]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Alan T. DeKok [Fri, 2 Oct 2020 14:57:53 +0000 (10:57 -0400)]
dedup for Relay-Forward messages, too
Alan T. DeKok [Fri, 2 Oct 2020 14:10:53 +0000 (10:10 -0400)]
Relay-Message is a group
which means that we need a special encoder / decoder for
just this attribute.
Alan T. DeKok [Fri, 2 Oct 2020 13:33:14 +0000 (09:33 -0400)]
decode relay forward / reply packets
Alan T. DeKok [Fri, 2 Oct 2020 13:17:38 +0000 (09:17 -0400)]
encode relay forward / reply packets
Alan T. DeKok [Fri, 2 Oct 2020 13:05:00 +0000 (09:05 -0400)]
preliminary checks for relay packets
we don't yet decode them. We should do dedup based on the
transaction ID taken from the _relayed_ packet, and from the peer/link
ID.
That way we can dedup packets with the same transaction ID, but which
are from different relays
James Jones [Fri, 2 Oct 2020 12:13:23 +0000 (07:13 -0500)]
Initialize caps in fr_cap_enable()
This gives it a reasonable value when set == CAP_PERMITTED
Arran Cudbard-Bell [Fri, 2 Oct 2020 03:28:36 +0000 (22:28 -0500)]
dhcpv6: Don't return 0 on error
Arran Cudbard-Bell [Fri, 2 Oct 2020 02:30:18 +0000 (21:30 -0500)]
...and another
Arran Cudbard-Bell [Fri, 2 Oct 2020 01:28:41 +0000 (20:28 -0500)]
Add basic support for Relay-Forward
Arran Cudbard-Bell [Fri, 2 Oct 2020 00:52:41 +0000 (19:52 -0500)]
struct ifreq isn't needed, it's just the interface name
Arran Cudbard-Bell [Fri, 2 Oct 2020 00:16:54 +0000 (19:16 -0500)]
Use proper IN6ADDR_ANY initialiser
Arran Cudbard-Bell [Thu, 1 Oct 2020 23:51:13 +0000 (18:51 -0500)]
Formatting
Arran Cudbard-Bell [Thu, 1 Oct 2020 23:49:53 +0000 (18:49 -0500)]
Remove tls-key-agility - we always have it if we have TLS
Arran Cudbard-Bell [Thu, 1 Oct 2020 23:43:38 +0000 (18:43 -0500)]
Fix more stupid rpmbuild issues for RHEL 8
Arran Cudbard-Bell [Thu, 1 Oct 2020 23:00:29 +0000 (18:00 -0500)]
One last time...
Arran Cudbard-Bell [Thu, 1 Oct 2020 22:55:12 +0000 (17:55 -0500)]
check-buildroot throws an error with that fix... try again
Arran Cudbard-Bell [Thu, 1 Oct 2020 22:26:46 +0000 (17:26 -0500)]
Another fix for debuginfo paths
Arran Cudbard-Bell [Thu, 1 Oct 2020 21:40:55 +0000 (16:40 -0500)]
More attempts to have functional debuginfo packages
Arran Cudbard-Bell [Thu, 1 Oct 2020 20:53:40 +0000 (15:53 -0500)]
Typo
Arran Cudbard-Bell [Thu, 1 Oct 2020 20:48:02 +0000 (15:48 -0500)]
redhat: See if this helps the debuginfo packages not be horribly broken
