]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
7 years agocross-check name/number for PROTOCOL definition
Alan T. DeKok [Mon, 13 May 2019 13:04:30 +0000 (09:04 -0400)] 
cross-check name/number for PROTOCOL definition

7 years agoclean up attr_fields_valid
Alan T. DeKok [Mon, 13 May 2019 12:48:14 +0000 (08:48 -0400)] 
clean up attr_fields_valid

which was randomly returning NULL or 0 for booleans.

moved name length check to fr_dict_valid_name(), which is
where it really belongs

7 years agomove "create vendor" to after parse
Alan T. DeKok [Mon, 13 May 2019 12:35:36 +0000 (08:35 -0400)] 
move "create vendor" to after parse

7 years agoremove vendor-specific hacks for RADIUS
Alan T. DeKok [Mon, 13 May 2019 12:34:16 +0000 (08:34 -0400)] 
remove vendor-specific hacks for RADIUS

if the admin screws up the dictionaries, too bad.

7 years agoButcher OpenSSL spec file until it works
Arran Cudbard-Bell [Sat, 11 May 2019 01:13:18 +0000 (21:13 -0400)] 
Butcher OpenSSL spec file until it works

7 years agoseconds on the past, not octets
Alan T. DeKok [Fri, 10 May 2019 20:47:16 +0000 (16:47 -0400)] 
seconds on the past, not octets

7 years agoMerge pull request #2677 from mattrose/fix-deb-build
Alan DeKok [Fri, 10 May 2019 17:50:48 +0000 (13:50 -0400)] 
Merge pull request #2677 from mattrose/fix-deb-build

fix debian/ubuntu package build

7 years agofix debian/ubuntu package build 2677/head
Matt Rose [Fri, 10 May 2019 17:00:22 +0000 (13:00 -0400)] 
fix debian/ubuntu package build

7 years agoadd missing dictionary
Alan T. DeKok [Fri, 10 May 2019 14:10:43 +0000 (10:10 -0400)] 
add missing dictionary

7 years agouse subroutine for common function
Alan T. DeKok [Fri, 10 May 2019 13:46:49 +0000 (09:46 -0400)] 
use subroutine for common function

7 years agonotes on registered protocols
Alan T. DeKok [Fri, 10 May 2019 13:31:50 +0000 (09:31 -0400)] 
notes on registered protocols

7 years agonotes on what's done
Alan T. DeKok [Fri, 10 May 2019 13:31:14 +0000 (09:31 -0400)] 
notes on what's done

7 years agoinitialize 'entry'
Alan T. DeKok [Fri, 10 May 2019 13:31:02 +0000 (09:31 -0400)] 
initialize 'entry'

7 years agodon't expend $Id:$, so that the header isn't mangled
Alan T. DeKok [Fri, 10 May 2019 13:27:35 +0000 (09:27 -0400)] 
don't expend $Id:$, so that the header isn't mangled

7 years agoformat PROTOCOL lines, too
Alan T. DeKok [Fri, 10 May 2019 13:23:21 +0000 (09:23 -0400)] 
format PROTOCOL lines, too

7 years agoformat the PROTOCOL line, too
Alan T. DeKok [Fri, 10 May 2019 13:18:38 +0000 (09:18 -0400)] 
format the PROTOCOL line, too

7 years agoadd ARP as a protocol
Alan T. DeKok [Fri, 10 May 2019 13:18:30 +0000 (09:18 -0400)] 
add ARP as a protocol

7 years agomove to 'struct' and add more operation type values
Alan T. DeKok [Fri, 10 May 2019 13:07:21 +0000 (09:07 -0400)] 
move to 'struct' and add more operation type values

7 years agomove ARP to its own protocol
Alan T. DeKok [Fri, 10 May 2019 12:56:34 +0000 (08:56 -0400)] 
move ARP to its own protocol

7 years agorename entry to "opts"
Alan T. DeKok [Fri, 10 May 2019 11:12:29 +0000 (07:12 -0400)] 
rename entry to "opts"

which is simpler for admins to understand

7 years agoMerge pull request #2673 from jpereira/v4/couchbase666
Alan DeKok [Fri, 10 May 2019 11:08:00 +0000 (07:08 -0400)] 
Merge pull request #2673 from jpereira/v4/couchbase666

Add 'libcouchbase_opts{...}' option

7 years agorlm_couchbase: Add 'libcouchbase_opts{...}' option 2673/head
Jorge Pereira [Fri, 10 May 2019 02:49:09 +0000 (23:49 -0300)] 
rlm_couchbase: Add 'libcouchbase_opts{...}' option

Useful to persist some options to enable the logs, set adjustments
and everything allowed by API using libcouchbase_opts().

