]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Alan T. DeKok [Wed, 13 Sep 2017 16:38:00 +0000 (12:38 -0400)]
don't install rlm_test or rlm_example
Alan T. DeKok [Wed, 13 Sep 2017 15:57:14 +0000 (11:57 -0400)]
use "success" policy, instead of manual updates
Alan T. DeKok [Wed, 13 Sep 2017 15:57:07 +0000 (11:57 -0400)]
add parallel test
Alan T. DeKok [Wed, 13 Sep 2017 15:36:22 +0000 (11:36 -0400)]
the string shouldn't be 'foo', it should be the same as tmp-string-1
and rename the failure cases so they don't overlap with earlier
numbers
Alan T. DeKok [Wed, 13 Sep 2017 15:34:20 +0000 (11:34 -0400)]
don't core dump when printing lists
Alan T. DeKok [Wed, 13 Sep 2017 15:22:50 +0000 (11:22 -0400)]
set request->name
Alan T. DeKok [Wed, 13 Sep 2017 15:20:53 +0000 (11:20 -0400)]
remove (async), as all virtual servers are now async
Alan T. DeKok [Wed, 13 Sep 2017 14:10:32 +0000 (10:10 -0400)]
add "success" policy
Alan T. DeKok [Wed, 13 Sep 2017 13:40:39 +0000 (09:40 -0400)]
rename "create" to "subrequest"
and start off all subrequests with no packet code
Arran Cudbard-Bell [Wed, 13 Sep 2017 07:52:05 +0000 (14:52 +0700)]
Ugh clang defines __GNUC__ too
Arran Cudbard-Bell [Wed, 13 Sep 2017 07:41:24 +0000 (14:41 +0700)]
Fix no-unknown-warning-option check
# Conflicts:
# configure
Arran Cudbard-Bell [Wed, 13 Sep 2017 07:06:29 +0000 (14:06 +0700)]
Merge pull request #2062 from herwinw/docker-debian8
Fixed docker build for debian8
Herwin Weststrate [Wed, 13 Sep 2017 06:11:14 +0000 (08:11 +0200)]
Fixed docker build for debian8
A '-y' switch was required for the installation of libnl-dev
Arran Cudbard-Bell [Wed, 13 Sep 2017 04:36:01 +0000 (11:36 +0700)]
Ignore unknown pragmas, don't warn about them
Alan T. DeKok [Tue, 12 Sep 2017 18:13:03 +0000 (14:13 -0400)]
more docs
Alan T. DeKok [Tue, 12 Sep 2017 18:06:10 +0000 (14:06 -0400)]
notes on upgrading
Alan T. DeKok [Tue, 12 Sep 2017 17:54:49 +0000 (13:54 -0400)]
documentation on the "listen" sections
Alan T. DeKok [Tue, 12 Sep 2017 16:15:25 +0000 (12:15 -0400)]
dpkg to install debs, not apt-get
Alan T. DeKok [Tue, 12 Sep 2017 16:13:31 +0000 (12:13 -0400)]
reset WORKDIR
Alan T. DeKok [Tue, 12 Sep 2017 15:57:25 +0000 (11:57 -0400)]
Hmm... this is needed
but when the build runs, it can't find libnl. Oh well
Alan T. DeKok [Tue, 12 Sep 2017 15:44:57 +0000 (11:44 -0400)]
it's libnl-dev on Ubuntu14
Arran Cudbard-Bell [Tue, 12 Sep 2017 15:43:35 +0000 (22:43 +0700)]
Build newer libkqueue
Alan T. DeKok [Tue, 12 Sep 2017 15:39:26 +0000 (11:39 -0400)]
set namespace
Alan T. DeKok [Tue, 12 Sep 2017 15:09:09 +0000 (11:09 -0400)]
ignore internal servers, and print out more helpful messages
Alan T. DeKok [Tue, 12 Sep 2017 14:38:04 +0000 (10:38 -0400)]
print out which virtual server we're compiling
Alan T. DeKok [Tue, 12 Sep 2017 14:24:13 +0000 (10:24 -0400)]
warn about unused "send" and "recv" sections.
