]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
2 years agothis code is no longer necessary
Alan T. DeKok [Fri, 10 Mar 2023 15:24:36 +0000 (10:24 -0500)] 
this code is no longer necessary

all of the relevant work has been ported to the new framework.

2 years agoavoid a bounce through the event loop in fr_network_listen_inject()
Alan T. DeKok [Thu, 9 Mar 2023 23:21:21 +0000 (18:21 -0500)] 
avoid a bounce through the event loop in fr_network_listen_inject()

2 years agothere's no need for the injected packet to be writable
Alan T. DeKok [Fri, 10 Mar 2023 14:30:04 +0000 (09:30 -0500)] 
there's no need for the injected packet to be writable

2 years agoCorrect alloc_update and alloc_requested queries for sqlite
Nick Porter [Tue, 13 Apr 2021 08:59:09 +0000 (09:59 +0100)] 
Correct alloc_update and alloc_requested queries for sqlite

2 years agoExample use of per call module enviroment with rlm_files
Nick Porter [Fri, 3 Mar 2023 17:04:42 +0000 (17:04 +0000)] 
Example use of per call module enviroment with rlm_files

More work is needed in the module to make it fully protocol agnostic,
but this demostrates the use of the module environment to evaluate
tmpls per call and have the expanded tmpls be available before the
module is called.

2 years agoExpand module environment tmpls before calling module methods
Nick Porter [Fri, 3 Mar 2023 16:55:45 +0000 (16:55 +0000)] 
Expand module environment tmpls before calling module methods

2 years agoAdd module_env_value_parse() to parse tmpl expansions before module calls
Nick Porter [Fri, 3 Mar 2023 16:52:41 +0000 (16:52 +0000)] 
Add module_env_value_parse() to parse tmpl expansions before module calls

2 years agoAdd entries to unlang_frame_state_module_t to track tmpl expansion
Nick Porter [Fri, 3 Mar 2023 15:29:44 +0000 (15:29 +0000)] 
Add entries to unlang_frame_state_module_t to track tmpl expansion

2 years agoDefine helper macros for building module_env_t
Nick Porter [Fri, 3 Mar 2023 15:28:49 +0000 (15:28 +0000)] 
Define helper macros for building module_env_t

2 years agoNo need to get thread data if there is a forced return code
Nick Porter [Tue, 28 Feb 2023 15:37:57 +0000 (15:37 +0000)] 
No need to get thread data if there is a forced return code

2 years agoAdd env_data to module_ctx, unlang_module_event and unlang_frame_state_module
Nick Porter [Tue, 28 Feb 2023 11:05:22 +0000 (11:05 +0000)] 
Add env_data to module_ctx, unlang_module_event and unlang_frame_state_module

A pointer to the evaluated per-call environment data

2 years agoParse method_env when compiling modules
Nick Porter [Tue, 28 Feb 2023 10:44:03 +0000 (10:44 +0000)] 
Parse method_env when compiling modules

2 years agoDefine method_env_count()
Nick Porter [Tue, 7 Mar 2023 17:48:39 +0000 (17:48 +0000)] 
Define method_env_count()

2 years agoDefine method_env_parse()
Nick Porter [Tue, 28 Feb 2023 10:20:17 +0000 (10:20 +0000)] 
Define method_env_parse()

2 years agoUpdate module_rlm_by_name_and_method() to return method_env
Nick Porter [Tue, 28 Feb 2023 10:18:46 +0000 (10:18 +0000)] 
Update module_rlm_by_name_and_method() to return method_env

2 years agoDefine module_method_env_t and add to module_method_name_t
Nick Porter [Mon, 27 Feb 2023 15:59:20 +0000 (15:59 +0000)] 
Define module_method_env_t and add to module_method_name_t

Links lists of module_env_t with module methods and the data structures
which the evaluated tmpls will populate.

2 years agoDefine module_env_parsed_t to hold parsed module_env_t
Nick Porter [Mon, 27 Feb 2023 15:52:25 +0000 (15:52 +0000)] 
Define module_env_parsed_t to hold parsed module_env_t

2 years agoDefine module_env_t
Nick Porter [Mon, 27 Feb 2023 15:50:53 +0000 (15:50 +0000)] 
Define module_env_t

To hold rules for parsing config items into call specific tmpls.

