]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
8 years ago3.0.x - dhcpclient - raw socket fixes 2155/head
Nicolas C [Wed, 10 Jan 2018 08:19:43 +0000 (09:19 +0100)] 
3.0.x - dhcpclient - raw socket fixes

Following the commits by Alan to reintroduce the raw socket code to
dhcpclient, I have:
- fixed a few compilation warnings
- added autoconf for HAVE_LINUX_IF_PACKET_H

I'm not so sure of myself for the autoconf part, can you check it's done
properly?
Thanks!

8 years agoinclude dhcpclient binary in freeradius-dhcp debian package
Matthew Newton [Tue, 9 Jan 2018 15:28:53 +0000 (15:28 +0000)] 
include dhcpclient binary in freeradius-dhcp debian package

8 years agodon't fail in removing freeradius-config .deb pkg if dir no longer exists
Matthew Newton [Tue, 9 Jan 2018 12:53:33 +0000 (12:53 +0000)] 
don't fail in removing freeradius-config .deb pkg if dir no longer exists

8 years agoalso don't pull in boiler.mk whilst doing make deb
Matthew Newton [Tue, 9 Jan 2018 11:16:14 +0000 (11:16 +0000)] 
also don't pull in boiler.mk whilst doing make deb

8 years agoallow "make deb" before running "configure"
Alan T. DeKok [Tue, 28 Nov 2017 16:39:42 +0000 (11:39 -0500)] 
allow "make deb" before running "configure"

as "make deb" runs "configure" itself in a fake root

8 years agomake sure install continues even if the daemon isn't running
Matthew Newton [Tue, 9 Jan 2018 10:35:12 +0000 (10:35 +0000)] 
make sure install continues even if the daemon isn't running

First install fails if freeradius package and module packages are
installed at the same time.

8 years agoremove groupname from radacct
Alan T. DeKok [Mon, 8 Jan 2018 01:46:42 +0000 (20:46 -0500)] 
remove groupname from radacct

it's not used, and it was confusing too many people.

8 years agonote recent changes
Alan T. DeKok [Fri, 5 Jan 2018 13:39:59 +0000 (08:39 -0500)] 
note recent changes

8 years agoadd fr_dhcp_recv_raw_loop()
Alan T. DeKok [Thu, 4 Jan 2018 19:37:38 +0000 (14:37 -0500)] 
add fr_dhcp_recv_raw_loop()

8 years agomore cleanups for raw sockets
Alan T. DeKok [Thu, 4 Jan 2018 19:34:13 +0000 (14:34 -0500)] 
more cleanups for raw sockets

8 years agoset timeout for all sockets
Alan T. DeKok [Thu, 4 Jan 2018 18:51:19 +0000 (13:51 -0500)] 
set timeout for all sockets

8 years agostart pulling raw socket code back in
Alan T. DeKok [Thu, 4 Jan 2018 18:49:44 +0000 (13:49 -0500)] 
start pulling raw socket code back in

8 years agoremove OCSP for now.
Alan T. DeKok [Tue, 2 Jan 2018 15:06:54 +0000 (10:06 -0500)] 
remove OCSP for now.

8 years agoremove dependency on ocsp.cnf
Alan T. DeKok [Tue, 2 Jan 2018 14:37:40 +0000 (09:37 -0500)] 
remove dependency on ocsp.cnf

it seems to be confusing travis?

8 years agonote recent changes
Alan T. DeKok [Tue, 2 Jan 2018 14:18:34 +0000 (09:18 -0500)] 
note recent changes

8 years agoadd OCSP and provisions for external_ca from v4.0.x branch
Alan T. DeKok [Mon, 1 Jan 2018 19:32:07 +0000 (14:32 -0500)] 
add OCSP and provisions for external_ca from v4.0.x branch

8 years agocreate state on Access-Challenge, if it isn't already there
Alan T. DeKok [Wed, 27 Dec 2017 16:02:00 +0000 (11:02 -0500)] 
create state on Access-Challenge, if it isn't already there

8 years agoEnsure that the LHS is a RADIUS attribute 2146/head
Alan T. DeKok [Tue, 19 Dec 2017 18:48:42 +0000 (13:48 -0500)] 
Ensure that the LHS is a RADIUS attribute

8 years agotypo
Alan T. DeKok [Tue, 19 Dec 2017 18:44:54 +0000 (13:44 -0500)] 
typo

8 years agoOCSP fixes
Alan T. DeKok [Mon, 18 Dec 2017 21:07:29 +0000 (16:07 -0500)] 
OCSP fixes

