]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
6 years agoAllow the developer build macro WITH_VERIFY_PTR to be disabled
Terry Burton [Sat, 6 Jun 2020 21:22:50 +0000 (22:22 +0100)] 
Allow the developer build macro WITH_VERIFY_PTR to be disabled

-DWITH_VERIFY_PTR=1 significantly scews the function call profile.

6 years agorlm_perl: Add missing %RAD_PERLCONF as our()
Jorge Pereira [Wed, 27 May 2020 21:27:58 +0000 (18:27 -0300)] 
rlm_perl: Add missing %RAD_PERLCONF as our()

6 years agocrypt may return a string when the salt is invalid
Matthew Newton [Tue, 19 May 2020 14:18:26 +0000 (15:18 +0100)] 
crypt may return a string when the salt is invalid

6 years agoallow unpacking the rest of the string
Alan T. DeKok [Mon, 18 May 2020 17:11:18 +0000 (13:11 -0400)] 
allow unpacking the rest of the string

6 years agomore error messages
Alan T. DeKok [Thu, 7 May 2020 21:50:58 +0000 (17:50 -0400)] 
more error messages

6 years agoAdd ubuntu20 to Jenkins
Matthew Newton [Mon, 11 May 2020 09:22:29 +0000 (10:22 +0100)] 
Add ubuntu20 to Jenkins

6 years agoMySQL: Use correct syntax for creating the radius user
Terry Burton [Fri, 8 May 2020 12:38:53 +0000 (13:38 +0100)] 
MySQL: Use correct syntax for creating the radius user

This syntax works from at least MySQL 5.7 to MySQL 8 and corresponding MariaDB
versions.

6 years agodynamic_home_servers.md: Add references for listing the home servers
Jorge Pereira [Thu, 7 May 2020 14:03:53 +0000 (11:03 -0300)] 
dynamic_home_servers.md: Add references for listing the home servers

6 years agoPython3 fixes (#3350)
Alejandro Perez [Thu, 7 May 2020 16:29:06 +0000 (17:29 +0100)] 
Python3 fixes (#3350)

* python3-config for Python 3.8 requires --embed parameter

As described in https://bugs.python.org/issue36721, python3-config now
requires --embed for embedded interpreters. Otherwise, -lpython3.8 is
not included in ldflags

* Python 3.8 has removed the "m" suffix in the library name

As discussed in: https://bugs.python.org/issue36707

* Use dl_iterate_phdr to find the appropriate python library

Otherwise, installation of the libpython3-dev packages is required
in most distributions

* Update configure file for rlm_python3

* Use AX_COMPARE_VERSION to check Python version

6 years agorlm_sql_mongo: Added support for aggregation pipelines to findAndModify
Benjamin Thompson [Mon, 4 May 2020 21:18:56 +0000 (00:18 +0300)] 
rlm_sql_mongo: Added support for aggregation pipelines to findAndModify

6 years agoMariaDB sqlippools: New SP that emulates SKIP LOCKED using "user locks"
Terry Burton [Wed, 29 Apr 2020 12:19:27 +0000 (13:19 +0100)] 
MariaDB sqlippools: New SP that emulates SKIP LOCKED using "user locks"

If we're careful we can emulate the SKIP LOCKED pragma by using user locks with
names based on the framedipaddress.

Testing shows greatly improved throughput largely due to preventing thread
starvation under highly concurrent load.

