]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
9 years agoAdded missing Patton Vendor Attributes 1986/head
Brice Schaffner [Thu, 11 May 2017 10:05:24 +0000 (10:05 +0000)] 
Added missing Patton Vendor Attributes

Added some new Patton Vendor Attributes to the list.
These attributes are now supported on the newest Patton device running on Trinity software version 3.11.2.

9 years agoinstall the automatically generated files
Alan T. DeKok [Wed, 10 May 2017 19:24:37 +0000 (15:24 -0400)] 
install the automatically generated files

Only if we're not creating a package

9 years agono ca.crt
Alan T. DeKok [Wed, 10 May 2017 18:36:28 +0000 (14:36 -0400)] 
no ca.crt

9 years agomake client certificates, too
Alan T. DeKok [Wed, 10 May 2017 18:01:51 +0000 (14:01 -0400)] 
make client certificates, too

9 years agoIf we log to files, remember the filename
Alan T. DeKok [Wed, 10 May 2017 17:56:44 +0000 (13:56 -0400)] 
If we log to files, remember the filename

9 years agoset req_debug_lvl = rad_debug_lvl
Alan T. DeKok [Wed, 10 May 2017 17:44:37 +0000 (13:44 -0400)] 
set req_debug_lvl = rad_debug_lvl

radmin et al can change either one later

9 years agodefault request log to req_debug_lvl
Alan T. DeKok [Wed, 10 May 2017 17:44:28 +0000 (13:44 -0400)] 
default request log to req_debug_lvl

9 years agomore fixes for generated certificate files
Alan T. DeKok [Wed, 10 May 2017 15:36:43 +0000 (11:36 -0400)] 
more fixes for generated certificate files

9 years agoadd DH
Alan T. DeKok [Wed, 10 May 2017 15:25:44 +0000 (11:25 -0400)] 
add DH

9 years agoadd explicit dependencies
Alan T. DeKok [Wed, 10 May 2017 15:16:26 +0000 (11:16 -0400)] 
add explicit dependencies

9 years agouse previously generated test certificates if TEST_CERTS=yes
Alan T. DeKok [Wed, 10 May 2017 14:51:15 +0000 (10:51 -0400)] 
use previously generated test certificates if TEST_CERTS=yes

9 years agoauto-generated test certificates
Alan T. DeKok [Wed, 10 May 2017 14:22:59 +0000 (10:22 -0400)] 
auto-generated test certificates

9 years agowe don't want to ignore cert files everywhere.
Alan T. DeKok [Wed, 10 May 2017 14:22:16 +0000 (10:22 -0400)] 
we don't want to ignore cert files everywhere.

The raddb/certs/.gitignore file already ignores the generated
certs.

9 years agotrustrouter needs a destructor for tls_conf.
Alan T. DeKok [Wed, 10 May 2017 14:03:45 +0000 (10:03 -0400)] 
trustrouter needs a destructor for tls_conf.

Manual merge of #1985

9 years agoAdd extra types to value_box_t for Diameter and IPFIX.
Arran Cudbard-Bell [Tue, 9 May 2017 20:19:10 +0000 (16:19 -0400)] 
Add extra types to value_box_t for Diameter and IPFIX.

9 years agoFix other erroneous replacements
Arran Cudbard-Bell [Tue, 9 May 2017 20:17:22 +0000 (16:17 -0400)] 
Fix other erroneous replacements

9 years agoAdd back support for old dictionary names
Arran Cudbard-Bell [Tue, 9 May 2017 20:10:48 +0000 (16:10 -0400)] 
Add back support for old dictionary names

9 years agoRename the hard fields
Arran Cudbard-Bell [Tue, 9 May 2017 17:26:31 +0000 (13:26 -0400)] 
Rename the hard fields

9 years agoRename easy fields in value_box_t to their C equivalents
Arran Cudbard-Bell [Tue, 9 May 2017 17:18:32 +0000 (13:18 -0400)] 
Rename easy fields in value_box_t to their C equivalents

9 years agoRename FR_TYPE macros to their C equivalents
Arran Cudbard-Bell [Tue, 9 May 2017 16:37:54 +0000 (12:37 -0400)] 
Rename FR_TYPE macros to their C equivalents

We'll do this to dictionary types too at some point

9 years agos/value_box_t/fr_value_box_t/
Arran Cudbard-Bell [Tue, 9 May 2017 16:31:38 +0000 (12:31 -0400)] 
s/value_box_t/fr_value_box_t/

9 years agoRename PW_TYPE to fr_type_t and the macros from PW_TYPE_ to FR_TYPE_
Arran Cudbard-Bell [Tue, 9 May 2017 16:27:12 +0000 (12:27 -0400)] 
Rename PW_TYPE to fr_type_t and the macros from PW_TYPE_ to FR_TYPE_

9 years agoremove redundant code.
Alan T. DeKok [Tue, 9 May 2017 16:17:46 +0000 (12:17 -0400)] 
remove redundant code.