2 years agoGet rid of unresolved explicit link request warning (#4925)
James Jones [Fri, 10 Mar 2023 16:53:51 +0000 (10:53 -0600)] 
Get rid of unresolved explicit link request warning (#4925)

It turns out that the link requests we use that work are to types,
values, and functions known at the time of the link request. This
doesn't work for not-yet-seen function parameters.

2 years agoFix typo in DHCPv4 schema
Arran Cudbard-Bell [Thu, 9 Mar 2023 22:55:21 +0000 (16:55 -0600)] 
Fix typo in DHCPv4 schema

2 years agoIt's OK to have multiple Framed-IPv6-Address attributes
Arran Cudbard-Bell [Thu, 9 Mar 2023 22:55:06 +0000 (16:55 -0600)] 
It's OK to have multiple Framed-IPv6-Address attributes

2 years agocall bfd_session_process() when receiving a packet
Alan T. DeKok [Thu, 9 Mar 2023 22:26:15 +0000 (17:26 -0500)] 
call bfd_session_process() when receiving a packet

for now, we run the unlang sections only when there's a state
change on receiving a packet.

We don't run unlang when receiving the continual "up" packets.

We don't run unlang when sending packets.

2 years agoerror message on auth failed
Alan T. DeKok [Thu, 9 Mar 2023 22:25:06 +0000 (17:25 -0500)] 
error message on auth failed

2 years agoRFC 5880 Section 6.8.3 says "seconds", not "usec"
Alan T. DeKok [Thu, 9 Mar 2023 22:23:17 +0000 (17:23 -0500)] 
RFC 5880 Section 6.8.3 says "seconds", not "usec"

2 years agoadd fr_bfd_packet_ok() and use it in proto_bfd_udp
Alan T. DeKok [Thu, 9 Mar 2023 22:11:46 +0000 (17:11 -0500)] 
add fr_bfd_packet_ok() and use it in proto_bfd_udp

2 years agoauthentication type updates
Alan T. DeKok [Thu, 9 Mar 2023 15:41:44 +0000 (10:41 -0500)] 
authentication type updates

implement simple auth type

enforce password length restrictions

2 years agoTurn off caller graph for strlcpy() (#4924)
James Jones [Thu, 9 Mar 2023 21:19:02 +0000 (15:19 -0600)] 
Turn off caller graph for strlcpy() (#4924)

We get the "missing" version of strlcpy() on Linux, which means
the other @hidecallergraph has to be in src/include/missing-h,
from which src/include/missing.h, which doxygen looks at, is
generated.

2 years agoAdd src/modules/rlm_ocsp/oscp.c to EXCLUDE (#4922)
James Jones [Thu, 9 Mar 2023 20:33:00 +0000 (14:33 -0600)] 
Add src/modules/rlm_ocsp/oscp.c to EXCLUDE (#4922)

That file currently isn't compiled, so there's no point in
having it in doxygen generated documentation.

2 years agoSkip the *call* graph (not caller) for xlat_init() (#4923)
James Jones [Thu, 9 Mar 2023 20:32:48 +0000 (14:32 -0600)] 
Skip the *call* graph (not caller) for xlat_init() (#4923)

2 years agoCorrect action name
Nick Porter [Thu, 9 Mar 2023 17:53:31 +0000 (17:53 +0000)] 
Correct action name

2 years agoTypo
Nick Porter [Thu, 9 Mar 2023 17:34:26 +0000 (17:34 +0000)] 
Typo

2 years agoRework documentation CI job 4921/head
Nick Porter [Thu, 9 Mar 2023 16:34:55 +0000 (16:34 +0000)] 
Rework documentation CI job

Split into two jobs, where the github publishing is only in the second.

2 years agoSimpler...
Arran Cudbard-Bell [Thu, 9 Mar 2023 15:30:19 +0000 (09:30 -0600)] 
Simpler...

