]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
6 years agotests.ok no longer produced by anything
Arran Cudbard-Bell [Wed, 18 Sep 2019 19:35:27 +0000 (14:35 -0500)] 
tests.ok no longer produced by anything

6 years agocrossbuild: add 'refresh' to push latest commits into image
Matthew Newton [Wed, 18 Sep 2019 19:13:57 +0000 (19:13 +0000)] 
crossbuild: add 'refresh' to push latest commits into image

6 years agorefresh patch
Alan T. DeKok [Wed, 18 Sep 2019 19:15:38 +0000 (15:15 -0400)] 
refresh patch

6 years agoadded "make coverage" target
Alan T. DeKok [Wed, 18 Sep 2019 18:53:07 +0000 (14:53 -0400)] 
added "make coverage" target

Which shows pretty pictures of code coverage

6 years agorename directory to "build"
Alan T. DeKok [Wed, 18 Sep 2019 18:03:03 +0000 (14:03 -0400)] 
rename directory to "build"

as we need to put other build stuff in there

and ensure that only the top-level "build" directory is ignored

6 years agoFix header in docker files
Arran Cudbard-Bell [Wed, 18 Sep 2019 18:34:42 +0000 (13:34 -0500)] 
Fix header in docker files

6 years agoFix debian patch
Arran Cudbard-Bell [Wed, 18 Sep 2019 18:17:56 +0000 (13:17 -0500)] 
Fix debian patch

6 years agodocker: Add steps to install the dependencies to documentation build (#2957)
Jorge Pereira [Wed, 18 Sep 2019 17:51:36 +0000 (14:51 -0300)] 
docker: Add steps to install the dependencies to documentation build (#2957)

6 years agoNope, still too stupid
Arran Cudbard-Bell [Wed, 18 Sep 2019 17:26:01 +0000 (12:26 -0500)] 
Nope, still too stupid

6 years agoTypo
Arran Cudbard-Bell [Wed, 18 Sep 2019 16:33:16 +0000 (11:33 -0500)] 
Typo

6 years agoFix the awful 10 year old hack that messed with the dlopen flags for rlm_perl
Arran Cudbard-Bell [Wed, 18 Sep 2019 16:31:54 +0000 (11:31 -0500)] 
Fix the awful 10 year old hack that messed with the dlopen flags for rlm_perl

and replace it with a much prettier hack

6 years agoMove dlopen functionality from rlm_python into dl_open_by_sym in utility library
Arran Cudbard-Bell [Wed, 18 Sep 2019 16:30:55 +0000 (11:30 -0500)] 
Move dlopen functionality from rlm_python into dl_open_by_sym in utility library

6 years agoAs per comment
Arran Cudbard-Bell [Wed, 18 Sep 2019 16:06:17 +0000 (11:06 -0500)] 
As per comment

6 years agoRTLD_SELF isn't vailable on Linux
Arran Cudbard-Bell [Wed, 18 Sep 2019 15:41:53 +0000 (10:41 -0500)] 
RTLD_SELF isn't vailable on Linux

6 years agoSignificantly better way of getting the rlm_python path
Arran Cudbard-Bell [Wed, 18 Sep 2019 15:34:28 +0000 (10:34 -0500)] 
Significantly better way of getting the rlm_python path

6 years agoworkaround for https://bugs.centos.org/view.php?id=14773 (#3000)
Matt Rose [Wed, 18 Sep 2019 14:51:53 +0000 (10:51 -0400)] 
workaround for https://bugs.centos.org/view.php?id=14773 (#3000)

6 years agoIf python_dlhandle is NULL, don't close it
Arran Cudbard-Bell [Wed, 18 Sep 2019 14:26:30 +0000 (09:26 -0500)] 
If python_dlhandle is NULL, don't close it

6 years agocommented-out config items use tabs, not two spaces
Alan T. DeKok [Wed, 18 Sep 2019 13:50:30 +0000 (09:50 -0400)] 
commented-out config items use tabs, not two spaces

6 years agoI guess here too
Arran Cudbard-Bell [Tue, 17 Sep 2019 22:58:58 +0000 (17:58 -0500)] 
I guess here too

6 years agoStupid centos
Arran Cudbard-Bell [Tue, 17 Sep 2019 22:56:06 +0000 (17:56 -0500)] 
Stupid centos

6 years agorlm_python: Fix the libpython file load (#2999)
Jorge Pereira [Tue, 17 Sep 2019 22:11:30 +0000 (19:11 -0300)] 
rlm_python: Fix the libpython file load (#2999)

It extracts the used libpythonXY to link.

