]>
git.ipfire.org Git - thirdparty/freeradius-server.git/log
Alan T. DeKok [Fri, 10 Nov 2017 19:55:56 +0000 (14:55 -0500)]
change Client-IP-Address to Packet-Src-IP-Address in examples
we've deprecated Client-IP-Address for years...
Alan T. DeKok [Fri, 10 Nov 2017 19:46:11 +0000 (14:46 -0500)]
if there's leftover bytes, ensure there's always more data to read
Alan T. DeKok [Fri, 10 Nov 2017 19:37:08 +0000 (14:37 -0500)]
set default read size to 64K
Alan T. DeKok [Fri, 10 Nov 2017 19:29:52 +0000 (14:29 -0500)]
create a fake client
Alan T. DeKok [Fri, 10 Nov 2017 19:23:23 +0000 (14:23 -0500)]
set default addresses
Alan T. DeKok [Fri, 10 Nov 2017 19:18:50 +0000 (14:18 -0500)]
might not have a client
Alan T. DeKok [Fri, 10 Nov 2017 14:51:02 +0000 (09:51 -0500)]
do exponential backoff for trying to lock the detail.work file
Alan T. DeKok [Fri, 10 Nov 2017 14:28:29 +0000 (09:28 -0500)]
move brains to ring buffer code
Alan T. DeKok [Fri, 10 Nov 2017 14:17:54 +0000 (09:17 -0500)]
compile correct method, based on packets we receive
Arran Cudbard-Bell [Fri, 10 Nov 2017 12:58:37 +0000 (12:58 +0000)]
Compile inline xlats
They're useful for testing...
Arran Cudbard-Bell [Fri, 10 Nov 2017 12:52:18 +0000 (12:52 +0000)]
Formatting
Matthew Newton [Wed, 8 Nov 2017 22:22:54 +0000 (22:22 +0000)]
ensure freeradius can read the server certificate
permissions locked down more by default on debian stretch
Matthew Newton [Wed, 8 Nov 2017 21:53:48 +0000 (21:53 +0000)]
allow new version of openssl package in debian stretch
Matthew Newton [Fri, 10 Nov 2017 00:42:32 +0000 (00:42 +0000)]
remove __DATE__ and __TIME__
"reproducible builds" is apparently a thing, and gcc
has started complaining
Alan T. DeKok [Thu, 9 Nov 2017 22:51:31 +0000 (17:51 -0500)]
don't convert IPs if recvfrom returns error
Alan T. DeKok [Thu, 9 Nov 2017 22:48:07 +0000 (17:48 -0500)]
typo
Alan T. DeKok [Thu, 9 Nov 2017 19:27:26 +0000 (14:27 -0500)]
more debugging for error cases
Alan T. DeKok [Thu, 9 Nov 2017 18:32:53 +0000 (13:32 -0500)]
initialize 'when', too
Alan T. DeKok [Thu, 9 Nov 2017 18:29:49 +0000 (13:29 -0500)]
EAGAIN is not a socket error we care about.
Alan T. DeKok [Thu, 9 Nov 2017 17:58:59 +0000 (12:58 -0500)]
copy original message
Alan T. DeKok [Thu, 9 Nov 2017 16:38:59 +0000 (11:38 -0500)]
typo
Alan T. DeKok [Thu, 9 Nov 2017 16:30:33 +0000 (11:30 -0500)]
continue if dead...
Alan T. DeKok [Thu, 9 Nov 2017 16:25:26 +0000 (11:25 -0500)]
mark sockets "dead" on read / write error.