7 years agorlm_couchbase: Add mod_bootstrap statement
Jorge Pereira [Thu, 9 May 2019 21:23:23 +0000 (18:23 -0300)] 
rlm_couchbase: Add mod_bootstrap statement

7 years agosearch for module by allowed method
Alan T. DeKok [Thu, 9 May 2019 17:51:56 +0000 (13:51 -0400)] 
search for module by allowed method

* if method[COMPONTENT] is set, then return that
* otherwise walk over the named methods for a module, looking
  for a match to the current section we're compiling.
  e.g. "recv Access-Request"
* if that still isn't found, then look up the list of allowed
  methods for this processing section.  Then, walk over that list
  and the module list in O(N*M), to see if there's a matching
  method

The last step is more rare, so it shouldn't affect speed much.

7 years agoutility function to get allowed methods for a processing section
Alan T. DeKok [Thu, 9 May 2019 17:51:29 +0000 (13:51 -0400)] 
utility function to get allowed methods for a processing section

7 years agocatch programming errors in internal data structures
Alan T. DeKok [Thu, 9 May 2019 17:51:09 +0000 (13:51 -0400)] 
catch programming errors in internal data structures

7 years agoDoxygen
Arran Cudbard-Bell [Thu, 9 May 2019 17:02:32 +0000 (13:02 -0400)] 
Doxygen

7 years agoAlways explicitly remove request data used to hold the timer handle for xlats
Arran Cudbard-Bell [Thu, 9 May 2019 16:26:15 +0000 (12:26 -0400)] 
Always explicitly remove request data used to hold the timer handle for xlats

7 years agoalways set type. Helps with #2672
Alan T. DeKok [Thu, 9 May 2019 14:32:17 +0000 (10:32 -0400)] 
always set type.  Helps with #2672

7 years agocompile processing sections for dynamic clients, too
Alan T. DeKok [Thu, 9 May 2019 12:53:50 +0000 (08:53 -0400)] 
compile processing sections for dynamic clients, too

7 years agodoxygen
Alan T. DeKok [Thu, 9 May 2019 12:14:09 +0000 (08:14 -0400)] 
doxygen

7 years agoremove unused code
Alan T. DeKok [Thu, 9 May 2019 12:12:41 +0000 (08:12 -0400)] 
remove unused code

7 years agoset flags correctly. Closes #2672
Alan T. DeKok [Thu, 9 May 2019 11:33:52 +0000 (07:33 -0400)] 
set flags correctly.  Closes #2672

7 years agoUpdate README.md
Arran Cudbard-Bell [Wed, 8 May 2019 22:55:07 +0000 (18:55 -0400)] 
Update README.md

7 years agouse "compile_list" instead of mod_instantiate()
Alan T. DeKok [Wed, 8 May 2019 18:48:38 +0000 (14:48 -0400)] 
use "compile_list" instead of mod_instantiate()

7 years agouse the correct name for dict autoload
Alan T. DeKok [Wed, 8 May 2019 18:45:57 +0000 (14:45 -0400)] 
use the correct name for dict autoload

7 years agoinitialize dynamic_clients before using it.
Alan T. DeKok [Wed, 8 May 2019 18:43:11 +0000 (14:43 -0400)] 
initialize dynamic_clients before using it.

7 years agocheck for dynamic submodule
Alan T. DeKok [Wed, 8 May 2019 18:32:55 +0000 (14:32 -0400)] 
check for dynamic submodule

instead of dereferencing it and crashing

7 years agocheck for dynamic submodules, too
Alan T. DeKok [Wed, 8 May 2019 17:36:16 +0000 (13:36 -0400)] 
check for dynamic submodules, too

7 years agoFixup more config logging functions to pass through src file and line
Arran Cudbard-Bell [Wed, 8 May 2019 16:44:10 +0000 (12:44 -0400)] 
Fixup more config logging functions to pass through src file and line

7 years agoskip encoding message type
Alan T. DeKok [Wed, 8 May 2019 14:43:18 +0000 (10:43 -0400)] 
skip encoding message type

7 years agoVPS are allocated from the request ctx
Alan T. DeKok [Wed, 8 May 2019 14:34:53 +0000 (10:34 -0400)] 
VPS are allocated from the request ctx

7 years agomash "out" to NULL on error
Alan T. DeKok [Wed, 8 May 2019 14:34:02 +0000 (10:34 -0400)] 
mash "out" to NULL on error

which removes a double free if it's still pointed to from
somewhere else

7 years agodon't close sockets on write errors.
Alan T. DeKok [Wed, 8 May 2019 14:30:03 +0000 (10:30 -0400)] 
don't close sockets on write errors.