And if -C is used, it's a hard error
Alan T. DeKok [Tue, 12 Sep 2017 14:08:58 +0000 (10:08 -0400)]
disallow old-style virtual servers
Alan T. DeKok [Tue, 12 Sep 2017 13:50:43 +0000 (09:50 -0400)]
disallow create inside of create
Alan T. DeKok [Tue, 12 Sep 2017 13:37:31 +0000 (09:37 -0400)]
use [..] for connection numbers
so we don't confuse them with (...) request numbers
Alan T. DeKok [Tue, 12 Sep 2017 13:37:12 +0000 (09:37 -0400)]
set request name
Alan T. DeKok [Tue, 12 Sep 2017 13:24:37 +0000 (09:24 -0400)]
always use internal "run one section" for child requests
which avoids all of the issues of using protocol-specific
handlers. They're not... they're internal requests
Alan T. DeKok [Tue, 12 Sep 2017 13:20:25 +0000 (09:20 -0400)]
better debug output for create / detach
Alan T. DeKok [Tue, 12 Sep 2017 11:57:46 +0000 (07:57 -0400)]
add request->name as name of the request
for most requests, it's "%d". For child requests it's "parent.child"
for sequence, it's "%d,parent"
That's awkward, but the simplest for now
Arran Cudbard-Bell [Tue, 12 Sep 2017 02:49:17 +0000 (09:49 +0700)]
better example of parsing multiple values in json
Alan T. DeKok [Mon, 11 Sep 2017 22:15:10 +0000 (18:15 -0400)]
don't call time functions
Alan T. DeKok [Mon, 11 Sep 2017 22:05:18 +0000 (18:05 -0400)]
add generic "run unlang" function
and finalize the "detach" functionality
Alan T. DeKok [Mon, 11 Sep 2017 21:47:30 +0000 (17:47 -0400)]
fix limits on allowed values
Alan T. DeKok [Mon, 11 Sep 2017 21:42:49 +0000 (17:42 -0400)]
use correct names
Alan T. DeKok [Mon, 11 Sep 2017 21:38:38 +0000 (17:38 -0400)]
no longer list "exec" in "send reply" sections
Exec-Program-Wait no longer exists
Alan T. DeKok [Mon, 11 Sep 2017 21:37:16 +0000 (17:37 -0400)]
detached request has it's own logging struct
Alan T. DeKok [Mon, 11 Sep 2017 21:31:46 +0000 (17:31 -0400)]
detached requests are always runnable
Alan T. DeKok [Mon, 11 Sep 2017 21:29:53 +0000 (17:29 -0400)]
initialize fields
Alan T. DeKok [Mon, 11 Sep 2017 21:27:38 +0000 (17:27 -0400)]
typo
Alan T. DeKok [Mon, 11 Sep 2017 19:53:57 +0000 (15:53 -0400)]
add "detach" keyword
and functionality. Its parent has to be "create"
Alan T. DeKok [Mon, 11 Sep 2017 19:35:00 +0000 (15:35 -0400)]
set child backlog when detaching
Alan T. DeKok [Mon, 11 Sep 2017 19:27:09 +0000 (15:27 -0400)]
allow for detachable children in "create" sections
Alan T. DeKok [Mon, 11 Sep 2017 19:18:08 +0000 (15:18 -0400)]
provide for detached / detachable fake requests
Alan T. DeKok [Mon, 11 Sep 2017 18:50:10 +0000 (14:50 -0400)]
add "detached" status to async && worker
so that the worker can run detached fake requests, and not send
actual replies
Alan T. DeKok [Mon, 11 Sep 2017 18:13:18 +0000 (14:13 -0400)]
add rule to re-create module configure scripts
Arran Cudbard-Bell [Sun, 10 Sep 2017 15:35:14 +0000 (22:35 +0700)]
Remove ASAN_SYMBOLIZER_PATH
Arran Cudbard-Bell [Sun, 10 Sep 2017 15:24:08 +0000 (22:24 +0700)]
Install dependencies for eapol_test, so the EAP tests run...
