1 FreeRADIUS 1.1.7 ; $Date$, urgency = medium
3 * Updated LDAP documentation
4 * Added note on DH parameters in eap.conf, and debugging messages
5 which complain if DH is used, but not configured properly.
6 * Updated the Mikrotik dictionary. Added a note that the sample
7 dictionary they supply is broken.
8 * Output more information on blocked threads, which should help
9 narrow down which modules is causing the problem.
10 * Added more eDirectory support.
11 * rlm_ldap now prints out attributes in the standard format
12 * Enabled server-side handling of procedures in MySQL
15 * Added NT-Hash support for mschap_xlat
16 * Corrected documentation to point to correct location of files
17 * Checks for more recent FreeBSD versions
18 * use -DLDAP_DEPRECATED to avoid OpenLDAP crashes
20 FreeRADIUS 1.1.6 ; Date: 2007/04/12 12:54:19 , urgency = high
22 * Added dictionary.rfc4372 (Chargeable User Identity)
23 * Added dictionary.rfc4675 (VLAN and Priority)
24 * Added dictionary.rfc4679 (ADSL Forum)
25 NOTE some name differences from the RFC, due to dictionary.redback
28 * Corrected typo in rlm_pap.c (closes #440)
29 * Corrected typo in src/main/auth.c (closes #437)
30 * Suppress SSL error messages if error is zero. (closes #436)
31 * Don't complain about "Error in read client certificate A"
32 if we expect to read it in the next packet. Fix based on patch
34 * Corrected nearly 30 bugs found by Coverity
35 See also http://scan.coverity.com
36 * Don't die on HUP. Instead leak memory (sorry). After a few
37 hundred HUP's, the server will have leaked a few megabytes of
38 memory, and you should probably re-start it. It's ugly, but
39 better than dying. (Closes #426)
40 * Corrected a few double free's
41 * Corrected typo in radrelay, which prevented it from working
42 * Made Firebird module build
43 * Fixed bug in PostgreSQL module that caused server crash.
44 * Fixed bug in SQL module that could cause server to crash.
46 FreeRADIUS 1.1.5 ; Date: 2007/03/05 13:13:43 , urgency=low
48 * Updated rlm_python to something usable
49 * Added experimental sql "HPW" IPPools.
50 * Added more dictionaries
51 * Dictionary files now MUST NOT be globally writable.
52 * Configuration files now MUST NOT be globally readable,
54 * Be more aggressive about freeing memory on clean exit.
55 This helps track down run-time leaks.
56 * Updated rlm_python to something usable
57 * Added experimental sql "HPW" IPPools.
60 * Corrected base64 decoding in rlm_pap
61 * Don't retransmit accounting packets. The NAS should do this.
62 * Handle Client-Error in EAP-SIM. This closes #419
63 * Port OpenSSL locking fixes from CVS head. This makes PEAP
64 more stable on some systems.
65 * Require Message-Authenticator in Status-Server packets
66 * Correct Tunnel-Medium-Type VALUEs in dictionary.rfc2868
67 * Be more aggressibe about freeing memory on clean exit.
68 This isn't strictly a bug fix, but it makes it easier to
70 * Increase buffer size for dynamic expansion, which allows
71 longer SQL qeuries. (close: #405)
72 * Use correct line number when there's a parse error in one
73 of the configuration sections. (close #421)
74 * Terminate SSL sessions in EAP on error, rather than continuing
76 * Increase buffer size to allow parsing of long octet strings
77 * Fix string termination on xlat in rlm_perl
79 FreeRADIUS 1.1.4 ; Date: 2007/01/14 00:37:15 , urgency=medium
82 * Major enhancements to rlm_pap, that make "encryption_scheme"
83 a thing of the past. See "man rlm_pap" for details.
84 * Added SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS flag to use
85 work-arounds that enable Windows Vista clients to work.
86 * Added preliminary code to support Firebird. (closes: #378)
88 * Send MS-CHAP2-Success, which makes EAP-TTLS/MSCHAP work on more
89 platforms. (closes: #402)
90 * Add a new "reply-name" directive in rlm_sqlcounter to define the
91 name of the reply attribute. (closes: #403)
92 * Added more dictionaries and attributes (closes: #408, among others)
93 * Print ntlm_auth failure reason in Module-Failure-Message
95 * radsqlrelay is able to get the DB password from a file instead
96 of command line. (closes: #395)
99 * Fix a parse error in the digest module, where malformed
100 digest requests would result in the user being accepted. Oops...
101 * VALUEs can only be defined for 'integer', to catch mistakes
102 with setting VALUEs for type 'string'.
103 * Better parsing of VALUE names, so that values starting with
104 a digit work correctly.
105 * Check return from malloc (closes: #407)
106 * Fix a double free() in rlm_eap_tls.c (closes: #404)
107 * Check return code of malloc() during initialization. (closes: #407)
108 * Fix a corner case where the proxy port isn't set either in
109 radiusd.conf or in proxy.conf.
111 FreeRADIUS 1.1.3 ; Date: 2006/08/22 23:09:20, urgency=low
114 * rlm_otp now talks to otpd for OTP verification, rather than
115 doing the work itself; this improves portability and security
116 (access to OTP token keys is now much more limited)
117 * More dictionary updates
118 * Added Oracle support to radsqlrelay
119 * Added experimental module sql_ippool. See doc/rlm_sqlippool
122 * Allow rlm_dbm to load empty check items (Bug #380)
123 * Better handling of Framed-MTU in EAP-TLS (Bug #383)
124 * Handle Access-Challenge verification properly
125 * Fixed configure/make error for Solaris (set HAVE_CLOSEFROM).
126 * Update libtool and ltdl to 1.5.22, to fix 'make install R=';
127 also improve integration by importing unmodified original
128 source (except a small patch to ltdl)
130 FreeRADIUS 1.1.2 ; Date: 2006/06/23 04:57:51 , urgency=low
133 * Allow tagged VSA's for Juniper. Closes bugs #367 and #368.
134 * Allow Ascend "abinary" format to be specified as octets,
135 (e.g. Ascend-Data-Filter = 0x010203...)
136 * Added "cipher_list" configuration to the EAP-TLS module.
137 See "eap.conf" and "man 1 cipher" for details.
138 * Added "check_cert_issuer" configuration to the EAP-TLS module.
139 See "eap.conf" for details. (closes: #346)
140 * Added "suppress" configuration entry to rlm_detail,
141 to suppress certain attributes (e.g. User-Password).
