]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
9 years agoMade rlm_perl less error-prone 1527/head
Herwin Weststrate [Sat, 6 Feb 2016 08:27:25 +0000 (09:27 +0100)] 
Made rlm_perl less error-prone

- If parsing an attribute failed when updating the list, don't ignore
  the other updates to that list.
- Print an error when passing an undef value in the return list, instead
  of silently discarding it.

This fixes the problems seen in #1524

9 years agoComplaints about required things are errors
Alan T. DeKok [Fri, 5 Feb 2016 23:29:51 +0000 (18:29 -0500)] 
Complaints about required things are errors

9 years agonote recent changes
Alan T. DeKok [Fri, 5 Feb 2016 23:29:20 +0000 (18:29 -0500)] 
note recent changes

9 years agoDocument =~ and !~ for filtering
Alan T. DeKok [Fri, 5 Feb 2016 13:48:53 +0000 (08:48 -0500)] 
Document =~ and !~ for filtering

9 years agoDHCP strings decoding
Nicolas C [Fri, 5 Feb 2016 08:35:20 +0000 (09:35 +0100)] 
DHCP strings decoding

Header fields of type "string" are null terminated strings, decode them
as such

9 years agoPrint out extra information only in debug3
Alan T. DeKok [Thu, 4 Feb 2016 23:08:11 +0000 (18:08 -0500)] 
Print out extra information only in debug3

9 years agoPrint out the server version number.
Alan T. DeKok [Thu, 4 Feb 2016 23:06:50 +0000 (18:06 -0500)] 
Print out the server version number.

When starting in debug mode

9 years agoMerge pull request #1523 from qnet-herwin/remove_obsolete_README
Alan DeKok [Thu, 4 Feb 2016 16:08:13 +0000 (11:08 -0500)] 
Merge pull request #1523 from qnet-herwin/remove_obsolete_README

Removed some outdated/obsolete README files

9 years agoCheck data before using it
Alan T. DeKok [Wed, 3 Feb 2016 15:28:52 +0000 (10:28 -0500)] 
Check data before using it

9 years agoRemoved some outdated/obsolete README files 1523/head
Herwin Weststrate [Wed, 3 Feb 2016 13:43:28 +0000 (14:43 +0100)] 
Removed some outdated/obsolete README files

9 years agoPrefix list name
Arran Cudbard-Bell [Tue, 2 Feb 2016 20:28:53 +0000 (15:28 -0500)] 
Prefix list name

9 years agoQuiet clang scan
Arran Cudbard-Bell [Tue, 2 Feb 2016 20:11:17 +0000 (15:11 -0500)] 
Quiet clang scan

9 years agoport for 3.0
Alan T. DeKok [Tue, 2 Feb 2016 19:05:33 +0000 (14:05 -0500)] 
port for 3.0

9 years agonote recent changes
Alan T. DeKok [Tue, 2 Feb 2016 15:54:46 +0000 (10:54 -0500)] 
note recent changes

9 years agoMerge pull request #1521 from qnet-herwin/remove_SQL_DOWN
Arran Cudbard-Bell [Tue, 2 Feb 2016 16:28:36 +0000 (11:28 -0500)] 
Merge pull request #1521 from qnet-herwin/remove_SQL_DOWN

Removed references to SQL_DOWN in an outdated README

9 years agoRemoved outdated README file in rlm_sql 1521/head
Herwin Weststrate [Tue, 2 Feb 2016 15:52:01 +0000 (16:52 +0100)] 
Removed outdated README file in rlm_sql

9 years agoAdd better filter tests
Arran Cudbard-Bell [Mon, 1 Feb 2016 23:39:46 +0000 (18:39 -0500)] 
Add better filter tests

9 years agoCorrect filter operators, and add filtering for =~ and !~
Alan T. DeKok [Tue, 2 Feb 2016 15:53:16 +0000 (10:53 -0500)] 
Correct filter operators, and add filtering for =~ and !~

9 years agoQuiet clang scan
Arran Cudbard-Bell [Sat, 30 Jan 2016 02:00:11 +0000 (21:00 -0500)] 
Quiet clang scan

9 years agorand_file can only be set as a global option
Arran Cudbard-Bell [Sat, 30 Jan 2016 01:17:44 +0000 (20:17 -0500)] 
rand_file can only be set as a global option

9 years agonote recent changes
Alan T. DeKok [Fri, 29 Jan 2016 13:32:38 +0000 (08:32 -0500)] 
note recent changes

9 years agofree memory on quick exit
Alan T. DeKok [Fri, 29 Jan 2016 01:35:31 +0000 (20:35 -0500)] 
free memory on quick exit

9 years agoSet FILE_EXISTS for random files
Alan T. DeKok [Fri, 29 Jan 2016 01:32:08 +0000 (20:32 -0500)] 
Set FILE_EXISTS for random files

9 years agoAdd FILE_EXISTS for things like /dev/urandom.
Alan T. DeKok [Fri, 29 Jan 2016 01:31:39 +0000 (20:31 -0500)] 
Add FILE_EXISTS for things like /dev/urandom.

