]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Arran Cudbard-Bell [Thu, 1 Jan 2026 18:23:35 +0000 (18:23 +0000)]
Add support for backticked expansions in legacy file formats, in certain situations
This lets us add dynamic values in certain situations. Output from exec is limited to a single line (for now).
Arran Cudbard-Bell [Thu, 1 Jan 2026 12:05:29 +0000 (12:05 +0000)]
raduat: Switch to using arrays for file lists
Arran Cudbard-Bell [Thu, 1 Jan 2026 12:03:28 +0000 (12:03 +0000)]
raduat: Apparently there are issues with -a and -o?
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:37:26 +0000 (11:37 +0000)]
raduat: Remove dup
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:32:11 +0000 (11:32 +0000)]
raduat: Use arrays for role_types
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:19:29 +0000 (11:19 +0000)]
raduat: WS
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:10:14 +0000 (11:10 +0000)]
raduat: Add option to quietly skip tests for hosts we don't have cluster or role definitions for
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:05:23 +0000 (11:05 +0000)]
raduat: Rename help function
Arran Cudbard-Bell [Thu, 1 Jan 2026 10:57:25 +0000 (10:57 +0000)]
raduat: Print the actual default value for parallel
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:44:55 +0000 (19:44 +0000)]
raduat: Allow custom splitting on FQDN. Use a single var for cluster matching and as the destination for where we send test packets
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:31:48 +0000 (19:31 +0000)]
raduat: Remove useless semicolon
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:02:31 +0000 (19:02 +0000)]
raduat: Clean up temporary files on exit
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:02:13 +0000 (19:02 +0000)]
raduat: Use the computed file name
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:02:04 +0000 (19:02 +0000)]
raduat: Fix redirection of output
Arran Cudbard-Bell [Wed, 31 Dec 2025 18:59:23 +0000 (18:59 +0000)]
raduat: Avoid setting a default role
Arran Cudbard-Bell [Wed, 31 Dec 2025 18:57:15 +0000 (18:57 +0000)]
raduat: Clusters should be the basename of the path not the entire path
Arran Cudbard-Bell [Wed, 31 Dec 2025 18:56:22 +0000 (18:56 +0000)]
raduat: "which" is apparently not portable...
Arran Cudbard-Bell [Wed, 31 Dec 2025 18:55:43 +0000 (18:55 +0000)]
raduat: Fix some quoting issues
Alan T. DeKok [Thu, 1 Jan 2026 16:44:25 +0000 (11:44 -0500)]
clean up and simplify rules to build makefile libraries
Alan T. DeKok [Thu, 1 Jan 2026 16:08:40 +0000 (11:08 -0500)]
simplify the build rules
remove unnecessary comments and examples.
move common definitions to a common.mk file
simplify the use of $(filter-out ...)
filter out "--rtlib=.." from the LDFLAGS. This change prevents
linking errors when building with the sanitizers enabled.
Alan T. DeKok [Thu, 1 Jan 2026 14:46:58 +0000 (09:46 -0500)]
remove reference to file that no longer exists
Alan T. DeKok [Thu, 1 Jan 2026 14:46:02 +0000 (09:46 -0500)]
remove reference to v3
and point to local documentation
Alan T. DeKok [Thu, 1 Jan 2026 14:43:49 +0000 (09:43 -0500)]
tweak the build instructions for v4
and remove all references to v3
Alan T. DeKok [Thu, 1 Jan 2026 14:39:04 +0000 (09:39 -0500)]
update links and documentation
Alan T. DeKok [Thu, 1 Jan 2026 13:48:32 +0000 (08:48 -0500)]
the logging functions need $(...) for them to be evaluated
and for some reason there are CRs added. So delete those, too
Alan T. DeKok [Thu, 1 Jan 2026 13:47:51 +0000 (08:47 -0500)]
mark unused attribute as unused
Alan T. DeKok [Wed, 31 Dec 2025 17:34:37 +0000 (12:34 -0500)]
exit the server when the radmin interface hits EOF
Alan T. DeKok [Wed, 31 Dec 2025 15:05:21 +0000 (10:05 -0500)]
clean up more parallelization on the tests
we don't need serialization for the directories
Alan T. DeKok [Wed, 31 Dec 2025 14:32:53 +0000 (09:32 -0500)]
serialize tests in each directory, too
Each directory uses different ports, so perhaps the directories
can be run in parallel.
But the files in each directory all use the same port, so the
files need to be run in series.