6 years agoBump to devtoolset-8 because apparently devtoolset-6 has been removed
Arran Cudbard-Bell [Tue, 17 Sep 2019 22:01:01 +0000 (17:01 -0500)] 
Bump to devtoolset-8 because apparently devtoolset-6 has been removed

6 years agorlm_python: Fix the wide_path changes made in 1eb569dcb4 (#2998)
Jorge Pereira [Tue, 17 Sep 2019 20:49:13 +0000 (17:49 -0300)] 
rlm_python: Fix the wide_path changes made in 1eb569dcb4 (#2998)

6 years agoInitialise a new X509 cert store, and populate it with the current cert and chain...
Arran Cudbard-Bell [Tue, 17 Sep 2019 20:42:47 +0000 (15:42 -0500)] 
Initialise a new X509 cert store, and populate it with the current cert and chain from the SSL *

This should, hopefully deal with the current brokeness of OCSP stapling as well as certificate chain agility issues, and dynamically loaded certificates.

6 years agoInstall the json library as part of the libfreeradius4 package
Arran Cudbard-Bell [Tue, 17 Sep 2019 20:04:34 +0000 (15:04 -0500)] 
Install the json library as part of the libfreeradius4 package

Probably wrong but then an awful lot of this needs to be redone

6 years agoDon't keep wide_path or wide_name around
Arran Cudbard-Bell [Tue, 17 Sep 2019 18:50:29 +0000 (13:50 -0500)] 
Don't keep wide_path or wide_name around

6 years agoPrefer whatever version python-config is, and then python3.
Arran Cudbard-Bell [Tue, 17 Sep 2019 18:50:09 +0000 (13:50 -0500)] 
Prefer whatever version python-config is, and then python3.

6 years agominor simplifications
Alan T. DeKok [Tue, 17 Sep 2019 18:27:19 +0000 (14:27 -0400)] 
minor simplifications

6 years ago"filter" is now like "update", too
Alan T. DeKok [Tue, 17 Sep 2019 14:56:26 +0000 (10:56 -0400)] 
"filter" is now like "update", too

6 years agoun-set special flag when we're done with update / map
Alan T. DeKok [Tue, 17 Sep 2019 14:31:25 +0000 (10:31 -0400)] 
un-set special flag when we're done with update / map

6 years agoit helps to stat() the file
Alan T. DeKok [Tue, 17 Sep 2019 13:59:24 +0000 (09:59 -0400)] 
it helps to stat() the file

6 years agomake cf_file_include iterative instead of recursive
Alan T. DeKok [Tue, 17 Sep 2019 13:10:15 +0000 (09:10 -0400)] 
make cf_file_include iterative instead of recursive

6 years agocheck max stack only if we're loading the file
Alan T. DeKok [Mon, 16 Sep 2019 23:36:05 +0000 (19:36 -0400)] 
check max stack only if we're loading the file

6 years agorename for clarity
Alan T. DeKok [Mon, 16 Sep 2019 22:36:07 +0000 (18:36 -0400)] 
rename for clarity

6 years agouse stack->bufsize instead of talloc_array_length
Alan T. DeKok [Mon, 16 Sep 2019 22:33:01 +0000 (18:33 -0400)] 
use stack->bufsize instead of talloc_array_length

6 years agocheck max stack depth too
Alan T. DeKok [Mon, 16 Sep 2019 21:16:39 +0000 (17:16 -0400)] 
check max stack depth too

6 years agomove map/update flags to stack frame
Alan T. DeKok [Mon, 16 Sep 2019 21:11:52 +0000 (17:11 -0400)] 
move map/update flags to stack frame

which incidentally also fixes issues with $INCLUDE in the middle
of an "update" section.  That may be a bad idea, but there's no
real reason why it should be impossible

6 years agomerge cf_file_include() with cf_section_read()
Alan T. DeKok [Mon, 16 Sep 2019 20:52:17 +0000 (16:52 -0400)] 
merge cf_file_include() with cf_section_read()

so that it's less code, and we don't have two mutually recusive
functions.

6 years agomove filename strdup and assignment outside of cf_file_include
Alan T. DeKok [Mon, 16 Sep 2019 20:42:56 +0000 (16:42 -0400)] 
move filename strdup and assignment outside of cf_file_include

so that we can look at removing the function entirely, and moving
to an iterative approach

6 years agoconvert cf reader to use file stack
Alan T. DeKok [Mon, 16 Sep 2019 19:27:17 +0000 (15:27 -0400)] 
convert cf reader to use file stack

right now it's the naive "use stack struct instead of passing
variables to a function".  It still recurses.  This is pass one.