There may be outstanding packets, so we don't free the socket
until all of the packets have been received
Alan T. DeKok [Thu, 9 Nov 2017 16:10:18 +0000 (11:10 -0500)]
show more errors
Alan T. DeKok [Thu, 9 Nov 2017 16:09:02 +0000 (11:09 -0500)]
show errors that occur
Alan T. DeKok [Thu, 9 Nov 2017 14:50:34 +0000 (09:50 -0500)]
set destructor for freeing the link, too
Alan T. DeKok [Thu, 9 Nov 2017 14:47:03 +0000 (09:47 -0500)]
we don't have a destructor yet, so unlink it immediately
Alan T. DeKok [Thu, 9 Nov 2017 13:54:55 +0000 (08:54 -0500)]
set data to NULL if there's no data
mostly for paranoia
Alan T. DeKok [Wed, 8 Nov 2017 21:41:56 +0000 (16:41 -0500)]
update documentation and code
"send ok" is probably clearer, as the "recv" section should
return "ok"
Alan T. DeKok [Wed, 8 Nov 2017 21:29:49 +0000 (16:29 -0500)]
enforce MRD
Alan T. DeKok [Wed, 8 Nov 2017 21:19:18 +0000 (16:19 -0500)]
set start time for Status-Server packets, too
Alan T. DeKok [Wed, 8 Nov 2017 19:42:57 +0000 (14:42 -0500)]
check and document retransmissions
Alan T. DeKok [Wed, 8 Nov 2017 19:29:39 +0000 (14:29 -0500)]
notes on pause and multiple reads
Alan T. DeKok [Wed, 8 Nov 2017 19:14:52 +0000 (14:14 -0500)]
add irt / mrt / mrc / mrd
for now, only mrc is enforced
Alan T. DeKok [Wed, 8 Nov 2017 19:03:31 +0000 (14:03 -0500)]
allow DHCP in v4.
Once we get the rest of the build fixed up, we can re-do all
of the packages
Alan T. DeKok [Wed, 8 Nov 2017 18:58:55 +0000 (13:58 -0500)]
add packet transmit counter. And make it all work...
Alan T. DeKok [Wed, 8 Nov 2017 18:57:36 +0000 (13:57 -0500)]
debug internal attributes, too
Alan T. DeKok [Wed, 8 Nov 2017 18:45:44 +0000 (13:45 -0500)]
add NOTE_NONE to trigger EVFILT_READ on files
i.e. lseek() to start of file, EVFILT_READ won't trigger without
this.
Alan T. DeKok [Wed, 8 Nov 2017 18:34:24 +0000 (13:34 -0500)]
pause / resume read after reading packets
Alan T. DeKok [Wed, 8 Nov 2017 18:26:19 +0000 (13:26 -0500)]
start of retransmission behavior
Alan T. DeKok [Wed, 8 Nov 2017 17:02:50 +0000 (12:02 -0500)]
failed is code 0, not DO-NOT-Respond
Alan T. DeKok [Wed, 8 Nov 2017 17:00:08 +0000 (12:00 -0500)]
use consistent names
Alan T. DeKok [Wed, 8 Nov 2017 16:59:38 +0000 (11:59 -0500)]
update comment
Alan T. DeKok [Wed, 8 Nov 2017 16:56:28 +0000 (11:56 -0500)]
fail if there's no resume function
Alan T. DeKok [Wed, 8 Nov 2017 16:44:55 +0000 (11:44 -0500)]
don't resume if we didn't yield
Arran Cudbard-Bell [Wed, 8 Nov 2017 16:40:56 +0000 (16:40 +0000)]
Document unlang_resume
Arran Cudbard-Bell [Wed, 8 Nov 2017 16:33:42 +0000 (16:33 +0000)]
Fix Tower/Git's commit mangling
This reverts commit
87c8c4884b688b764d5fc8f4cf514f82ce961840 .
Alan T. DeKok [Wed, 8 Nov 2017 16:29:05 +0000 (11:29 -0500)]
Revert "Move module resumption handling into a callback, just like the handling for subrequests and parallel requests"
This reverts commit
9cdfbc2e88352992dfbc7fde2064a06e32bbe724 .
revert borked commit
Alan T. DeKok [Wed, 8 Nov 2017 16:20:21 +0000 (11:20 -0500)]
transition to FINISHED when finished, not before
just for replicated packets
Alan T. DeKok [Wed, 8 Nov 2017 01:57:30 +0000 (20:57 -0500)]
word smithing
Alan T. DeKok [Tue, 7 Nov 2017 20:08:36 +0000 (15:08 -0500)]
remove 'login' and 'password' from client definition
Arran Cudbard-Bell [Wed, 8 Nov 2017 15:14:35 +0000 (15:14 +0000)]
Move module resumption handling into a callback, just like the handling for subrequests and parallel requests
Arran Cudbard-Bell [Wed, 8 Nov 2017 14:46:34 +0000 (14:46 +0000)]
Document a couple of functions
Matthew Newton [Wed, 8 Nov 2017 13:57:20 +0000 (13:57 +0000)]
add v4 proxying example to sites-available/default
Matthew Newton [Wed, 8 Nov 2017 13:35:26 +0000 (13:35 +0000)]
a number of raddb comment updates and tidying for v4
Arran Cudbard-Bell [Wed, 8 Nov 2017 13:27:08 +0000 (13:27 +0000)]
Revert "As distinct from other types of resumption"
This reverts commit
934f628806e7e0eaf6a8c664e90fc6fc37f597f8 .