Alan T. DeKok [Wed, 31 Dec 2025 13:30:09 +0000 (08:30 -0500)]
use constant time comparisons
Alan T. DeKok [Wed, 31 Dec 2025 13:19:14 +0000 (08:19 -0500)]
reserve 20 ports for each "radiusd", not 1:
Alan T. DeKok [Wed, 31 Dec 2025 12:57:43 +0000 (07:57 -0500)]
have tests explicitly depend on each other.
this is the first step in parallelization.
Alan T. DeKok [Wed, 31 Dec 2025 12:29:28 +0000 (07:29 -0500)]
tweaks and fixes
Alan T. DeKok [Wed, 31 Dec 2025 12:23:10 +0000 (07:23 -0500)]
allow some module tests to be run in parallel
Alan T. DeKok [Tue, 30 Dec 2025 16:54:33 +0000 (11:54 -0500)]
automatically add ref=@.OID-Tree to types with oid_and_value
so that we don't have to litter it all through the code
Alan T. DeKok [Tue, 30 Dec 2025 17:06:51 +0000 (12:06 -0500)]
be more forgiving about setting data types
Alan T. DeKok [Tue, 30 Dec 2025 16:29:25 +0000 (11:29 -0500)]
rename "is_oid_leaf" to "leaf"
which is less confusing.
The "leaf" property means that when we're encoding a nested set
of attributes, we encode the OIDs until we hit one which has the
"leaf" property set. We then encode the OID of this attribute,
along with its value.
Alan T. DeKok [Tue, 30 Dec 2025 14:12:12 +0000 (09:12 -0500)]
use memcpy, as we've already checked the lengths
Alan T. DeKok [Tue, 30 Dec 2025 14:11:59 +0000 (09:11 -0500)]
Revert "don't use strncpy()"
This reverts commit
d70dd19fd7a9a5c42852eccd7ce0681d526e69e8 .
Arran Cudbard-Bell [Tue, 30 Dec 2025 13:53:59 +0000 (13:53 +0000)]
Move support libraries into freeradius-common
These are required by the server, but unfortunately due to the number of cross-dependencies, it's very hard to separate them, and at the moment installing something like freeradius-utils, pulls in the main daemon too.
Alan T. DeKok [Tue, 30 Dec 2025 13:22:03 +0000 (08:22 -0500)]
make provisions for printing aliases instead of long names
for now, we're only _shortening_ the name if we're also _flattening_
it.
Alan T. DeKok [Tue, 30 Dec 2025 12:54:35 +0000 (07:54 -0500)]
allow aliases to be added to groups
but only by protocol libraries, not by user-editable dictionaries
Alan T. DeKok [Tue, 30 Dec 2025 12:05:34 +0000 (07:05 -0500)]
ban strncpy()
Alan T. DeKok [Tue, 30 Dec 2025 12:52:14 +0000 (07:52 -0500)]
just use memcpy, and manually check for lengths
Alan T. DeKok [Tue, 30 Dec 2025 12:14:40 +0000 (07:14 -0500)]
update comment
Alan T. DeKok [Tue, 30 Dec 2025 12:03:25 +0000 (07:03 -0500)]
just use strlcpy()
Alan T. DeKok [Tue, 30 Dec 2025 12:03:07 +0000 (07:03 -0500)]
don't use strncpy() to copy binary data
Alan T. DeKok [Tue, 30 Dec 2025 12:02:51 +0000 (07:02 -0500)]
remove non-existent directory
Alan T. DeKok [Tue, 30 Dec 2025 11:58:54 +0000 (06:58 -0500)]
don't use strncpy()
the code jumps through all kinds of hoops rather than just
calling a sane API.
Alan T. DeKok [Tue, 30 Dec 2025 11:45:33 +0000 (06:45 -0500)]
fix write and read, make DISCARD sticky. Fixes #5668
Manual merge and tweaks.
Alan T. DeKok [Mon, 29 Dec 2025 19:10:40 +0000 (14:10 -0500)]
add "root" refs to FR_TYPE_ATTR
and use in DER. The "root" ref is to the OID tree, and is largely
a work-around for the fact that the OIDs are not in their own
dictionary.
We also update the value-box code to get the correct enumv, and
then that lets the tests both drop any "OID-Tree" prefix from the
expected output, and also updates the "can't find OID" message to
refer to "OID-Tree" instead of the DER root.
