]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
10 years agosmall documentation fix/cleanups 1231/head
Matthew Newton [Fri, 11 Sep 2015 22:07:27 +0000 (23:07 +0100)] 
small documentation fix/cleanups

10 years agoNo need for if
Arran Cudbard-Bell [Fri, 11 Sep 2015 17:04:31 +0000 (18:04 +0100)] 
No need for if

Confusing because the rest of the frees don't use a condition

10 years agoDoxygen
Alan T. DeKok [Fri, 11 Sep 2015 16:52:32 +0000 (12:52 -0400)] 
Doxygen

10 years agoDon't leak client_fd on error
Arran Cudbard-Bell [Fri, 11 Sep 2015 16:18:58 +0000 (17:18 +0100)] 
Don't leak client_fd on error

10 years agoFormatting
Arran Cudbard-Bell [Fri, 11 Sep 2015 16:17:30 +0000 (17:17 +0100)] 
Formatting

10 years agoUse fr_pair_list_mcopy... instead of fr_pair_list_move...
Alan T. DeKok [Fri, 11 Sep 2015 16:16:53 +0000 (12:16 -0400)] 
Use fr_pair_list_mcopy... instead of fr_pair_list_move...

10 years agoAdd fr_pair_list_mcopy_by_num()
Alan T. DeKok [Fri, 11 Sep 2015 16:10:35 +0000 (12:10 -0400)] 
Add fr_pair_list_mcopy_by_num()

Which is like fr_pair_list_move(), but does copy / delete
instead of talloc_steal.

The problem is that talloc_steal() keeps the original parent
context around for the lifetime of the VP being stolen.  Which is
bad when the VP comes from a REQUEST, and is put into another
context, which lives for multiple seconds.

10 years agoRevert "Copy VPs instead of talloc_stealing them"
Alan T. DeKok [Fri, 11 Sep 2015 16:09:39 +0000 (12:09 -0400)] 
Revert "Copy VPs instead of talloc_stealing them"

This reverts commit a529c2d9bdef0f635fa10b2ab7e05527f95551b2.

There's a better fix

10 years agoCopy VPs instead of talloc_stealing them
Alan T. DeKok [Fri, 11 Sep 2015 15:56:46 +0000 (11:56 -0400)] 
Copy VPs instead of talloc_stealing them

10 years agoCheck if the socket is in use before unlinking it
Alan T. DeKok [Fri, 11 Sep 2015 14:33:17 +0000 (10:33 -0400)] 
Check if the socket is in use before unlinking it

10 years agoAdd __packed__ to structs which cast over packet buffers
Arran Cudbard-Bell [Fri, 11 Sep 2015 14:13:03 +0000 (15:13 +0100)] 
Add __packed__ to structs which cast over packet buffers

10 years agonote recent changes
Alan T. DeKok [Fri, 11 Sep 2015 13:39:29 +0000 (09:39 -0400)] 
note recent changes

10 years agoSyntax errors are errors, not assertions
Alan T. DeKok [Fri, 11 Sep 2015 13:18:33 +0000 (09:18 -0400)] 
Syntax errors are errors, not assertions

10 years agoShould be AF_UNSPEC, because we don't *know* what type of client IP we'll be parsing
Arran Cudbard-Bell [Fri, 11 Sep 2015 12:58:26 +0000 (13:58 +0100)] 
Should be AF_UNSPEC, because we don't *know* what type of client IP we'll be parsing

Length should be -1.

10 years agoRemove second entry of Error-Cause in Access-Reject filter
Herwin Weststrate [Fri, 11 Sep 2015 06:06:10 +0000 (08:06 +0200)] 
Remove second entry of Error-Cause in Access-Reject filter

This is effectively a revert of commit caaca8da2eede537270a711742cc99f0ba854eb1.

10 years agoAdd support for "old" style clients back. This shouldn't be removed until v3.1.x.
Arran Cudbard-Bell [Fri, 11 Sep 2015 12:10:12 +0000 (13:10 +0100)] 
Add support for "old" style clients back.  This shouldn't be removed until v3.1.x.

10 years agoPrevent possible memleak in regex
Herwin Weststrate [Fri, 11 Sep 2015 07:28:39 +0000 (09:28 +0200)] 
Prevent possible memleak in regex

There was a very small chance that preg was allocated but not freed. This is kind of a sequel to PR #1207.