2 years agoDon't leak memory
Nick Porter [Thu, 9 Mar 2023 11:41:34 +0000 (11:41 +0000)] 
Don't leak memory

2 years agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar
github-actions[bot] [Thu, 9 Mar 2023 09:34:52 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar

2 years agoScheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar
github-actions[bot] [Thu, 9 Mar 2023 09:34:49 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar

2 years agoScheduled fuzzing: Update src/tests/fuzzer-corpus/util.tar
github-actions[bot] [Thu, 9 Mar 2023 09:34:46 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/util.tar

2 years agoScheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar
github-actions[bot] [Thu, 9 Mar 2023 09:34:42 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar

2 years agoScheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar
github-actions[bot] [Thu, 9 Mar 2023 09:34:39 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar

2 years agoScheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar
github-actions[bot] [Thu, 9 Mar 2023 09:34:37 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar

2 years agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar
github-actions[bot] [Thu, 9 Mar 2023 09:34:34 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar

2 years agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar
github-actions[bot] [Thu, 9 Mar 2023 09:34:30 +0000 (09:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar

2 years agothere's no need to set inst->el
Alan T. DeKok [Wed, 8 Mar 2023 22:05:44 +0000 (17:05 -0500)] 
there's no need to set inst->el

2 years agomore secret checks
Alan T. DeKok [Wed, 8 Mar 2023 21:38:31 +0000 (16:38 -0500)] 
more secret checks

2 years agoonly set secret_len if there's a secret
Alan T. DeKok [Wed, 8 Mar 2023 21:14:00 +0000 (16:14 -0500)] 
only set secret_len if there's a secret

and secrets may be binary blobs

2 years agofinal changes to allow the state machine to compile.
Alan T. DeKok [Wed, 8 Mar 2023 20:27:09 +0000 (15:27 -0500)] 
final changes to allow the state machine to compile.

Next step is to plug it into the mod_read() functions, and then
figure out how to get triggers and "packets to send" over to the
process handler.

2 years agomore checks for bad BFD packets in the mod_read() function
Alan T. DeKok [Wed, 8 Mar 2023 19:37:47 +0000 (14:37 -0500)] 
more checks for bad BFD packets in the mod_read() function

2 years agoscripts to use gdb && lldb from the source tree
Alan T. DeKok [Tue, 7 Mar 2023 20:40:15 +0000 (15:40 -0500)] 
scripts to use gdb && lldb from the source tree

2 years agotodo note
Alan T. DeKok [Tue, 7 Mar 2023 20:25:10 +0000 (15:25 -0500)] 
todo note

2 years agoprint out source IP of received packet, too
Alan T. DeKok [Tue, 7 Mar 2023 20:23:36 +0000 (15:23 -0500)] 
print out source IP of received packet, too

2 years agoparse peer port, and actually send packets
Alan T. DeKok [Tue, 7 Mar 2023 20:05:22 +0000 (15:05 -0500)] 
parse peer port, and actually send packets

2 years agoauth_type handling
Alan T. DeKok [Tue, 7 Mar 2023 19:41:18 +0000 (14:41 -0500)] 
auth_type handling

parse it, verify it, verify the secret, and sign the packets

2 years agodefine table for auth-type names and values.
Alan T. DeKok [Tue, 7 Mar 2023 19:18:49 +0000 (14:18 -0500)] 
define table for auth-type names and values.

2 years agoadd "event list set" function fort BFD
Alan T. DeKok [Thu, 2 Mar 2023 22:37:08 +0000 (17:37 -0500)] 
add "event list set" function fort BFD

and use it to bootstrap the state machine.

2 years agoallow matching listeners based on peer src_ipaddr
Alan T. DeKok [Thu, 2 Mar 2023 22:33:03 +0000 (17:33 -0500)] 
allow matching listeners based on peer src_ipaddr

2 years agoensure that src_ipaddr is set
Alan T. DeKok [Thu, 2 Mar 2023 22:29:08 +0000 (17:29 -0500)] 
ensure that src_ipaddr is set

2 years agoAdd LDAP schema -> ldif script and sync schemas and LDIFs
Arran Cudbard-Bell [Wed, 8 Mar 2023 20:20:49 +0000 (14:20 -0600)] 
Add LDAP schema -> ldif script and sync schemas and LDIFs

2 years agoImmediately deschedule
Arran Cudbard-Bell [Wed, 8 Mar 2023 20:05:39 +0000 (14:05 -0600)] 
Immediately deschedule

2 years agoAdd radiusFramedIpv6Address
Arran Cudbard-Bell [Wed, 8 Mar 2023 20:02:31 +0000 (14:02 -0600)] 
Add radiusFramedIpv6Address

2 years agoAdd connection config section to sample imap module
Nick Porter [Wed, 8 Mar 2023 14:10:33 +0000 (14:10 +0000)] 
Add connection config section to sample imap module