Pass two is fixing the reader so that it's one function which
just pushes things into the stack *instead* of recursing.

6 years agoRevert "CID #145370 - Re-enable commented out code"
Alan T. DeKok [Mon, 16 Sep 2019 19:25:06 +0000 (15:25 -0400)] 
Revert "CID #145370 - Re-enable commented out code"

This reverts commit 1ceefc9925eb9570a67384ee4935e7f34cc5d3be.

Which breaks control and tls-cache virtual servers

6 years agoremove unused variable and definitions
Alan T. DeKok [Mon, 16 Sep 2019 18:52:51 +0000 (14:52 -0400)] 
remove unused variable and definitions

6 years agovarious jenkinsfile fixes (#2996)
Matt Rose [Tue, 17 Sep 2019 00:49:37 +0000 (20:49 -0400)] 
various jenkinsfile fixes (#2996)

6 years agoset User here, too
Alan T. DeKok [Mon, 16 Sep 2019 13:04:38 +0000 (09:04 -0400)] 
set User here, too

6 years agoforce user/group to be radiusd
Alan T. DeKok [Mon, 16 Sep 2019 13:03:20 +0000 (09:03 -0400)] 
force user/group to be radiusd

6 years agoadd newly created VPs to the state, not old VPs
Alan T. DeKok [Mon, 16 Sep 2019 11:41:37 +0000 (07:41 -0400)] 
add newly created VPs to the state, not old VPs

6 years agoremove chown.
Alan T. DeKok [Mon, 16 Sep 2019 11:33:52 +0000 (07:33 -0400)] 
remove chown.

It's not needed according to the Systemd documentation

---
RuntimeDirectory=foo/bar baz
the service manager creates /run/foo (if it does not exist), /run/foo/bar, and /run/baz. The directories /run/foo/bar and /run/baz except /run/foo are owned by the user and group specified in User= and Group=, and removed when the service is stopped.
---

6 years agodon't increment variable if we're not going to use it
Alan T. DeKok [Mon, 16 Sep 2019 00:38:03 +0000 (20:38 -0400)] 
don't increment variable if we're not going to use it

i.e. leave things alone on error instead of changing them, and
then returning an error

6 years agoDon't deref actions when passing to NUM_ELEMENTS
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:24:28 +0000 (14:24 -0500)] 
Don't deref actions when passing to NUM_ELEMENTS

6 years agoCID #1453698 - Don't know what this is about... maybe this will help?
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:19:59 +0000 (14:19 -0500)] 
CID #1453698 - Don't know what this is about... maybe this will help?

6 years agoCID #1453690 - Bounds check on result
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:16:47 +0000 (14:16 -0500)] 
CID #1453690 - Bounds check on result

6 years agoCID #1453691 - Check return value of cass_result_column_name
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:14:33 +0000 (14:14 -0500)] 
CID #1453691 - Check return value of cass_result_column_name

6 years agoCID #1453692 - Check stack overrun *AFTER* incrementing ctx->stack_depth
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:13:16 +0000 (14:13 -0500)] 
CID #1453692 - Check stack overrun *AFTER* incrementing ctx->stack_depth

6 years agoCID #1453693 - Bounds check on result
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:10:28 +0000 (14:10 -0500)] 
CID #1453693 - Bounds check on result

6 years agoCID #1453694 - Head must be initialised‽ How the hell did clang scan miss this.
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:08:33 +0000 (14:08 -0500)] 
CID #1453694 - Head must be initialised‽ How the hell did clang scan miss this.

6 years agoCID #1453695 - Fix TOCTOU on directory permissions
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:07:26 +0000 (14:07 -0500)] 
CID #1453695 - Fix TOCTOU on directory permissions

6 years agoCID #1453696 - Check return codes when checking timer events
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:04:35 +0000 (14:04 -0500)] 
CID #1453696 - Check return codes when checking timer events

6 years agoCID #1453697 - Array length vs index check incorrect
Arran Cudbard-Bell [Sun, 15 Sep 2019 19:02:02 +0000 (14:02 -0500)] 
CID #1453697 - Array length vs index check incorrect

6 years agoCID #1453699 - Bad offset in bytesex swap
Arran Cudbard-Bell [Sun, 15 Sep 2019 18:59:37 +0000 (13:59 -0500)] 
CID #1453699  - Bad offset in bytesex swap

6 years agoCID #145370 - Re-enable commented out code
Arran Cudbard-Bell [Sun, 15 Sep 2019 18:57:09 +0000 (13:57 -0500)] 
CID #145370 - Re-enable commented out code

