]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
7 years agodoc: sed 's/psk_authorize/abfab_psk_authorize/g'
Jorge Pereira [Fri, 3 May 2019 20:07:15 +0000 (17:07 -0300)] 
doc: sed 's/psk_authorize/abfab_psk_authorize/g'

7 years agoFix the 'edir' reference
Jorge Pereira [Fri, 3 May 2019 20:06:35 +0000 (17:06 -0300)] 
Fix the 'edir' reference

7 years agoMake SSL ctx memory bindings dependent on version so Travis works again...
Arran Cudbard-Bell [Fri, 3 May 2019 21:21:09 +0000 (17:21 -0400)] 
Make SSL ctx memory bindings dependent on version so Travis works again...

7 years agoconf2adoc: Fix the '-*- text -*-' regex
Jorge Pereira [Fri, 3 May 2019 19:30:11 +0000 (16:30 -0300)] 
conf2adoc: Fix the '-*- text -*-' regex

7 years agohave the worker signal the request directly
Alan T. DeKok [Fri, 3 May 2019 17:33:47 +0000 (13:33 -0400)] 
have the worker signal the request directly

now that everything is integrated, the workers can call unlang
functions.

Since the worker can signal unlang directly, we no longer need
fr_io_action_t, or to pass it as a parameter to the process
functions.

7 years agosignal the interpreter directly
Alan T. DeKok [Fri, 3 May 2019 17:26:11 +0000 (13:26 -0400)] 
signal the interpreter directly

instead of through the "process" function.

When developing lib/io, we didn't want to depend on the unlang
library.  Now that it's all integrated, we should be OK with such
dependencies

7 years agoremove unneeded whitespace
Alan T. DeKok [Fri, 3 May 2019 17:25:21 +0000 (13:25 -0400)] 
remove unneeded whitespace

7 years agoset pending to NULL, too
Alan T. DeKok [Fri, 3 May 2019 16:22:40 +0000 (12:22 -0400)] 
set pending to NULL, too

7 years agoenforce RFC requirements
Alan T. DeKok [Fri, 3 May 2019 15:42:00 +0000 (11:42 -0400)] 
enforce RFC requirements

CoA-Request with "Service-Type = Authorize-Only" MUST also
contain a State attribute

7 years agotell the caller if we added any aliases
Alan T. DeKok [Fri, 3 May 2019 12:59:17 +0000 (08:59 -0400)] 
tell the caller if we added any aliases

7 years agobootstrap modules AFTER virtual server bootstrap
Alan T. DeKok [Fri, 3 May 2019 12:55:40 +0000 (08:55 -0400)] 
bootstrap modules AFTER virtual server bootstrap

possibly a temporary change.  There are a number of modules
which *define* aliases for Auth-Type.  This is entirely wrong.
The names for the Auth-Type aliases are taken from the virtual
servers, in the 'authenticate foo' sections.  The modules should
*look* for the named alias, and complain if it doesn't exist.

Simply defining the aliases in the modules means that we can have
run-time errors due to a bad config.

Plus, alias lookups are case insensitive, while CONF_SECTION name
lookups are case sensitive.  So there are more chances for errors.

7 years agoWordsmithing
Arran Cudbard-Bell [Fri, 3 May 2019 00:02:52 +0000 (20:02 -0400)] 
Wordsmithing

7 years agoDetect if it runs as a systemd service without the proper support
Jorge Pereira [Thu, 2 May 2019 23:22:15 +0000 (20:22 -0300)] 
Detect if it runs as a systemd service without the proper support

7 years agoShow the current 'systemd' support
Jorge Pereira [Thu, 2 May 2019 21:22:41 +0000 (18:22 -0300)] 
Show the current 'systemd' support

7 years agoprefer exact match to wildcard match
Alan T. DeKok [Thu, 2 May 2019 20:03:41 +0000 (16:03 -0400)] 
prefer exact match to wildcard match

7 years agoremoved extraneous "if ef->locking"
Alan T. DeKok [Thu, 2 May 2019 19:26:41 +0000 (15:26 -0400)] 
removed extraneous "if ef->locking"

which is checked for and caught much earlier in the function

7 years agorpm: ensure 'docdir' exists
Matthew Newton [Thu, 2 May 2019 17:06:34 +0000 (18:06 +0100)] 
rpm: ensure 'docdir' exists

Whether 'make install' creates it or not, we still need it here.