It has to exist, but we don't care about the permissions

9 years agoFixed typo of password
Ludolph Neethling [Thu, 28 Jan 2016 19:58:02 +0000 (21:58 +0200)] 
Fixed typo of password

9 years agoFix typedef order Closes #1515
Arran Cudbard-Bell [Thu, 28 Jan 2016 18:50:17 +0000 (13:50 -0500)] 
Fix typedef order Closes #1515

9 years agoMerge pull request #1514 from gbeaudoin78/v3.0.x
Arran Cudbard-Bell [Wed, 27 Jan 2016 23:09:09 +0000 (18:09 -0500)] 
Merge pull request #1514 from gbeaudoin78/v3.0.x

Add column [priority] for table [radusergroup].

9 years agoAdd column [priority] for table [radusergroup]. 1514/head
Guillaume Beaudoin [Wed, 27 Jan 2016 22:53:37 +0000 (17:53 -0500)] 
Add column [priority] for table [radusergroup].

10 years agoBump for 3.0.12
Alan T. DeKok [Mon, 25 Jan 2016 21:50:17 +0000 (16:50 -0500)] 
Bump for 3.0.12

10 years agoupdate release time release_3_0_11
Alan T. DeKok [Mon, 25 Jan 2016 18:27:03 +0000 (13:27 -0500)] 
update release time

10 years agoMove captive portal URL
Arran Cudbard-Bell [Mon, 25 Jan 2016 14:47:08 +0000 (09:47 -0500)] 
Move captive portal URL

10 years agoAdd new HP Attribute
Alexis La Goutte [Mon, 25 Jan 2016 14:29:59 +0000 (15:29 +0100)] 
Add new HP Attribute

from Aruba ClearPass 6.5.5
HP-Port-Bounce-Host (attribute id 23) and HP-Captive-Portal-URL (attribute id 24),

10 years agoRequire passwords for "request" status in "auth+acct", too
Alan T. DeKok [Thu, 21 Jan 2016 21:21:08 +0000 (16:21 -0500)] 
Require passwords for "request" status in "auth+acct", too

10 years agomove check to be closer to where it's needed
Alan T. DeKok [Tue, 19 Jan 2016 20:39:36 +0000 (15:39 -0500)] 
move check to be closer to where it's needed

10 years agotypo
Alan T. DeKok [Tue, 19 Jan 2016 20:38:16 +0000 (15:38 -0500)] 
typo

10 years agoMove run-time error to run-time warning
Alan T. DeKok [Tue, 19 Jan 2016 20:37:00 +0000 (15:37 -0500)] 
Move run-time error to run-time warning

10 years agomake error message clearer
Alan T. DeKok [Tue, 19 Jan 2016 19:43:56 +0000 (14:43 -0500)] 
make error message clearer

10 years agoAttribute contents on the LHS of regexes are not escaped
Alan T. DeKok [Mon, 18 Jan 2016 20:23:23 +0000 (15:23 -0500)] 
Attribute contents on the LHS of regexes are not escaped

10 years agoDon't regex-escape the LHS of a regex comparison.
Alan T. DeKok [Mon, 18 Jan 2016 20:09:38 +0000 (15:09 -0500)] 
Don't regex-escape the LHS of a regex comparison.

We're not making the regex from it

10 years agoMerge pull request #1501 from mcnewton/nes30
Arran Cudbard-Bell [Mon, 18 Jan 2016 19:33:40 +0000 (14:33 -0500)] 
Merge pull request #1501 from mcnewton/nes30

Update elasticsearch fields to use "_" rather than "."

10 years agoUpdate elasticsearch fields to use "_" rather than "." 1501/head
Matthew Newton [Mon, 18 Jan 2016 17:41:49 +0000 (17:41 +0000)] 
Update elasticsearch fields to use "_" rather than "."

It seems that while elasticsearch can have data in a field as well as sub-fields, logstash
can't currently do this (it stores the event in a hash, so an entry either contains data
or another hash or list).