6 years agoradmin: Add capability to show more about the home servers
Jorge Pereira [Mon, 27 Apr 2020 21:04:11 +0000 (18:04 -0300)] 
radmin: Add capability to show more about the home servers

Now we can know the home server name and if is dynamic or no.

e.g:

radmin> show home_server list all

6 years agoupdate crossbuild dockerfiles
Matthew Newton [Fri, 1 May 2020 20:19:12 +0000 (21:19 +0100)] 
update crossbuild dockerfiles

- add ubuntu20
- add centos8
- bump node from v8 to v10
- fix llvm key on some images
- fix nodesource source repo issue in centos

6 years agofix files tests
Matthew Newton [Fri, 1 May 2020 21:23:30 +0000 (22:23 +0100)] 
fix files tests

6 years agocrossbuild: env var to pass options to docker build
Matthew Newton [Fri, 1 May 2020 20:18:31 +0000 (21:18 +0100)] 
crossbuild: env var to pass options to docker build

e.g. --no-cache

6 years agoadd dockerfile for ubuntu20
Matthew Newton [Fri, 1 May 2020 12:14:05 +0000 (13:14 +0100)] 
add dockerfile for ubuntu20

6 years agomanually set reply->code = challenge
Alan T. DeKok [Fri, 1 May 2020 15:58:15 +0000 (11:58 -0400)] 
manually set reply->code = challenge

for the case when we manually create an identity request

6 years agoupdate debian/ubuntu build-dep
Matthew Newton [Fri, 1 May 2020 12:03:19 +0000 (13:03 +0100)] 
update debian/ubuntu build-dep

6 years agocatch EAGAIN, too
Alan T. DeKok [Thu, 30 Apr 2020 12:17:59 +0000 (08:17 -0400)] 
catch EAGAIN, too

6 years agoradclient: The '-c' value should be >= 1
Jorge Pereira [Thu, 30 Apr 2020 02:19:39 +0000 (23:19 -0300)] 
radclient: The '-c' value should be >= 1

If we pass '-c 0' causes an infinity loop.

6 years agoremove 256 limit on "show clients" and "show home servers"
Alan T. DeKok [Thu, 30 Apr 2020 11:22:14 +0000 (07:22 -0400)] 
remove 256 limit on "show clients" and "show home servers"

6 years agoremove duplication
Alan T. DeKok [Mon, 27 Apr 2020 13:26:23 +0000 (09:26 -0400)] 
remove duplication

6 years agonote recent changes
Alan T. DeKok [Mon, 27 Apr 2020 12:44:02 +0000 (08:44 -0400)] 
note recent changes

6 years agoclean up and point to "howto" guide
Alan T. DeKok [Mon, 27 Apr 2020 12:40:10 +0000 (08:40 -0400)] 
clean up and point to "howto" guide

6 years agoFix rad_authenticate() to handle the new 'Home-Server-Name'
Jorge Pereira [Sun, 26 Apr 2020 21:47:52 +0000 (18:47 -0300)] 
Fix rad_authenticate() to handle the new 'Home-Server-Name'

6 years agodoc/configuration/dynamic_home_servers.md: Fix typo
Jorge Pereira [Sun, 26 Apr 2020 20:39:16 +0000 (17:39 -0300)] 
doc/configuration/dynamic_home_servers.md: Fix typo

6 years agohome_server_delete() should delete also from 'home_servers_bynumber'
Jorge Pereira [Sun, 26 Apr 2020 19:50:22 +0000 (16:50 -0300)] 
home_server_delete() should delete also from 'home_servers_bynumber'

6 years agohome_server_delete() should look up by name, not file
Jorge Pereira [Sun, 26 Apr 2020 19:49:50 +0000 (16:49 -0300)] 
home_server_delete() should look up by name, not file

6 years agoFix missing \n
Jorge Pereira [Sun, 26 Apr 2020 19:21:45 +0000 (16:21 -0300)] 
Fix missing \n

6 years agohome_server_afrom_file() single exit
Jorge Pereira [Sun, 26 Apr 2020 19:05:55 +0000 (16:05 -0300)] 
home_server_afrom_file() single exit

6 years agohome_server_afrom_cs() expects the subsection
Jorge Pereira [Sun, 26 Apr 2020 19:01:32 +0000 (16:01 -0300)] 
home_server_afrom_cs() expects the subsection

6 years agoFix typo, it's should be 'home_server'
Jorge Pereira [Sun, 26 Apr 2020 18:59:16 +0000 (15:59 -0300)] 
Fix typo, it's should be 'home_server'

6 years agohome_server_afrom_file() expects the file fullpath.
Jorge Pereira [Sun, 26 Apr 2020 18:20:14 +0000 (15:20 -0300)] 
home_server_afrom_file() expects the file fullpath.

