]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
8 years agodon't install rlm_test or rlm_example
Alan T. DeKok [Wed, 13 Sep 2017 16:38:00 +0000 (12:38 -0400)] 
don't install rlm_test or rlm_example

8 years agouse "success" policy, instead of manual updates
Alan T. DeKok [Wed, 13 Sep 2017 15:57:14 +0000 (11:57 -0400)] 
use "success" policy, instead of manual updates

8 years agoadd parallel test
Alan T. DeKok [Wed, 13 Sep 2017 15:57:07 +0000 (11:57 -0400)] 
add parallel test

8 years agothe string shouldn't be 'foo', it should be the same as tmp-string-1
Alan T. DeKok [Wed, 13 Sep 2017 15:36:22 +0000 (11:36 -0400)] 
the string shouldn't be 'foo', it should be the same as tmp-string-1

and rename the failure cases so they don't overlap with earlier
numbers

8 years agodon't core dump when printing lists
Alan T. DeKok [Wed, 13 Sep 2017 15:34:20 +0000 (11:34 -0400)] 
don't core dump when printing lists

8 years agoset request->name
Alan T. DeKok [Wed, 13 Sep 2017 15:22:50 +0000 (11:22 -0400)] 
set request->name

8 years agoremove (async), as all virtual servers are now async
Alan T. DeKok [Wed, 13 Sep 2017 15:20:53 +0000 (11:20 -0400)] 
remove (async), as all virtual servers are now async

8 years agoadd "success" policy
Alan T. DeKok [Wed, 13 Sep 2017 14:10:32 +0000 (10:10 -0400)] 
add "success" policy

8 years agorename "create" to "subrequest"
Alan T. DeKok [Wed, 13 Sep 2017 13:40:39 +0000 (09:40 -0400)] 
rename "create" to "subrequest"

and start off all subrequests with no packet code

8 years agoUgh clang defines __GNUC__ too
Arran Cudbard-Bell [Wed, 13 Sep 2017 07:52:05 +0000 (14:52 +0700)] 
Ugh clang defines __GNUC__ too

8 years agoFix no-unknown-warning-option check
Arran Cudbard-Bell [Wed, 13 Sep 2017 07:41:24 +0000 (14:41 +0700)] 
Fix no-unknown-warning-option check

# Conflicts:
# configure

8 years agoMerge pull request #2062 from herwinw/docker-debian8
Arran Cudbard-Bell [Wed, 13 Sep 2017 07:06:29 +0000 (14:06 +0700)] 
Merge pull request #2062 from herwinw/docker-debian8

Fixed docker build for debian8

8 years agoFixed docker build for debian8 2062/head
Herwin Weststrate [Wed, 13 Sep 2017 06:11:14 +0000 (08:11 +0200)] 
Fixed docker build for debian8

A '-y' switch was required for the installation of libnl-dev

8 years agoIgnore unknown pragmas, don't warn about them
Arran Cudbard-Bell [Wed, 13 Sep 2017 04:36:01 +0000 (11:36 +0700)] 
Ignore unknown pragmas, don't warn about them

8 years agomore docs
Alan T. DeKok [Tue, 12 Sep 2017 18:13:03 +0000 (14:13 -0400)] 
more docs

8 years agonotes on upgrading
Alan T. DeKok [Tue, 12 Sep 2017 18:06:10 +0000 (14:06 -0400)] 
notes on upgrading

8 years agodocumentation on the "listen" sections
Alan T. DeKok [Tue, 12 Sep 2017 17:54:49 +0000 (13:54 -0400)] 
documentation on the "listen" sections

8 years agodpkg to install debs, not apt-get
Alan T. DeKok [Tue, 12 Sep 2017 16:15:25 +0000 (12:15 -0400)] 
dpkg to install debs, not apt-get

8 years agoreset WORKDIR
Alan T. DeKok [Tue, 12 Sep 2017 16:13:31 +0000 (12:13 -0400)] 
reset WORKDIR

8 years agoHmm... this is needed
Alan T. DeKok [Tue, 12 Sep 2017 15:57:25 +0000 (11:57 -0400)] 
Hmm... this is needed

but when the build runs, it can't find libnl.  Oh well

8 years agoit's libnl-dev on Ubuntu14
Alan T. DeKok [Tue, 12 Sep 2017 15:44:57 +0000 (11:44 -0400)] 
it's libnl-dev on Ubuntu14