6 years agorlm_python: Don't leak if got problems to parse the tuple (#2992)
Jorge Pereira [Sat, 14 Sep 2019 18:35:13 +0000 (15:35 -0300)] 
rlm_python: Don't leak if got problems to parse the tuple (#2992)

6 years agorlm_python: Only set the tuple if both parameters are valid (#2991)
Jorge Pereira [Sat, 14 Sep 2019 18:29:18 +0000 (15:29 -0300)] 
rlm_python: Only set the tuple if both parameters are valid (#2991)

6 years agoInvert test pass/fail calls
Arran Cudbard-Bell [Sat, 14 Sep 2019 16:06:55 +0000 (11:06 -0500)] 
Invert test pass/fail calls

6 years agodefine variables outside of 'ifdef openssl'
Alan T. DeKok [Sat, 14 Sep 2019 15:32:12 +0000 (11:32 -0400)] 
define variables outside of 'ifdef openssl'

6 years agocreate 'if' with correct name2
Alan T. DeKok [Sat, 14 Sep 2019 15:05:51 +0000 (11:05 -0400)] 
create 'if' with correct name2

6 years agoAdd log output to some python tests
Arran Cudbard-Bell [Sat, 14 Sep 2019 03:17:06 +0000 (22:17 -0500)] 
Add log output to some python tests

6 years agoReorganise tests, and add explicit test for shared storage
Arran Cudbard-Bell [Sat, 14 Sep 2019 03:05:39 +0000 (22:05 -0500)] 
Reorganise tests, and add explicit test for shared storage

6 years agoProduce errors if we fail marshalling
Arran Cudbard-Bell [Sat, 14 Sep 2019 02:57:35 +0000 (21:57 -0500)] 
Produce errors if we fail marshalling

6 years agorlm_python: Fix the mod_populate_vptuple() to return correct 'octets' value (#2989)
Jorge Pereira [Sat, 14 Sep 2019 02:40:18 +0000 (23:40 -0300)] 
rlm_python: Fix the mod_populate_vptuple() to return correct 'octets' value (#2989)

6 years agoFix radiusd.config in rlm_python
Arran Cudbard-Bell [Sat, 14 Sep 2019 01:50:30 +0000 (20:50 -0500)] 
Fix radiusd.config in rlm_python

Misunderstanding about how the inittab works, just creates a singleton, which still need to be imported individually into each interpreter.  It does not create a module that's *automatically* imported into each interpreter.

6 years agorlm_python: PyObject functions should return 'Py_RETURN_NONE' instead of 'NULL' ...
Jorge Pereira [Sat, 14 Sep 2019 01:17:30 +0000 (22:17 -0300)] 
rlm_python: PyObject functions should return 'Py_RETURN_NONE' instead of 'NULL' (#2988)

6 years agoSkip auth_cext_compat for python3
Arran Cudbard-Bell [Sat, 14 Sep 2019 00:21:14 +0000 (19:21 -0500)] 
Skip auth_cext_compat for python3

6 years agoAdd version number in rlm_python
Arran Cudbard-Bell [Sat, 14 Sep 2019 00:20:46 +0000 (19:20 -0500)] 
Add version number in rlm_python

6 years agoFixup the dependency code to cache the default sections for version numbers and features
Arran Cudbard-Bell [Sat, 14 Sep 2019 00:20:13 +0000 (19:20 -0500)] 
Fixup the dependency code to cache the default sections for version numbers and features

6 years agorlm_python: Fix the comments (#2987)
Jorge Pereira [Fri, 13 Sep 2019 23:38:20 +0000 (20:38 -0300)] 
rlm_python: Fix the comments (#2987)

6 years agoFix some potentially invalid uses of PyDECREF
Arran Cudbard-Bell [Fri, 13 Sep 2019 20:24:16 +0000 (15:24 -0500)] 
Fix some potentially invalid uses of PyDECREF

6 years agoEnsure the thread state is the same as the one we set, after calling python land
Arran Cudbard-Bell [Fri, 13 Sep 2019 20:19:22 +0000 (15:19 -0500)] 
Ensure the thread state is the same as the one we set, after calling python land

6 years agoTypo in comment
Arran Cudbard-Bell [Fri, 13 Sep 2019 20:05:30 +0000 (15:05 -0500)] 
Typo in comment

6 years agoDon't need this twice
Arran Cudbard-Bell [Fri, 13 Sep 2019 19:50:39 +0000 (14:50 -0500)] 
Don't need this twice

6 years agoLog information about the certificate chain at higher debug levels, when making OCSP...
Arran Cudbard-Bell [Fri, 13 Sep 2019 19:48:33 +0000 (14:48 -0500)] 
Log information about the certificate chain at higher debug levels, when making OCSP stapling requests

