freeradius.git
10 years agoUpdate block fix
Sam Hartman [Fri, 20 Sep 2013 18:48:31 +0000 (14:48 -0400)]
Update block fix

10 years agoMerge branch 'tr-integ' into debian
Sam Hartman [Fri, 20 Sep 2013 18:47:23 +0000 (14:47 -0400)]
Merge branch 'tr-integ' into debian

10 years agoUse the default request if there's no "." in the reference.
Alan T. DeKok [Wed, 4 Sep 2013 14:41:52 +0000 (10:41 -0400)]
Use the default request if there's no "." in the reference.

update outer.reply {
User-Name := foo
}

ends up parsing "User-Name" with a default list of "outer",
BUT because "User-Name" has no ".", the old code would return
a hard-coded CURRENT
(cherry picked from commit 6c11dbdb704f9a6bc5cb2701b4ac974b162a260e)

10 years agodepend on openssl and libpcre
Sam Hartman [Thu, 15 Aug 2013 20:47:49 +0000 (16:47 -0400)]
depend on openssl and libpcre

10 years agoDon't install certs
Sam Hartman [Thu, 15 Aug 2013 18:18:36 +0000 (14:18 -0400)]
Don't install certs

10 years agoFix typo
Alan T. DeKok [Thu, 11 Jul 2013 12:46:25 +0000 (14:46 +0200)]
Fix typo
(cherry picked from commit f826c7b971fece4fb2660ca1d6d63cc0dcef2f42)

10 years agoNew upstream version
Sam Hartman [Tue, 13 Aug 2013 19:45:20 +0000 (15:45 -0400)]
New upstream version

10 years agoInclude moonshot-trust-router
Sam Hartman [Thu, 18 Apr 2013 18:33:47 +0000 (14:33 -0400)]
Include moonshot-trust-router

10 years agonote breaks freeradius <3
Sam Hartman [Thu, 18 Apr 2013 16:03:44 +0000 (12:03 -0400)]
note breaks freeradius <3

10 years agodebian: include dirs in freeradius package
Sam Hartman [Fri, 8 Mar 2013 21:25:45 +0000 (16:25 -0500)]
debian: include dirs in freeradius package

10 years agoDebian: create /var/log/freeradius
Sam Hartman [Fri, 8 Mar 2013 18:46:13 +0000 (13:46 -0500)]
Debian: create /var/log/freeradius

10 years agodebian: require talloc as build dependency
Sam Hartman [Fri, 8 Mar 2013 16:14:23 +0000 (11:14 -0500)]
debian: require talloc as build dependency

10 years agomoonshot version
Sam Hartman [Fri, 8 Mar 2013 15:22:12 +0000 (10:22 -0500)]
moonshot version

10 years ago3.0(native) for now
Sam Hartman [Fri, 8 Mar 2013 15:21:59 +0000 (10:21 -0500)]
3.0(native) for now

10 years agodebian: depend on modern freeradius-common
Sam Hartman [Fri, 8 Mar 2013 15:20:42 +0000 (10:20 -0500)]
debian: depend on modern freeradius-common

10 years agodebian: remove makefiles that don't exist from install targets
Sam Hartman [Fri, 8 Mar 2013 15:16:34 +0000 (10:16 -0500)]
debian: remove makefiles that don't exist from install targets

10 years agoeap channel binding: update for talloc changes
Sam Hartman [Thu, 27 Jun 2013 13:44:10 +0000 (09:44 -0400)]
eap channel binding: update  for talloc changes

* paircreate gains context
* pairmake gains context
* pairmoveto ->pairfilter

10 years agotls: update psk xlat call
Sam Hartman [Thu, 27 Jun 2013 13:42:22 +0000 (09:42 -0400)]
tls: update psk xlat call

Ilclude talloc context in xlat and setup of psk-user-identity in request.

