freeradius.git
9 years agoTurn on super pedantic warnings in CLANG
Arran Cudbard-Bell [Mon, 22 Dec 2014 21:20:17 +0000 (16:20 -0500)]
Turn on super pedantic warnings in CLANG

9 years agoINFO on unknown clients, and rate-limit them
Alan T. DeKok [Mon, 22 Dec 2014 20:22:41 +0000 (15:22 -0500)]
INFO on unknown clients, and rate-limit them

9 years agoClarify which tests we're running
Alan T. DeKok [Mon, 22 Dec 2014 20:16:59 +0000 (15:16 -0500)]
Clarify which tests we're running

9 years agoMore tests
Alan T. DeKok [Mon, 22 Dec 2014 20:11:28 +0000 (15:11 -0500)]
More tests

9 years agoAdded sample tests for the "users" file
Alan T. DeKok [Mon, 22 Dec 2014 20:02:03 +0000 (15:02 -0500)]
Added sample tests for the "users" file

9 years agoUse home_type_t instead of "int"
Alan T. DeKok [Mon, 22 Dec 2014 17:36:40 +0000 (12:36 -0500)]
Use home_type_t instead of "int"

9 years agoEnsure framework includes drivers, too
Alan T. DeKok [Mon, 22 Dec 2014 17:06:15 +0000 (12:06 -0500)]
Ensure framework includes drivers, too

9 years agoFramework to do module-specific tests
Alan T. DeKok [Mon, 22 Dec 2014 16:40:20 +0000 (11:40 -0500)]
Framework to do module-specific tests

With examples and documentation

9 years agoExpose realm_home_server_add
Alan T. DeKok [Mon, 22 Dec 2014 16:20:16 +0000 (11:20 -0500)]
Expose realm_home_server_add

9 years agoCorrect type for type in old_server_add
Arran Cudbard-Bell [Mon, 22 Dec 2014 04:29:36 +0000 (23:29 -0500)]
Correct type for type in old_server_add

9 years agoMissing parentheses in sqlite queries
Arran Cudbard-Bell [Mon, 22 Dec 2014 03:19:07 +0000 (22:19 -0500)]
Missing parentheses in sqlite queries

9 years agocleanup home_server_add (rename to home_server_afrom_cs and remove globals)
Arran Cudbard-Bell [Mon, 22 Dec 2014 01:04:19 +0000 (20:04 -0500)]
cleanup home_server_add (rename to home_server_afrom_cs and remove globals)

9 years agoBackport PW_TYPE_NOT_EMPTY flag
Arran Cudbard-Bell [Sun, 21 Dec 2014 20:28:15 +0000 (15:28 -0500)]
Backport PW_TYPE_NOT_EMPTY flag

9 years agoHandle ":<port>"
Arran Cudbard-Bell [Sun, 21 Dec 2014 17:08:53 +0000 (12:08 -0500)]
Handle ":<port>"

9 years agoTypo
Arran Cudbard-Bell [Thu, 18 Dec 2014 22:27:47 +0000 (17:27 -0500)]
Typo

9 years agosame change for pton6
Arran Cudbard-Bell [Thu, 18 Dec 2014 22:25:04 +0000 (17:25 -0500)]
same change for pton6

9 years agoMerge pull request #862 from spbnick/keep_ip_hton_af_prefix
Arran Cudbard-Bell [Thu, 18 Dec 2014 22:24:28 +0000 (17:24 -0500)]
Merge pull request #862 from spbnick/keep_ip_hton_af_prefix

Don't overwrite ip_hton af/prefix in fr_pton4

9 years agoMerge pull request #861 from spbnick/ipaddr_comments
Arran Cudbard-Bell [Thu, 18 Dec 2014 22:24:19 +0000 (17:24 -0500)]
Merge pull request #861 from spbnick/ipaddr_comments

raddb: Comment on ipaddr/ipv4addr/ipv6addr use

9 years agoraddb: Comment on ipaddr/ipv4addr/ipv6addr use
Nikolai Kondrashov [Thu, 18 Dec 2014 14:13:58 +0000 (16:13 +0200)]
raddb: Comment on ipaddr/ipv4addr/ipv6addr use

Describe combined ipaddr/ipv4addr/ipv6addr use in
raddb/sites-available/default.

9 years agoDon't overwrite ip_hton af/prefix in fr_pton4
Nikolai Kondrashov [Thu, 18 Dec 2014 20:05:35 +0000 (22:05 +0200)]
Don't overwrite ip_hton af/prefix in fr_pton4

Don't overwrite address family and prefix set by ip_hton (which can fall
back onto IPv6) with AF_INT/32, in fr_pton4.

