]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Alan T. DeKok [Wed, 19 Dec 2018 18:02:39 +0000 (13:02 -0500)]
removed duplicate / conflicting attribute definition
Alan T. DeKok [Wed, 19 Dec 2018 13:26:13 +0000 (08:26 -0500)]
mark up autoloaded dictionaries vs manual ones
So that dictionaries can be manually loaded from raddb/dictionary,
and we can later still autoload the various protocol dictionaries
The only downside is that src/tests/Makefile still fails.
The server loads the test dictionary and parses the config files
correctly. radclient loads the test dictionary and sends the
attributes correctly.
But somehow (magically) when the server receives the packets, it
can't find the test vendor, and prints out all of the attributes
as raw ones...
Alan T. DeKok [Wed, 19 Dec 2018 13:25:59 +0000 (08:25 -0500)]
capture stdout && stderr to the log file, too
Alan T. DeKok [Wed, 19 Dec 2018 12:49:33 +0000 (07:49 -0500)]
print out correct arguments
Alan T. DeKok [Wed, 19 Dec 2018 12:49:13 +0000 (07:49 -0500)]
we don't need to regenerate this any more
Alan T. DeKok [Wed, 19 Dec 2018 12:13:57 +0000 (07:13 -0500)]
when refactoring, copy code instead of re-typing it.
and building it is good, too
Alan T. DeKok [Wed, 19 Dec 2018 12:11:22 +0000 (07:11 -0500)]
BSD fixes
Alan DeKok [Wed, 19 Dec 2018 12:08:53 +0000 (07:08 -0500)]
Merge pull request #2378 from manu0401/master
Fix startup crash when running outside of gdb on BSD systems
Emmanuel Dreyfus [Wed, 19 Dec 2018 10:11:16 +0000 (11:11 +0100)]
Fix startup crash when running outside of gdb on BSD systems
On BSD systems, ptrace(PT_DETACH) uses a third argument for
resume address, with the magic value (void *)1 to resume where
process stopped. Specifying NULL there leads to a crash because
process resumes at address 0.
We introduce an OS-dependent _PTRACE_DETACH macro to specify
third argument as NULL on Linux and (void *)1 on other systems.
Always using (void *)1 could be another solution, since basic
tests suggests passing (void *)1 as third argument on Linux
does not cause harm.
Arran Cudbard-Bell [Wed, 19 Dec 2018 02:12:49 +0000 (21:12 -0500)]
Doxygen headers in rlm_eap_ttls
Arran Cudbard-Bell [Wed, 19 Dec 2018 02:04:55 +0000 (21:04 -0500)]
Move EAP and SIM libraries into src/lib
Alan T. DeKok [Wed, 19 Dec 2018 01:05:44 +0000 (20:05 -0500)]
use top_srcdir for references to source files
Alan T. DeKok [Wed, 19 Dec 2018 00:49:15 +0000 (19:49 -0500)]
print "AUTH-TEST" to make it clear which test is what
Alan T. DeKok [Wed, 19 Dec 2018 00:00:03 +0000 (19:00 -0500)]
use radius as root for decoding TTLS, not internal dictionary
Arran Cudbard-Bell [Tue, 18 Dec 2018 23:34:37 +0000 (18:34 -0500)]
Remove freedhcp dictionary Closes #2376
Arran Cudbard-Bell [Tue, 18 Dec 2018 23:22:58 +0000 (18:22 -0500)]
Quotes
Arran Cudbard-Bell [Tue, 18 Dec 2018 23:20:33 +0000 (18:20 -0500)]
Rearrange so we don't make validating pairs conditional on running in debug mode
Alan T. DeKok [Tue, 18 Dec 2018 23:15:09 +0000 (18:15 -0500)]
MS-CHAP-Password is a FreeRADIUS thingy
Alan T. DeKok [Tue, 18 Dec 2018 21:20:06 +0000 (16:20 -0500)]
MS-CHAP stuff is in radius dictionary, not freeradius
Alan T. DeKok [Tue, 18 Dec 2018 20:50:58 +0000 (15:50 -0500)]
'&' for the win
Alan T. DeKok [Tue, 18 Dec 2018 18:25:08 +0000 (13:25 -0500)]
dictionaries are now autoloaded
don't manually include any of them
Alan T. DeKok [Tue, 18 Dec 2018 18:20:10 +0000 (13:20 -0500)]
print name for duplicate
Alan T. DeKok [Tue, 18 Dec 2018 17:29:23 +0000 (12:29 -0500)]
add AUTO here, too
Alan T. DeKok [Tue, 18 Dec 2018 16:42:24 +0000 (11:42 -0500)]
better fix for previous patch
Alan T. DeKok [Tue, 18 Dec 2018 16:41:39 +0000 (11:41 -0500)]
Revert "add '&' if it's not already there"
This reverts commit
8966bfdf901c06c84762ae8aaa0d37084f9eb0b4 .
