]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
12 years agorlm_rediswho: fix unlang conditional expansion 192/head
Brian Candler [Fri, 15 Feb 2013 09:30:48 +0000 (09:30 +0000)] 
rlm_rediswho: fix unlang conditional expansion

12 years agoRemove superfluous redis_escape_func 189/head
Brian Candler [Thu, 14 Feb 2013 12:15:46 +0000 (12:15 +0000)] 
Remove superfluous redis_escape_func

12 years agorlm_redis argument splitting
Brian Candler [Sat, 9 Feb 2013 10:20:10 +0000 (10:20 +0000)] 
rlm_redis argument splitting

rlm_redis_query now splits the query into separate arguments and expands
each one individually.

This allows for both string literals and expansions to contain spaces, e.g.

    %{redis:LPUSH 'my key' %{User-Name}}

12 years agoRemove quotes from quoted argv entries
Brian Candler [Fri, 8 Feb 2013 18:55:56 +0000 (18:55 +0000)] 
Remove quotes from quoted argv entries

12 years agoFactor out argv splitting into rad_expand_xlat
Brian Candler [Fri, 8 Feb 2013 17:41:58 +0000 (17:41 +0000)] 
Factor out argv splitting into rad_expand_xlat

12 years agoMerge pull request #191 from candlerb/candlerb/redis_fixes_v2.x.x
Arran Cudbard-Bell [Fri, 15 Feb 2013 05:25:12 +0000 (21:25 -0800)] 
Merge pull request #191 from candlerb/candlerb/redis_fixes_v2.x.x

Bug fixes for rlm_redis v2.x.x

12 years agoUpdate the example to show EAP-Key-Name
Alan T. DeKok [Thu, 14 Feb 2013 16:56:34 +0000 (11:56 -0500)] 
Update the example to show EAP-Key-Name

12 years agoAdded preliminary support for EAP-Key-Name
Alan T. DeKok [Thu, 14 Feb 2013 16:48:37 +0000 (11:48 -0500)] 
Added preliminary support for EAP-Key-Name

We use EAP-Session-Id internally, as not everyone wants to send
EAP-Key-Name in a packet.  The eaptls_gen_eap_key() function
generates the EAP-Session-Id.  The eaptls_success() function
calls the "gen key" function on success.  This means that
the key is available on all TLS-based EAP methods

If someone wants to send EAP-Key-Name, they should use unlang
to make EAP-Session-Id to EAP-Key-Name

12 years agorlm_rediswho: fix trim functionality 191/head
Brian Candler [Fri, 8 Feb 2013 12:30:34 +0000 (12:30 +0000)] 
rlm_rediswho: fix trim functionality

(query result is not available after redis_finish_query has been called)

12 years agorlm_rediswho: initialize rcode for Accounting-On and Accounting-Off requests
Brian Candler [Sat, 9 Feb 2013 10:04:41 +0000 (10:04 +0000)] 
rlm_rediswho: initialize rcode for Accounting-On and Accounting-Off requests

12 years agoNote recent changes
Alan T. DeKok [Tue, 12 Feb 2013 15:17:48 +0000 (10:17 -0500)] 
Note recent changes

12 years agoPrune changelog from before 2.2.0
Alan T. DeKok [Tue, 12 Feb 2013 15:13:49 +0000 (10:13 -0500)] 
Prune changelog from before 2.2.0

12 years agoActually print out encoded options in debug mode.
Alan T. DeKok [Tue, 12 Feb 2013 15:10:21 +0000 (10:10 -0500)] 
Actually print out encoded options in debug mode.

