FreeRADIUS 1.1.0 has been release
Alan DeKok
aland at ox.org
Thu Jan 12 21:49:50 CET 2006
I'm happy to announce that after a long while, a new version of
FreeRADIUS has been release. See http://www.freeradius.org for a link
to the tar file and signature.
ChangeLog:
Feature improvements
* rlm_ldap has "set_auth_type" configuration option, which should
address some configuration problems when using it.
* Fix MIT Kerberos bug
* Modules can be load balanced, both in isolation and redundantly.
See doc/load-balance.txt for more information.
* rlm_perl is now marked "stable"
* N-tier certificate patch from Mohammed Petiwala.
* Copied dictionaries from the CVS head (many, many, more vendors)
* Enabled support for weird VSA formats, like Lucent and Starent.
* Support encrypted IP address and integers, for Juniper clients.
* Add PEAP machine authentication support in module "rlm_mschap".
* Support User-Password field encryption in digest mode.
* rlm_x99_token has become rlm_otp (with lots of changes).
* Add rlm_sqlcounter to the list of stable modules.
* Read MySQL specific options in sections [freeradius] and [client]
from file "my.cnf".
* Support the ${Cisco-AVPair[n]} syntax.
* Execute modules in {Pre,Post}-Proxy-Type stanzas.
* Add new options to radclient to run stress tests on the server.
* New module "rlm_sql_log" to postpone the storage of accounting data
in a SQL database. See rlm_sql_log(5) manpage.
* New program "radsqlrelay" which sends the SQL logfile according to
the SQL server's capabilities.
Bug fixes
* #306 (HUP when built with threads, but executed with -s)
* #285 (more attributes in dictionary.cisco.vpn3000)
* rlm_digest has a number of bug fixes to authentication types.
* Don't leak memory in module "rlm_sql".
* Update the dictionaries, so that VALUEs with the same name,
but different numbers, aren't allowed.
* Queue the request before looking for available threads.
* Don't free the check items after we received the proxy reply.
* Expand config variables in included files, too.
* Check the return value of accounting modules and don't proxy
invalid requests.
* In rlm_passwd, don't close a file stream more than once.
* Fix format string errors in rlm_sql.c, spotted by Primoz Bratanic.
* Walk the whole string in when escaping strings in rlm_ldap.
* Include crypt.h if it is available so we get a prototype for crypt(),
spotted by Konstantin Kubatkin.
* Removed (for almost all uses) length restrictions on vendor names
and VALUE names.
* Don't leak memory when proxying an Access-Challenge response.
* Make the sleep time user-defined, so radrelay can send more than
7 requests/s.
* Fix a memory leak in rlm_checkval.
* radclient doesn't resend countless times packets with invalid
signature.
* Fix segfault and mem leak in rlm_pam.
Alan DeKok.
More information about the Freeradius-Users
mailing list