]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
3 months agoparse array things only when the quote is array
Alan T. DeKok [Thu, 15 May 2025 12:24:31 +0000 (08:24 -0400)] 
parse array things only when the quote is array

3 months agothe ar is already freed on error
Alan T. DeKok [Thu, 15 May 2025 12:24:03 +0000 (08:24 -0400)] 
the ar is already freed on error

3 months agoupdate notes now that we have FR_TYPE_PAIR_CURSOR
Alan T. DeKok [Thu, 15 May 2025 11:01:46 +0000 (07:01 -0400)] 
update notes now that we have FR_TYPE_PAIR_CURSOR

3 months agomight as well list dictionary things here, too
Alan T. DeKok [Thu, 15 May 2025 10:20:33 +0000 (06:20 -0400)] 
might as well list dictionary things here, too

3 months agomove pairs to its own directory
Alan T. DeKok [Thu, 15 May 2025 10:15:46 +0000 (06:15 -0400)] 
move pairs to its own directory

3 months agoupdates, corrections, and clarifications
Alan T. DeKok [Thu, 15 May 2025 09:59:33 +0000 (05:59 -0400)] 
updates, corrections, and clarifications

3 months agotweaks for v4
Alan T. DeKok [Thu, 15 May 2025 09:31:20 +0000 (05:31 -0400)] 
tweaks for v4

3 months agouse more of v4 syntax
Alan T. DeKok [Thu, 15 May 2025 09:23:45 +0000 (05:23 -0400)] 
use more of v4 syntax

3 months agomove functions to using a cursor argument
Alan T. DeKok [Wed, 14 May 2025 14:23:08 +0000 (10:23 -0400)] 
move functions to using a cursor argument

3 months agodon't print "WARN WARN"
Alan T. DeKok [Wed, 14 May 2025 19:10:27 +0000 (15:10 -0400)] 
don't print "WARN WARN"

3 months agocorrect check for tmpl_dcursor_value_box_init()
Alan T. DeKok [Wed, 14 May 2025 19:18:38 +0000 (15:18 -0400)] 
correct check for tmpl_dcursor_value_box_init()

-1 is "no cursor", too

3 months agoCorrect adding 2 DNS servers to DHCP reply
Nick Porter [Wed, 14 May 2025 18:08:59 +0000 (19:08 +0100)] 
Correct adding 2 DNS servers to DHCP reply

3 months agoUpdate DHCP docs for v4
Nick Porter [Wed, 14 May 2025 18:08:27 +0000 (19:08 +0100)] 
Update DHCP docs for v4

A quick pass updating
 - option names don't have `DHCP-` prefix
 - remove `update` sections
 - xlat syntax fixes

3 months agoUpdate rlm_sqlippool_tool for v4 fr_ippool schema
Nick Porter [Wed, 14 May 2025 16:25:29 +0000 (17:25 +0100)] 
Update rlm_sqlippool_tool for v4 fr_ippool schema

3 months agoadd notes on future functionality
Alan T. DeKok [Wed, 14 May 2025 11:15:14 +0000 (07:15 -0400)] 
add notes on future functionality

3 months agoadd test where LHS fails expansion, but the RHS exists
Alan T. DeKok [Wed, 14 May 2025 11:14:59 +0000 (07:14 -0400)] 
add test where LHS fails expansion, but the RHS exists

3 months agoCheck for policy foo.baa when foo.baa is called
Nick Porter [Wed, 14 May 2025 07:45:14 +0000 (08:45 +0100)] 
Check for policy foo.baa when foo.baa is called

3 months agoUse section name1/name2 when looking for override policies
Nick Porter [Wed, 14 May 2025 07:16:52 +0000 (08:16 +0100)] 
Use section name1/name2 when looking for override policies

First checking for `foo.name1.name2`, then `foo.name1` and finally just
`foo`

3 months agoallow attribute references as cursors for function arguments
Alan T. DeKok [Tue, 13 May 2025 18:26:53 +0000 (14:26 -0400)] 
allow attribute references as cursors for function arguments

via the somewhat bad hack of adding a flag to xlat_exp_head_t,
because it's too hard to pass in the xlat_arg_parser_t to the
xlat evaluation function

3 months agomove init FR_TYPE_PAIR_CURSOR dcursor into tmpl_dcursor.c
Alan T. DeKok [Tue, 13 May 2025 17:54:47 +0000 (13:54 -0400)] 
move init FR_TYPE_PAIR_CURSOR dcursor into tmpl_dcursor.c