This fixes radiusd listening on IPv4 address consiting of the first 4
octets of resolved IPv6 address when falling back to IPv6.

9 years agoFix more issues in LDAP url handling
Arran Cudbard-Bell [Thu, 18 Dec 2014 16:51:37 +0000 (11:51 -0500)]
Fix more issues in LDAP url handling

9 years agoIt's VERY useful to print out "server" on startup
Alan T. DeKok [Thu, 18 Dec 2014 16:22:32 +0000 (11:22 -0500)]
It's VERY useful to print out "server" on startup

Omitting it will confuse a lot of people

9 years agoUpdate for 3.0.7
Alan T. DeKok [Thu, 18 Dec 2014 14:24:21 +0000 (09:24 -0500)]
Update for 3.0.7

9 years agoWe now use the correct name for function macros... release_3_0_6
Arran Cudbard-Bell [Wed, 17 Dec 2014 21:07:57 +0000 (16:07 -0500)]
We now use the correct name for function macros...

9 years agoUpdate release time
Alan T. DeKok [Wed, 17 Dec 2014 20:59:39 +0000 (15:59 -0500)]
Update release time

9 years agoRemove URI field from rlm_ldap
Arran Cudbard-Bell [Wed, 17 Dec 2014 16:21:08 +0000 (11:21 -0500)]
Remove URI field from rlm_ldap

9 years agoAdded some null checks after talloc_zero
Herwin Weststrate [Wed, 17 Dec 2014 12:56:08 +0000 (13:56 +0100)]
Added some null checks after talloc_zero

We've seen the scenario with proxy-inner-tunnel as virtual server for PEAP, and a backend that is unreachable. With a storm of requests this did lead to segfaults in `session_init` (`src/main/tls.c`). From there, it's just turtles all the way down.

9 years agoDon't allow timeouts larger than max_request_timeout instead of hardcoded value.
Philipp Hug [Tue, 16 Dec 2014 10:04:26 +0000 (11:04 +0100)]
Don't allow timeouts larger than max_request_timeout instead of hardcoded value.

9 years agoUpdate default LDAP config
Arran Cudbard-Bell [Wed, 17 Dec 2014 06:18:21 +0000 (01:18 -0500)]
Update default LDAP config

9 years agorework LDAP host parsing code again to deal with multiple hosts closes #859
Arran Cudbard-Bell [Wed, 17 Dec 2014 02:39:59 +0000 (21:39 -0500)]
rework LDAP host parsing code again to deal with multiple hosts closes #859

9 years agoRemove unused code. Closes CID #1258580
Alan T. DeKok [Mon, 15 Dec 2014 23:25:45 +0000 (18:25 -0500)]
Remove unused code.  Closes CID #1258580

9 years agoCoverity CID #1233595
Arran Cudbard-Bell [Mon, 15 Dec 2014 21:37:14 +0000 (16:37 -0500)]
Coverity CID #1233595

9 years agoUse size_t instead of int
Alan T. DeKok [Mon, 15 Dec 2014 21:37:59 +0000 (16:37 -0500)]
Use size_t instead of int

9 years agoUnlock mutex. Closes CID #1243441
Alan T. DeKok [Mon, 15 Dec 2014 21:29:48 +0000 (16:29 -0500)]
Unlock mutex.  Closes CID #1243441

9 years agoDon't call rand(). Closes CID #1233594
Alan T. DeKok [Mon, 15 Dec 2014 21:27:49 +0000 (16:27 -0500)]
Don't call rand().  Closes CID #1233594

9 years agoAssertion to quiet CID #1223701
Alan T. DeKok [Mon, 15 Dec 2014 21:24:00 +0000 (16:24 -0500)]
Assertion to quiet CID #1223701

9 years agoCoverity CID #1248165
Arran Cudbard-Bell [Mon, 15 Dec 2014 21:10:12 +0000 (16:10 -0500)]
Coverity CID #1248165

9 years agolistener can't be NULL for non-detail packets...
Alan T. DeKok [Mon, 15 Dec 2014 20:52:50 +0000 (15:52 -0500)]
listener can't be NULL for non-detail packets...