10 years agoOptionally send rejects without a delay
Herwin Weststrate [Wed, 9 Sep 2015 13:12:20 +0000 (15:12 +0200)] 
Optionally send rejects without a delay

Currently there is only one global option to set a delay to every Access-Reject packet: reject_delay. There are use cases where you want certain rejects to have no delay, while others should have a delay. An example might be using 802.1X on Cisco LAN Devices: If a client tries MAC authentication an Access-Reject can force it to switch to 802.1X, this is a reject you want to send without any delay. On the other hand, if the client tries 802.1X with a wrong password, you still want the reject to be delayed.

By setting a value to FreeRADIUS-Response-Delay(-USec) in reply, we overwrite the global delay. The maximum supported value is 10, larger values result in a delay of 10 seconds. A value of 0 removes the delay. Not having this attribute in control results in using the global delay. If both FreeRADIUS-Response-Delay and FreeRADIUS-Response-Delay-USec are set, the second one is ignored.

10 years agoAllow response_delay to be microseconds, too
Herwin Weststrate [Thu, 10 Sep 2015 05:50:01 +0000 (07:50 +0200)] 
Allow response_delay to be microseconds, too

This was already done with commit 1d1c50bb0c6f5f013b9680def4b7184ecb63f64b, but there was a second assertion that assumed the delay was at least 1 second.

10 years agoUpdate radiusd-example.txt
Alan Buxey [Thu, 10 Sep 2015 19:26:28 +0000 (20:26 +0100)] 
Update radiusd-example.txt

10 years agoUpdate xlat.c
Alan Buxey [Thu, 10 Sep 2015 19:25:27 +0000 (20:25 +0100)] 
Update xlat.c

10 years agoUpdate rlm_sqlippool
Alan Buxey [Thu, 10 Sep 2015 19:24:30 +0000 (20:24 +0100)] 
Update rlm_sqlippool

10 years agoUpdate vmpsd.conf.in
Alan Buxey [Thu, 10 Sep 2015 19:24:07 +0000 (20:24 +0100)] 
Update vmpsd.conf.in

10 years agoUpdate expr 1227/head
Alan Buxey [Thu, 10 Sep 2015 09:15:34 +0000 (10:15 +0100)] 
Update expr

10 years agoCheck we're building with GLIBC before assuming the GNU version of strerror_r is...
Arran Cudbard-Bell [Thu, 10 Sep 2015 08:46:15 +0000 (09:46 +0100)] 
Check we're building with GLIBC before assuming the GNU version of strerror_r is present Closes #1222

10 years agoUpdate radiusd-example.txt
Alan Buxey [Wed, 9 Sep 2015 19:42:01 +0000 (20:42 +0100)] 
Update radiusd-example.txt

10 years agoUpdate xlat.c
Alan Buxey [Wed, 9 Sep 2015 19:40:55 +0000 (20:40 +0100)] 
Update xlat.c

10 years agoUpdate vmpsd.conf.in
Alan Buxey [Wed, 9 Sep 2015 19:39:46 +0000 (20:39 +0100)] 
Update vmpsd.conf.in

10 years agoUpdate rlm_sqlippool
Alan Buxey [Wed, 9 Sep 2015 19:37:42 +0000 (20:37 +0100)] 
Update rlm_sqlippool

10 years agocompile warnings
Alan T. DeKok [Wed, 9 Sep 2015 19:42:44 +0000 (15:42 -0400)] 
compile warnings

10 years agoDon't allow %{rand} is we require %{rand:...}
Alan T. DeKok [Wed, 9 Sep 2015 19:16:28 +0000 (15:16 -0400)] 
Don't allow %{rand} is we require %{rand:...}

10 years agoCount backslash - CHAR in node->len
Alan T. DeKok [Wed, 9 Sep 2015 17:40:31 +0000 (13:40 -0400)] 
Count backslash - CHAR in node->len

10 years agoTypo
Alan T. DeKok [Wed, 9 Sep 2015 17:26:55 +0000 (13:26 -0400)] 
Typo

10 years agoMerge pull request #1218 from mcnewton/v3.0.x
Arran Cudbard-Bell [Wed, 9 Sep 2015 16:20:46 +0000 (17:20 +0100)] 
Merge pull request #1218 from mcnewton/v3.0.x

minor doc tweak from file move

10 years agominor doc tweak from file move 1218/head
Matthew Newton [Wed, 9 Sep 2015 16:17:12 +0000 (17:17 +0100)] 
minor doc tweak from file move

10 years agoMerge pull request #1217 from mcnewton/v3.0.x
Arran Cudbard-Bell [Wed, 9 Sep 2015 14:50:35 +0000 (15:50 +0100)] 
Merge pull request #1217 from mcnewton/v3.0.x

add documentation for xlats in the expr module

10 years agoadd documentation for xlats in the expr module 1217/head
Matthew Newton [Wed, 9 Sep 2015 14:47:30 +0000 (15:47 +0100)] 
add documentation for xlats in the expr module