Alan T. DeKok [Tue, 18 Dec 2018 16:23:52 +0000 (11:23 -0500)]
print out VP names if they exist, too
Alan T. DeKok [Tue, 18 Dec 2018 16:23:32 +0000 (11:23 -0500)]
rearrange so that we're only doing debug work if we're debugging
Alan T. DeKok [Tue, 18 Dec 2018 16:12:44 +0000 (11:12 -0500)]
handle the case where the LHS isn't a properly formed attribute
which isn't *strictly* needed due to the previous patch.
However... it should do the Right Thing even if the data in LDAP
doesn't start with '&'
Alan T. DeKok [Tue, 18 Dec 2018 16:11:51 +0000 (11:11 -0500)]
add '&' if it's not already there
as a hack so that the user doesn't have to put '&' in all of the
LDAP entries. We KNOW they're supposed to be attributes, so we
might as well FORCE them to be attributes.
Alan T. DeKok [Tue, 18 Dec 2018 16:09:47 +0000 (11:09 -0500)]
use the correct parenting for the attributes
Alan T. DeKok [Mon, 17 Dec 2018 19:53:48 +0000 (14:53 -0500)]
fix looping code so that it doesn't skip dictionaries
Arran Cudbard-Bell [Mon, 17 Dec 2018 19:54:53 +0000 (14:54 -0500)]
Typo
Arran Cudbard-Bell [Mon, 17 Dec 2018 18:28:31 +0000 (13:28 -0500)]
Typo
Arran Cudbard-Bell [Sun, 16 Dec 2018 22:38:27 +0000 (17:38 -0500)]
EAP-AKA-Subtype is in the EAP-AKA dictionary
Arran Cudbard-Bell [Sun, 16 Dec 2018 01:39:45 +0000 (20:39 -0500)]
Autoload sigtran dictionaries and attributes
Alexander Scheel [Fri, 14 Dec 2018 16:49:12 +0000 (11:49 -0500)]
Update systemd units to depend on network-online
Due to the use of SO_BINDTODEVICE, FreeRADIUS requires the address to be
up when binding to a specific IP address. In systemd, depending on
network.target is not sufficient to require the network to be up, so
FreeRADIUS can still fail to bind; instead, network-online.target is
required if the network is required to be online.
This manifests in errors such as:
Error: Failed binding to auth address x.x.x.x port 1812 bound to
server default: Cannot assign requested address
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1637275
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
Arran Cudbard-Bell [Sat, 15 Dec 2018 16:00:23 +0000 (11:00 -0500)]
Merge pull request #2375 from horsitis/patch-2
Add support for Downloadable user roles
horsitis [Sat, 15 Dec 2018 15:27:04 +0000 (17:27 +0200)]
Add support for Clearpass Downloadable roles
Alan T. DeKok [Fri, 14 Dec 2018 20:09:44 +0000 (15:09 -0500)]
if it's a raw attribute, don't look it up in the global dict
it's known, but badly formed. So it's not really known.