12 years agoAdded radmin command "hup main.log". Closes issue #121
Alan T. DeKok [Tue, 12 Feb 2013 14:56:29 +0000 (09:56 -0500)] 
Added radmin command "hup main.log".  Closes issue #121

12 years agoAs found on the net
Alan T. DeKok [Mon, 11 Feb 2013 13:13:41 +0000 (08:13 -0500)] 
As found on the net

12 years agoTrack priorities for default action return
Alan T. DeKok [Fri, 8 Feb 2013 17:08:01 +0000 (12:08 -0500)] 
Track priorities for default action return

If the default action is return, take it ONLY if we're at priority 0

12 years agoClarify handling of priority and result.
Alan T. DeKok [Fri, 8 Feb 2013 16:50:30 +0000 (11:50 -0500)] 
Clarify handling of priority and result.

12 years agoUpdate share/dictionary.erx
guydavies [Wed, 6 Feb 2013 14:13:54 +0000 (15:13 +0100)] 
Update share/dictionary.erx

12 years agoLimit the number of entries in the cache. Closes #156
Alan T. DeKok [Wed, 6 Feb 2013 18:07:13 +0000 (13:07 -0500)] 
Limit the number of entries in the cache.  Closes #156

12 years agoFix typo
Alan T. DeKok [Wed, 6 Feb 2013 17:57:17 +0000 (12:57 -0500)] 
Fix typo

12 years agoUpdate sections inherit actions *and* priority
Alan T. DeKok [Wed, 6 Feb 2013 17:49:46 +0000 (12:49 -0500)] 
Update sections inherit actions *and* priority

Closs #107

12 years agoStartup check for mismatched OpenSSL library versions
Arran Cudbard-Bell [Wed, 6 Feb 2013 01:19:50 +0000 (20:19 -0500)] 
Startup check for mismatched OpenSSL library versions

Print OpenSSL version in debug output

Conflicts:
src/main/version.c

12 years agoUpdate to match last commit
Alan T. DeKok [Mon, 4 Feb 2013 13:50:15 +0000 (08:50 -0500)] 
Update to match last commit

12 years agoUpdated EAP types to match IANA
Alan T. DeKok [Mon, 4 Feb 2013 13:45:23 +0000 (08:45 -0500)] 
Updated EAP types to match IANA

12 years agoEnsure that replication doesn't affect request->proxy
Alan T. DeKok [Wed, 30 Jan 2013 14:30:49 +0000 (09:30 -0500)] 
Ensure that replication doesn't affect request->proxy

12 years agoNote updates
Alan T. DeKok [Mon, 28 Jan 2013 18:30:25 +0000 (13:30 -0500)] 
Note updates

12 years agoCopy data over, even if there's no packet.
Alan T. DeKok [Wed, 23 Jan 2013 20:09:28 +0000 (15:09 -0500)] 
Copy data over, even if there's no packet.

For sub-TLVs

12 years agoMore forgiving way of making CA depend on index && serial
Alan T. DeKok [Wed, 23 Jan 2013 20:08:34 +0000 (15:08 -0500)] 
More forgiving way of making CA depend on index && serial

If they don't exist, we create them.
If they do exist, we don't care if they changed.

12 years agoselected array should be reinitialized on each
Arran Cudbard-Bell [Mon, 21 Jan 2013 11:29:22 +0000 (11:29 +0000)] 
selected array should be reinitialized on each
iteration of i to avoid more than one "selected" operator
in the dropdown.

As posted by Octavio Alvarez.

12 years agoAs posted to the list
Alan T. DeKok [Fri, 4 Jan 2013 12:59:02 +0000 (07:59 -0500)] 
As posted to the list

12 years agoMove postauth call for Accept into post_handler (same as 3.0)
Arran Cudbard-Bell [Sun, 23 Dec 2012 20:01:30 +0000 (20:01 +0000)] 
Move postauth call for Accept into post_handler (same as 3.0)

12 years agoAlways respect Response-Packet-Type for authentication requests
Arran Cudbard-Bell [Fri, 21 Dec 2012 13:30:31 +0000 (13:30 +0000)] 
Always respect Response-Packet-Type for authentication requests

12 years agoDictionary for RFC 6572
Alan T. DeKok [Thu, 20 Dec 2012 13:00:11 +0000 (08:00 -0500)] 
Dictionary for RFC 6572