6 years agoVerify if 'directory' is set before proceeding.
Jorge Pereira [Sun, 26 Apr 2020 18:17:36 +0000 (15:17 -0300)] 
Verify if 'directory' is set before proceeding.

6 years agoUpdate proxy.conf with new 'directory' parameter
Jorge Pereira [Sun, 26 Apr 2020 18:10:55 +0000 (15:10 -0300)] 
Update proxy.conf with new 'directory' parameter

6 years agoresource-check virtual server for triggering control flow updates (#3398)
Terry Burton [Thu, 23 Apr 2020 13:49:47 +0000 (14:49 +0100)] 
resource-check virtual server for triggering control flow updates (#3398)

6 years agorlm_always: xlat for setting module status and rcode via unlang (#3396)
Terry Burton [Tue, 21 Apr 2020 21:03:17 +0000 (22:03 +0100)] 
rlm_always: xlat for setting module status and rcode via unlang (#3396)

Parity with: radmin -e 'set module status db_status {alive,dead,notfound,...}'

6 years agoenable delta CRLs. Fixes #3393
Alan T. DeKok [Mon, 20 Apr 2020 20:59:51 +0000 (16:59 -0400)] 
enable delta CRLs.  Fixes #3393

6 years agoFix typo, It should be WITH_TLS. (#3394)
Jorge Pereira [Mon, 20 Apr 2020 20:16:11 +0000 (17:16 -0300)] 
Fix typo, It should be WITH_TLS. (#3394)

6 years agodocument updates
Alan T. DeKok [Mon, 20 Apr 2020 19:23:36 +0000 (15:23 -0400)] 
document updates

6 years agoerror out on TCP / TLS home servers
Alan T. DeKok [Mon, 20 Apr 2020 19:17:00 +0000 (15:17 -0400)] 
error out on TCP / TLS home servers

6 years agoTypo (#3391)
Jorge Pereira [Mon, 20 Apr 2020 12:44:23 +0000 (09:44 -0300)] 
Typo (#3391)

6 years agoexperimental document on dynamic home servers
Alan T. DeKok [Mon, 20 Apr 2020 12:37:36 +0000 (08:37 -0400)] 
experimental document on dynamic home servers

6 years agoadd `%{home_server_exists:name}`
Alan T. DeKok [Sun, 19 Apr 2020 17:51:06 +0000 (13:51 -0400)] 
add `%{home_server_exists:name}`

6 years agoallow proxying to home servers by name
Alan T. DeKok [Sun, 19 Apr 2020 17:44:44 +0000 (13:44 -0400)] 
allow proxying to home servers by name

6 years agouse a better name
Alan T. DeKok [Sun, 19 Apr 2020 17:33:29 +0000 (13:33 -0400)] 
use a better name

6 years agorealms: Clarify the message (#3388)
Jorge Pereira [Mon, 20 Apr 2020 01:15:44 +0000 (22:15 -0300)] 
realms: Clarify the message (#3388)

6 years agoproxy: Add missed 'dynamic' option in proxy.conf (#3389)
Jorge Pereira [Mon, 20 Apr 2020 01:15:23 +0000 (22:15 -0300)] 
proxy: Add missed 'dynamic' option in proxy.conf (#3389)

6 years agoradmin: Fix 'home_server' (#3387)
Jorge Pereira [Sun, 19 Apr 2020 21:15:10 +0000 (18:15 -0300)] 
radmin: Fix 'home_server' (#3387)

6 years agoQuiet the compiler (#3386)
Jorge Pereira [Sun, 19 Apr 2020 19:47:52 +0000 (16:47 -0300)] 
Quiet the compiler (#3386)

