]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
github-actions[bot] [Wed, 10 Sep 2025 04:24:37 +0000 (04:24 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar
Nick Porter [Thu, 4 Sep 2025 14:18:08 +0000 (15:18 +0100)]
Add test of %smtp.send() xlat
Nick Porter [Thu, 4 Sep 2025 12:55:10 +0000 (13:55 +0100)]
Add %smtp.send() xlat
For sending simple emails, e.g. as triggers or for logging exceptions.
Nick Porter [Thu, 4 Sep 2025 12:54:04 +0000 (13:54 +0100)]
Correct debug message types
Nick Porter [Thu, 4 Sep 2025 12:50:05 +0000 (13:50 +0100)]
Use correct rcode depending on why the call could not run
Nick Porter [Thu, 4 Sep 2025 12:45:50 +0000 (13:45 +0100)]
Correct comment
Nick Porter [Thu, 4 Sep 2025 12:44:39 +0000 (13:44 +0100)]
Make sure the randle is released if enqueue fails
Arran Cudbard-Bell [Thu, 4 Sep 2025 11:31:51 +0000 (13:31 +0200)]
Add aliases for sha2/sha3
Arran Cudbard-Bell [Thu, 4 Sep 2025 11:01:47 +0000 (13:01 +0200)]
Equality not assignment...
Arran Cudbard-Bell [Thu, 4 Sep 2025 11:00:42 +0000 (13:00 +0200)]
Add ordering match on attributes, to allow server side sort on profiles to return attributes in a consistent order
Nick Porter [Wed, 3 Sep 2025 18:23:03 +0000 (19:23 +0100)]
Pass the correct uctx when resetting the timer
Nick Porter [Wed, 3 Sep 2025 18:14:14 +0000 (19:14 +0100)]
Retry request will have state TRUNK_REQUEST_STATE_SENT
Nick Porter [Wed, 3 Sep 2025 12:53:13 +0000 (13:53 +0100)]
Pacify Coverity (CID #
1503923 )
Coverity is not correctly doing the calculations inside the loop to
realise that block_len is safely limited to protect against out of
bounds access to tpasswd.
Nick Porter [Wed, 3 Sep 2025 10:50:17 +0000 (11:50 +0100)]
Pacify Coverity (CID #
1520878 )
Coverity doesn't see that fd < 0 means the lock was released
Nick Porter [Wed, 3 Sep 2025 10:39:21 +0000 (11:39 +0100)]
Correct logic for finding trigger section for exfiles (CID #
1665211 )
Nick Porter [Wed, 3 Sep 2025 09:53:14 +0000 (10:53 +0100)]
Pacify coverity (CID #
1665209 , #
1665208 , #
1665207 )
Coverity doesn't follow that s_mac being wrapped in FR_DBUFF_TMP will be
populated by fr_base16_decode.
It also doesn't see that digest and mic will be populated by HMAC.
Nick Porter [Wed, 3 Sep 2025 09:45:01 +0000 (10:45 +0100)]
Ensure pair list is allocated (CID #
1665210 )
Nick Porter [Tue, 2 Sep 2025 09:58:52 +0000 (10:58 +0100)]
Update repo lists after adding NR extras
Nick Porter [Tue, 2 Sep 2025 09:30:40 +0000 (10:30 +0100)]
Doxygen fixes
Alan T. DeKok [Mon, 1 Sep 2025 22:55:58 +0000 (18:55 -0400)]
add backlog parameter for the listen() API
Alan T. DeKok [Tue, 26 Aug 2025 19:20:08 +0000 (15:20 -0400)]
add more comments
Nick Porter [Mon, 1 Sep 2025 10:04:47 +0000 (11:04 +0100)]
Remove redundant options
Nick Porter [Mon, 1 Sep 2025 09:58:25 +0000 (10:58 +0100)]
mode has to be set correctly, due to the CONF_PARSER function
Nick Porter [Mon, 1 Sep 2025 09:53:36 +0000 (10:53 +0100)]
Remove incorrect comment
Nick Porter [Mon, 1 Sep 2025 09:09:23 +0000 (10:09 +0100)]
Enable NR extras repo
The minimum version of libkqueue-dev set in debian/control is higher
than that provided by Ubuntu repos.