7 years agoWARN if the permissions are different.
Alan T. DeKok [Thu, 2 May 2019 17:00:31 +0000 (13:00 -0400)] 
WARN if the permissions are different.

But change them only if the permissions REMOVE the ones
we care about.

7 years agoMerge pull request #2642 from jpereira/v4/file1
Alan DeKok [Thu, 2 May 2019 16:46:33 +0000 (12:46 -0400)] 
Merge pull request #2642 from jpereira/v4/file1

exfile: Fix the file permissions

7 years agobootstrap modules before virtual servers
Alan T. DeKok [Thu, 2 May 2019 16:40:40 +0000 (12:40 -0400)] 
bootstrap modules before virtual servers

now that we don't need pass1/pass2 as much any more.

And, some modules load namespaces, which are needed to properly
parse the virtual servers

7 years agomove "register processing section" to virtual_servers.c
Alan T. DeKok [Thu, 2 May 2019 16:37:41 +0000 (12:37 -0400)] 
move "register processing section" to virtual_servers.c

where it really belongs

7 years agoread config before calling module/server init
Alan T. DeKok [Thu, 2 May 2019 16:36:57 +0000 (12:36 -0400)] 
read config before calling module/server init

7 years agoexfile: Fix the file permissions 2642/head
Jorge Pereira [Thu, 2 May 2019 16:33:07 +0000 (13:33 -0300)] 
exfile: Fix the file permissions

Sometimes the file permissions are changed externally,
just be sure to reset the permission if necessary.

7 years agoadd virtual_servers_init / free
Alan T. DeKok [Thu, 2 May 2019 16:22:40 +0000 (12:22 -0400)] 
add virtual_servers_init / free

so that we have explicit initializers && free functions.

7 years agocomplain about the program running, not "radiusd"
Alan T. DeKok [Thu, 2 May 2019 16:11:49 +0000 (12:11 -0400)] 
complain about the program running, not "radiusd"

7 years agomove initialization to modules_init()
Alan T. DeKok [Thu, 2 May 2019 16:10:20 +0000 (12:10 -0400)] 
move initialization to modules_init()

to mirror modules_free()

7 years agouse radclient->ipaddr, which may be a network
Alan T. DeKok [Thu, 2 May 2019 15:38:22 +0000 (11:38 -0400)] 
use radclient->ipaddr, which may be a network

7 years agoinitialize radclient src/dst IP address, and use that, too
Alan T. DeKok [Thu, 2 May 2019 15:35:05 +0000 (11:35 -0400)] 
initialize radclient src/dst IP address, and use that, too

7 years agouse "radclient" consistently
Alan T. DeKok [Thu, 2 May 2019 15:30:35 +0000 (11:30 -0400)] 
use "radclient" consistently

7 years agodo not enable PAM by default.
Alan T. DeKok [Thu, 2 May 2019 13:24:36 +0000 (09:24 -0400)] 
do not enable PAM by default.

We don't recommend it, as it's terrible.

7 years agofix compilation issue with older OpenSSL
Alan T. DeKok [Thu, 2 May 2019 12:59:54 +0000 (08:59 -0400)] 
fix compilation issue with older OpenSSL

7 years agoremove Autz-Type, etc. from here too
Alan T. DeKok [Thu, 2 May 2019 11:25:56 +0000 (07:25 -0400)] 
remove Autz-Type, etc. from here too

7 years agoadd "map" to the list of tests to run
Alan T. DeKok [Wed, 1 May 2019 22:30:22 +0000 (18:30 -0400)] 
add "map" to the list of tests to run

7 years agothese modules are RADIUS only
Alan T. DeKok [Wed, 1 May 2019 22:26:30 +0000 (18:26 -0400)] 
these modules are RADIUS only

7 years agoadd "fr_dict_t**" to module definitions
Alan T. DeKok [Wed, 1 May 2019 19:42:43 +0000 (15:42 -0400)] 
add "fr_dict_t**" to module definitions

so that modules which are protocol-specific can catch errors

7 years agoremove Autz-Type, etc.
Alan T. DeKok [Wed, 1 May 2019 19:26:41 +0000 (15:26 -0400)] 
remove Autz-Type, etc.

We now only have Auth-Type left in the server.

The dictionary entries are commented out, for both
ATTRIBUTEs and VALUEs

The code no longer references any of these types.