8 years agomore checks for NULL 2143/head 2144/head
Alan T. DeKok [Sun, 17 Dec 2017 23:06:04 +0000 (18:06 -0500)] 
more checks for NULL

8 years ago'rev' may be NULL even on success. Fixes #2143
Alan T. DeKok [Sun, 17 Dec 2017 22:10:37 +0000 (17:10 -0500)] 
'rev' may be NULL even on success.  Fixes #2143

8 years agodon't complain about "chase_referrals" if it's already set
Alan T. DeKok [Wed, 13 Dec 2017 19:52:19 +0000 (14:52 -0500)] 
don't complain about "chase_referrals" if it's already set

8 years agoMerge pull request #2142 from mrizvic/v3.0.x
Arran Cudbard-Bell [Fri, 15 Dec 2017 23:15:14 +0000 (23:15 +0000)] 
Merge pull request #2142 from mrizvic/v3.0.x

implemented redis query and connect timeout

8 years agoimplemented redis query and connection timeout 2142/head
Marko Rizvic [Fri, 15 Dec 2017 22:05:23 +0000 (23:05 +0100)] 
implemented redis query and connection timeout

8 years agoMerge pull request #2139 from BriceSchaffner/patch-3
Alan DeKok [Tue, 12 Dec 2017 17:44:15 +0000 (12:44 -0500)] 
Merge pull request #2139 from BriceSchaffner/patch-3

Added missing attributes

8 years agoMerge pull request #2141 from mcnewton/v3.0.x
Alan DeKok [Tue, 12 Dec 2017 13:52:25 +0000 (08:52 -0500)] 
Merge pull request #2141 from mcnewton/v3.0.x

inner-server openssl config install

8 years agobomb out immediately rather than silently fail 2141/head
Matthew Newton [Tue, 12 Dec 2017 13:39:18 +0000 (13:39 +0000)] 
bomb out immediately rather than silently fail

if we can't generate passwords.mk, we're stuffed anyway

8 years agoinstall inner-server.cnf config file
Matthew Newton [Tue, 12 Dec 2017 13:37:56 +0000 (13:37 +0000)] 
install inner-server.cnf config file

8 years agoAdded missing attributes 2139/head
Brice Schaffner [Tue, 12 Dec 2017 06:54:46 +0000 (07:54 +0100)] 
Added missing attributes

Patton-Group and Patton-Web-Privilege-Level attributes were missing. These attributes can be used in an Accept Request to specify the user group (operator, administrator or superuser) or the web privilege level of the user (wizard-exec or advanced).

8 years agonote recent changes
Alan T. DeKok [Mon, 11 Dec 2017 15:35:28 +0000 (10:35 -0500)] 
note recent changes

8 years agoadded disconnect-reason
Alan T. DeKok [Mon, 11 Dec 2017 15:33:33 +0000 (10:33 -0500)] 
added disconnect-reason

and reformatted

8 years agoadd "inner-server" scripts and configuration
Alan T. DeKok [Mon, 11 Dec 2017 15:32:25 +0000 (10:32 -0500)] 
add "inner-server" scripts and configuration

8 years agospelling, remove spaces
Matthew Newton [Mon, 11 Dec 2017 14:19:58 +0000 (14:19 +0000)] 
spelling, remove spaces

8 years agodebian packaging fixes
Matthew Newton [Mon, 11 Dec 2017 13:46:51 +0000 (13:46 +0000)] 
debian packaging fixes

- Remove disable-dhcp-by-default patch, as it's now disabled
  by default since 2662182b
- Refresh quilt patches

8 years agodebian/ubuntu pkgs need dh-systemd. Fixes #2136
Alan T. DeKok [Fri, 8 Dec 2017 20:51:23 +0000 (15:51 -0500)] 
debian/ubuntu pkgs need dh-systemd.  Fixes #2136

8 years agoDon't enable dhcp by default as it has a dependency on rlm_dhcp which won't necessari...
Arran Cudbard-Bell [Fri, 8 Dec 2017 12:17:40 +0000 (12:17 +0000)] 
Don't enable dhcp by default as it has a dependency on rlm_dhcp which won't necessarily be installed

8 years agoTypo
Arran Cudbard-Bell [Fri, 8 Dec 2017 12:00:49 +0000 (12:00 +0000)] 
Typo

8 years agoFixup service file install
Arran Cudbard-Bell [Fri, 8 Dec 2017 11:59:00 +0000 (11:59 +0000)] 
Fixup service file install