Nick Porter [Mon, 1 Sep 2025 08:48:10 +0000 (09:48 +0100)]
Use Module-Name and Module-Instance in global triggers
Nick Porter [Mon, 1 Sep 2025 08:40:09 +0000 (09:40 +0100)]
Use correct value for trigger name
Nick Porter [Fri, 29 Aug 2025 17:03:20 +0000 (18:03 +0100)]
Pass trigger_args to trunk_alloc
Nick Porter [Fri, 29 Aug 2025 17:00:41 +0000 (18:00 +0100)]
Add trigger_args to rlm_tacacs
Nick Porter [Fri, 29 Aug 2025 16:50:06 +0000 (17:50 +0100)]
Add trigger_args to rlm_radius
Nick Porter [Fri, 29 Aug 2025 16:29:42 +0000 (17:29 +0100)]
No need for goto error
Nick Porter [Fri, 29 Aug 2025 16:26:33 +0000 (17:26 +0100)]
Add trigger args to rlm_ldap
Nick Porter [Fri, 29 Aug 2025 16:01:13 +0000 (17:01 +0100)]
Add trigger_args to rlm_sql
Nick Porter [Fri, 29 Aug 2025 15:57:57 +0000 (16:57 +0100)]
Add module_trigger_args_build
As a common helper that can be called by modules which use triggers,
especially intended for modules which use trunks.
Nick Porter [Fri, 29 Aug 2025 15:54:04 +0000 (16:54 +0100)]
Add extra internal attributes for triggers
Nick Porter [Fri, 29 Aug 2025 13:37:16 +0000 (14:37 +0100)]
Correct comment
Nick Porter [Fri, 29 Aug 2025 11:00:45 +0000 (12:00 +0100)]
Add trigger_args to trunk
Nick Porter [Fri, 29 Aug 2025 10:52:02 +0000 (11:52 +0100)]
Remove stray &
Nick Porter [Tue, 26 Aug 2025 16:12:26 +0000 (17:12 +0100)]
Allow control of triggers for rlm_redis_* using a conf option
Alan T. DeKok [Tue, 26 Aug 2025 14:16:57 +0000 (10:16 -0400)]
add a completely bizarre, weird, confusing, and ridiculous dictionary
Alan T. DeKok [Tue, 26 Aug 2025 12:34:26 +0000 (08:34 -0400)]
add more helpful error message
Nick Porter [Tue, 26 Aug 2025 13:58:27 +0000 (14:58 +0100)]
No need for documentation build deps on crossbuild checks
Nick Porter [Tue, 26 Aug 2025 13:18:11 +0000 (14:18 +0100)]
Correct talloc parenting of dynamic radclient
Alan T. DeKok [Tue, 26 Aug 2025 11:41:23 +0000 (07:41 -0400)]
create Event-Timestamp if it doesn't exist
Alan T. DeKok [Tue, 26 Aug 2025 10:47:07 +0000 (06:47 -0400)]
account for Acct-Delay-Time, too
Alan T. DeKok [Mon, 25 Aug 2025 17:25:49 +0000 (13:25 -0400)]
typo
Nick Porter [Mon, 25 Aug 2025 14:44:48 +0000 (15:44 +0100)]
Set box to true if touch succeeds
Nick Porter [Mon, 25 Aug 2025 14:40:24 +0000 (15:40 +0100)]
Add test server environment variables to .vscode launcher
Based on values which match test servers set up by CI server setup
scripts.
