]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Alan T. DeKok [Sat, 7 Dec 2024 19:33:48 +0000 (14:33 -0500)]
use BIO fd name instead of our name
Alan T. DeKok [Sat, 7 Dec 2024 19:24:40 +0000 (14:24 -0500)]
correct order of mkdir / open
Alan T. DeKok [Sat, 7 Dec 2024 19:24:14 +0000 (14:24 -0500)]
cleanups and fixes
allow files to specify permissions, and use the right path for
unix sockets
Alan T. DeKok [Sat, 7 Dec 2024 18:50:01 +0000 (13:50 -0500)]
set the name of the BIO
Alan T. DeKok [Sat, 7 Dec 2024 15:57:00 +0000 (10:57 -0500)]
rename udp_* to bio_*
Alan T. DeKok [Sat, 7 Dec 2024 15:55:43 +0000 (10:55 -0500)]
move and rename files
Alan T. DeKok [Sat, 7 Dec 2024 13:44:16 +0000 (08:44 -0500)]
and rely on new fd_config.c behavior
Alan T. DeKok [Sat, 7 Dec 2024 13:08:13 +0000 (08:08 -0500)]
move to using intermediate section
Alan T. DeKok [Sat, 7 Dec 2024 13:09:39 +0000 (08:09 -0500)]
Check configuration in instantiate, before using it
Alan T. DeKok [Fri, 6 Dec 2024 21:02:31 +0000 (16:02 -0500)]
call cf_section_parse_init() for referenced rules, too
Alan T. DeKok [Fri, 6 Dec 2024 20:43:55 +0000 (15:43 -0500)]
hacks to remove "udp" as a submodule.
some more cleanups are useful, but this works.
We still have to address issues of the conf_parser requiring an
empty "udp" section. But perhaps that issue is in cf_parse.c
Alan T. DeKok [Fri, 6 Dec 2024 15:35:55 +0000 (10:35 -0500)]
move around things as a temporary change for cleanups
Alan T. DeKok [Fri, 6 Dec 2024 15:40:13 +0000 (10:40 -0500)]
might as well read from stdin
Alan T. DeKok [Fri, 6 Dec 2024 15:34:12 +0000 (10:34 -0500)]
double-check IP addresses before using them
so that the individual modules using BIOs don't need to do it.
Arguably we need one or more post-process functions for the
conf_parser_t. That would let the clamping, limiting, and
cross-checking to be done by the config stuff, and not by the
individual modules
Alan T. DeKok [Fri, 6 Dec 2024 15:15:49 +0000 (10:15 -0500)]
clamp values
Alan T. DeKok [Fri, 6 Dec 2024 15:09:13 +0000 (10:09 -0500)]
if read-only, set recv_buff to zero too
on linux, this discards all data. For others it doesn't work :(
Alan T. DeKok [Thu, 5 Dec 2024 21:36:27 +0000 (16:36 -0500)]
some attempt to allow refs to non-root attributes
Alan T. DeKok [Thu, 5 Dec 2024 20:44:49 +0000 (15:44 -0500)]
reset parent if ref'd TLV is inside of a group
the decoder is still wrong, but at least we're not printing out
garbage
Alan T. DeKok [Thu, 5 Dec 2024 20:30:47 +0000 (15:30 -0500)]
Better handle group refs to somewhere in the middle of the tree
Nick Porter [Mon, 2 Dec 2024 13:52:27 +0000 (13:52 +0000)]
Simplify indentation
Nick Porter [Mon, 2 Dec 2024 13:49:58 +0000 (13:49 +0000)]
Use standard pair printing
Nick Porter [Mon, 2 Dec 2024 08:34:09 +0000 (08:34 +0000)]
TLS virtual-server option is part of tls config, not eap method
Alan T. DeKok [Thu, 5 Dec 2024 17:14:10 +0000 (12:14 -0500)]
open file descriptor via the BIO API
Alan T. DeKok [Thu, 5 Dec 2024 17:01:50 +0000 (12:01 -0500)]
some more cleanups
Alan T. DeKok [Thu, 5 Dec 2024 14:59:52 +0000 (09:59 -0500)]
separate client and server BIO config
Alan T. DeKok [Thu, 5 Dec 2024 14:48:34 +0000 (09:48 -0500)]
swap to using fr_bio_fd_config for IP / port parsing
Alan T. DeKok [Thu, 5 Dec 2024 14:46:28 +0000 (09:46 -0500)]
add note on perhaps suprising behavior
Alan T. DeKok [Wed, 4 Dec 2024 21:33:44 +0000 (16:33 -0500)]
sort names properly
fix typo, and push the transport configuration parser into the
appropriate child.