Arran Cudbard-Bell [Wed, 8 Nov 2017 13:06:20 +0000 (13:06 +0000)]
Unused. Presumably modcall state goes in the void *state field.
Arran Cudbard-Bell [Wed, 8 Nov 2017 12:35:35 +0000 (12:35 +0000)]
As distinct from other types of resumption
Arran Cudbard-Bell [Tue, 7 Nov 2017 23:26:25 +0000 (23:26 +0000)]
Merge error
Arran Cudbard-Bell [Tue, 7 Nov 2017 23:00:46 +0000 (23:00 +0000)]
Switch attribute resolution and virtual attributes to using value boxes
Matthew Newton [Tue, 7 Nov 2017 15:11:23 +0000 (15:11 +0000)]
add 'copy_request_to_tunnel' and 'use_tunneled_reply' policies (ref
9fa3e6f8 )
Tidy up some of the documentation around these, so it's mostly in
one place, and remove some stuff that's just wrong.
Arran Cudbard-Bell [Tue, 7 Nov 2017 18:07:16 +0000 (18:07 +0000)]
Doxygen and pedanticism
Alan DeKok [Tue, 7 Nov 2017 21:30:26 +0000 (16:30 -0500)]
Merge pull request #2109 from mattrose/v4.0.x
fix rpm build errors
Matt Rose [Tue, 7 Nov 2017 21:06:02 +0000 (16:06 -0500)]
fix rpm build errors
Arran Cudbard-Bell [Tue, 7 Nov 2017 17:49:25 +0000 (17:49 +0000)]
Use new value box based function for one letter expansions
Arran Cudbard-Bell [Tue, 7 Nov 2017 17:05:40 +0000 (17:05 +0000)]
Add inline fr_cursor_free function for removing and freeing the current and subsequent items
Arran Cudbard-Bell [Tue, 7 Nov 2017 17:14:34 +0000 (17:14 +0000)]
s/XLAT_PERCENT/XLAT_ONE_LETTER/ s/XLAT_MODULE/XLAT_FUNC/
PERCENT didn't really mean anything.
MODULE is a misnomer, because the majority of the xlat functions are not from modules.
Alan T. DeKok [Tue, 7 Nov 2017 13:46:40 +0000 (08:46 -0500)]
Revert "one more fr_event_timer fix"
This reverts commit
33499ae0ecc1314bbaa679d45e3d29918cf208ae .
one more of let's see if this works
Alan T. DeKok [Tue, 7 Nov 2017 13:46:17 +0000 (08:46 -0500)]
Revert "if we're leaking in event link ctx, don't link ctx"
This reverts commit
ba91811370c1f48e3bb2f194734f4cd7047d0f87 .
let's see if this works
Alan T. DeKok [Tue, 7 Nov 2017 00:46:27 +0000 (19:46 -0500)]
ordering issues in free
don't do double frees. Assign correct pointer to link->self
Alan T. DeKok [Mon, 6 Nov 2017 21:16:07 +0000 (16:16 -0500)]
redo link ctx stuff to remove leak
Alan T. DeKok [Mon, 6 Nov 2017 17:53:22 +0000 (12:53 -0500)]
one more fr_event_timer fix
Arran Cudbard-Bell [Mon, 6 Nov 2017 15:18:51 +0000 (15:18 +0000)]
Merge pull request #2108 from pwdng/v4.0.x
Remove execution bit for systemd service conf file.
Philippe Wooding [Mon, 6 Nov 2017 15:15:00 +0000 (16:15 +0100)]
Remove execution bit for systemd service conf file.