Alan T. DeKok [Fri, 14 Dec 2018 20:09:32 +0000 (15:09 -0500)]
set unknown_da, too
Alan T. DeKok [Fri, 14 Dec 2018 19:38:11 +0000 (14:38 -0500)]
Add HP-User-Role. Fixes #2372
Alan T. DeKok [Fri, 14 Dec 2018 19:36:34 +0000 (14:36 -0500)]
Fix typo. Fixes #2374
Alan T. DeKok [Fri, 14 Dec 2018 19:35:30 +0000 (14:35 -0500)]
allow Attr-oid.str here, too
Arran Cudbard-Bell [Fri, 14 Dec 2018 17:47:07 +0000 (12:47 -0500)]
Doxygen
Arran Cudbard-Bell [Fri, 14 Dec 2018 17:45:55 +0000 (12:45 -0500)]
Typo
Alan T. DeKok [Wed, 5 Dec 2018 14:20:24 +0000 (09:20 -0500)]
typo
# Conflicts:
# src/modules/rlm_mschap/opendir.c
Alan T. DeKok [Fri, 23 Nov 2018 16:33:01 +0000 (11:33 -0500)]
simplify ntlm_auth error output checks
In most cases, the error output will contain "0xC0000", in which case
we can take a fast path
# Conflicts:
# src/modules/rlm_mschap/rlm_mschap.c
Arran Cudbard-Bell [Fri, 14 Dec 2018 17:01:15 +0000 (12:01 -0500)]
Check for error conditions when loading test points
Arran Cudbard-Bell [Fri, 14 Dec 2018 16:32:21 +0000 (11:32 -0500)]
Use constants for errors
Arran Cudbard-Bell [Fri, 14 Dec 2018 16:31:53 +0000 (11:31 -0500)]
Use more compact, inline variable initialisation syntax where appropriate
Alan T. DeKok [Fri, 14 Dec 2018 14:52:03 +0000 (09:52 -0500)]
don't over-write pragma once
Alan T. DeKok [Fri, 14 Dec 2018 14:44:42 +0000 (09:44 -0500)]
tr fixes for Linux
'-' only means itself when it's at the end of a sequence
Alan T. DeKok [Fri, 14 Dec 2018 14:43:57 +0000 (09:43 -0500)]
Revert "include dictionary for FR_USER_NAME"
This reverts commit
3df2a92b04b2d256bf77dbdd8bd99c063b57de4f .
Alan T. DeKok [Fri, 14 Dec 2018 13:39:54 +0000 (08:39 -0500)]
include dictionary for FR_USER_NAME
Alan T. DeKok [Fri, 14 Dec 2018 13:12:12 +0000 (08:12 -0500)]
autoload SNMP attributes, too
Alan T. DeKok [Fri, 14 Dec 2018 12:50:21 +0000 (07:50 -0500)]
don't need to set this
Alan T. DeKok [Fri, 14 Dec 2018 12:36:08 +0000 (07:36 -0500)]
search over all of the protocols for attributes
by using the new has iteration function.
This search is only done if `fallback = true`. The search also
skips `dict_def`, as that has already been searched.
Alan T. DeKok [Fri, 14 Dec 2018 12:31:59 +0000 (07:31 -0500)]
set fallback=true
so that we can look up key fields in the internal dictionaries, too
Arran Cudbard-Bell [Fri, 14 Dec 2018 03:54:11 +0000 (22:54 -0500)]
Hash iteration functions
Arran Cudbard-Bell [Fri, 14 Dec 2018 03:49:26 +0000 (22:49 -0500)]
Make the data in the hash entry unconst
Arran Cudbard-Bell [Fri, 14 Dec 2018 01:25:32 +0000 (20:25 -0500)]
Minor cleanups
Alan T. DeKok [Thu, 13 Dec 2018 21:20:56 +0000 (16:20 -0500)]
skip '.' after protocol name
Alan T. DeKok [Thu, 13 Dec 2018 20:41:01 +0000 (15:41 -0500)]
dictionary is radius
Alan T. DeKok [Thu, 13 Dec 2018 20:40:28 +0000 (15:40 -0500)]
more cleanups... hope this works
Alan T. DeKok [Thu, 13 Dec 2018 20:39:52 +0000 (15:39 -0500)]
add dict to pairlist_read()
Alan T. DeKok [Thu, 13 Dec 2018 20:06:19 +0000 (15:06 -0500)]
add &
Alan T. DeKok [Thu, 13 Dec 2018 20:05:13 +0000 (15:05 -0500)]
typo
Alan T. DeKok [Thu, 13 Dec 2018 20:03:25 +0000 (15:03 -0500)]
typos
Alan T. DeKok [Thu, 13 Dec 2018 19:49:09 +0000 (14:49 -0500)]
use correct dictionary, and fix dictionary to be correct
Alan T. DeKok [Thu, 13 Dec 2018 19:48:47 +0000 (14:48 -0500)]
clarify message
Alan T. DeKok [Thu, 13 Dec 2018 19:46:35 +0000 (14:46 -0500)]
use correct dictionary
Alan T. DeKok [Thu, 13 Dec 2018 19:46:20 +0000 (14:46 -0500)]