6 years agorealms: Fix missing closedir() (#3385)
Jorge Pereira [Sun, 19 Apr 2020 19:47:30 +0000 (16:47 -0300)] 
realms: Fix missing closedir() (#3385)

6 years agofix issues and allow for loading of dynamic home servers at boot
Alan T. DeKok [Sun, 19 Apr 2020 15:38:28 +0000 (11:38 -0400)] 
fix issues and allow for loading of dynamic home servers at boot

6 years agofix typos
Alan T. DeKok [Sun, 19 Apr 2020 15:37:51 +0000 (11:37 -0400)] 
fix typos

6 years agoadded provisions for dynamic home servers
Alan T. DeKok [Sat, 18 Apr 2020 23:56:50 +0000 (19:56 -0400)] 
added provisions for dynamic home servers

and glued them into radmin.

Untested as of yet.

6 years agoallow request_will_proxy() to return an error
Alan T. DeKok [Sat, 18 Apr 2020 23:40:28 +0000 (19:40 -0400)] 
allow request_will_proxy() to return an error

and check it in request_running()

6 years agorlm_cache: Fix sanity check for driver name (#3371)
Jorge Pereira [Mon, 13 Apr 2020 15:00:51 +0000 (12:00 -0300)] 
rlm_cache: Fix sanity check for driver name (#3371)

6 years agoFix memory leak in radsniff (#3360)
Jorge Pereira [Wed, 8 Apr 2020 21:20:19 +0000 (18:20 -0300)] 
Fix memory leak in radsniff (#3360)

We should call pcap_freealldevs() always after pcap_findalldevs()

6 years agonote recent changes
Alan T. DeKok [Tue, 7 Apr 2020 13:13:44 +0000 (09:13 -0400)] 
note recent changes

6 years agoallow receiving CoA packets on TLS listeners, too. Helps with #3356
Alan T. DeKok [Tue, 7 Apr 2020 13:09:24 +0000 (09:09 -0400)] 
allow receiving CoA packets on TLS listeners, too.  Helps with #3356

6 years agoallow reception of CoA responses over TLS. Helps with #3356
Alan T. DeKok [Tue, 7 Apr 2020 13:06:21 +0000 (09:06 -0400)] 
allow reception of CoA responses over TLS.  Helps with #3356

6 years agofix typo
Alan T. DeKok [Tue, 7 Apr 2020 13:06:06 +0000 (09:06 -0400)] 
fix typo

6 years agoAdd missing backslash that precluded server from starting
Alejandro Perez [Mon, 6 Apr 2020 13:52:38 +0000 (15:52 +0200)] 
Add missing backslash that precluded server from starting

Server did not start, because it found an unterminated string. Adding the previous-existing backslash fixed it.
```
including configuration file /etc/raddb/mods-config/sql/main/postgresql/queries.conf
/etc/raddb/mods-config/sql/main/postgresql/queries.conf[505]: Parse error: Unterminated string
Errors reading or parsing /etc/raddb/radiusd.conf
```

6 years agonote recent changes
Alan T. DeKok [Mon, 6 Apr 2020 12:50:54 +0000 (08:50 -0400)] 
note recent changes

6 years agorespect auth_log here, too
Alan T. DeKok [Mon, 6 Apr 2020 12:47:38 +0000 (08:47 -0400)] 
respect auth_log here, too

6 years agoauth: respect log_reject attribute with proxy
Daniele Rondina [Mon, 6 Apr 2020 10:10:07 +0000 (12:10 +0200)] 
auth: respect log_reject attribute with proxy

Avoid logging message ""Login incorrect (Home Server says so)" if
`auth_reject = no` is configured.

Signed-off-by: Daniele Rondina <geaaru@sabayonlinux.org>
6 years agothis needs OpenSSL
Alan T. DeKok [Wed, 1 Apr 2020 14:27:49 +0000 (10:27 -0400)] 
this needs OpenSSL

6 years agoExtend module tests for rlm_files (#3342)
Terry Burton [Fri, 27 Mar 2020 16:46:31 +0000 (16:46 +0000)] 
Extend module tests for rlm_files (#3342)

Test control and reply list modification operations.

