]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
10 years agoUpdate RPM spec file to reflect redis module is now stable 1057/head
Philippe Wooding [Thu, 11 Jun 2015 15:16:02 +0000 (17:16 +0200)] 
Update RPM spec file to reflect redis module is now stable

10 years agoTypo fix: retrived => retrieved
Herwin Weststrate [Thu, 4 Jun 2015 12:02:40 +0000 (14:02 +0200)] 
Typo fix: retrived => retrieved

10 years agoTypo fix: expnsion => expansion
Herwin Weststrate [Thu, 16 Apr 2015 06:00:10 +0000 (08:00 +0200)] 
Typo fix: expnsion => expansion

10 years agoTypo fix: reqex => regex
Herwin Weststrate [Wed, 15 Apr 2015 13:55:54 +0000 (15:55 +0200)] 
Typo fix: reqex => regex

10 years agoPartial revert of 93e6ebe0.
Alan T. DeKok [Mon, 15 Jun 2015 11:36:37 +0000 (07:36 -0400)] 
Partial revert of 93e6ebe0.

If the home server is dead, there's no request->proxy, and
no fallback server.  So we can't run proxy-proxy-type fail

10 years agoPort fix from sqlcounter
Alan T. DeKok [Sun, 14 Jun 2015 16:29:18 +0000 (12:29 -0400)] 
Port fix from sqlcounter

10 years agoCheck for from==NULL. Fixes #1054
Alan T. DeKok [Sun, 14 Jun 2015 14:12:30 +0000 (10:12 -0400)] 
Check for from==NULL.  Fixes #1054

10 years agoNo map support in v3.0.x.
Arran Cudbard-Bell [Sun, 14 Jun 2015 02:49:56 +0000 (22:49 -0400)] 
No map support in v3.0.x.

10 years agoBackport SASL interactive bind (non interactive didn't work anyway...) Fixes #991
Arran Cudbard-Bell [Sun, 14 Jun 2015 02:06:42 +0000 (22:06 -0400)] 
Backport SASL interactive bind (non interactive didn't work anyway...) Fixes #991

10 years agoSync function docs in rlm_ldap with v3.1.x
Arran Cudbard-Bell [Sun, 14 Jun 2015 01:54:40 +0000 (21:54 -0400)] 
Sync function docs in rlm_ldap with v3.1.x

10 years agoMerge pull request #1052 from jpereira/develop-debian
Arran Cudbard-Bell [Sat, 13 Jun 2015 23:47:46 +0000 (19:47 -0400)] 
Merge pull request #1052 from jpereira/develop-debian

Please, don't show the debian/freeradius-dhcp

10 years agoDon't set resource pointers to NULL when the handle is freed (in SQL drivers)
Arran Cudbard-Bell [Sat, 13 Jun 2015 23:35:44 +0000 (19:35 -0400)] 
Don't set resource pointers to NULL when the handle is freed (in SQL drivers)

10 years agoDocument OpenDirectory and MS-CHAP
Alan T. DeKok [Sat, 13 Jun 2015 15:07:56 +0000 (11:07 -0400)] 
Document OpenDirectory and MS-CHAP

10 years agoDocument MySQL configuration fields
Arran Cudbard-Bell [Fri, 12 Jun 2015 21:23:22 +0000 (17:23 -0400)] 
Document MySQL configuration fields

10 years agoOnly MySQL uses sql_store_result
Arran Cudbard-Bell [Fri, 12 Jun 2015 21:23:11 +0000 (17:23 -0400)] 
Only MySQL uses sql_store_result

10 years agoDocument the sql_error_t callback
Arran Cudbard-Bell [Fri, 12 Jun 2015 21:21:25 +0000 (17:21 -0400)] 
Document the sql_error_t callback

10 years agoPlease, don't show the debian/freeradius-dhcp 1052/head
Jorge Pereira [Fri, 12 Jun 2015 17:35:30 +0000 (14:35 -0300)] 
Please, don't show the debian/freeradius-dhcp

10 years agoProperly decode "long" EVS which are unknown
Alan T. DeKok [Fri, 12 Jun 2015 15:45:28 +0000 (11:45 -0400)] 
Properly decode "long" EVS which are unknown

10 years agoDecode EVS data types correctly.
Alan T. DeKok [Fri, 12 Jun 2015 15:24:41 +0000 (11:24 -0400)] 
Decode EVS data types correctly.