9 years agoCoverity CID #1258575
Arran Cudbard-Bell [Mon, 15 Dec 2014 20:46:00 +0000 (15:46 -0500)]
Coverity CID #1258575

9 years agoDecrease block protected by the mutex. Closes CID #1258573
Alan T. DeKok [Mon, 15 Dec 2014 20:38:00 +0000 (15:38 -0500)]
Decrease block protected by the mutex. Closes CID #1258573

9 years agoCoverity CID #1258572
Arran Cudbard-Bell [Mon, 15 Dec 2014 20:30:44 +0000 (15:30 -0500)]
Coverity CID #1258572

9 years agoCoverity CID #1258569
Arran Cudbard-Bell [Mon, 15 Dec 2014 20:24:27 +0000 (15:24 -0500)]
Coverity CID #1258569

9 years agoCoverity CID #1258567
Arran Cudbard-Bell [Mon, 15 Dec 2014 20:18:10 +0000 (15:18 -0500)]
Coverity CID #1258567

9 years agoRemove dead code
Alan T. DeKok [Mon, 15 Dec 2014 20:32:13 +0000 (15:32 -0500)]
Remove dead code

9 years agoTypo
Alan T. DeKok [Mon, 15 Dec 2014 20:32:03 +0000 (15:32 -0500)]
Typo

9 years agoTypo. Closes CID #1258570
Alan T. DeKok [Mon, 15 Dec 2014 20:30:29 +0000 (15:30 -0500)]
Typo.  Closes CID #1258570

9 years agoNote recent changes
Alan T. DeKok [Mon, 15 Dec 2014 20:29:32 +0000 (15:29 -0500)]
Note recent changes

9 years agoReturn on bad things. Closes CID #1258571
Alan T. DeKok [Mon, 15 Dec 2014 20:29:03 +0000 (15:29 -0500)]
Return on bad things.  Closes CID #1258571

9 years agoWe need an "update" config. Closes CID #1258577
Alan T. DeKok [Mon, 15 Dec 2014 20:27:19 +0000 (15:27 -0500)]
We need an "update" config.  Closes CID #1258577

9 years agoWe don't need an "update" config. Closes CID #1258577
Alan T. DeKok [Mon, 15 Dec 2014 20:25:27 +0000 (15:25 -0500)]
We don't need an "update" config.  Closes CID #1258577

9 years agoClose sockfd if we fail. Closes CID #1258578
Alan T. DeKok [Mon, 15 Dec 2014 20:21:55 +0000 (15:21 -0500)]
Close sockfd if we fail.  Closes CID #1258578

9 years agoNote that we're falling through. Closes CID #1258579
Alan T. DeKok [Mon, 15 Dec 2014 20:21:40 +0000 (15:21 -0500)]
Note that we're falling through.  Closes CID #1258579

9 years agoMove printing the reply out a little later (after we've decoded it)
Arran Cudbard-Bell [Mon, 15 Dec 2014 19:37:03 +0000 (14:37 -0500)]
Move printing the reply out a little later (after we've decoded it)

9 years agoAdd &attr[n] which gets the last instance of an attribute (Useful to get the most...
Arran Cudbard-Bell [Mon, 15 Dec 2014 19:25:11 +0000 (14:25 -0500)]
Add &attr[n] which gets the last instance of an attribute (Useful to get the most recent instance of Module-Failure-Message)

9 years agoUpdate ChangeLog
Arran Cudbard-Bell [Mon, 15 Dec 2014 19:27:52 +0000 (14:27 -0500)]
Update ChangeLog

9 years agoMore fixes for coa separate
Alan T. DeKok [Mon, 15 Dec 2014 18:18:13 +0000 (13:18 -0500)]
More fixes for coa separate

9 years agoAdd packet debugging back into radclient
Arran Cudbard-Bell [Mon, 15 Dec 2014 18:06:33 +0000 (13:06 -0500)]
Add packet debugging back into radclient

9 years agoTypo
Arran Cudbard-Bell [Mon, 15 Dec 2014 17:30:45 +0000 (12:30 -0500)]
Typo

9 years agoAdd explicit tests for unknown in condition
Alan T. DeKok [Mon, 15 Dec 2014 17:27:53 +0000 (12:27 -0500)]
Add explicit tests for unknown in condition

9 years agoBetter way of dealing with undefined attrs in update
Alan T. DeKok [Mon, 15 Dec 2014 17:26:35 +0000 (12:26 -0500)]
Better way of dealing with undefined attrs in update

9 years agoMerge pull request #857 from spbnick/move_trigger_include
Alan DeKok [Mon, 15 Dec 2014 17:14:52 +0000 (12:14 -0500)]
Merge pull request #857 from spbnick/move_trigger_include

raddb: Move trigger.conf INCLUDE before modules

9 years agoError out if the attribute is unknown after pass2
Alan T. DeKok [Mon, 15 Dec 2014 16:59:24 +0000 (11:59 -0500)]
Error out if the attribute is unknown after pass2