142 This closes bug #359.
143 * More dictionary updates
144 * Write SSL errors to log file, rather than stderr.
145 This closes bug #347.
146 * Allow a core dump on uid change on Linux (closes: #361)
149 * Return better error codes in SQL IODBC module. Closes bug #341.
150 * Corrected list of EAP handlers.
151 * Initialize variable in rlm_ldap.c. This fixes RedHat
153 * Escape more ldap strings, so configuration entries
154 that have magic LDAP characters don't break LDAP.
155 This closes bug #360.
156 * Updated doc/rlm_ldap. This closes bug #353.
157 * Updated redhat/freeradius.spec. This closes bug #330.
158 * Don't forcibly over-write Auth-Type in the mschap module.
159 This prevents an earlier module from forcing reject.
160 * Use the correct module reference in the authenticate section,
161 where Auth-Type wasn't explicitely specified.
162 * If there are typos in a subsection in radiusd.conf, exit
163 after printing an error, rather than continuing.
164 * Print Ascend "abinary" format as text rather than octets
166 * Silently drop packets with bad Message-Authenticators, as per RFC3579
167 * Unbreak ./configure --disable-static (closes: #350)
168 * Unbreak ./configure --prefix (closes: #354)
170 FreeRADIUS 1.1.1 ; Date: 2006/03/17 19:50:34, urgency=low
173 * Additional state checking in the EAP-MSCHAPv2 module.
174 Bug found by Steffen Schuster.
177 * More dictionary updates
178 * Additional tests and fixes for Digest module from Phillipe Sultan.
179 * Add new "phone" response mode to rlm_otp/cryptocard.
180 * Put the eap sessions into a tree, so that looking them up is very
181 fast, and no longer O(n) in the number of sessions.
182 * Install the schema examples for a set of backends with the rest
183 of the documentation.
184 * Add support for xlat expansion of attributes from LDAP.
187 * Fix rlm_perl crash. (closes: #348)
188 * Fix handling of CoA-Request packets (close #344). Also correct
190 * Fix an error on x86_64 machines when reading dictionaries.
192 * Fix compilation errors on FreeBSD and NetBSD because of rlm_otp
193 module. (closes: #314 #328)
194 * Workaround Cisco bug in State attribute handling in rlm_otp.
195 * Support LP64 for async mode in rlm_otp.
196 * Fix libtool problems on Debian with rlm_eap_peap and rlm_eap_ttls
197 modules. (closes: #75)
198 * Make "use_tunneled_reply" work properly for PEAP.
199 * Copy the whole string when getting a one-to-one-mapped attribute
200 from LDAP (closes: #261)
201 * Fix net-snmp's ucd-snmp compatibility mode.
203 FreeRADIUS 1.1.0 ; Date: 2006/01/04 05:55:19, urgency=low
206 * rlm_ldap has "set_auth_type" configuration option, which should
207 address some configuration problems when using it.
208 * Fix MIT Kerberos bug
209 * Modules can be load balanced, both in isolation and redundantly.
210 See doc/load-balance.txt for more information.
211 * rlm_perl is now marked "stable"
212 * N-tier certificate patch from Mohammed Petiwala.
213 * Copied dictionaries from the CVS head (many, many, more vendors)
214 * Enabled support for weird VSA formats, like Lucent and Starent.
215 * Support encrypted IP address and integers, for Juniper clients.
216 * Add PEAP machine authentication support in module "rlm_mschap".
217 * Support User-Password field encryption in digest mode.
218 * rlm_x99_token has become rlm_otp (with lots of changes).
219 * Add rlm_sqlcounter to the list of stable modules.
220 * Read MySQL specific options in sections [freeradius] and [client]
222 * Support the ${Cisco-AVPair[n]} syntax.
223 * Execute modules in {Pre,Post}-Proxy-Type stanzas.
224 * Add new options to radclient to run stress tests on the server.
225 * New module "rlm_sql_log" to postpone the storage of accounting data
226 in a SQL database. See rlm_sql_log(5) manpage.
227 * New program "radsqlrelay" which sends the SQL logfile according to
228 the SQL server's capabilities.
231 * #306 (HUP when built with threads, but executed with -s)
232 * #285 (more attributes in dictionary.cisco.vpn3000)
233 * rlm_digest has a number of bug fixes to authentication types.
234 * Don't leak memory in module "rlm_sql".
235 * Update the dictionaries, so that VALUEs with the same name,
236 but different numbers, aren't allowed.
237 * Queue the request before looking for available threads.
238 * Don't free the check items after we received the proxy reply.
239 * Expand config variables in included files, too.
240 * Check the return value of accounting modules and don't proxy
242 * In rlm_passwd, don't close a file stream more than once.
243 * Fix format string errors in rlm_sql.c, spotted by Primoz Bratanic.
244 * Walk the whole string in when escaping strings in rlm_ldap.
245 * Include crypt.h if it is available so we get a prototype for crypt(),
246 spotted by Konstantin Kubatkin.
247 * Removed (for almost all uses) length restrictions on vendor names
249 * Don't leak memory when proxying an Access-Challenge response.
250 * Make the sleep time user-defined, so radrelay can send more than
252 * Fix a memory leak in rlm_checkval.
253 * radclient doesn't resend countless times packets with invalid
255 * Fix segfault and mem leak in rlm_pam.
257 FreeRADIUS 1.0.5 ; Date: 2005/09/04 16:23:00, urgency=medium
260 * SQL injection attack in the module "rlm_sqlcounter".
261 * Buffer overflows in the module "rlm_sqlcounter".
262 * Expansion of variable %t may write 26 bytes beyond the buffer
263 bound. Primoz Bratanic is credited with the discovery of these
267 * Don't de-reference a NULL pointer if the auth-type is unknown
268 in the function rad_check_password().
269 * Escape more characters in the LDAP queries.
270 Bug found by Suse engineers.
271 * In rlm_sql_unixodbc, don't call rad_malloc from sql_error(),
273 * Fix an off-by-one error in the module rlm_sql_unixodbc.
274 Bug found by Suse engineers.
275 * In rlm_sql, resize the buffer for the value of SQL-User-Name.
276 * Initialize memory for a new SQL socket in the module rlm_sql.
277 * Don't add too many attributes after running an external program.
278 Bug found by Suse engineers.
279 * Fix an off-by-one error in the function getthing().
280 * snprintf() and vsnprintf() replacements were not compiled if
281 the autoconf tests didn't find the functions.