10 years agoAllow response delay in the response
Alan T. DeKok [Wed, 9 Sep 2015 14:32:12 +0000 (10:32 -0400)] 
Allow response delay in the response

10 years agoAllow response_delay to be microseconds, too
Alan T. DeKok [Wed, 9 Sep 2015 14:16:20 +0000 (10:16 -0400)] 
Allow response_delay to be microseconds, too

10 years agoifdef out unused functions
Alan T. DeKok [Wed, 9 Sep 2015 13:34:01 +0000 (09:34 -0400)] 
ifdef out unused functions

10 years agotypo
Alan T. DeKok [Wed, 9 Sep 2015 13:21:55 +0000 (09:21 -0400)] 
typo

10 years agoMore fixes to use SSL_export_keying_material
Alan T. DeKok [Wed, 9 Sep 2015 13:18:50 +0000 (09:18 -0400)] 
More fixes to use SSL_export_keying_material

10 years agopacket->proto is int, not unsigned int
Alan T. DeKok [Tue, 8 Sep 2015 17:45:32 +0000 (13:45 -0400)] 
packet->proto is int, not unsigned int

10 years agonote recent changes
Alan T. DeKok [Tue, 8 Sep 2015 17:30:03 +0000 (13:30 -0400)] 
note recent changes

10 years agoParse hex Ascend-Data-Filter correctly
Alan T. DeKok [Tue, 8 Sep 2015 14:15:34 +0000 (10:15 -0400)] 
Parse hex Ascend-Data-Filter correctly

10 years agoUse the input length for printing, not output length
Alan T. DeKok [Tue, 8 Sep 2015 14:13:58 +0000 (10:13 -0400)] 
Use the input length for printing, not output length

10 years agotypos
Alan T. DeKok [Mon, 7 Sep 2015 00:44:24 +0000 (20:44 -0400)] 
typos

10 years agoDebug TLVs when encoding, too
Alan T. DeKok [Sun, 6 Sep 2015 18:52:52 +0000 (14:52 -0400)] 
Debug TLVs when encoding, too

10 years agoRemove old comment in rlm_example
Arran Cudbard-Bell [Sat, 5 Sep 2015 21:36:22 +0000 (17:36 -0400)] 
Remove old comment in rlm_example

10 years agoAllow %} as an expansion for a literal } Closes #1209
Arran Cudbard-Bell [Sat, 5 Sep 2015 21:36:00 +0000 (17:36 -0400)] 
Allow %} as an expansion for a literal } Closes #1209

10 years agoFormatting
Arran Cudbard-Bell [Sat, 5 Sep 2015 21:35:33 +0000 (17:35 -0400)] 
Formatting

10 years agoAdd fake module_instantiate_method in map_unit.c
Arran Cudbard-Bell [Thu, 3 Sep 2015 23:38:38 +0000 (19:38 -0400)] 
Add fake module_instantiate_method in map_unit.c

10 years agoActually set method
Alan T. DeKok [Fri, 4 Sep 2015 18:22:02 +0000 (14:22 -0400)] 
Actually set method

10 years agoAllow virtual modules to have method over-rides, too
Alan T. DeKok [Fri, 4 Sep 2015 15:25:28 +0000 (11:25 -0400)] 
Allow virtual modules to have method over-rides, too

10 years agoUse correct name for module
Alan T. DeKok [Fri, 4 Sep 2015 14:34:43 +0000 (10:34 -0400)] 
Use correct name for module

10 years agoMake sure wbclient.h is included when needed. Fixes #1208
Alan T. DeKok [Fri, 4 Sep 2015 14:20:50 +0000 (10:20 -0400)] 
Make sure wbclient.h is included when needed.  Fixes #1208

10 years agoGenerate fewer complaints on trying "foo.authorize"
Alan T. DeKok [Fri, 4 Sep 2015 13:58:45 +0000 (09:58 -0400)] 
Generate fewer complaints on trying "foo.authorize"

10 years agoTypo
Alan T. DeKok [Thu, 3 Sep 2015 23:22:30 +0000 (19:22 -0400)] 
Typo

10 years agoAdd module_instantiate_method()
Alan T. DeKok [Thu, 3 Sep 2015 22:39:38 +0000 (18:39 -0400)] 
Add module_instantiate_method()

which allows the caller to instantiate "module.method"