Alan T. DeKok [Mon, 25 Aug 2025 14:36:17 +0000 (10:36 -0400)]
update key field based on found struct
Nick Porter [Mon, 25 Aug 2025 14:13:12 +0000 (15:13 +0100)]
Ensure ci is populated
Nick Porter [Mon, 25 Aug 2025 13:55:44 +0000 (14:55 +0100)]
Define %file.touch()
Since it's used by ldap_sync tests
Nick Porter [Mon, 25 Aug 2025 13:19:28 +0000 (14:19 +0100)]
These are freed by freeing request
Nick Porter [Mon, 25 Aug 2025 12:18:03 +0000 (13:18 +0100)]
LDAP and SQL triggers are now driven by trunk code
Which use fixed names of `pool.<trigger name>` rather than
`modules.<module name>.<trigger name>`
Nick Porter [Mon, 25 Aug 2025 12:14:07 +0000 (13:14 +0100)]
WS
Nick Porter [Mon, 25 Aug 2025 12:13:56 +0000 (13:13 +0100)]
Correct comment
Nick Porter [Mon, 25 Aug 2025 12:13:37 +0000 (13:13 +0100)]
Add new MIB for trunk state triggers
Nick Porter [Mon, 25 Aug 2025 10:36:34 +0000 (11:36 +0100)]
Don't attempt to run triggers when there's no event list
Which will happen for any triggers fired late in the shutdown
Nick Porter [Mon, 25 Aug 2025 09:53:52 +0000 (10:53 +0100)]
Set trigger_prefix for rlm_detail
So per-instance triggers can just go in a trigger subsection rather than
in file { trigger { ... } }
Nick Porter [Mon, 25 Aug 2025 09:52:23 +0000 (10:52 +0100)]
If trigger_prefix is defined, use the passed in CONF_SECTION
Allows, for example, rlm_detail, which only outputs to files, to avoid
having to put trigger definitions inside overly nested sections.
Nick Porter [Mon, 25 Aug 2025 09:41:50 +0000 (10:41 +0100)]
Add caching of trigger CONF_PAIRs and trigger undef to exfile
Nick Porter [Mon, 25 Aug 2025 08:11:49 +0000 (09:11 +0100)]
Add optional CONF_PAIR ** argument to trigger()
Allows passing in of known CONF_PAIR and return of found pair, so
triggers which are called often don't have to repeatedly hunt for the
pair.
Nick Porter [Fri, 22 Aug 2025 09:21:38 +0000 (10:21 +0100)]
Make connections triggers optional
Nick Porter [Fri, 22 Aug 2025 09:18:06 +0000 (10:18 +0100)]
Cache when trunk triggers are not found
So we don't hunt for them on every state change.
SQL trunks connections change from ACTIVE to FULL and back on every
query due to the limit of 1 query per connection - so it is unlikely
that triggers would be configured for those states, and caching that
they are not configured saves a lot of conf pair finding.
Nick Porter [Fri, 22 Aug 2025 09:14:15 +0000 (10:14 +0100)]
Make exfile based triggers optional
Otherwise, enabling triggers will cause `rlm_linelog` and `rlm_detail`
to perform a lot of hunting for configured triggers as files are openned
and closed.
Nick Porter [Fri, 22 Aug 2025 09:10:33 +0000 (10:10 +0100)]
Return different values depending on why a trigger was not fired
To allow cacheing of un-defined triggers
Nick Porter [Fri, 22 Aug 2025 07:43:37 +0000 (08:43 +0100)]
Use a conf parser function to find module trunk trigger conf sections
Nick Porter [Thu, 21 Aug 2025 18:17:17 +0000 (19:17 +0100)]
Add CONF_SECTION for trunk connection / request triggers
So modules using trunks can have their own trigger sections.
Nick Porter [Thu, 21 Aug 2025 18:16:16 +0000 (19:16 +0100)]
Move trunk triggers boolean to trunk->conf
Splitting between connection and request and add CONF_PARSER rules to
set the options.