10 years agoFix documentation for EVS types
Alan T. DeKok [Fri, 12 Jun 2015 15:09:01 +0000 (11:09 -0400)] 
Fix documentation for EVS types

10 years agoUse da->vendor not da->attr for EVS block vendor
Alan T. DeKok [Fri, 12 Jun 2015 15:05:30 +0000 (11:05 -0400)] 
Use da->vendor not da->attr for EVS block vendor

10 years agoRe-arrange add vendor code
Alan T. DeKok [Fri, 12 Jun 2015 13:33:06 +0000 (09:33 -0400)] 
Re-arrange add vendor code

10 years agoIf the TLVs are malformed, they're unknown
Alan T. DeKok [Thu, 11 Jun 2015 15:41:33 +0000 (11:41 -0400)] 
If the TLVs are malformed, they're unknown

10 years agoUse pairmemcpy instead of doing it manually
Alan T. DeKok [Thu, 11 Jun 2015 15:39:11 +0000 (11:39 -0400)] 
Use pairmemcpy instead of doing it manually

10 years agoModule rlm_redis and rlm_rediswho, welcome to stable world!
Jorge Pereira [Thu, 11 Jun 2015 17:41:44 +0000 (14:41 -0300)] 
Module rlm_redis and rlm_rediswho, welcome to stable world!

10 years agobetter check during redisFree() in the rlm_redis
Jorge Pereira [Thu, 11 Jun 2015 19:18:58 +0000 (16:18 -0300)] 
better check during redisFree() in the rlm_redis

10 years agoRemove unused variable
Alan T. DeKok [Thu, 11 Jun 2015 15:33:41 +0000 (11:33 -0400)] 
Remove unused variable

10 years agoimprove the debug messages in the rlm_redis
Jorge Pereira [Wed, 10 Jun 2015 21:41:49 +0000 (18:41 -0300)] 
improve the debug messages in the rlm_redis

10 years agoMore WiMAX tests
Alan T. DeKok [Thu, 11 Jun 2015 15:06:48 +0000 (11:06 -0400)] 
More WiMAX tests

10 years agoMore tests for multiple WiMAX attributes
Alan T. DeKok [Wed, 10 Jun 2015 19:15:51 +0000 (15:15 -0400)] 
More tests for multiple WiMAX attributes

10 years agoCalculate final length correctly
Alan T. DeKok [Wed, 10 Jun 2015 19:14:33 +0000 (15:14 -0400)] 
Calculate final length correctly

10 years agomore documentation for hotspot attributes
Alan T. DeKok [Wed, 10 Jun 2015 17:16:30 +0000 (13:16 -0400)] 
more documentation for hotspot attributes

10 years agoImprove the error messages in the rlm_redis 1045/head
Jorge Pereira [Wed, 10 Jun 2015 18:02:06 +0000 (15:02 -0300)] 
Improve the error messages in the rlm_redis

10 years agoFixing a memory leak in the rlm_redis
Jorge Pereira [Wed, 10 Jun 2015 18:01:19 +0000 (15:01 -0300)] 
Fixing a memory leak in the rlm_redis

10 years agoPrint slightly better errors
Alan T. DeKok [Wed, 10 Jun 2015 16:57:38 +0000 (12:57 -0400)] 
Print slightly better errors

10 years agoBuild OpenDirectory on Apple
Alan T. DeKok [Wed, 10 Jun 2015 16:34:25 +0000 (12:34 -0400)] 
Build OpenDirectory on Apple

10 years agorad_getgid() returns <0 on error
Alan T. DeKok [Wed, 10 Jun 2015 16:18:22 +0000 (12:18 -0400)] 
rad_getgid() returns <0 on error

10 years agoUse AcctUniqueId everywhere
Arran Cudbard-Bell [Wed, 10 Jun 2015 15:13:27 +0000 (11:13 -0400)] 
Use AcctUniqueId everywhere

10 years agoSwitch to using session_identifier in MySQL
Alan T. DeKok [Wed, 10 Jun 2015 14:48:21 +0000 (10:48 -0400)] 
Switch to using session_identifier in MySQL

10 years agoAdd a freeradius-dhcp Debian package
Brad Cowie [Wed, 10 Jun 2015 04:59:08 +0000 (04:59 +0000)] 
Add a freeradius-dhcp Debian package

Adds a new package called freeradius-dhcp for Debian platform that includes
the proto_dhcp.so library needed to listen on a DHCP socket.