See: https://wiki.debian.org/Teams/pkg-systemd/Packaging

8 years agodocument IP / network comparisons
Alan T. DeKok [Wed, 6 Dec 2017 15:23:56 +0000 (10:23 -0500)] 
document IP / network comparisons

8 years agoremove redundancy
Alan T. DeKok [Thu, 30 Nov 2017 15:06:09 +0000 (10:06 -0500)] 
remove redundancy

8 years agonote recent changes
Alan T. DeKok [Mon, 20 Nov 2017 16:21:20 +0000 (11:21 -0500)] 
note recent changes

8 years agoinitialize mutexes before modules_init(). Helps with #2129
Alan T. DeKok [Mon, 20 Nov 2017 16:10:44 +0000 (11:10 -0500)] 
initialize mutexes before modules_init().  Helps with #2129

8 years agoRevert "don't include TLV header in crypto_binding. Helps with #2127"
Alan T. DeKok [Fri, 17 Nov 2017 22:24:52 +0000 (17:24 -0500)] 
Revert "don't include TLV header in crypto_binding.  Helps with #2127"

This reverts commit ee4de4663a3d7d4187d0e41916af0d66c46a73af.

8 years agobuild issues. Helps with #2127
Alan T. DeKok [Fri, 17 Nov 2017 21:38:44 +0000 (16:38 -0500)] 
build issues.  Helps with #2127

8 years agodon't include TLV header in crypto_binding. Helps with #2127
Alan T. DeKok [Fri, 17 Nov 2017 21:07:28 +0000 (16:07 -0500)] 
don't include TLV header in crypto_binding.  Helps with #2127

so we can just use the data contents as-is.

8 years agoeap-fast: fail on crypto-binding mismatch
Alan T. DeKok [Fri, 17 Nov 2017 21:05:33 +0000 (16:05 -0500)] 
eap-fast: fail on crypto-binding mismatch
as per rfc 4851, an invalid crypto-binding tlv is a
fatal error, handle accordingly.

Signed-off-by: Isaac Boukris <iboukris@gmail.com>
8 years agocheck length before memcpy()
Alan T. DeKok [Fri, 17 Nov 2017 21:02:00 +0000 (16:02 -0500)] 
check length before memcpy()

8 years agore-arrange
Alan T. DeKok [Fri, 17 Nov 2017 21:01:47 +0000 (16:01 -0500)] 
re-arrange

8 years agoset thread callback for newer OpenSSL. Fixes #2125
Alan T. DeKok [Thu, 16 Nov 2017 16:34:22 +0000 (11:34 -0500)] 
set thread callback for newer OpenSSL.  Fixes #2125

8 years agonote recent changes
Alan T. DeKok [Thu, 16 Nov 2017 16:06:18 +0000 (11:06 -0500)] 
note recent changes

8 years agoremove unused tables
Alan T. DeKok [Thu, 16 Nov 2017 16:01:55 +0000 (11:01 -0500)] 
remove unused tables

8 years agoremove UNIQUE constraint.
Alan T. DeKok [Thu, 16 Nov 2017 16:00:57 +0000 (11:00 -0500)] 
remove UNIQUE constraint.

No other DB schema has it

8 years agoone last conversion to the proper name
Alan T. DeKok [Tue, 14 Nov 2017 20:08:46 +0000 (15:08 -0500)] 
one last conversion to the proper name

8 years agoallow VSAs, too. Fixes #2094
Alan T. DeKok [Tue, 14 Nov 2017 19:57:54 +0000 (14:57 -0500)] 
allow VSAs, too.  Fixes #2094

8 years agotypo. Fixes #2121
Alan T. DeKok [Tue, 14 Nov 2017 16:51:15 +0000 (11:51 -0500)] 
typo.  Fixes #2121

8 years agomanual merge of #2121
Alan T. DeKok [Tue, 14 Nov 2017 16:27:35 +0000 (11:27 -0500)] 
manual merge of #2121

8 years agoupdate to match "configure"
Alan T. DeKok [Mon, 13 Nov 2017 20:28:59 +0000 (15:28 -0500)] 
update to match "configure"

8 years agoregenerate after '==' to '=' change
Alan T. DeKok [Mon, 13 Nov 2017 20:28:40 +0000 (15:28 -0500)] 
regenerate after '==' to '=' change

8 years agoopen expanded filename, not original one
Alan T. DeKok [Mon, 13 Nov 2017 13:27:11 +0000 (08:27 -0500)] 
open expanded filename, not original one

8 years agoenable reproducible builds for debian packages
Matthew Newton [Fri, 10 Nov 2017 16:48:42 +0000 (16:48 +0000)] 
enable reproducible builds for debian packages

8 years agoadd --enable-reproducible-builds configure option
Matthew Newton [Fri, 10 Nov 2017 11:26:58 +0000 (11:26 +0000)] 
add --enable-reproducible-builds configure option

So that __DATE__ and __TIME__ can be removed only when needed;
turns off warnings when not using reproducible builds.