Alan T. DeKok [Wed, 4 Dec 2024 21:22:15 +0000 (16:22 -0500)]
typo
Alan T. DeKok [Wed, 4 Dec 2024 18:03:42 +0000 (13:03 -0500)]
start of radius2 module
just renamed for now, with no other changes. This process lets
us better track and debug changes to a complex module.
Nick Porter [Thu, 5 Dec 2024 11:35:41 +0000 (11:35 +0000)]
Update sample winbind config to reflect slab parameters
Nick Porter [Thu, 5 Dec 2024 11:33:24 +0000 (11:33 +0000)]
Switch rlm_winbind from fr_pool_t to slab allocation for connection ctx
Nick Porter [Wed, 4 Dec 2024 17:15:43 +0000 (17:15 +0000)]
Try alternate condition syntax
GitHub was ignoring the previous syntax and attemtping merges to
"master" on forked repos.
Nick Porter [Wed, 4 Dec 2024 11:06:27 +0000 (11:06 +0000)]
mschap pwdchange tests return invalid on builds without OpenSSL
Nick Porter [Tue, 3 Dec 2024 18:30:58 +0000 (18:30 +0000)]
Enable rlm_mschap tests
Nick Porter [Tue, 3 Dec 2024 11:11:42 +0000 (11:11 +0000)]
Update sample mschap config to reflect slab parameters
Nick Porter [Tue, 3 Dec 2024 11:11:09 +0000 (11:11 +0000)]
Switch mschap from fr_pool_t to slab allocation for conneciton ctx
Nick Porter [Tue, 3 Dec 2024 10:52:32 +0000 (10:52 +0000)]
Pass auth_ctx to do_auth_wbclient()
Nick Porter [Tue, 3 Dec 2024 10:37:06 +0000 (10:37 +0000)]
Simplify arguments to do_mschap()
Nick Porter [Tue, 3 Dec 2024 10:16:43 +0000 (10:16 +0000)]
Simplify arguments to mschap_process_v2_response()
Nick Porter [Tue, 3 Dec 2024 10:13:15 +0000 (10:13 +0000)]
WS
Nick Porter [Mon, 2 Dec 2024 18:32:15 +0000 (18:32 +0000)]
Simplify arguments to mschap_process_response()
github-actions[bot] [Thu, 5 Dec 2024 09:35:31 +0000 (09:35 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:14 +0000 (09:35 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:10 +0000 (09:35 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:08 +0000 (09:35 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar
github-actions[bot] [Thu, 5 Dec 2024 09:35:04 +0000 (09:35 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar
github-actions[bot] [Thu, 5 Dec 2024 09:34:55 +0000 (09:34 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar
github-actions[bot] [Thu, 5 Dec 2024 09:34:52 +0000 (09:34 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/util.tar
github-actions[bot] [Thu, 5 Dec 2024 09:34:49 +0000 (09:34 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar
github-actions[bot] [Thu, 5 Dec 2024 09:34:46 +0000 (09:34 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar
Nick Porter [Wed, 4 Dec 2024 09:29:07 +0000 (09:29 +0000)]
If rlm_python instantiation fails, free the interpreter
Without this, Py_Finalize() crashes
Nick Porter [Wed, 4 Dec 2024 09:26:15 +0000 (09:26 +0000)]
Report progress of loading Python funcitons
Nick Porter [Wed, 4 Dec 2024 08:33:52 +0000 (08:33 +0000)]
Switch linking test function for rlm_python
Py_SetProgramName() is deprecated in Python 3.11 - causing the test to
fail.
