Commit report for v4.0.x branch

Wed Dec 21 01:00:02 CET 2016

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server)

======
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEcBAABCAAGBQJYWWR6AAoJEH0Oec13Yh7NbLMH/2pFtf5GN5r7ceykjzVo5O4v
 C/lfIXq7KtD/j+aeoDvSrI/SLoGeLXVJ3rUnJ0wt3DjfoQ1375y/ZVelLLfbNxPS
 JyG/SVHklJTqO/rmZaV9+7xtZD/9OH5hT5MdAX8EuRF0CurrXHEfYyZtfU48hEta
 60eFYE0jqDKTMcWBDd6S8uvMzU40w515k4dmRuIsAIOP3COnRBXDbKljwSYPy7a/
 kvVuxxgVFnucUupfZc7uSPg5BhEPtWbp3VH/9lwOnV/iplgE/DkKIK1+ka/CemdS
 C0TVhRs1zKYArbGozlxl6ki1sPt+8Irit4KiCC/duCvuntfhK7P19YIbnihvcXI=
 =n8HS
 -----END PGP SIGNATURE-----

travis

Alan T. DeKok at 2016-12-20T17:03:53Z
Files modified:
	* src/tests/util/worker_test.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9a18626f08cafa2140794b5cbc6b4fd979d56952
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEcBAABCAAGBQJYWWEJAAoJEH0Oec13Yh7NgbsH/A6v0iFQUzYm+VoI9D6Sne1y
 kAq6vzIzmrvwty7q4ByIMD3r9MeRt6sqxegMnvWDjyLYIKTckNFTKbo1MzFGbTfS
 hImALS1N5CUIqRRfZ6WjKrgGtzq4gBVyN7Wnsd1XcUMBGK3tRssf+EJcvcgQDO2I
 1hxDBswEIOgcG10L7U0VfdoLaJOJxD+nPyPCR70yXQS9ve8DgY7ZGNQMVqCt1k6E
 Ne9ll5qC7wdT5WKiqmjS57Xu3tBNN3prtCXFFtQ/Q9mLvivVMRKTn4mPuqsOGeK1
 YIvNdLhfYQqlp437xAyTFlLAlZ6K3LEjqrKcb05cXLKwTUCVDOviltDKtURXmBE=
 =rghS
 -----END PGP SIGNATURE-----

remove fr_worker_control_plane()

fr_worker_channel_create() should be used instead

Alan T. DeKok at 2016-12-20T16:48:58Z
Files modified:
	* src/util/worker.c
	* src/util/worker.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/54dd862ffc504fecce651559df81e9b2f5ad492e
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEcBAABCAAGBQJYWV+iAAoJEH0Oec13Yh7N1ewIAJHO22UGs3fD6nMDiWINqjEh
 voIcJ3J/JRu8NkIAmsSwvizpLWVAywcMNm8Mt8uRsa2kUD7FuBzRS9CQXCgGT2d5
 KWSnWKTpr8z2GDqU/6goVv/FPpWhzj+8X8Wgi3V0Cgfhs4JG6kXWLyJ/BIFSiJkv
 0khjDXVsKtTSpUI4luvqjb9NWHH3MxJKeOUisip4r4Bkmbg9z5iThjYXw4tYk8ZK
 8qqCdSvtRvweXeDZol8D0M/Xbgqp7I6wQz9Ea4kTF6ZWK/0OSzNTXCr1hdbNmD0H
 eFOrku9HTVapnDWVKIHoNbHcsTQx3SGmKoeeOHgRrsTxM8GHp7PVhwm+ZJMKJcQ=
 =wuky
 -----END PGP SIGNATURE-----

Include NAKs, which are required for the channels to work

If the worker doesn't NAK a request, the master has no idea
that the request has been dropped.

This NAK could arguably be a control-plane message in the
channel, with a helper function.

