]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
5 months agoraduat: Use arrays for role_types
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:32:11 +0000 (11:32 +0000)] 
raduat: Use arrays for role_types

5 months agoraduat: WS
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:19:29 +0000 (11:19 +0000)] 
raduat: WS

5 months agoraduat: Add option to quietly skip tests for hosts we don't have cluster or role...
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:10:14 +0000 (11:10 +0000)] 
raduat: Add option to quietly skip tests for hosts we don't have cluster or role definitions for

5 months agoraduat: Rename help function
Arran Cudbard-Bell [Thu, 1 Jan 2026 11:05:23 +0000 (11:05 +0000)] 
raduat: Rename help function

5 months agoraduat: Print the actual default value for parallel
Arran Cudbard-Bell [Thu, 1 Jan 2026 10:57:25 +0000 (10:57 +0000)] 
raduat:  Print the actual default value for parallel

5 months agoraduat: Allow custom splitting on FQDN. Use a single var for cluster matching and...
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:44:55 +0000 (19:44 +0000)] 
raduat: Allow custom splitting on FQDN.  Use a single var for cluster matching and as the destination for where we send test packets

5 months agoraduat: Remove useless semicolon
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:31:48 +0000 (19:31 +0000)] 
raduat: Remove useless semicolon

5 months agoraduat: Clean up temporary files on exit
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:02:31 +0000 (19:02 +0000)] 
raduat:  Clean up temporary files on exit

5 months agoraduat: Use the computed file name
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:02:13 +0000 (19:02 +0000)] 
raduat: Use the computed file name

5 months agoraduat: Fix redirection of output
Arran Cudbard-Bell [Wed, 31 Dec 2025 19:02:04 +0000 (19:02 +0000)] 
raduat: Fix redirection of output

5 months agoraduat: Avoid setting a default role
Arran Cudbard-Bell [Wed, 31 Dec 2025 18:59:23 +0000 (18:59 +0000)] 
raduat: Avoid setting a default role

5 months agoraduat: Clusters should be the basename of the path not the entire path
Arran Cudbard-Bell [Wed, 31 Dec 2025 18:57:15 +0000 (18:57 +0000)] 
raduat: Clusters should be the basename of the path not the entire path

5 months agoraduat: "which" is apparently not portable...
Arran Cudbard-Bell [Wed, 31 Dec 2025 18:56:22 +0000 (18:56 +0000)] 
raduat: "which" is apparently not portable...

5 months agoraduat: Fix some quoting issues
Arran Cudbard-Bell [Wed, 31 Dec 2025 18:55:43 +0000 (18:55 +0000)] 
raduat: Fix some quoting issues

5 months agoclean up and simplify rules to build makefile libraries
Alan T. DeKok [Thu, 1 Jan 2026 16:44:25 +0000 (11:44 -0500)] 
clean up and simplify rules to build makefile libraries

5 months agosimplify the build rules
Alan T. DeKok [Thu, 1 Jan 2026 16:08:40 +0000 (11:08 -0500)] 
simplify the build rules

remove unnecessary comments and examples.

move common definitions to a common.mk file

simplify the use of $(filter-out ...)

filter out "--rtlib=.." from the LDFLAGS.  This change prevents
linking errors when building with the sanitizers enabled.

5 months agoremove reference to file that no longer exists
Alan T. DeKok [Thu, 1 Jan 2026 14:46:58 +0000 (09:46 -0500)] 
remove reference to file that no longer exists

5 months agoremove reference to v3
Alan T. DeKok [Thu, 1 Jan 2026 14:46:02 +0000 (09:46 -0500)] 
remove reference to v3

and point to local documentation

5 months agotweak the build instructions for v4
Alan T. DeKok [Thu, 1 Jan 2026 14:43:49 +0000 (09:43 -0500)] 
tweak the build instructions for v4

and remove all references to v3

5 months agoupdate links and documentation
Alan T. DeKok [Thu, 1 Jan 2026 14:39:04 +0000 (09:39 -0500)] 
update links and documentation