12 years agoDictionary for RFC 6519
Alan T. DeKok [Thu, 20 Dec 2012 12:45:42 +0000 (07:45 -0500)] 
Dictionary for RFC 6519

12 years agoUpdate doc/ChangeLog
Arran Cudbard-Bell [Thu, 20 Dec 2012 12:55:05 +0000 (12:55 +0000)] 
Update doc/ChangeLog

12 years agoNote recent changes
Alan T. DeKok [Thu, 20 Dec 2012 12:09:09 +0000 (07:09 -0500)] 
Note recent changes

12 years agoSETFD for O_NONBLOCK
Alan T. DeKok [Thu, 20 Dec 2012 12:07:30 +0000 (07:07 -0500)] 
SETFD for O_NONBLOCK

From Debian Bug #696250

12 years agoPort fix from master branch
Alan T. DeKok [Tue, 18 Dec 2012 10:03:01 +0000 (11:03 +0100)] 
Port fix from master branch

%{1} is a regex.  %{3GPP-Foo} is an attribute

12 years agoSet Post-Proxy-Type Reject if the request was rejected by the proxy server
Arran Cudbard-Bell [Wed, 19 Dec 2012 18:06:05 +0000 (18:06 +0000)] 
Set Post-Proxy-Type Reject if the request was rejected by the proxy server

12 years agoAllow for multiple inserts in one transaction.
Alan T. DeKok [Fri, 14 Dec 2012 16:13:29 +0000 (17:13 +0100)] 
Allow for multiple inserts in one transaction.

Patch from Uwe Meyer-Gruhl

12 years agoInclude DHCP dictionary by default
Arran Cudbard-Bell [Thu, 13 Dec 2012 16:02:36 +0000 (16:02 +0000)] 
Include DHCP dictionary by default

12 years agoNew checkrad version patch (Juniper)
dragon9k [Fri, 7 Dec 2012 17:29:01 +0000 (15:29 -0200)] 
New checkrad version patch (Juniper)

I would like to submit a new version of this Patch for FR 2.20, which uses snmpget instead of snmpwalk (to increase performance).

It also fixes a problem with checkrad complaining about lack of $ in the "out" variable.

12 years agoAllow EAP-Message APVs > 253 octets in EAP-TTLS module
Tobias Brunner [Wed, 5 Dec 2012 11:51:31 +0000 (12:51 +0100)] 
Allow EAP-Message APVs > 253 octets in EAP-TTLS module

According to RFC 5281, section 11.2.1 tunneled EAP packets that are
larger than 253 octets MUST be contained in a single EAP-Message AVP.

Also fixed the debug statement.

12 years agoPatch freeradius.monitrc file so it works out of the box with debian/ubuntu
Arran Cudbard-Bell [Mon, 3 Dec 2012 19:03:32 +0000 (19:03 +0000)] 
Patch freeradius.monitrc file so it works out of the box with debian/ubuntu

12 years agoMerge pull request #138 from alanbuxey/v2.x.x
Arran Cudbard-Bell [Wed, 28 Nov 2012 21:47:36 +0000 (13:47 -0800)] 
Merge pull request #138 from alanbuxey/v2.x.x

adjusted and optimised match

12 years agoadjusted and optimised match 138/head
Alan Buxey [Wed, 28 Nov 2012 21:44:58 +0000 (21:44 +0000)] 
adjusted and optimised match

no longer case insensitive and doesnt store result

12 years agoDo globally writable checks on directories, too
Alan T. DeKok [Tue, 27 Nov 2012 16:15:14 +0000 (11:15 -0500)] 
Do globally writable checks on directories, too

12 years agoNope. That didn't work.
Alan T. DeKok [Thu, 22 Nov 2012 16:50:57 +0000 (11:50 -0500)] 
Nope.  That didn't work.

newXS has to be after perl_parse

12 years agoAs posted to the list
Alan T. DeKok [Thu, 22 Nov 2012 15:46:43 +0000 (10:46 -0500)] 
As posted to the list

