]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Brice Schaffner [Thu, 11 May 2017 10:05:24 +0000 (10:05 +0000)]
Added missing Patton Vendor Attributes
Added some new Patton Vendor Attributes to the list.
These attributes are now supported on the newest Patton device running on Trinity software version 3.11.2.
Alan T. DeKok [Wed, 10 May 2017 19:24:37 +0000 (15:24 -0400)]
install the automatically generated files
Only if we're not creating a package
Alan T. DeKok [Wed, 10 May 2017 18:36:28 +0000 (14:36 -0400)]
no ca.crt
Alan T. DeKok [Wed, 10 May 2017 18:01:51 +0000 (14:01 -0400)]
make client certificates, too
Alan T. DeKok [Wed, 10 May 2017 17:56:44 +0000 (13:56 -0400)]
If we log to files, remember the filename
Alan T. DeKok [Wed, 10 May 2017 17:44:37 +0000 (13:44 -0400)]
set req_debug_lvl = rad_debug_lvl
radmin et al can change either one later
Alan T. DeKok [Wed, 10 May 2017 17:44:28 +0000 (13:44 -0400)]
default request log to req_debug_lvl
Alan T. DeKok [Wed, 10 May 2017 15:36:43 +0000 (11:36 -0400)]
more fixes for generated certificate files
Alan T. DeKok [Wed, 10 May 2017 15:25:44 +0000 (11:25 -0400)]
add DH
Alan T. DeKok [Wed, 10 May 2017 15:16:26 +0000 (11:16 -0400)]
add explicit dependencies
Alan T. DeKok [Wed, 10 May 2017 14:51:15 +0000 (10:51 -0400)]
use previously generated test certificates if TEST_CERTS=yes
Alan T. DeKok [Wed, 10 May 2017 14:22:59 +0000 (10:22 -0400)]
auto-generated test certificates
Alan T. DeKok [Wed, 10 May 2017 14:22:16 +0000 (10:22 -0400)]
we don't want to ignore cert files everywhere.
The raddb/certs/.gitignore file already ignores the generated
certs.
Alan T. DeKok [Wed, 10 May 2017 14:03:45 +0000 (10:03 -0400)]
trustrouter needs a destructor for tls_conf.
Manual merge of #1985
Arran Cudbard-Bell [Tue, 9 May 2017 20:19:10 +0000 (16:19 -0400)]
Add extra types to value_box_t for Diameter and IPFIX.
Arran Cudbard-Bell [Tue, 9 May 2017 20:17:22 +0000 (16:17 -0400)]
Fix other erroneous replacements
Arran Cudbard-Bell [Tue, 9 May 2017 20:10:48 +0000 (16:10 -0400)]
Add back support for old dictionary names
Arran Cudbard-Bell [Tue, 9 May 2017 17:26:31 +0000 (13:26 -0400)]
Rename the hard fields
Arran Cudbard-Bell [Tue, 9 May 2017 17:18:32 +0000 (13:18 -0400)]
Rename easy fields in value_box_t to their C equivalents
Arran Cudbard-Bell [Tue, 9 May 2017 16:37:54 +0000 (12:37 -0400)]
Rename FR_TYPE macros to their C equivalents
We'll do this to dictionary types too at some point
Arran Cudbard-Bell [Tue, 9 May 2017 16:31:38 +0000 (12:31 -0400)]
s/value_box_t/fr_value_box_t/
Arran Cudbard-Bell [Tue, 9 May 2017 16:27:12 +0000 (12:27 -0400)]
Rename PW_TYPE to fr_type_t and the macros from PW_TYPE_ to FR_TYPE_
Alan T. DeKok [Tue, 9 May 2017 16:17:46 +0000 (12:17 -0400)]
remove redundant code.