10 years agoMerge pull request #1038 from jpereira/develop-dict-aptilo
Arran Cudbard-Bell [Tue, 9 Jun 2015 16:35:53 +0000 (12:35 -0400)] 
Merge pull request #1038 from jpereira/develop-dict-aptilo

Add support for Aptilo Access Controller

10 years agoAdded support for Aptilo Controller 1038/head
Jorge Pereira [Tue, 9 Jun 2015 16:34:11 +0000 (13:34 -0300)] 
Added support for Aptilo Controller

10 years agoMore docs on stats memory
Alan T. DeKok [Tue, 9 Jun 2015 15:03:52 +0000 (11:03 -0400)] 
More docs on stats memory

10 years agoAdd "stats memory" command
Alan T. DeKok [Tue, 9 Jun 2015 14:59:44 +0000 (10:59 -0400)] 
Add "stats memory" command

10 years agoBump default max_requests. It's 2015. Memory is cheaper than 1999
Alan T. DeKok [Tue, 9 Jun 2015 14:14:39 +0000 (10:14 -0400)] 
Bump default max_requests.  It's 2015.  Memory is cheaper than 1999

10 years agoFix issue with fr_cursor_remove
Arran Cudbard-Bell [Tue, 9 Jun 2015 05:13:34 +0000 (01:13 -0400)] 
Fix issue with fr_cursor_remove

Caused unexpected behaviour removing attributes in an fr_cursor_next loop.

cursor->current would be advanced past the VP we were deleting. Which meant fr_cursor_next would skip past the next attribute.

Now we set current to be the vp before the one we're deleting, so fr_cursor_next works as expected.

10 years agofix docs
Alan T. DeKok [Mon, 8 Jun 2015 20:08:21 +0000 (16:08 -0400)] 
fix docs

10 years agoPost-Proxy-Type Fail if we can't proxy to Packet-Dst-IP-Address
Alan T. DeKok [Mon, 8 Jun 2015 20:02:03 +0000 (16:02 -0400)] 
Post-Proxy-Type Fail if we can't proxy to Packet-Dst-IP-Address

If you had wanted fail-over, you should have used a pool.

10 years agoAdd the vsa 'Alc-Wlan-SSID-VLAN' for Alcatel 7750
Jorge Pereira [Mon, 8 Jun 2015 18:41:10 +0000 (15:41 -0300)] 
Add the vsa 'Alc-Wlan-SSID-VLAN' for Alcatel 7750

10 years agoChange length checks to warnings for v3.0.x
Arran Cudbard-Bell [Mon, 8 Jun 2015 19:05:42 +0000 (15:05 -0400)] 
Change length checks to warnings for v3.0.x

10 years agoFix proxy to Packet-Dst-IP-Address.
Alan T. DeKok [Mon, 8 Jun 2015 17:50:46 +0000 (13:50 -0400)] 
Fix proxy to Packet-Dst-IP-Address.

So that it uses the correct destination port.

10 years agonote recent changes
Alan T. DeKok [Mon, 8 Jun 2015 15:51:44 +0000 (11:51 -0400)] 
note recent changes

10 years agoMore. Fixes #1035
Alan T. DeKok [Mon, 8 Jun 2015 14:26:21 +0000 (10:26 -0400)] 
More. Fixes #1035

10 years agoStupid Perl changes it's parsing rules. Fixes #1035
Alan T. DeKok [Mon, 8 Jun 2015 14:23:47 +0000 (10:23 -0400)] 
Stupid Perl changes it's parsing rules.  Fixes #1035

10 years agoFix bug that caused spinning when home server was put in zombie state.
Philippe Wooding [Mon, 8 Jun 2015 10:18:22 +0000 (12:18 +0200)] 
Fix bug that caused spinning when home server was put in zombie state.

10 years agoxlat value concat uses ','
Arran Cudbard-Bell [Mon, 8 Jun 2015 12:14:44 +0000 (08:14 -0400)] 
xlat value concat uses ','

10 years agosqlhpwippool gets built irrespective of experimental
Arran Cudbard-Bell [Mon, 8 Jun 2015 02:37:30 +0000 (22:37 -0400)] 
sqlhpwippool gets built irrespective of experimental

10 years agoPrint out log message before validation
Arran Cudbard-Bell [Sun, 7 Jun 2015 15:06:27 +0000 (11:06 -0400)] 
Print out log message before validation

10 years agoCheck that the total length of all received fragments matches exactly the length...
Arran Cudbard-Bell [Sat, 6 Jun 2015 17:53:08 +0000 (13:53 -0400)] 
Check that the total length of all received fragments matches exactly the length specified in the first fragment

10 years agoUse bools where appropriate
Arran Cudbard-Bell [Fri, 5 Jun 2015 21:47:43 +0000 (15:47 -0600)] 
Use bools where appropriate

10 years agoDocument tls_session_t fields
Arran Cudbard-Bell [Fri, 5 Jun 2015 21:47:24 +0000 (15:47 -0600)] 
Document tls_session_t fields

10 years agoRevert "Make WITH_DETAIL_THREAD the default."
Alan T. DeKok [Sun, 7 Jun 2015 14:47:30 +0000 (10:47 -0400)] 
Revert "Make WITH_DETAIL_THREAD the default."