10 years agofix bugs in psk_server_callback
Sam Hartman [Thu, 11 Apr 2013 19:25:38 +0000 (15:25 -0400)]
fix bugs in psk_server_callback

10 years agoSample trust_router config
Sam Hartman [Thu, 11 Apr 2013 09:25:14 +0000 (05:25 -0400)]
Sample trust_router config

10 years agoAdd trust router library to rlm_realm
Margaret Wasserman [Wed, 10 Apr 2013 22:56:43 +0000 (18:56 -0400)]
Add trust router library to rlm_realm

10 years agoRemove hidden structs
Sam Hartman [Wed, 10 Apr 2013 21:49:04 +0000 (17:49 -0400)]
Remove hidden structs

10 years agoTrust router response handler
Sam Hartman [Wed, 10 Apr 2013 20:27:15 +0000 (16:27 -0400)]
Trust router response handler

10 years agoexpose tls_init_ctx
Sam Hartman [Wed, 10 Apr 2013 20:26:43 +0000 (16:26 -0400)]
expose tls_init_ctx

10 years agoInitial tr integration code, compiles but not complete.
Margaret Wasserman [Wed, 10 Apr 2013 20:17:42 +0000 (16:17 -0400)]
Initial tr integration code, compiles but not complete.

10 years agoFix typo
Sam Hartman [Fri, 5 Apr 2013 17:45:41 +0000 (13:45 -0400)]
Fix typo

10 years agohex for nulls and lulz
Sam Hartman [Thu, 4 Apr 2013 09:42:58 +0000 (05:42 -0400)]
hex for nulls and lulz

10 years agotls: permit psks to be configured for clients
Sam Hartman [Wed, 3 Apr 2013 19:14:23 +0000 (15:14 -0400)]
tls: permit psks to be configured for clients

10 years agofixups
Sam Hartman [Tue, 2 Apr 2013 18:11:33 +0000 (18:11 +0000)]
fixups

10 years agopsk: enable server callback always
Sam Hartman [Wed, 3 Apr 2013 18:23:37 +0000 (14:23 -0400)]
psk: enable server callback always

10 years agotls: server stuff
Sam Hartman [Tue, 2 Apr 2013 16:59:01 +0000 (12:59 -0400)]
tls: server stuff

10 years agottls: return channel bindings on half round trip success
Sam Hartman [Mon, 25 Mar 2013 23:41:44 +0000 (19:41 -0400)]
ttls: return channel bindings on half round trip success

If we get a channel binding request at the same time we'd like to
return an access accept, return a challenge instead.

10 years agochbind: update length calculation
Sam Hartman [Mon, 25 Mar 2013 13:49:23 +0000 (09:49 -0400)]
chbind: update length calculation

10 years agochbind: logic error oops
Sam Hartman [Sun, 24 Mar 2013 20:20:03 +0000 (16:20 -0400)]
chbind: logic error oops

10 years agoupdate dictionaries with ABFAB attributes
Sam Hartman [Wed, 20 Mar 2013 01:39:31 +0000 (21:39 -0400)]
update dictionaries with ABFAB attributes

10 years agoupdate usage of pairmoveto
Sam Hartman [Wed, 6 Mar 2013 14:00:13 +0000 (09:00 -0500)]
update usage of pairmoveto

10 years agoUpdate rlm_eap channel binding for new apis
Sam Hartman [Wed, 6 Mar 2013 01:43:38 +0000 (20:43 -0500)]
Update rlm_eap channel binding for new apis

10 years agottls chbind: update VSA to use
Sam Hartman [Sun, 5 Feb 2012 22:40:56 +0000 (17:40 -0500)]
ttls chbind: update VSA to use

Unfortunately 134 was used by microsoft groups.

10 years agomake eap channel bindings functional (at least with with ttls-mschap)
Kevin [Sun, 5 Feb 2012 20:09:17 +0000 (15:09 -0500)]
make eap channel bindings functional (at least with with ttls-mschap)

10 years agobugfix for loop
Kevin [Sat, 4 Feb 2012 23:48:30 +0000 (18:48 -0500)]
bugfix for loop

10 years agoeap channel binding fixes
Kevin [Sat, 4 Feb 2012 22:07:23 +0000 (17:07 -0500)]
eap channel binding fixes

10 years agorlm_eap: add eap_chbind.c to build
Sam Hartman [Sat, 4 Feb 2012 02:20:09 +0000 (21:20 -0500)]
rlm_eap: add eap_chbind.c to build

10 years agorlm_eap: fix channel binding errors
Sam Hartman [Sat, 4 Feb 2012 01:30:33 +0000 (20:30 -0500)]
rlm_eap: fix channel binding errors

Fix logic and other erros in initial channel binding implementation

10 years agoInitial code for EAP Channel Binding support.
Margaret Wasserman [Fri, 3 Feb 2012 21:59:23 +0000 (16:59 -0500)]
Initial code for EAP Channel Binding support.

