]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Nicolas C [Wed, 10 Jan 2018 08:19:43 +0000 (09:19 +0100)]
3.0.x - dhcpclient - raw socket fixes
Following the commits by Alan to reintroduce the raw socket code to
dhcpclient, I have:
- fixed a few compilation warnings
- added autoconf for HAVE_LINUX_IF_PACKET_H
I'm not so sure of myself for the autoconf part, can you check it's done
properly?
Thanks!
Matthew Newton [Tue, 9 Jan 2018 15:28:53 +0000 (15:28 +0000)]
include dhcpclient binary in freeradius-dhcp debian package
Matthew Newton [Tue, 9 Jan 2018 12:53:33 +0000 (12:53 +0000)]
don't fail in removing freeradius-config .deb pkg if dir no longer exists
Matthew Newton [Tue, 9 Jan 2018 11:16:14 +0000 (11:16 +0000)]
also don't pull in boiler.mk whilst doing make deb
Alan T. DeKok [Tue, 28 Nov 2017 16:39:42 +0000 (11:39 -0500)]
allow "make deb" before running "configure"
as "make deb" runs "configure" itself in a fake root
Matthew Newton [Tue, 9 Jan 2018 10:35:12 +0000 (10:35 +0000)]
make sure install continues even if the daemon isn't running
First install fails if freeradius package and module packages are
installed at the same time.
Alan T. DeKok [Mon, 8 Jan 2018 01:46:42 +0000 (20:46 -0500)]
remove groupname from radacct
it's not used, and it was confusing too many people.
Alan T. DeKok [Fri, 5 Jan 2018 13:39:59 +0000 (08:39 -0500)]
note recent changes
Alan T. DeKok [Thu, 4 Jan 2018 19:37:38 +0000 (14:37 -0500)]
add fr_dhcp_recv_raw_loop()
Alan T. DeKok [Thu, 4 Jan 2018 19:34:13 +0000 (14:34 -0500)]
more cleanups for raw sockets
Alan T. DeKok [Thu, 4 Jan 2018 18:51:19 +0000 (13:51 -0500)]
set timeout for all sockets
Alan T. DeKok [Thu, 4 Jan 2018 18:49:44 +0000 (13:49 -0500)]
start pulling raw socket code back in
Alan T. DeKok [Tue, 2 Jan 2018 15:06:54 +0000 (10:06 -0500)]
remove OCSP for now.
Alan T. DeKok [Tue, 2 Jan 2018 14:37:40 +0000 (09:37 -0500)]
remove dependency on ocsp.cnf
it seems to be confusing travis?
Alan T. DeKok [Tue, 2 Jan 2018 14:18:34 +0000 (09:18 -0500)]
note recent changes
Alan T. DeKok [Mon, 1 Jan 2018 19:32:07 +0000 (14:32 -0500)]
add OCSP and provisions for external_ca from v4.0.x branch
Alan T. DeKok [Wed, 27 Dec 2017 16:02:00 +0000 (11:02 -0500)]
create state on Access-Challenge, if it isn't already there
Alan T. DeKok [Tue, 19 Dec 2017 18:48:42 +0000 (13:48 -0500)]
Ensure that the LHS is a RADIUS attribute
Alan T. DeKok [Tue, 19 Dec 2017 18:44:54 +0000 (13:44 -0500)]
typo
Alan T. DeKok [Mon, 18 Dec 2017 21:07:29 +0000 (16:07 -0500)]
OCSP fixes
Alan T. DeKok [Sun, 17 Dec 2017 23:06:04 +0000 (18:06 -0500)]
more checks for NULL
Alan T. DeKok [Sun, 17 Dec 2017 22:10:37 +0000 (17:10 -0500)]
'rev' may be NULL even on success. Fixes #2143
Alan T. DeKok [Wed, 13 Dec 2017 19:52:19 +0000 (14:52 -0500)]
don't complain about "chase_referrals" if it's already set
Arran Cudbard-Bell [Fri, 15 Dec 2017 23:15:14 +0000 (23:15 +0000)]
Merge pull request #2142 from mrizvic/v3.0.x
implemented redis query and connect timeout
Marko Rizvic [Fri, 15 Dec 2017 22:05:23 +0000 (23:05 +0100)]
implemented redis query and connection timeout
Alan DeKok [Tue, 12 Dec 2017 17:44:15 +0000 (12:44 -0500)]
Merge pull request #2139 from BriceSchaffner/patch-3
Added missing attributes
Alan DeKok [Tue, 12 Dec 2017 13:52:25 +0000 (08:52 -0500)]
Merge pull request #2141 from mcnewton/v3.0.x
inner-server openssl config install
Matthew Newton [Tue, 12 Dec 2017 13:39:18 +0000 (13:39 +0000)]
bomb out immediately rather than silently fail
if we can't generate passwords.mk, we're stuffed anyway
Matthew Newton [Tue, 12 Dec 2017 13:37:56 +0000 (13:37 +0000)]
install inner-server.cnf config file
Brice Schaffner [Tue, 12 Dec 2017 06:54:46 +0000 (07:54 +0100)]
Added missing attributes
Patton-Group and Patton-Web-Privilege-Level attributes were missing. These attributes can be used in an Accept Request to specify the user group (operator, administrator or superuser) or the web privilege level of the user (wizard-exec or advanced).