12 years agoBe more forgiving about loaded modules
Alan T. DeKok [Thu, 22 Nov 2012 14:20:20 +0000 (09:20 -0500)] 
Be more forgiving about loaded modules

If they don't exist, don't complain

12 years agoLog dates as UTC
Alan T. DeKok [Thu, 15 Nov 2012 18:51:21 +0000 (13:51 -0500)] 
Log dates as UTC

12 years agoCheck if libtool exists.
Alan T. DeKok [Mon, 12 Nov 2012 13:19:33 +0000 (08:19 -0500)] 
Check if libtool exists.

12 years agoTypo
Arran Cudbard-Bell [Thu, 15 Nov 2012 14:04:36 +0000 (14:04 +0000)] 
Typo

12 years agoMerge pull request #130 from philmayers/redis-doublefreev2
Arran Cudbard-Bell [Wed, 14 Nov 2012 17:44:29 +0000 (09:44 -0800)] 
Merge pull request #130 from philmayers/redis-doublefreev2

don't finish the query, our caller already does that

12 years agodon't finish the query, our caller already does that 130/head
Phil Mayers [Wed, 14 Nov 2012 17:30:39 +0000 (17:30 +0000)] 
don't finish the query, our caller already does that

12 years agoauto line ending and Id fixups
Matthew Newton [Wed, 7 Nov 2012 22:11:19 +0000 (22:11 +0000)] 
auto line ending and Id fixups

12 years agoFix minor typos
Arran Cudbard-Bell [Thu, 8 Nov 2012 16:20:19 +0000 (16:20 +0000)] 
Fix minor typos

12 years agoRevert AC_INIT changes; its too much work to fix this properly on this branch
Arran Cudbard-Bell [Tue, 6 Nov 2012 12:47:45 +0000 (12:47 +0000)] 
Revert AC_INIT changes; its too much work to fix this properly on this branch

12 years agoMerge pull request #125 from vlet/alt
Arran Cudbard-Bell [Tue, 6 Nov 2012 12:44:37 +0000 (04:44 -0800)] 
Merge pull request #125 from vlet/alt

Fixed typo in calculation of size of available buffer.

12 years agoFixed typo in calculation of size of available buffer. 125/head
Vladimir Lettiev [Tue, 6 Nov 2012 08:21:21 +0000 (12:21 +0400)] 
Fixed typo in calculation of size of available buffer.

This resolves issue when $INCLUDE directive ignores files with
relative path.

12 years agoFree unmoved pairs
Arran Cudbard-Bell [Sat, 3 Nov 2012 22:36:29 +0000 (22:36 +0000)] 
Free unmoved pairs

12 years agoAdd Tmp-Octets-*
Arran Cudbard-Bell [Sat, 3 Nov 2012 17:38:56 +0000 (17:38 +0000)] 
Add Tmp-Octets-*

12 years agoERX-Dhcp-Options is actually raw options from the DHCP packet
Arran Cudbard-Bell [Sat, 3 Nov 2012 15:26:32 +0000 (15:26 +0000)] 
ERX-Dhcp-Options is actually raw options from the DHCP packet

12 years agoFix quoting for git program check
Arran Cudbard-Bell [Sat, 3 Nov 2012 15:48:59 +0000 (15:48 +0000)] 
Fix quoting for git program check

12 years agoMore $Id$ fixes
Arran Cudbard-Bell [Thu, 1 Nov 2012 15:35:50 +0000 (15:35 +0000)] 
More $Id$ fixes

12 years agoFix for autoconf 2.69
Arran Cudbard-Bell [Thu, 1 Nov 2012 15:26:24 +0000 (15:26 +0000)] 
Fix for autoconf 2.69

12 years agoMake $Id$ work again
Arran Cudbard-Bell [Thu, 1 Nov 2012 12:57:15 +0000 (12:57 +0000)] 
Make $Id$ work again