8 years agodon't complain about key not being set
Matthew Newton [Thu, 9 Nov 2017 19:11:53 +0000 (19:11 +0000)] 
don't complain about key not being set

8 years agoremove __DATE__ and __TIME__
Matthew Newton [Thu, 9 Nov 2017 16:28:41 +0000 (16:28 +0000)] 
remove __DATE__ and __TIME__

"reproducible builds" is apparently a thing, and gcc
has started complaining

8 years agonote recent changes
Alan T. DeKok [Thu, 9 Nov 2017 19:00:52 +0000 (14:00 -0500)] 
note recent changes

8 years agoMerge pull request #2114 from alejandro-perez/patch-2
Alan DeKok [Thu, 9 Nov 2017 13:35:42 +0000 (08:35 -0500)] 
Merge pull request #2114 from alejandro-perez/patch-2

Add missing declaration of key_expiration

8 years agoAdd missing declaration of key_expiration 2114/head
Alejandro Perez [Thu, 9 Nov 2017 07:49:47 +0000 (08:49 +0100)] 
Add missing declaration of key_expiration

The declaration was lost during manual merge. This should fix it.

8 years agoensure freeradius can read the server certificate
Matthew Newton [Wed, 8 Nov 2017 22:22:54 +0000 (22:22 +0000)] 
ensure freeradius can read the server certificate

permissions locked down more by default on debian stretch

8 years agoallow new version of openssl package in debian stretch
Matthew Newton [Wed, 8 Nov 2017 21:53:48 +0000 (21:53 +0000)] 
allow new version of openssl package in debian stretch

8 years agoconvert assertion to run-time check. Fixes #2110
Alan T. DeKok [Wed, 8 Nov 2017 15:59:23 +0000 (10:59 -0500)] 
convert assertion to run-time check.  Fixes #2110

8 years agomove rbio call to later. Closes #2107
Alan T. DeKok [Sun, 5 Nov 2017 12:37:58 +0000 (07:37 -0500)] 
move rbio call to later.  Closes #2107

8 years agosimplify
Alan T. DeKok [Fri, 3 Nov 2017 14:46:18 +0000 (10:46 -0400)] 
simplify

8 years agonote recent changes
Alan T. DeKok [Fri, 3 Nov 2017 13:42:39 +0000 (09:42 -0400)] 
note recent changes

8 years agoradattr doesn't need dhcp always. Fixes #2039
Alan T. DeKok [Fri, 3 Nov 2017 13:36:44 +0000 (09:36 -0400)] 
radattr doesn't need dhcp always.  Fixes #2039

8 years agoupdate schema. Fixes #2061
Alan T. DeKok [Fri, 3 Nov 2017 13:26:16 +0000 (09:26 -0400)] 
update schema.  Fixes #2061

Getting pull requests from people is MUCH nicer than people
opening bug reports and saying "meh, you guys fix it."

It's not really that much more difficult to send a pull request
than to open a bug report.

8 years agoexplain why a connection was closed. Fixes #1969
Alan T. DeKok [Fri, 3 Nov 2017 13:23:32 +0000 (09:23 -0400)] 
explain why a connection was closed.  Fixes #1969

8 years agonote recent changes
Alan T. DeKok [Fri, 3 Nov 2017 13:08:07 +0000 (09:08 -0400)] 
note recent changes

8 years agocheck DHCP-Message-Type
Alan T. DeKok [Fri, 3 Nov 2017 13:06:50 +0000 (09:06 -0400)] 
check DHCP-Message-Type

8 years agoconvert assertion to run-time check. Fixes #2028
Alan T. DeKok [Fri, 3 Nov 2017 13:06:31 +0000 (09:06 -0400)] 
convert assertion to run-time check.  Fixes #2028

8 years agomore attributes
Alan T. DeKok [Fri, 3 Nov 2017 10:15:01 +0000 (06:15 -0400)] 
more attributes

8 years agonote recent changes
Alan T. DeKok [Fri, 3 Nov 2017 10:13:10 +0000 (06:13 -0400)] 
note recent changes