282 * Don't use vsprintf() anymore, but the replacement for vsnprintf()
283 in libradius instead.
284 * The function decode_attribute() may write beyond buffer bounds.
285 Bug found by Suse engineers.
286 * Fix a memset() in the function request_enqueue() which was
287 begining at the wrong address. Bug found by Matthias Ruttman.
288 * Fix an off-by-one error in the function xlat_copy().
289 Bug found by Primoz Bratanic.
290 * Fix other off-by-one errors in module "rlm_unix", too.
291 Bug found by Allan Bazinet.
292 * Fix a 2-byte over-run read in function rad_decode().
293 * Update thread pool queue properly.
294 * Autonconf tests try first any user-specified directory,
295 otherwise they may pick up the wrong version.
296 * Delete the autoconf tests for the libldap dependancies.
297 * Install all the regular files under the "doc" directory.
298 * Distinguish between exit code <0 (failure) and >0 (reject)
299 in Exec-Program-Wait. Patch from Thor Spruyt.
300 * Make Expiration work.
301 * Clean up the code for opening a proxy socket.
302 * When finding a realm to proxy to, if all are dead, wake them
303 if wake_all_if_all_dead is true.
304 * In radwho, print the NAS-Port as unsigned int.
305 * Use extended regex instead of basic regex in rlm_attr_filter.
306 * Catch the case where someone deletes a directory that rlm_detail
308 * Use the variable $(LDFLAGS) when linking a module.
309 * Ignore the Stripped-User-Name when a realm has the "nostrip"
311 * Add support for NT-Password in rlm_pap.
312 * In rlm_sqlcounter, use the time left to the next reset if it's
313 inferior to the time left in the counter.
314 * Calculate Message-Authenticator correctly for Accounting-Request
315 and Accounting-Response. Bug found by Paolo Rotela.
316 * Build on MAC OS X. Still need --disable-shared, though.
317 * Fix bug #255 (crash with expired CRL's, etc.)
318 * Fix quote removal of the values from a SQL database.
319 * Reap the zombie process after a command run from "Exec-Program".
320 * Allow to cancel proxy of accounting with "Proxy-To-Realm := LOCAL".
321 * Don't copy VSA's to an Access-Reject packet.
323 FreeRADIUS 1.0.4 ; Date: 2005/06/11 22:46:52, urgency=medium
325 * Fix installation problem.
326 * Increase a buffer size, so radrelay doesn't truncate values.
327 * Updates in the documentation. Patches from Thor Spruyt.
329 FreeRADIUS 1.0.3 ; Date: 2005/06/03 17:15:11, urgency=high
332 * Always escape the strings in the SQL module.
333 * Check buffer bound when input character needs escaping in
334 the SQL module. Bug found by Primoz Bratanic.
337 * Return EAP-Fail in Access-Reject, rather than an empty Access-Reject
338 * Don't send Proxy-State from home server in TTLS.
339 * Fixes for forking external programs, so the server doesn't
340 suddenly stop processing requests, or stop forking programs.
341 * radzap now works, but it's command-line options have changed
342 completely, and it's a shell script.
343 * radwho has updated command-line options, and no longer reads
345 * Fix bug in calling checkrad script with NAS port > 9999999
346 * Fix long-standing bug when both crypt and pthreads are in use
347 * Don't SEGV when rlm_sql gets 'NULL' value from request.
348 * Re-arrange code in radrelay to not duplicate accounting packets.
349 * In rlm_attr_rewrite, change the value when the attribute type
350 is different from string.
352 FreeRADIUS 1.0.2 ; Date: 2005/02/13 01:03:20, urgency=medium
354 * Novell eDirectoty support. Patch from Novell.
355 * localweb & Trapeze dictionary updates.
357 * Make "Strip-User-Name = No" work.
358 * Don't declare zero-length arrays in rlm_passwd
359 * Bug fix to make udpfromto code work
360 * radrelay shouldn't dump core if it can't read a VP from the
362 * Only initialize the random pool once.
363 * In rlm_sql, don't escape characters twice.
364 * Fix MD4 calculation on big-endian machines.
365 * In rlm_ldap, only claim Auth-Type if a plain text password is present.
366 * Treat Quintium VSAs like Cisco VSAs
367 * Locking fixes in threading code
368 * rlm_krb5 includes /usr/include/et for Fedora Core
369 * Fix post-auth REJECT stanza processing for rejections from external
370 processes or home RADIUS servers
371 * Fix building on gcc-4.0 by not trying to access static auth_port from
373 * Fix building SNMP support on Solaris 9, which needs -lkstat
375 FreeRADIUS 1.0.1 ; Date: 2004/09/02 10:52:03 , urgency=high
377 Denial-of-Service Security Fix
378 * Fix two remote crashes and a memory leak in RADIUS packet
382 * Fix premature "success" during EAP/TLS handshake.
383 * Dictionary handling now complains about identically named
384 values with different values, and rejects dictionary
385 entries with bad data
386 * Update dictionaries to deal with the above change.
388 FreeRADIUS 1.0.0 ; Date: 2004/07/17 06:31:32, urgency=low
391 * Fix LDAP dictionary map loading.
392 * Check login time allowance to packet timestampe where available.
393 * Compilation fix for machines withouth <pthread.h>.
394 * Man page improvements.
395 * Grab latest config.sub and config.guess (2004-03-12).
398 * Make IPv6 support work better.
399 * Updated 3com dictionary.
400 * Fixed MD5 code to be more portable.
403 * Updated SQL onoff query
404 * Updated Nomadix, RedBack and Valemont dictionaries.
406 * Don't complain about ports we're listening on when HUP'd.
407 * Permit -i to work for radclient.
408 * Fix bug in new proxy code.
409 * rlm_passwd is now a little friendlier.
411 Non source-code changes
412 * Preliminary tests indicate that the server builds and runs on
413 Interix (SFU on Windows XP).
414 * EAP module configuration is now in "raddb/eap.conf", as it was
416 * Updated GPL boilerplate in the source.
417 * Added new RFC's to doc/rfc/
418 * Added more "man" pages for many of the modules. Many of the
419 'doc/rlm_*' files have been deleted, and replaced with 'man' pages.
420 * Added many new dictionaries: 3GPP, 3GPP2, Propel, Karlnet,
421 Sonicwall, Navini, Bristol University, Valemont, Mikrotik.
422 * doc/configurable_failover is now understandable by mere humans.
423 * Update scripts/rc.radiusd with examples of how to deal with
424 shared library issues.
426 * Updates to configure scripts for MySQL.
