freeradius.git
8 years agoIt's a bug.
Alan T. DeKok [Sun, 18 Oct 2015 16:18:23 +0000 (12:18 -0400)]
It's a bug.

PMIP6-Home-IPv4-HoA = 127.0.0.0/8 was parsed to 0.0.0.0/8

8 years agoAllow IP addrs to compare to prefixes for xlat, too
Alan T. DeKok [Sun, 18 Oct 2015 16:17:01 +0000 (12:17 -0400)]
Allow IP addrs to compare to prefixes for xlat, too

We don't know what the RHS is... so we cast the LHS to a prefix
for v4/v6 addresses

8 years agoIt's a feature not a bug
Arran Cudbard-Bell [Sat, 17 Oct 2015 23:23:01 +0000 (19:23 -0400)]
It's a feature not a bug

8 years agonote recent changes
Alan T. DeKok [Sat, 17 Oct 2015 20:46:53 +0000 (16:46 -0400)]
note recent changes

8 years agoFixes for last commit, ported from v3.1.x
Alan T. DeKok [Sat, 17 Oct 2015 20:45:48 +0000 (16:45 -0400)]
Fixes for last commit, ported from v3.1.x

8 years agoAutomatically cast IP to IP_PREFIX comparisons
Alan T. DeKok [Sat, 17 Oct 2015 20:37:31 +0000 (16:37 -0400)]
Automatically cast IP to IP_PREFIX comparisons

8 years agoParse ipv4prefix correctly
Alan T. DeKok [Sat, 17 Oct 2015 14:46:06 +0000 (10:46 -0400)]
Parse ipv4prefix correctly

8 years agos/RELINK/LOCAL/
Alan T. DeKok [Fri, 16 Oct 2015 16:28:41 +0000 (12:28 -0400)]
s/RELINK/LOCAL/

8 years agoFix double free Closes #1325
Arran Cudbard-Bell [Thu, 15 Oct 2015 12:19:06 +0000 (08:19 -0400)]
Fix double free Closes #1325

8 years agoSet to current time. Fixes #1319
Alan T. DeKok [Wed, 14 Oct 2015 17:50:53 +0000 (13:50 -0400)]
Set to current time.  Fixes #1319

8 years agoMake fr_pair_list_copy_by_num() work like ...move...()
Alan T. DeKok [Wed, 14 Oct 2015 14:27:16 +0000 (10:27 -0400)]
Make fr_pair_list_copy_by_num() work like ...move...()

8 years agoBetter fix for EAP loops. Fixes #1311
Alan T. DeKok [Wed, 14 Oct 2015 14:17:41 +0000 (10:17 -0400)]
Better fix for EAP loops.  Fixes #1311

8 years agoPort fix from v3.1.x
Alan T. DeKok [Tue, 13 Oct 2015 16:51:15 +0000 (12:51 -0400)]
Port fix from v3.1.x

8 years agoMerge pull request #1323 from jpereira/fix/home-server-name
Alan DeKok [Wed, 14 Oct 2015 13:24:50 +0000 (09:24 -0400)]
Merge pull request #1323 from jpereira/fix/home-server-name

Bug fix - When coa_server aren't specified, create the home_server with same name of client section.

8 years agoMerge pull request #1322 from jpereira/fix/prevent1
Alan DeKok [Wed, 14 Oct 2015 13:24:09 +0000 (09:24 -0400)]
Merge pull request #1322 from jpereira/fix/prevent1

be 'NOT NULL' to prevent SEGV

8 years agoBugfix - avoid empty home_server sections
Jorge Pereira [Wed, 14 Oct 2015 05:28:36 +0000 (02:28 -0300)]
Bugfix - avoid empty home_server sections

When coa_server aren't specified, we should create the
home_server with same name of client section.

8 years agocf_pair_dup(): be 'NOT NULL' to prevent SEGV
Jorge Pereira [Wed, 14 Oct 2015 04:51:26 +0000 (01:51 -0300)]
cf_pair_dup(): be 'NOT NULL' to prevent SEGV

8 years agoAdd Lantronix dictionary
Ryan Steinmetz [Tue, 13 Oct 2015 21:16:13 +0000 (17:16 -0400)]
Add Lantronix dictionary

8 years agoIntermediate variable to avoid compiler warning
Alan T. DeKok [Tue, 13 Oct 2015 16:48:08 +0000 (12:48 -0400)]
Intermediate variable to avoid compiler warning

8 years agoChange RELINK to LOCAL
Alan T. DeKok [Tue, 13 Oct 2015 15:58:09 +0000 (11:58 -0400)]
Change RELINK to LOCAL