Alan T. DeKok [Mon, 11 Dec 2017 15:35:28 +0000 (10:35 -0500)]
note recent changes
Alan T. DeKok [Mon, 11 Dec 2017 15:33:33 +0000 (10:33 -0500)]
added disconnect-reason
and reformatted
Alan T. DeKok [Mon, 11 Dec 2017 15:32:25 +0000 (10:32 -0500)]
add "inner-server" scripts and configuration
Matthew Newton [Mon, 11 Dec 2017 14:19:58 +0000 (14:19 +0000)]
spelling, remove spaces
Matthew Newton [Mon, 11 Dec 2017 13:46:51 +0000 (13:46 +0000)]
debian packaging fixes
- Remove disable-dhcp-by-default patch, as it's now disabled
by default since
2662182b
- Refresh quilt patches
Alan T. DeKok [Fri, 8 Dec 2017 20:51:23 +0000 (15:51 -0500)]
debian/ubuntu pkgs need dh-systemd. Fixes #2136
Arran Cudbard-Bell [Fri, 8 Dec 2017 12:17:40 +0000 (12:17 +0000)]
Don't enable dhcp by default as it has a dependency on rlm_dhcp which won't necessarily be installed
Arran Cudbard-Bell [Fri, 8 Dec 2017 12:00:49 +0000 (12:00 +0000)]
Typo
Arran Cudbard-Bell [Fri, 8 Dec 2017 11:59:00 +0000 (11:59 +0000)]
Fixup service file install
See: https://wiki.debian.org/Teams/pkg-systemd/Packaging
Alan T. DeKok [Wed, 6 Dec 2017 15:23:56 +0000 (10:23 -0500)]
document IP / network comparisons
Alan T. DeKok [Thu, 30 Nov 2017 15:06:09 +0000 (10:06 -0500)]
remove redundancy
Alan T. DeKok [Mon, 20 Nov 2017 16:21:20 +0000 (11:21 -0500)]
note recent changes
Alan T. DeKok [Mon, 20 Nov 2017 16:10:44 +0000 (11:10 -0500)]
initialize mutexes before modules_init(). Helps with #2129
Alan T. DeKok [Fri, 17 Nov 2017 22:24:52 +0000 (17:24 -0500)]
Revert "don't include TLV header in crypto_binding. Helps with #2127"
This reverts commit
ee4de4663a3d7d4187d0e41916af0d66c46a73af .
Alan T. DeKok [Fri, 17 Nov 2017 21:38:44 +0000 (16:38 -0500)]
build issues. Helps with #2127
Alan T. DeKok [Fri, 17 Nov 2017 21:07:28 +0000 (16:07 -0500)]
don't include TLV header in crypto_binding. Helps with #2127
so we can just use the data contents as-is.
Alan T. DeKok [Fri, 17 Nov 2017 21:05:33 +0000 (16:05 -0500)]
eap-fast: fail on crypto-binding mismatch
as per rfc 4851, an invalid crypto-binding tlv is a
fatal error, handle accordingly.