7 years agofix section_type_value to just be names
Alan T. DeKok [Wed, 1 May 2019 19:23:13 +0000 (15:23 -0400)] 
fix section_type_value to just be names

We no longer need or use FR_AUTZ_TYPE, etc.

7 years agoApparently whatever semi-globals OpenSSL leaves around, are still referenced by the...
Arran Cudbard-Bell [Thu, 2 May 2019 03:11:44 +0000 (23:11 -0400)] 
Apparently whatever semi-globals OpenSSL leaves around, are still referenced by the thread exit handlers

so... don't bind the memory and we'll just have to put up with the leaks.

7 years agoNo return value
Arran Cudbard-Bell [Thu, 2 May 2019 02:51:44 +0000 (22:51 -0400)] 
No return value

7 years agoPrint file and line and free ocurred on
Arran Cudbard-Bell [Thu, 2 May 2019 02:51:07 +0000 (22:51 -0400)] 
Print file and line and free ocurred on

7 years agoexfile.c: Fix missing talloc_free()
Jorge Pereira [Wed, 1 May 2019 17:21:24 +0000 (14:21 -0300)] 
exfile.c: Fix missing talloc_free()

7 years agomove to C99 initializers
Alan T. DeKok [Wed, 1 May 2019 17:26:17 +0000 (13:26 -0400)] 
move to C99 initializers

in preparation for adding fields to the compile struct

7 years agodo success on success
Alan T. DeKok [Wed, 1 May 2019 16:58:38 +0000 (12:58 -0400)] 
do success on success

7 years agoRevert "'.' is no longer allowed in attribute names"
Alan T. DeKok [Wed, 1 May 2019 16:13:33 +0000 (12:13 -0400)] 
Revert "'.' is no longer allowed in attribute names"

This reverts commit 0fc603fc01642dd5db6040473caf11f440458f47.

<sigh> Attr-1.2.3.4 issues

7 years agodon't necessarily "" quote strings with '.' in them.
Alan T. DeKok [Wed, 1 May 2019 15:30:53 +0000 (11:30 -0400)] 
don't necessarily "" quote strings with '.' in them.

This is to work around the new requirement that dictionary
attribute names can't have '.' in them.  But, the array of allowed
characters is used by the tmpl code to determine if it quotes
a string, so we've got to hack this up to counter the dictionary
changes.

Since the tmpl hack is already marked as a hack, it's better to
have hacks all in one place

7 years agomore notes
Alan T. DeKok [Wed, 1 May 2019 14:43:46 +0000 (10:43 -0400)] 
more notes

7 years agoadd tests for new keyword methods
Alan T. DeKok [Wed, 1 May 2019 14:34:34 +0000 (10:34 -0400)] 
add tests for new keyword methods

and prefer old-style methods (if they exist) to the new ones.
New methods can have wildcard methods which are different
from the old-style methods.

7 years agoallow modules to export named methods
Alan T. DeKok [Wed, 1 May 2019 14:19:40 +0000 (10:19 -0400)] 
allow modules to export named methods

7 years agosupport for calling any named method, not just "authorize", etc.
Alan T. DeKok [Tue, 30 Apr 2019 19:37:31 +0000 (15:37 -0400)] 
support for calling any named method, not just "authorize", etc.

the module_by_name_and_method() now returns a component *and*
name1 / name2 of the named method.  e.g. `sql.authorize` or
even `sql.session.start`.

It also returns the method function to call.  This is so that
the compiler doesn't need to troll through the module method list.
Instead, it's all buried inside of one lookup function.

7 years agofix so that the map unit tests work
Alan T. DeKok [Tue, 30 Apr 2019 19:27:12 +0000 (15:27 -0400)] 
fix so that the map unit tests work

7 years agoremove unnecessary functions
Alan T. DeKok [Tue, 30 Apr 2019 19:19:07 +0000 (15:19 -0400)] 
remove unnecessary functions

now that we've fixed the linking issues, we don't need this

7 years ago'.' is no longer allowed in attribute names
Alan T. DeKok [Tue, 30 Apr 2019 18:04:43 +0000 (14:04 -0400)] 
'.' is no longer allowed in attribute names

This is so that we can allow nested TLVs and groups, via

Foo.Bar = baz

7 years agoFix use after free issues on startup failure
Arran Cudbard-Bell [Tue, 30 Apr 2019 15:20:31 +0000 (11:20 -0400)] 
Fix use after free issues on startup failure