3 months agoclear cursor values, too
Alan T. DeKok [Tue, 13 May 2025 17:54:18 +0000 (13:54 -0400)] 
clear cursor values, too

3 months agomove to use FR_TYPE_PAIR_CURSOR in xlat, and away from FR_TYPE_VOID
Alan T. DeKok [Tue, 13 May 2025 16:01:01 +0000 (12:01 -0400)] 
move to use FR_TYPE_PAIR_CURSOR in xlat, and away from FR_TYPE_VOID

and remove now redundant destructor for tmpl_dcursor_ctx_t

3 months agoproxy_request and proxy_reply no longer exist
Nick Porter [Tue, 13 May 2025 15:23:41 +0000 (16:23 +0100)] 
proxy_request and proxy_reply no longer exist

3 months agoWindows 7 is very EoL
Nick Porter [Tue, 13 May 2025 14:21:25 +0000 (15:21 +0100)] 
Windows 7 is very EoL

3 months agoAdd enum prefix for DHCP Message-Type values
Nick Porter [Tue, 13 May 2025 14:19:51 +0000 (15:19 +0100)] 
Add enum prefix for DHCP Message-Type values

3 months agoUpdate sample mruby script with correct log function call
Nick Porter [Tue, 13 May 2025 14:10:12 +0000 (15:10 +0100)] 
Update sample mruby script with correct log function call

3 months agoCheck that mruby functions exist
Nick Porter [Tue, 13 May 2025 13:43:40 +0000 (14:43 +0100)] 
Check that mruby functions exist

3 months agodefine and use new FR_TYPE_PAIR_CURSOR
Alan T. DeKok [Mon, 12 May 2025 19:30:49 +0000 (15:30 -0400)] 
define and use new FR_TYPE_PAIR_CURSOR

3 months agoadd FR_TYPE_INTERNAL
Alan T. DeKok [Mon, 12 May 2025 18:31:45 +0000 (14:31 -0400)] 
add FR_TYPE_INTERNAL

to hold multiple types which aren't leaf types, and which aren't
structural types.  But which are internal types that nothing
else should use

3 months agoif it's not a leaf type, ensure it's a structural one
Alan T. DeKok [Mon, 12 May 2025 16:33:40 +0000 (12:33 -0400)] 
if it's not a leaf type, ensure it's a structural one

so that the code behaves sanely or at least asserts, if passed
another type

3 months agoremove debugging information
Alan T. DeKok [Mon, 12 May 2025 12:53:02 +0000 (08:53 -0400)] 
remove debugging information

3 months agodefine macro for dcursor arguments
Alan T. DeKok [Mon, 12 May 2025 12:50:43 +0000 (08:50 -0400)] 
define macro for dcursor arguments

3 months agoallow tmpl_dcursor as function arguments
Alan T. DeKok [Sun, 11 May 2025 23:27:35 +0000 (19:27 -0400)] 
allow tmpl_dcursor as function arguments

with some limitations - only strings are allowed for now :(

3 months agoonly set safe_for if the data was escaped
Alan T. DeKok [Sun, 11 May 2025 22:07:32 +0000 (18:07 -0400)] 
only set safe_for if the data was escaped

this shouldn't have any practical difference, as the argument
parser sets t_rules->literals_safe_for = arg->safe_for.  So literals
are already marked up as safe.

Arguably that function shouldn't do that, either.

3 months agofunctions to get / set typed data into FR_TYPE_VOID
Alan T. DeKok [Sun, 11 May 2025 22:02:41 +0000 (18:02 -0400)] 
functions to get / set typed data into FR_TYPE_VOID

3 months agoadd destructor wrapper for freeing tmpl_dcursor_t
Alan T. DeKok [Sun, 11 May 2025 22:01:55 +0000 (18:01 -0400)] 
add destructor wrapper for freeing tmpl_dcursor_t

3 months agomove bools to 1-bit fields
Alan T. DeKok [Sun, 11 May 2025 13:29:07 +0000 (09:29 -0400)] 
move bools to 1-bit fields

3 months agothe protocol encode xlat can't actually take a quoted string
Alan T. DeKok [Sun, 11 May 2025 13:22:37 +0000 (09:22 -0400)] 
the protocol encode xlat can't actually take a quoted string

it has to take an attribute reference, because it manually parses
the input as a tmpl_attr.