Align with v4 by using Reply-Message rather than Filter-Id.

6 years agodon't break rpmbuild for centos > 6 and fix some warnings
Matthew Newton [Thu, 26 Mar 2020 23:20:02 +0000 (23:20 +0000)] 
don't break rpmbuild for centos > 6 and fix some warnings

6 years agoUpdates dictionary.bskyb for v3.0.x (#3339)
shaunmiles [Thu, 26 Mar 2020 16:07:48 +0000 (16:07 +0000)] 
Updates dictionary.bskyb for v3.0.x (#3339)

* adds new attributes required by the business

6 years agoSkip python RPM on CentOS 6
Matthew Newton [Wed, 25 Mar 2020 18:10:49 +0000 (18:10 +0000)] 
Skip python RPM on CentOS 6

Python 2 is obsolete, CentOS 6 is obsolete. Closes #3334

6 years agoAssign intial value in declaration
Alejandro Perez [Wed, 25 Mar 2020 11:49:43 +0000 (12:49 +0100)] 
Assign intial value in declaration

6 years agoUpdate abfab-tls
Alejandro Perez [Wed, 25 Mar 2020 11:49:21 +0000 (12:49 +0100)] 
Update abfab-tls

* Include tls_min_version = "1.2"
* Fix formatting

6 years agoBump for 3.0.22
Matthew Newton [Wed, 25 Mar 2020 10:30:00 +0000 (10:30 +0000)] 
Bump for 3.0.22

6 years agoPrepare for 3.0.21 release release_3_0_21
Matthew Newton [Tue, 24 Mar 2020 14:23:29 +0000 (14:23 +0000)] 
Prepare for 3.0.21 release

6 years agoNote recent changes
Terry Burton [Mon, 23 Mar 2020 17:39:14 +0000 (17:39 +0000)] 
Note recent changes

6 years agoSQLite: Simplify time handling using expansions
Terry Burton [Mon, 23 Mar 2020 16:59:50 +0000 (16:59 +0000)] 
SQLite: Simplify time handling using expansions

Don't use NOW() since the queries can be replayed from a file

6 years agoPostgreSQL: Simplify time handling using expansions
Terry Burton [Mon, 23 Mar 2020 16:59:23 +0000 (16:59 +0000)] 
PostgreSQL: Simplify time handling using expansions

6 years agoOracle: Simplify time handling using expansions
Terry Burton [Mon, 23 Mar 2020 16:59:08 +0000 (16:59 +0000)] 
Oracle: Simplify time handling using expansions

6 years agoMySQL: Simplify time handling using expansions
Terry Burton [Mon, 23 Mar 2020 16:58:58 +0000 (16:58 +0000)] 
MySQL: Simplify time handling using expansions

6 years agoMS SQL: Simplify time handling using expansions
Terry Burton [Mon, 23 Mar 2020 16:58:43 +0000 (16:58 +0000)] 
MS SQL: Simplify time handling using expansions

6 years agoMySQL: Increase post-auth logging precision
Terry Burton [Mon, 23 Mar 2020 16:50:51 +0000 (16:50 +0000)] 
MySQL: Increase post-auth logging precision

6 years agoOracle: Increase post-auth logging precision
Terry Burton [Mon, 23 Mar 2020 16:47:04 +0000 (16:47 +0000)] 
Oracle: Increase post-auth logging precision

6 years agoPostgreSQL: Don't use NOW() since the queries can be replayed from a file
Terry Burton [Mon, 23 Mar 2020 16:45:52 +0000 (16:45 +0000)] 
PostgreSQL: Don't use NOW() since the queries can be replayed from a file

6 years agoSQLite: Increase post-auth logging precision
Terry Burton [Mon, 23 Mar 2020 16:44:16 +0000 (16:44 +0000)] 
SQLite: Increase post-auth logging precision

