]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
4 months agothis isn't used, so we delete it
Alan T. DeKok [Sat, 24 Jan 2026 17:22:06 +0000 (12:22 -0500)] 
this isn't used, so we delete it

4 months agonone of these modules use attr_state in any way
Alan T. DeKok [Sat, 24 Jan 2026 16:25:15 +0000 (11:25 -0500)] 
none of these modules use attr_state in any way

so we delete all references to attr_state.

4 months agoantora errors are now CI failures
Alan T. DeKok [Sat, 24 Jan 2026 14:20:06 +0000 (09:20 -0500)] 
antora errors are now CI failures

4 months agofix antora errors
Alan T. DeKok [Sat, 24 Jan 2026 14:16:49 +0000 (09:16 -0500)] 
fix antora errors

4 months agoformat and clean up docs on using git
Alan T. DeKok [Sat, 24 Jan 2026 13:55:19 +0000 (08:55 -0500)] 
format and clean up docs on using git

4 months agofix typo in name
Alan T. DeKok [Sat, 24 Jan 2026 13:50:14 +0000 (08:50 -0500)] 
fix typo in name

4 months agoclean up for raddb
Alan T. DeKok [Sat, 24 Jan 2026 13:45:31 +0000 (08:45 -0500)] 
clean up for raddb

4 months agoreplace raddb/users with `users`, to make it more generic
Alan T. DeKok [Sat, 24 Jan 2026 13:33:58 +0000 (08:33 -0500)] 
replace raddb/users with `users`, to make it more generic

4 months agomore remove raddb
Alan T. DeKok [Sat, 24 Jan 2026 13:30:40 +0000 (08:30 -0500)] 
more remove raddb

4 months agomore remove raddb
Alan T. DeKok [Fri, 23 Jan 2026 23:38:15 +0000 (18:38 -0500)] 
more remove raddb

4 months agomore remove `raddb/...`
Alan T. DeKok [Fri, 23 Jan 2026 23:35:19 +0000 (18:35 -0500)] 
more remove `raddb/...`

The various OS packages use /etc/freeradius/3.x for example, so
the "raddb" name is considerably out of date.

4 months agoremove raddb/ from more of the documentation
Alan T. DeKok [Fri, 23 Jan 2026 23:32:25 +0000 (18:32 -0500)] 
remove raddb/ from more of the documentation

4 months agoremove etc/raddb from the tutorials
Alan T. DeKok [Fri, 23 Jan 2026 23:30:12 +0000 (18:30 -0500)] 
remove etc/raddb from the tutorials

we might rename the directory, and there's no real need to show
the full directory path.

4 months agothis is partly wrong, and too small to be useful
Alan T. DeKok [Fri, 23 Jan 2026 23:23:57 +0000 (18:23 -0500)] 
this is partly wrong, and too small to be useful

4 months agomove util test to src/tests/util/test directory
Alan T. DeKok [Fri, 23 Jan 2026 23:23:31 +0000 (18:23 -0500)] 
move util test to src/tests/util/test directory

4 months agoadd copyright to all documentation pages
Alan T. DeKok [Fri, 23 Jan 2026 23:16:01 +0000 (18:16 -0500)] 
add copyright to all documentation pages

4 months agodocs: update header and introduction for update blocks tutorial
Tharka Karunanayake [Tue, 20 Jan 2026 12:31:56 +0000 (18:01 +0530)] 
docs: update header and introduction for update blocks tutorial

docs: add condition 1 example and testing

docs: add condition 2 example and testing

docs: add condition 3 example, testing scenarios and questions

docs: Add new tutorial on editing attributes using Unlang policy language and update module navigation.

4 months agodocs: improve unlang policies introduction and preparation section
Tharka Karunanayake [Tue, 20 Jan 2026 12:06:13 +0000 (17:36 +0530)] 
docs: improve unlang policies introduction and preparation section

docs: provide concrete policy example referencing splitting strings

docs: define task to call realm-split policy

docs: add comprehensive testing steps

4 months agodoc: refactor intro and remove legacy notes from accounting tutorial
tharkadharshana [Thu, 15 Jan 2026 17:01:48 +0000 (22:31 +0530)] 
doc: refactor intro and remove legacy notes from accounting tutorial

doc: add guided authentication step to accounting tutorial

doc: add guided Accounting-Start step to accounting tutorial

doc: add step for verifying accounting data in detail log

doc: add guided Accounting-Stop step to accounting tutorial

4 months agodoc: add configuration and runtime variable examples to variables tutorial
tharkadharshana [Fri, 16 Jan 2026 10:51:09 +0000 (16:21 +0530)] 
doc: add configuration and runtime variable examples to variables tutorial