8 years agoBuild newer libkqueue
Arran Cudbard-Bell [Tue, 12 Sep 2017 15:43:35 +0000 (22:43 +0700)] 
Build newer libkqueue

8 years agoset namespace
Alan T. DeKok [Tue, 12 Sep 2017 15:39:26 +0000 (11:39 -0400)] 
set namespace

8 years agoignore internal servers, and print out more helpful messages
Alan T. DeKok [Tue, 12 Sep 2017 15:09:09 +0000 (11:09 -0400)] 
ignore internal servers, and print out more helpful messages

8 years agoprint out which virtual server we're compiling
Alan T. DeKok [Tue, 12 Sep 2017 14:38:04 +0000 (10:38 -0400)] 
print out which virtual server we're compiling

8 years agowarn about unused "send" and "recv" sections.
Alan T. DeKok [Tue, 12 Sep 2017 14:24:13 +0000 (10:24 -0400)] 
warn about unused "send" and "recv" sections.

And if -C is used, it's a hard error

8 years agodisallow old-style virtual servers
Alan T. DeKok [Tue, 12 Sep 2017 14:08:58 +0000 (10:08 -0400)] 
disallow old-style virtual servers

8 years agodisallow create inside of create
Alan T. DeKok [Tue, 12 Sep 2017 13:50:43 +0000 (09:50 -0400)] 
disallow create inside of create

8 years agouse [..] for connection numbers
Alan T. DeKok [Tue, 12 Sep 2017 13:37:31 +0000 (09:37 -0400)] 
use [..] for connection numbers

so we don't confuse them with (...) request numbers

8 years agoset request name
Alan T. DeKok [Tue, 12 Sep 2017 13:37:12 +0000 (09:37 -0400)] 
set request name

8 years agoalways use internal "run one section" for child requests
Alan T. DeKok [Tue, 12 Sep 2017 13:24:37 +0000 (09:24 -0400)] 
always use internal "run one section" for child requests

which avoids all of the issues of using protocol-specific
handlers.  They're not... they're internal requests

8 years agobetter debug output for create / detach
Alan T. DeKok [Tue, 12 Sep 2017 13:20:25 +0000 (09:20 -0400)] 
better debug output for create / detach

8 years agoadd request->name as name of the request
Alan T. DeKok [Tue, 12 Sep 2017 11:57:46 +0000 (07:57 -0400)] 
add request->name as name of the request

for most requests, it's "%d".  For child requests it's "parent.child"
for sequence, it's "%d,parent"

That's awkward, but the simplest for now

8 years agobetter example of parsing multiple values in json
Arran Cudbard-Bell [Tue, 12 Sep 2017 02:49:17 +0000 (09:49 +0700)] 
better example of parsing multiple values in json

8 years agodon't call time functions
Alan T. DeKok [Mon, 11 Sep 2017 22:15:10 +0000 (18:15 -0400)] 
don't call time functions

8 years agoadd generic "run unlang" function
Alan T. DeKok [Mon, 11 Sep 2017 22:05:18 +0000 (18:05 -0400)] 
add generic "run unlang" function

and finalize the "detach" functionality

8 years agofix limits on allowed values
Alan T. DeKok [Mon, 11 Sep 2017 21:47:30 +0000 (17:47 -0400)] 
fix limits on allowed values

8 years agouse correct names
Alan T. DeKok [Mon, 11 Sep 2017 21:42:49 +0000 (17:42 -0400)] 
use correct names

8 years agono longer list "exec" in "send reply" sections
Alan T. DeKok [Mon, 11 Sep 2017 21:38:38 +0000 (17:38 -0400)] 
no longer list "exec" in "send reply" sections

Exec-Program-Wait no longer exists

8 years agodetached request has it's own logging struct
Alan T. DeKok [Mon, 11 Sep 2017 21:37:16 +0000 (17:37 -0400)] 
detached request has it's own logging struct