We arguably need to update the xlat function arguments to indicate
whether or not the argument expects to see a cursor.  And if so,
perhaps put a pointer to the cursor into a box of FR_TYPE_VOID.

which then lets functions like this either take a cursor of things
to encode, OR a string which is then parsed into a list of things
to encode.

3 months agoadd original xlat to function call
Alan T. DeKok [Sun, 11 May 2025 13:21:18 +0000 (09:21 -0400)] 
add original xlat to function call

so we can see not just what the function is, but also what the
arguments are.  This change helps the called function know whether
or not the string it received was originally a bare word, or else
if it was quoted.

3 months agomove hmac to its own file
Alan T. DeKok [Sun, 11 May 2025 13:03:54 +0000 (09:03 -0400)] 
move hmac to its own file

3 months agosplit time functions into separate files
Alan T. DeKok [Sun, 11 May 2025 12:52:48 +0000 (08:52 -0400)] 
split time functions into separate files

3 months agoUpdate debug message to give correct context
Gerald Vogt [Fri, 9 May 2025 05:52:26 +0000 (07:52 +0200)] 
Update debug message to give correct context

3 months agofix xrefs
Alan T. DeKok [Fri, 9 May 2025 19:51:12 +0000 (15:51 -0400)] 
fix xrefs

3 months agodocs: added xlat summary file
nolade [Fri, 9 May 2025 18:16:43 +0000 (14:16 -0400)] 
docs: added  xlat summary file

3 months agodocs: updated miscelleneous functions
Alan T. DeKok [Fri, 9 May 2025 19:40:58 +0000 (15:40 -0400)] 
docs: updated miscelleneous functions

3 months agodocs: updated miscelleneous functions
nolade [Fri, 9 May 2025 18:06:38 +0000 (14:06 -0400)] 
docs: updated miscelleneous functions

3 months agodocs: xlat string functions reorganized into sub-dir `str`. Updated nav file links...
nolade [Fri, 9 May 2025 17:05:32 +0000 (13:05 -0400)] 
docs: xlat string functions reorganized into sub-dir `str`. Updated nav file links and added ./string/index.adoc file and relevant links to sub-sections.

3 months agothis test depends on rlm_radius, too
Alan T. DeKok [Fri, 9 May 2025 19:11:10 +0000 (15:11 -0400)] 
this test depends on rlm_radius, too

3 months agodocs: xlat file handling functions reorganized into sub-dir `file`. Updated nav file...
nolade [Thu, 8 May 2025 20:25:05 +0000 (16:25 -0400)] 
docs: xlat file handling functions reorganized into sub-dir `file`. Updated nav file link and added ./file/index.adoc file and relevant links to sub-sections.

3 months agoalways do packet verification via the memory BIO
Alan T. DeKok [Fri, 9 May 2025 18:30:59 +0000 (14:30 -0400)] 
always do packet verification via the memory BIO

enforces checks which were changed in c60f89b45

3 months agoallow memory bios to have no read buffer
Alan T. DeKok [Fri, 9 May 2025 18:29:36 +0000 (14:29 -0400)] 
allow memory bios to have no read buffer

in which case they are verification-only BIOs.

and do other associated cleanups, to catch corner cases, comments,
and error messages.

3 months agowe need separate discard functions for UDP and TCP
Alan T. DeKok [Fri, 9 May 2025 17:33:45 +0000 (13:33 -0400)] 
we need separate discard functions for UDP and TCP

read of 0 is OK for UDP, and is EOF for TCP

3 months agoAdd query_number_attribute to SQL tests
Nick Porter [Fri, 9 May 2025 13:13:22 +0000 (14:13 +0100)] 
Add query_number_attribute to SQL tests

3 months agoSQL tests are independent
Nick Porter [Fri, 9 May 2025 13:14:14 +0000 (14:14 +0100)] 
SQL tests are independent

So the PRE entry won't actually insert the record which we want to
update.

3 months agoAdd query_number_attribute option to rlm_sql
Nick Porter [Fri, 9 May 2025 12:39:33 +0000 (13:39 +0100)] 
Add query_number_attribute option to rlm_sql

An optional attribute which can be used to record which out of a series
of queries updated records.

3 months agoa virtual server needs at least one processing section
Alan T. DeKok [Fri, 9 May 2025 13:16:35 +0000 (09:16 -0400)] 
a virtual server needs at least one processing section

or else we fail with a descriptive error.  This won't catch all
cases where people butcher the configuration, but it will catch
most of them.