Also add aliases in the DER root from "iso" to "OID-Tree.iso",
so that we the parser doesn't need to know anything about the enums
for FR_TYPE_ATTR
Alan T. DeKok [Mon, 29 Dec 2025 13:09:50 +0000 (08:09 -0500)]
fix typos in error message
Alan T. DeKok [Mon, 29 Dec 2025 12:21:40 +0000 (07:21 -0500)]
allow some groups to print attributes as "flat"
For now, we add a special attribute flag "allow_flat", which
causes the attributes to be printed as a flat list. But only when
there is only one child. e.g. when we have:
Vendor-Specific = { Cisco = { AVPair = 1 } }
we can now sometimes print it as
Vendor-Specific.Cisco.AVPair = 1
for now, this is only done for attributes of type 'group', in order
to support the DER code. We don't change the output for all
protocols, as doing so would involve a lot of changes to the tests.
The different output may also confuse the average admin, who would
sometimes see nested attributes, and sometimes flat ones, for no
apparent reason.
The parser has already been updated to take a flat definition
(as above), and create the fully nested version.
Alan T. DeKok [Mon, 29 Dec 2025 12:18:44 +0000 (07:18 -0500)]
tweak fault handler setup
Alan T. DeKok [Sun, 28 Dec 2025 20:45:53 +0000 (15:45 -0500)]
hoist "print name" to its own function
in preparation for DER nesting changes
Alan T. DeKok [Sun, 28 Dec 2025 12:45:09 +0000 (07:45 -0500)]
tweak cast parsing and produce a bit better errors
Alan T. DeKok [Sat, 27 Dec 2025 17:30:00 +0000 (12:30 -0500)]
clean up and unify "get namespace from tmpl_rules_t"
Alan T. DeKok [Sat, 27 Dec 2025 13:54:21 +0000 (08:54 -0500)]
allow t_rules to be NULL
Alan T. DeKok [Sat, 27 Dec 2025 13:51:15 +0000 (08:51 -0500)]
hoist code to function
Alan T. DeKok [Sat, 27 Dec 2025 12:19:56 +0000 (07:19 -0500)]
namespace and t_rules should never be NULL.
CID #
1677875 and CID #
1677874
Alan T. DeKok [Fri, 26 Dec 2025 16:00:21 +0000 (11:00 -0500)]
check length of extend_lowat
Alan T. DeKok [Fri, 26 Dec 2025 10:16:00 +0000 (05:16 -0500)]
print input if asked in debug mode
Alan T. DeKok [Thu, 25 Dec 2025 19:46:31 +0000 (14:46 -0500)]
use new functions to decode IP addresses and prefixes
add test from fuzzer, and update RADIUS IPv6 prefix decode test.
Alan T. DeKok [Thu, 25 Dec 2025 18:45:16 +0000 (13:45 -0500)]
add function to decode IP addresses from network
which takes more arguments than the mroe generic function
fr_value_box_from_network(). This flexibility makes it useful
for protocols which do not have a "standard" way to encode IP
addresses / prefixes
Alan T. DeKok [Thu, 25 Dec 2025 18:04:38 +0000 (13:04 -0500)]
add more PAIR_ALLOCED() macros
so that when something goes bad in pair_verify(), we know which
part of the code broke things
Alan T. DeKok [Thu, 25 Dec 2025 17:53:17 +0000 (12:53 -0500)]
set up fault handler for fuzzers
Alan T. DeKok [Thu, 25 Dec 2025 17:49:07 +0000 (12:49 -0500)]
only call the backtrace functions if they were initialized
Alan T. DeKok [Thu, 25 Dec 2025 16:38:55 +0000 (11:38 -0500)]
use correct return code
Alan T. DeKok [Thu, 25 Dec 2025 16:37:03 +0000 (11:37 -0500)]
define more enumerataion values to quiet compiler
Alan T. DeKok [Thu, 25 Dec 2025 16:18:52 +0000 (11:18 -0500)]
we don't need to add the redis directory to the includes
it's already linked in from src/include/redis
Alan T. DeKok [Thu, 25 Dec 2025 16:18:18 +0000 (11:18 -0500)]
remove extra ';'
Alan T. DeKok [Thu, 25 Dec 2025 16:17:45 +0000 (11:17 -0500)]
quiet more compile warnings
Alan T. DeKok [Thu, 25 Dec 2025 16:14:44 +0000 (11:14 -0500)]
these should be static
Alan T. DeKok [Thu, 25 Dec 2025 16:13:17 +0000 (11:13 -0500)]
this should be static
Alan T. DeKok [Thu, 25 Dec 2025 16:10:40 +0000 (11:10 -0500)]
comment out migration options.
-S foo is now ignored. It should be removed before the official
release.