doc: add detailed explanation of filename variable expansion in detail module

doc: add server debug output example for detail module variable expansion

doc: add radclient test and detail log verification steps

doc: add example of dynamic variable expansion in reply attributes

4 months agodoc: refactor header and intro for unlang splitting strings tutorial
tharkadharshana [Mon, 19 Jan 2026 10:38:56 +0000 (16:08 +0530)] 
doc: refactor header and intro for unlang splitting strings tutorial

doc: add common control attributes and formalize task description

doc: add unlang policy code and server integration instructions

doc: add verification and testing section with multiple scenarios

4 months agounlock mutex before logging
Alan T. DeKok [Fri, 23 Jan 2026 21:15:33 +0000 (16:15 -0500)] 
unlock mutex before logging

4 months agoaddress locking issues. CID #1680642
Alan T. DeKok [Fri, 23 Jan 2026 21:00:57 +0000 (16:00 -0500)] 
address locking issues.  CID #1680642

4 months agoset cp->referenced if it's referenced
Alan T. DeKok [Fri, 23 Jan 2026 18:17:10 +0000 (13:17 -0500)] 
set cp->referenced if it's referenced

which lowers the number of warning / complaint messages

4 months agomove util API tests to src/lib/util/test
Alan T. DeKok [Fri, 23 Jan 2026 18:11:22 +0000 (13:11 -0500)] 
move util API tests to src/lib/util/test

they were starting to clutter up the directory.

These tests are not in src/tests, because they create binaries
which test the APIs.

4 months agodefine and use SBUFF_CHAR_CLASS
Alan T. DeKok [Fri, 23 Jan 2026 16:50:50 +0000 (11:50 -0500)] 
define and use SBUFF_CHAR_CLASS

for arrays of characters.  This is clearer than UINT8_MAX+1

4 months agoParse suppress_secrets for additional log destinations
Nick Porter [Fri, 23 Jan 2026 17:04:22 +0000 (17:04 +0000)] 
Parse suppress_secrets for additional log destinations

4 months agoadd policy on AI agents
Alan T. DeKok [Fri, 23 Jan 2026 15:55:02 +0000 (10:55 -0500)] 
add policy on AI agents

4 months agoTidy up on decode failure
Nick Porter [Fri, 23 Jan 2026 09:19:01 +0000 (09:19 +0000)] 
Tidy up on decode failure

4 months agoIf we have DER decoded certs pass them to verify certificate
Nick Porter [Fri, 23 Jan 2026 09:13:03 +0000 (09:13 +0000)] 
If we have DER decoded certs pass them to verify certificate

4 months agoEnsure DER decoded certificates are cleared up on error
Nick Porter [Fri, 23 Jan 2026 09:12:03 +0000 (09:12 +0000)] 
Ensure DER decoded certificates are cleared up on error

4 months agoInsert DER decoded certificates in client, issuer etc sequence
Nick Porter [Fri, 23 Jan 2026 09:11:21 +0000 (09:11 +0000)] 
Insert DER decoded certificates in client, issuer etc sequence

OpenSSL present deepest certificate first, so prepend each decoded one
to the session state list in order to get them in the desired sequence.

4 months agoAdd rlm_interval to RHEL packaging
Nick Porter [Fri, 23 Jan 2026 08:46:51 +0000 (08:46 +0000)] 
Add rlm_interval to RHEL packaging

4 months agoAttribute not found errors are consistent regardsless of having list specifier
Nick Porter [Fri, 23 Jan 2026 08:28:40 +0000 (08:28 +0000)] 
Attribute not found errors are consistent regardsless of having list specifier

now that the tokenizing parent is consistent in the two cases.

4 months agoWhen a list ref is found in a tmpl set the namespace to NULL
Nick Porter [Thu, 22 Jan 2026 18:27:08 +0000 (18:27 +0000)] 
When a list ref is found in a tmpl set the namespace to NULL

This means that parsing `<list>.<attr>` behaves the same as parsing
`<attr>`

Specifically this allows `<list>.<proto>.<attr>` to work.  Previously,
`<proto>.<attr>` would work for allowing access to attributes from other
namespaces in the `request` list, but `<list>.<proto>.<attr>` would not.