427 * Updated doc/tuning_guide, with comments about SQL.
429 Core feature improvements
430 * Many, many minor bug fixes and feature enhancements.
431 * Added "reject" action in configurable failover for modules
432 * Added a "listen" directive, which supersedes the old
433 "bind_address" and "port" directives. "listen" allows much
434 finer-grained control over what IP's, ports, and packets the
435 server pays attention to.
436 * The proxy code has been updated to work properly, and to
437 allocate new sockets for proxying packets when there are more
438 than 256 requests outstanding to a home server. Many thanks
439 to Stephen Jaeger for help in debugging the new feature.
440 * Regular expression matches in brackets can now be referenced
441 as in Perl, via %{1}, %{2}, etc.
442 * added ability for mschap module to use ntlm_auth, to perform
443 MS-CHAPv1 and MS-CHAPv2 authentication against a Windows
445 * Check return value from registered xlat functions. If return
446 value is 0, treat the attribute as not found. This lets things
447 like %{sql: select... :-FAILED} work.
448 * Realms can now be configured to ignore DEFAULT and NULL
449 realms. This makes prefix/suffix realms co-exists a little
451 * Added red-black tree implementation to src/lib. The
452 dictionaries now use it, rather than singly linked lists. Tests
453 indicate that the server is up to 30% faster.
454 * Updated MSCHAP module to be able to better deal with Windows
455 machines which put a username with domain into User-Name, but
456 which use only the username to create the MS-CHAP-Response.
457 * Made "hints" file more generic and flexible, without changing
459 * Enhanced configuration file variable handling. See
460 doc/variables.txt for details.
461 * Checks for OpenSSL now enforce version number, and are common
462 across all modules, rather than being duplicated.
463 * Implement "udpfromto", which allows the server to work better in
464 LVS. Code from Jan Berkel and Miquel van Smoorenburg. To use
465 it, do: ./configure --with-udpfromto=yes
466 * Re-arranged "walk over cached requests" code for clarity.
467 * The server now keeps more SNMP statistics about the packets it
469 * De-coupled the queue of input requests from the pool of threads.
470 This allows "spikes" of requests to be queued, even though all
471 threads are busy. This change significantly increases the
472 servers ability to process large numbers of requests on a
474 * Re-arranged the internal "core" request handling code, to
475 make a little more sense.
476 * Removed support for Replicate-To-Realm. Use radrelay.
477 * Print & parse unknown attributes as Attr-%d, Vendor-%d-Attr-%d,
478 or VendorName-Attr-%d.
479 * rlm_passwd is now marked "stable", and has many bugs fixed.
480 * More flexible configuration for rlm_ldap.
481 * New implementation of parser for Ascend's data filter
482 attributes, that is now thread-safe and GPL'd.
483 * Preliminary (not entirely complete) support for IPv6 attributes,
485 * Added support for rejected packets to run an Post-Auth-Type REJECT
486 stanza instead of skipping post-auth entirely.
487 * Added support for %{*:Packet-Type} translation. (Not for %{check:})
488 * Added support for %{check:Attribute-Name} to go with
489 %{request:Attribute-Name} and the like.
490 * Add support to rlm_sql for post-authentication query execution.
491 * Add support to rlm_sql for accounting_update_query_alt
492 * Add support for supplementary groups of switched-to user
493 * Add support for xlat-ing backquoted reply values from SQL queries.
494 * Add Public Domain MD5 implementation by Colin Plumb
495 * Add Public Domain MD4 implementation by Colin Plumb and
497 * Remove smbdes.c from libradius, and add to rlm_mschap and
499 * Replace GPL'd snprintf.c in libradius with LGPL'd snprintf.[ch]
501 EAP-module feature improvements
502 * Allow checking of EAP identity against certificate.
503 * EAP-TLS now checks Certificate Revocation List
504 * Added EAP-TTLS support in rlm_eap. Tested with many clients,
505 and with tunneled PAP, CHAP, MS-CHAP, MSCHAPv2, EAP-MD5,
506 EAP-MSCHAPv2, and EAP-GTC.
507 * Added EAP-PEAP support, with tunneled EAP-MSCHAP-V2, and EAP-GTC.
508 Patch from Masao Nishiku. (Many, many thanks!)
510 * Enabled proxying of the authentication request which is tunneled
511 inside of PEAP and TTLS.
514 * Add support to checkrad.pl for mikrotik-brand NASs over SNMP
515 * Added rlm_ippool_tool, by Edwin Groothuis.
516 * Updates to radclient, so that you can specify multiple '-f'
517 options, and it will send those packets in parallel. This
518 allows for significantly higher packet rates when load testing.
521 * Fix a bug in the attr_filter module, which would throw away
522 the tag from tagged attributes.
523 * Bug fixes to thread handling from Malcolm Caldwell.
524 * Fixed a bug in libltdl which printed the wrong error message
525 when trying to link to a library. Found by Paul Stewart.
526 * Correct error condition in rlm_krb5. Patch from Jon Moore.
527 * Updates for 64-bit systems.
528 * Patch to make ctime_r work on non-compliant platforms.
529 Patch from Oliver Graf.
530 * Updates to rlm_ippool for stability.
531 * Catch packets which are just about 4K in size.
532 Bug found by Nils-Henner Krueger.
533 * Many fixes to the SQL module & sub-modules.
535 FreeRADIUS 0.9.3 ; Date: 2003/11/20 20:15:48, urgency=high
537 * Change rlm_eap to not log an error if given a non-EAP packet
538 * Fix rlm_ippool's call to pod2man for perl versions before 5.6
539 * Fix a remote DoS and due to mis-handling of tagged attributes,
540 and Tunnel-Password attribute.
