]> git.ipfire.org Git - thirdparty/freeradius-server.git/log
thirdparty/freeradius-server.git
8 years agochange Client-IP-Address to Packet-Src-IP-Address in examples
Alan T. DeKok [Fri, 10 Nov 2017 19:55:56 +0000 (14:55 -0500)] 
change Client-IP-Address to Packet-Src-IP-Address in examples

we've deprecated Client-IP-Address for years...

8 years agoif there's leftover bytes, ensure there's always more data to read
Alan T. DeKok [Fri, 10 Nov 2017 19:46:11 +0000 (14:46 -0500)] 
if there's leftover bytes, ensure there's always more data to read

8 years agoset default read size to 64K
Alan T. DeKok [Fri, 10 Nov 2017 19:37:08 +0000 (14:37 -0500)] 
set default read size to 64K

8 years agocreate a fake client
Alan T. DeKok [Fri, 10 Nov 2017 19:29:52 +0000 (14:29 -0500)] 
create a fake client

8 years agoset default addresses
Alan T. DeKok [Fri, 10 Nov 2017 19:23:23 +0000 (14:23 -0500)] 
set default addresses

8 years agomight not have a client
Alan T. DeKok [Fri, 10 Nov 2017 19:18:50 +0000 (14:18 -0500)] 
might not have a client

8 years agodo exponential backoff for trying to lock the detail.work file
Alan T. DeKok [Fri, 10 Nov 2017 14:51:02 +0000 (09:51 -0500)] 
do exponential backoff for trying to lock the detail.work file

8 years agomove brains to ring buffer code
Alan T. DeKok [Fri, 10 Nov 2017 14:28:29 +0000 (09:28 -0500)] 
move brains to ring buffer code

8 years agocompile correct method, based on packets we receive
Alan T. DeKok [Fri, 10 Nov 2017 14:17:54 +0000 (09:17 -0500)] 
compile correct method, based on packets we receive

8 years agoCompile inline xlats
Arran Cudbard-Bell [Fri, 10 Nov 2017 12:58:37 +0000 (12:58 +0000)] 
Compile inline xlats

They're useful for testing...

8 years agoFormatting
Arran Cudbard-Bell [Fri, 10 Nov 2017 12:52:18 +0000 (12:52 +0000)] 
Formatting

8 years agoensure freeradius can read the server certificate
Matthew Newton [Wed, 8 Nov 2017 22:22:54 +0000 (22:22 +0000)] 
ensure freeradius can read the server certificate

permissions locked down more by default on debian stretch

8 years agoallow new version of openssl package in debian stretch
Matthew Newton [Wed, 8 Nov 2017 21:53:48 +0000 (21:53 +0000)] 
allow new version of openssl package in debian stretch

8 years agoremove __DATE__ and __TIME__
Matthew Newton [Fri, 10 Nov 2017 00:42:32 +0000 (00:42 +0000)] 
remove __DATE__ and __TIME__

"reproducible builds" is apparently a thing, and gcc
has started complaining

8 years agodon't convert IPs if recvfrom returns error
Alan T. DeKok [Thu, 9 Nov 2017 22:51:31 +0000 (17:51 -0500)] 
don't convert IPs if recvfrom returns error

8 years agotypo
Alan T. DeKok [Thu, 9 Nov 2017 22:48:07 +0000 (17:48 -0500)] 
typo

8 years agomore debugging for error cases
Alan T. DeKok [Thu, 9 Nov 2017 19:27:26 +0000 (14:27 -0500)] 
more debugging for error cases

8 years agoinitialize 'when', too
Alan T. DeKok [Thu, 9 Nov 2017 18:32:53 +0000 (13:32 -0500)] 
initialize 'when', too

8 years agoEAGAIN is not a socket error we care about.
Alan T. DeKok [Thu, 9 Nov 2017 18:29:49 +0000 (13:29 -0500)] 
EAGAIN is not a socket error we care about.

8 years agocopy original message
Alan T. DeKok [Thu, 9 Nov 2017 17:58:59 +0000 (12:58 -0500)] 
copy original message

8 years agotypo
Alan T. DeKok [Thu, 9 Nov 2017 16:38:59 +0000 (11:38 -0500)] 
typo

8 years agocontinue if dead...
Alan T. DeKok [Thu, 9 Nov 2017 16:30:33 +0000 (11:30 -0500)] 
continue if dead...