5 months agothe logging functions need $(...) for them to be evaluated
Alan T. DeKok [Thu, 1 Jan 2026 13:48:32 +0000 (08:48 -0500)] 
the logging functions need $(...) for them to be evaluated

and for some reason there are CRs added.  So delete those, too

5 months agomark unused attribute as unused
Alan T. DeKok [Thu, 1 Jan 2026 13:47:51 +0000 (08:47 -0500)] 
mark unused attribute as unused

5 months agoexit the server when the radmin interface hits EOF
Alan T. DeKok [Wed, 31 Dec 2025 17:34:37 +0000 (12:34 -0500)] 
exit the server when the radmin interface hits EOF

5 months agoclean up more parallelization on the tests
Alan T. DeKok [Wed, 31 Dec 2025 15:05:21 +0000 (10:05 -0500)] 
clean up more parallelization on the tests

we don't need serialization for the directories

5 months agoserialize tests in each directory, too
Alan T. DeKok [Wed, 31 Dec 2025 14:32:53 +0000 (09:32 -0500)] 
serialize tests in each directory, too

Each directory uses different ports, so perhaps the directories
can be run in parallel.

But the files in each directory all use the same port, so the
files need to be run in series.

5 months agouse constant time comparisons
Alan T. DeKok [Wed, 31 Dec 2025 13:30:09 +0000 (08:30 -0500)] 
use constant time comparisons

5 months agoreserve 20 ports for each "radiusd", not 1:
Alan T. DeKok [Wed, 31 Dec 2025 13:19:14 +0000 (08:19 -0500)] 
reserve 20 ports for each "radiusd", not 1:

5 months agohave tests explicitly depend on each other.
Alan T. DeKok [Wed, 31 Dec 2025 12:57:43 +0000 (07:57 -0500)] 
have tests explicitly depend on each other.

this is the first step in parallelization.

5 months agotweaks and fixes
Alan T. DeKok [Wed, 31 Dec 2025 12:29:28 +0000 (07:29 -0500)] 
tweaks and fixes

5 months agoallow some module tests to be run in parallel
Alan T. DeKok [Wed, 31 Dec 2025 12:23:10 +0000 (07:23 -0500)] 
allow some module tests to be run in parallel

5 months agoautomatically add ref=@.OID-Tree to types with oid_and_value
Alan T. DeKok [Tue, 30 Dec 2025 16:54:33 +0000 (11:54 -0500)] 
automatically add ref=@.OID-Tree to types with oid_and_value

so that we don't have to litter it all through the code

5 months agobe more forgiving about setting data types
Alan T. DeKok [Tue, 30 Dec 2025 17:06:51 +0000 (12:06 -0500)] 
be more forgiving about setting data types

5 months agorename "is_oid_leaf" to "leaf"
Alan T. DeKok [Tue, 30 Dec 2025 16:29:25 +0000 (11:29 -0500)] 
rename "is_oid_leaf" to "leaf"

which is less confusing.

The "leaf" property means that when we're encoding a nested set
of attributes, we encode the OIDs until we hit one which has the
"leaf" property set.  We then encode the OID of this attribute,
along with its value.

5 months agouse memcpy, as we've already checked the lengths
Alan T. DeKok [Tue, 30 Dec 2025 14:12:12 +0000 (09:12 -0500)] 
use memcpy, as we've already checked the lengths

5 months agoRevert "don't use strncpy()"
Alan T. DeKok [Tue, 30 Dec 2025 14:11:59 +0000 (09:11 -0500)] 
Revert "don't use strncpy()"

This reverts commit d70dd19fd7a9a5c42852eccd7ce0681d526e69e8.

5 months agoMove support libraries into freeradius-common
Arran Cudbard-Bell [Tue, 30 Dec 2025 13:53:59 +0000 (13:53 +0000)] 
Move support libraries into freeradius-common

These are required by the server, but unfortunately due to the number of cross-dependencies, it's very hard to separate them, and at the moment installing something like freeradius-utils, pulls in the main daemon too.