542 FreeRADIUS 0.9.2 ; Date: 2003/10/14 19:00:09, urgency=low
544 * New rlm_ippool code to fix IP leaks
545 * New rlm_ippool_tool for manipulation of rlm_ippool databases
547 * Change radrelay to reject records without an Acct-Status-Type attribute
548 * Change rlm_counter to reject packets which predate last server reset
549 * Change version output to include GNU GPL information
550 * Change rlm_ldap to output bad search filters
552 * Fix compilation of various modules when not building with pthreads
553 * Fix segfault due to poorly initialised value in rlm_mschap
554 * Fix to only reject packets once
555 * Fix rlm_exec to work when wait=no
556 * Fix rlm_attr_filter to work in post-proxy (as intended)
557 * Fix rlm_sql to only try to load SQL drivers
558 * Fix to orrectly limit size of RADIUS packets
559 * Fix usage information to output to stdout when used with -h flag
560 * Fix configure to assume gethostbyname is BSD-Style on FreeBSD
562 FreeRADIUS 0.9.1 ; Date: 2003/09/04 14:56:34, urgency=low
564 * Replicate-To-Realm is deprecated, and hence no longer documented
565 * Document rlm_detail support for authorize and post-auth sections
566 * Improve slightly MySQL accounting record SQL query
567 * Opaquefied CHAP-Challenge
568 * Add attributes to Nomadix dictionary
569 * Fix rlm_exec's parsing of non-attribute return values
570 * Fix for a segfault while reading config files
571 * Fix for a segfault regarding hostname lengths
572 * Fix for a segfault while reading deprecated config files
573 * Fix compilation of radiusd.c when threads are disabled
574 * Recover from inability to relay
575 * Stop complaining in error log when a system call is interrupted.
576 * Don't print binary CHAP-Passwords into the logs
577 * Successfully detect GNU dbm >= 1.8.1's dbm compatibility library
578 * Fix rlm_unix to deal with requests without a username
579 * Fix "uninmplemented function" crash in postgresql driver on -HUP
580 * Revert INTERVAL types to BIGINT in postgresql example schema
581 * Fix radrelay to notice when it's out of IDs
582 * Fix radrelay to correctly skip bad attributes
583 * Fix radrelay to not leak IDs when discarding packets
584 * Fix configure to correctly identify systems without SYSV or GNU-style
585 gethostby{addr,name}_r.
587 FreeRADIUS 0.9.0 ; Date: 2003/07/04 21:01:29, urgency=low
589 * Many, many, bug fixes and feature enhancements.
590 * radrelay now updates packet 'id' on retransmissions.
591 * More checks for thread-safe functions.
592 * Fix CHAP related buffer overflow (ouch!), thanks to Masao NISHIKU.
593 * Issue warnings if deprecated configuration files are used.
594 * rlm_passwd can now add items to the reply, request, or config items.
595 * The rlm_digest, rlm_exec, and rlm_ippool modules are now marked
596 as 'stable', and included in the default build.
597 * Removed 'raduse'. No one has used it for years.
598 * Massive fixes for Debian packaging.
599 * radclient can now send "disconnect" packets, to NASes which
600 support it. The server, however, CANNOT send disconnect packets.
601 * Made Auth-Type, Acct-Type, etc. names consistent across
602 dictionary files and radiusd.conf. The old (inconsistent) names
603 are still allowed for backwards compatibility.
604 * Cleaned up problems with the rlm_sql module.
605 * Updates to the rlm_ldap module.
606 * rlm_mschap no longer reads SMB password files. See rlm_passwd,
608 * Changed default entry in the 'users' file to 'Auth-Type = System',
609 to allow EAP and Digest authentication to work automagically.
610 * Support for Cisco LEAP.
611 * Added many new dictionaries (Extreme, Wispr, ERX, Netscreen...)
612 * Removed support for ATTRIB_NMC. It is now handled (better)
613 in a different manner.
614 * Dictionaries have been moved from /etc/raddb to /usr/share/freeradius
615 * Many documentation updates
616 * Ignore whitespace-only lines in the 'users' file.
617 * Patch to fix 'rlm_realm' from returning the DEFAULT entry when
618 we are looking for the NULL entry and it doesn't exist. Bug
619 noted by Nathan Miller.
620 * Disable child process spawning if we don't have threads.
621 The code doesn't work, so it's better to force the server
622 to run in single-process mode.
623 * New rlm_exec module, which allows a more generic way of
624 executing external programs.
625 * Preliminary large file support in 'configure' and in the server,
626 to support 2G+ detail files.
627 * Install documentation into /usr/local/share/doc/freeradius
628 * New/updated dictionaries for RedCreek, Bintec, Alcatel,
629 ITK, Telebit, and Cabletron.
630 * Updates to allow building on MAC OSX.
631 * Add support for Acct-Type,Session-Type and PostAuth-Type
632 * Removed builddbm. It hasn't been used for ages.
633 * Added new post_proxy section, based on patch from Chris Brotsos.
634 * rlm_counter shouldn't reset the counters on instantiation,
635 if the reset is set to 'never'.
636 * Significant updates to the rlm_python and rlm_perl modules
637 * Fix the rlm_pap module to handle password lengths properly.
638 * Do SQL 'close' on bad sockets, to prevent descriptor leaks
639 * Case insensitivity option for rlm_radutmp
640 * New pseudo-round-robin load balancing for realms.
641 * Suppress empty SQL queries.
642 * Include strong PRNG
643 * Create 'snmp' configuration directive, so that we can disable
644 SNMP at run time, even if it's built into the server.
645 * Refresh realm as 'active' when we see a response from it,
646 Based on a patch by Angelos Karageorgiou.
647 * Don't core dump if Status-Server is received, but it's disabled.
648 * Support more variants of character fields in Oracle.
649 Patch from Stocker Gernot.
650 * Better parsing of dictionary files.
651 * Alteon web switch dictionary, from Thomas Linden
653 FreeRADIUS 0.8 ; Date: 2002/11/18 15:37:24, urgency=low
655 * Added Oracle-specific queries.
656 * Updated SQL queries to match schema.
657 * PostGreSQL reconnect patch.
658 * Added documentation on how to build on MAC OSX.
659 * Allowed SQL module to ignore unknown Acct-Status-Type values.
660 * Updated PostGreSQL queries and schema.
661 * Updated the log rotation configuration files.
662 * Colubris and updated Nomadix dictionaries, from Marko Myllynen.
663 * Normalized error messages from the SQL modules, so that they're
665 * Added Suse specific directory and configuration files, from
667 * SQL fail-over patch, so that the module returns FAIL if
668 the back-end database is down. Based on a patch from
670 * Cleaned up the internal handling of the configuration
671 information, in preparation for better handling SIGHUP.
672 * Updated rlm_krb5 configuration to better find it's libraries
674 * radclient now complains if it receives a reply from a machine
675 other than the one to which it sent the request.
676 * Updated Postgresql SQL queries to get the operator, too.
677 * Added Juniper dictionary.
678 * Added Cisco VPN3000, VPN5000, and BBSM dictionaries.
679 * New platform-neutral 'rc.radiusd'
680 * Configuration files with private information get chmod'd
681 0600 after installation.