4 months agoClarifying comments around release_reset
Arran Cudbard-Bell [Thu, 22 Jan 2026 23:31:47 +0000 (15:31 -0800)] 
Clarifying comments around release_reset

4 months agoAdd rlm_interval to enforce rate limiting within policies
Arran Cudbard-Bell [Thu, 22 Jan 2026 21:34:27 +0000 (13:34 -0800)] 
Add rlm_interval to enforce rate limiting within policies

4 months agoFix typo that meant thread instance data wasn't passed into xlats.
Arran Cudbard-Bell [Thu, 22 Jan 2026 21:32:31 +0000 (13:32 -0800)] 
Fix typo that meant thread instance data wasn't passed into xlats.

4 months agoAdd notes for around uses of timer lists
Arran Cudbard-Bell [Thu, 22 Jan 2026 15:28:29 +0000 (07:28 -0800)] 
Add notes for around uses of timer lists

4 months agoFix some duplicate log IDs
Arran Cudbard-Bell [Thu, 22 Jan 2026 13:55:46 +0000 (05:55 -0800)] 
Fix some duplicate log IDs

4 months agoClaude is private for now
Arran Cudbard-Bell [Thu, 22 Jan 2026 13:54:51 +0000 (05:54 -0800)] 
Claude is private for now

4 months agoAdd pointer comprisons for voids
Arran Cudbard-Bell [Thu, 22 Jan 2026 13:54:27 +0000 (05:54 -0800)] 
Add pointer comprisons for voids

Add shallow copy function for voids too

This is wrong in 80%+ of cases, but useful where it's right :)

4 months agoFix typo in variable name for pre-file execution
Arran Cudbard-Bell [Thu, 22 Jan 2026 23:24:45 +0000 (15:24 -0800)] 
Fix typo in variable name for pre-file execution

4 months agodelay cleaning session-state until after finally { ... }
Alan T. DeKok [Thu, 22 Jan 2026 22:09:24 +0000 (17:09 -0500)] 
delay cleaning session-state until after finally { ... }

4 months agofr_state_discard() can just call request_data_get()
Alan T. DeKok [Thu, 22 Jan 2026 21:44:04 +0000 (16:44 -0500)] 
fr_state_discard() can just call request_data_get()

4 months agorename fr_state_() functions for consistency
Alan T. DeKok [Thu, 22 Jan 2026 21:28:10 +0000 (16:28 -0500)] 
rename fr_state_() functions for consistency

4 months agoremove old comment
Alan T. DeKok [Thu, 22 Jan 2026 21:27:54 +0000 (16:27 -0500)] 
remove old comment

4 months agodiscard state on Protocol-Error, too
Alan T. DeKok [Thu, 22 Jan 2026 20:44:18 +0000 (15:44 -0500)] 
discard state on Protocol-Error, too

i.e. if we're sending a Protocol-Error back to the client, then
we can't do anything else with the State attribute

4 months agomove state data to a config structure
Alan T. DeKok [Thu, 22 Jan 2026 12:47:44 +0000 (07:47 -0500)] 
move state data to a config structure

4 months agoremove extraneous %{} when printing xlat functions
Alan T. DeKok [Thu, 22 Jan 2026 12:47:25 +0000 (07:47 -0500)] 
remove extraneous %{} when printing xlat functions

4 months agodocument new behavior, we don't need to comment out config sections
Alan T. DeKok [Thu, 22 Jan 2026 12:15:16 +0000 (07:15 -0500)] 
document new behavior, we don't need to comment out config sections

instead we just remove `type = ...`, and the corresponding config
section is ignored.

4 months agoAlso copy allow_vulnerable_clients for dynamic clients
Nick Porter [Wed, 21 Jan 2026 19:27:33 +0000 (19:27 +0000)] 
Also copy allow_vulnerable_clients for dynamic clients

4 months agoVirtual server `catch timeout` is now testing `timeout` in `finally`
Nick Porter [Wed, 21 Jan 2026 14:49:40 +0000 (14:49 +0000)] 
Virtual server `catch timeout` is now testing `timeout` in `finally`

4 months agoDon't print full attriubte paths on each attribute in %pairs.debug()
Nick Porter [Wed, 21 Jan 2026 14:21:07 +0000 (14:21 +0000)] 
Don't print full attriubte paths on each attribute in %pairs.debug()

4 months agoAdd shortname to common der attributes
Nick Porter [Wed, 21 Jan 2026 10:14:24 +0000 (10:14 +0000)] 
Add shortname to common der attributes

4 months agoFailure to set shortname is the error
Nick Porter [Wed, 21 Jan 2026 10:43:04 +0000 (10:43 +0000)] 
Failure to set shortname is the error

4 months agoadd API for "shortname=foo" so we can print OpenSSL names for things
Alan T. DeKok [Tue, 20 Jan 2026 23:17:43 +0000 (18:17 -0500)] 
add API for "shortname=foo" so we can print OpenSSL names for things

