]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
8 months agouse BIO fd name instead of our name
Alan T. DeKok [Sat, 7 Dec 2024 19:33:48 +0000 (14:33 -0500)] 
use BIO fd name instead of our name

8 months agocorrect order of mkdir / open
Alan T. DeKok [Sat, 7 Dec 2024 19:24:40 +0000 (14:24 -0500)] 
correct order of mkdir / open

8 months agocleanups and fixes
Alan T. DeKok [Sat, 7 Dec 2024 19:24:14 +0000 (14:24 -0500)] 
cleanups and fixes

allow files to specify permissions, and use the right path for
unix sockets

8 months agoset the name of the BIO
Alan T. DeKok [Sat, 7 Dec 2024 18:50:01 +0000 (13:50 -0500)] 
set the name of the BIO

8 months agorename udp_* to bio_*
Alan T. DeKok [Sat, 7 Dec 2024 15:57:00 +0000 (10:57 -0500)] 
rename udp_* to bio_*

8 months agomove and rename files
Alan T. DeKok [Sat, 7 Dec 2024 15:55:43 +0000 (10:55 -0500)] 
move and rename files

8 months agoand rely on new fd_config.c behavior
Alan T. DeKok [Sat, 7 Dec 2024 13:44:16 +0000 (08:44 -0500)] 
and rely on new fd_config.c behavior

8 months agomove to using intermediate section
Alan T. DeKok [Sat, 7 Dec 2024 13:08:13 +0000 (08:08 -0500)] 
move to using intermediate section

8 months agoCheck configuration in instantiate, before using it
Alan T. DeKok [Sat, 7 Dec 2024 13:09:39 +0000 (08:09 -0500)] 
Check configuration in instantiate, before using it

8 months agocall cf_section_parse_init() for referenced rules, too
Alan T. DeKok [Fri, 6 Dec 2024 21:02:31 +0000 (16:02 -0500)] 
call cf_section_parse_init() for referenced rules, too

8 months agohacks to remove "udp" as a submodule.
Alan T. DeKok [Fri, 6 Dec 2024 20:43:55 +0000 (15:43 -0500)] 
hacks to remove "udp" as a submodule.

some more cleanups are useful, but this works.

We still have to address issues of the conf_parser requiring an
empty "udp" section.  But perhaps that issue is in cf_parse.c

8 months agomove around things as a temporary change for cleanups
Alan T. DeKok [Fri, 6 Dec 2024 15:35:55 +0000 (10:35 -0500)] 
move around things as a temporary change for cleanups

8 months agomight as well read from stdin
Alan T. DeKok [Fri, 6 Dec 2024 15:40:13 +0000 (10:40 -0500)] 
might as well read from stdin

8 months agodouble-check IP addresses before using them
Alan T. DeKok [Fri, 6 Dec 2024 15:34:12 +0000 (10:34 -0500)] 
double-check IP addresses before using them

so that the individual modules using BIOs don't need to do it.

Arguably we need one or more post-process functions for the
conf_parser_t.  That would let the clamping, limiting, and
cross-checking to be done by the config stuff, and not by the
individual modules

8 months agoclamp values
Alan T. DeKok [Fri, 6 Dec 2024 15:15:49 +0000 (10:15 -0500)] 
clamp values

8 months agoif read-only, set recv_buff to zero too
Alan T. DeKok [Fri, 6 Dec 2024 15:09:13 +0000 (10:09 -0500)] 
if read-only, set recv_buff to zero too

on linux, this discards all data.  For others it doesn't work :(

8 months agosome attempt to allow refs to non-root attributes
Alan T. DeKok [Thu, 5 Dec 2024 21:36:27 +0000 (16:36 -0500)] 
some attempt to allow refs to non-root attributes

8 months agoreset parent if ref'd TLV is inside of a group
Alan T. DeKok [Thu, 5 Dec 2024 20:44:49 +0000 (15:44 -0500)] 
reset parent if ref'd TLV is inside of a group

the decoder is still wrong, but at least we're not printing out
garbage

8 months agoBetter handle group refs to somewhere in the middle of the tree
Alan T. DeKok [Thu, 5 Dec 2024 20:30:47 +0000 (15:30 -0500)] 
Better handle group refs to somewhere in the middle of the tree