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar
github-actions[bot] [Fri, 9 May 2025 04:26:55 +0000 (04:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar
github-actions[bot] [Fri, 9 May 2025 04:26:19 +0000 (04:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar
github-actions[bot] [Fri, 9 May 2025 04:26:10 +0000 (04:26 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar
github-actions[bot] [Fri, 9 May 2025 04:24:56 +0000 (04:24 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/vmps.tar

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar
github-actions[bot] [Fri, 9 May 2025 04:24:49 +0000 (04:24 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar
github-actions[bot] [Fri, 9 May 2025 04:24:46 +0000 (04:24 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/util.tar
github-actions[bot] [Fri, 9 May 2025 04:24:28 +0000 (04:24 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/util.tar

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar
github-actions[bot] [Fri, 9 May 2025 04:24:25 +0000 (04:24 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tftp.tar

3 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar
github-actions[bot] [Fri, 9 May 2025 04:24:19 +0000 (04:24 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/tacacs.tar

3 months agoFix comment
Arran Cudbard-Bell [Fri, 9 May 2025 03:36:44 +0000 (21:36 -0600)] 
Fix comment

3 months agoAdd tests for cancelling subrequests and parallels that timeout in a middle request
Arran Cudbard-Bell [Fri, 9 May 2025 02:37:57 +0000 (20:37 -0600)] 
Add tests for cancelling subrequests and parallels that timeout in a middle request

3 months agoFix weirdly common typo
Arran Cudbard-Bell [Fri, 9 May 2025 01:38:17 +0000 (19:38 -0600)] 
Fix weirdly common typo

3 months ago...and more
Arran Cudbard-Bell [Fri, 9 May 2025 01:36:12 +0000 (19:36 -0600)] 
...and more

3 months agoAnother minor typo
Arran Cudbard-Bell [Fri, 9 May 2025 01:34:47 +0000 (19:34 -0600)] 
Another minor typo

3 months agoMinor cleanups to finally docs
Arran Cudbard-Bell [Fri, 9 May 2025 01:32:57 +0000 (19:32 -0600)] 
Minor cleanups to finally docs

3 months agoUnify elements of child request handling for parallel, subrequests, and manual subreq...
Arran Cudbard-Bell [Thu, 8 May 2025 23:47:10 +0000 (17:47 -0600)] 
Unify elements of child request handling for parallel, subrequests, and manual subrequests

Fix signalling in parallel.  Both timeouts triggered on the parent side, and timeouts triggered on the child side now work.

Use relative timers for the retry keyword so synthetic time works correctly, same with the synchronous interpreter.

3 months agoReduce spurious debug messages
Arran Cudbard-Bell [Thu, 8 May 2025 21:38:32 +0000 (15:38 -0600)] 
Reduce spurious debug messages

3 months agorename functions for consistencyo
Alan T. DeKok [Thu, 8 May 2025 18:18:48 +0000 (14:18 -0400)] 
rename functions for consistencyo

%debug_attr() %pairs.debug()
%pairs() %pairs.print()

perl -p -i -e 's/\%pairs/\%pairs.print/g' $(git grep -l '%pairs' src)
perl -p -i -e 's/\%debug_attr/\%pairs.debug/g' $(git grep -l '%debug_attr' src)

3 months agorename %client() to %request.client()
Alan T. DeKok [Thu, 8 May 2025 17:50:55 +0000 (13:50 -0400)] 
rename %client() to %request.client()

the old name is still supported for compatibility

3 months agoFree tracking structure for ignored packet
Nick Porter [Thu, 8 May 2025 13:49:10 +0000 (14:49 +0100)] 
Free tracking structure for ignored packet

3 months agoRemove config options which controlled use of packet-authenticator in dedup
Nick Porter [Thu, 8 May 2025 13:40:21 +0000 (14:40 +0100)] 
Remove config options which controlled use of packet-authenticator in dedup

3 months agoThe same for proto_radius_tcp
Nick Porter [Thu, 8 May 2025 13:39:22 +0000 (14:39 +0100)] 
The same for proto_radius_tcp

3 months agoRemove packet authenticator from tracking table comparison
Nick Porter [Thu, 8 May 2025 13:32:17 +0000 (14:32 +0100)] 
Remove packet authenticator from tracking table comparison

If a packet arrives with the same ID and type, from the same client
(which is already deduped on source IP and port), then there is no need
to keep the old entry - there is no way for us to re-reply.