The reply is already initialized in fr_radius_alloc_reply()
Alan T. DeKok [Tue, 9 May 2017 16:13:32 +0000 (12:13 -0400)]
no longer copy request vector to reply vector
We've fixed the encoder / decoder to do the right thing there
Alan T. DeKok [Tue, 9 May 2017 16:11:08 +0000 (12:11 -0400)]
move to using only one vector for encode / decode
which simplifies the encoder / decoder
Alan T. DeKok [Tue, 9 May 2017 16:06:28 +0000 (12:06 -0400)]
ARP doesn't have encrypted attributes
So passing a NULL decoder context is OK
Alan T. DeKok [Tue, 9 May 2017 14:46:57 +0000 (10:46 -0400)]
remove packet->offset
which was only used for caching the offset of Message-Authenticator,
and is no longer used
Alan T. DeKok [Tue, 9 May 2017 14:07:58 +0000 (10:07 -0400)]
fix build
Alejandro Perez [Tue, 9 May 2017 12:33:31 +0000 (14:33 +0200)]
Set idle_timeout to 5s to all the dynamic home servers
Dynamically generated home servers get eventually replaced.
We want sockets using these servers to close as soon as possible, to make sure that whenever a pool is replaced, sockets using old ones will not last long (hopefully less than 300s).
Alejandro Perez [Tue, 9 May 2017 12:21:44 +0000 (14:21 +0200)]
Increase the amount of time a pool spends in the garbage list
Under specific circumstances (e.g high authentication load) a client might keep using an old pool since the socket did not expire. 60 seconds seems too low.
Increased to make sure we do not delete it while it is still being used.
Alejandro Perez [Tue, 9 May 2017 12:13:52 +0000 (14:13 +0200)]
Remove unnecessary check to update REALM
Existing code precluded a REALM from being updated if there were traffic within the last 5 minutes.
This is an error since when the TLS keys expire, the home server will reject client’s attempts to establish a connection, leading to up to 5 minutes of denied user authentications.
Arran Cudbard-Bell [Tue, 9 May 2017 11:47:32 +0000 (07:47 -0400)]
Remove more duplicates
Arran Cudbard-Bell [Tue, 9 May 2017 11:26:27 +0000 (07:26 -0400)]
Now markdown
Arran Cudbard-Bell [Tue, 9 May 2017 01:00:25 +0000 (21:00 -0400)]
Remove length field for all fixed length types
Its meaning varied between ambiguous, to incorrect, to useless… Closes #1978
Arran Cudbard-Bell [Mon, 8 May 2017 20:17:36 +0000 (16:17 -0400)]
Fix duplicate case statements
Arran Cudbard-Bell [Mon, 8 May 2017 19:42:59 +0000 (15:42 -0400)]
pair.h doesn’t need to include libfreeradius.h
Arran Cudbard-Bell [Mon, 8 May 2017 19:40:01 +0000 (15:40 -0400)]
Rejig header order in libradius.h so the server builds
Arran Cudbard-Bell [Mon, 8 May 2017 19:39:20 +0000 (15:39 -0400)]
Move radius functions into radius/radius.h
Arran Cudbard-Bell [Mon, 8 May 2017 19:38:45 +0000 (15:38 -0400)]
Move RADIUS_PACKET into packet.h
Arran Cudbard-Bell [Mon, 8 May 2017 19:38:06 +0000 (15:38 -0400)]
Trim whitespace
Arran Cudbard-Bell [Mon, 8 May 2017 19:37:47 +0000 (15:37 -0400)]
Move PW_TYPE enum into its own header file
Which lets dict.h work without including libradius.h
Arran Cudbard-Bell [Mon, 8 May 2017 19:36:26 +0000 (15:36 -0400)]
Move paircursor functions into their own header file
Arran Cudbard-Bell [Mon, 8 May 2017 19:35:49 +0000 (15:35 -0400)]
Move logging function definitions into fr_log.h
Alan T. DeKok [Sun, 7 May 2017 16:56:57 +0000 (12:56 -0400)]
added one more attribute
Arran Cudbard-Bell [Sat, 6 May 2017 00:28:16 +0000 (20:28 -0400)]
Doxygen
Arran Cudbard-Bell [Fri, 5 May 2017 23:44:50 +0000 (19:44 -0400)]
Use fr_ipaddr_t for prefixes in value_box_t too. Closes #1979
Now all the IP address types use a single struct (woohoo)