Which makes it easier to understand what's going on

8 years agoLink local libraries to local libraries
Alan T. DeKok [Tue, 13 Oct 2015 15:55:45 +0000 (11:55 -0400)]
Link local libraries to local libraries

8 years agoPass PRLIBS in ADD_RELINK_RULE.la too Closes #1176
Arran Cudbard-Bell [Mon, 3 Aug 2015 23:35:44 +0000 (19:35 -0400)]
Pass PRLIBS in ADD_RELINK_RULE.la too Closes #1176

8 years agoClean up debug output
Alan T. DeKok [Tue, 13 Oct 2015 15:29:53 +0000 (11:29 -0400)]
Clean up debug output

8 years agoDon't build EAP-PWD if we're building without OpenSSL
Arran Cudbard-Bell [Mon, 12 Oct 2015 21:31:46 +0000 (17:31 -0400)]
Don't build EAP-PWD if we're building without OpenSSL

8 years agoAdd additional EAP methods to the list that use TLS
Arran Cudbard-Bell [Mon, 12 Oct 2015 20:54:32 +0000 (16:54 -0400)]
Add additional EAP methods to the list that use TLS

8 years agotypo
Alan T. DeKok [Sun, 11 Oct 2015 22:35:32 +0000 (18:35 -0400)]
typo

8 years agoIgnore invalid write_p
Alan T. DeKok [Sun, 11 Oct 2015 21:14:21 +0000 (17:14 -0400)]
Ignore invalid write_p

8 years agoInit session only if it doesn't exist
Alan T. DeKok [Sun, 11 Oct 2015 18:34:45 +0000 (14:34 -0400)]
Init session only if it doesn't exist

8 years agoconfigure checks for SSL_get_client_random()
Alan T. DeKok [Sun, 11 Oct 2015 17:55:25 +0000 (13:55 -0400)]
configure checks for SSL_get_client_random()

8 years agoWrappers and portability fixes for newer OpenSSL.
Alan T. DeKok [Sun, 11 Oct 2015 17:21:42 +0000 (13:21 -0400)]
Wrappers and portability fixes for newer OpenSSL.
Which no longer exposes the internal fields of SSL*

8 years agoUse public APIs in recent versions of OpenSSL.
Alan T. DeKok [Sun, 11 Oct 2015 16:39:40 +0000 (12:39 -0400)]
Use public APIs in recent versions of OpenSSL.

8 years agoUpdate ChangeLog
Arran Cudbard-Bell [Fri, 9 Oct 2015 21:12:24 +0000 (17:12 -0400)]
Update ChangeLog

8 years agoUpdate ChangeLog
Arran Cudbard-Bell [Fri, 9 Oct 2015 21:11:47 +0000 (17:11 -0400)]
Update ChangeLog

8 years agoIgnore callbacks for pseudo content types. Fixes EAP-TTLS MSCHAPv2 (and possibly...
Arran Cudbard-Bell [Fri, 9 Oct 2015 20:32:45 +0000 (16:32 -0400)]
Ignore callbacks for pseudo content types.  Fixes EAP-TTLS MSCHAPv2 (and possibly others) with OpenSSL 1.0.2

8 years agoMake it clear whether we're sending or receiving ssl data
Arran Cudbard-Bell [Fri, 9 Oct 2015 20:32:12 +0000 (16:32 -0400)]
Make it clear whether we're sending or receiving ssl data

8 years agoFormatting
Arran Cudbard-Bell [Fri, 9 Oct 2015 20:31:56 +0000 (16:31 -0400)]
Formatting

8 years agoadd const
Alan T. DeKok [Fri, 9 Oct 2015 13:38:56 +0000 (09:38 -0400)]
add const

8 years agoEnabling global logging and not doing logging is surprising
Alan T. DeKok [Fri, 9 Oct 2015 13:01:33 +0000 (09:01 -0400)]
Enabling global logging and not doing logging is surprising

8 years agoMerge pull request #1316 from jpereira/debug/map
Arran Cudbard-Bell [Fri, 9 Oct 2015 00:35:53 +0000 (20:35 -0400)]
Merge pull request #1316 from jpereira/debug/map

Adding #ifdef DEBUG_MAP for map_dump()

8 years agoMerge pull request #1318 from jpereira/bug/nas_type
Arran Cudbard-Bell [Thu, 8 Oct 2015 23:07:34 +0000 (19:07 -0400)]
Merge pull request #1318 from jpereira/bug/nas_type

Fix issue where field nas_type is not accessible via %{client:} xlat, for clients loaded from SQL

8 years agoFix issue where field nas_type would not be accessible via
Jorge Pereira [Thu, 8 Oct 2015 22:39:48 +0000 (19:39 -0300)]
Fix issue where field nas_type would not be accessible via
the %{client:} xlat, for clients loaded from SQL.