682 * Preliminary support for clean shutdowns when a SIGTERM is
684 * SNMP timeouts for checkrad, so there will be fewer situations
685 where it hangs for 30 seconds...
686 * Added code to clean up modules and memory when asked to exit
688 * Removed all need for the old-style 'naslist' and 'client' files,
689 and noted that they are deprecated.
690 * Added support for Status-Server packets, stolen shamelessly
691 from Cistron RADIUSD. This is despite the RFC's saying such
693 * Bug fixes to rlm_dbm.
694 * Updates for checkrad, max40xx routine, from Aleksandr Kuzminsky.
695 * Disable caching of passwords for the Unix module. It was
696 causing too much confusion.
697 * Fix a memory leak when proxying Authentication-Request's
698 * Attributes which are not found in the dictionary are now of
699 type 'octets', instead of 'string'.
700 * Support for "round-robin" load balancing, when proxying requests
701 to multiple servers for one realm.
702 * Minor changes for better HPUX support.
703 * Updated the documentation and README's
704 * Made FreeTDS build ONLY after hand-editing, as the FreeTDS
705 libraries are in a state of flux, due to active development.
706 * Fixes to help build the server on MAC OSX
707 * Cisco VPN 3000 dictionary, as posted to the list by Chris Deramus.
708 * Fix EAP problems with retransmission, from Rainer Weikusat.
709 * Updates to the Oracle module, from Andrea Gabellini.
710 * In xlat, Unix timestamps are unsigned ints.
711 * Security fixes for the Kerberos Module.
712 * New 'post-auth' section, to do additional processing of
713 requests after they've been authenticated.
714 * doc/aaa.txt describes how the server works.
715 * More uniform encoding/decoding of passwords, so that they will
716 be seen as clear-text where possible.
717 * radwho and radzap now read 'radiusd.conf' to discover where the
718 radutmp files are located. Patch from Andrea Gabellini.
719 * Preliminary 'expression' module, to allow you to do cool things
720 like: Session-Timeout = `%{expr:3600 - %{sql:SELECT ...}}`
721 * Added ability to do xlat on check items, and reply items,
722 so that the value of the reply attributes can be dynamically
724 * Added MIBs, taken from the RFC's. This makes SNMP queries to
725 the server a little easier to set up.
726 * Don't SEGV when we receive a packet which is larger than the
727 size claimed in the RADIUS portion. Patch from Vaughn Skinner.
728 * SNMP patches from Harrie Hazewinkel.
729 * Added Altiga dictionary, from Calum <calum.aug02@umtstrial.co.uk>
730 * New Rewrite-Rule for rlm_attr_rewrite, to selectively choose
731 which rewrite rule is performed, and when.
732 * Minor bug fixes for radrelay.
733 * Bug fixes in SQL and sub-modules.
734 * Major updates to dialup_admin.
735 * Fixed handling of tagged string attributes, so that the server
736 doesn't go off into never-never land.
737 * Cleaned up experimental rlm_smb, so that it builds on more
739 * Don't over-write request->reply->vps with the Reply-Message,
740 when doing authentication rejects with Exec-Program-Wait.
741 * Added 'instantiate' section, so that modules like 'expr',
742 with only an 'xlat' function can be registered.
743 * Allow '{' and '}' in xlat'd strings.
744 * C++ compatibility patch from Andrey Kotrekhov, for libradius.
745 * Automatically decrypt/encrypt User-Password, so that debugging
746 mode will print out the text password, and not the random
747 garbage it previously showed.
748 * Cleaned up header files and function prototypes for the SQL
751 FreeRADIUS 0.7 ; Date: 2002/07/26 18:01:50 , urgency=high
753 * Allow attributes of type 'date' to be sent in outgoing packets.
754 Bug found by Loh John Wu <ljwu@sandvine.com>
755 * Add 'Realm' attribute, even if it's a LOCAL realm.
756 Bug noted by Chris Brotsos.
757 * Added experimental SMB authentication module, which uses
758 PAP passwords to authenticate against an NT-Domain.
759 NT/LM-passwords are not currently supported.
760 * More documentation for rlm_passwd, rlm_mschap, and rlm_digest.
761 * 'configure' changes to better find sem_init and friends.
762 * Allow the use of previously installed libtool, and libltdl.
763 This appears to help a lot on FreeBSD.
764 * Fixes to work on non-threaded builds.
765 Patch from Rainer Weikusat.
766 * SQL now re-connects to the server, if the connection is lost.
767 Currently only MySQL is fixed, but other patches will follow.
768 Patch from Todd T. Fries.
769 * Added experimental use of dynamicly translated variables,
770 CallBack-Number = `%{request:Calling-Station-Id}`
771 sets the value of the CallBack-Number attribute to the value of
772 the Calling-Station-Id in the original request.
773 * Cute hack: Allow regex matching on IP addresses, by placing
774 the string representation of the IP address (1.2.3.4) into
775 the internal data structure. This allows things like
776 NAS-IP-Address =~ "^192\.168", which may be useful.
777 * Add documentation for experimental rlm_dbm module.
778 * Added experimental Perl module.
779 * Added the relevant IETF RFC's (standards documents) to 'doc/rfc',
780 along with some simple perl scripts to convert them to cross-
782 * Updated the experimental Python module.
783 * Added Cisco SSG VSA's
784 * When rejecting authentication due to external Exec-Program, do
785 NOT free the reply pairs, as the server core will take care of
786 doing that. Bug noted by Thomas Jalsovsky
787 * New experimental module: rlm_cram
788 Supports APOP, CRAM-MD5, CRAM-MD4, CRAM-SHA1 with it's own
789 VSA's. This module may be used for SMTP/POP3/IMAP4 server
791 * Make Exec-Program and Exec-Program-Wait work in debugging mode.
792 * Finalize the radrelay additions, based on Cistron RADIUS
793 Patches from Simon <lists@routemeister.net>
794 * Fix issues with linking, by making libradius shared.
795 * Fix issues with MD4, MD5, SHA1, and use of OpenSSL
796 * Update rlm_x99_token module to compile.
798 FreeRADIUS 0.6.0 ; Date: Date: 2002/07/03 14:16:33 , urgency=high
800 * Many bug fixes. For explicit details, see:
801 http://www.freeradius.org/cvs-log/
802 * Change to the user/group specified in the config file in all
803 modes ( debug and daemon ).
804 * SQL sockets are rotated so that all are used, to prevent the
805 SQL server timing out and closing unused sockets. Patch from
807 * Sybase driver from mattias@nogui.se.
808 * Modules are now versioned.