10 years agochbind: sample virtual server
Sam Hartman [Fri, 3 Feb 2012 19:09:23 +0000 (14:09 -0500)]
chbind: sample virtual server

this is a sample channel binding virtual server for
draft-ietf-abfab-gss-eap.  It's not complete but is intended to be
sufficient to start testing.

10 years agoEap channel binding support code
Kevin [Fri, 3 Feb 2012 13:15:10 +0000 (08:15 -0500)]
Eap channel binding support code

10 years agoAdded attribute and values for EAP channel binding response codes.
Margaret Wasserman [Fri, 3 Feb 2012 02:45:31 +0000 (21:45 -0500)]
Added attribute and values for EAP channel binding response codes.

10 years agoSkeleton of trust router integration
Sam Hartman [Fri, 4 Jan 2013 02:07:48 +0000 (21:07 -0500)]
Skeleton of trust router integration

Functions to convert a TR response into freeradius structures and add
a realm.

10 years agorealms_realm_add
Sam Hartman [Thu, 29 Nov 2012 19:30:07 +0000 (14:30 -0500)]
realms_realm_add

Expose an interface for adding a realm.

10 years agorealms_pool_add
Sam Hartman [Thu, 29 Nov 2012 16:57:34 +0000 (11:57 -0500)]
realms_pool_add

Implement function to add a pool exposed beyond realms.c

10 years agoExpose home_server addition
Sam Hartman [Wed, 28 Nov 2012 21:36:23 +0000 (16:36 -0500)]
Expose home_server addition

Split the code to add home servers to the trees and validate them from
config section parsing code.  The split code does not handle locking
yet.

10 years agoInstalled links depend on the installation dir. Closes #360
Alan T. DeKok [Thu, 11 Jul 2013 12:05:44 +0000 (14:05 +0200)]
Installed links depend on the installation dir.  Closes #360

Through the simple expedient of having the rules for the links
active ONLY when the directory doesn't exist.  If the directory
exists, the rules aren't active, and no links are created

10 years agoDon't echo if we do nothing
Alan T. DeKok [Thu, 11 Jul 2013 12:05:25 +0000 (14:05 +0200)]
Don't echo if we do nothing

10 years agoRe-enable [n] [#] and [*]. Closes #354.
Alan T. DeKok [Thu, 11 Jul 2013 07:37:30 +0000 (09:37 +0200)]
Re-enable [n] [#] and [*].  Closes #354.

This code was deleted during the change to cursors.

10 years agoBuffer may be NULL. Closes #358
Alan T. DeKok [Thu, 11 Jul 2013 07:02:29 +0000 (09:02 +0200)]
Buffer may be NULL.  Closes #358

10 years agoRestructure map2request and dependencies to return a status code instead of VALUE_PAIRs
Arran Cudbard-Bell [Wed, 10 Jul 2013 22:44:18 +0000 (23:44 +0100)]
Restructure map2request and dependencies to return a status code instead of VALUE_PAIRs

10 years agoRemove invalid assert, this could fail for VALUE_PAIR producing execs
Arran Cudbard-Bell [Wed, 10 Jul 2013 18:16:08 +0000 (19:16 +0100)]
Remove invalid assert, this could fail for VALUE_PAIR producing execs

10 years agoSet map operator on copied filtered attributes
Arran Cudbard-Bell [Wed, 10 Jul 2013 18:14:54 +0000 (19:14 +0100)]
Set map operator on copied filtered attributes

10 years ago-lpcreposix must be listed in linker arguments before any other libraries to avoid...
Arran Cudbard-Bell [Wed, 10 Jul 2013 18:02:51 +0000 (19:02 +0100)]
-lpcreposix must be listed in linker arguments before any other libraries to avoid picking up posix regex symbols. Fixes #357

On my system OSX 10.8.4 this resulted in a SEGV in regncomp.

10 years agopcreposix manual says both -lpcre and -lpcreposix need to be passed
Arran Cudbard-Bell [Wed, 10 Jul 2013 17:43:27 +0000 (18:43 +0100)]
pcreposix manual says both -lpcre and -lpcreposix need to be passed

10 years agoFix messed up macro
Arran Cudbard-Bell [Wed, 10 Jul 2013 16:55:32 +0000 (17:55 +0100)]
Fix messed up macro

10 years agoAlways set command to NULL after calling ct_cancel
Arran Cudbard-Bell [Wed, 10 Jul 2013 16:50:19 +0000 (17:50 +0100)]
Always set command to NULL after calling ct_cancel