This reverts commit e9f596f45bf8271bde5ff46cffd4909aaa2cd234.

arg.  Some systems don't have pthreads.  <sigh>

10 years agoDo less work on check_config
Alan T. DeKok [Sun, 7 Jun 2015 14:30:19 +0000 (10:30 -0400)] 
Do less work on check_config

10 years agoMake WITH_DETAIL_THREAD the default.
Alan T. DeKok [Sun, 7 Jun 2015 14:29:46 +0000 (10:29 -0400)] 
Make WITH_DETAIL_THREAD the default.

10 years agoStart of "hup module" code.
Alan T. DeKok [Sat, 6 Jun 2015 14:34:13 +0000 (10:34 -0400)] 
Start of "hup module" code.

Handle module config files, too.  e.g. "users" file.

It's not clear how to best handle that.  A module has to be told
to re-load the files it loads... but with no changes to the
module config section.  It's probably best to add a "hup" method
to the modules

10 years agoDocument what's going on
Alan T. DeKok [Sat, 6 Jun 2015 13:36:45 +0000 (09:36 -0400)] 
Document what's going on

10 years agoCan't hup a module with bootstrap method
Alan T. DeKok [Sat, 6 Jun 2015 13:35:11 +0000 (09:35 -0400)] 
Can't hup a module with bootstrap method

Becvause bootstrap registers xlat's, paircompare, etc.

10 years agoWith winbind stuff, it's no longer HUP-safe
Alan T. DeKok [Sat, 6 Jun 2015 13:31:28 +0000 (09:31 -0400)] 
With winbind stuff, it's no longer HUP-safe

10 years agoFix CID 1271301
Alan T. DeKok [Fri, 5 Jun 2015 23:06:43 +0000 (19:06 -0400)] 
Fix CID 1271301

Ignore the return code of rbtree_walk()

10 years agonote recent changes
Alan T. DeKok [Fri, 5 Jun 2015 19:15:42 +0000 (15:15 -0400)] 
note recent changes

10 years agoCache FILE_INPUT from modules, too.
Alan T. DeKok [Fri, 5 Jun 2015 18:37:31 +0000 (14:37 -0400)] 
Cache FILE_INPUT from modules, too.

So that we can do HUP if a file changes for a module, but
avoid HUP if all of the files remain the same

10 years agoAllow the same config file to be read twice
Alan T. DeKok [Fri, 5 Jun 2015 18:28:58 +0000 (14:28 -0400)] 
Allow the same config file to be read twice

Because it's sometimes useful, and as an error, it rarely happens

10 years agore-open log file even if no config was changed
Alan T. DeKok [Fri, 5 Jun 2015 18:27:45 +0000 (14:27 -0400)] 
re-open log file even if no config was changed

10 years agoIgnore HUP if no config files have changed
Alan T. DeKok [Fri, 5 Jun 2015 18:26:03 +0000 (14:26 -0400)] 
Ignore HUP if no config files have changed

10 years agoMake an rbtree of files we've included
Alan T. DeKok [Fri, 5 Jun 2015 16:34:12 +0000 (12:34 -0400)] 
Make an rbtree of files we've included

And track the dev / inode, instead of the filename.  It's better
and easier.

10 years agocf_file_include() is private.
Alan T. DeKok [Fri, 5 Jun 2015 14:38:51 +0000 (10:38 -0400)] 
cf_file_include() is private.

And no one outside of conffile.c calls it.  Everyone else should
call cf_file_read()

10 years agoTrack include files at the top level, instead of each section
Alan T. DeKok [Fri, 5 Jun 2015 14:37:09 +0000 (10:37 -0400)] 
Track include files at the top level, instead of each section

So that when we're asked to include the same file twice, but
from different sub-sections, we can track that.