This is to avoid 'Configuration file /usr/lib/systemd/system/radiusd.service is marked executable. Please remove executable permission bits. ' log messages
Alan T. DeKok [Mon, 6 Nov 2017 14:28:41 +0000 (09:28 -0500)]
if we're leaking in event link ctx, don't link ctx
Arran Cudbard-Bell [Sun, 5 Nov 2017 16:10:09 +0000 (16:10 +0000)]
Stupid stats...
Arran Cudbard-Bell [Sun, 5 Nov 2017 16:03:19 +0000 (16:03 +0000)]
Helps to link the radius client against the radius library...
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:54:04 +0000 (15:54 +0000)]
Explicitly link rlm_chap to libfreeradius-radius
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:45:45 +0000 (15:45 +0000)]
and another fr_packet_codes reference
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:36:26 +0000 (15:36 +0000)]
Use the Packet-Type attribute to resolve packet codes to names
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:28:18 +0000 (15:28 +0000)]
Only a dependency if we're building with OpenSSL
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:22:57 +0000 (15:22 +0000)]
Functions now available in libfreeradius-server
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:14:22 +0000 (15:14 +0000)]
Explicitly link libfreeradius-io to libfreeradius-server
Arran Cudbard-Bell [Sun, 5 Nov 2017 14:46:11 +0000 (14:46 +0000)]
Explicitly link against the RADIUS library
Arran Cudbard-Bell [Sun, 5 Nov 2017 14:33:54 +0000 (14:33 +0000)]
Doxygen
Arran Cudbard-Bell [Sun, 5 Nov 2017 14:31:16 +0000 (14:31 +0000)]
Remove dependencies on main_config from modules.c and move to libfreeradius-server
Alan T. DeKok [Sun, 5 Nov 2017 13:13:47 +0000 (08:13 -0500)]
correctly put spaces into dependency_libs
Alan T. DeKok [Sun, 5 Nov 2017 12:29:18 +0000 (07:29 -0500)]
note one more todo
Alan T. DeKok [Sat, 4 Nov 2017 22:20:00 +0000 (18:20 -0400)]
check cleanup_delay
Arran Cudbard-Bell [Sun, 5 Nov 2017 13:35:59 +0000 (13:35 +0000)]
Build unlang and virtual servers as part of the server library
Arran Cudbard-Bell [Sun, 5 Nov 2017 13:35:28 +0000 (13:35 +0000)]
Remove dependency on main_config from unlang_compile.c and virtual_servers.c
Arran Cudbard-Bell [Sun, 5 Nov 2017 11:29:10 +0000 (11:29 +0000)]
Move tls support functions into their own library
Arran Cudbard-Bell [Sun, 5 Nov 2017 11:28:54 +0000 (11:28 +0000)]
Move max_attributes and tunnel_password_zeros out of the global config
This means we no longer have to link radiusd to the radius library, which is worth the extra hassle.
Arran Cudbard-Bell [Fri, 3 Nov 2017 12:02:11 +0000 (12:02 +0000)]
Limit FreeRADIUS memory to 2G
Alan T. DeKok [Sat, 4 Nov 2017 20:15:35 +0000 (16:15 -0400)]
remove unused assignment
Alan T. DeKok [Sat, 4 Nov 2017 19:01:49 +0000 (15:01 -0400)]
clean up conflicting packets
i.e. toss the new one, but don't send a reply for the old one.
Alan T. DeKok [Sat, 4 Nov 2017 18:55:39 +0000 (14:55 -0400)]
just rely on src_dst information
As per commit
293ce7e991843f
we don't need to track ID / code separately
Alan T. DeKok [Sat, 4 Nov 2017 18:52:33 +0000 (14:52 -0400)]
distinguish conflicting packets from dups, from new ones
Alan T. DeKok [Sat, 4 Nov 2017 18:35:04 +0000 (14:35 -0400)]
disallow src_dst_size == 0
Alan T. DeKok [Thu, 2 Nov 2017 16:12:35 +0000 (12:12 -0400)]
Revert "Build tls functions into libfreeradius-server not radiusd"
This reverts commit
6087844e40959be171062dde235294810954bca1 .
this breaks the build. It needs to be re-done once it builds
correctly.