Arran Cudbard-Bell [Thu, 1 Oct 2020 19:17:10 +0000 (14:17 -0500)]
Fix update-group-error
Arran Cudbard-Bell [Thu, 1 Oct 2020 18:57:34 +0000 (13:57 -0500)]
Fix tmpl_expanded_type
Arran Cudbard-Bell [Thu, 1 Oct 2020 18:39:51 +0000 (13:39 -0500)]
dhcpv4: Print the address of the reply that was not meant for us in presentation format not hex
Arran Cudbard-Bell [Thu, 1 Oct 2020 18:38:37 +0000 (13:38 -0500)]
Rate limit complaints from DHCPv4 and DHCPv6
Arran Cudbard-Bell [Thu, 1 Oct 2020 18:26:40 +0000 (13:26 -0500)]
cap: Make functions more generic
Arran Cudbard-Bell [Thu, 1 Oct 2020 18:26:04 +0000 (13:26 -0500)]
inet: Add function for checking multicast addresses
Arran Cudbard-Bell [Thu, 1 Oct 2020 18:25:21 +0000 (13:25 -0500)]
Formatting
Arran Cudbard-Bell [Thu, 1 Oct 2020 15:54:46 +0000 (10:54 -0500)]
Remove radius header from source files which don't need it
Fixup debugging messages to use box functions, and remove per module prefixes
Arran Cudbard-Bell [Thu, 1 Oct 2020 15:38:20 +0000 (10:38 -0500)]
dhcpv6 - Fix log messages
Arran Cudbard-Bell [Thu, 1 Oct 2020 15:37:52 +0000 (10:37 -0500)]
Typos
Alan T. DeKok [Thu, 1 Oct 2020 14:36:41 +0000 (10:36 -0400)]
remove unused assignment
James Jones [Thu, 1 Oct 2020 14:30:52 +0000 (09:30 -0500)]
Delete @note restricting FR_DBUFF_TMP() usage to refactoring (#3671)
Alan T. DeKok [Thu, 1 Oct 2020 13:31:31 +0000 (09:31 -0400)]
typo
Alan T. DeKok [Thu, 1 Oct 2020 13:23:32 +0000 (09:23 -0400)]
clean up and make better error messages
Alan T. DeKok [Thu, 1 Oct 2020 13:03:27 +0000 (09:03 -0400)]
fix typo
Arran Cudbard-Bell [Wed, 30 Sep 2020 21:59:39 +0000 (16:59 -0500)]
Fix the systemd unit file to allow capabilities as we no longer run as root
Arran Cudbard-Bell [Wed, 30 Sep 2020 21:45:14 +0000 (16:45 -0500)]
Better capability error
Arran Cudbard-Bell [Wed, 30 Sep 2020 20:55:16 +0000 (15:55 -0500)]
socket: Set bound = true if we have a scope id
Arran Cudbard-Bell [Wed, 30 Sep 2020 20:22:51 +0000 (15:22 -0500)]
Skip the AF check if AF is AF_UNSPEC
Arran Cudbard-Bell [Wed, 30 Sep 2020 20:22:21 +0000 (15:22 -0500)]
Check the family of the resolved IP, not the AF we're looking for
Arran Cudbard-Bell [Wed, 30 Sep 2020 20:21:20 +0000 (15:21 -0500)]
Consistent variable names
Alan T. DeKok [Wed, 30 Sep 2020 14:13:54 +0000 (10:13 -0400)]
abstract code into function
Alan T. DeKok [Wed, 30 Sep 2020 12:59:16 +0000 (08:59 -0400)]
minor cleanups and add more functions
We can now do $(ad_check_headers foo.h, bar.h)
Which is quite helpful.