Alan T. DeKok [Wed, 4 Dec 2024 01:08:39 +0000 (20:08 -0500)]
add FR_CONF_OFFSET_REF()
which allows you to reference another conf_parser_t, without
requiring an intermediary CONF_SECTION
Alan T. DeKok [Wed, 4 Dec 2024 00:18:09 +0000 (19:18 -0500)]
move rule parsing to its own function
in preparation for the next bit of functionality
Alan T. DeKok [Tue, 3 Dec 2024 19:30:48 +0000 (14:30 -0500)]
rearrange configuration into subsections
Nick Porter [Tue, 3 Dec 2024 18:32:08 +0000 (18:32 +0000)]
Remove unused variables
Nick Porter [Tue, 3 Dec 2024 18:24:39 +0000 (18:24 +0000)]
No need for OpenSSL version formatting for versions < 3
FreeRADIUS v4 requires OpenSSL >= 3
Nick Porter [Tue, 3 Dec 2024 18:12:57 +0000 (18:12 +0000)]
OpenSSL >= 3.0 has API/ABI compatibility within major version numbers
So differing minor numbers are not an issue.
Alan T. DeKok [Mon, 2 Dec 2024 19:30:46 +0000 (14:30 -0500)]
add cbor to the fuzzer, and fix a few issues it found
Alan T. DeKok [Mon, 2 Dec 2024 19:11:39 +0000 (14:11 -0500)]
add fr_dict_t* to test_ctx parameters
which lets CBOR / DER know what protocol they're using
Alan T. DeKok [Mon, 2 Dec 2024 16:48:20 +0000 (11:48 -0500)]
ATOMIC_VAR_INIT has been removed from C23
Nick Porter [Mon, 2 Dec 2024 12:33:40 +0000 (12:33 +0000)]
Add libfreeradius-bio-config.so to RHEL packaging
Nick Porter [Mon, 2 Dec 2024 12:14:54 +0000 (12:14 +0000)]
Typo
Alan T. DeKok [Sat, 30 Nov 2024 21:54:24 +0000 (16:54 -0500)]
format string cleanups
Alan T. DeKok [Sat, 30 Nov 2024 21:30:00 +0000 (16:30 -0500)]
remove extraneous ;
Alan T. DeKok [Sat, 30 Nov 2024 21:50:04 +0000 (16:50 -0500)]
true and false are in stdbool, we don't need to redefine them
Alan T. DeKok [Sat, 30 Nov 2024 21:34:07 +0000 (16:34 -0500)]
C23 defines static_assert
Alan T. DeKok [Sat, 30 Nov 2024 18:08:19 +0000 (13:08 -0500)]
minor tweaks
Alan T. DeKok [Sat, 30 Nov 2024 14:44:53 +0000 (09:44 -0500)]
move to common functions for parsing permissions
and extend the permission parsing code to allow for text-based
permissions
Alan T. DeKok [Sat, 30 Nov 2024 14:37:05 +0000 (09:37 -0500)]
parse named permissions, too
and don't allow world-writeable files
Alan T. DeKok [Fri, 29 Nov 2024 20:17:07 +0000 (15:17 -0500)]
add conf_parser_t for FD BIO
and put it into a separate library, as some things want the BIOs,
but don't want to pull in all of libfreeradius-server, unlang, etc.
Alan T. DeKok [Fri, 29 Nov 2024 20:03:46 +0000 (15:03 -0500)]
Add fr_perm_mode_from_str()
Alan T. DeKok [Fri, 29 Nov 2024 20:02:55 +0000 (15:02 -0500)]
permissions are octal, not binary
Nick Porter [Fri, 29 Nov 2024 15:22:30 +0000 (15:22 +0000)]
Add notes about behaviour of control.EAP-Type
Alan T. DeKok [Fri, 29 Nov 2024 14:56:55 +0000 (09:56 -0500)]
always allocate track, even when replicating
Alan T. DeKok [Fri, 29 Nov 2024 14:21:55 +0000 (09:21 -0500)]
ensure cbor_guess_type() always returns a type
and push error messages to that function
Alan T. DeKok [Thu, 28 Nov 2024 20:20:52 +0000 (15:20 -0500)]
remove replication-specific functions
request_mux_replicate() is now just 3 lines in request_mux()
Alan T. DeKok [Thu, 28 Nov 2024 18:57:35 +0000 (13:57 -0500)]
remove unused code
the status checks are handled separately, and not by the main
request_mux() code.