7 years agodoxygen
Alan T. DeKok [Tue, 30 Apr 2019 13:45:16 +0000 (09:45 -0400)] 
doxygen

7 years agodoxygen
Alan T. DeKok [Tue, 30 Apr 2019 13:43:46 +0000 (09:43 -0400)] 
doxygen

7 years agoword smithing
Alan T. DeKok [Tue, 30 Apr 2019 13:09:25 +0000 (09:09 -0400)] 
word smithing

7 years agoMerge pull request #2619 from mattrose/pipelines-pr
Alan DeKok [Tue, 30 Apr 2019 13:05:23 +0000 (09:05 -0400)] 
Merge pull request #2619 from mattrose/pipelines-pr

Add Jenkins continuous integration to FreeRADIUS

7 years agoTypo
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:56:32 +0000 (18:56 -0400)] 
Typo

7 years agoRework various elements of the module interface to the async API
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:52:07 +0000 (18:52 -0400)] 
Rework various elements of the module interface to the async API

7 years agoAdd macros to modify session-state
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:49:13 +0000 (18:49 -0400)] 
Add macros to modify session-state

7 years agoMap module_method_t pointers to strings
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:48:56 +0000 (18:48 -0400)] 
Map module_method_t pointers to strings

7 years agoSet vector source, and record ki/opc if we're acting as an AuC
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:41:18 +0000 (18:41 -0400)] 
Set vector source, and record ki/opc if we're acting as an AuC

7 years agoResync functions from previous commit
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:24:45 +0000 (18:24 -0400)] 
Resync functions from previous commit

7 years agoMilenage's auts function outputs sqn, it doesn't consume it
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:21:46 +0000 (18:21 -0400)] 
Milenage's auts function outputs sqn, it doesn't consume it

7 years agoArgs not used
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:20:29 +0000 (18:20 -0400)] 
Args not used

7 years agoRemove debugging statements
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:19:30 +0000 (18:19 -0400)] 
Remove debugging statements

7 years agoCrypto functions should take REQUEST * not eap_session_t *
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:14:25 +0000 (18:14 -0400)] 
Crypto functions should take REQUEST * not eap_session_t *

7 years agoAttr not used here yet
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:12:04 +0000 (18:12 -0400)] 
Attr not used here yet

7 years agoResolve additional attributes for EAP and EAP-AKA
Arran Cudbard-Bell [Mon, 29 Apr 2019 22:11:21 +0000 (18:11 -0400)] 
Resolve additional attributes for EAP and EAP-AKA

7 years agoAdd function to dump request data
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:35:32 +0000 (17:35 -0400)] 
Add function to dump request data

7 years agoFix docs and mapping between SIM_ANY_ID_REQ
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:34:54 +0000 (17:34 -0400)] 
Fix docs and mapping between SIM_ANY_ID_REQ

7 years agoCorrect ID macro order
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:34:36 +0000 (17:34 -0400)] 
Correct ID macro order

7 years agoAdd fr_rand_str to generate random strings
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:31:43 +0000 (17:31 -0400)] 
Add fr_rand_str to generate random strings

7 years agoUnused attributes
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:30:30 +0000 (17:30 -0400)] 
Unused attributes

7 years agoQualify EAP-Method macros
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:05:40 +0000 (17:05 -0400)] 
Qualify EAP-Method macros

7 years agoGroup failure rcodes for custom sections
Arran Cudbard-Bell [Mon, 29 Apr 2019 21:00:30 +0000 (17:00 -0400)] 
Group failure rcodes for custom sections

7 years agoPlace a marker where result stopped matching expected
Arran Cudbard-Bell [Mon, 29 Apr 2019 19:28:10 +0000 (15:28 -0400)] 
Place a marker where result stopped matching expected

7 years agoget rid of bare "name" for compilation.
Alan T. DeKok [Mon, 29 Apr 2019 19:44:19 +0000 (15:44 -0400)] 
get rid of bare "name" for compilation.

everything now should be section names

7 years agoallow for subsections to be used in other sections.
Alan T. DeKok [Mon, 29 Apr 2019 15:33:06 +0000 (11:33 -0400)] 
allow for subsections to be used in other sections.

Finishing off the previous commit.