8 years agomark sockets "dead" on read / write error.
Alan T. DeKok [Thu, 9 Nov 2017 16:25:26 +0000 (11:25 -0500)] 
mark sockets "dead" on read / write error.

There may be outstanding packets, so we don't free the socket
until all of the packets have been received

8 years agoshow more errors
Alan T. DeKok [Thu, 9 Nov 2017 16:10:18 +0000 (11:10 -0500)] 
show more errors

8 years agoshow errors that occur
Alan T. DeKok [Thu, 9 Nov 2017 16:09:02 +0000 (11:09 -0500)] 
show errors that occur

8 years agoset destructor for freeing the link, too
Alan T. DeKok [Thu, 9 Nov 2017 14:50:34 +0000 (09:50 -0500)] 
set destructor for freeing the link, too

8 years agowe don't have a destructor yet, so unlink it immediately
Alan T. DeKok [Thu, 9 Nov 2017 14:47:03 +0000 (09:47 -0500)] 
we don't have a destructor yet, so unlink it immediately

8 years agoset data to NULL if there's no data
Alan T. DeKok [Thu, 9 Nov 2017 13:54:55 +0000 (08:54 -0500)] 
set data to NULL if there's no data

mostly for paranoia

8 years agoupdate documentation and code
Alan T. DeKok [Wed, 8 Nov 2017 21:41:56 +0000 (16:41 -0500)] 
update documentation and code

"send ok" is probably clearer, as the "recv" section should
return "ok"

8 years agoenforce MRD
Alan T. DeKok [Wed, 8 Nov 2017 21:29:49 +0000 (16:29 -0500)] 
enforce MRD

8 years agoset start time for Status-Server packets, too
Alan T. DeKok [Wed, 8 Nov 2017 21:19:18 +0000 (16:19 -0500)] 
set start time for Status-Server packets, too

8 years agocheck and document retransmissions
Alan T. DeKok [Wed, 8 Nov 2017 19:42:57 +0000 (14:42 -0500)] 
check and document retransmissions

8 years agonotes on pause and multiple reads
Alan T. DeKok [Wed, 8 Nov 2017 19:29:39 +0000 (14:29 -0500)] 
notes on pause and multiple reads

8 years agoadd irt / mrt / mrc / mrd
Alan T. DeKok [Wed, 8 Nov 2017 19:14:52 +0000 (14:14 -0500)] 
add irt / mrt / mrc / mrd

for now, only mrc is enforced

8 years agoallow DHCP in v4.
Alan T. DeKok [Wed, 8 Nov 2017 19:03:31 +0000 (14:03 -0500)] 
allow DHCP in v4.

Once we get the rest of the build fixed up, we can re-do all
of the packages

8 years agoadd packet transmit counter. And make it all work...
Alan T. DeKok [Wed, 8 Nov 2017 18:58:55 +0000 (13:58 -0500)] 
add packet transmit counter. And make it all work...

8 years agodebug internal attributes, too
Alan T. DeKok [Wed, 8 Nov 2017 18:57:36 +0000 (13:57 -0500)] 
debug internal attributes, too

8 years agoadd NOTE_NONE to trigger EVFILT_READ on files
Alan T. DeKok [Wed, 8 Nov 2017 18:45:44 +0000 (13:45 -0500)] 
add NOTE_NONE to trigger EVFILT_READ on files

i.e. lseek() to start of file, EVFILT_READ won't trigger without
this.

8 years agopause / resume read after reading packets
Alan T. DeKok [Wed, 8 Nov 2017 18:34:24 +0000 (13:34 -0500)] 
pause / resume read after reading packets

8 years agostart of retransmission behavior
Alan T. DeKok [Wed, 8 Nov 2017 18:26:19 +0000 (13:26 -0500)] 
start of retransmission behavior

8 years agofailed is code 0, not DO-NOT-Respond
Alan T. DeKok [Wed, 8 Nov 2017 17:02:50 +0000 (12:02 -0500)] 
failed is code 0, not DO-NOT-Respond

8 years agouse consistent names
Alan T. DeKok [Wed, 8 Nov 2017 17:00:08 +0000 (12:00 -0500)] 
use consistent names

8 years agoupdate comment
Alan T. DeKok [Wed, 8 Nov 2017 16:59:38 +0000 (11:59 -0500)] 
update comment

8 years agofail if there's no resume function
Alan T. DeKok [Wed, 8 Nov 2017 16:56:28 +0000 (11:56 -0500)] 
fail if there's no resume function

8 years agodon't resume if we didn't yield
Alan T. DeKok [Wed, 8 Nov 2017 16:44:55 +0000 (11:44 -0500)] 
don't resume if we didn't yield

8 years agoDocument unlang_resume
Arran Cudbard-Bell [Wed, 8 Nov 2017 16:40:56 +0000 (16:40 +0000)] 
Document unlang_resume

8 years agoFix Tower/Git's commit mangling
Arran Cudbard-Bell [Wed, 8 Nov 2017 16:33:42 +0000 (16:33 +0000)] 
Fix Tower/Git's commit mangling

This reverts commit 87c8c4884b688b764d5fc8f4cf514f82ce961840.