8 years agoAdding #ifdef DEBUG_MAP for map_dump()
Jorge Pereira [Thu, 8 Oct 2015 17:20:47 +0000 (14:20 -0300)]
Adding #ifdef DEBUG_MAP for map_dump()

8 years agoCID #1325789
Arran Cudbard-Bell [Wed, 7 Oct 2015 23:16:17 +0000 (19:16 -0400)]
CID #1325789

8 years agoAdd Arista-User-Priv-Level, Arista-User-Role and Arista-CVP-Role
Hua Zhong [Thu, 8 Oct 2015 06:42:21 +0000 (23:42 -0700)]
Add Arista-User-Priv-Level, Arista-User-Role and Arista-CVP-Role

8 years agoFix tests on macs running in rootless mode
Arran Cudbard-Bell [Wed, 7 Oct 2015 02:34:12 +0000 (22:34 -0400)]
Fix tests on macs running in rootless mode

Die Apple die...

8 years agoFormatting
Arran Cudbard-Bell [Wed, 7 Oct 2015 00:39:38 +0000 (20:39 -0400)]
Formatting

8 years agoMerge pull request #1310 from mcnewton/deb30a
Alan DeKok [Wed, 7 Oct 2015 17:13:52 +0000 (13:13 -0400)]
Merge pull request #1310 from mcnewton/deb30a

update debian radius user to freerad for control socket config

8 years agoAllow virtual home servers to process EAP. Fixes #1311
Alan T. DeKok [Wed, 7 Oct 2015 14:58:14 +0000 (10:58 -0400)]
Allow virtual home servers to process EAP.  Fixes #1311

8 years agoFix example
Alan T. DeKok [Wed, 7 Oct 2015 14:52:45 +0000 (10:52 -0400)]
Fix example

8 years agoAdd "verify" target for laziness
Alan T. DeKok [Wed, 7 Oct 2015 14:27:36 +0000 (10:27 -0400)]
Add "verify" target for laziness

8 years agoupdate debian radius user to freerad for control socket config
Matthew Newton [Wed, 7 Oct 2015 11:03:34 +0000 (12:03 +0100)]
update debian radius user to freerad for control socket config

8 years agoMerge pull request #1307 from jpereira/feature/policy-proxy-request
Arran Cudbard-Bell [Tue, 6 Oct 2015 22:34:12 +0000 (18:34 -0400)]
Merge pull request #1307 from jpereira/feature/policy-proxy-request

Adding new policy 'debug_proxy_request'

8 years agoAdding new policy 'debug_proxy_request'
Jorge Pereira [Tue, 6 Oct 2015 22:30:34 +0000 (19:30 -0300)]
Adding new policy 'debug_proxy_request'

8 years agoname2 might not exist. Don't use it for debugging if so
Alan T. DeKok [Tue, 6 Oct 2015 18:05:54 +0000 (14:05 -0400)]
name2 might not exist.  Don't use it for debugging if so

8 years agoMerge pull request #1305 from mcnewton/build30x
Arran Cudbard-Bell [Tue, 6 Oct 2015 13:00:06 +0000 (09:00 -0400)]
Merge pull request #1305 from mcnewton/build30x

always apply debian patches even when only building arch binaries

8 years agoalways apply debian patches even when only building arch binaries
Matthew Newton [Tue, 6 Oct 2015 12:50:58 +0000 (13:50 +0100)]
always apply debian patches even when only building arch binaries

bug found by Fajar A. Nugraha

8 years agoBump for 3.0.11
Alan T. DeKok [Mon, 5 Oct 2015 19:02:17 +0000 (15:02 -0400)]
Bump for 3.0.11

8 years agoNote recent changes release_3_0_10
Alan T. DeKok [Mon, 5 Oct 2015 18:22:28 +0000 (14:22 -0400)]
Note recent changes

8 years agoUpdate ChangeLog
Arran Cudbard-Bell [Mon, 5 Oct 2015 16:06:47 +0000 (12:06 -0400)]
Update ChangeLog

8 years agoUse correct variable name
Alan T. DeKok [Mon, 5 Oct 2015 14:51:10 +0000 (10:51 -0400)]
Use correct variable name

8 years agoCheck for smb_ctrl
Alan T. DeKok [Mon, 5 Oct 2015 13:30:16 +0000 (09:30 -0400)]
Check for smb_ctrl

