlm_perl

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:53Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f3e6a8995cd1e3738b2df8b9c15a9a75a44a8ad7
====== 
Readability fixes in mods-available/perl

Alignment is now stable with any tab width.

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:52Z
Files modified:
	* raddb/mods-available/perl

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/e9cd5f614a80d8e2a7eb59dbb00f31e1c3dcf9b7
====== 
Fixed typo in rlm_sql.c

s/afftected/affected/

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:52Z
Files modified:
	* src/modules/rlm_sql/rlm_sql.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/2c45895ef69a40edaf9bb7013bae79eaba0e854b
====== 
Fixed some tabs/spaces in default virtual server

Herwin Weststrate (via Arran Cudbard-Bell)@2014-07-01T15:42:52Z
Files modified:
	* raddb/sites-available/default

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/4116dc1c672062dfcf6928fbf847408b53c62f79
====== 
Use RFC language in eap.c messages

Arran Cudbard-Bell at 2014-07-01T13:38:57Z
Files modified:
	* src/modules/rlm_eap/eap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/38327a7337b4aac18e7cec9747f61e5bb85a2d75
====== 
No need to call exit twice

Arran Cudbard-Bell at 2014-07-01T13:38:57Z
Files modified:
	* src/lib/event.c
	* src/main/detail.c
	* src/main/radiusd.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c615ec735ce17d07f6cb37416e1b9e183c8d9abb
====== 
Better errors on junk chars in dict.c

Arran Cudbard-Bell at 2014-07-01T13:38:57Z
Files modified:
	* src/lib/dict.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/93ec9e971dab7a95fe2ba48a441036e24a85035f
====== 
We can now use talloc_free() for listeners

Alan T. DeKok at 2014-06-27T17:05:23Z
Files modified:
	* src/main/process.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/e6489092c694f2ae5f505168b80ee505a4f06be8
====== 
Proxy sockets use common_socket_free().  Closes #680

Alan T. DeKok at 2014-06-27T17:05:22Z
Files modified:
	* src/main/listen.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/12041693e38b6db2b2b9b9a70936dbb2cdb61f62
====== 
The default secret is "radsec"

Alan T. DeKok at 2014-06-27T17:05:20Z
Files modified:
	* raddb/sites-available/tls

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d9b8a151b76b3688fea804b4ab4aa79ba5a9c983
====== 
Now that we have default IPv6 listeners, have a v6 client, too

Alan T. DeKok at 2014-06-27T17:05:18Z
Files modified:
	* raddb/clients.conf

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8a84361f81ab84b633b13e6cc9b38c30b7d82a98
====== 
No need for an empty function

Alan T. DeKok at 2014-06-27T17:05:16Z
Files modified:
	* src/main/listen.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/2d70e948848ca2e6430e184dec1d8ed6766340f5
====== 
Move checks for virtual_server to listen_parse()

Which is better than scattering them through the code.

Alan T. DeKok at 2014-06-27T17:05:08Z
Files modified:
	* src/main/listen.c
	* src/main/modules.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/57fd01d5559ab9ce53d035a0614eaba9891f2973
====== 
Merge pull request #715 from qnet-herwin/perl_remove_rad_config

Removed RAD_CONFIG entry in Perl

Arran Cudbard-Bell at 2014-06-27T15:59:06Z
Files modified:
	* raddb/mods-available/perl
	* raddb/mods-config/perl/example.pl
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/099f9948a416d010e3577ff60bf09fc580db7e8a
====== 
Removed RAD_CHECK entry in Perl, protomed RAD_CONFIG

RAD_CONFIG used to be an undocumented read-only clone of RAD_CHECK,
where RAD_CHECK was named incorrectly. Remove the RAD_CHECK, make
RAD_CONFIG read/write.

This should not be merged to 3.0.x, as it breaks backwards
compatibility.