Alan T. DeKok [Thu, 25 Dec 2025 16:05:07 +0000 (11:05 -0500)]
this should be static
Alan T. DeKok [Thu, 25 Dec 2025 16:01:17 +0000 (11:01 -0500)]
remove redundant ';' when using slab macros
Alan T. DeKok [Thu, 25 Dec 2025 15:55:39 +0000 (10:55 -0500)]
cast to avoid -Wcomma warning
Alan T. DeKok [Thu, 25 Dec 2025 15:53:41 +0000 (10:53 -0500)]
casts and tweaks to avoid -Wpedantic
Alan T. DeKok [Thu, 25 Dec 2025 15:43:12 +0000 (10:43 -0500)]
this definition can be static
Alan T. DeKok [Thu, 25 Dec 2025 15:35:38 +0000 (10:35 -0500)]
clean up and clarify namespace issues
both for structural attribute to child , and for groups of
protocol/internal -> internal/protocol
in preparation for supporting "flat" attributes in some groups
Alan T. DeKok [Thu, 25 Dec 2025 15:12:51 +0000 (10:12 -0500)]
ensure that variable is initialized
Alan T. DeKok [Thu, 25 Dec 2025 13:05:04 +0000 (08:05 -0500)]
limit the "name2" for update sections in modules
since we no longer support full-featured "update" sections, there
is no point in supporting full paths (outer, parent, etc.) in
update sections. Plus, none of the modules use them.
So rather than either confusing the admin, or allowing them to do
something which might not work, we just return a compile-time
error.
The deleted code was also the only code (other then tests) that
called tmpl_request_ref_list_afrom_substr(). This cleanup will
allow us to fix the tmpl code for ""flat" groups
Alan T. DeKok [Thu, 25 Dec 2025 12:36:07 +0000 (07:36 -0500)]
update sections don't take a second name
Alan T. DeKok [Thu, 25 Dec 2025 12:30:22 +0000 (07:30 -0500)]
missed in previous commit
Alan T. DeKok [Wed, 24 Dec 2025 16:17:10 +0000 (11:17 -0500)]
hoist "is attribute request/reply/control/" checks to common function
Alan T. DeKok [Wed, 24 Dec 2025 16:07:44 +0000 (11:07 -0500)]
this variable can be made static
Alan T. DeKok [Tue, 23 Dec 2025 19:30:16 +0000 (20:30 +0100)]
limit request qualifier parsing.
don't allow "current", as it doesn't make sense for people to
specify it. The default is always current.
Don't allow "outer.parent" or "parent.outer". Those don't make
sense, either.
Alan T. DeKok [Tue, 23 Dec 2025 18:22:20 +0000 (19:22 +0100)]
more cleanups to tmpl_attr_afrom_substr()
Alan T. DeKok [Tue, 23 Dec 2025 10:58:55 +0000 (11:58 +0100)]
minor tweaks to tmpl_afrom_attr_substr()
and disallow raw local attributes
Alan T. DeKok [Fri, 19 Dec 2025 14:53:37 +0000 (15:53 +0100)]
more tests and tweaks for parsing attributes in value-boxes
github-actions[bot] [Sat, 20 Dec 2025 04:32:52 +0000 (04:32 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/cbor.tar
github-actions[bot] [Sat, 20 Dec 2025 04:31:49 +0000 (04:31 +0000)]
Scheduled fuzzing: Update src/tests/fuzzer-corpus/der.tar
Nick Porter [Fri, 19 Dec 2025 15:58:28 +0000 (15:58 +0000)]
Document %ip.v4.netmask() and %ip.v4.broadcast()
Alan T. DeKok [Fri, 19 Dec 2025 08:16:12 +0000 (09:16 +0100)]
limit unknown depth, and be more careful about error returns
tweak value-box type "attr" parsing to catch more cases.
Alan T. DeKok [Fri, 19 Dec 2025 07:20:19 +0000 (08:20 +0100)]
allow cast to 'attribute' from 'string'
update the test framework to set the correct enumvs, and add tests
Alan T. DeKok [Thu, 18 Dec 2025 16:57:24 +0000 (17:57 +0100)]
tweak "cast to same type" to not do bad things
if no enumv is passed in, it shouldn't forcibly nuke the input
enumv. This patch makes it easier to deal with FR_TYPE_ATTR
Alan T. DeKok [Wed, 17 Dec 2025 10:06:19 +0000 (11:06 +0100)]
change "oid" data type from "string" to "attr"
also enforce more limits on OID values and depth.
Alan T. DeKok [Wed, 17 Dec 2025 08:00:39 +0000 (09:00 +0100)]
allow enumv to point to a new root for FR_TYPE_ATTR
normally the enumv points to the dictionary root. Instead, we
allow the enumv to point to a different part of the tree.
Alan T. DeKok [Thu, 18 Dec 2025 16:05:52 +0000 (17:05 +0100)]
use single quotes, which makes the output easier to read