3 months agoUpdate winbind troublshooting (PR 5553 comments)
nolade [Wed, 23 Apr 2025 15:35:46 +0000 (11:35 -0400)] 
Update winbind troublshooting (PR 5553 comments)

3 months agodocs: Import customer doc Debugging winbind errors into Antora docs Introduction...
nolade [Fri, 11 Apr 2025 19:20:13 +0000 (15:20 -0400)] 
docs: Import customer doc Debugging  winbind errors into Antora docs Introduction  >> Troubleshooting >> Connectivity section

3 months agodocs: make docsite build fixes - updated xrefs and adjusted heading levels
nolade [Tue, 6 May 2025 21:45:29 +0000 (17:45 -0400)] 
docs: make docsite build fixes - updated xrefs and adjusted heading levels

3 months agoAdd listener names
Nick Porter [Thu, 8 May 2025 09:33:46 +0000 (10:33 +0100)] 
Add listener names

3 months agoCorrect tracking structure talloc pool sizes
Nick Porter [Thu, 8 May 2025 08:40:31 +0000 (09:40 +0100)] 
Correct tracking structure talloc pool sizes

3 months agoRemove pair that didn't get populated
Nick Porter [Thu, 8 May 2025 07:20:25 +0000 (08:20 +0100)] 
Remove pair that didn't get populated

3 months agoRemove unused argument from format
Nick Porter [Wed, 7 May 2025 19:36:19 +0000 (20:36 +0100)] 
Remove unused argument from format

3 months agoHandle erros parsing call_env parser rules with name of CF_IDENT_ANY
Nick Porter [Wed, 7 May 2025 19:35:19 +0000 (20:35 +0100)] 
Handle erros parsing call_env parser rules with name of CF_IDENT_ANY

3 months agomash void to string
Alan T. DeKok [Thu, 8 May 2025 01:53:04 +0000 (21:53 -0400)] 
mash void to string

if the argument to 'switch' is a function returning void, then
update the tmpl to mash it to "string"

3 months agoparse %func() as argument to 'switch'
Alan T. DeKok [Thu, 8 May 2025 01:46:43 +0000 (21:46 -0400)] 
parse %func() as argument to 'switch'

3 months agoxlats can't be constant, either
Alan T. DeKok [Thu, 8 May 2025 01:45:18 +0000 (21:45 -0400)] 
xlats can't be constant, either

3 months agoquote strings are strings
Alan T. DeKok [Thu, 8 May 2025 01:40:06 +0000 (21:40 -0400)] 
quote strings are strings

3 months ago...and this
Arran Cudbard-Bell [Thu, 8 May 2025 01:02:25 +0000 (19:02 -0600)] 
...and this

3 months agoRemove debugging crap
Arran Cudbard-Bell [Thu, 8 May 2025 01:01:52 +0000 (19:01 -0600)] 
Remove debugging crap

3 months agoCan't check for presence of the event
Arran Cudbard-Bell [Thu, 8 May 2025 00:59:34 +0000 (18:59 -0600)] 
Can't check for presence of the event

3 months agoInsert timer event for resumption before altering time
Arran Cudbard-Bell [Wed, 7 May 2025 19:24:09 +0000 (13:24 -0600)] 
Insert timer event for resumption before altering time

3 months agoTests for nested timeouts
Arran Cudbard-Bell [Wed, 7 May 2025 19:23:26 +0000 (13:23 -0600)] 
Tests for nested timeouts

3 months agostart splitting out %time(everything)
Alan T. DeKok [Wed, 7 May 2025 15:03:23 +0000 (11:03 -0400)] 
start splitting out %time(everything)

into use-specific cases

3 months agomove %nextime() to %time.next()
Alan T. DeKok [Wed, 7 May 2025 14:49:00 +0000 (10:49 -0400)] 
move %nextime() to %time.next()

3 months agoclean up time_delta handling
Alan T. DeKok [Wed, 7 May 2025 14:33:50 +0000 (10:33 -0400)] 
clean up time_delta handling

check if the fractions overflow the scale.

Add / sub fractions as needed

3 months agoprint out error if reference is missing
Alan T. DeKok [Wed, 7 May 2025 13:29:53 +0000 (09:29 -0400)] 
print out error if reference is missing