8 years agoFix old compiler warnings
Alan T. DeKok [Mon, 5 Oct 2015 13:27:59 +0000 (09:27 -0400)]
Fix old compiler warnings

8 years agoCorrect MSCHAP-Error format for MSCAHPv1
Arran Cudbard-Bell [Mon, 5 Oct 2015 05:56:55 +0000 (01:56 -0400)]
Correct MSCHAP-Error format for MSCAHPv1

Always log meaningful messages for all errors

8 years agoAlways include V and M in failure messages
Arran Cudbard-Bell [Sun, 4 Oct 2015 22:56:29 +0000 (18:56 -0400)]
Always include V and M in failure messages

8 years agoFormatting
Arran Cudbard-Bell [Sun, 4 Oct 2015 22:55:52 +0000 (18:55 -0400)]
Formatting

8 years agoNAS-Port should be 32bits
Arran Cudbard-Bell [Mon, 5 Oct 2015 14:16:45 +0000 (10:16 -0400)]
NAS-Port should be 32bits

8 years agoUpdate ChangeLog
Arran Cudbard-Bell [Sun, 4 Oct 2015 22:59:29 +0000 (18:59 -0400)]
Update ChangeLog

8 years agoFix off by one error in rlm_mschap that sometimes meant correctly formatted MS-CHAP...
Arran Cudbard-Bell [Sun, 4 Oct 2015 22:41:38 +0000 (18:41 -0400)]
Fix off by one error in rlm_mschap that sometimes meant correctly formatted MS-CHAP-Error messages were not returned

(sometimes is that the behaviour depended on an uninitialised byte)

8 years agoMerge pull request #1297 from jpereira/fix/policy1
Alan DeKok [Sun, 4 Oct 2015 14:09:00 +0000 (10:09 -0400)]
Merge pull request #1297 from jpereira/fix/policy1

Adding 'coa' list in 'debug_all' policy

8 years agoAdding 'coa' list in 'debug_all' policy
Jorge Pereira [Sun, 4 Oct 2015 07:15:41 +0000 (04:15 -0300)]
Adding 'coa' list in 'debug_all' policy

8 years agoCheck for, and fix, misconfigurations. Fixes #1292
Alan T. DeKok [Sat, 3 Oct 2015 13:10:55 +0000 (09:10 -0400)]
Check for, and fix, misconfigurations.  Fixes #1292

If there's no group membership query, don't do group handling.
And warn the user that the configuration is broken.

8 years agoCheck if we got group_da
Arran Cudbard-Bell [Fri, 2 Oct 2015 17:56:37 +0000 (13:56 -0400)]
Check if we got group_da

8 years agoMerge pull request #1294 from mcnewton/lintian30x
Alan DeKok [Fri, 2 Oct 2015 16:50:33 +0000 (12:50 -0400)]
Merge pull request #1294 from mcnewton/lintian30x

tidy up a load of lintian warnings

8 years agotidy up a load of lintian warnings
Matthew Newton [Fri, 2 Oct 2015 15:34:12 +0000 (16:34 +0100)]
tidy up a load of lintian warnings

8 years agoMerge pull request #1287 from qnet-herwin/lintian
Arran Cudbard-Bell [Fri, 2 Oct 2015 01:45:41 +0000 (21:45 -0400)]
Merge pull request #1287 from qnet-herwin/lintian

Some more debian fixes

8 years agoMerge pull request #1290 from mcnewton/v3.0.x
Arran Cudbard-Bell [Thu, 1 Oct 2015 23:36:22 +0000 (19:36 -0400)]
Merge pull request #1290 from mcnewton/v3.0.x

revert recent dh_testroot change

8 years agorevert recent dh_testroot change
Matthew Newton [Thu, 1 Oct 2015 22:32:34 +0000 (23:32 +0100)]
revert recent dh_testroot change

Successfully enforced fakeroot in normal build, but then annoyingly fails in
sbuild which calls each build target separately and doesn't use fakeroot for
the build target.