809 * Delete garbage Proxy-Reply attributes sent by the home server
810 before performing our own reply.
811 * Fix race conditions when duplicate packets resulted in a request
812 being processed by two threads, at the same time.
813 * Add '-d' command-line option to radwho
814 Bug noted by Matthew Schumacher
815 * Corrected issue that when a home server never replied to a
816 proxied request, the server may die.
817 * In SQL, look in radcheck, if not found there, try radgroupcheck.
818 Patch from Thomas Jalsovsky.
819 * Set sql user name for ALIVE accounting packets, too.
820 Patch from Simon <lists@routemeister.net>.
821 * Use port-specific checking for realms, now that we can proxy to
822 different auth/acct servers for the same realms.
823 Patch from Eddie Stassen.
824 * Minor updates to encrypted tunnel passwords.
825 * Default 'run_dir' is now /var/run/radiusd, not var/run.
826 /var/run is writeable only by root, and radiusd may be run suid.
827 * Modules are now versioned, so that upgrading the server
828 ensures that the new modules are installed.
829 * Fix sql code, so that magic SQL characters don't get the
831 * Remove references to "UNKNOWN-NAS" in log messages.
832 * Properly handle fork() and obtaining child processes exit
833 status when using threads. (pthread is broken w.r.t. signals)
834 * Correct code which would send erroneous reject, when the reject
835 was delayed, and a new request came in.
836 * Fix race condition where proxied requests would sometimes never
837 be re-sent. Bug noted by Eddie Stassen.
838 * Corrected LDAP3 schema
839 * Implemented Digest authentication, as per IETF document
840 draft-sterman-aaa-sip-00.txt, to perform authentication against
842 * If no password or group files have been specified in the config,
843 use the standard system calls to find them, rather than giving
844 up. Patch from Steve Langasek.
845 * Return Proxy-State attributes in a delated Access-Reject
846 * Corrected 'session zap' logic, when an old and unused session
847 is deleted from the databases. Accounting packets with garbage
848 Client-IP-Address attributes should no longer be a problem.
849 * Bug fixed in LDAP attribute map, for MS-CHAP related attributes.
850 * Fixes to the EAP module to work better with XP.
851 * Support for MS-SQL, using the FreeTDS library,
853 * New operators =* and !*. See 'man 5 users' for details.
854 * Added translation for %{config:section.subsection.item}, to
855 allow run-time translation of internal configuration parameters.
856 * New rlm_sqlcounter module, to keep counters based on SQL data.
857 * Fix rlm_realm, to allow seperate proxying of accounting and
858 authentication requests.
859 * Bug fixes in PostgreSQL back-end, from Andrew Kukhta.
860 * Increase internal buffers, to allow large SQL query strings.
861 * Added debug level 3 (-xxx), where debug messages have time stamps.
862 * Fix 'radwho' to use the correct radutmp file, as found by
863 'configure' (but radwho still doesn't read radiusd.conf)
864 * Fix bugs in tunnel (tagged attribute) code, which would prevent
865 tagged attributes from being generated correctly in a packet.
866 * Build only 'stable' modules by default. Experimental modules
867 require --with-experimental-modules to be passed to 'configure'
868 * New module rlm_ippool, to do server-side IP pooling.
869 * Fix rlm_eap module for portability, to work on non-x86 platforms.
870 * Re-connect to the LDAP server if the connection idles out
871 * Increased the visibility of the warning messages when doing
873 * Fixed EAP module to use 16-bit integers, so that it will
874 work on big-endian architectures.
876 FreeRADIUS 0.5.0 ; Date: 2002/03/14 22:18:22, urgency=medium
878 * Many bug fixes. For explicit details, see:
879 http://www.freeradius.org/cvs-log/
880 * Added Foundry dictionary, from Thomas Keitel
881 * Fix a logic bug in the 'walk over request list' code, which
882 would sometimes result in a request being deleted while it
883 was still being processed. Found by Rainer Clasen
884 * New 'tuning' guide, for optimizing the server's speed.
885 * The default ports are now 1812/1813, which is the standard.
886 * Fix a bug which would hang the server when many SQL connections
887 were open. Found by Cvetan Ivanov <zezo@spnet.net>
888 * Updated MySQL schema, with sanity checks, based on a schema from
889 Thomas Huehn <huehn@eozaen.net>
890 * Added 'Aptis' (Nortel CVX) dictionary.
891 * Added Ipv6 attributes (as 'octets' type for now)
892 * 'xlat' capability for SQL, so other modules can do SQL queries.
893 * We don't need a shared secret for LOCAL realms.
894 * Added better description of internal variables.
895 * Configurable fail-over to DEFAULT realm. Sometimes we don't
896 want to use the DEFAULT realm, if all configured realms are
897 marked dead. From Rainer Clasen.
898 * new configuration items 'max_attributes' and 'reject_delay'
899 If the packet contains too many attributes, it can be rejected.
900 We can also delay sending an Access-Reject, which slows down
902 * Updates to redhat scripts and spec file, from Marko Myllynen.
903 * Python module (EXPERIMENTAL) from migs paraz <mparaz@yahoo.com>
904 * Add ability to find *best* match when comparing attributes.
905 If there is more than one attribute in a request and the first
906 one doesn't match, go check the second one, instead of failing.
907 * unixODBC support for SQL, from Dmitri Ageev <d_ageev@ortcc.ru>
908 * Use thread-safe versions of library calls. This work is still
910 * New rlm_passwd module, to allow general parsing of passwd-style
912 * Preliminary EAP-TLS support.
913 * Updated LDAPv3 schema
914 * Correct checks for Odbc, and fix bugs in the module.
915 Andreas Kainz <aka@maxxio.at>
916 * MAN page fixes and updates
917 * Added PHP web interface 'dialup_admin'
918 * Password = "UNIX" or "PAM" backwards compatibility removed.
919 * Use the operators in the SQL schema and queries, and bug
920 fixes in the SQL module.
921 Randy Moore <ramoore@axion-it.net>
922 * fgetpwent() compatibility, for systems without it,
923 from Daniel Carroll <freeradius@defiant.mesastate.edu>
924 * Added PAP authentication module, as a step to removing
925 most authentication handlers in other modules.
926 * Send a Access-Reject after max_request_time
927 * Multiple fixes in the LDAP module.
928 * Quintum dictionary by Jeremy McNamara <jj@indie.org>
929 * Preliminary EAP Module with MD5 support
930 Contributed by Raghu <raghud@hereuare.com>
931 * Better sanity checking for bad VSA's when receiving a packet
932 * new 'xlat register' so that attribute values may be pulled
933 out of configurable databases at run-time.