Arran Cudbard-Bell [Sun, 10 Sep 2017 13:00:26 +0000 (20:00 +0700)]
Make lldb available in the docker file
Arran Cudbard-Bell [Sun, 10 Sep 2017 13:00:06 +0000 (20:00 +0700)]
Might be no matching sections
Arran Cudbard-Bell [Sun, 10 Sep 2017 10:31:40 +0000 (17:31 +0700)]
Install a working version of clang too, and checkout the right respository
Arran Cudbard-Bell [Sun, 10 Sep 2017 09:53:35 +0000 (16:53 +0700)]
Print the failed command
Arran Cudbard-Bell [Sun, 10 Sep 2017 06:21:19 +0000 (13:21 +0700)]
Add Debian 9 docker file
Clean up other docker files
We still need to fix apt packaging for libkqueue, as it doesn't seem to be available on debian.
cmake does produce packages for libraries/binaries but no -dev (headers).
Alan T. DeKok [Sun, 10 Sep 2017 01:15:55 +0000 (21:15 -0400)]
more descriptive debug output
Alan T. DeKok [Sun, 10 Sep 2017 01:13:31 +0000 (21:13 -0400)]
don't parse things twice
Arran Cudbard-Bell [Fri, 8 Sep 2017 14:33:52 +0000 (21:33 +0700)]
Sanity check the size of the REQUEST structure
This helps detect where libraries were built with debug and binaries built without debug
Arran Cudbard-Bell [Fri, 8 Sep 2017 13:55:14 +0000 (20:55 +0700)]
Switch verb order for other VERIFY macros
Arran Cudbard-Bell [Fri, 8 Sep 2017 13:49:14 +0000 (20:49 +0700)]
Invert verb order for VERIFY_REQUEST
Alan T. DeKok [Fri, 8 Sep 2017 13:42:41 +0000 (09:42 -0400)]
dumb assertion
Alan T. DeKok [Fri, 8 Sep 2017 13:42:16 +0000 (09:42 -0400)]
more error messages
Alan T. DeKok [Fri, 8 Sep 2017 13:38:29 +0000 (09:38 -0400)]
more error messages
Arran Cudbard-Bell [Fri, 8 Sep 2017 03:37:06 +0000 (10:37 +0700)]
More const issues
Arran Cudbard-Bell [Fri, 8 Sep 2017 03:22:15 +0000 (10:22 +0700)]
Use the correct macro to toggle talloc_get_type_abort_const
Alan T. DeKok [Fri, 8 Sep 2017 01:19:15 +0000 (21:19 -0400)]
const
Alan T. DeKok [Fri, 8 Sep 2017 01:02:43 +0000 (21:02 -0400)]
const the module
Alan T. DeKok [Fri, 8 Sep 2017 00:46:57 +0000 (20:46 -0400)]
almost consty enough
Alan T. DeKok [Fri, 8 Sep 2017 00:29:43 +0000 (20:29 -0400)]
more consty const const
Alan T. DeKok [Fri, 8 Sep 2017 00:28:50 +0000 (20:28 -0400)]
if we can assign to it, it's not const
Alan T. DeKok [Fri, 8 Sep 2017 00:20:43 +0000 (20:20 -0400)]
I love const
No...
Alan T. DeKok [Fri, 8 Sep 2017 00:04:50 +0000 (20:04 -0400)]
more stupid const const stupid
Alan T. DeKok [Thu, 7 Sep 2017 23:36:41 +0000 (19:36 -0400)]
const
Alan T. DeKok [Thu, 7 Sep 2017 21:42:14 +0000 (17:42 -0400)]
more const for talloc_get_type_abort
It looks like we'll be at this for a while....
Alan T. DeKok [Thu, 7 Sep 2017 19:45:44 +0000 (15:45 -0400)]
different way of hacking const issues
in non-debug bilds, talloc_get_type_abort() is just a cast.
but if the variable is 'const', it's talloc_type is the *non-const*
version. So we can't just add 'const' to the arguments to
talloc_get_type_abort(). That way the debug builds would fail...
the solution seems to be jist removing the calls entirely in
non-debug builds.