8 years agodetached requests are always runnable
Alan T. DeKok [Mon, 11 Sep 2017 21:31:46 +0000 (17:31 -0400)] 
detached requests are always runnable

8 years agoinitialize fields
Alan T. DeKok [Mon, 11 Sep 2017 21:29:53 +0000 (17:29 -0400)] 
initialize fields

8 years agotypo
Alan T. DeKok [Mon, 11 Sep 2017 21:27:38 +0000 (17:27 -0400)] 
typo

8 years agoadd "detach" keyword
Alan T. DeKok [Mon, 11 Sep 2017 19:53:57 +0000 (15:53 -0400)] 
add "detach" keyword

and functionality.  Its parent has to be "create"

8 years agoset child backlog when detaching
Alan T. DeKok [Mon, 11 Sep 2017 19:35:00 +0000 (15:35 -0400)] 
set child backlog when detaching

8 years agoallow for detachable children in "create" sections
Alan T. DeKok [Mon, 11 Sep 2017 19:27:09 +0000 (15:27 -0400)] 
allow for detachable children in "create" sections

8 years agoprovide for detached / detachable fake requests
Alan T. DeKok [Mon, 11 Sep 2017 19:18:08 +0000 (15:18 -0400)] 
provide for detached / detachable fake requests

8 years agoadd "detached" status to async && worker
Alan T. DeKok [Mon, 11 Sep 2017 18:50:10 +0000 (14:50 -0400)] 
add "detached" status to async && worker

so that the worker can run detached fake requests, and not send
actual replies

8 years agoadd rule to re-create module configure scripts
Alan T. DeKok [Mon, 11 Sep 2017 18:13:18 +0000 (14:13 -0400)] 
add rule to re-create module configure scripts

8 years agoRemove ASAN_SYMBOLIZER_PATH
Arran Cudbard-Bell [Sun, 10 Sep 2017 15:35:14 +0000 (22:35 +0700)] 
Remove ASAN_SYMBOLIZER_PATH

8 years agoInstall dependencies for eapol_test, so the EAP tests run...
Arran Cudbard-Bell [Sun, 10 Sep 2017 15:24:08 +0000 (22:24 +0700)] 
Install dependencies for eapol_test, so the EAP tests run...

8 years agoMake lldb available in the docker file
Arran Cudbard-Bell [Sun, 10 Sep 2017 13:00:26 +0000 (20:00 +0700)] 
Make lldb available in the docker file

8 years agoMight be no matching sections
Arran Cudbard-Bell [Sun, 10 Sep 2017 13:00:06 +0000 (20:00 +0700)] 
Might be no matching sections

8 years agoInstall a working version of clang too, and checkout the right respository
Arran Cudbard-Bell [Sun, 10 Sep 2017 10:31:40 +0000 (17:31 +0700)] 
Install a working version of clang too, and checkout the right respository

8 years agoPrint the failed command
Arran Cudbard-Bell [Sun, 10 Sep 2017 09:53:35 +0000 (16:53 +0700)] 
Print the failed command

8 years agoAdd Debian 9 docker file
Arran Cudbard-Bell [Sun, 10 Sep 2017 06:21:19 +0000 (13:21 +0700)] 
Add Debian 9 docker file

Clean up other docker files

We still need to fix apt packaging for libkqueue, as it doesn't seem to be available on debian.

cmake does produce packages for libraries/binaries but no -dev (headers).

8 years agomore descriptive debug output
Alan T. DeKok [Sun, 10 Sep 2017 01:15:55 +0000 (21:15 -0400)] 
more descriptive debug output

8 years agodon't parse things twice
Alan T. DeKok [Sun, 10 Sep 2017 01:13:31 +0000 (21:13 -0400)] 
don't parse things twice

8 years agoSanity check the size of the REQUEST structure
Arran Cudbard-Bell [Fri, 8 Sep 2017 14:33:52 +0000 (21:33 +0700)] 
Sanity check the size of the REQUEST structure

This helps detect where libraries were built with debug and binaries built without debug

8 years agoSwitch verb order for other VERIFY macros
Arran Cudbard-Bell [Fri, 8 Sep 2017 13:55:14 +0000 (20:55 +0700)] 
Switch verb order for other VERIFY macros