Things like DHCP can try sending to wrong giaddr, which then
may not work.

7 years agocan't write here
Alan T. DeKok [Wed, 8 May 2019 14:27:25 +0000 (10:27 -0400)] 
can't write here

7 years agowe don't need FD here
Alan T. DeKok [Wed, 8 May 2019 14:23:14 +0000 (10:23 -0400)] 
we don't need FD here

7 years agomove to proper repo
Alan T. DeKok [Wed, 8 May 2019 10:26:30 +0000 (06:26 -0400)] 
move to proper repo

7 years agoBin safe
Arran Cudbard-Bell [Wed, 8 May 2019 00:40:16 +0000 (20:40 -0400)] 
Bin safe

7 years agoNo need to explicitly print file and line anymore
Arran Cudbard-Bell [Wed, 8 May 2019 00:20:54 +0000 (20:20 -0400)] 
No need to explicitly print file and line anymore

7 years agoEscape conf pair values when printing
Arran Cudbard-Bell [Wed, 8 May 2019 00:15:38 +0000 (20:15 -0400)] 
Escape conf pair values when printing

7 years agoUnify config logging functions, and pass through file/line
Arran Cudbard-Bell [Wed, 8 May 2019 00:15:25 +0000 (20:15 -0400)] 
Unify config logging functions, and pass through file/line

7 years agoAdd fr_vlog_perror
Arran Cudbard-Bell [Wed, 8 May 2019 00:15:09 +0000 (20:15 -0400)] 
Add fr_vlog_perror

7 years agoDocs
Arran Cudbard-Bell [Tue, 7 May 2019 23:34:31 +0000 (19:34 -0400)] 
Docs

7 years agoAdd back special char removal, and add indent for src file names
Arran Cudbard-Bell [Tue, 7 May 2019 23:34:19 +0000 (19:34 -0400)] 
Add back special char removal, and add indent for src file names

7 years agoMerge pull request #2668 from cipherboy/add-su-logrotate-master
Alan DeKok [Tue, 7 May 2019 22:21:04 +0000 (18:21 -0400)] 
Merge pull request #2668 from cipherboy/add-su-logrotate-master

su to radiusd user/group when rotating logs

7 years agoNot needed
Arran Cudbard-Bell [Tue, 7 May 2019 22:13:45 +0000 (18:13 -0400)] 
Not needed

7 years agoMerge pull request #2669 from jpereira/v4/couchbase3
Alan DeKok [Tue, 7 May 2019 22:13:46 +0000 (18:13 -0400)] 
Merge pull request #2669 from jpereira/v4/couchbase3

rlm_couchbase: The API expects timeout in microseconds

7 years agorlm_couchbase: The API expects timeout in microseconds 2669/head
Jorge Pereira [Tue, 7 May 2019 22:11:11 +0000 (19:11 -0300)] 
rlm_couchbase: The API expects timeout in microseconds

As can be seen in https://github.com/couchbaselabs/expiry-notifier/blob/master/node_modules/couchbase/deps/lcb/man/man3couchbase/lcb_cntl.3couchbase.txt#L59

7 years agoAlways initialise len in truncate filename
Arran Cudbard-Bell [Tue, 7 May 2019 22:04:00 +0000 (18:04 -0400)] 
Always initialise len in truncate filename

7 years agoSatisfy clang
Arran Cudbard-Bell [Tue, 7 May 2019 21:31:20 +0000 (17:31 -0400)] 
Satisfy clang

7 years agodon't call talloc functions on static filenames
Alan T. DeKok [Tue, 7 May 2019 21:28:03 +0000 (17:28 -0400)] 
don't call talloc functions on static filenames