4 months agoupdate "add alias" API to allow for non-public aliases
Alan T. DeKok [Tue, 20 Jan 2026 22:15:17 +0000 (17:15 -0500)] 
update "add alias" API to allow for non-public aliases

for the public dicts, we require that the aliases are within the
same parent node.  For aliases added internally, we can with some
care, allow for more generic aliases

4 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/cbor.tar
github-actions[bot] [Tue, 20 Jan 2026 04:46:49 +0000 (04:46 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/cbor.tar

4 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/der.tar
github-actions[bot] [Tue, 20 Jan 2026 04:46:19 +0000 (04:46 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/der.tar

5 months agoremove more uses of 'Tmp-*'
Alan T. DeKok [Mon, 19 Jan 2026 15:50:18 +0000 (10:50 -0500)] 
remove more uses of 'Tmp-*'

5 months agoadd missing '.' for consistency
Alan T. DeKok [Mon, 19 Jan 2026 15:49:39 +0000 (10:49 -0500)] 
add missing '.' for consistency

5 months agofix doc link
Alan T. DeKok [Mon, 19 Jan 2026 15:00:19 +0000 (10:00 -0500)] 
fix doc link

5 months agofree input arguments after running a function
Alan T. DeKok [Sun, 18 Jan 2026 20:52:50 +0000 (15:52 -0500)] 
free input arguments after running a function

5 months agoadd provisions for htrie iterators.
Alan T. DeKok [Sat, 17 Jan 2026 15:36:00 +0000 (10:36 -0500)] 
add provisions for htrie iterators.

not for patricia tries right now.  That can be added later.

5 months agothe input value-box is already allocated in the output context
Alan T. DeKok [Sat, 17 Jan 2026 15:30:07 +0000 (10:30 -0500)] 
the input value-box is already allocated in the output context

but if we're moving a child of a group, we do have to re-parent it.

5 months agothe node in the iterator is the next one, not the current node
Alan T. DeKok [Sat, 17 Jan 2026 15:15:32 +0000 (10:15 -0500)] 
the node in the iterator is the next one, not the current node

5 months agomake unit tests run in series again
Alan T. DeKok [Sat, 17 Jan 2026 13:10:57 +0000 (08:10 -0500)] 
make unit tests run in series again

which means that they actually run.  We'll need to track down why
the current rules sometimes fail to run.

This reverts commit b10d283d34c and commit 4908edb115

5 months agoreplace foreach_safe() with a safe foreach()
Alan T. DeKok [Sat, 17 Jan 2026 13:10:28 +0000 (08:10 -0500)] 
replace foreach_safe() with a safe foreach()

5 months agoadd function to copy xlat argument to output cursor
Alan T. DeKok [Sat, 17 Jan 2026 12:44:39 +0000 (07:44 -0500)] 
add function to copy xlat argument to output cursor

because the input arguments might (eventually) be a value-box
cursor.  And we want to copy the cursor output, not the cursor
itself.

5 months agoadd "kv" the table of datastores, too
Alan T. DeKok [Fri, 16 Jan 2026 22:21:35 +0000 (17:21 -0500)] 
add "kv" the table of datastores, too

5 months agotry to quiet UBSAN on OSX
Alan T. DeKok [Fri, 16 Jan 2026 21:29:44 +0000 (16:29 -0500)] 
try to quiet UBSAN on OSX

5 months agoassociate data with the mutable struct
Alan T. DeKok [Fri, 16 Jan 2026 21:18:48 +0000 (16:18 -0500)] 
associate data with the mutable struct

so that it's cleaned up automatically on exit

5 months agotweak RB iterators to use same API layout as other tables
Alan T. DeKok [Fri, 16 Jan 2026 20:49:33 +0000 (15:49 -0500)] 
tweak RB iterators to use same API layout as other tables

hash / etc. all use (thing, iter), whereas the RB code either
used (iter, thing), or just (iter).

Using the same API means that we can then add iterators to the
htrie code.