8 years agoRead multiple packets from an SSL session. Fixes #2106
Alan T. DeKok [Fri, 3 Nov 2017 10:09:27 +0000 (06:09 -0400)] 
Read multiple packets from an SSL session.  Fixes #2106

8 years agoremove asserts on vars declared as nonnull
Matthew Newton [Fri, 27 Oct 2017 18:06:56 +0000 (19:06 +0100)] 
remove asserts on vars declared as nonnull

stops gcc6 complaints with -Wnonnull-compare

8 years agoremove unnecessary assert
Alan T. DeKok [Thu, 26 Oct 2017 21:27:10 +0000 (17:27 -0400)] 
remove unnecessary assert

8 years agonote recent changes
Alan T. DeKok [Thu, 26 Oct 2017 13:49:36 +0000 (09:49 -0400)] 
note recent changes

8 years agocalculate triplets from Ki.
Alan T. DeKok [Wed, 25 Oct 2017 20:37:28 +0000 (16:37 -0400)] 
calculate triplets from Ki.

Why this wasn't done 15 years ago is beyond me.

And fix goddamned debug macros.  Which apparently were also
broken.

8 years agocompare hex values side by side
Alan T. DeKok [Wed, 25 Oct 2017 20:30:48 +0000 (16:30 -0400)] 
compare hex values side by side

8 years agosend back error messages if we can't find the information
Alan T. DeKok [Wed, 25 Oct 2017 11:05:17 +0000 (07:05 -0400)] 
send back error messages if we can't find the information

8 years agonote recent changes
Alan T. DeKok [Wed, 25 Oct 2017 10:50:31 +0000 (06:50 -0400)] 
note recent changes

8 years agonote that the queries have changed, too
Alan T. DeKok [Wed, 25 Oct 2017 10:48:44 +0000 (06:48 -0400)] 
note that the queries have changed, too

8 years agoadd "allow_duplicates" config. Helps with #2094
Alan T. DeKok [Wed, 25 Oct 2017 10:43:47 +0000 (06:43 -0400)] 
add "allow_duplicates" config.  Helps with #2094

8 years agoAllow NAS to be IPv4 or IPv6. Helps with #2094
Alan T. DeKok [Tue, 24 Oct 2017 19:09:15 +0000 (15:09 -0400)] 
Allow NAS to be IPv4 or IPv6.  Helps with #2094

8 years agouse configured attribute in queries. Helps with #2094
Alan T. DeKok [Tue, 24 Oct 2017 19:07:26 +0000 (15:07 -0400)] 
use configured attribute in queries.  Helps with #2094

8 years agoallow "attribute_name" to make it generic. Helps with #2094
Alan T. DeKok [Tue, 24 Oct 2017 18:59:36 +0000 (14:59 -0400)] 
allow "attribute_name" to make it generic.  Helps with #2094

8 years agoanother convert assertion to run-time check
Alan T. DeKok [Fri, 20 Oct 2017 13:11:24 +0000 (09:11 -0400)] 
another convert assertion to run-time check

8 years agoMerge pull request #2101 from zmousm/revert_logrotate_rotate_val
Arran Cudbard-Bell [Mon, 23 Oct 2017 20:41:07 +0000 (09:41 +1300)] 
Merge pull request #2101 from zmousm/revert_logrotate_rotate_val

logrotate: Revert daily rotations from 52 back to 14

8 years agologrotate: Revert daily rotations from 52 back to 14 2101/head
Zenon Mousmoulas [Mon, 23 Oct 2017 13:05:47 +0000 (16:05 +0300)] 
logrotate: Revert daily rotations from 52 back to 14

14 is a more suitable default for daily rotation, while 52 rather
reminds of weekly rotation.

8 years agoMerge pull request #2093 from zmousm/fix_logrotate
Arran Cudbard-Bell [Sat, 21 Oct 2017 01:49:16 +0000 (14:49 +1300)] 
Merge pull request #2093 from zmousm/fix_logrotate

logrotate: don't accidentally define global options

8 years agoMerge branch 'v3.0.x' into fix_logrotate 2093/head
Arran Cudbard-Bell [Sat, 21 Oct 2017 01:49:07 +0000 (14:49 +1300)] 
Merge branch 'v3.0.x' into fix_logrotate

8 years agoconvert assertion to run-time check
Alan T. DeKok [Fri, 20 Oct 2017 12:43:50 +0000 (08:43 -0400)] 
convert assertion to run-time check