8 years agoRevert "Move module resumption handling into a callback, just like the handling...
Alan T. DeKok [Wed, 8 Nov 2017 16:29:05 +0000 (11:29 -0500)] 
Revert "Move module resumption handling into a  callback, just like the handling for subrequests and parallel requests"

This reverts commit 9cdfbc2e88352992dfbc7fde2064a06e32bbe724.

revert borked commit

8 years agotransition to FINISHED when finished, not before
Alan T. DeKok [Wed, 8 Nov 2017 16:20:21 +0000 (11:20 -0500)] 
transition to FINISHED when finished, not before

just for replicated packets

8 years agoword smithing
Alan T. DeKok [Wed, 8 Nov 2017 01:57:30 +0000 (20:57 -0500)] 
word smithing

8 years agoremove 'login' and 'password' from client definition
Alan T. DeKok [Tue, 7 Nov 2017 20:08:36 +0000 (15:08 -0500)] 
remove 'login' and 'password' from client definition

8 years agoMove module resumption handling into a callback, just like the handling for subreque...
Arran Cudbard-Bell [Wed, 8 Nov 2017 15:14:35 +0000 (15:14 +0000)] 
Move module resumption handling into a  callback, just like the handling for subrequests and parallel requests

8 years agoDocument a couple of functions
Arran Cudbard-Bell [Wed, 8 Nov 2017 14:46:34 +0000 (14:46 +0000)] 
Document a couple of functions

8 years agoadd v4 proxying example to sites-available/default
Matthew Newton [Wed, 8 Nov 2017 13:57:20 +0000 (13:57 +0000)] 
add v4 proxying example to sites-available/default

8 years agoa number of raddb comment updates and tidying for v4
Matthew Newton [Wed, 8 Nov 2017 13:35:26 +0000 (13:35 +0000)] 
a number of raddb comment updates and tidying for v4

8 years agoRevert "As distinct from other types of resumption"
Arran Cudbard-Bell [Wed, 8 Nov 2017 13:27:08 +0000 (13:27 +0000)] 
Revert "As distinct from other types of resumption"

This reverts commit 934f628806e7e0eaf6a8c664e90fc6fc37f597f8.

8 years agoUnused. Presumably modcall state goes in the void *state field.
Arran Cudbard-Bell [Wed, 8 Nov 2017 13:06:20 +0000 (13:06 +0000)] 
Unused.  Presumably modcall state goes in the void *state field.

8 years agoAs distinct from other types of resumption
Arran Cudbard-Bell [Wed, 8 Nov 2017 12:35:35 +0000 (12:35 +0000)] 
As distinct from other types of resumption

8 years agoMerge error
Arran Cudbard-Bell [Tue, 7 Nov 2017 23:26:25 +0000 (23:26 +0000)] 
Merge error

8 years agoSwitch attribute resolution and virtual attributes to using value boxes
Arran Cudbard-Bell [Tue, 7 Nov 2017 23:00:46 +0000 (23:00 +0000)] 
Switch attribute resolution and virtual attributes to using value boxes

8 years agoadd 'copy_request_to_tunnel' and 'use_tunneled_reply' policies (ref 9fa3e6f8)
Matthew Newton [Tue, 7 Nov 2017 15:11:23 +0000 (15:11 +0000)] 
add 'copy_request_to_tunnel' and 'use_tunneled_reply' policies (ref 9fa3e6f8)

Tidy up some of the documentation around these, so it's mostly in
one place, and remove some stuff that's just wrong.