Arran Cudbard-Bell [Fri, 5 May 2017 23:43:53 +0000 (19:43 -0400)]
n is not a list (and is invalid at this point)
Arran Cudbard-Bell [Fri, 5 May 2017 23:42:55 +0000 (19:42 -0400)]
Don't copy meta if we're copying the whole box
Arran Cudbard-Bell [Fri, 5 May 2017 23:42:26 +0000 (19:42 -0400)]
Better names
Arran Cudbard-Bell [Fri, 5 May 2017 23:41:33 +0000 (19:41 -0400)]
Print bad types in fr_pair_verify
Arran Cudbard-Bell [Fri, 5 May 2017 21:40:48 +0000 (17:40 -0400)]
Nope... that won't work, try this instead
Arran Cudbard-Bell [Fri, 5 May 2017 21:30:19 +0000 (17:30 -0400)]
Package the new libraries
Arran Cudbard-Bell [Fri, 5 May 2017 21:07:46 +0000 (17:07 -0400)]
Set user and group to encourage /var/run/radiusd to be created properly
Arran Cudbard-Bell [Fri, 5 May 2017 21:03:53 +0000 (17:03 -0400)]
Pass el into the first invocation of sd_watchdog_event
Arran Cudbard-Bell [Fri, 5 May 2017 21:01:24 +0000 (17:01 -0400)]
Fix watchdog event
Arran Cudbard-Bell [Fri, 5 May 2017 20:53:35 +0000 (16:53 -0400)]
Should be fixed
Arran Cudbard-Bell [Fri, 5 May 2017 20:47:49 +0000 (16:47 -0400)]
Print the actual value we're using for the watchdog
Alan T. DeKok [Fri, 5 May 2017 15:20:12 +0000 (11:20 -0400)]
doxygen
Alan T. DeKok [Fri, 5 May 2017 14:41:33 +0000 (10:41 -0400)]
moved file
Alan T. DeKok [Fri, 5 May 2017 14:40:32 +0000 (10:40 -0400)]
remove duplicate header file
Alan T. DeKok [Fri, 5 May 2017 13:38:46 +0000 (09:38 -0400)]
stupid compiler checks
Alan T. DeKok [Fri, 5 May 2017 12:33:28 +0000 (08:33 -0400)]
slightly better fix for stupid symlink
Alan T. DeKok [Fri, 5 May 2017 12:27:17 +0000 (08:27 -0400)]
we don't need symlinks.
Alan T. DeKok [Thu, 4 May 2017 12:50:49 +0000 (08:50 -0400)]
temporary to fix build issues
Arran Cudbard-Bell [Fri, 5 May 2017 13:40:51 +0000 (09:40 -0400)]
ctx in sha1 xlat is now used
Arran Cudbard-Bell [Thu, 4 May 2017 23:44:02 +0000 (19:44 -0400)]
Typo
Arran Cudbard-Bell [Thu, 4 May 2017 23:34:52 +0000 (19:34 -0400)]
Fix UNUSED on used args in value.c
Arran Cudbard-Bell [Tue, 2 May 2017 02:57:09 +0000 (22:57 -0400)]
Don’t segv on zero length boxes in value_box_copy
Arran Cudbard-Bell [Thu, 4 May 2017 22:16:28 +0000 (18:16 -0400)]
Add hacky symlink
Arran Cudbard-Bell [Thu, 4 May 2017 22:16:17 +0000 (18:16 -0400)]
len not needed here as buff is talloced
Arran Cudbard-Bell [Thu, 4 May 2017 22:15:56 +0000 (18:15 -0400)]
Fix potential NULL ptr deref in fr_dlist_insert_head
Arran Cudbard-Bell [Thu, 4 May 2017 22:05:09 +0000 (18:05 -0400)]
Use fr_ipaddr_t for v4 and v6 addresses in value_box_t
This simplifies a lot of code, and we get scope_id passed around in attributes when using Packet-Src-IP-Address/Packet-Dst-IP-Address
Arran Cudbard-Bell [Thu, 4 May 2017 22:03:19 +0000 (18:03 -0400)]
Use proper casting functions in map_cast_from_hex (instead of using the RADIUS attribute decoder)
Arran Cudbard-Bell [Thu, 4 May 2017 22:02:42 +0000 (18:02 -0400)]
s/zone_id/scope_id/
Arran Cudbard-Bell [Thu, 4 May 2017 22:00:18 +0000 (18:00 -0400)]
Don't use RADIUS decoding functions in rlm_expr
Arran Cudbard-Bell [Thu, 4 May 2017 21:59:08 +0000 (17:59 -0400)]
Update and reformat tmpl_afrom_value_box docs
Arran Cudbard-Bell [Thu, 4 May 2017 21:58:50 +0000 (17:58 -0400)]
Default to single quoted strings for literals
Arran Cudbard-Bell [Thu, 4 May 2017 21:58:01 +0000 (17:58 -0400)]
Zero out fr_ipaddr_t before we start changing it in fr_inet_pton6 and fr_inet_pton4
Lead to uninitialised memory issues and IP address comparisons failing because of junk scope values.
