]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Jorge Pereira [Fri, 3 May 2019 20:07:15 +0000 (17:07 -0300)]
doc: sed 's/psk_authorize/abfab_psk_authorize/g'
Jorge Pereira [Fri, 3 May 2019 20:06:35 +0000 (17:06 -0300)]
Fix the 'edir' reference
Arran Cudbard-Bell [Fri, 3 May 2019 21:21:09 +0000 (17:21 -0400)]
Make SSL ctx memory bindings dependent on version so Travis works again...
Jorge Pereira [Fri, 3 May 2019 19:30:11 +0000 (16:30 -0300)]
conf2adoc: Fix the '-*- text -*-' regex
Alan T. DeKok [Fri, 3 May 2019 17:33:47 +0000 (13:33 -0400)]
have the worker signal the request directly
now that everything is integrated, the workers can call unlang
functions.
Since the worker can signal unlang directly, we no longer need
fr_io_action_t, or to pass it as a parameter to the process
functions.
Alan T. DeKok [Fri, 3 May 2019 17:26:11 +0000 (13:26 -0400)]
signal the interpreter directly
instead of through the "process" function.
When developing lib/io, we didn't want to depend on the unlang
library. Now that it's all integrated, we should be OK with such
dependencies
Alan T. DeKok [Fri, 3 May 2019 17:25:21 +0000 (13:25 -0400)]
remove unneeded whitespace
Alan T. DeKok [Fri, 3 May 2019 16:22:40 +0000 (12:22 -0400)]
set pending to NULL, too
Alan T. DeKok [Fri, 3 May 2019 15:42:00 +0000 (11:42 -0400)]
enforce RFC requirements
CoA-Request with "Service-Type = Authorize-Only" MUST also
contain a State attribute
Alan T. DeKok [Fri, 3 May 2019 12:59:17 +0000 (08:59 -0400)]
tell the caller if we added any aliases
Alan T. DeKok [Fri, 3 May 2019 12:55:40 +0000 (08:55 -0400)]
bootstrap modules AFTER virtual server bootstrap
possibly a temporary change. There are a number of modules
which *define* aliases for Auth-Type. This is entirely wrong.
The names for the Auth-Type aliases are taken from the virtual
servers, in the 'authenticate foo' sections. The modules should
*look* for the named alias, and complain if it doesn't exist.
Simply defining the aliases in the modules means that we can have
run-time errors due to a bad config.
Plus, alias lookups are case insensitive, while CONF_SECTION name
lookups are case sensitive. So there are more chances for errors.
Arran Cudbard-Bell [Fri, 3 May 2019 00:02:52 +0000 (20:02 -0400)]
Wordsmithing
Jorge Pereira [Thu, 2 May 2019 23:22:15 +0000 (20:22 -0300)]
Detect if it runs as a systemd service without the proper support
Jorge Pereira [Thu, 2 May 2019 21:22:41 +0000 (18:22 -0300)]
Show the current 'systemd' support
Alan T. DeKok [Thu, 2 May 2019 20:03:41 +0000 (16:03 -0400)]
prefer exact match to wildcard match
Alan T. DeKok [Thu, 2 May 2019 19:26:41 +0000 (15:26 -0400)]
removed extraneous "if ef->locking"
which is checked for and caught much earlier in the function
Matthew Newton [Thu, 2 May 2019 17:06:34 +0000 (18:06 +0100)]
rpm: ensure 'docdir' exists
Whether 'make install' creates it or not, we still need it here.
Alan T. DeKok [Thu, 2 May 2019 17:00:31 +0000 (13:00 -0400)]
WARN if the permissions are different.
But change them only if the permissions REMOVE the ones
we care about.
Alan DeKok [Thu, 2 May 2019 16:46:33 +0000 (12:46 -0400)]
Merge pull request #2642 from jpereira/v4/file1
exfile: Fix the file permissions
Alan T. DeKok [Thu, 2 May 2019 16:40:40 +0000 (12:40 -0400)]
bootstrap modules before virtual servers
now that we don't need pass1/pass2 as much any more.