Alan T. DeKok [Thu, 28 Nov 2024 18:50:12 +0000 (13:50 -0500)]
move rlm_radius to using the unlang retry functionality
Alan T. DeKok [Thu, 28 Nov 2024 18:39:56 +0000 (13:39 -0500)]
events are parented from the "state" in the stack frame
so that they are cleaned up when the stack frame exits.
Alan T. DeKok [Wed, 27 Nov 2024 19:39:25 +0000 (14:39 -0500)]
push more things to rlm_radius_udp
in preparation for BIO handling
Nick Porter [Fri, 29 Nov 2024 13:39:55 +0000 (13:39 +0000)]
Pacify Coverity (CID #
1634587 )
Coverity doesn't see that the fixed arguments aways have variadic set,
so thought the loop would walk beyond the end of the argument list.
Nick Porter [Fri, 29 Nov 2024 12:35:19 +0000 (12:35 +0000)]
Correct comment on free ID range
Nick Porter [Fri, 29 Nov 2024 12:34:45 +0000 (12:34 +0000)]
Catch failure returned by cbor_guess_type() (CID #
1634805 )
Arran Cudbard-Bell [Fri, 29 Nov 2024 02:01:03 +0000 (20:01 -0600)]
Add support for inline BEGIN keyword for protocols
Arran Cudbard-Bell [Thu, 28 Nov 2024 23:17:16 +0000 (17:17 -0600)]
Rename BEGIN-TLV and END-TLV to BEGIN and END, and make them work for TLVs too
Arran Cudbard-Bell [Thu, 28 Nov 2024 20:34:17 +0000 (14:34 -0600)]
Rework nest values so its a bit field
Arran Cudbard-Bell [Thu, 28 Nov 2024 20:33:00 +0000 (14:33 -0600)]
Fix clang analyzer builds
Arran Cudbard-Bell [Thu, 28 Nov 2024 17:28:21 +0000 (11:28 -0600)]
Integrate the nesting type when we push frames onto the stack
Arran Cudbard-Bell [Thu, 28 Nov 2024 17:07:22 +0000 (11:07 -0600)]
Various dict_tokenize renames
Arran Cudbard-Bell [Thu, 28 Nov 2024 16:23:21 +0000 (10:23 -0600)]
Run finalise when we're done processing the file also
Arran Cudbard-Bell [Thu, 28 Nov 2024 16:17:03 +0000 (10:17 -0600)]
Move member processing to the keyword dispatch
Nick Porter [Thu, 28 Nov 2024 09:00:06 +0000 (09:00 +0000)]
Alternative method to set fake DB conneciton handle
May pacify Coverity...
Arran Cudbard-Bell [Thu, 28 Nov 2024 02:24:08 +0000 (20:24 -0600)]
Break out more parsing functions
Arran Cudbard-Bell [Thu, 28 Nov 2024 02:20:12 +0000 (20:20 -0600)]
Start breaking out keyword parsers in dict_tokenize
Arran Cudbard-Bell [Thu, 28 Nov 2024 01:07:31 +0000 (19:07 -0600)]
rest: Add xlat argument for headers
Arran Cudbard-Bell [Wed, 27 Nov 2024 23:36:29 +0000 (17:36 -0600)]
Have fr_sbuff_extend_lowat check the eof state of the sbuff. Fixes #5462
Don't extend the sbuff in the fr_sbuff_terminal_search function
Arran Cudbard-Bell [Wed, 27 Nov 2024 23:10:36 +0000 (17:10 -0600)]
Realign fields