Work around this by using underscores, which should in theory also mean these examples will
work with elasticsearch 2, though I haven't tried it.

10 years agoServer may be NULL
Alan T. DeKok [Mon, 18 Jan 2016 17:08:11 +0000 (12:08 -0500)] 
Server may be NULL

10 years agoCheck if Auth-Type EAP is defined
Alan T. DeKok [Mon, 18 Jan 2016 15:32:27 +0000 (10:32 -0500)] 
Check if Auth-Type EAP is defined

by checking inst->xlat_name

10 years agoMake inner EAP name configurable
Alan T. DeKok [Mon, 18 Jan 2016 14:22:05 +0000 (09:22 -0500)] 
Make inner EAP name configurable

10 years agoMerge pull request #1499 from mcnewton/es30
Arran Cudbard-Bell [Mon, 18 Jan 2016 14:19:30 +0000 (09:19 -0500)] 
Merge pull request #1499 from mcnewton/es30

add note about elasticsearch versions

10 years agoLook for mschap, not eap
Alan T. DeKok [Mon, 18 Jan 2016 13:56:22 +0000 (08:56 -0500)] 
Look for mschap, not eap

10 years agoadd note about elasticsearch versions 1499/head
Matthew Newton [Mon, 18 Jan 2016 10:55:02 +0000 (10:55 +0000)] 
add note about elasticsearch versions

10 years agonote recent changes
Alan T. DeKok [Fri, 15 Jan 2016 14:09:26 +0000 (09:09 -0500)] 
note recent changes

10 years agoallow Message-Authenticator, too.
Alan T. DeKok [Fri, 15 Jan 2016 00:14:34 +0000 (19:14 -0500)] 
allow Message-Authenticator, too.

It's auto-calculated.

10 years agofix last commit
Alan T. DeKok [Thu, 14 Jan 2016 22:08:08 +0000 (17:08 -0500)] 
fix last commit

10 years agoSkip encoding zero-length attributes
Alan T. DeKok [Thu, 14 Jan 2016 22:05:28 +0000 (17:05 -0500)] 
Skip encoding zero-length attributes

10 years agofix typo
Alan T. DeKok [Thu, 14 Jan 2016 21:50:13 +0000 (16:50 -0500)] 
fix typo

10 years agonote recent changes
Alan T. DeKok [Thu, 14 Jan 2016 16:07:49 +0000 (11:07 -0500)] 
note recent changes

10 years agoMerge pull request #1495 from mcnewton/elk30
Alan DeKok [Thu, 14 Jan 2016 19:53:27 +0000 (14:53 -0500)] 
Merge pull request #1495 from mcnewton/elk30

Update elasticsearch example files

10 years agoUpdate elasticsearch example files 1495/head
Matthew Newton [Thu, 14 Jan 2016 16:29:02 +0000 (16:29 +0000)] 
Update elasticsearch example files

 - update mappings to correctly set common attributes as "long" rather
   than "string"
 - logstash now creates useful sub-fields, as well as combining
   Gigawords/Octets to a single 64-bit value.
 - add example log-courier configuration
 - add dashboards for Kibana3 and Kibana4

10 years agoMerge pull request #1494 from matsimon/debian-packaging
Alan DeKok [Thu, 14 Jan 2016 15:53:45 +0000 (10:53 -0500)] 
Merge pull request #1494 from matsimon/debian-packaging

Fix build on wheezy

10 years agoRemove old documentation
Alan T. DeKok [Thu, 14 Jan 2016 15:51:51 +0000 (10:51 -0500)] 
Remove old documentation

10 years agoFix build on wheezy 1494/head
Mathieu Simon [Thu, 14 Jan 2016 08:58:12 +0000 (09:58 +0100)] 
Fix build on wheezy

ntstatus.h file is present in samba-dev, however before jessie it
was called samba4-dev. Ubuntu precise 12.04LTS is another derived
distribution release with this package name.