Signed-off-by: Isaac Boukris <iboukris@gmail.com>
Alan T. DeKok [Fri, 17 Nov 2017 21:02:00 +0000 (16:02 -0500)]
check length before memcpy()
Alan T. DeKok [Fri, 17 Nov 2017 21:01:47 +0000 (16:01 -0500)]
re-arrange
Alan T. DeKok [Thu, 16 Nov 2017 16:34:22 +0000 (11:34 -0500)]
set thread callback for newer OpenSSL. Fixes #2125
Alan T. DeKok [Thu, 16 Nov 2017 16:06:18 +0000 (11:06 -0500)]
note recent changes
Alan T. DeKok [Thu, 16 Nov 2017 16:01:55 +0000 (11:01 -0500)]
remove unused tables
Alan T. DeKok [Thu, 16 Nov 2017 16:00:57 +0000 (11:00 -0500)]
remove UNIQUE constraint.
No other DB schema has it
Alan T. DeKok [Tue, 14 Nov 2017 20:08:46 +0000 (15:08 -0500)]
one last conversion to the proper name
Alan T. DeKok [Tue, 14 Nov 2017 19:57:54 +0000 (14:57 -0500)]
allow VSAs, too. Fixes #2094
Alan T. DeKok [Tue, 14 Nov 2017 16:51:15 +0000 (11:51 -0500)]
typo. Fixes #2121
Alan T. DeKok [Tue, 14 Nov 2017 16:27:35 +0000 (11:27 -0500)]
manual merge of #2121
Alan T. DeKok [Mon, 13 Nov 2017 20:28:59 +0000 (15:28 -0500)]
update to match "configure"
Alan T. DeKok [Mon, 13 Nov 2017 20:28:40 +0000 (15:28 -0500)]
regenerate after '==' to '=' change
Alan T. DeKok [Mon, 13 Nov 2017 13:27:11 +0000 (08:27 -0500)]
open expanded filename, not original one
Matthew Newton [Fri, 10 Nov 2017 16:48:42 +0000 (16:48 +0000)]
enable reproducible builds for debian packages
Matthew Newton [Fri, 10 Nov 2017 11:26:58 +0000 (11:26 +0000)]
add --enable-reproducible-builds configure option
So that __DATE__ and __TIME__ can be removed only when needed;
turns off warnings when not using reproducible builds.
Matthew Newton [Thu, 9 Nov 2017 19:11:53 +0000 (19:11 +0000)]
don't complain about key not being set
Matthew Newton [Thu, 9 Nov 2017 16:28:41 +0000 (16:28 +0000)]
remove __DATE__ and __TIME__
"reproducible builds" is apparently a thing, and gcc
has started complaining
Alan T. DeKok [Thu, 9 Nov 2017 19:00:52 +0000 (14:00 -0500)]
note recent changes
Alan DeKok [Thu, 9 Nov 2017 13:35:42 +0000 (08:35 -0500)]
Merge pull request #2114 from alejandro-perez/patch-2
Add missing declaration of key_expiration
Alejandro Perez [Thu, 9 Nov 2017 07:49:47 +0000 (08:49 +0100)]
Add missing declaration of key_expiration
The declaration was lost during manual merge. This should fix it.
Matthew Newton [Wed, 8 Nov 2017 22:22:54 +0000 (22:22 +0000)]
ensure freeradius can read the server certificate
permissions locked down more by default on debian stretch
Matthew Newton [Wed, 8 Nov 2017 21:53:48 +0000 (21:53 +0000)]
allow new version of openssl package in debian stretch
Alan T. DeKok [Wed, 8 Nov 2017 15:59:23 +0000 (10:59 -0500)]
convert assertion to run-time check. Fixes #2110
Alan T. DeKok [Sun, 5 Nov 2017 12:37:58 +0000 (07:37 -0500)]
move rbio call to later. Closes #2107
Alan T. DeKok [Fri, 3 Nov 2017 14:46:18 +0000 (10:46 -0400)]
simplify
Alan T. DeKok [Fri, 3 Nov 2017 13:42:39 +0000 (09:42 -0400)]
note recent changes
Alan T. DeKok [Fri, 3 Nov 2017 13:36:44 +0000 (09:36 -0400)]
radattr doesn't need dhcp always. Fixes #2039
Alan T. DeKok [Fri, 3 Nov 2017 13:26:16 +0000 (09:26 -0400)]
update schema. Fixes #2061
Getting pull requests from people is MUCH nicer than people
opening bug reports and saying "meh, you guys fix it."