Herwin Weststrate at 2014-06-27T13:13:29Z
Files modified:
	* raddb/mods-available/perl
	* raddb/mods-config/perl/example.pl
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/f923e1861c582f2ece87f428e675dd792ef8fa24
====== 
IKEv2 fixes required on our side

Arran Cudbard-Bell at 2014-06-27T15:47:12Z
Files modified:
	* configure
	* configure.ac
	* src/include/autoconf.h.in
	* src/modules/rlm_eap/types/rlm_eap_ikev2/logging_impl.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/860e93eaf5b75f5a8cee4d73370ff89175bce3fe
====== 
Assume RFC 3542 compliance for IPv6 socket options, which fixes IPv6 support on FreeBSD 10.0

Arran Cudbard-Bell at 2014-06-27T13:30:49Z
Files modified:
	* configure
	* configure.ac
	* src/include/autoconf.h.in
	* src/lib/udpfromto.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d672bc5874694ddc6f9c7924bf87c3ad1fd58143
====== 
Confusing comments

Arran Cudbard-Bell at 2014-06-27T12:09:29Z
Files modified:
	* src/lib/debug.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/82f40d28b7cd1b213ff84dbcb5ed438aaca582aa
====== 
Fix for ptrace check under FreeBSD

Arran Cudbard-Bell at 2014-06-27T12:01:08Z
Files modified:
	* src/lib/debug.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3327c68e5a36a792af83a7c128938d8e7ec72888
====== 
Typos

Arran Cudbard-Bell at 2014-06-27T09:21:07Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8f5c60da443c5e35c49c262ce1b0bf69e0e13c47
====== 
Use standard return codes

Arran Cudbard-Bell at 2014-06-26T22:41:22Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/6b0ba314ffb33355d0bf3eb41f2fa593cd1acbcc
====== 
Convert binary values to octets type attributes correctly

Arran Cudbard-Bell at 2014-06-26T21:34:38Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/8021cc4b1a0983c3f625ceece07f0844dc7c2ac2
====== 
Rename vpsname to list_name

Add array indexes to multivalued attributes

Arran Cudbard-Bell at 2014-06-26T21:34:12Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/3b21c1f80481b61b31575985e04e7b76f912ea71
====== 
Fixup debugging and formatting in rlm_perl

Arran Cudbard-Bell at 2014-06-26T19:12:24Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c4fedb631564b7aae92d3a55ed1c817b13ee0def
====== 
Merge pull request #714 from qnet-herwin/perl_more_debugging

Improve debug logging of rlm_perl

Arran Cudbard-Bell at 2014-06-26T16:28:24Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/08aa3cf49d391798fc9fa758e05966cdef30fa99
====== 
Improve debug logging of rlm_perl

Don't just show the attributes being copied, but also say where they are
copied from/to.

Herwin Weststrate at 2014-06-26T15:47:37Z
Files modified:
	* src/modules/rlm_perl/rlm_perl.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/c03155f522205b60a373e4dd574e35fb298a4113
====== 
Set a timer for marking a home server dead.  Closes #712

Alan T. DeKok at 2014-06-26T14:33:52Z
Files modified:
	* src/main/process.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/52d8e49e90c519c2017c1ea3c49b25f35ea6385b
====== 
Pass2 for attributes in existence checks

	if (&foo-LDAP-Group) {
		...
	}

Alan T. DeKok at 2014-06-26T14:18:43Z
Files modified:
	* src/main/modcall.c
	* src/main/parser.c
	* src/tests/unit/condition.txt

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/dbca6aecf64d21e160e5af7bde750a6838a0ded9
====== 
Remove redundant includes of netinet/in.h

Arran Cudbard-Bell at 2014-06-26T12:56:07Z
Files modified:
	* src/include/pcap.h
	* src/include/radsniff.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/ebd509389f47e2137381c5af542c036b76d76fc8
====== 
-- 
This commit summary was generated @2014-07-27T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).