10 years agoNotes about lease queries
Alan T. DeKok [Thu, 3 Sep 2015 19:13:09 +0000 (15:13 -0400)] 
Notes about lease queries

10 years agoFree expr of regex exec error Closes #1207
Arran Cudbard-Bell [Thu, 3 Sep 2015 12:41:51 +0000 (08:41 -0400)] 
Free expr of regex exec error Closes #1207

10 years agoPort fixes from v3.1.x
Alan T. DeKok [Wed, 2 Sep 2015 20:46:08 +0000 (16:46 -0400)] 
Port fixes from v3.1.x

10 years agonote recent changes
Alan T. DeKok [Wed, 2 Sep 2015 19:43:45 +0000 (15:43 -0400)] 
note recent changes

10 years agoOn HUP, reload a module which has changed
Alan T. DeKok [Wed, 2 Sep 2015 19:41:48 +0000 (15:41 -0400)] 
On HUP, reload a module which has changed

10 years agoDon't us be HUP'd repeatedly.
Alan T. DeKok [Wed, 2 Sep 2015 17:34:22 +0000 (13:34 -0400)] 
Don't us be HUP'd repeatedly.

It should only be HUP'd every few seconds

10 years agoMake the "file changed" flag into a bitfield
Alan T. DeKok [Wed, 2 Sep 2015 17:31:02 +0000 (13:31 -0400)] 
Make the "file changed" flag into a bitfield

10 years agoMove xlat_listen
Arran Cudbard-Bell [Wed, 2 Sep 2015 13:56:48 +0000 (09:56 -0400)] 
Move xlat_listen

10 years agoSet default DHCP port if user has "port = 0"
Alan T. DeKok [Wed, 2 Sep 2015 13:41:21 +0000 (09:41 -0400)] 
Set default DHCP port if user has "port = 0"

10 years agoUpdate ChangeLog
Arran Cudbard-Bell [Wed, 2 Sep 2015 13:15:47 +0000 (09:15 -0400)] 
Update ChangeLog

10 years agoRegister the listen xlat in mainconfig not listen_init
Arran Cudbard-Bell [Wed, 2 Sep 2015 13:11:21 +0000 (09:11 -0400)] 
Register the listen xlat in mainconfig not listen_init

By the time listen_init is called, it's too late (guessing that's why client and getclient were moved there too).

10 years agoNote recent changes
Alan T. DeKok [Wed, 2 Sep 2015 13:05:12 +0000 (09:05 -0400)] 
Note recent changes

10 years agoAlways delete MS-MPPE-* from the reply. Fixes #1206
Alan T. DeKok [Wed, 2 Sep 2015 12:53:36 +0000 (08:53 -0400)] 
Always delete MS-MPPE-* from the reply.  Fixes #1206

10 years agoUse correct variable for check. Fixes #1205
Alan T. DeKok [Wed, 2 Sep 2015 12:49:44 +0000 (08:49 -0400)] 
Use correct variable for check.  Fixes #1205

10 years agoRHS of pairs can only be strings or bare words
Alan T. DeKok [Wed, 2 Sep 2015 12:26:52 +0000 (08:26 -0400)] 
RHS of pairs can only be strings or bare words

Not comments, EOL, etc.

10 years agonote recent changes
Alan T. DeKok [Tue, 1 Sep 2015 22:37:28 +0000 (18:37 -0400)] 
note recent changes

10 years agoFix for CID #1321695
Alan T. DeKok [Tue, 1 Sep 2015 22:36:56 +0000 (18:36 -0400)] 
Fix for CID #1321695

10 years agoMerge pull request #1204 from peruchi/patch-1
Arran Cudbard-Bell [Tue, 1 Sep 2015 14:48:37 +0000 (10:48 -0400)] 
Merge pull request #1204 from peruchi/patch-1

Fix libs

10 years agoFix libs 1204/head
peruchi [Tue, 1 Sep 2015 14:24:19 +0000 (11:24 -0300)] 
Fix libs

10 years agoDebug all VPs in options, not just the first one
Alan T. DeKok [Mon, 31 Aug 2015 14:23:23 +0000 (10:23 -0400)] 
Debug all VPs in options, not just the first one

10 years agoIf we have CHADDR, mark up htype and hlen
Alan T. DeKok [Mon, 31 Aug 2015 12:19:42 +0000 (08:19 -0400)] 
If we have CHADDR, mark up htype and hlen

10 years agoUse macro instead of hard-coded number
Alan T. DeKok [Sun, 30 Aug 2015 16:20:28 +0000 (12:20 -0400)] 
Use macro instead of hard-coded number

10 years agoFixes for DHCP lease query
Alan T. DeKok [Sun, 30 Aug 2015 16:11:47 +0000 (12:11 -0400)] 
Fixes for DHCP lease query

10 years agoUpdates to permit DHCP lease query. Untested for now.
Alan T. DeKok [Sun, 30 Aug 2015 13:33:17 +0000 (09:33 -0400)] 
Updates to permit DHCP lease query.  Untested for now.