Nick Porter [Thu, 21 Aug 2025 17:24:16 +0000 (18:24 +0100)]
If we find the module "trigger" subsection, use it
Alan T. DeKok [Mon, 25 Aug 2025 12:20:32 +0000 (08:20 -0400)]
minor cleanups and notes
Alan T. DeKok [Mon, 25 Aug 2025 12:19:57 +0000 (08:19 -0400)]
add migration flag for key field transition
there's no configuration for it, but the flag is added automatically
Alan T. DeKok [Mon, 25 Aug 2025 11:34:56 +0000 (07:34 -0400)]
it helps to parse unions here, too
Alan T. DeKok [Sun, 24 Aug 2025 12:12:35 +0000 (08:12 -0400)]
move encode_keyed_struct() to its own function
and remove last vestiges of "flat" encoder
Alan T. DeKok [Sun, 24 Aug 2025 12:04:52 +0000 (08:04 -0400)]
move encode_tlv() to child function
Gerald Vogt [Sun, 24 Aug 2025 12:28:01 +0000 (14:28 +0200)]
run dir is moved to /run (#5636)
Gerald Vogt [Sun, 24 Aug 2025 12:27:38 +0000 (14:27 +0200)]
Use of MemoryLimit is deprecated (#5638)
Alan T. DeKok [Sun, 24 Aug 2025 02:16:43 +0000 (22:16 -0400)]
move generic encode / decode to encode.c and decode.c
Alan T. DeKok [Sun, 24 Aug 2025 02:08:25 +0000 (22:08 -0400)]
tweak loop, so that there are fewer checks inside of the loop
Alan T. DeKok [Sun, 24 Aug 2025 02:05:24 +0000 (22:05 -0400)]
use generic encoder
Alan T. DeKok [Sun, 24 Aug 2025 01:52:33 +0000 (21:52 -0400)]
more use macros instead of hard-coded field checks
which makes it easier to clean up and rearrange the various
fields in fr_dict_attr_flags_t
Alan T. DeKok [Sat, 23 Aug 2025 15:42:52 +0000 (11:42 -0400)]
use macros in more cases
Alan T. DeKok [Sat, 23 Aug 2025 14:45:15 +0000 (10:45 -0400)]
add new macros for length=uint8/16 and use them in dhcpv4/6
and update the checks on the attr_valid() callback to set the
flags in more circumstances
Alan T. DeKok [Sat, 23 Aug 2025 15:41:24 +0000 (11:41 -0400)]
better checks for parent / child lengths
Alan T. DeKok [Sat, 23 Aug 2025 14:43:26 +0000 (10:43 -0400)]
don't assert if we fail to instantiate the dictionaries
continuation of commit
4644f501cf3
Alan T. DeKok [Sat, 23 Aug 2025 11:49:37 +0000 (07:49 -0400)]
create and use generic decode_value() function
which makes the struct decoder a little simpler.
While we're at it, rework the struct decoder to be clearer.
And decode raw values more often, instead of hoisting the raw
pair to the enclosing struct.
Alan T. DeKok [Sat, 23 Aug 2025 12:21:56 +0000 (08:21 -0400)]
make flags.length 16 bits
because fr_dict_attr_flags_t is 8 octets for alignment, so we still
have a few extra bytes to work with
Alan T. DeKok [Thu, 21 Aug 2025 14:52:43 +0000 (10:52 -0400)]
remove unnecessary code which doesn't do anything any more
Alan T. DeKok [Thu, 21 Aug 2025 14:51:48 +0000 (10:51 -0400)]
rearrange in preparation for encoding unions
Nick Porter [Thu, 21 Aug 2025 13:10:15 +0000 (14:10 +0100)]
Module trigger names need to start "modules."
in order to find the correct section in trigger.conf
Nick Porter [Thu, 21 Aug 2025 12:39:50 +0000 (13:39 +0100)]
Report errors from failed SQL queries
Nick Porter [Thu, 21 Aug 2025 10:56:50 +0000 (11:56 +0100)]
If no rows are affected output zero
Rather than no boxes, which just results in warnings when assigning the
xlat output to an attribute
Nick Porter [Thu, 21 Aug 2025 10:47:06 +0000 (11:47 +0100)]
Copy all instances of Module-Failure-Message to outer request
Some failures produce multiple instances and you want all of them when
logging failures
Nick Porter [Thu, 21 Aug 2025 10:45:35 +0000 (11:45 +0100)]
Update docs from raddb
Nick Porter [Thu, 21 Aug 2025 10:41:57 +0000 (11:41 +0100)]
Typo
Nick Porter [Thu, 21 Aug 2025 07:45:44 +0000 (08:45 +0100)]
rlm_ldap doesn't open new connections for each bind
Nick Porter [Thu, 21 Aug 2025 07:44:53 +0000 (08:44 +0100)]
Add triggers to rlm_crl
Nick Porter [Wed, 20 Aug 2025 14:29:04 +0000 (15:29 +0100)]
Timer list is used
Alan T. DeKok [Wed, 20 Aug 2025 15:24:07 +0000 (11:24 -0400)]
add unions to struct decoder
and add test case for it
Alan T. DeKok [Tue, 19 Aug 2025 20:36:34 +0000 (16:36 -0400)]
a union closes its parent struct
for now, unions are all at the end of a struct
Nick Porter [Wed, 20 Aug 2025 14:06:51 +0000 (15:06 +0100)]
Simplify ifdef use