6 years agoMS SQL: We have a post-auth table so we should use it
Terry Burton [Mon, 23 Mar 2020 16:37:49 +0000 (16:37 +0000)] 
MS SQL: We have a post-auth table so we should use it

6 years agoAdd dictionary.vasexperts ref #3328
Jorge Pereira [Thu, 19 Mar 2020 17:10:22 +0000 (14:10 -0300)] 
Add dictionary.vasexperts ref #3328

6 years agodebian: Add reload capability to systemd. ref#3315 (#3331)
Jorge Pereira [Thu, 19 Mar 2020 23:37:45 +0000 (20:37 -0300)] 
debian: Add reload capability to systemd. ref#3315 (#3331)

6 years agoAdd reload capability to systemd unit file (#3315)
Josef Vybíhal [Thu, 19 Mar 2020 17:17:47 +0000 (18:17 +0100)] 
Add reload capability to systemd unit file (#3315)

Added back support for reload command.

6 years agov3.0.x raduat fixes (#3324)
Terry Burton [Thu, 19 Mar 2020 17:16:56 +0000 (17:16 +0000)] 
v3.0.x raduat fixes (#3324)

* raduat: Use the given instance of radclient

* raduat: Use the given DICTPATH

6 years agoAcct-Terminate-Cause can't be NULL
Alan T. DeKok [Tue, 17 Mar 2020 23:00:09 +0000 (19:00 -0400)] 
Acct-Terminate-Cause can't be NULL

6 years agotypo
Alan T. DeKok [Fri, 13 Mar 2020 20:27:23 +0000 (16:27 -0400)] 
typo

6 years agomake sure there are trailing CRs (#3320)
Jorge Pereira [Thu, 12 Mar 2020 19:47:24 +0000 (16:47 -0300)] 
make sure there are trailing CRs (#3320)

6 years agoFix sigsegv in --mode=execute without parameters fixes #3319
Alan T. DeKok [Thu, 12 Mar 2020 14:15:51 +0000 (10:15 -0400)] 
Fix sigsegv in --mode=execute without parameters fixes #3319

and print out a descriptive error message

6 years agorlm_redis: Add missing 'database' parameter (#3316)
Jorge Pereira [Tue, 10 Mar 2020 17:31:31 +0000 (14:31 -0300)] 
rlm_redis: Add missing 'database' parameter (#3316)

6 years agouse CS_INT for variable, as that's what the function takes
Alan T. DeKok [Mon, 9 Mar 2020 12:16:44 +0000 (08:16 -0400)] 
use CS_INT for variable, as that's what the function takes

Instead of making the variable "int", and then casting it to
CS_INT when calling the function.  That just won't work.

6 years agoBackport crossbuild
Matthew Newton [Sun, 8 Mar 2020 17:15:56 +0000 (17:15 +0000)] 
Backport crossbuild

Rework so as to not affect existing Docker files

6 years agoRevert "Backport crossbuild scripts from v4 (#3011)"
Alan T. DeKok [Sat, 7 Mar 2020 22:10:24 +0000 (17:10 -0500)] 
Revert "Backport crossbuild scripts from v4 (#3011)"

This reverts commit 72d3bfdc7411cd7ea3c78582d7295c088c38f80a.

These changes break the existing docker images in v3.
Back-porting the crossbuild stuff is useful, but we might need
to just create a new `scripts/crossbuild` directory for it

6 years agofix typo
Matthew Newton [Sat, 7 Mar 2020 19:00:34 +0000 (19:00 +0000)] 
fix typo

6 years agoadd debug message
Alan T. DeKok [Fri, 6 Mar 2020 14:38:07 +0000 (09:38 -0500)] 
add debug message

6 years agoUpdate dictionary.erx (#3313)
Arran Cudbard-Bell [Wed, 4 Mar 2020 18:53:54 +0000 (12:53 -0600)] 
Update dictionary.erx (#3313)

Refreshed against upstream documentation linked in the comments.

Also attribute ERX-Cos-Shaping-Rate (177) seen on the wire.