7 years agoMerge pull request #2662 from jpereira/v4/fixcouchbase1
Alan DeKok [Tue, 7 May 2019 21:21:19 +0000 (17:21 -0400)] 
Merge pull request #2662 from jpereira/v4/fixcouchbase1

rlm_couchbase: Fix heap overflow

7 years agoMerge pull request #2665 from jpereira/v4/couchbase2
Alan DeKok [Tue, 7 May 2019 21:19:43 +0000 (17:19 -0400)] 
Merge pull request #2665 from jpereira/v4/couchbase2

rlm_couchbase: Add missing 'username' option

7 years agoMerge pull request #2667 from jpereira/v4/fixclient1
Alan DeKok [Tue, 7 May 2019 21:19:06 +0000 (17:19 -0400)] 
Merge pull request #2667 from jpereira/v4/fixclient1

rlm_ldap: Fix wrong parameter in client_afrom_cs()

7 years agoTypos and doxygen
Arran Cudbard-Bell [Tue, 7 May 2019 21:15:32 +0000 (17:15 -0400)] 
Typos and doxygen

7 years agosu to radiusd user/group when rotating logs 2668/head
Alexander Scheel [Tue, 7 May 2019 20:43:43 +0000 (16:43 -0400)] 
su to radiusd user/group when rotating logs

The su directive to logrotate ensures that log rotation happens under the
owner of the logs. Otherwise, logrotate runs as root:root, potentially
enabling privilege escalation if a RCE is discovered against the
FreeRADIUS daemon.

Signed-off-by: Alexander Scheel <ascheel@redhat.com>
7 years agoAdd support for logging the file and line number the log message was generated in
Arran Cudbard-Bell [Tue, 7 May 2019 20:39:12 +0000 (16:39 -0400)] 
Add support for logging the file and line number the log message was generated in

7 years agorlm_ldap: Fix wrong parameter in client_afrom_cs() 2667/head
Jorge Pereira [Tue, 7 May 2019 20:32:20 +0000 (17:32 -0300)] 
rlm_ldap: Fix wrong parameter in client_afrom_cs()

7 years agorlm_couchbase: Add missing 'username' option 2665/head
Jorge Pereira [Tue, 7 May 2019 19:47:03 +0000 (16:47 -0300)] 
rlm_couchbase: Add missing 'username' option

7 years agorlm_couchbase: Fix heap overflow 2662/head
Jorge Pereira [Tue, 7 May 2019 02:17:24 +0000 (23:17 -0300)] 
rlm_couchbase: Fix heap overflow

7 years agoUpdate the 'raddb/sites-available/dynamic-clients' to use 'map sql {...}'
Jorge Pereira [Tue, 7 May 2019 00:54:42 +0000 (21:54 -0300)] 
Update the 'raddb/sites-available/dynamic-clients' to use 'map sql {...}'

7 years agoAdd missing '&' in raddb/sites-available/default
Jorge Pereira [Mon, 6 May 2019 23:05:28 +0000 (20:05 -0300)] 
Add missing '&' in raddb/sites-available/default

7 years agorlm_sql: Clean up
Jorge Pereira [Mon, 6 May 2019 21:36:54 +0000 (18:36 -0300)] 
rlm_sql: Clean up

7 years agoCan't use type for storing syslog priority
Arran Cudbard-Bell [Mon, 6 May 2019 23:08:50 +0000 (19:08 -0400)] 
Can't use type for storing syslog priority

7 years agoRemove deprecated logging functions
Arran Cudbard-Bell [Mon, 6 May 2019 22:31:24 +0000 (18:31 -0400)] 
Remove deprecated logging functions

7 years agoBox not string
Arran Cudbard-Bell [Mon, 6 May 2019 22:28:44 +0000 (18:28 -0400)] 
Box not string

7 years agoMissed cast
Arran Cudbard-Bell [Mon, 6 May 2019 21:11:00 +0000 (17:11 -0400)] 
Missed cast

7 years agoMerge pull request #2659 from jpereira/v4/typo1
Alan DeKok [Mon, 6 May 2019 20:41:35 +0000 (16:41 -0400)] 
Merge pull request #2659 from jpereira/v4/typo1

Typo

7 years agoTypo in raddb/mods-config/isc_dhcp/dhcpd.conf 2659/head
Jorge Pereira [Mon, 6 May 2019 20:36:24 +0000 (17:36 -0300)] 
Typo in raddb/mods-config/isc_dhcp/dhcpd.conf

7 years agoTypo in raddb/mods-available/sql
Jorge Pereira [Mon, 6 May 2019 20:39:54 +0000 (17:39 -0300)] 
Typo in raddb/mods-available/sql