The reply is already initialized in fr_radius_alloc_reply()

9 years agono longer copy request vector to reply vector
Alan T. DeKok [Tue, 9 May 2017 16:13:32 +0000 (12:13 -0400)] 
no longer copy request vector to reply vector

We've fixed the encoder / decoder to do the right thing there

9 years agomove to using only one vector for encode / decode
Alan T. DeKok [Tue, 9 May 2017 16:11:08 +0000 (12:11 -0400)] 
move to using only one vector for encode / decode

which simplifies the encoder / decoder

9 years agoARP doesn't have encrypted attributes
Alan T. DeKok [Tue, 9 May 2017 16:06:28 +0000 (12:06 -0400)] 
ARP doesn't have encrypted attributes

So passing a NULL decoder context is OK

9 years agoremove packet->offset
Alan T. DeKok [Tue, 9 May 2017 14:46:57 +0000 (10:46 -0400)] 
remove packet->offset

which was only used for caching the offset of Message-Authenticator,
and is no longer used

9 years agofix build
Alan T. DeKok [Tue, 9 May 2017 14:07:58 +0000 (10:07 -0400)] 
fix build

9 years agoSet idle_timeout to 5s to all the dynamic home servers
Alejandro Perez [Tue, 9 May 2017 12:33:31 +0000 (14:33 +0200)] 
Set idle_timeout to 5s to all the dynamic home servers

Dynamically generated home servers get eventually replaced.
We want sockets using these servers to close as soon as possible, to make sure that whenever a pool is replaced, sockets using old ones will not last long (hopefully less than 300s).

9 years agoIncrease the amount of time a pool spends in the garbage list
Alejandro Perez [Tue, 9 May 2017 12:21:44 +0000 (14:21 +0200)] 
Increase the amount of time a pool spends in the garbage list

Under specific circumstances (e.g high authentication load) a client might keep using an old pool since the socket did not expire. 60 seconds seems too low.
Increased to make sure we do not delete it while it is still being used.

9 years agoRemove unnecessary check to update REALM
Alejandro Perez [Tue, 9 May 2017 12:13:52 +0000 (14:13 +0200)] 
Remove unnecessary check to update REALM

Existing code precluded a REALM from being updated if there were traffic within the last 5 minutes.
This is an error since when the TLS keys expire, the home server will reject client’s attempts to establish a connection, leading to up to 5 minutes of denied user authentications.

9 years agoRemove more duplicates
Arran Cudbard-Bell [Tue, 9 May 2017 11:47:32 +0000 (07:47 -0400)] 
Remove more duplicates

9 years agoNow markdown
Arran Cudbard-Bell [Tue, 9 May 2017 11:26:27 +0000 (07:26 -0400)] 
Now markdown

9 years agoRemove length field for all fixed length types
Arran Cudbard-Bell [Tue, 9 May 2017 01:00:25 +0000 (21:00 -0400)] 
Remove length field for all fixed length types

Its meaning varied between ambiguous, to incorrect, to useless… Closes #1978

9 years agoFix duplicate case statements
Arran Cudbard-Bell [Mon, 8 May 2017 20:17:36 +0000 (16:17 -0400)] 
Fix duplicate case statements

9 years agopair.h doesn’t need to include libfreeradius.h
Arran Cudbard-Bell [Mon, 8 May 2017 19:42:59 +0000 (15:42 -0400)] 
pair.h doesn’t need to include libfreeradius.h

9 years agoRejig header order in libradius.h so the server builds
Arran Cudbard-Bell [Mon, 8 May 2017 19:40:01 +0000 (15:40 -0400)] 
Rejig header order in libradius.h so the server builds

9 years agoMove radius functions into radius/radius.h
Arran Cudbard-Bell [Mon, 8 May 2017 19:39:20 +0000 (15:39 -0400)] 
Move radius functions into radius/radius.h