7 years agocheck if a processing subsection exists
Alan T. DeKok [Mon, 29 Apr 2019 14:48:25 +0000 (10:48 -0400)] 
check if a processing subsection exists

so that we can do:

    recv Foo {
     ...
     session start {
     ...
     }
     ...
    }

instead of nonsense like "sql.authorize"

7 years agoadd API to check if a processing section exists
Alan T. DeKok [Mon, 29 Apr 2019 14:48:01 +0000 (10:48 -0400)] 
add API to check if a processing section exists

7 years agomove assignment to where it's used
Alan T. DeKok [Mon, 29 Apr 2019 14:32:20 +0000 (10:32 -0400)] 
move assignment to where it's used

7 years agoadd API to register names of processing sections
Alan T. DeKok [Mon, 29 Apr 2019 13:20:23 +0000 (09:20 -0400)] 
add API to register names of processing sections

so that we only need to instantiate module methods which are
used.

7 years agoremove "Auth-Type", etc. from section_type_value array
Alan T. DeKok [Mon, 29 Apr 2019 12:51:51 +0000 (08:51 -0400)] 
remove "Auth-Type", etc. from section_type_value array

7 years agomove "check type" to before value box parsing
Alan T. DeKok [Fri, 26 Apr 2019 21:50:13 +0000 (17:50 -0400)] 
move "check type" to before value box parsing

so we get a type error instead of a "cannot parse" error.

and add a few more data types which shouldn't have VALUEs

7 years agoForbid structural types from having values
Arran Cudbard-Bell [Fri, 26 Apr 2019 21:46:21 +0000 (17:46 -0400)] 
Forbid structural types from having values

7 years agoonly integer data types can have VALUEs
Alan T. DeKok [Fri, 26 Apr 2019 14:26:05 +0000 (10:26 -0400)] 
only integer data types can have VALUEs

7 years agoas posted to the list
Alan T. DeKok [Fri, 26 Apr 2019 14:09:54 +0000 (10:09 -0400)] 
as posted to the list

7 years agoERX-Acct-Request-Reason is "integer"
Alan T. DeKok [Fri, 26 Apr 2019 14:03:47 +0000 (10:03 -0400)] 
ERX-Acct-Request-Reason is "integer"

7 years agonotes on what to do before v4 is released
Alan T. DeKok [Fri, 26 Apr 2019 13:29:59 +0000 (09:29 -0400)] 
notes on what to do before v4 is released

7 years agorecursively print attributes of type FR_TYPE_GROUP
Alan T. DeKok [Fri, 26 Apr 2019 13:01:30 +0000 (09:01 -0400)] 
recursively print attributes of type FR_TYPE_GROUP

7 years agoadd fr_pair_cursor_recurse_child()
Alan T. DeKok [Fri, 26 Apr 2019 12:51:07 +0000 (08:51 -0400)] 
add fr_pair_cursor_recurse_child()

for attributes of type GROUP

7 years agoprint out groups, too
Alan T. DeKok [Fri, 26 Apr 2019 12:50:49 +0000 (08:50 -0400)] 
print out groups, too

7 years agoadd vp_group
Alan T. DeKok [Thu, 25 Apr 2019 20:50:34 +0000 (16:50 -0400)] 
add vp_group

7 years agobreak / detach / return are also keywords
Alan T. DeKok [Thu, 25 Apr 2019 14:22:41 +0000 (10:22 -0400)] 
break / detach / return are also keywords

7 years agono need to check for keyword twice
Alan T. DeKok [Thu, 25 Apr 2019 14:21:44 +0000 (10:21 -0400)] 
no need to check for keyword twice

and also check name2 for module names

7 years agoDoxygen
Arran Cudbard-Bell [Thu, 25 Apr 2019 02:24:21 +0000 (22:24 -0400)] 
Doxygen

7 years agoOr maybe this??
Arran Cudbard-Bell [Thu, 25 Apr 2019 02:13:29 +0000 (22:13 -0400)] 
Or maybe this??

7 years agoFix coverity badge in readme
Arran Cudbard-Bell [Thu, 25 Apr 2019 02:13:02 +0000 (22:13 -0400)] 
Fix coverity badge in readme

7 years agoAdd session-state support in subrequests
Arran Cudbard-Bell [Thu, 25 Apr 2019 02:09:55 +0000 (22:09 -0400)] 
Add session-state support in subrequests

With careful attention given to detached subrequests