5 months agomake provisions for printing aliases instead of long names
Alan T. DeKok [Tue, 30 Dec 2025 13:22:03 +0000 (08:22 -0500)] 
make provisions for printing aliases instead of long names

for now, we're only _shortening_ the name if we're also _flattening_
it.

5 months agoallow aliases to be added to groups
Alan T. DeKok [Tue, 30 Dec 2025 12:54:35 +0000 (07:54 -0500)] 
allow aliases to be added to groups

but only by protocol libraries, not by user-editable dictionaries

5 months agoban strncpy()
Alan T. DeKok [Tue, 30 Dec 2025 12:05:34 +0000 (07:05 -0500)] 
ban strncpy()

5 months agojust use memcpy, and manually check for lengths
Alan T. DeKok [Tue, 30 Dec 2025 12:52:14 +0000 (07:52 -0500)] 
just use memcpy, and manually check for lengths

5 months agoupdate comment
Alan T. DeKok [Tue, 30 Dec 2025 12:14:40 +0000 (07:14 -0500)] 
update comment

5 months agojust use strlcpy()
Alan T. DeKok [Tue, 30 Dec 2025 12:03:25 +0000 (07:03 -0500)] 
just use strlcpy()

5 months agodon't use strncpy() to copy binary data
Alan T. DeKok [Tue, 30 Dec 2025 12:03:07 +0000 (07:03 -0500)] 
don't use strncpy() to copy binary data

5 months agoremove non-existent directory
Alan T. DeKok [Tue, 30 Dec 2025 12:02:51 +0000 (07:02 -0500)] 
remove non-existent directory

5 months agodon't use strncpy()
Alan T. DeKok [Tue, 30 Dec 2025 11:58:54 +0000 (06:58 -0500)] 
don't use strncpy()

the code jumps through all kinds of hoops rather than just
calling a sane API.

5 months agofix write and read, make DISCARD sticky. Fixes #5668
Alan T. DeKok [Tue, 30 Dec 2025 11:45:33 +0000 (06:45 -0500)] 
fix write and read, make DISCARD sticky.  Fixes #5668

Manual merge and tweaks.

5 months agoadd "root" refs to FR_TYPE_ATTR
Alan T. DeKok [Mon, 29 Dec 2025 19:10:40 +0000 (14:10 -0500)] 
add "root" refs to FR_TYPE_ATTR

and use in DER.  The "root" ref is to the OID tree, and is largely
a work-around for the fact that the OIDs are not in their own
dictionary.

We also update the value-box code to get the correct enumv, and
then that lets the tests both drop any "OID-Tree" prefix from the
expected output, and also updates the "can't find OID" message to
refer to "OID-Tree" instead of the DER root.

Also add aliases in the DER root from "iso" to "OID-Tree.iso",
so that we the parser doesn't need to know anything about the enums
for FR_TYPE_ATTR

5 months agofix typos in error message
Alan T. DeKok [Mon, 29 Dec 2025 13:09:50 +0000 (08:09 -0500)] 
fix typos in error message

5 months agoallow some groups to print attributes as "flat"
Alan T. DeKok [Mon, 29 Dec 2025 12:21:40 +0000 (07:21 -0500)] 
allow some groups to print attributes as "flat"

For now, we add a special attribute flag "allow_flat", which
causes the attributes to be printed as a flat list.  But only when
there is only one child.  e.g. when we have:

Vendor-Specific = { Cisco = { AVPair = 1 } }

we can now sometimes print it as

Vendor-Specific.Cisco.AVPair = 1

for now, this is only done for attributes of type 'group', in order
to support the DER code.  We don't change the output for all
protocols, as doing so would involve a lot of changes to the tests.
The different output may also confuse the average admin, who would
sometimes see nested attributes, and sometimes flat ones, for no
apparent reason.

The parser has already been updated to take a flat definition
(as above), and create the fully nested version.