Arran Cudbard-Bell [Wed, 30 Sep 2020 18:32:35 +0000 (13:32 -0500)]
Need cap name
Arran Cudbard-Bell [Wed, 30 Sep 2020 18:30:38 +0000 (13:30 -0500)]
wrap the body of fr_cap_set in a mutex to prevent lost updates
Arran Cudbard-Bell [Wed, 30 Sep 2020 18:30:19 +0000 (13:30 -0500)]
cap: Actually apply the new capabilitys *sigh*
Arran Cudbard-Bell [Wed, 30 Sep 2020 16:25:49 +0000 (11:25 -0500)]
spec: Require libcap, add proper dependencies for curl
Arran Cudbard-Bell [Wed, 30 Sep 2020 16:10:23 +0000 (11:10 -0500)]
Were we build with cap support
Arran Cudbard-Bell [Wed, 30 Sep 2020 15:47:16 +0000 (10:47 -0500)]
minor tweak
Arran Cudbard-Bell [Wed, 30 Sep 2020 15:39:17 +0000 (10:39 -0500)]
unlikely the thread local pcre2 stack hasn't been initialised
Arran Cudbard-Bell [Wed, 30 Sep 2020 15:34:13 +0000 (10:34 -0500)]
Off by one
Arran Cudbard-Bell [Wed, 30 Sep 2020 15:08:50 +0000 (10:08 -0500)]
Print more information on bind failures
Arran Cudbard-Bell [Wed, 30 Sep 2020 14:45:49 +0000 (09:45 -0500)]
Deal with the now unpackaged utility and tests files
Arran Cudbard-Bell [Wed, 30 Sep 2020 14:11:27 +0000 (09:11 -0500)]
Remove filename check
Arran Cudbard-Bell [Wed, 30 Sep 2020 01:55:55 +0000 (20:55 -0500)]
Try and stop complaints
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:49:50 +0000 (16:49 -0500)]
tmpl: Allow attr ref resolution to continue in the context of a parent section
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:48:45 +0000 (16:48 -0500)]
Formatting
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:34:34 +0000 (16:34 -0500)]
Don't do work unless we need to
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:27:23 +0000 (16:27 -0500)]
More sanity checks
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:26:46 +0000 (16:26 -0500)]
log: Add more control over line prefixes in fr_log_perror
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:22:25 +0000 (16:22 -0500)]
Formatting
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:22:18 +0000 (16:22 -0500)]
Formatting
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:22:12 +0000 (16:22 -0500)]
unresolved not unparsed
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:21:47 +0000 (16:21 -0500)]
Log better errors when we fail to resolve attributes
Arran Cudbard-Bell [Tue, 29 Sep 2020 21:20:29 +0000 (16:20 -0500)]
Formatting
Arran Cudbard-Bell [Tue, 29 Sep 2020 15:46:12 +0000 (10:46 -0500)]
Slightly more descriptive name
Arran Cudbard-Bell [Tue, 29 Sep 2020 15:43:58 +0000 (10:43 -0500)]
Remove data_type from rlm_csv and use the casting operator instead
Arran Cudbard-Bell [Tue, 29 Sep 2020 04:51:02 +0000 (23:51 -0500)]
Fix ubsan issue
Arran Cudbard-Bell [Tue, 29 Sep 2020 04:16:38 +0000 (23:16 -0500)]
Dlist needs to be initialised, even on error
Arran Cudbard-Bell [Tue, 29 Sep 2020 02:49:59 +0000 (21:49 -0500)]
Use correct offset
Arran Cudbard-Bell [Mon, 28 Sep 2020 22:09:59 +0000 (17:09 -0500)]
Allow the proto module to, once again, set the dictionary for a virtual server
Alan T. DeKok [Mon, 28 Sep 2020 21:31:35 +0000 (17:31 -0400)]
set name2 for subrequest { ... }
and add a test case
Alan T. DeKok [Mon, 28 Sep 2020 21:28:11 +0000 (17:28 -0400)]
set the default section from the parent ctx
Alan T. DeKok [Mon, 28 Sep 2020 20:11:51 +0000 (16:11 -0400)]
document recent changes
Alan T. DeKok [Mon, 28 Sep 2020 19:41:51 +0000 (15:41 -0400)]
encode tags, too
Alan T. DeKok [Mon, 28 Sep 2020 18:21:57 +0000 (14:21 -0400)]
decode tagged attributes
through the (cough) simple expedient of defining a set of magic
attributes "Tag-1" through "Tag-31", of data type "group".
This will horrify anyone who is used to 20+ years of RADIUS
configuration. But there's little else we can do in v4, without
butchering a lot of the code.
So, the poor admins will have the cost of changing things. Sorry.
Nick Porter [Mon, 28 Sep 2020 16:11:13 +0000 (17:11 +0100)]
v4: Remove requirement for Perl Template::Toolkit (#3669)
* Remove requirement for Perl Template::Toolkit
Template Toolkit is only needed if the perl IP pool tools are to produce
SQL output rather than directly operate on the database - so it is not a
hard requirement.