9 years agoMove RADIUS_PACKET into packet.h
Arran Cudbard-Bell [Mon, 8 May 2017 19:38:45 +0000 (15:38 -0400)] 
Move RADIUS_PACKET into packet.h

9 years agoTrim whitespace
Arran Cudbard-Bell [Mon, 8 May 2017 19:38:06 +0000 (15:38 -0400)] 
Trim whitespace

9 years agoMove PW_TYPE enum into its own header file
Arran Cudbard-Bell [Mon, 8 May 2017 19:37:47 +0000 (15:37 -0400)] 
Move PW_TYPE enum into its own header file

Which lets dict.h work without including libradius.h

9 years agoMove paircursor functions into their own header file
Arran Cudbard-Bell [Mon, 8 May 2017 19:36:26 +0000 (15:36 -0400)] 
Move paircursor functions into their own header file

9 years agoMove logging function definitions into fr_log.h
Arran Cudbard-Bell [Mon, 8 May 2017 19:35:49 +0000 (15:35 -0400)] 
Move logging function definitions into fr_log.h

9 years agoadded one more attribute
Alan T. DeKok [Sun, 7 May 2017 16:56:57 +0000 (12:56 -0400)] 
added one more attribute

9 years agoDoxygen
Arran Cudbard-Bell [Sat, 6 May 2017 00:28:16 +0000 (20:28 -0400)] 
Doxygen

9 years agoUse fr_ipaddr_t for prefixes in value_box_t too. Closes #1979
Arran Cudbard-Bell [Fri, 5 May 2017 23:44:50 +0000 (19:44 -0400)] 
Use fr_ipaddr_t for prefixes in value_box_t too.  Closes #1979

Now all the IP address types use a single struct (woohoo)

9 years agon is not a list (and is invalid at this point)
Arran Cudbard-Bell [Fri, 5 May 2017 23:43:53 +0000 (19:43 -0400)] 
n is not a list (and is invalid at this point)

9 years agoDon't copy meta if we're copying the whole box
Arran Cudbard-Bell [Fri, 5 May 2017 23:42:55 +0000 (19:42 -0400)] 
Don't copy meta if we're copying the whole box

9 years agoBetter names
Arran Cudbard-Bell [Fri, 5 May 2017 23:42:26 +0000 (19:42 -0400)] 
Better names

9 years agoPrint bad types in fr_pair_verify
Arran Cudbard-Bell [Fri, 5 May 2017 23:41:33 +0000 (19:41 -0400)] 
Print bad types in fr_pair_verify

9 years agoNope... that won't work, try this instead
Arran Cudbard-Bell [Fri, 5 May 2017 21:40:48 +0000 (17:40 -0400)] 
Nope... that won't work, try this instead

9 years agoPackage the new libraries
Arran Cudbard-Bell [Fri, 5 May 2017 21:30:19 +0000 (17:30 -0400)] 
Package the new libraries

9 years agoSet user and group to encourage /var/run/radiusd to be created properly
Arran Cudbard-Bell [Fri, 5 May 2017 21:07:46 +0000 (17:07 -0400)] 
Set user and group to encourage /var/run/radiusd to be created properly

9 years agoPass el into the first invocation of sd_watchdog_event
Arran Cudbard-Bell [Fri, 5 May 2017 21:03:53 +0000 (17:03 -0400)] 
Pass el into the first invocation of sd_watchdog_event

9 years agoFix watchdog event
Arran Cudbard-Bell [Fri, 5 May 2017 21:01:24 +0000 (17:01 -0400)] 
Fix watchdog event

9 years agoShould be fixed
Arran Cudbard-Bell [Fri, 5 May 2017 20:53:35 +0000 (16:53 -0400)] 
Should be fixed

9 years agoPrint the actual value we're using for the watchdog
Arran Cudbard-Bell [Fri, 5 May 2017 20:47:49 +0000 (16:47 -0400)] 
Print the actual value we're using for the watchdog

9 years agodoxygen
Alan T. DeKok [Fri, 5 May 2017 15:20:12 +0000 (11:20 -0400)] 
doxygen

9 years agomoved file
Alan T. DeKok [Fri, 5 May 2017 14:41:33 +0000 (10:41 -0400)] 
moved file

9 years agoremove duplicate header file
Alan T. DeKok [Fri, 5 May 2017 14:40:32 +0000 (10:40 -0400)] 
remove duplicate header file

9 years agostupid compiler checks
Alan T. DeKok [Fri, 5 May 2017 13:38:46 +0000 (09:38 -0400)] 
stupid compiler checks

9 years agoslightly better fix for stupid symlink
Alan T. DeKok [Fri, 5 May 2017 12:33:28 +0000 (08:33 -0400)] 
slightly better fix for stupid symlink

9 years agowe don't need symlinks.
Alan T. DeKok [Fri, 5 May 2017 12:27:17 +0000 (08:27 -0400)] 
we don't need symlinks.