10 years agoIf we know the destination is a list, copy all instances of the source attribute
Arran Cudbard-Bell [Wed, 10 Jul 2013 14:38:11 +0000 (15:38 +0100)]
If we know the destination is a list, copy all instances of the source attribute

10 years agoCurrently not finding an attribute causes an abort of the update section
Arran Cudbard-Bell [Wed, 10 Jul 2013 14:33:07 +0000 (15:33 +0100)]
Currently not finding an attribute causes an abort of the update section

10 years agoFix exec support in update sections. Fixes #355
Arran Cudbard-Bell [Wed, 10 Jul 2013 14:02:03 +0000 (15:02 +0100)]
Fix exec support in update sections. Fixes #355

10 years agoFixes #356
Arran Cudbard-Bell [Wed, 10 Jul 2013 13:59:04 +0000 (14:59 +0100)]
Fixes #356

10 years agoMissed colon
Arran Cudbard-Bell [Wed, 10 Jul 2013 13:57:32 +0000 (14:57 +0100)]
Missed colon

10 years agoEverywhere else just uses <core>
Arran Cudbard-Bell [Wed, 10 Jul 2013 13:57:00 +0000 (14:57 +0100)]
Everywhere else just uses <core>

10 years agoDisable recurssion for nested attributes until the server actually supports them
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:44:06 +0000 (11:44 +0100)]
Disable recurssion for nested attributes until the server actually supports them

10 years agoShouldn't allocate in the NULL context
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:39:42 +0000 (11:39 +0100)]
Shouldn't allocate in the NULL context

10 years agoDie bubble die (radsniff)
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:27:29 +0000 (11:27 +0100)]
Die bubble die (radsniff)

10 years agoFix debug output alignment in radsniff
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:24:59 +0000 (11:24 +0100)]
Fix debug output alignment in radsniff

10 years agoFix double quoted VALUE_PAIR definitions
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:12:30 +0000 (11:12 +0100)]
Fix double quoted VALUE_PAIR definitions

10 years agoRevert "Crappy hack for dependency issues"
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:03:27 +0000 (11:03 +0100)]
Revert "Crappy hack for dependency issues"

This reverts commit a43e5129080b2cb6ae4fb55d369b22253548e782.

10 years agoCopy paste error
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:02:02 +0000 (11:02 +0100)]
Copy paste error

10 years agoFix PCRE checks, and make code build cleanly without regex
Arran Cudbard-Bell [Tue, 9 Jul 2013 23:00:09 +0000 (00:00 +0100)]
Fix PCRE checks, and make code build cleanly without regex

10 years agoWe use extended regexps when available, this is no longer configurable
Arran Cudbard-Bell [Tue, 9 Jul 2013 21:55:25 +0000 (22:55 +0100)]
We use extended regexps when available, this is no longer configurable

10 years agoregcomp whitespace changes
Arran Cudbard-Bell [Tue, 9 Jul 2013 21:49:46 +0000 (22:49 +0100)]
regcomp whitespace changes

10 years agoTypo
Arran Cudbard-Bell [Tue, 9 Jul 2013 21:08:32 +0000 (22:08 +0100)]
Typo

10 years agoFix all the update list debug output
Arran Cudbard-Bell [Tue, 9 Jul 2013 21:04:43 +0000 (22:04 +0100)]
Fix all the update list debug output

Make list output more detailed

Consistently use single quotes for literal strings, only use double quotes around things being expanded

Replace delimitst with quote char, to allow caller to pass any quoting char

10 years agoSimplify paircopy functions and fix them so they can't return half copied lists
Arran Cudbard-Bell [Tue, 9 Jul 2013 17:48:15 +0000 (18:48 +0100)]
Simplify paircopy functions and fix them so they can't return half copied lists

10 years agoSprinkle vp->type = VT_DATA in more places, this will be needed later
Arran Cudbard-Bell [Tue, 9 Jul 2013 17:41:17 +0000 (18:41 +0100)]
Sprinkle vp->type = VT_DATA in more places, this will be needed later

10 years agoFix support for list copy
Arran Cudbard-Bell [Tue, 9 Jul 2013 17:39:38 +0000 (18:39 +0100)]
Fix support for list copy

Fix attribute to list copy

Remove not yet valid assertion

Don't allocate VALUE_PAIRs just to free them later

Fixes #353

10 years agoAdd functions for validating a list of VALUE_PAIRs against another list, using paircmp
Arran Cudbard-Bell [Tue, 9 Jul 2013 13:59:27 +0000 (14:59 +0100)]
Add functions for validating a list of VALUE_PAIRs against another list, using paircmp