Alan T. DeKok at 2016-12-20T16:40:55Z
Files modified:
	* src/tests/util/worker_test.c
	* src/util/transport.h
	* src/util/worker.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d2b5a3f7f18e6cfc698fd7bd6c5a713f17864976
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEcBAABCAAGBQJYWV8AAAoJEH0Oec13Yh7NmUgH/3w/tcarQFuI7gNycEhk6AHn
 V6goFSKXtFJnHUUXY1NKNL47ksrxU5dRKmifqqyXlIPWa43kr8MPCG4kvrxfFRHS
 5UwDyQ8g6M/s5yzqwhv92TjXkzo1n83ztQ414qmOVMu++mbVCmnnoqXHaHGZdOes
 HP5CrYBu9Bip70Ta5E8vCJjqJHIcdzHDBfwsNkjQ80ytR67KUfE10I/pg/Oi+jLX
 KNQ5AiQqKhLI2t5G0h1NufBvM8lMyXqG25PJAPG3c8RhQOdGWWOrZ/ZTVE2CG3TG
 uI0/KyTFn2m6SKxOgoSOP3hhrmxpipV4dBUAlqhuCx8Xy/ViuU8rvSyDXJc536E=
 =bLU3
 -----END PGP SIGNATURE-----

don't count RTT for NAKs

which have processing_time = 0

Alan T. DeKok at 2016-12-20T16:40:21Z
Files modified:
	* src/util/channel.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/23b2dfd699ce4b83804ff5e0a6f42a8c42f1591f
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEcBAABCAAGBQJYWVIEAAoJEH0Oec13Yh7N++YH/3rxm7I2k+X7bl3V2tABbwAC
 3EbzxP5FMjozQy9+Tr3pSBf6U5dSe5H4gVBD7o+8QK62P4OYZYzkdnIKiKOAVlrN
 aTsRV6GnoDHh0ZbhDMQXzDgudR8Pg1uYPNwnUcbT0v5kCjkRn4JH010NaoFWyu/E
 a5bP9cxD3J+R5SxLUDSJLpHI3ce8/RZojBkPyGZYVIGIHNSTBVj0E/kYX2T5pLxP
 biAejLbKXBSwwNxp6f40/qeZJ5SYdTs1vEAUmsl+ZVo2HU1hHzfKA1klicYNl6OC
 /Me3v+73wOEACfl8OFChxw1YH/nKCCtG6T3Qr0wLGDg25SC/YCvW3GNHcsjW3bA=
 =6gmk
 -----END PGP SIGNATURE-----

use #ifdef WITH_AUTH_WINBIND

Alan T. DeKok at 2016-12-20T15:45:00Z
Files modified:
	* src/modules/rlm_mschap/rlm_mschap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/493ae1d65e00ab68c0df423f91e8b4e0ccd3bc30
====== 
gpgsig -----BEGIN PGP SIGNATURE-----

 iQEcBAABCAAGBQJYWUhyAAoJEH0Oec13Yh7NS2wH/1m9WcVngv03VRLRxkHK5var
 cKQyBuQWvbqjZeFesZs2kPyjQ4K8J7LNopGjDO2KF0I6BtnkMEhbpY2YXyaA3GWl
 t6I+PcJbFLb6msBO97ljh9teJJUo1BA+rhlU38LwYt3slg3HvL7ohb/On9728CtP
 KxlVQHXh+mczsSFCo9caCJXKAEn/2MHQZxiLSGpx0XYEyTGbNPFBSvVUlVb7rrtn
 y61qq5xy3zzoBkaCpY5RSAOQhCAStYoCnaCjMlXR9tKWki+t4+u8Uvs1kd09k5vp
 MDuxEVNkbQ9s3HWTh/Jc4jbeUxw2k9z+Q7E2WKNQN6t/ZUd/uGy0vzh+MgPX+TQ=
 =T87H
 -----END PGP SIGNATURE-----

fix condition

Alan T. DeKok at 2016-12-20T15:04:18Z
Files modified:
	* src/tests/util/channel_test.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/bd099bfb170c9dcf126904e71497966d82a50f33
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1