934 e.g. %{ldap:ldap:///dc=company,dc=com?uid?sub?uid=%u}
935 * Minor fixes to debian package rules
936 * Attribute 'Password' deprecated in favor of 'User-Password'.
937 * MS-CHAP and MS-CHAPv2 MPPE support added.
938 Contributed by Takahiro Wagatsuma <waga@sic.shibaura-it.ac.jp>.
939 * X9.9 token enhancements (several).
941 -- Alan DeKok <aland@ox.org>
943 FreeRADIUS 0.4.0 ; urgency=low
945 * Allow the MS-CHAP module to work, and to read /etc/smbpass
946 3APA3A <3APA3A@SECURITY.NNOV.RU>
947 * Remove the server requirement that one of User-Password
948 or CHAP-Password exist when doing authentication. These
949 checks should be handled by the modules. This change
950 also prepares us for EAP.
951 Patch from Raghu <raghud@hereuare.com>
952 * Make NAS-Port-ID in radwho, raduse, etc. unsigned,
954 Patch from John Morrissey <jwm@horde.net>
955 * Allow \t and \n inside of configuration strings.
956 Frank Cusack <fcusack@fcusack.com>
957 * X9.9 Challenge-Response token card support.
958 For now, only CRYPTOCard tokens are supported.
959 Frank Cusack <fcusack@fcusack.com>
960 * Fix core dump on Solaris in radwho.c
961 Patch from Eddie Stassen <eddies@saix.net>
962 * Fix leak / core dump in Oracle module.
963 * Fix memory leak in rlm_counter
964 Kostas Kalevras <kkalev@noc.ntua.gr>
965 * "LOCAL" realms do not need to have an entry in the 'clients'
966 file. Philippe Levan <levan@epix.net>
968 -- Alan DeKok <aland@ox.org>
970 FreeRADIUS 0.3.0 ; urgency=low
972 * Added ability to send debug messages to the log file, when
973 running in daemon mode.
974 * Miscellaneous fixes to get Debian packaging working.
975 * When trapping a signal, don't SIGKILL children on a SIGTERM,
976 SIGTERM them, instead. This allows Exec-Program scripts to
977 catch the signal, and finish processing, instead of dying.
978 Bug noted by Michael Chernyakhovsky <magmike@mail.ru>
979 * Increased limit on length of user name read from /etc/passwd,
980 to match the maximum allowed by RADIUS.
981 Bug noted by "Gonzalez B., Fernando" <fgonzalez@manquehue.cl>
982 * Configurable fail-over when proxying packets. If the
983 home server doesn't respond to a repeated proxied request,
984 it's marked as 'dead', and the next one in the list is used.
985 Patch by Eddie Stassen <eddies@saix.net> and <spirn@21cn.com>
986 * Pass Access-Challenge attributes through the server, in
988 Raghu <raghud@hereuare.com>
989 * More fixes for RFC compliance on the Message-Authenticator
990 Raghu <raghud@hereuare.com>
991 * Merged OSFC2/OSFSIA authentication patches from Cistron.
992 (Bug # 104) The patches are not well tested, however.
993 * IBM DB2 UDB V7.1 SQL driver, contributed by
994 Joerg Wendland <wendland@scan-plus.de>
995 * Fix the IP + Port address assignment.
996 Bug found by "John Padula" <john_padula@aviancommunications.com>
997 * Patch to avoid smashing the contents of Ascend binary filters.
998 Michael Chernyakhovsky <magmike@mail.ru>
999 * Create and Validate Message-Authenticator attribute, in
1000 preparation for EAP.
1001 * Initialize variables properly in rlm_attr_filter.
1002 Patch from Andriy I Pilipenko <bamby@marka.net.ua>
1003 * Renamed RedHat init script from 'radiusd.init' to 'radiusd'.
1004 This allows it to work properly with the RedHat rc system.
1005 Patch from Christian Vogel <chris@amor.iksys.de>
1006 * Fix the configure script checks for PostgreSQL, so that
1007 they use the 'test' command properly.
1008 Bug found by Robert Haskins <rhaskins@ziplink.net>
1009 * Change instances of 'assert' to 'rad_assert', so that it
1010 can log the error to the standard radius log files.
1011 Patch from Vesselin Atanasov <vesselin@bgnet.bg>
1012 * Patch to prevent segv when freeing results, from
1013 Tomas Heredia <tomas@intermediasp.com>
1014 * Added support for Exec-Program to acct. Bug found by
1016 * Corrected rlm_files so that raddb/acct_users works
1017 * When doing synchronous proxying, update proxy next try
1018 entries, so that the server doesn't eat CPU time.
1019 Raghu <raghud@hereuare.com>
1020 * Add primitive dictionary.nomadix <CBoyd@apogeetelecom.com>
1021 * Log messages to console, if the logger hasn't been
1022 initialized. <vesselin@bgnet.bg>
1023 * Log invalid user for proxy rejects, too. <help@visp.net>
1024 * Fixed Expiration attribute handling.
1025 * Added code to handle Ascend-Send-Secret and Ascend-Receive-Secret
1026 * Removed non thread-pool code. If we have threads, we now force
1027 the use of thread pools.
1028 * Update version number
1029 * correct bug where proxied accounting packets would never have a
1030 reply sent back to the NAS, or the reply would be sent twice.
1032 -- Alan DeKok <aland@ox.org>
1034 FreeRADIUS Alpha 0.2.0, July 30, 2001.
1036 * call openlog() again when using PAM, to get the correct log
1038 * Update child thread code, to minimize race conditions.
1039 * Make thread pools the default. Using plain child threads is NOT
1041 * Ignore SIGPIPE to get ride of crashes when using ldap.
1042 * Update proxying code to work better.
1043 * Platform independent pthread_cancel()ling
1044 * Fix 'unresponsive child pid' erroneous warning messages.
1045 * Many changes to get various SQL modules working.
1046 Note that there may still be some issues with Oracle.
1047 * Added configure options 'with-rlm-FOO-include/lib-dir', so that
1048 lower-level rlm_FOO modules can be configured via the top-level
1049 configuration file. This isn't completely done yet.
1050 * Fix check for shared library using libtool info, instead of
1051 assuming extension being ".so".
1052 * Fixes for HPUX. We probably need more.
1053 * Many additional bug fixes and changes.
projects / freeradius.git / blob