7 years agoPrint plaintext/ciphertext in cipher_rsa_decrypt/encrypt_xlat at debug level 3
Arran Cudbard-Bell [Mon, 6 May 2019 19:23:26 +0000 (15:23 -0400)] 
Print plaintext/ciphertext in cipher_rsa_decrypt/encrypt_xlat at debug level 3

7 years agoUsed boxed value when printing the hint byte as it could be \000
Arran Cudbard-Bell [Mon, 6 May 2019 19:22:58 +0000 (15:22 -0400)] 
Used boxed value when printing the hint byte as it could be \000

7 years agoDoxygen
Arran Cudbard-Bell [Mon, 6 May 2019 19:21:46 +0000 (15:21 -0400)] 
Doxygen

7 years agofix return value
Alan T. DeKok [Mon, 6 May 2019 19:06:45 +0000 (15:06 -0400)] 
fix return value

7 years agoFix memory leak in client_add()
Alan T. DeKok [Mon, 6 May 2019 18:31:21 +0000 (14:31 -0400)] 
Fix memory leak in client_add()

Manual port of commit 506058

7 years agoMerge pull request #2651 from jpereira/v4/doc1
Alan DeKok [Mon, 6 May 2019 18:31:56 +0000 (14:31 -0400)] 
Merge pull request #2651 from jpereira/v4/doc1

doc: Update the SQL reference

7 years agodoc: Update the SQL reference 2651/head
Jorge Pereira [Mon, 6 May 2019 16:11:28 +0000 (13:11 -0300)] 
doc: Update the SQL reference

7 years agoAdd back fields missed in copy
Arran Cudbard-Bell [Mon, 6 May 2019 03:38:57 +0000 (23:38 -0400)] 
Add back fields missed in copy

7 years agoTypo
Arran Cudbard-Bell [Mon, 6 May 2019 03:37:26 +0000 (23:37 -0400)] 
Typo

7 years agoFixup SIM/AKA dictionary loading
Arran Cudbard-Bell [Sun, 5 May 2019 22:37:50 +0000 (18:37 -0400)] 
Fixup SIM/AKA dictionary loading

7 years agoAdd tainted to fr_pair_value_memcpy and fr_pair_value_memsteal
Arran Cudbard-Bell [Sun, 5 May 2019 22:31:54 +0000 (18:31 -0400)] 
Add tainted to fr_pair_value_memcpy and fr_pair_value_memsteal

7 years agoUse the correct instruction in unlang_module_yield_to_section
Arran Cudbard-Bell [Sun, 5 May 2019 21:18:01 +0000 (17:18 -0400)] 
Use the correct instruction in unlang_module_yield_to_section

7 years agoAdd support for overriding the dictionary dir
Arran Cudbard-Bell [Sun, 5 May 2019 21:17:24 +0000 (17:17 -0400)] 
Add support for overriding the dictionary dir

7 years agoAdd function to unlink a list member without requiring the dlist head
Arran Cudbard-Bell [Sun, 5 May 2019 21:13:11 +0000 (17:13 -0400)] 
Add function to unlink a list member without requiring the dlist head

7 years agoAdd function for copying one pair's value to another pair
Arran Cudbard-Bell [Sun, 5 May 2019 21:11:29 +0000 (17:11 -0400)] 
Add function for copying one pair's value to another pair

7 years agoUpdate raddb/sites-available/buffered-sql
Jorge Pereira [Fri, 3 May 2019 21:15:09 +0000 (18:15 -0300)] 
Update raddb/sites-available/buffered-sql

7 years agoUpdate raddb/sites-available/bfd
Jorge Pereira [Fri, 3 May 2019 21:15:09 +0000 (18:15 -0300)] 
Update raddb/sites-available/bfd

7 years agoUpdate raddb/sites-available/arp
Jorge Pereira [Fri, 3 May 2019 21:15:08 +0000 (18:15 -0300)] 
Update raddb/sites-available/arp

7 years agoUpdate raddb/sites-available/abfab-tr-idp
Jorge Pereira [Fri, 3 May 2019 21:15:08 +0000 (18:15 -0300)] 
Update raddb/sites-available/abfab-tr-idp

7 years agoUpdate raddb/sites-available/abfab-tls
Jorge Pereira [Fri, 3 May 2019 21:15:07 +0000 (18:15 -0300)] 
Update raddb/sites-available/abfab-tls