12 years agoFix xlat_base64 signature
Arran Cudbard-Bell [Thu, 1 Nov 2012 14:58:24 +0000 (14:58 +0000)] 
Fix xlat_base64 signature

12 years agoAdd dhcp_options: xlat to decode DHCP options packed into RADIUS attributes
Arran Cudbard-Bell [Thu, 1 Nov 2012 14:38:51 +0000 (14:38 +0000)] 
Add dhcp_options: xlat to decode DHCP options packed into RADIUS attributes

12 years agoFix typo
Alan T. DeKok [Wed, 31 Oct 2012 17:19:49 +0000 (18:19 +0100)] 
Fix typo

12 years agoAdded states missed in earlier commit
Alan T. DeKok [Wed, 31 Oct 2012 07:04:30 +0000 (08:04 +0100)] 
Added states missed in earlier commit

12 years agoAfter running it through the formatter
Alan T. DeKok [Sat, 27 Oct 2012 08:00:36 +0000 (10:00 +0200)] 
After running it through the formatter

12 years agoUpdate configure script
Arran Cudbard-Bell [Sat, 27 Oct 2012 20:24:07 +0000 (22:24 +0200)] 
Update configure script

12 years agoNote more changes
Arran Cudbard-Bell [Sat, 27 Oct 2012 10:53:08 +0000 (12:53 +0200)] 
Note more changes

12 years agoChange version constants to be more useful
Arran Cudbard-Bell [Sat, 27 Oct 2012 20:07:58 +0000 (21:07 +0100)] 
Change version constants to be more useful

Configure script now sets:
* RADIUSD_MAJOR_VERSION
* RADIUSD_MINOR_VERSION
* RADIUSD_INCRM_VERSION
* RADIUSD_VERSION (integer representation of version)
* RADIUSD_VERSION_STRING
* RADIUSD_VERSION_COMMIT (latest commit hash if building from a git repo)

Git hash is also displayed in utilities that display version

12 years agoMinor formatting fixes
Arran Cudbard-Bell [Sat, 27 Oct 2012 10:26:35 +0000 (11:26 +0100)] 
Minor formatting fixes

12 years agoadd locking to rlm_cache 117/head
Phil Mayers [Fri, 26 Oct 2012 15:47:35 +0000 (16:47 +0100)] 
add locking to rlm_cache

12 years agoUse redis escape function
Alan T. DeKok [Fri, 26 Oct 2012 11:46:05 +0000 (13:46 +0200)] 
Use redis escape function

12 years agoNote changes
Alan T. DeKok [Fri, 26 Oct 2012 08:34:12 +0000 (10:34 +0200)] 
Note changes

12 years agoCreate threads as joinable, not detached.
Iliya Peregoudov [Thu, 25 Oct 2012 06:18:58 +0000 (10:18 +0400)] 
Create threads as joinable, not detached.
Stop and join all threads before detaching modules.

This prevents a crash on exit where the modules are free'd before
the threads stop using them.

12 years agoAdd proxim dictionary
Arran Cudbard-Bell [Thu, 25 Oct 2012 09:53:36 +0000 (10:53 +0100)] 
Add proxim dictionary

12 years agoPass correct arguments to memcpy
Alan T. DeKok [Thu, 25 Oct 2012 08:10:22 +0000 (10:10 +0200)] 
Pass correct arguments to memcpy

Copying pointers means you pass a pointer to the pointer.

12 years agoMore formatting fixes
Arran Cudbard-Bell [Tue, 23 Oct 2012 13:08:19 +0000 (14:08 +0100)] 
More formatting fixes

12 years agoImprove Kerberos support when using Heimdal
Ryan Steinmetz [Tue, 23 Oct 2012 11:30:33 +0000 (12:30 +0100)] 
Improve Kerberos support when using Heimdal

- Allow specifying a keytab location
- Improved logging

Patch obtained from Thomas Kula <kula@tproa.net>

- Fix krb_auth parameters/casting
- Use strlcpy() instead of strncpy()
- Fix style issues