use correct dict name
Alan T. DeKok [Thu, 13 Dec 2018 19:37:23 +0000 (14:37 -0500)]
better autoload internal
Alan T. DeKok [Thu, 13 Dec 2018 19:23:13 +0000 (14:23 -0500)]
remove old check
attributes can be on both sides of the condition
Alan T. DeKok [Thu, 13 Dec 2018 19:19:06 +0000 (14:19 -0500)]
the internal dictionary is "freeradius", not "internal"
Alan T. DeKok [Thu, 13 Dec 2018 19:08:41 +0000 (14:08 -0500)]
share/dictionary is now a directory, not a file
instead, autoload the internal FreeRADIUS dictionary in order to
bootstrap things
Alan T. DeKok [Thu, 13 Dec 2018 18:54:57 +0000 (13:54 -0500)]
more cleanups and rearrangements
Arran Cudbard-Bell [Wed, 12 Dec 2018 00:44:35 +0000 (19:44 -0500)]
Print better debug information when executing rediswho_command Closes #2369
Arran Cudbard-Bell [Mon, 10 Dec 2018 16:17:08 +0000 (11:17 -0500)]
Add "on read" function for namespaces
Arran Cudbard-Bell [Mon, 10 Dec 2018 16:16:55 +0000 (11:16 -0500)]
Pass in dict to cond tokenize functions for pass1
Arran Cudbard-Bell [Mon, 10 Dec 2018 16:16:27 +0000 (11:16 -0500)]
Try and hack around namespace not being parsed
Arran Cudbard-Bell [Mon, 10 Dec 2018 16:16:03 +0000 (11:16 -0500)]
Alloc namespace pair for correct context
Arran Cudbard-Bell [Sun, 9 Dec 2018 20:05:35 +0000 (15:05 -0500)]
Add functions to allow searching in parents for sections/pairs/data
This is useful when we're working back up from an unknown arbitrary depth.
tttfff
Arran Cudbard-Bell [Sun, 9 Dec 2018 03:50:41 +0000 (22:50 -0500)]
Missing '&'
Arran Cudbard-Bell [Sun, 9 Dec 2018 03:50:29 +0000 (22:50 -0500)]
Resolve attributes in the correct dictionaries
Arran Cudbard-Bell [Sun, 9 Dec 2018 03:49:54 +0000 (22:49 -0500)]
Resolve attributes in the current request
Arran Cudbard-Bell [Sun, 9 Dec 2018 02:51:08 +0000 (21:51 -0500)]
Fix fr_dict_by_protocol_substr
Arran Cudbard-Bell [Sun, 9 Dec 2018 02:50:21 +0000 (21:50 -0500)]
Perform cast-in-place for previously undefined attribute references
Arran Cudbard-Bell [Sun, 9 Dec 2018 01:42:39 +0000 (20:42 -0500)]
Use our vasprintf function so we can use custom format specifiers
Arran Cudbard-Bell [Sat, 8 Dec 2018 23:32:25 +0000 (18:32 -0500)]
Neater...
Arran Cudbard-Bell [Sat, 8 Dec 2018 23:23:10 +0000 (18:23 -0500)]
Fixup foreach-break-2 tests to use attribute references
Arran Cudbard-Bell [Sat, 8 Dec 2018 23:00:00 +0000 (18:00 -0500)]
Pass dictionary into xlat tokenizer
Arran Cudbard-Bell [Sat, 8 Dec 2018 22:47:56 +0000 (17:47 -0500)]
Pass dictionary into condition tokenizer
Arran Cudbard-Bell [Sat, 8 Dec 2018 22:47:28 +0000 (17:47 -0500)]
Don't error out on raw attributes that haven't been added to the dictionaries
Arran Cudbard-Bell [Sat, 8 Dec 2018 21:54:57 +0000 (16:54 -0500)]
Add more test attributes for the dictionary tests
Arran Cudbard-Bell [Sat, 8 Dec 2018 21:51:29 +0000 (16:51 -0500)]
Add more sanity checks when we're processing VALUEs
If we don't check the attribute exists, the value just gets added to the fixup list, and fr_dict_parse_str just returns OK without doing anything useful.
Arran Cudbard-Bell [Sat, 8 Dec 2018 21:42:33 +0000 (16:42 -0500)]
Remove TLV hack from DHCPv6
Arran Cudbard-Bell [Sat, 8 Dec 2018 21:42:20 +0000 (16:42 -0500)]
Remove more VSA hacks from DHCPv4
Arran Cudbard-Bell [Sat, 8 Dec 2018 21:40:58 +0000 (16:40 -0500)]
Fix memory leak when calling fr_dict_parse_str
Arran Cudbard-Bell [Sat, 8 Dec 2018 19:55:19 +0000 (14:55 -0500)]
Use test dictionary for more tests