8 years agoDoxygen and pedanticism
Arran Cudbard-Bell [Tue, 7 Nov 2017 18:07:16 +0000 (18:07 +0000)] 
Doxygen and pedanticism

8 years agoMerge pull request #2109 from mattrose/v4.0.x
Alan DeKok [Tue, 7 Nov 2017 21:30:26 +0000 (16:30 -0500)] 
Merge pull request #2109 from mattrose/v4.0.x

fix rpm build errors

8 years agofix rpm build errors 2109/head
Matt Rose [Tue, 7 Nov 2017 21:06:02 +0000 (16:06 -0500)] 
fix rpm build errors

8 years agoUse new value box based function for one letter expansions
Arran Cudbard-Bell [Tue, 7 Nov 2017 17:49:25 +0000 (17:49 +0000)] 
Use new value box based function for one letter expansions

8 years agoAdd inline fr_cursor_free function for removing and freeing the current and subsequen...
Arran Cudbard-Bell [Tue, 7 Nov 2017 17:05:40 +0000 (17:05 +0000)] 
Add inline fr_cursor_free function for removing and freeing the current and subsequent items

8 years agos/XLAT_PERCENT/XLAT_ONE_LETTER/ s/XLAT_MODULE/XLAT_FUNC/
Arran Cudbard-Bell [Tue, 7 Nov 2017 17:14:34 +0000 (17:14 +0000)] 
s/XLAT_PERCENT/XLAT_ONE_LETTER/ s/XLAT_MODULE/XLAT_FUNC/

PERCENT didn't really mean anything.

MODULE is a misnomer, because the majority of the xlat functions are not from modules.

8 years agoRevert "one more fr_event_timer fix"
Alan T. DeKok [Tue, 7 Nov 2017 13:46:40 +0000 (08:46 -0500)] 
Revert "one more fr_event_timer fix"

This reverts commit 33499ae0ecc1314bbaa679d45e3d29918cf208ae.

one more of let's see if this works

8 years agoRevert "if we're leaking in event link ctx, don't link ctx"
Alan T. DeKok [Tue, 7 Nov 2017 13:46:17 +0000 (08:46 -0500)] 
Revert "if we're leaking in event link ctx, don't link ctx"

This reverts commit ba91811370c1f48e3bb2f194734f4cd7047d0f87.

let's see if this works

8 years agoordering issues in free
Alan T. DeKok [Tue, 7 Nov 2017 00:46:27 +0000 (19:46 -0500)] 
ordering issues in free

don't do double frees.  Assign correct pointer to link->self

8 years agoredo link ctx stuff to remove leak
Alan T. DeKok [Mon, 6 Nov 2017 21:16:07 +0000 (16:16 -0500)] 
redo link ctx stuff to remove leak

8 years agoone more fr_event_timer fix
Alan T. DeKok [Mon, 6 Nov 2017 17:53:22 +0000 (12:53 -0500)] 
one more fr_event_timer fix

8 years agoMerge pull request #2108 from pwdng/v4.0.x
Arran Cudbard-Bell [Mon, 6 Nov 2017 15:18:51 +0000 (15:18 +0000)] 
Merge pull request #2108 from pwdng/v4.0.x

Remove execution bit for systemd service conf file.

8 years agoRemove execution bit for systemd service conf file. 2108/head
Philippe Wooding [Mon, 6 Nov 2017 15:15:00 +0000 (16:15 +0100)] 
Remove execution bit for systemd service conf file.
This is to avoid 'Configuration file /usr/lib/systemd/system/radiusd.service is marked executable. Please remove executable permission bits. ' log messages

8 years agoif we're leaking in event link ctx, don't link ctx
Alan T. DeKok [Mon, 6 Nov 2017 14:28:41 +0000 (09:28 -0500)] 
if we're leaking in event link ctx, don't link ctx

8 years agoStupid stats...
Arran Cudbard-Bell [Sun, 5 Nov 2017 16:10:09 +0000 (16:10 +0000)] 
Stupid stats...

8 years agoHelps to link the radius client against the radius library...
Arran Cudbard-Bell [Sun, 5 Nov 2017 16:03:19 +0000 (16:03 +0000)] 
Helps to link the radius client against the radius library...

