1 FreeRADIUS 2.0.4 ; $Date$ , urgency=medium
3 * Allow "virtual_server" in "realm" and "home_server" sections.
4 See raddb/proxy.conf and raddb/sites-available/virtual.example.com.
5 * Allow "passwd" module to be listed in "accounting" and "post-auth".
6 * Added "fallback" to "home_server_pool" configuration, to handle
7 the case of all home servers being dead. See raddb/proxy.conf.
8 * Added sample text to raddb/sites-available/inner-tunnel which
9 can simplify debugging of inner tunnel configurations.
10 * Added regular expression matching in realm names. See
11 raddb/proxy.conf for examples.
12 * Added simple DHCP server functionality. For comments, see
13 raddb/sites-available/dhcp.
16 * Install all files in raddb/sites-available
17 * Allow non-threaded builds.
18 * Don't treat '0x' as special for known attributes that are not
20 * Fix log error in rlm_pap.
21 * Remove documentation about non-existent functionality.
22 * Updated warning messages in debug output.
23 * Fix handling of timeouts in rlm_ldap that affected 64-bit systems.
24 This fix was supposed to go into 2.0.3, but did not make it.
25 * Fix event handling in debug mode for failed proxy requests.
26 * Fix memleak in fifos. Closes #537.
27 * Fix memleak on blocked threads. Closes #538.
28 * Perform additional checks on NULL realms. Closes #541.
29 * Fix handling of "clients" in "listen" section.
30 * When detail file cannot process a packet, sleep for longer
31 to let the rest of the server do something.
32 * Add missing table to raddb/sql/mssql/schema.sql. Closes #545.
33 * Updated rlm_sql_postgresql to build with PostgreSQL 7.x.
35 * Fix "postauth" of rlm_ldap to look for LDAP-UserDn in the
37 * Update rlm_attr_filter for some corner cases. Closes #543.
39 FreeRADIUS 2.0.3 ; Date: 2008/03/17 09:22:17 , urgency=medium
41 * Updated raddb/certs/ca.cnf with extensions to allow ca.der
42 to be imported as a CA on Symbian and Windows Mobile devices.
44 * Enable multiple matches in "hints" via Fall-Through = Yes.
46 * Added preliminary SQLite driver, contibuted by Apple.
47 Untested, with no sample configuration. This address bug #470.
48 * Updated logging sub-system so that log messages from libfreeradius
49 can go to the log file, and not stdout.
50 * Added dictionary.rfc5176
51 * EAP module now checks for instance name, and uses that for
52 authentication. This avoids the need to set Auth-Type when
53 there are multiple instances of the EAP module.
54 * Added Module-Return-Code attribute, which contains the value
55 returned by the previous module (ok/fail/update/etc.)
58 * Corrected typos in rlm_dbm. Closes bugs #521 and #522.
59 * Detail file "listen" sections now work much better.
60 * Don't allow old "log_*" to over-ride new format. Closes bug #525
61 * Initialize allocated memory in Oracle SQL driver. This fixes
62 occasional crashes on some systems. Closes bug #518
63 * Call correct function in rlm_protocol_filter. This enables the
64 module to build. Closes bug #512.
65 * Added deprecated flag to build for rlm_krb5. This allows it to
66 run on 64-bit systems. Closes bug #491
67 * Corrected error message when parsing invalid configurations
68 so it doesn't crash. Closes bug #527
69 * Fix handling of timeouts in rlm_ldap that affected 64-bit systems.
70 * Handle $INCLUDE's in "instantiate" section. Closes #528.
71 * Format updates to "man" pages from Stephen Gran.
73 FreeRADIUS 2.0.2 ; Date: 2008/02/14 11:13:48 , urgency=medium
75 * Added notes on how to debug the server in radiusd.conf
76 * Moved all "log_*" in radiusd.conf to log{} section.
77 The old configurations are still accepted, though.
78 * Added ca.der target in raddb/certs/Makefile. This is
79 needed for importing CA certs into Windows.
80 * Added ability send raw attributes via "Raw-Attribute = 0x0102..."
81 This is available only debug builds. It can be used
82 to create invalid packets! Use it with care.
83 * Permit "unlang" policies inside of Auth-Type{} sub-sections
84 of the authenticate{} section. This makes some policies easier
86 * "listen" sections can now have "type = proxy". This lets you
87 control which IP is used for sending proxied requests.
88 * Added note on SSL performance to raddb/certs/README
91 * Fixed reading of "detail" files.
92 * Allow inner EAP tunneled sessions to be proxied.
93 * Corrected MySQL schemas
94 * syslog now works in log{} section.
95 * Corrected typo in raddb/certs/client.cnf
96 * Updated raddb/sites-available/proxy-inner-tunnel to
97 permit authentication to work.
98 * Ignore zero-length attributes in received packets.
99 * Correct memcpy when dealing with unknown attributes.
100 * Corrected debugging messages in attr_rewrite.
101 * Corrected generation of State attribute in EAP. This
102 fixes the "failed to remember handler" issues.
103 * Fall back to DEFAULT realm if no realm was found.
104 Based on a patch from Vincent Magnin.
105 * Updated example raddb/sites-available/proxy-inner-tunnel
106 * Corrected behavior of attr_filter to match documentation.
107 This is NOT backwards compatible with previous versions!
108 See "man rlm_attr_filter" for details.
110 FreeRADIUS 2.0.1 ; Date: 2008/01/22 13:29:37 , urgency=low
112 * "unlang" has been expanded to do less run-time expansion,
113 and to have better handling of typed data. See "man unlang"
114 for documentation and new examples.
117 * The 'acct_unique' module has been updated to understand
118 the deprecated (but still used) Client-IP-Address attribute.
119 * The EAP-MSCHAPv2 module no longer leaks MS-CHAP2-Success in
121 * Fixed crash in rlm_dbm.
122 * Fixed parsing of syslog configuration.
124 FreeRADIUS 2.0.0 ; Date: 2007/11/24 08:33:09 , urgency=low
126 * Debugging mode is much clearer and easier to read.
127 * A new policy language makes many configurations trivial.
128 See "man unlang" for a complete description.
129 * Virtual servers are now supported. This permits clear separation
130 of policies. See raddb/sites-available/README
131 * EAP-TLS (PEAP, EAP-TTLS) and OpenSSL certificates "just work".
132 See raddb/certs/README for details.
133 * Proxying is much more configurable than before.
134 See proxy.conf for documentation on pools, and new config items.
135 * Full support for IPv6.
136 * Much more complete support for the RADIUS SNMP MIBs.
137 * HUP now works. Only some modules are re-loaded,
138 and the server configuation is *not* reloaded.
139 * "check config" option now works. See "man radiusd"
140 * radrelay functionality is now included in the server core.
141 See raddb/sites-available/copy-acct-to-home-server
142 * VMPS support. It is minimal, but functional.
143 * Cleaned up internal API's and names, including library names.