5 months agotweak fault handler setup
Alan T. DeKok [Mon, 29 Dec 2025 12:18:44 +0000 (07:18 -0500)] 
tweak fault handler setup

5 months agohoist "print name" to its own function
Alan T. DeKok [Sun, 28 Dec 2025 20:45:53 +0000 (15:45 -0500)] 
hoist "print name" to its own function

in preparation for DER nesting changes

5 months agotweak cast parsing and produce a bit better errors
Alan T. DeKok [Sun, 28 Dec 2025 12:45:09 +0000 (07:45 -0500)] 
tweak cast parsing and produce a bit better errors

5 months agoclean up and unify "get namespace from tmpl_rules_t"
Alan T. DeKok [Sat, 27 Dec 2025 17:30:00 +0000 (12:30 -0500)] 
clean up and unify "get namespace from tmpl_rules_t"

5 months agoallow t_rules to be NULL
Alan T. DeKok [Sat, 27 Dec 2025 13:54:21 +0000 (08:54 -0500)] 
allow t_rules to be NULL

5 months agohoist code to function
Alan T. DeKok [Sat, 27 Dec 2025 13:51:15 +0000 (08:51 -0500)] 
hoist code to function

5 months agonamespace and t_rules should never be NULL.
Alan T. DeKok [Sat, 27 Dec 2025 12:19:56 +0000 (07:19 -0500)] 
namespace and t_rules should never be NULL.

CID #1677875 and CID #1677874

5 months agocheck length of extend_lowat
Alan T. DeKok [Fri, 26 Dec 2025 16:00:21 +0000 (11:00 -0500)] 
check length of extend_lowat

5 months agoprint input if asked in debug mode
Alan T. DeKok [Fri, 26 Dec 2025 10:16:00 +0000 (05:16 -0500)] 
print input if asked in debug mode

5 months agouse new functions to decode IP addresses and prefixes
Alan T. DeKok [Thu, 25 Dec 2025 19:46:31 +0000 (14:46 -0500)] 
use new functions to decode IP addresses and prefixes

add test from fuzzer, and update RADIUS IPv6 prefix decode test.

5 months agoadd function to decode IP addresses from network
Alan T. DeKok [Thu, 25 Dec 2025 18:45:16 +0000 (13:45 -0500)] 
add function to decode IP addresses from network

which takes more arguments than the mroe generic function
fr_value_box_from_network().  This flexibility makes it useful
for protocols which do not have a "standard" way to encode IP
addresses / prefixes

5 months agoadd more PAIR_ALLOCED() macros
Alan T. DeKok [Thu, 25 Dec 2025 18:04:38 +0000 (13:04 -0500)] 
add more PAIR_ALLOCED() macros

so that when something goes bad in pair_verify(), we know which
part of the code broke things

5 months agoset up fault handler for fuzzers
Alan T. DeKok [Thu, 25 Dec 2025 17:53:17 +0000 (12:53 -0500)] 
set up fault handler for fuzzers

5 months agoonly call the backtrace functions if they were initialized
Alan T. DeKok [Thu, 25 Dec 2025 17:49:07 +0000 (12:49 -0500)] 
only call the backtrace functions if they were initialized

5 months agouse correct return code
Alan T. DeKok [Thu, 25 Dec 2025 16:38:55 +0000 (11:38 -0500)] 
use correct return code

5 months agodefine more enumerataion values to quiet compiler
Alan T. DeKok [Thu, 25 Dec 2025 16:37:03 +0000 (11:37 -0500)] 
define more enumerataion values to quiet compiler

5 months agowe don't need to add the redis directory to the includes
Alan T. DeKok [Thu, 25 Dec 2025 16:18:52 +0000 (11:18 -0500)] 
we don't need to add the redis directory to the includes

it's already linked in from src/include/redis

5 months agoremove extra ';'
Alan T. DeKok [Thu, 25 Dec 2025 16:18:18 +0000 (11:18 -0500)] 
remove extra ';'