10 years agoAllow setting of Response-Packet-Type in Post-Proxy-Type fail
Alan T. DeKok [Wed, 13 Jan 2016 22:20:37 +0000 (17:20 -0500)] 
Allow setting of Response-Packet-Type in Post-Proxy-Type fail

which lets you "invent" responses when the home server times out

10 years agochecks for auth_item due to issues reported on the list
Alan T. DeKok [Wed, 13 Jan 2016 20:31:44 +0000 (15:31 -0500)] 
checks for auth_item due to issues reported on the list

10 years agoMerge pull request #1488 from herwinw/debian_samba_dev
Alan DeKok [Wed, 13 Jan 2016 19:59:13 +0000 (14:59 -0500)] 
Merge pull request #1488 from herwinw/debian_samba_dev

Add samba-dev as build-dependency for debian

10 years agoMerge pull request #1492 from qnet-herwin/rlm_perl_dbg_constants
Alan DeKok [Tue, 12 Jan 2016 17:04:10 +0000 (12:04 -0500)] 
Merge pull request #1492 from qnet-herwin/rlm_perl_dbg_constants

Fixed debugging constants in rlm_perl

10 years agoFixed debugging constants in rlm_perl 1492/head
Herwin Weststrate [Tue, 12 Jan 2016 16:58:12 +0000 (17:58 +0100)] 
Fixed debugging constants in rlm_perl

This is just a workaround, the correct fix would be to push these constants to the perl script from freeradius, instead of duplicating data.

10 years agonote recent changes
Alan T. DeKok [Tue, 12 Jan 2016 15:06:10 +0000 (10:06 -0500)] 
note recent changes

10 years agoDon't use pair_make_request for fake packets
Alan T. DeKok [Tue, 12 Jan 2016 14:46:49 +0000 (09:46 -0500)] 
Don't use pair_make_request for fake packets

10 years agoAdd samba-dev as build-dependency 1488/head
Herwin Weststrate [Thu, 7 Jan 2016 18:30:29 +0000 (19:30 +0100)] 
Add samba-dev as build-dependency

Needed for "core/ntstatus.h" in rlm_mschap, in addition to libwbclient-dev.

10 years agoMerge pull request #1484 from herwinw/rlm_python_fixes
Alan DeKok [Wed, 6 Jan 2016 21:24:41 +0000 (16:24 -0500)] 
Merge pull request #1484 from herwinw/rlm_python_fixes

Rlm python fixes

10 years agoAdd --silent for jlibtool
Alan T. DeKok [Wed, 6 Jan 2016 21:23:52 +0000 (16:23 -0500)] 
Add --silent for jlibtool

10 years agoAllow strings as operator in rlm_python 1484/head
Herwin Weststrate [Thu, 17 Dec 2015 19:28:55 +0000 (20:28 +0100)] 
Allow strings as operator in rlm_python

Because ('Tmp-String-0', '!*', 'ANY') is just so more readable than ('Tmp-String-0', 21, 'ANY'). Plain integers still work for backwards compatibility. As a bonus, we get rid of the OP table in radiusd.py: this module was not supposed to be included in scripts running from FreeRADIUS, but was still referenced from prepaid.py. As a bonus, we get rid of a table that was no longer in sync with the definitions in tokens.h.

10 years agoShow operator that is actually used instead of the default in rlm_python
Herwin Weststrate [Thu, 17 Dec 2015 19:00:25 +0000 (20:00 +0100)] 
Show operator that is actually used instead of the default in rlm_python

So if we remove a certain attribute, display "!* ANY" instead of "= ANY"

10 years agoUse jlibtool when running local binaries.
Alan T. DeKok [Wed, 6 Jan 2016 20:36:11 +0000 (15:36 -0500)] 
Use jlibtool when running local binaries.

It knows how to find the libraries

10 years agoUse other functions to update list after rlm_python call
Herwin Weststrate [Thu, 17 Dec 2015 18:51:13 +0000 (19:51 +0100)] 
Use other functions to update list after rlm_python call

Now we also support things like "!* ANY" to remove items.

10 years agoShow list name in debug messages in rlm_python
Herwin Weststrate [Thu, 17 Dec 2015 18:04:07 +0000 (19:04 +0100)] 
Show list name in debug messages in rlm_python

The module has the possibility to update the reply and the control list. It is nice to know what list is updated or generates errors. The name of the parameter is based on the parameter with the same use in `rlm_perl`.

10 years agoPrint out Cleartext-Password if comparison fails
Alan T. DeKok [Wed, 6 Jan 2016 14:30:33 +0000 (09:30 -0500)] 
Print out Cleartext-Password if comparison fails

10 years agoalloc reply, not request packet.
Alan T. DeKok [Tue, 5 Jan 2016 18:39:15 +0000 (13:39 -0500)] 
alloc reply, not request packet.