Arran Cudbard-Bell [Thu, 4 May 2017 21:56:42 +0000 (17:56 -0400)]
Disable potentially invalid tests in keywords/integer
Arran Cudbard-Bell [Thu, 4 May 2017 21:56:26 +0000 (17:56 -0400)]
Set src/dst IP prefixes correctly in test harnesses
Arran Cudbard-Bell [Thu, 4 May 2017 21:55:47 +0000 (17:55 -0400)]
Someone needs to enable whitespace trimming in their editor
Alan T. DeKok [Wed, 3 May 2017 20:19:18 +0000 (16:19 -0400)]
more stupid linking issues
boilermake doesn't do transitive linking. So we probably have
to fix that
Alan T. DeKok [Wed, 3 May 2017 20:01:16 +0000 (16:01 -0400)]
one more dependency
Alan T. DeKok [Wed, 3 May 2017 19:30:13 +0000 (15:30 -0400)]
more comments
Alan T. DeKok [Wed, 3 May 2017 19:27:34 +0000 (15:27 -0400)]
move radius_alloc / free / copy back to -util
as the DHCP code depends on it. We can fix that later
Alan T. DeKok [Wed, 3 May 2017 19:25:19 +0000 (15:25 -0400)]
don't auto-convert unknowns to knowns
Alan T. DeKok [Wed, 3 May 2017 19:19:35 +0000 (15:19 -0400)]
don't automatically convert TLVs into multiple VPs
As the code says, it's stupid and likely wrong
Alan T. DeKok [Wed, 3 May 2017 19:14:31 +0000 (15:14 -0400)]
move RADIUS tcp code to radius directory
Alan T. DeKok [Wed, 3 May 2017 19:14:19 +0000 (15:14 -0400)]
consistify names
Alan T. DeKok [Wed, 3 May 2017 18:57:36 +0000 (14:57 -0400)]
added radius_server_udp
in src/lib/io for now, until we go clean up the rest of the code
Alan T. DeKok [Wed, 3 May 2017 18:43:47 +0000 (14:43 -0400)]
add rules to glue in include files
Alan T. DeKok [Wed, 3 May 2017 18:43:27 +0000 (14:43 -0400)]
remove unnecessary rule
Alan T. DeKok [Wed, 3 May 2017 17:39:57 +0000 (13:39 -0400)]
add necessary headers
Arran Cudbard-Bell [Wed, 3 May 2017 18:43:37 +0000 (14:43 -0400)]
Fix some missed fr_ipaddr_t accesses
Arran Cudbard-Bell [Wed, 3 May 2017 18:11:31 +0000 (14:11 -0400)]
s/ipaddr/addr/ so we don't have ipaddr.ipaddr.v4/v6
Arran Cudbard-Bell [Wed, 3 May 2017 17:24:11 +0000 (13:24 -0400)]
Add all.mk file for libfreeradius-radius
Arran Cudbard-Bell [Wed, 3 May 2017 17:07:01 +0000 (13:07 -0400)]
Move value_box_t to value.h
Alan T. DeKok [Wed, 3 May 2017 16:09:58 +0000 (12:09 -0400)]
order dependencies manually
Arran Cudbard-Bell [Wed, 3 May 2017 15:39:39 +0000 (11:39 -0400)]
Shorten field names in fr_ipaddr_t
s/vp_ipaddr/vp_ipv4addr/
Alan T. DeKok [Wed, 3 May 2017 15:27:29 +0000 (11:27 -0400)]
move fr_is_inaddr_any to socket.c