8 months agoSimplify indentation
Nick Porter [Mon, 2 Dec 2024 13:52:27 +0000 (13:52 +0000)] 
Simplify indentation

8 months agoUse standard pair printing
Nick Porter [Mon, 2 Dec 2024 13:49:58 +0000 (13:49 +0000)] 
Use standard pair printing

8 months agoTLS virtual-server option is part of tls config, not eap method
Nick Porter [Mon, 2 Dec 2024 08:34:09 +0000 (08:34 +0000)] 
TLS virtual-server option is part of tls config, not eap method

8 months agoopen file descriptor via the BIO API
Alan T. DeKok [Thu, 5 Dec 2024 17:14:10 +0000 (12:14 -0500)] 
open file descriptor via the BIO API

8 months agosome more cleanups
Alan T. DeKok [Thu, 5 Dec 2024 17:01:50 +0000 (12:01 -0500)] 
some more cleanups

8 months agoseparate client and server BIO config
Alan T. DeKok [Thu, 5 Dec 2024 14:59:52 +0000 (09:59 -0500)] 
separate client and server BIO config

8 months agoswap to using fr_bio_fd_config for IP / port parsing
Alan T. DeKok [Thu, 5 Dec 2024 14:48:34 +0000 (09:48 -0500)] 
swap to using fr_bio_fd_config for IP / port parsing

8 months agoadd note on perhaps suprising behavior
Alan T. DeKok [Thu, 5 Dec 2024 14:46:28 +0000 (09:46 -0500)] 
add note on perhaps suprising behavior

8 months agosort names properly
Alan T. DeKok [Wed, 4 Dec 2024 21:33:44 +0000 (16:33 -0500)] 
sort names properly

fix typo, and push the transport configuration parser into the
appropriate child.

8 months agotypo
Alan T. DeKok [Wed, 4 Dec 2024 21:22:15 +0000 (16:22 -0500)] 
typo

8 months agostart of radius2 module
Alan T. DeKok [Wed, 4 Dec 2024 18:03:42 +0000 (13:03 -0500)] 
start of radius2 module

just renamed for now, with no other changes.  This process lets
us better track and debug changes to a complex module.

8 months agoUpdate sample winbind config to reflect slab parameters
Nick Porter [Thu, 5 Dec 2024 11:35:41 +0000 (11:35 +0000)] 
Update sample winbind config to reflect slab parameters

8 months agoSwitch rlm_winbind from fr_pool_t to slab allocation for connection ctx
Nick Porter [Thu, 5 Dec 2024 11:33:24 +0000 (11:33 +0000)] 
Switch rlm_winbind from fr_pool_t to slab allocation for connection ctx

8 months agoTry alternate condition syntax
Nick Porter [Wed, 4 Dec 2024 17:15:43 +0000 (17:15 +0000)] 
Try alternate condition syntax

GitHub was ignoring the previous syntax and attemtping merges to
"master" on forked repos.

8 months agomschap pwdchange tests return invalid on builds without OpenSSL
Nick Porter [Wed, 4 Dec 2024 11:06:27 +0000 (11:06 +0000)] 
mschap pwdchange tests return invalid on builds without OpenSSL

8 months agoEnable rlm_mschap tests
Nick Porter [Tue, 3 Dec 2024 18:30:58 +0000 (18:30 +0000)] 
Enable rlm_mschap tests

8 months agoUpdate sample mschap config to reflect slab parameters
Nick Porter [Tue, 3 Dec 2024 11:11:42 +0000 (11:11 +0000)] 
Update sample mschap config to reflect slab parameters

8 months agoSwitch mschap from fr_pool_t to slab allocation for conneciton ctx
Nick Porter [Tue, 3 Dec 2024 11:11:09 +0000 (11:11 +0000)] 
Switch mschap from fr_pool_t to slab allocation for conneciton ctx

8 months agoPass auth_ctx to do_auth_wbclient()
Nick Porter [Tue, 3 Dec 2024 10:52:32 +0000 (10:52 +0000)] 
Pass auth_ctx to do_auth_wbclient()