2 years agoImprove rlm_imap tests
Nick Porter [Tue, 7 Mar 2023 14:59:39 +0000 (14:59 +0000)] 
Improve rlm_imap tests

2 years agoUse proper types for fr_value_box_t dlist structures
Nick Porter [Mon, 6 Mar 2023 10:44:47 +0000 (10:44 +0000)] 
Use proper types for fr_value_box_t dlist structures

2 years agoAdd macro to create friendly type names for dlist head / entry structures
Nick Porter [Wed, 8 Mar 2023 10:38:01 +0000 (10:38 +0000)] 
Add macro to create friendly type names for dlist head / entry structures

2 years agogo to Admin-Down on fail
Alan T. DeKok [Thu, 2 Mar 2023 21:52:38 +0000 (16:52 -0500)] 
go to Admin-Down on fail

2 years agoadd length=uint8 notes
Alan T. DeKok [Thu, 2 Mar 2023 21:27:27 +0000 (16:27 -0500)] 
add length=uint8 notes

2 years agomove more of the state machine into proto_bfd
Alan T. DeKok [Thu, 2 Mar 2023 21:27:11 +0000 (16:27 -0500)] 
move more of the state machine into proto_bfd

the state machine doesn't send or receive packets, but that will
gradually get fixed.

2 years agoBFD packets don't get replies
Alan T. DeKok [Thu, 2 Mar 2023 02:25:49 +0000 (21:25 -0500)] 
BFD packets don't get replies

they just cause us to change our state machine.

Any packets we originate get written.  Somehow...

2 years agomove client list to simple rbtree
Alan T. DeKok [Thu, 2 Mar 2023 02:06:37 +0000 (21:06 -0500)] 
move client list to simple rbtree

so that we can loop over it ourselves.

And because we can't have ip/mask for BFD.  The packets are
always sent to a particular IP

2 years agoset TTL socket option
Alan T. DeKok [Wed, 1 Mar 2023 22:57:07 +0000 (17:57 -0500)] 
set TTL socket option

2 years agodo bounds checks on fields
Alan T. DeKok [Wed, 1 Mar 2023 22:56:47 +0000 (17:56 -0500)] 
do bounds checks on fields

2 years agoAdd @param for extra in client_afrom_cs() (#4914)
James Jones [Thu, 2 Mar 2023 20:09:48 +0000 (14:09 -0600)] 
Add @param for extra in client_afrom_cs() (#4914)

2 years agodocs: Fix antora errors
Nick Porter [Wed, 1 Mar 2023 16:40:52 +0000 (16:40 +0000)] 
docs: Fix antora errors

2 years agodocs: Update logo for Doxygen site
Nick Porter [Wed, 1 Mar 2023 19:02:33 +0000 (19:02 +0000)] 
docs: Update logo for Doxygen site

2 years agothe main proto_bfd module allocates peers
Alan T. DeKok [Wed, 1 Mar 2023 22:28:54 +0000 (17:28 -0500)] 
the main proto_bfd module allocates peers

2 years agodon't print out these values unless they're set
Alan T. DeKok [Wed, 1 Mar 2023 22:26:35 +0000 (17:26 -0500)] 
don't print out these values unless they're set

they confuse other protocols

2 years agoallow the caller to add extra bits after a client definition
Alan T. DeKok [Wed, 1 Mar 2023 22:09:56 +0000 (17:09 -0500)] 
allow the caller to add extra bits after a client definition

2 years ago"virtual_server" has not been supported for a while.
Alan T. DeKok [Wed, 1 Mar 2023 22:02:04 +0000 (17:02 -0500)] 
"virtual_server" has not been supported for a while.

2 years agoremove unused function
Alan T. DeKok [Wed, 1 Mar 2023 22:00:56 +0000 (17:00 -0500)] 
remove unused function

2 years agolet's not shout.
Alan T. DeKok [Wed, 1 Mar 2023 21:45:16 +0000 (16:45 -0500)] 
let's not shout.