5 months agoquiet more compile warnings
Alan T. DeKok [Thu, 25 Dec 2025 16:17:45 +0000 (11:17 -0500)] 
quiet more compile warnings

5 months agothese should be static
Alan T. DeKok [Thu, 25 Dec 2025 16:14:44 +0000 (11:14 -0500)] 
these should be static

5 months agothis should be static
Alan T. DeKok [Thu, 25 Dec 2025 16:13:17 +0000 (11:13 -0500)] 
this should be static

5 months agocomment out migration options.
Alan T. DeKok [Thu, 25 Dec 2025 16:10:40 +0000 (11:10 -0500)] 
comment out migration options.

-S foo is now ignored.  It should be removed before the official
release.

5 months agothis should be static
Alan T. DeKok [Thu, 25 Dec 2025 16:05:07 +0000 (11:05 -0500)] 
this should be static

5 months agoremove redundant ';' when using slab macros
Alan T. DeKok [Thu, 25 Dec 2025 16:01:17 +0000 (11:01 -0500)] 
remove redundant ';' when using slab macros

5 months agocast to avoid -Wcomma warning
Alan T. DeKok [Thu, 25 Dec 2025 15:55:39 +0000 (10:55 -0500)] 
cast to avoid -Wcomma warning

5 months agocasts and tweaks to avoid -Wpedantic
Alan T. DeKok [Thu, 25 Dec 2025 15:53:41 +0000 (10:53 -0500)] 
casts and tweaks to avoid -Wpedantic

5 months agothis definition can be static
Alan T. DeKok [Thu, 25 Dec 2025 15:43:12 +0000 (10:43 -0500)] 
this definition can be static

5 months agoclean up and clarify namespace issues
Alan T. DeKok [Thu, 25 Dec 2025 15:35:38 +0000 (10:35 -0500)] 
clean up and clarify namespace issues

both for structural attribute to child , and for groups of

protocol/internal -> internal/protocol

in preparation for supporting "flat" attributes in some groups

5 months agoensure that variable is initialized
Alan T. DeKok [Thu, 25 Dec 2025 15:12:51 +0000 (10:12 -0500)] 
ensure that variable is initialized

5 months agolimit the "name2" for update sections in modules
Alan T. DeKok [Thu, 25 Dec 2025 13:05:04 +0000 (08:05 -0500)] 
limit the "name2" for update sections in modules

since we no longer support full-featured "update" sections, there
is no point in supporting full paths (outer, parent, etc.) in
update sections.  Plus, none of the modules use them.

So rather than either confusing the admin, or allowing them to do
something which might not work, we just return a compile-time
error.

The deleted code was also the only code (other then tests) that
called tmpl_request_ref_list_afrom_substr().  This cleanup will
allow us to fix the tmpl code for ""flat" groups

5 months agoupdate sections don't take a second name
Alan T. DeKok [Thu, 25 Dec 2025 12:36:07 +0000 (07:36 -0500)] 
update sections don't take a second name

5 months agomissed in previous commit
Alan T. DeKok [Thu, 25 Dec 2025 12:30:22 +0000 (07:30 -0500)] 
missed in previous commit

5 months agohoist "is attribute request/reply/control/" checks to common function
Alan T. DeKok [Wed, 24 Dec 2025 16:17:10 +0000 (11:17 -0500)] 
hoist "is attribute request/reply/control/" checks to common function

5 months agothis variable can be made static
Alan T. DeKok [Wed, 24 Dec 2025 16:07:44 +0000 (11:07 -0500)] 
this variable can be made static

5 months agolimit request qualifier parsing.
Alan T. DeKok [Tue, 23 Dec 2025 19:30:16 +0000 (20:30 +0100)] 
limit request qualifier parsing.

don't allow "current", as it doesn't make sense for people to
specify it.  The default is always current.

Don't allow "outer.parent" or "parent.outer".  Those don't make
sense, either.