8 months agoSimplify arguments to do_mschap()
Nick Porter [Tue, 3 Dec 2024 10:37:06 +0000 (10:37 +0000)] 
Simplify arguments to do_mschap()

8 months agoSimplify arguments to mschap_process_v2_response()
Nick Porter [Tue, 3 Dec 2024 10:16:43 +0000 (10:16 +0000)] 
Simplify arguments to mschap_process_v2_response()

8 months agoWS
Nick Porter [Tue, 3 Dec 2024 10:13:15 +0000 (10:13 +0000)] 
WS

8 months agoSimplify arguments to mschap_process_response()
Nick Porter [Mon, 2 Dec 2024 18:32:15 +0000 (18:32 +0000)] 
Simplify arguments to mschap_process_response()

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:31 +0000 (09:35 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:14 +0000 (09:35 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:10 +0000 (09:35 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:08 +0000 (09:35 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:04 +0000 (09:35 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar
github-actions[bot] [Thu, 5 Dec 2024 09:34:55 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/util.tar
github-actions[bot] [Thu, 5 Dec 2024 09:34:52 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/util.tar

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar
github-actions[bot] [Thu, 5 Dec 2024 09:34:49 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar

8 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar
github-actions[bot] [Thu, 5 Dec 2024 09:34:46 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar

8 months agoIf rlm_python instantiation fails, free the interpreter
Nick Porter [Wed, 4 Dec 2024 09:29:07 +0000 (09:29 +0000)] 
If rlm_python instantiation fails, free the interpreter

Without this, Py_Finalize() crashes

8 months agoReport progress of loading Python funcitons
Nick Porter [Wed, 4 Dec 2024 09:26:15 +0000 (09:26 +0000)] 
Report progress of loading Python funcitons

8 months agoSwitch linking test function for rlm_python
Nick Porter [Wed, 4 Dec 2024 08:33:52 +0000 (08:33 +0000)] 
Switch linking test function for rlm_python

Py_SetProgramName() is deprecated in Python 3.11 - causing the test to
fail.

8 months agoadd FR_CONF_OFFSET_REF()
Alan T. DeKok [Wed, 4 Dec 2024 01:08:39 +0000 (20:08 -0500)] 
add FR_CONF_OFFSET_REF()

which allows you to reference another conf_parser_t, without
requiring an intermediary CONF_SECTION

8 months agomove rule parsing to its own function
Alan T. DeKok [Wed, 4 Dec 2024 00:18:09 +0000 (19:18 -0500)] 
move rule parsing to its own function

in preparation for the next bit of functionality

8 months agorearrange configuration into subsections
Alan T. DeKok [Tue, 3 Dec 2024 19:30:48 +0000 (14:30 -0500)] 
rearrange configuration into subsections

8 months agoRemove unused variables
Nick Porter [Tue, 3 Dec 2024 18:32:08 +0000 (18:32 +0000)] 
Remove unused variables

8 months agoNo need for OpenSSL version formatting for versions < 3
Nick Porter [Tue, 3 Dec 2024 18:24:39 +0000 (18:24 +0000)] 
No need for OpenSSL version formatting for versions < 3

FreeRADIUS v4 requires OpenSSL >= 3

8 months agoOpenSSL >= 3.0 has API/ABI compatibility within major version numbers
Nick Porter [Tue, 3 Dec 2024 18:12:57 +0000 (18:12 +0000)] 
OpenSSL >= 3.0 has API/ABI compatibility within major version numbers

So differing minor numbers are not an issue.

8 months agoadd cbor to the fuzzer, and fix a few issues it found
Alan T. DeKok [Mon, 2 Dec 2024 19:30:46 +0000 (14:30 -0500)] 
add cbor to the fuzzer, and fix a few issues it found

8 months agoadd fr_dict_t* to test_ctx parameters
Alan T. DeKok [Mon, 2 Dec 2024 19:11:39 +0000 (14:11 -0500)] 
add fr_dict_t* to test_ctx parameters

which lets CBOR / DER know what protocol they're using

8 months agoATOMIC_VAR_INIT has been removed from C23
Alan T. DeKok [Mon, 2 Dec 2024 16:48:20 +0000 (11:48 -0500)] 
ATOMIC_VAR_INIT has been removed from C23