8 years agoSync debian packaging changes from v3.1.x
Arran Cudbard-Bell [Thu, 1 Oct 2015 21:33:59 +0000 (17:33 -0400)]
Sync debian packaging changes from v3.1.x

8 years agoUpdates. Addresses #1288
Alan T. DeKok [Thu, 1 Oct 2015 18:52:19 +0000 (14:52 -0400)]
Updates.  Addresses #1288

8 years agoUse quotes. Addresses #1288
Alan T. DeKok [Thu, 1 Oct 2015 18:51:11 +0000 (14:51 -0400)]
Use quotes.  Addresses #1288

8 years agoFixed copy-paste error for new debian packages
Herwin Weststrate [Thu, 1 Oct 2015 17:16:43 +0000 (19:16 +0200)]
Fixed copy-paste error for new debian packages

8 years agoAdded new packages to gitignore in debian folder
Herwin Weststrate [Thu, 1 Oct 2015 17:15:21 +0000 (19:15 +0200)]
Added new packages to gitignore in debian folder

8 years agoMerge pull request #1285 from mcnewton/debtidy
Alan DeKok [Thu, 1 Oct 2015 15:19:16 +0000 (11:19 -0400)]
Merge pull request #1285 from mcnewton/debtidy

debian packaging updates

8 years agoMerge pull request #1270 from mcnewton/v3.0.x
Alan DeKok [Thu, 1 Oct 2015 15:17:37 +0000 (11:17 -0400)]
Merge pull request #1270 from mcnewton/v3.0.x

debian package fails trying to build sqlhpwippool

8 years agodebian package fails when not building with fakeroot
Matthew Newton [Thu, 24 Sep 2015 13:16:50 +0000 (14:16 +0100)]
debian package fails when not building with fakeroot

8 years agomissing space
Matthew Newton [Thu, 1 Oct 2015 01:01:17 +0000 (02:01 +0100)]
missing space

8 years agoadd freeradius-yubikey debian package
Matthew Newton [Thu, 1 Oct 2015 00:58:40 +0000 (01:58 +0100)]
add freeradius-yubikey debian package

also include libykclient-dev to build that functionality as well

8 years agoupdate debian freeradius package info
Matthew Newton [Thu, 1 Oct 2015 00:36:07 +0000 (01:36 +0100)]
update debian freeradius package info

adds snmp as a suggests as the build states snmpget or snmpwalk may
be required for checkrad

8 years agotry harder to find isql.h
Matthew Newton [Thu, 1 Oct 2015 00:14:24 +0000 (01:14 +0100)]
try harder to find isql.h

location has moved between debian wheezy and jessie

8 years agoadd memcached and redis debian packages
Matthew Newton [Wed, 30 Sep 2015 22:09:17 +0000 (23:09 +0100)]
add memcached and redis debian packages

8 years agofreeradius-config depends on openssl
Matthew Newton [Wed, 30 Sep 2015 22:03:08 +0000 (23:03 +0100)]
freeradius-config depends on openssl

If you try and install it on its own for some reason then it barfs
on gendh if openssl isn't there.

8 years agoMerge pull request #1283 from mcnewton/deb1
Arran Cudbard-Bell [Wed, 30 Sep 2015 21:22:16 +0000 (17:22 -0400)]
Merge pull request #1283 from mcnewton/deb1

refresh quilt patches

8 years agorefresh quilt patches
Matthew Newton [Wed, 30 Sep 2015 21:07:12 +0000 (22:07 +0100)]
refresh quilt patches

8 years agoMerge pull request #1282 from mcnewton/debjson
Arran Cudbard-Bell [Wed, 30 Sep 2015 20:24:43 +0000 (16:24 -0400)]
Merge pull request #1282 from mcnewton/debjson

swap order of json libraries in debian package

8 years agoswap order of json libraries in debian package
Matthew Newton [Wed, 30 Sep 2015 19:57:31 +0000 (20:57 +0100)]
swap order of json libraries in debian package

Building using sbuild for debian wheezy fails because libjson-c2 does not exist
in wheezy and apt dependency checking seems to short circuit the or.

Swapping around means building works on wheezy sbuild. It doesn't affect
jessie/stretch/sid because libjson0 exists as a transitional package just
pulling in libjson-c2 anyway.

8 years agoMerge pull request #1281 from alanbuxey/patch-11
Alan DeKok [Wed, 30 Sep 2015 19:34:03 +0000 (15:34 -0400)]
Merge pull request #1281 from alanbuxey/patch-11

Update ChangeLog

8 years agoUpdate ChangeLog
Alan Buxey [Wed, 30 Sep 2015 18:41:54 +0000 (19:41 +0100)]
Update ChangeLog

8 years agoMerge pull request #1279 from mcnewton/ch30x
Arran Cudbard-Bell [Wed, 30 Sep 2015 11:39:21 +0000 (07:39 -0400)]
Merge pull request #1279 from mcnewton/ch30x

update recent changes

8 years agoupdate recent changes
Matthew Newton [Wed, 30 Sep 2015 10:00:05 +0000 (11:00 +0100)]
update recent changes

8 years agoclarify other message
Alan T. DeKok [Tue, 29 Sep 2015 15:03:37 +0000 (11:03 -0400)]
clarify other message