And, some modules load namespaces, which are needed to properly
parse the virtual servers
Alan T. DeKok [Thu, 2 May 2019 16:37:41 +0000 (12:37 -0400)]
move "register processing section" to virtual_servers.c
where it really belongs
Alan T. DeKok [Thu, 2 May 2019 16:36:57 +0000 (12:36 -0400)]
read config before calling module/server init
Jorge Pereira [Thu, 2 May 2019 16:33:07 +0000 (13:33 -0300)]
exfile: Fix the file permissions
Sometimes the file permissions are changed externally,
just be sure to reset the permission if necessary.
Alan T. DeKok [Thu, 2 May 2019 16:22:40 +0000 (12:22 -0400)]
add virtual_servers_init / free
so that we have explicit initializers && free functions.
Alan T. DeKok [Thu, 2 May 2019 16:11:49 +0000 (12:11 -0400)]
complain about the program running, not "radiusd"
Alan T. DeKok [Thu, 2 May 2019 16:10:20 +0000 (12:10 -0400)]
move initialization to modules_init()
to mirror modules_free()
Alan T. DeKok [Thu, 2 May 2019 15:38:22 +0000 (11:38 -0400)]
use radclient->ipaddr, which may be a network
Alan T. DeKok [Thu, 2 May 2019 15:35:05 +0000 (11:35 -0400)]
initialize radclient src/dst IP address, and use that, too
Alan T. DeKok [Thu, 2 May 2019 15:30:35 +0000 (11:30 -0400)]
use "radclient" consistently
Alan T. DeKok [Thu, 2 May 2019 13:24:36 +0000 (09:24 -0400)]
do not enable PAM by default.
We don't recommend it, as it's terrible.
Alan T. DeKok [Thu, 2 May 2019 12:59:54 +0000 (08:59 -0400)]
fix compilation issue with older OpenSSL
Alan T. DeKok [Thu, 2 May 2019 11:25:56 +0000 (07:25 -0400)]
remove Autz-Type, etc. from here too
Alan T. DeKok [Wed, 1 May 2019 22:30:22 +0000 (18:30 -0400)]
add "map" to the list of tests to run
Alan T. DeKok [Wed, 1 May 2019 22:26:30 +0000 (18:26 -0400)]
these modules are RADIUS only
Alan T. DeKok [Wed, 1 May 2019 19:42:43 +0000 (15:42 -0400)]
add "fr_dict_t**" to module definitions
so that modules which are protocol-specific can catch errors
Alan T. DeKok [Wed, 1 May 2019 19:26:41 +0000 (15:26 -0400)]
remove Autz-Type, etc.
We now only have Auth-Type left in the server.
The dictionary entries are commented out, for both
ATTRIBUTEs and VALUEs
The code no longer references any of these types.
Alan T. DeKok [Wed, 1 May 2019 19:23:13 +0000 (15:23 -0400)]
fix section_type_value to just be names
We no longer need or use FR_AUTZ_TYPE, etc.
Arran Cudbard-Bell [Thu, 2 May 2019 03:11:44 +0000 (23:11 -0400)]
Apparently whatever semi-globals OpenSSL leaves around, are still referenced by the thread exit handlers
so... don't bind the memory and we'll just have to put up with the leaks.
Arran Cudbard-Bell [Thu, 2 May 2019 02:51:44 +0000 (22:51 -0400)]
No return value
Arran Cudbard-Bell [Thu, 2 May 2019 02:51:07 +0000 (22:51 -0400)]
Print file and line and free ocurred on
Jorge Pereira [Wed, 1 May 2019 17:21:24 +0000 (14:21 -0300)]
exfile.c: Fix missing talloc_free()
Alan T. DeKok [Wed, 1 May 2019 17:26:17 +0000 (13:26 -0400)]
move to C99 initializers
in preparation for adding fields to the compile struct
Alan T. DeKok [Wed, 1 May 2019 16:58:38 +0000 (12:58 -0400)]
do success on success
Alan T. DeKok [Wed, 1 May 2019 16:13:33 +0000 (12:13 -0400)]
Revert "'.' is no longer allowed in attribute names"
This reverts commit
0fc603fc01642dd5db6040473caf11f440458f47 .