Alan T. DeKok [Thu, 7 Sep 2017 18:05:38 +0000 (14:05 -0400)]
more const fixes
Alan T. DeKok [Thu, 7 Sep 2017 17:58:47 +0000 (13:58 -0400)]
const issues
Alan T. DeKok [Thu, 7 Sep 2017 17:21:45 +0000 (13:21 -0400)]
parse FLOAT32
Alan T. DeKok [Thu, 7 Sep 2017 17:12:42 +0000 (13:12 -0400)]
notes on future async
Arran Cudbard-Bell [Thu, 7 Sep 2017 15:33:27 +0000 (22:33 +0700)]
Fix placement of return
Arran Cudbard-Bell [Thu, 7 Sep 2017 06:03:40 +0000 (13:03 +0700)]
We don't need a program to execute
Checking for inst->program needs to be done at runtime, because rlm_exec is often used just for its xlat function.
Arran Cudbard-Bell [Thu, 7 Sep 2017 05:07:02 +0000 (12:07 +0700)]
Use SSL_CTX_set_max_proto_version/SSL_CTX_set_min_proto_version where available
Debian OpenSSL may disable TLS < 1.2 by default.
See here for details:
https://lists.debian.org/debian-devel-announce/2017/08/msg00004.html
Kurt Roeckx (author of the patch) stated that the original patch was modified so that
the version could still be changed with SSL_CTX_set_max_proto_version and SSL_CTX_set_min_proto_version.
But we still needed to add support for those functions.
Alan T. DeKok [Wed, 6 Sep 2017 23:02:11 +0000 (19:02 -0400)]
typo
Alan T. DeKok [Wed, 6 Sep 2017 22:03:34 +0000 (18:03 -0400)]
use the correct name
Alan T. DeKok [Wed, 6 Sep 2017 22:02:26 +0000 (18:02 -0400)]
NOTE_EXITSTATUS isn't always available
Alan T. DeKok [Wed, 6 Sep 2017 19:56:17 +0000 (15:56 -0400)]
added support for child PIDs to the event list.
Entirely untested...
Alan T. DeKok [Wed, 6 Sep 2017 19:16:15 +0000 (15:16 -0400)]
don't do magic for post-auth
rely on the unlang interpreter to do the right thing, and set
request->reply->code as appropriate
Alan T. DeKok [Wed, 6 Sep 2017 19:15:29 +0000 (15:15 -0400)]
more cleanups
Alan T. DeKok [Wed, 6 Sep 2017 19:13:20 +0000 (15:13 -0400)]
remove packet_type. Use unlang instead
Alan T. DeKok [Wed, 6 Sep 2017 19:11:09 +0000 (15:11 -0400)]
remove Exec-Program and Exec-Program-Wait functionality
Alan T. DeKok [Wed, 6 Sep 2017 18:46:52 +0000 (14:46 -0400)]
remove MINGW macros
Alan T. DeKok [Wed, 6 Sep 2017 18:37:40 +0000 (14:37 -0400)]
add async_safe to tokenized xlat
so we can track if an expansion is async-safe
Alan T. DeKok [Wed, 6 Sep 2017 18:29:10 +0000 (14:29 -0400)]
add async flag to xlat_register
Alan T. DeKok [Wed, 6 Sep 2017 18:28:54 +0000 (14:28 -0400)]
add UNUSED
Alan T. DeKok [Wed, 6 Sep 2017 15:35:04 +0000 (11:35 -0400)]
word smithing
Alan T. DeKok [Wed, 6 Sep 2017 12:38:33 +0000 (08:38 -0400)]
WARN on using %{Response-Packet-Type}
they should really use %{reply:Packet-Type}
Alan T. DeKok [Wed, 6 Sep 2017 12:38:11 +0000 (08:38 -0400)]
remove expansion for %{Response-Packet-Type}
it's already handled by the server core
Alan T. DeKok [Tue, 5 Sep 2017 15:50:46 +0000 (11:50 -0400)]
move run-time checks to asserts
Alan T. DeKok [Tue, 5 Sep 2017 15:47:21 +0000 (11:47 -0400)]
manually mark things as allow empty group or not