10 years agoWhitespace
Alan T. DeKok [Fri, 5 Jun 2015 14:30:00 +0000 (10:30 -0400)] 
Whitespace

10 years agoOCSP messages should go to the request log, not the global log
Arran Cudbard-Bell [Fri, 5 Jun 2015 18:12:42 +0000 (12:12 -0600)] 
OCSP messages should go to the request log, not the global log

10 years agoCheck if eaptls_prev is NULL
Arran Cudbard-Bell [Fri, 5 Jun 2015 17:47:52 +0000 (11:47 -0600)] 
Check if eaptls_prev is NULL

10 years agoFix indentation for some messages, lower priority of others to make EAP-TLS debug...
Arran Cudbard-Bell [Fri, 5 Jun 2015 16:27:12 +0000 (10:27 -0600)] 
Fix indentation for some messages, lower priority of others to make EAP-TLS debug cleaner

Reword yet more log messages, so they make sense for mortals

10 years agoMove tls_status_table outside of ENABLE_OPENSSL_VERSOIN_CHECK Closes #1030
Arran Cudbard-Bell [Fri, 5 Jun 2015 15:40:07 +0000 (09:40 -0600)] 
Move tls_status_table outside of ENABLE_OPENSSL_VERSOIN_CHECK Closes #1030

10 years agoDoxygen
Arran Cudbard-Bell [Fri, 5 Jun 2015 04:29:49 +0000 (22:29 -0600)] 
Doxygen

10 years agoUse common prefix for all TLS log messages
Arran Cudbard-Bell [Fri, 5 Jun 2015 03:51:24 +0000 (21:51 -0600)] 
Use common prefix for all TLS log messages

10 years agoMore logging fixes
Arran Cudbard-Bell [Fri, 5 Jun 2015 02:38:31 +0000 (20:38 -0600)] 
More logging fixes

10 years agoDefine a prefix for ROPTIONAL global messages
Arran Cudbard-Bell [Fri, 5 Jun 2015 00:01:40 +0000 (18:01 -0600)] 
Define a prefix for ROPTIONAL global messages

10 years agoRequest may be null
Arran Cudbard-Bell [Thu, 4 Jun 2015 23:33:51 +0000 (17:33 -0600)] 
Request may be null

10 years agoMore minor message tweaks
Arran Cudbard-Bell [Thu, 4 Jun 2015 23:21:28 +0000 (17:21 -0600)] 
More minor message tweaks

10 years agoTypos
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:57:51 +0000 (16:57 -0600)] 
Typos

10 years agoClearer debugging for EAP-TLS peer fragmentation
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:42:15 +0000 (16:42 -0600)] 
Clearer debugging for EAP-TLS peer fragmentation

10 years agoint_ssl_status_check should log to the request log
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:40:45 +0000 (16:40 -0600)] 
int_ssl_status_check should log to the request log

10 years agoThese aren't global errors, so should be REDEBUG not RERROR
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:40:07 +0000 (16:40 -0600)] 
These aren't global errors, so should be REDEBUG not RERROR

10 years agoUse standard return code message format
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:29:29 +0000 (16:29 -0600)] 
Use standard return code message format

10 years agoverify mode no longer needed in eaptls_session
Arran Cudbard-Bell [Thu, 4 Jun 2015 17:33:48 +0000 (11:33 -0600)] 
verify mode no longer needed in eaptls_session

10 years agoMessages in tls_handshake_recv should be logged to the request log
Arran Cudbard-Bell [Thu, 4 Jun 2015 17:28:28 +0000 (11:28 -0600)] 
Messages in tls_handshake_recv should be logged to the request log

10 years agoMake Peer Sent method message slightly clearer
Arran Cudbard-Bell [Thu, 4 Jun 2015 17:26:46 +0000 (11:26 -0600)] 
Make Peer Sent method message slightly clearer

10 years agoMore duplicate code (tls_new_session also sets client cert verification flags)
Arran Cudbard-Bell [Thu, 4 Jun 2015 17:17:36 +0000 (11:17 -0600)] 
More duplicate code (tls_new_session also sets client cert verification flags)

10 years agoDocument FR_TLS_* constants with doxygen prefixes, and expose fr_tls_status_table
Arran Cudbard-Bell [Thu, 4 Jun 2015 16:53:33 +0000 (10:53 -0600)] 
Document FR_TLS_* constants with doxygen prefixes, and expose fr_tls_status_table

10 years agoexpose request in eaptls_operation
Arran Cudbard-Bell [Thu, 4 Jun 2015 16:31:18 +0000 (10:31 -0600)] 
expose request in eaptls_operation

10 years agoprint the string version of the return code from eaptls_process
Arran Cudbard-Bell [Thu, 4 Jun 2015 16:27:36 +0000 (10:27 -0600)] 
print the string version of the return code from eaptls_process