6 years agoFix comment headers
Arran Cudbard-Bell [Fri, 13 Sep 2019 16:56:29 +0000 (11:56 -0500)] 
Fix comment headers

6 years agouse git commit info to generate release string for packages (#2985)
Matt Rose [Fri, 13 Sep 2019 16:46:01 +0000 (12:46 -0400)] 
use git commit info to generate release string for packages (#2985)

6 years agoreturn empty string when no changes are detected (#2984)
Matt Rose [Fri, 13 Sep 2019 15:53:10 +0000 (11:53 -0400)] 
return empty string when no changes are detected (#2984)

6 years agoactually fix it <sigh>
Alan T. DeKok [Fri, 13 Sep 2019 15:25:03 +0000 (11:25 -0400)] 
actually fix it <sigh>

6 years agofix doxygen
Alan T. DeKok [Fri, 13 Sep 2019 15:02:07 +0000 (11:02 -0400)] 
fix doxygen

6 years agoone more "shut the heck up"
Alan T. DeKok [Fri, 13 Sep 2019 13:55:34 +0000 (09:55 -0400)] 
one more "shut the heck up"

6 years agoshut up stupid analyzer
Alan T. DeKok [Fri, 13 Sep 2019 13:32:49 +0000 (09:32 -0400)] 
shut up stupid analyzer

6 years agorlm_python: show also the stacktrace (#2979)
Jorge Pereira [Fri, 13 Sep 2019 11:52:10 +0000 (08:52 -0300)] 
rlm_python: show also the stacktrace (#2979)

It shows the "<file>:<line_num> <func()>

6 years agorlm_python: the radiusd.py is deprecated (#2982)
Jorge Pereira [Fri, 13 Sep 2019 11:50:58 +0000 (08:50 -0300)] 
rlm_python: the radiusd.py is deprecated (#2982)

Due to currently be loaded as a built-in function.

6 years agorlm_python: Fix the log() call (#2981)
Jorge Pereira [Fri, 13 Sep 2019 11:50:34 +0000 (08:50 -0300)] 
rlm_python: Fix the log() call (#2981)

6 years agoStart splitting LDAP tutorial content into sections
Arran Cudbard-Bell [Fri, 13 Sep 2019 00:35:08 +0000 (19:35 -0500)] 
Start splitting LDAP tutorial content into sections

6 years agoFormatting fixes
Arran Cudbard-Bell [Thu, 12 Sep 2019 23:07:52 +0000 (18:07 -0500)] 
Formatting fixes

6 years agorlm_python: Update example.py to be Python3 friendly (#2980)
Jorge Pereira [Thu, 12 Sep 2019 23:01:13 +0000 (20:01 -0300)] 
rlm_python: Update example.py to be Python3 friendly (#2980)

Of course, keep to be supported by Python 2.x also.

6 years agoRcode and formatting fixes
Arran Cudbard-Bell [Thu, 12 Sep 2019 23:00:15 +0000 (18:00 -0500)] 
Rcode and formatting fixes

6 years agoFix processing instantiate function return codes
Arran Cudbard-Bell [Thu, 12 Sep 2019 22:56:27 +0000 (17:56 -0500)] 
Fix processing instantiate function return codes

6 years agoWe don't care if detach fails
Arran Cudbard-Bell [Thu, 12 Sep 2019 22:56:02 +0000 (17:56 -0500)] 
We don't care if detach fails

6 years agorlm_python: The do_python_single() returns rlm_code_t (#2978)
Jorge Pereira [Thu, 12 Sep 2019 22:38:24 +0000 (19:38 -0300)] 
rlm_python: The do_python_single() returns rlm_code_t (#2978)

* rlm_python: The do_python_single() returns rlm_code_t

Never return values less than 0.

* rlm_python: Only call 'instantiate' if it was defined

* rlm_python: Just use the correct rlm_rcode_t instead of int

* rlm_python: If the execution failed, just print the errors

It's helpful to see errors in runtime.

6 years agoUse the correct osname
Arran Cudbard-Bell [Thu, 12 Sep 2019 21:14:46 +0000 (16:14 -0500)] 
Use the correct osname

6 years agodetect changes to package manifests and pass no-cache flag to docker if found (#2959)
Matt Rose [Thu, 12 Sep 2019 18:51:25 +0000 (14:51 -0400)] 
detect changes to package manifests and pass no-cache flag to docker if found (#2959)

6 years agoshut up clang scan
Alan T. DeKok [Thu, 12 Sep 2019 18:31:07 +0000 (14:31 -0400)] 
shut up clang scan