5 months agoadd sample configuration, and update docs to match
Alan T. DeKok [Fri, 16 Jan 2026 13:49:43 +0000 (08:49 -0500)] 
add sample configuration, and update docs to match

5 months agoadd script to automatically get a list of URLs for RFCs we support
Alan T. DeKok [Fri, 16 Jan 2026 19:26:55 +0000 (14:26 -0500)] 
add script to automatically get a list of URLs for RFCs we support

5 months agoadd in-memory KV module and tests
Alan T. DeKok [Fri, 16 Jan 2026 12:24:59 +0000 (07:24 -0500)] 
add in-memory KV module and tests

5 months agojust rely on fr_pair_print_value_quoted()
Alan T. DeKok [Fri, 16 Jan 2026 00:15:02 +0000 (19:15 -0500)] 
just rely on fr_pair_print_value_quoted()

5 months agoadd one more suppression for OSX
Alan T. DeKok [Thu, 15 Jan 2026 22:22:17 +0000 (17:22 -0500)] 
add one more suppression for OSX

5 months agoinstall stats file, too.
Alan T. DeKok [Thu, 15 Jan 2026 17:32:22 +0000 (12:32 -0500)] 
install stats file, too.

so that the RPM build doesn't complain

5 months agomore "squash nested names"
Alan T. DeKok [Thu, 15 Jan 2026 16:38:48 +0000 (11:38 -0500)] 
more "squash nested names"

add it to more code, and correct the output for all code paths.

5 months agodisable leak detection on CI runs for OSX
Alan T. DeKok [Thu, 15 Jan 2026 15:58:19 +0000 (10:58 -0500)] 
disable leak detection on CI runs for OSX

the underlying OSX libraries produce a ton of false positives,
and we don't have time right now to track them all down and add
suppression rules for each one.

5 months agodoc: update new_client tutorial for FreeRADIUS 4.0
tharkadharshana [Thu, 15 Jan 2026 14:13:00 +0000 (19:43 +0530)] 
doc: update new_client tutorial for FreeRADIUS 4.0

5 months agodoc: add combined test for all entries
tharkadharshana [Thu, 15 Jan 2026 03:05:13 +0000 (08:35 +0530)] 
doc: add combined test for all entries

5 months agodoc: add combined test for entries 1 and 2
tharkadharshana [Thu, 15 Jan 2026 03:04:18 +0000 (08:34 +0530)] 
doc: add combined test for entries 1 and 2

5 months agodoc: add exercise 3 default framed user
tharkadharshana [Thu, 15 Jan 2026 03:03:34 +0000 (08:33 +0530)] 
doc: add exercise 3 default framed user

5 months agodoc: add exercise 2 PPP configuration
tharkadharshana [Thu, 15 Jan 2026 03:02:45 +0000 (08:32 +0530)] 
doc: add exercise 2 PPP configuration

5 months agodoc: add exercise 1 basic configuration
tharkadharshana [Thu, 15 Jan 2026 03:01:22 +0000 (08:31 +0530)] 
doc: add exercise 1 basic configuration

5 months agotweak and add headings, which makes it easier to understand
Alan T. DeKok [Thu, 15 Jan 2026 13:36:42 +0000 (08:36 -0500)] 
tweak and add headings, which makes it easier to understand

5 months agodoc: add CHAP verification details
tharkadharshana [Thu, 15 Jan 2026 03:28:16 +0000 (08:58 +0530)] 
doc: add CHAP verification details

5 months agodoc: add logging instructions and specific error message examples
tharkadharshana [Thu, 15 Jan 2026 03:26:09 +0000 (08:56 +0530)] 
doc: add logging instructions and specific error message examples

5 months agodoc: add detailed verification output and radclient test command
tharkadharshana [Thu, 15 Jan 2026 03:24:38 +0000 (08:54 +0530)] 
doc: add detailed verification output and radclient test command

5 months agodoc: add command to edit authorize file
tharkadharshana [Thu, 15 Jan 2026 03:22:39 +0000 (08:52 +0530)] 
doc: add command to edit authorize file

5 months agodoc: update file paths and formatting
tharkadharshana [Thu, 15 Jan 2026 03:18:46 +0000 (08:48 +0530)] 
doc: update file paths and formatting

5 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar
github-actions[bot] [Thu, 15 Jan 2026 04:34:49 +0000 (04:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv4.tar

5 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar
github-actions[bot] [Thu, 15 Jan 2026 04:34:23 +0000 (04:34 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dns.tar

5 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar
github-actions[bot] [Thu, 15 Jan 2026 04:33:41 +0000 (04:33 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/radius.tar

5 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar
github-actions[bot] [Thu, 15 Jan 2026 04:32:59 +0000 (04:32 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/bfd.tar

5 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar
github-actions[bot] [Thu, 15 Jan 2026 04:32:07 +0000 (04:32 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/dhcpv6.tar

5 months agosquash the nested names down when debugging
Alan T. DeKok [Wed, 14 Jan 2026 16:33:30 +0000 (11:33 -0500)] 
squash the nested names down when debugging