10 years agoAdd merge sort for VALUE_PAIRs
Arran Cudbard-Bell [Tue, 9 Jul 2013 13:58:51 +0000 (14:58 +0100)]
Add merge sort for VALUE_PAIRs

10 years agoAdd pairremove, which removes a pair from a linked list
Arran Cudbard-Bell [Tue, 9 Jul 2013 13:34:56 +0000 (14:34 +0100)]
Add pairremove, which removes a pair from a linked list

10 years agoCall talloc_set_log_stderr() in all utilities, so we get talloc debugging output...
Arran Cudbard-Bell [Tue, 9 Jul 2013 14:30:57 +0000 (15:30 +0100)]
Call talloc_set_log_stderr() in all utilities, so we get talloc debugging output on error

10 years agoZero-length strings are permitted Closes #352
Alan T. DeKok [Mon, 8 Jul 2013 19:46:32 +0000 (21:46 +0200)]
Zero-length strings are permitted  Closes #352

10 years agoMerge pull request #349 from alanbuxey/master
Arran Cudbard-Bell [Mon, 8 Jul 2013 18:36:17 +0000 (11:36 -0700)]
Merge pull request #349 from alanbuxey/master

DANTE VSA dictionary

10 years agoMerge pull request #351 from fajarnugraha/master-suse-20130708
Arran Cudbard-Bell [Mon, 8 Jul 2013 14:04:05 +0000 (07:04 -0700)]
Merge pull request #351 from fajarnugraha/master-suse-20130708

Fix suse package to build and run cleanly for current master branch

10 years agosuse: remove doc/examples and radrelay
Fajar A. Nugraha [Mon, 8 Jul 2013 08:36:25 +0000 (15:36 +0700)]
suse: remove doc/examples and radrelay

doc/examples are gone
raddb/radrelay.conf is no longer installed

10 years agosuse: commit missing files and delete unused file
Fajar A. Nugraha [Mon, 8 Jul 2013 06:43:02 +0000 (13:43 +0700)]
suse: commit missing files and delete unused file

Two new files present in my local working directory were previously
uncommited in git repo:
* freeradius-server-rpmlintrc
* freeradius-server-tmpfiles.conf
These files come from freeradius-server-2.1.12-6.1.src.rpm,
already imported on v2.x.x branch.

A file is unneeded an now deleted:
* radiusd-pam-old

Tested to build, install, run, and authenticate from users file on SLES-11.2

10 years agoUpdate sqlipool config, should now be sql_module_instance not sql-instance-name
Arran Cudbard-Bell [Mon, 8 Jul 2013 10:29:28 +0000 (11:29 +0100)]
Update sqlipool config, should now be sql_module_instance not sql-instance-name

10 years agoWe don't support nested reference expansions
Arran Cudbard-Bell [Mon, 8 Jul 2013 10:25:48 +0000 (11:25 +0100)]
We don't support nested reference expansions

10 years agoAs with unixodbc, let the destructor take care of freeing all memory
Arran Cudbard-Bell [Sun, 7 Jul 2013 12:19:32 +0000 (13:19 +0100)]
As with unixodbc, let the destructor take care of freeing all memory

10 years agoLet destructor handle freeing all resources
Arran Cudbard-Bell [Sun, 7 Jul 2013 12:08:55 +0000 (13:08 +0100)]
Let destructor handle freeing all resources

10 years agoCleanups and clarifications
Alan T. DeKok [Sat, 6 Jul 2013 16:00:07 +0000 (12:00 -0400)]
Cleanups and clarifications

10 years agoMinor updates
Alan T. DeKok [Sat, 6 Jul 2013 15:59:57 +0000 (11:59 -0400)]
Minor updates

10 years agoadded DANTE VSA dictionary file
Alan Buxey [Fri, 5 Jul 2013 20:27:09 +0000 (21:27 +0100)]
added DANTE VSA dictionary file

DANTE IANA attribute space 27262 - first attribute is for RADSEC TTL to
stop loops (like TCP TTL)

10 years agoMerge pull request #348 from arr2036/zero_length_exp
Alan DeKok [Fri, 5 Jul 2013 16:48:46 +0000 (09:48 -0700)]
Merge pull request #348 from arr2036/zero_length_exp

Don't generate errors on zero length expansions