 iQIcBAABAgAGBQJYWTKqAAoJENm5M8Eq7XTwiOUP/ipXEuz6vMNVLlJJgkcyelJm
 bRvQrZlFEK8LzlVlpxXqN48Rh6eca62FyEr1mIovmN4uc+gIgUkSgxcjreHtxgf3
 swsnYZdbjJ5FK/HmbSDhOU/7GuTfz+t8Vmdlf55ayoePOZehu1MCpWG66HRPxZIU
 wlv5xAwGqEn80GqvWADrkP0ds5dgnz74SQABLJhw/A45DAjypNGZpuj6owCpOcH4
 s5y3WK9/tkdPMXc6MZcc2gF8dbOl06IkG9PKzeSCrujii19lQUZxe886H3Au7Rhg
 Pfb0FosjvVIw5twSPut7DzXmPbur1QuATIneWo+rW2eWy0tcqqKu2SCwNb4yFUfw
 D1MMpLcAfrXl8OtDGpV+9B0UzcFMyeHQediGsqd1xkqwLUY5VrEPuzNlt2il9Bw6
 M+EUoAf0eAt4ajHAEVwX/eN0fK/IHfcztTDSy73fQ9BRYxPbYuye1ZVrZLxlraz2
 AJGkDOBYreTrhM+hAEAd/Yq3soqTwZZQOLz0bjL3L6+t1Fsmcv5/l1OB2QG0UrS8
 TzEYmM8KbPl6JqpvCKZg+TUZE7BoGPu4MWztdxIQVumt7dHnVMLcwHnsTEJB0li+
 AxFLPp393cEbZVP5uxaAc8ipo9sv/MgVPBfvpDDULmqczIWyZX3ziGIel757uORM
 SDaTQV/uuP4VyIfgmMrt
 =5xWw
 -----END PGP SIGNATURE-----

Allow authentication retry in winbind

A setup with the following properties:

  * Active Directory backend
  * FreeRadius with eap-inner-proxy
  * Windows client with single sign-on
  * User using different casing in username than in backend

may result in failing connections. It looks like Windows reads the
correct username from the domain server once it has logged in, and uses
that to create the MS-CHAP2-Response attribute. The User-Name attribute
is still the one with the incorrect casing, causing the authentication
to fail.

The introduced config option kicks in after a failed authentication: it
reads the correct username from the backend, tries another
authentication, and uses the found User-Name to calculate
MS-CHAP2-Response if the second authentication works.

Herwin Weststrate (via Matthew Newton)@2016-12-20T13:31:22Z
Files modified:
	* raddb/mods-available/mschap
	* src/modules/rlm_mschap/auth_wbclient.c
	* src/modules/rlm_mschap/rlm_mschap.c
	* src/modules/rlm_mschap/rlm_mschap.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/d1c9357b2211e22ae75b30043abb908e20a27fa5
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1

 iQIcBAABAgAGBQJYWTKQAAoJENm5M8Eq7XTwuywQAJk8GaZZZ3XZdYeVZ9FVGvx6
 cQeQ+cLOL2F4J/JBSA2jE41V774dHM8z5U05sZwGBdBQDaCE7971tiTSVtY393dZ
 rQXSQ1dkNmoMNTwA9vOIIN9XjzrNYsryTKEP4m6RD3DNiZ7GbwsplvsBMRE8qney
 +7sGa/Mg83t6BZtjuAmGwiSjyZxCq7gARNpty1zQWhnvEzpG7oH1b+pfijwxtydU
 sHEkU9wJf93x1Sk7dbKzhSfe3G6diHLVcEDUhNXacwLAyGJdtPATchE1iBn18G8c
 LsYUCvke+ieJpBImqhjv0P1+jPX6cWeJLijHZ2eC+khMUTYCwnKHEnhVwlhDhV36
 Ipp8BR+N+ntkjjDy0sxw8nvIp4KVg9qKhJUE1Q8E5LJ51QEiJEVrbLSGK3sHtcrD
 oM6dDp4VkykGIUhxJNt66zx4efdEg3Dc7ysgqBUg8d2WNlDWk80zh3jVsPnEDvSS
 Vx2LvKlYNa2ZVQ0XnlhYk5rOc29gSMFZZ315fpnnBQSOxMwrwwGpaZD71pN3/rne
 vzxH2Pl4CRO8FxzIj70hiUx29zA1DyXe9eeWhZiab3ZdT190YaIOAe8BELK4rNvV
 i9m8mQCx9GOrJm7FYUtb2Ge3xK9iz4SUXyx+co+5yUycYFosvpmBWMJJnJnVfgRv
 Zcl5KrSuUiOtnCelwTcN
 =xdO6
 -----END PGP SIGNATURE-----

rlm_mschap: *inst is const

Matthew Newton at 2016-12-20T13:30:27Z
Files modified:
	* src/modules/rlm_mschap/auth_wbclient.c
	* src/modules/rlm_mschap/auth_wbclient.h

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/41fc494533c00761c2d5cb459d976a9f49b8b4e4
====== 
-- 
This commit summary was generated @2016-12-21T00:00:02Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).