RADCLIENT -> fr_client_t
RADCLIENT_LIST -> fr_client_list_t

2 years agomore sanity checks on values
Alan T. DeKok [Wed, 1 Mar 2023 21:20:53 +0000 (16:20 -0500)] 
more sanity checks on values

2 years agoinitialize reply packet
Alan T. DeKok [Wed, 1 Mar 2023 16:48:53 +0000 (11:48 -0500)] 
initialize reply packet

2 years agoGet rid of doxygen "Illegal member name found" warnings (#4913)
James Jones [Wed, 1 Mar 2023 19:50:02 +0000 (13:50 -0600)] 
Get rid of doxygen "Illegal member name found" warnings (#4913)

Analogous to not expanding STATE() hiding the type in
declarations, not expanding SBUFF_OUT_TALLOC_FUNC_NO_LEN_DEF()
hides function bodies. Not seeing them confuses doxygen.

2 years agoAdd proto_bfd_udp.so to RedHat packaging
Nick Porter [Wed, 1 Mar 2023 16:24:06 +0000 (16:24 +0000)] 
Add proto_bfd_udp.so to RedHat packaging

2 years agoneeded
Alan T. DeKok [Wed, 1 Mar 2023 15:39:30 +0000 (10:39 -0500)] 
needed

2 years agonote 3.2.x, too
Alan T. DeKok [Wed, 1 Mar 2023 15:27:22 +0000 (10:27 -0500)] 
note 3.2.x, too

2 years agoadd proto_bfd_udp
Alan T. DeKok [Wed, 1 Mar 2023 14:47:26 +0000 (09:47 -0500)] 
add proto_bfd_udp

2 years agodebug received packets
Alan T. DeKok [Wed, 1 Mar 2023 14:47:09 +0000 (09:47 -0500)] 
debug received packets

2 years agoonly require connection_set for TCP
Alan T. DeKok [Wed, 1 Mar 2023 14:38:40 +0000 (09:38 -0500)] 
only require connection_set for TCP

2 years agoadd proto_bfd
Alan T. DeKok [Tue, 28 Feb 2023 21:36:36 +0000 (16:36 -0500)] 
add proto_bfd

2 years agono longer need this
Alan T. DeKok [Tue, 28 Feb 2023 21:29:25 +0000 (16:29 -0500)] 
no longer need this

2 years agodocs: Update Doxygen project name and remove obsolete option
Nick Porter [Wed, 1 Mar 2023 12:18:22 +0000 (12:18 +0000)] 
docs: Update Doxygen project name and remove obsolete option

2 years agoUpdate documentation CI job to use new actions
Nick Porter [Wed, 1 Mar 2023 08:21:18 +0000 (08:21 +0000)] 
Update documentation CI job to use new actions

2 years agoAdd libfreeradius-bfd.so to RedHat packaging
Nick Porter [Wed, 1 Mar 2023 07:59:16 +0000 (07:59 +0000)] 
Add libfreeradius-bfd.so to RedHat packaging

2 years agoadd BFD decoder
Alan T. DeKok [Tue, 28 Feb 2023 21:07:09 +0000 (16:07 -0500)] 
add BFD decoder

2 years agoadd encoder for BFD, and test cases.
Alan T. DeKok [Tue, 28 Feb 2023 20:31:16 +0000 (15:31 -0500)] 
add encoder for BFD, and test cases.

There's no decoder, and no authentication tests yet

2 years agotypos "interval" not "internal"
Alan T. DeKok [Tue, 28 Feb 2023 19:45:56 +0000 (14:45 -0500)] 
typos "interval" not "internal"

2 years agoAdd missing xlat_frame_eval_resume() @params for doxygen (#4910)
James Jones [Tue, 28 Feb 2023 14:43:44 +0000 (08:43 -0600)] 
Add missing xlat_frame_eval_resume() @params for doxygen (#4910)

2 years agoGet rid of "explicit link to foo could not be resolved" warnings (#4912)
James Jones [Tue, 28 Feb 2023 14:43:32 +0000 (08:43 -0600)] 
Get rid of "explicit link to foo could not be resolved" warnings (#4912)

These turned up for a couple of reasons:
1. Macros expanding to variable declarations (here STATE());
   doxygen needs it expaded to see the declaration.
2. Forward references in @param

2 years agotrack requests and listeners
Alan T. DeKok [Mon, 27 Feb 2023 21:25:24 +0000 (16:25 -0500)] 
track requests and listeners

so that when a listener goes away, we cancel all requests
associated with it.

2 years agoUpdate Ciena dictionary
Nick Porter [Tue, 28 Feb 2023 08:04:31 +0000 (08:04 +0000)] 
Update Ciena dictionary