8 years agoInvert verb order for VERIFY_REQUEST
Arran Cudbard-Bell [Fri, 8 Sep 2017 13:49:14 +0000 (20:49 +0700)] 
Invert verb order for VERIFY_REQUEST

8 years agodumb assertion
Alan T. DeKok [Fri, 8 Sep 2017 13:42:41 +0000 (09:42 -0400)] 
dumb assertion

8 years agomore error messages
Alan T. DeKok [Fri, 8 Sep 2017 13:42:16 +0000 (09:42 -0400)] 
more error messages

8 years agomore error messages
Alan T. DeKok [Fri, 8 Sep 2017 13:38:29 +0000 (09:38 -0400)] 
more error messages

8 years agoMore const issues
Arran Cudbard-Bell [Fri, 8 Sep 2017 03:37:06 +0000 (10:37 +0700)] 
More const issues

8 years agoUse the correct macro to toggle talloc_get_type_abort_const
Arran Cudbard-Bell [Fri, 8 Sep 2017 03:22:15 +0000 (10:22 +0700)] 
Use the correct macro to toggle talloc_get_type_abort_const

8 years agoconst
Alan T. DeKok [Fri, 8 Sep 2017 01:19:15 +0000 (21:19 -0400)] 
const

8 years agoconst the module
Alan T. DeKok [Fri, 8 Sep 2017 01:02:43 +0000 (21:02 -0400)] 
const the module

8 years agoalmost consty enough
Alan T. DeKok [Fri, 8 Sep 2017 00:46:57 +0000 (20:46 -0400)] 
almost consty enough

8 years agomore consty const const
Alan T. DeKok [Fri, 8 Sep 2017 00:29:43 +0000 (20:29 -0400)] 
more consty const const

8 years agoif we can assign to it, it's not const
Alan T. DeKok [Fri, 8 Sep 2017 00:28:50 +0000 (20:28 -0400)] 
if we can assign to it, it's not const

8 years agoI love const
Alan T. DeKok [Fri, 8 Sep 2017 00:20:43 +0000 (20:20 -0400)] 
I love const

No...

8 years agomore stupid const const stupid
Alan T. DeKok [Fri, 8 Sep 2017 00:04:50 +0000 (20:04 -0400)] 
more stupid const const stupid

8 years agoconst
Alan T. DeKok [Thu, 7 Sep 2017 23:36:41 +0000 (19:36 -0400)] 
const

8 years agomore const for talloc_get_type_abort
Alan T. DeKok [Thu, 7 Sep 2017 21:42:14 +0000 (17:42 -0400)] 
more const for talloc_get_type_abort

It looks like we'll be at this for a while....

8 years agodifferent way of hacking const issues
Alan T. DeKok [Thu, 7 Sep 2017 19:45:44 +0000 (15:45 -0400)] 
different way of hacking const issues

in non-debug bilds, talloc_get_type_abort() is just a cast.
but if the variable is 'const', it's talloc_type is the *non-const*
version.  So we can't just add 'const' to the arguments to
talloc_get_type_abort().  That way the debug builds would fail...

the solution seems to be jist removing the calls entirely in
non-debug builds.

8 years agomore const fixes
Alan T. DeKok [Thu, 7 Sep 2017 18:05:38 +0000 (14:05 -0400)] 
more const fixes

8 years agoconst issues
Alan T. DeKok [Thu, 7 Sep 2017 17:58:47 +0000 (13:58 -0400)] 
const issues

8 years agoparse FLOAT32
Alan T. DeKok [Thu, 7 Sep 2017 17:21:45 +0000 (13:21 -0400)] 
parse FLOAT32

8 years agonotes on future async
Alan T. DeKok [Thu, 7 Sep 2017 17:12:42 +0000 (13:12 -0400)] 
notes on future async

8 years agoFix placement of return
Arran Cudbard-Bell [Thu, 7 Sep 2017 15:33:27 +0000 (22:33 +0700)] 
Fix placement of return

8 years agoWe don't need a program to execute
Arran Cudbard-Bell [Thu, 7 Sep 2017 06:03:40 +0000 (13:03 +0700)] 
We don't need a program to execute

Checking for inst->program needs to be done at runtime, because rlm_exec is often used just for its xlat function.