8 years agoExplicitly link rlm_chap to libfreeradius-radius
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:54:04 +0000 (15:54 +0000)] 
Explicitly link rlm_chap to libfreeradius-radius

8 years agoand another fr_packet_codes reference
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:45:45 +0000 (15:45 +0000)] 
and another fr_packet_codes reference

8 years agoUse the Packet-Type attribute to resolve packet codes to names
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:36:26 +0000 (15:36 +0000)] 
Use the Packet-Type attribute to resolve packet codes to names

8 years agoOnly a dependency if we're building with OpenSSL
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:28:18 +0000 (15:28 +0000)] 
Only a dependency if we're building with OpenSSL

8 years agoFunctions now available in libfreeradius-server
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:22:57 +0000 (15:22 +0000)] 
Functions now available in libfreeradius-server

8 years agoExplicitly link libfreeradius-io to libfreeradius-server
Arran Cudbard-Bell [Sun, 5 Nov 2017 15:14:22 +0000 (15:14 +0000)] 
Explicitly link libfreeradius-io to libfreeradius-server

8 years agoExplicitly link against the RADIUS library
Arran Cudbard-Bell [Sun, 5 Nov 2017 14:46:11 +0000 (14:46 +0000)] 
Explicitly link against the RADIUS library

8 years agoDoxygen
Arran Cudbard-Bell [Sun, 5 Nov 2017 14:33:54 +0000 (14:33 +0000)] 
Doxygen

8 years agoRemove dependencies on main_config from modules.c and move to libfreeradius-server
Arran Cudbard-Bell [Sun, 5 Nov 2017 14:31:16 +0000 (14:31 +0000)] 
Remove dependencies on main_config from modules.c and move to libfreeradius-server

8 years agocorrectly put spaces into dependency_libs
Alan T. DeKok [Sun, 5 Nov 2017 13:13:47 +0000 (08:13 -0500)] 
correctly put spaces into dependency_libs

8 years agonote one more todo
Alan T. DeKok [Sun, 5 Nov 2017 12:29:18 +0000 (07:29 -0500)] 
note one more todo

8 years agocheck cleanup_delay
Alan T. DeKok [Sat, 4 Nov 2017 22:20:00 +0000 (18:20 -0400)] 
check cleanup_delay

8 years agoBuild unlang and virtual servers as part of the server library
Arran Cudbard-Bell [Sun, 5 Nov 2017 13:35:59 +0000 (13:35 +0000)] 
Build unlang and virtual servers as part of the server library

8 years agoRemove dependency on main_config from unlang_compile.c and virtual_servers.c
Arran Cudbard-Bell [Sun, 5 Nov 2017 13:35:28 +0000 (13:35 +0000)] 
Remove dependency on main_config from unlang_compile.c and virtual_servers.c

8 years agoMove tls support functions into their own library
Arran Cudbard-Bell [Sun, 5 Nov 2017 11:29:10 +0000 (11:29 +0000)] 
Move tls support functions into their own library

8 years agoMove max_attributes and tunnel_password_zeros out of the global config
Arran Cudbard-Bell [Sun, 5 Nov 2017 11:28:54 +0000 (11:28 +0000)] 
Move max_attributes and tunnel_password_zeros out of the global config

This means we no longer have to link radiusd to the radius library, which is worth the extra hassle.

8 years agoLimit FreeRADIUS memory to 2G
Arran Cudbard-Bell [Fri, 3 Nov 2017 12:02:11 +0000 (12:02 +0000)] 
Limit FreeRADIUS memory to 2G

8 years agoremove unused assignment
Alan T. DeKok [Sat, 4 Nov 2017 20:15:35 +0000 (16:15 -0400)] 
remove unused assignment

8 years agoclean up conflicting packets
Alan T. DeKok [Sat, 4 Nov 2017 19:01:49 +0000 (15:01 -0400)] 
clean up conflicting packets

i.e. toss the new one, but don't send a reply for the old one.

8 years agojust rely on src_dst information
Alan T. DeKok [Sat, 4 Nov 2017 18:55:39 +0000 (14:55 -0400)] 
just rely on src_dst information

As per commit 293ce7e991843f

we don't need to track ID / code separately

8 years agodistinguish conflicting packets from dups, from new ones
Alan T. DeKok [Sat, 4 Nov 2017 18:52:33 +0000 (14:52 -0400)] 
distinguish conflicting packets from dups, from new ones

8 years agodisallow src_dst_size == 0
Alan T. DeKok [Sat, 4 Nov 2017 18:35:04 +0000 (14:35 -0400)] 
disallow src_dst_size == 0

8 years agoRevert "Build tls functions into libfreeradius-server not radiusd"
Alan T. DeKok [Thu, 2 Nov 2017 16:12:35 +0000 (12:12 -0400)] 
Revert "Build tls functions into libfreeradius-server not radiusd"

This reverts commit 6087844e40959be171062dde235294810954bca1.

this breaks the build.  It needs to be re-done once it builds
correctly.