This initializes all of the necessary fields

10 years agoFix typo
Alan T. DeKok [Tue, 5 Jan 2016 18:07:05 +0000 (13:07 -0500)] 
Fix typo

10 years agotypo
Alan T. DeKok [Mon, 4 Jan 2016 20:04:06 +0000 (15:04 -0500)] 
typo

10 years agoconvert assert to run-time check. Fixes #1483
Alan T. DeKok [Mon, 4 Jan 2016 20:01:25 +0000 (15:01 -0500)] 
convert assert to run-time check.  Fixes #1483

10 years agonote recent changes
Alan T. DeKok [Mon, 4 Jan 2016 19:49:54 +0000 (14:49 -0500)] 
note recent changes

10 years agoProduce debug warnings on spoofing or non-anonymous identities
Alan T. DeKok [Mon, 4 Jan 2016 19:47:48 +0000 (14:47 -0500)] 
Produce debug warnings on spoofing or non-anonymous identities

10 years agoIt's 2016
Arran Cudbard-Bell [Sat, 2 Jan 2016 20:11:00 +0000 (15:11 -0500)] 
It's 2016

10 years agoReorganize checks for inner / outer filter.
Alan T. DeKok [Thu, 31 Dec 2015 15:50:05 +0000 (10:50 -0500)] 
Reorganize checks for inner / outer filter.

Move regexes to [^@]+ instead of .*

If there's an outer realm, require the user portion to be
empty or begin with "anon"

10 years agofix for accounting packets
Alan T. DeKok [Thu, 31 Dec 2015 06:41:56 +0000 (01:41 -0500)] 
fix for accounting packets

10 years agonotes on case sensitivity
Alan T. DeKok [Thu, 31 Dec 2015 00:53:17 +0000 (19:53 -0500)] 
notes on case sensitivity

10 years agomore careful checks for realm comparisons
Alan T. DeKok [Thu, 31 Dec 2015 00:51:43 +0000 (19:51 -0500)] 
more careful checks for realm comparisons

10 years agoClarify error messages
Alan T. DeKok [Thu, 31 Dec 2015 00:43:05 +0000 (19:43 -0500)] 
Clarify error messages

10 years agoset Module-Failure-Message, not Reply-Message
Alan T. DeKok [Thu, 31 Dec 2015 00:40:35 +0000 (19:40 -0500)] 
set Module-Failure-Message, not Reply-Message

10 years agofilter_username applies only if there is a User-Name
Alan T. DeKok [Thu, 31 Dec 2015 00:38:05 +0000 (19:38 -0500)] 
filter_username applies only if there is a User-Name

10 years agoSimplify regex.
Alan T. DeKok [Thu, 31 Dec 2015 00:31:02 +0000 (19:31 -0500)] 
Simplify regex.

10 years agoDocument section name override
Arran Cudbard-Bell [Wed, 30 Dec 2015 23:12:07 +0000 (18:12 -0500)] 
Document section name override

10 years agoconsistent names for xlats
Arran Cudbard-Bell [Wed, 30 Dec 2015 18:56:39 +0000 (13:56 -0500)] 
consistent names for xlats

10 years agonote recent changes
Alan T. DeKok [Wed, 30 Dec 2015 19:08:30 +0000 (14:08 -0500)] 
note recent changes

10 years agoSimplify the code
Alan T. DeKok [Wed, 30 Dec 2015 19:05:33 +0000 (14:05 -0500)] 
Simplify the code

10 years agoEnsure that the authentication vectors are always updated
Alan T. DeKok [Wed, 30 Dec 2015 18:47:29 +0000 (13:47 -0500)] 
Ensure that the authentication vectors are always updated

10 years agoMake rad_print_hex take const
Alan T. DeKok [Wed, 30 Dec 2015 18:40:47 +0000 (13:40 -0500)] 
Make rad_print_hex take const

10 years agonote recent changes
Alan T. DeKok [Wed, 30 Dec 2015 16:47:44 +0000 (11:47 -0500)] 
note recent changes

10 years agofixes found from additional tests in 3.1
Alan T. DeKok [Wed, 30 Dec 2015 16:44:25 +0000 (11:44 -0500)] 
fixes found from additional tests in 3.1

10 years agodon't use fixed-size buffers
Alan T. DeKok [Wed, 30 Dec 2015 16:43:58 +0000 (11:43 -0500)] 
don't use fixed-size buffers

10 years agoturn off debugging
Alan T. DeKok [Wed, 30 Dec 2015 16:29:50 +0000 (11:29 -0500)] 
turn off debugging

10 years agoEscape special characters in regex expansion. Fixes #1474
Alan T. DeKok [Wed, 30 Dec 2015 16:27:42 +0000 (11:27 -0500)] 
Escape special characters in regex expansion.  Fixes #1474