10 years agoMerge pull request #1202 from jpereira/dict/boingo
Arran Cudbard-Bell [Wed, 26 Aug 2015 14:47:41 +0000 (10:47 -0400)] 
Merge pull request #1202 from jpereira/dict/boingo

Added support for Boingo Wi-Fi

10 years agoAdded support for Boingo Wi-Fi 1202/head
Jorge Pereira [Wed, 26 Aug 2015 14:41:53 +0000 (11:41 -0300)] 
Added support for Boingo Wi-Fi

10 years agoMerge pull request #1201 from jpereira/dict/boingo
Arran Cudbard-Bell [Wed, 26 Aug 2015 14:35:01 +0000 (10:35 -0400)] 
Merge pull request #1201 from jpereira/dict/boingo

Added support for Boingo Wi-Fi

10 years agoAdded support for Boingo Wi-Fi 1201/head
Jorge Pereira [Wed, 26 Aug 2015 14:14:56 +0000 (11:14 -0300)] 
Added support for Boingo Wi-Fi

10 years agoUpdate sql
Arran Cudbard-Bell [Mon, 24 Aug 2015 15:28:16 +0000 (11:28 -0400)] 
Update sql

10 years agonote recent changes
Alan T. DeKok [Fri, 21 Aug 2015 15:46:34 +0000 (11:46 -0400)] 
note recent changes

10 years agoCross-reference documentation
Alan T. DeKok [Fri, 21 Aug 2015 15:46:24 +0000 (11:46 -0400)] 
Cross-reference documentation

10 years agoStatic checks for known subsections
Alan T. DeKok [Fri, 21 Aug 2015 15:02:18 +0000 (11:02 -0400)] 
Static checks for known subsections

10 years agoRevert "Pre-parse insert / trim / expire, and mark them PW_TYPE_XLAT"
Alan T. DeKok [Fri, 21 Aug 2015 14:51:10 +0000 (10:51 -0400)] 
Revert "Pre-parse insert / trim / expire, and mark them PW_TYPE_XLAT"

This reverts commit dc11027d75fb1e68bc3e1e160f707e4f85607dff.

10 years agonote recent changes
Alan T. DeKok [Fri, 21 Aug 2015 13:58:19 +0000 (09:58 -0400)] 
note recent changes

10 years agomark home server alive if we have a proxy reply in zombie state
Alan T. DeKok [Thu, 20 Aug 2015 20:41:43 +0000 (16:41 -0400)] 
mark home server alive if we have a proxy reply in zombie state

10 years agoRefactor "mark home server alive" to a function
Alan T. DeKok [Thu, 20 Aug 2015 20:39:25 +0000 (16:39 -0400)] 
Refactor "mark home server alive" to a function

10 years agoNote recent changes
Alan T. DeKok [Thu, 20 Aug 2015 15:39:10 +0000 (11:39 -0400)] 
Note recent changes

10 years agoStop processing when we hit max time. Fixes #1184
Alan T. DeKok [Thu, 20 Aug 2015 15:35:48 +0000 (11:35 -0400)] 
Stop processing when we hit max time.  Fixes #1184

10 years agoMerge pull request #1197 from jpereira/develop/rlm_rest2
Arran Cudbard-Bell [Wed, 19 Aug 2015 19:58:10 +0000 (15:58 -0400)] 
Merge pull request #1197 from jpereira/develop/rlm_rest2

rlm_rest: The json_object_object_get() is deprecated, replaced by json_object_object_get_ex()

10 years agorlm_rest: The json_object_object_get() is deprecated 1197/head
Jorge Pereira [Wed, 19 Aug 2015 19:17:11 +0000 (16:17 -0300)] 
rlm_rest: The json_object_object_get() is deprecated

was replaced by json_object_object_get_ex() as described in the
documentation.

10 years agoWhen creating default proxy listener, add it to the proxy list.
Alan T. DeKok [Wed, 19 Aug 2015 18:00:18 +0000 (14:00 -0400)] 
When creating default proxy listener, add it to the proxy list.

And create a v6 default listener if required.