9 years agotemporary to fix build issues
Alan T. DeKok [Thu, 4 May 2017 12:50:49 +0000 (08:50 -0400)] 
temporary to fix build issues

9 years agoctx in sha1 xlat is now used
Arran Cudbard-Bell [Fri, 5 May 2017 13:40:51 +0000 (09:40 -0400)] 
ctx in sha1 xlat is now used

9 years agoTypo
Arran Cudbard-Bell [Thu, 4 May 2017 23:44:02 +0000 (19:44 -0400)] 
Typo

9 years agoFix UNUSED on used args in value.c
Arran Cudbard-Bell [Thu, 4 May 2017 23:34:52 +0000 (19:34 -0400)] 
Fix UNUSED on used args in value.c

9 years agoDon’t segv on zero length boxes in value_box_copy
Arran Cudbard-Bell [Tue, 2 May 2017 02:57:09 +0000 (22:57 -0400)] 
Don’t segv on zero length boxes in value_box_copy

9 years agoAdd hacky symlink
Arran Cudbard-Bell [Thu, 4 May 2017 22:16:28 +0000 (18:16 -0400)] 
Add hacky symlink

9 years agolen not needed here as buff is talloced
Arran Cudbard-Bell [Thu, 4 May 2017 22:16:17 +0000 (18:16 -0400)] 
len not needed here as buff is talloced

9 years agoFix potential NULL ptr deref in fr_dlist_insert_head
Arran Cudbard-Bell [Thu, 4 May 2017 22:15:56 +0000 (18:15 -0400)] 
Fix potential NULL ptr deref in fr_dlist_insert_head

9 years agoUse fr_ipaddr_t for v4 and v6 addresses in value_box_t
Arran Cudbard-Bell [Thu, 4 May 2017 22:05:09 +0000 (18:05 -0400)] 
Use fr_ipaddr_t for v4 and v6 addresses in value_box_t

This simplifies a lot of code, and we get scope_id passed around in attributes when using Packet-Src-IP-Address/Packet-Dst-IP-Address

9 years agoUse proper casting functions in map_cast_from_hex (instead of using the RADIUS attrib...
Arran Cudbard-Bell [Thu, 4 May 2017 22:03:19 +0000 (18:03 -0400)] 
Use proper casting functions in map_cast_from_hex (instead of using the RADIUS attribute decoder)

9 years agos/zone_id/scope_id/
Arran Cudbard-Bell [Thu, 4 May 2017 22:02:42 +0000 (18:02 -0400)] 
s/zone_id/scope_id/

9 years agoDon't use RADIUS decoding functions in rlm_expr
Arran Cudbard-Bell [Thu, 4 May 2017 22:00:18 +0000 (18:00 -0400)] 
Don't use RADIUS decoding functions in rlm_expr

9 years agoUpdate and reformat tmpl_afrom_value_box docs
Arran Cudbard-Bell [Thu, 4 May 2017 21:59:08 +0000 (17:59 -0400)] 
Update and reformat tmpl_afrom_value_box docs

9 years agoDefault to single quoted strings for literals
Arran Cudbard-Bell [Thu, 4 May 2017 21:58:50 +0000 (17:58 -0400)] 
Default to single quoted strings for literals

9 years agoZero out fr_ipaddr_t before we start changing it in fr_inet_pton6 and fr_inet_pton4
Arran Cudbard-Bell [Thu, 4 May 2017 21:58:01 +0000 (17:58 -0400)] 
Zero out fr_ipaddr_t before we start changing it in fr_inet_pton6 and fr_inet_pton4

Lead to uninitialised memory issues and IP address comparisons failing because of junk scope values.