<sigh> Attr-1.2.3.4 issues
Alan T. DeKok [Wed, 1 May 2019 15:30:53 +0000 (11:30 -0400)]
don't necessarily "" quote strings with '.' in them.
This is to work around the new requirement that dictionary
attribute names can't have '.' in them. But, the array of allowed
characters is used by the tmpl code to determine if it quotes
a string, so we've got to hack this up to counter the dictionary
changes.
Since the tmpl hack is already marked as a hack, it's better to
have hacks all in one place
Alan T. DeKok [Wed, 1 May 2019 14:43:46 +0000 (10:43 -0400)]
more notes
Alan T. DeKok [Wed, 1 May 2019 14:34:34 +0000 (10:34 -0400)]
add tests for new keyword methods
and prefer old-style methods (if they exist) to the new ones.
New methods can have wildcard methods which are different
from the old-style methods.
Alan T. DeKok [Wed, 1 May 2019 14:19:40 +0000 (10:19 -0400)]
allow modules to export named methods
Alan T. DeKok [Tue, 30 Apr 2019 19:37:31 +0000 (15:37 -0400)]
support for calling any named method, not just "authorize", etc.
the module_by_name_and_method() now returns a component *and*
name1 / name2 of the named method. e.g. `sql.authorize` or
even `sql.session.start`.
It also returns the method function to call. This is so that
the compiler doesn't need to troll through the module method list.
Instead, it's all buried inside of one lookup function.
Alan T. DeKok [Tue, 30 Apr 2019 19:27:12 +0000 (15:27 -0400)]
fix so that the map unit tests work
Alan T. DeKok [Tue, 30 Apr 2019 19:19:07 +0000 (15:19 -0400)]
remove unnecessary functions
now that we've fixed the linking issues, we don't need this
Alan T. DeKok [Tue, 30 Apr 2019 18:04:43 +0000 (14:04 -0400)]
'.' is no longer allowed in attribute names
This is so that we can allow nested TLVs and groups, via
Foo.Bar = baz
Arran Cudbard-Bell [Tue, 30 Apr 2019 15:20:31 +0000 (11:20 -0400)]
Fix use after free issues on startup failure
Alan T. DeKok [Tue, 30 Apr 2019 13:45:16 +0000 (09:45 -0400)]
doxygen
Alan T. DeKok [Tue, 30 Apr 2019 13:43:46 +0000 (09:43 -0400)]
doxygen
Alan T. DeKok [Tue, 30 Apr 2019 13:09:25 +0000 (09:09 -0400)]
word smithing
Alan DeKok [Tue, 30 Apr 2019 13:05:23 +0000 (09:05 -0400)]
Merge pull request #2619 from mattrose/pipelines-pr
Add Jenkins continuous integration to FreeRADIUS
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:56:32 +0000 (18:56 -0400)]
Typo
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:52:07 +0000 (18:52 -0400)]
Rework various elements of the module interface to the async API
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:49:13 +0000 (18:49 -0400)]
Add macros to modify session-state
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:48:56 +0000 (18:48 -0400)]
Map module_method_t pointers to strings
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:41:18 +0000 (18:41 -0400)]
Set vector source, and record ki/opc if we're acting as an AuC
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:24:45 +0000 (18:24 -0400)]
Resync functions from previous commit
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:21:46 +0000 (18:21 -0400)]
Milenage's auts function outputs sqn, it doesn't consume it
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:20:29 +0000 (18:20 -0400)]
Args not used
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:19:30 +0000 (18:19 -0400)]
Remove debugging statements
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:14:25 +0000 (18:14 -0400)]
Crypto functions should take REQUEST * not eap_session_t *
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:12:04 +0000 (18:12 -0400)]
Attr not used here yet
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:11:21 +0000 (18:11 -0400)]
Resolve additional attributes for EAP and EAP-AKA
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:35:32 +0000 (17:35 -0400)]
Add function to dump request data
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:34:54 +0000 (17:34 -0400)]
Fix docs and mapping between SIM_ANY_ID_REQ
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:34:36 +0000 (17:34 -0400)]
Correct ID macro order
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:31:43 +0000 (17:31 -0400)]
Add fr_rand_str to generate random strings
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:30:30 +0000 (17:30 -0400)]
Unused attributes
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:05:40 +0000 (17:05 -0400)]
Qualify EAP-Method macros
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:00:30 +0000 (17:00 -0400)]
Group failure rcodes for custom sections
Arran Cudbard-Bell [Mon, 29 Apr 2019 19:28:10 +0000 (15:28 -0400)]
Place a marker where result stopped matching expected
Alan T. DeKok [Mon, 29 Apr 2019 19:44:19 +0000 (15:44 -0400)]
get rid of bare "name" for compilation.