It's not really that much more difficult to send a pull request
than to open a bug report.
Alan T. DeKok [Fri, 3 Nov 2017 13:23:32 +0000 (09:23 -0400)]
explain why a connection was closed. Fixes #1969
Alan T. DeKok [Fri, 3 Nov 2017 13:08:07 +0000 (09:08 -0400)]
note recent changes
Alan T. DeKok [Fri, 3 Nov 2017 13:06:50 +0000 (09:06 -0400)]
check DHCP-Message-Type
Alan T. DeKok [Fri, 3 Nov 2017 13:06:31 +0000 (09:06 -0400)]
convert assertion to run-time check. Fixes #2028
Alan T. DeKok [Fri, 3 Nov 2017 10:15:01 +0000 (06:15 -0400)]
more attributes
Alan T. DeKok [Fri, 3 Nov 2017 10:13:10 +0000 (06:13 -0400)]
note recent changes
Alan T. DeKok [Fri, 3 Nov 2017 10:09:27 +0000 (06:09 -0400)]
Read multiple packets from an SSL session. Fixes #2106
Matthew Newton [Fri, 27 Oct 2017 18:06:56 +0000 (19:06 +0100)]
remove asserts on vars declared as nonnull
stops gcc6 complaints with -Wnonnull-compare
Alan T. DeKok [Thu, 26 Oct 2017 21:27:10 +0000 (17:27 -0400)]
remove unnecessary assert
Alan T. DeKok [Thu, 26 Oct 2017 13:49:36 +0000 (09:49 -0400)]
note recent changes
Alan T. DeKok [Wed, 25 Oct 2017 20:37:28 +0000 (16:37 -0400)]
calculate triplets from Ki.
Why this wasn't done 15 years ago is beyond me.
And fix goddamned debug macros. Which apparently were also
broken.
Alan T. DeKok [Wed, 25 Oct 2017 20:30:48 +0000 (16:30 -0400)]
compare hex values side by side
Alan T. DeKok [Wed, 25 Oct 2017 11:05:17 +0000 (07:05 -0400)]
send back error messages if we can't find the information
Alan T. DeKok [Wed, 25 Oct 2017 10:50:31 +0000 (06:50 -0400)]
note recent changes
Alan T. DeKok [Wed, 25 Oct 2017 10:48:44 +0000 (06:48 -0400)]
note that the queries have changed, too
Alan T. DeKok [Wed, 25 Oct 2017 10:43:47 +0000 (06:43 -0400)]
add "allow_duplicates" config. Helps with #2094
Alan T. DeKok [Tue, 24 Oct 2017 19:09:15 +0000 (15:09 -0400)]
Allow NAS to be IPv4 or IPv6. Helps with #2094
Alan T. DeKok [Tue, 24 Oct 2017 19:07:26 +0000 (15:07 -0400)]
use configured attribute in queries. Helps with #2094
Alan T. DeKok [Tue, 24 Oct 2017 18:59:36 +0000 (14:59 -0400)]
allow "attribute_name" to make it generic. Helps with #2094
Alan T. DeKok [Fri, 20 Oct 2017 13:11:24 +0000 (09:11 -0400)]
another convert assertion to run-time check
Arran Cudbard-Bell [Mon, 23 Oct 2017 20:41:07 +0000 (09:41 +1300)]
Merge pull request #2101 from zmousm/revert_logrotate_rotate_val
logrotate: Revert daily rotations from 52 back to 14
Zenon Mousmoulas [Mon, 23 Oct 2017 13:05:47 +0000 (16:05 +0300)]
logrotate: Revert daily rotations from 52 back to 14
14 is a more suitable default for daily rotation, while 52 rather
reminds of weekly rotation.
Arran Cudbard-Bell [Sat, 21 Oct 2017 01:49:16 +0000 (14:49 +1300)]
Merge pull request #2093 from zmousm/fix_logrotate
logrotate: don't accidentally define global options
Arran Cudbard-Bell [Sat, 21 Oct 2017 01:49:07 +0000 (14:49 +1300)]
Merge branch 'v3.0.x' into fix_logrotate
Alan T. DeKok [Fri, 20 Oct 2017 12:43:50 +0000 (08:43 -0400)]
convert assertion to run-time check