* Split perl utils into new package for .deb
Remove Perl dependencies from freeradius-utils and create a new
freeradius-perl-util for helper Perl scripts
* Split perl utils into new package for .rpm
Remove Perl dependencies from freeradius-utils and create a new
freeradius-perl-util for helper Perl scripts
Alan T. DeKok [Mon, 28 Sep 2020 15:35:18 +0000 (11:35 -0400)]
make sure "da" is set
Alan T. DeKok [Mon, 28 Sep 2020 14:27:39 +0000 (10:27 -0400)]
clean up use of "namespace"
Alan T. DeKok [Mon, 28 Sep 2020 13:08:06 +0000 (09:08 -0400)]
we need stdbool
Alan T. DeKok [Mon, 28 Sep 2020 12:45:50 +0000 (08:45 -0400)]
allow subrequest { ... }
and remove code which allowed it to specify "component".
None of the tests checked for that. The documentation didn't
mention it. And, I have no idea what it would mean to call
"recv Access-Request", but with component "accounting".
So the code was removed.
Now if there is no dictionary / packet name, it will use the
current dictionary, and request->packet->code in order to
initialize the child.
Alan T. DeKok [Mon, 28 Sep 2020 12:05:46 +0000 (08:05 -0400)]
better checks for files with non "lib" prefix
Alan T. DeKok [Sun, 27 Sep 2020 17:17:11 +0000 (13:17 -0400)]
allow $(LDFLAGS) to be passed to $(ad_search_libs ...)
the code looks for -L/path/to/foo and searches the given directory.
Other arguments are ignored.
This functionality greatly simplifies the passing of arguments
to this function.
Alan T. DeKok [Sun, 27 Sep 2020 13:43:07 +0000 (09:43 -0400)]
allow "libm" or "m" interchangeably
Alan T. DeKok [Sat, 26 Sep 2020 17:55:14 +0000 (13:55 -0400)]
move try_dlopen / dlsym to common function
Alan T. DeKok [Sat, 26 Sep 2020 16:50:50 +0000 (12:50 -0400)]
add ad_dump_defs()
to dump the definitions to a makefile, or to a header file
Alan T. DeKok [Sat, 26 Sep 2020 16:50:41 +0000 (12:50 -0400)]
use correct definitions
Alan T. DeKok [Sat, 26 Sep 2020 16:50:20 +0000 (12:50 -0400)]
keep track of defines, and order them alphabetically
Alan T. DeKok [Fri, 25 Sep 2020 12:58:41 +0000 (08:58 -0400)]
rename dlsearch to ad_search_libs
and add definition for HAVE_foo=1, for libfoo
Arran Cudbard-Bell [Fri, 25 Sep 2020 20:44:41 +0000 (15:44 -0500)]
Don't need the packet name
Arran Cudbard-Bell [Fri, 25 Sep 2020 20:40:19 +0000 (15:40 -0500)]
Pretty sure the first version of this was fine too (stupid gcc)
Arran Cudbard-Bell [Fri, 25 Sep 2020 20:35:23 +0000 (15:35 -0500)]
unlang-compile: Allow naked subrequests
Inherit the packet type from the parent section
Arran Cudbard-Bell [Fri, 25 Sep 2020 18:59:41 +0000 (13:59 -0500)]
More gcc fixes
Arran Cudbard-Bell [Fri, 25 Sep 2020 18:55:25 +0000 (13:55 -0500)]
tmpl: Better error for attribute mismatch
Arran Cudbard-Bell [Fri, 25 Sep 2020 18:09:50 +0000 (13:09 -0500)]
Another minor fix
Arran Cudbard-Bell [Fri, 25 Sep 2020 18:06:33 +0000 (13:06 -0500)]
It's not appropriate to require Perl for the base packages
Arran Cudbard-Bell [Fri, 25 Sep 2020 17:48:16 +0000 (12:48 -0500)]
Fix minor complaints
Arran Cudbard-Bell [Fri, 25 Sep 2020 16:26:12 +0000 (11:26 -0500)]
Add temporary group attributes
Arran Cudbard-Bell [Fri, 25 Sep 2020 16:20:35 +0000 (11:20 -0500)]
Fixup clang scan issues
Arran Cudbard-Bell [Thu, 24 Sep 2020 03:14:02 +0000 (22:14 -0500)]
tmpl: Add basic evaluation of nested tmpls