8 months agoAdd libfreeradius-bio-config.so to RHEL packaging
Nick Porter [Mon, 2 Dec 2024 12:33:40 +0000 (12:33 +0000)] 
Add libfreeradius-bio-config.so to RHEL packaging

8 months agoTypo
Nick Porter [Mon, 2 Dec 2024 12:14:54 +0000 (12:14 +0000)] 
Typo

8 months agoformat string cleanups
Alan T. DeKok [Sat, 30 Nov 2024 21:54:24 +0000 (16:54 -0500)] 
format string cleanups

8 months agoremove extraneous ;
Alan T. DeKok [Sat, 30 Nov 2024 21:30:00 +0000 (16:30 -0500)] 
remove extraneous ;

8 months agotrue and false are in stdbool, we don't need to redefine them
Alan T. DeKok [Sat, 30 Nov 2024 21:50:04 +0000 (16:50 -0500)] 
true and false are in stdbool, we don't need to redefine them

8 months agoC23 defines static_assert
Alan T. DeKok [Sat, 30 Nov 2024 21:34:07 +0000 (16:34 -0500)] 
C23 defines static_assert

8 months agominor tweaks
Alan T. DeKok [Sat, 30 Nov 2024 18:08:19 +0000 (13:08 -0500)] 
minor tweaks

8 months agomove to common functions for parsing permissions
Alan T. DeKok [Sat, 30 Nov 2024 14:44:53 +0000 (09:44 -0500)] 
move to common functions for parsing permissions

and extend the permission parsing code to allow for text-based
permissions

8 months agoparse named permissions, too
Alan T. DeKok [Sat, 30 Nov 2024 14:37:05 +0000 (09:37 -0500)] 
parse named permissions, too

and don't allow world-writeable files

8 months agoadd conf_parser_t for FD BIO
Alan T. DeKok [Fri, 29 Nov 2024 20:17:07 +0000 (15:17 -0500)] 
add conf_parser_t for FD BIO

and put it into a separate library, as some things want the BIOs,
but don't want to pull in all of libfreeradius-server, unlang, etc.

8 months agoAdd fr_perm_mode_from_str()
Alan T. DeKok [Fri, 29 Nov 2024 20:03:46 +0000 (15:03 -0500)] 
Add fr_perm_mode_from_str()

8 months agopermissions are octal, not binary
Alan T. DeKok [Fri, 29 Nov 2024 20:02:55 +0000 (15:02 -0500)] 
permissions are octal, not binary

8 months agoAdd notes about behaviour of control.EAP-Type
Nick Porter [Fri, 29 Nov 2024 15:22:30 +0000 (15:22 +0000)] 
Add notes about behaviour of control.EAP-Type

8 months agoalways allocate track, even when replicating
Alan T. DeKok [Fri, 29 Nov 2024 14:56:55 +0000 (09:56 -0500)] 
always allocate track, even when replicating

8 months agoensure cbor_guess_type() always returns a type
Alan T. DeKok [Fri, 29 Nov 2024 14:21:55 +0000 (09:21 -0500)] 
ensure cbor_guess_type() always returns a type

and push error messages to that function

8 months agoremove replication-specific functions
Alan T. DeKok [Thu, 28 Nov 2024 20:20:52 +0000 (15:20 -0500)] 
remove replication-specific functions

request_mux_replicate() is now just 3 lines in request_mux()

8 months agoremove unused code
Alan T. DeKok [Thu, 28 Nov 2024 18:57:35 +0000 (13:57 -0500)] 
remove unused code

the status checks are handled separately, and not by the main
request_mux() code.

8 months agomove rlm_radius to using the unlang retry functionality
Alan T. DeKok [Thu, 28 Nov 2024 18:50:12 +0000 (13:50 -0500)] 
move rlm_radius to using the unlang retry functionality

8 months agoevents are parented from the "state" in the stack frame
Alan T. DeKok [Thu, 28 Nov 2024 18:39:56 +0000 (13:39 -0500)] 
events are parented from the "state" in the stack frame

so that they are cleaned up when the stack frame exits.