12 years agoSubstitute 'signature' for 'Request Authenticator' or 'Response Authenticator' where...
Arran Cudbard-Bell [Thu, 18 Oct 2012 10:39:42 +0000 (11:39 +0100)] 
Substitute 'signature' for 'Request Authenticator' or 'Response Authenticator' where appropriate

12 years agoAdd base64tohex to allow values to be written to IP addresses, integers etc
Arran Cudbard-Bell [Wed, 17 Oct 2012 15:51:40 +0000 (16:51 +0100)] 
Add base64tohex to allow values to be written to IP addresses, integers etc

Remove base64tostr (will add tostring expansion later)

Rename strtobase64 to tobase64

12 years agofixes #108 Add function to convert FR value pair types to network byte order
Arran Cudbard-Bell [Wed, 17 Oct 2012 14:32:41 +0000 (15:32 +0100)] 
fixes #108 Add function to convert FR value pair types to network byte order

12 years agoFixup function signatures in rlm_expr
Arran Cudbard-Bell [Tue, 16 Oct 2012 10:15:23 +0000 (11:15 +0100)] 
Fixup function signatures in rlm_expr

12 years agoRemove dependency on stdbool and use FRs bool constants
Arran Cudbard-Bell [Tue, 16 Oct 2012 09:45:39 +0000 (10:45 +0100)] 
Remove dependency on stdbool and use FRs bool constants

12 years agoMove boolean constants to libradius
Arran Cudbard-Bell [Tue, 16 Oct 2012 09:43:05 +0000 (10:43 +0100)] 
Move boolean constants to libradius

12 years agoAdd base64 encoding/decoding library
Arran Cudbard-Bell [Sun, 14 Oct 2012 19:59:31 +0000 (20:59 +0100)] 
Add base64 encoding/decoding library

Add %{base64:} expansion to encode the raw octets of an attribute

Add %{strtobase64:} expansion to encode a string to base64

Add %{base64tostr:} expansion to decode a base64 string

12 years agofixup formatting/warning
Arran Cudbard-Bell [Mon, 15 Oct 2012 20:43:57 +0000 (21:43 +0100)] 
fixup formatting/warning

12 years agoAdd different operators handle to rlm_python
Metasov [Fri, 14 Oct 2011 14:49:23 +0000 (17:49 +0300)] 
Add different operators handle to rlm_python

12 years agoOnly print out user authorized message if the ldap module is actually being used...
Arran Cudbard-Bell [Mon, 15 Oct 2012 08:42:22 +0000 (09:42 +0100)] 
Only print out user authorized message if the ldap module is actually being used for user authorization

12 years agoAdd option to disable password check
Arran Cudbard-Bell [Mon, 15 Oct 2012 08:33:38 +0000 (09:33 +0100)] 
Add option to disable password check

12 years agoBackport hex: expansion
Arran Cudbard-Bell [Fri, 12 Oct 2012 11:25:46 +0000 (12:25 +0100)] 
Backport hex: expansion

12 years agoBe more careful about which config files we load
Alan T. DeKok [Thu, 11 Oct 2012 14:44:06 +0000 (10:44 -0400)] 
Be more careful about which config files we load

12 years agoLook for /usr/local/etc/freeradius and use it in preference to /etc/freeradius
Arran Cudbard-Bell [Wed, 3 Oct 2012 00:02:40 +0000 (19:02 -0500)] 
Look for /usr/local/etc/freeradius and use it in preference to /etc/freeradius

12 years agoUpdate changelog for 2.2.1
Arran Cudbard-Bell [Mon, 1 Oct 2012 22:13:30 +0000 (17:13 -0500)] 
Update changelog for 2.2.1

12 years agoMerge pull request #96 from alanbuxey/v2.1.x
Arran Cudbard-Bell [Fri, 28 Sep 2012 19:10:41 +0000 (12:10 -0700)] 
Merge pull request #96 from alanbuxey/v2.1.x

additional interoperability in default configuration for eduroam