5 months agomore cleanups to tmpl_attr_afrom_substr()
Alan T. DeKok [Tue, 23 Dec 2025 18:22:20 +0000 (19:22 +0100)] 
more cleanups to tmpl_attr_afrom_substr()

5 months agominor tweaks to tmpl_afrom_attr_substr()
Alan T. DeKok [Tue, 23 Dec 2025 10:58:55 +0000 (11:58 +0100)] 
minor tweaks to tmpl_afrom_attr_substr()

and disallow raw local attributes

5 months agomore tests and tweaks for parsing attributes in value-boxes
Alan T. DeKok [Fri, 19 Dec 2025 14:53:37 +0000 (15:53 +0100)] 
more tests and tweaks for parsing attributes in value-boxes

6 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/cbor.tar
github-actions[bot] [Sat, 20 Dec 2025 04:32:52 +0000 (04:32 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/cbor.tar

6 months agoScheduled fuzzing: Update src/tests/fuzzer-corpus/der.tar
github-actions[bot] [Sat, 20 Dec 2025 04:31:49 +0000 (04:31 +0000)] 
Scheduled fuzzing: Update src/tests/fuzzer-corpus/der.tar

6 months agoDocument %ip.v4.netmask() and %ip.v4.broadcast()
Nick Porter [Fri, 19 Dec 2025 15:58:28 +0000 (15:58 +0000)] 
Document %ip.v4.netmask() and %ip.v4.broadcast()

6 months agolimit unknown depth, and be more careful about error returns
Alan T. DeKok [Fri, 19 Dec 2025 08:16:12 +0000 (09:16 +0100)] 
limit unknown depth, and be more careful about error returns

tweak value-box type "attr" parsing to catch more cases.

6 months agoallow cast to 'attribute' from 'string'
Alan T. DeKok [Fri, 19 Dec 2025 07:20:19 +0000 (08:20 +0100)] 
allow cast to 'attribute' from 'string'

update the test framework to set the correct enumvs, and add tests

6 months agotweak "cast to same type" to not do bad things
Alan T. DeKok [Thu, 18 Dec 2025 16:57:24 +0000 (17:57 +0100)] 
tweak "cast to same type" to not do bad things

if no enumv is passed in, it shouldn't forcibly nuke the input
enumv.  This patch makes it easier to deal with FR_TYPE_ATTR

6 months agochange "oid" data type from "string" to "attr"
Alan T. DeKok [Wed, 17 Dec 2025 10:06:19 +0000 (11:06 +0100)] 
change "oid" data type from "string" to "attr"

also enforce more limits on OID values and depth.

6 months agoallow enumv to point to a new root for FR_TYPE_ATTR
Alan T. DeKok [Wed, 17 Dec 2025 08:00:39 +0000 (09:00 +0100)] 
allow enumv to point to a new root for FR_TYPE_ATTR

normally the enumv points to the dictionary root.  Instead, we
allow the enumv to point to a different part of the tree.

6 months agouse single quotes, which makes the output easier to read
Alan T. DeKok [Thu, 18 Dec 2025 16:05:52 +0000 (17:05 +0100)] 
use single quotes, which makes the output easier to read

6 months agoAdd test of !~ for rlm_files conditions
Nick Porter [Thu, 18 Dec 2025 17:19:23 +0000 (17:19 +0000)] 
Add test of !~ for rlm_files conditions

6 months agolook up name before number
Alan T. DeKok [Wed, 17 Dec 2025 16:44:44 +0000 (17:44 +0100)] 
look up name before number

names are more common than numbers, among other things.

6 months agotweak message and push error string
Alan T. DeKok [Wed, 17 Dec 2025 09:43:39 +0000 (10:43 +0100)] 
tweak message and push error string

so that we get more / better errors

6 months agodifferentiate "number too large" from "unknown child"
Alan T. DeKok [Wed, 17 Dec 2025 09:41:50 +0000 (10:41 +0100)] 
differentiate "number too large" from "unknown child"