everything now should be section names
Alan T. DeKok [Mon, 29 Apr 2019 15:33:06 +0000 (11:33 -0400)]
allow for subsections to be used in other sections.
Finishing off the previous commit.
Alan T. DeKok [Mon, 29 Apr 2019 14:48:25 +0000 (10:48 -0400)]
check if a processing subsection exists
so that we can do:
recv Foo {
...
session start {
...
}
...
}
instead of nonsense like "sql.authorize"
Alan T. DeKok [Mon, 29 Apr 2019 14:48:01 +0000 (10:48 -0400)]
add API to check if a processing section exists
Alan T. DeKok [Mon, 29 Apr 2019 14:32:20 +0000 (10:32 -0400)]
move assignment to where it's used
Alan T. DeKok [Mon, 29 Apr 2019 13:20:23 +0000 (09:20 -0400)]
add API to register names of processing sections
so that we only need to instantiate module methods which are
used.
Alan T. DeKok [Mon, 29 Apr 2019 12:51:51 +0000 (08:51 -0400)]
remove "Auth-Type", etc. from section_type_value array
Alan T. DeKok [Fri, 26 Apr 2019 21:50:13 +0000 (17:50 -0400)]
move "check type" to before value box parsing
so we get a type error instead of a "cannot parse" error.
and add a few more data types which shouldn't have VALUEs
Arran Cudbard-Bell [Fri, 26 Apr 2019 21:46:21 +0000 (17:46 -0400)]
Forbid structural types from having values
Alan T. DeKok [Fri, 26 Apr 2019 14:26:05 +0000 (10:26 -0400)]
only integer data types can have VALUEs
Alan T. DeKok [Fri, 26 Apr 2019 14:09:54 +0000 (10:09 -0400)]
as posted to the list
Alan T. DeKok [Fri, 26 Apr 2019 14:03:47 +0000 (10:03 -0400)]
ERX-Acct-Request-Reason is "integer"
Alan T. DeKok [Fri, 26 Apr 2019 13:29:59 +0000 (09:29 -0400)]
notes on what to do before v4 is released
Alan T. DeKok [Fri, 26 Apr 2019 13:01:30 +0000 (09:01 -0400)]
recursively print attributes of type FR_TYPE_GROUP
Alan T. DeKok [Fri, 26 Apr 2019 12:51:07 +0000 (08:51 -0400)]
add fr_pair_cursor_recurse_child()
for attributes of type GROUP
Alan T. DeKok [Fri, 26 Apr 2019 12:50:49 +0000 (08:50 -0400)]
print out groups, too
Alan T. DeKok [Thu, 25 Apr 2019 20:50:34 +0000 (16:50 -0400)]
add vp_group
Alan T. DeKok [Thu, 25 Apr 2019 14:22:41 +0000 (10:22 -0400)]
break / detach / return are also keywords
Alan T. DeKok [Thu, 25 Apr 2019 14:21:44 +0000 (10:21 -0400)]
no need to check for keyword twice
and also check name2 for module names
Arran Cudbard-Bell [Thu, 25 Apr 2019 02:24:21 +0000 (22:24 -0400)]
Doxygen
Arran Cudbard-Bell [Thu, 25 Apr 2019 02:13:29 +0000 (22:13 -0400)]
Or maybe this??
Arran Cudbard-Bell [Thu, 25 Apr 2019 02:13:02 +0000 (22:13 -0400)]
Fix coverity badge in readme
Arran Cudbard-Bell [Thu, 25 Apr 2019 02:09:55 +0000 (22:09 -0400)]
Add session-state support in subrequests
With careful attention given to detached subrequests