8 months agopush more things to rlm_radius_udp
Alan T. DeKok [Wed, 27 Nov 2024 19:39:25 +0000 (14:39 -0500)] 
push more things to rlm_radius_udp

in preparation for BIO handling

8 months agoPacify Coverity (CID #1634587)
Nick Porter [Fri, 29 Nov 2024 13:39:55 +0000 (13:39 +0000)] 
Pacify Coverity (CID #1634587)

Coverity doesn't see that the fixed arguments aways have variadic set,
so thought the loop would walk beyond the end of the argument list.

8 months agoCorrect comment on free ID range
Nick Porter [Fri, 29 Nov 2024 12:35:19 +0000 (12:35 +0000)] 
Correct comment on free ID range

8 months agoCatch failure returned by cbor_guess_type() (CID #1634805)
Nick Porter [Fri, 29 Nov 2024 12:34:45 +0000 (12:34 +0000)] 
Catch failure returned by cbor_guess_type() (CID #1634805)

8 months agoAdd support for inline BEGIN keyword for protocols
Arran Cudbard-Bell [Fri, 29 Nov 2024 02:01:03 +0000 (20:01 -0600)] 
Add support for inline BEGIN keyword for protocols

8 months agoRename BEGIN-TLV and END-TLV to BEGIN and END, and make them work for TLVs too
Arran Cudbard-Bell [Thu, 28 Nov 2024 23:17:16 +0000 (17:17 -0600)] 
Rename BEGIN-TLV and END-TLV to BEGIN and END, and make them work for TLVs too

8 months agoRework nest values so its a bit field
Arran Cudbard-Bell [Thu, 28 Nov 2024 20:34:17 +0000 (14:34 -0600)] 
Rework nest values so its a bit field

8 months agoFix clang analyzer builds
Arran Cudbard-Bell [Thu, 28 Nov 2024 20:33:00 +0000 (14:33 -0600)] 
Fix clang analyzer builds

8 months agoIntegrate the nesting type when we push frames onto the stack
Arran Cudbard-Bell [Thu, 28 Nov 2024 17:28:21 +0000 (11:28 -0600)] 
Integrate the nesting type when we push frames onto the stack

8 months agoVarious dict_tokenize renames
Arran Cudbard-Bell [Thu, 28 Nov 2024 17:07:22 +0000 (11:07 -0600)] 
Various dict_tokenize renames

8 months agoRun finalise when we're done processing the file also
Arran Cudbard-Bell [Thu, 28 Nov 2024 16:23:21 +0000 (10:23 -0600)] 
Run finalise when we're done processing the file also

8 months agoMove member processing to the keyword dispatch
Arran Cudbard-Bell [Thu, 28 Nov 2024 16:17:03 +0000 (10:17 -0600)] 
Move member processing to the keyword dispatch

8 months agoAlternative method to set fake DB conneciton handle
Nick Porter [Thu, 28 Nov 2024 09:00:06 +0000 (09:00 +0000)] 
Alternative method to set fake DB conneciton handle

May pacify Coverity...

8 months agoBreak out more parsing functions
Arran Cudbard-Bell [Thu, 28 Nov 2024 02:24:08 +0000 (20:24 -0600)] 
Break out more parsing functions

8 months agoStart breaking out keyword parsers in dict_tokenize
Arran Cudbard-Bell [Thu, 28 Nov 2024 02:20:12 +0000 (20:20 -0600)] 
Start breaking out keyword parsers in dict_tokenize

8 months agorest: Add xlat argument for headers
Arran Cudbard-Bell [Thu, 28 Nov 2024 01:07:31 +0000 (19:07 -0600)] 
rest: Add xlat argument for headers

8 months agoHave fr_sbuff_extend_lowat check the eof state of the sbuff. Fixes #5462
Arran Cudbard-Bell [Wed, 27 Nov 2024 23:36:29 +0000 (17:36 -0600)] 
Have fr_sbuff_extend_lowat check the eof state of the sbuff.  Fixes #5462

Don't extend the sbuff in the fr_sbuff_terminal_search function

8 months agoRealign fields
Arran Cudbard-Bell [Wed, 27 Nov 2024 23:10:36 +0000 (17:10 -0600)] 
Realign fields