8 years agoUse SSL_CTX_set_max_proto_version/SSL_CTX_set_min_proto_version where available
Arran Cudbard-Bell [Thu, 7 Sep 2017 05:07:02 +0000 (12:07 +0700)] 
Use SSL_CTX_set_max_proto_version/SSL_CTX_set_min_proto_version where available

Debian OpenSSL may disable TLS < 1.2 by default.

See here for details:

https://lists.debian.org/debian-devel-announce/2017/08/msg00004.html

Kurt Roeckx (author of the patch) stated that the original patch was modified so that
the version could still be changed with SSL_CTX_set_max_proto_version and SSL_CTX_set_min_proto_version.

But we still needed to add support for those functions.

8 years agotypo
Alan T. DeKok [Wed, 6 Sep 2017 23:02:11 +0000 (19:02 -0400)] 
typo

8 years agouse the correct name
Alan T. DeKok [Wed, 6 Sep 2017 22:03:34 +0000 (18:03 -0400)] 
use the correct name

8 years agoNOTE_EXITSTATUS isn't always available
Alan T. DeKok [Wed, 6 Sep 2017 22:02:26 +0000 (18:02 -0400)] 
NOTE_EXITSTATUS isn't always available

8 years agoadded support for child PIDs to the event list.
Alan T. DeKok [Wed, 6 Sep 2017 19:56:17 +0000 (15:56 -0400)] 
added support for child PIDs to the event list.

Entirely untested...

8 years agodon't do magic for post-auth
Alan T. DeKok [Wed, 6 Sep 2017 19:16:15 +0000 (15:16 -0400)] 
don't do magic for post-auth

rely on the unlang interpreter to do the right thing, and set
request->reply->code as appropriate

8 years agomore cleanups
Alan T. DeKok [Wed, 6 Sep 2017 19:15:29 +0000 (15:15 -0400)] 
more cleanups

8 years agoremove packet_type. Use unlang instead
Alan T. DeKok [Wed, 6 Sep 2017 19:13:20 +0000 (15:13 -0400)] 
remove packet_type.  Use unlang instead

8 years agoremove Exec-Program and Exec-Program-Wait functionality
Alan T. DeKok [Wed, 6 Sep 2017 19:11:09 +0000 (15:11 -0400)] 
remove Exec-Program and Exec-Program-Wait functionality

8 years agoremove MINGW macros
Alan T. DeKok [Wed, 6 Sep 2017 18:46:52 +0000 (14:46 -0400)] 
remove MINGW macros

8 years agoadd async_safe to tokenized xlat
Alan T. DeKok [Wed, 6 Sep 2017 18:37:40 +0000 (14:37 -0400)] 
add async_safe to tokenized xlat

so we can track if an expansion is async-safe

8 years agoadd async flag to xlat_register
Alan T. DeKok [Wed, 6 Sep 2017 18:29:10 +0000 (14:29 -0400)] 
add async flag to xlat_register

8 years agoadd UNUSED
Alan T. DeKok [Wed, 6 Sep 2017 18:28:54 +0000 (14:28 -0400)] 
add UNUSED

8 years agoword smithing
Alan T. DeKok [Wed, 6 Sep 2017 15:35:04 +0000 (11:35 -0400)] 
word smithing

8 years agoWARN on using %{Response-Packet-Type}
Alan T. DeKok [Wed, 6 Sep 2017 12:38:33 +0000 (08:38 -0400)] 
WARN on using %{Response-Packet-Type}

they should really use %{reply:Packet-Type}

8 years agoremove expansion for %{Response-Packet-Type}
Alan T. DeKok [Wed, 6 Sep 2017 12:38:11 +0000 (08:38 -0400)] 
remove expansion for %{Response-Packet-Type}

it's already handled by the server core

8 years agomove run-time checks to asserts
Alan T. DeKok [Tue, 5 Sep 2017 15:50:46 +0000 (11:50 -0400)] 
move run-time checks to asserts

8 years agomanually mark things as allow empty group or not
Alan T. DeKok [Tue, 5 Sep 2017 15:47:21 +0000 (11:47 -0400)] 
manually mark things as allow empty group or not