9 years agoDisable potentially invalid tests in keywords/integer
Arran Cudbard-Bell [Thu, 4 May 2017 21:56:42 +0000 (17:56 -0400)] 
Disable potentially invalid tests in keywords/integer

9 years agoSet src/dst IP prefixes correctly in test harnesses
Arran Cudbard-Bell [Thu, 4 May 2017 21:56:26 +0000 (17:56 -0400)] 
Set src/dst IP prefixes correctly in test harnesses

9 years agoSomeone needs to enable whitespace trimming in their editor
Arran Cudbard-Bell [Thu, 4 May 2017 21:55:47 +0000 (17:55 -0400)] 
Someone needs to enable whitespace trimming in their editor

9 years agomore stupid linking issues
Alan T. DeKok [Wed, 3 May 2017 20:19:18 +0000 (16:19 -0400)] 
more stupid linking issues

boilermake doesn't do transitive linking.  So we probably have
to fix that

9 years agoone more dependency
Alan T. DeKok [Wed, 3 May 2017 20:01:16 +0000 (16:01 -0400)] 
one more dependency

9 years agomore comments
Alan T. DeKok [Wed, 3 May 2017 19:30:13 +0000 (15:30 -0400)] 
more comments

9 years agomove radius_alloc / free / copy back to -util
Alan T. DeKok [Wed, 3 May 2017 19:27:34 +0000 (15:27 -0400)] 
move radius_alloc / free / copy back to -util

as the DHCP code depends on it.  We can fix that later

9 years agodon't auto-convert unknowns to knowns
Alan T. DeKok [Wed, 3 May 2017 19:25:19 +0000 (15:25 -0400)] 
don't auto-convert unknowns to knowns

9 years agodon't automatically convert TLVs into multiple VPs
Alan T. DeKok [Wed, 3 May 2017 19:19:35 +0000 (15:19 -0400)] 
don't automatically convert TLVs into multiple VPs

As the code says, it's stupid and likely wrong

9 years agomove RADIUS tcp code to radius directory
Alan T. DeKok [Wed, 3 May 2017 19:14:31 +0000 (15:14 -0400)] 
move RADIUS tcp code to radius directory

9 years agoconsistify names
Alan T. DeKok [Wed, 3 May 2017 19:14:19 +0000 (15:14 -0400)] 
consistify names

9 years agoadded radius_server_udp
Alan T. DeKok [Wed, 3 May 2017 18:57:36 +0000 (14:57 -0400)] 
added radius_server_udp

in src/lib/io for now, until we go clean up the rest of the code

9 years agoadd rules to glue in include files
Alan T. DeKok [Wed, 3 May 2017 18:43:47 +0000 (14:43 -0400)] 
add rules to glue in include files

9 years agoremove unnecessary rule
Alan T. DeKok [Wed, 3 May 2017 18:43:27 +0000 (14:43 -0400)] 
remove unnecessary rule

9 years agoadd necessary headers
Alan T. DeKok [Wed, 3 May 2017 17:39:57 +0000 (13:39 -0400)] 
add necessary headers

9 years agoFix some missed fr_ipaddr_t accesses
Arran Cudbard-Bell [Wed, 3 May 2017 18:43:37 +0000 (14:43 -0400)] 
Fix some missed fr_ipaddr_t accesses

9 years agos/ipaddr/addr/ so we don't have ipaddr.ipaddr.v4/v6
Arran Cudbard-Bell [Wed, 3 May 2017 18:11:31 +0000 (14:11 -0400)] 
s/ipaddr/addr/ so we don't have ipaddr.ipaddr.v4/v6

9 years agoAdd all.mk file for libfreeradius-radius
Arran Cudbard-Bell [Wed, 3 May 2017 17:24:11 +0000 (13:24 -0400)] 
Add all.mk file for libfreeradius-radius

9 years agoMove value_box_t to value.h
Arran Cudbard-Bell [Wed, 3 May 2017 17:07:01 +0000 (13:07 -0400)] 
Move value_box_t to value.h

9 years agoorder dependencies manually
Alan T. DeKok [Wed, 3 May 2017 16:09:58 +0000 (12:09 -0400)] 
order dependencies manually

9 years agoShorten field names in fr_ipaddr_t
Arran Cudbard-Bell [Wed, 3 May 2017 15:39:39 +0000 (11:39 -0400)] 
Shorten field names in fr_ipaddr_t

s/vp_ipaddr/vp_ipv4addr/

9 years agomove fr_is_inaddr_any to socket.c
Alan T. DeKok [Wed, 3 May 2017 15:27:29 +0000 (11:27 -0400)] 
move fr_is_inaddr_any to socket.c