9 years agoRemove unused code
Arran Cudbard-Bell [Mon, 15 Dec 2014 15:56:09 +0000 (10:56 -0500)]
Remove unused code

9 years agoUpdate ChangeLog
Arran Cudbard-Bell [Mon, 15 Dec 2014 15:24:25 +0000 (10:24 -0500)]
Update ChangeLog

9 years agoraddb: Move trigger.conf INCLUDE before modules
Nikolai Kondrashov [Mon, 15 Dec 2014 14:48:26 +0000 (16:48 +0200)]
raddb: Move trigger.conf INCLUDE before modules

Move "$INCLUDE trigger.conf" chunk before module section in
"radiusd.conf.in". This makes it possible to reference "snmptrap" and
related trigger variables under "pool.trigger" in module configurations,
simplifying them.

E.g. like this (in raddb/mods-enabled/ldap):

ldap ldap_instance {
    pool {
        trigger {
            args = "radiusdModuleName s '${...:name}' radiusdModuleInstance s '${...:instance}'"
            open = "${snmptrap}::serverModuleConnectionUp ${args}"
            close = "${snmptrap}::serverModuleConnectionDown ${args}"
        }
    }
}

9 years agoAvoid shift overflow that cause incorrect masking to be applied to /64 prefixes
Arran Cudbard-Bell [Mon, 15 Dec 2014 14:51:27 +0000 (09:51 -0500)]
Avoid shift overflow that cause incorrect masking to be applied to /64 prefixes

9 years agoFormatting
Arran Cudbard-Bell [Mon, 15 Dec 2014 14:50:43 +0000 (09:50 -0500)]
Formatting

9 years agoAdd code to convert between IPv4/v6 addresses and IPv4/v6 prefixes
Arran Cudbard-Bell [Mon, 15 Dec 2014 01:02:33 +0000 (20:02 -0500)]
Add code to convert between IPv4/v6 addresses and IPv4/v6 prefixes

9 years agoRemove restriction on implicit casts in map_to_vp
Arran Cudbard-Bell [Mon, 15 Dec 2014 05:30:33 +0000 (00:30 -0500)]
Remove restriction on implicit casts in map_to_vp

9 years agoAdd more EVAL_DEBUG statements so we can determine source of normalisation type
Arran Cudbard-Bell [Mon, 15 Dec 2014 01:01:43 +0000 (20:01 -0500)]
Add more EVAL_DEBUG statements so we can determine source of normalisation type

9 years agoZero log.indent in child requests
Arran Cudbard-Bell [Mon, 15 Dec 2014 01:01:04 +0000 (20:01 -0500)]
Zero log.indent in child requests

9 years agoTypo
Arran Cudbard-Bell [Mon, 15 Dec 2014 01:00:51 +0000 (20:00 -0500)]
Typo

9 years agoRemove &Attr[#] it's very difficult to make it work correctly everywhere
Arran Cudbard-Bell [Mon, 15 Dec 2014 01:00:39 +0000 (20:00 -0500)]
Remove &Attr[#] it's very difficult to make it work correctly everywhere

9 years agoTypo
Arran Cudbard-Bell [Mon, 15 Dec 2014 00:59:52 +0000 (19:59 -0500)]
Typo

9 years agoFix bad VP array type value accesses
Arran Cudbard-Bell [Mon, 15 Dec 2014 00:59:41 +0000 (19:59 -0500)]
Fix bad VP array type value accesses

9 years agoFix coa_separate to behave differently for proxy reply
Alan T. DeKok [Mon, 15 Dec 2014 13:31:25 +0000 (08:31 -0500)]
Fix coa_separate to behave differently for proxy reply

9 years agoMerge pull request #849 from spbnick/util_help
Arran Cudbard-Bell [Mon, 15 Dec 2014 13:30:03 +0000 (08:30 -0500)]
Merge pull request #849 from spbnick/util_help

rad_counter and dhcpclient online help fixes

9 years agoUpdate ChangeLog
Arran Cudbard-Bell [Sun, 14 Dec 2014 00:44:12 +0000 (19:44 -0500)]
Update ChangeLog

9 years agoUpdate the unlang man page
Arran Cudbard-Bell [Sun, 14 Dec 2014 00:37:03 +0000 (19:37 -0500)]
Update the unlang man page

9 years agoAdd support for 'm' (multiline) regex flag
Arran Cudbard-Bell [Sat, 13 Dec 2014 21:04:54 +0000 (16:04 -0500)]
Add support for 'm' (multiline) regex flag

9 years agoTypos
Arran Cudbard-Bell [Sat, 13 Dec 2014 04:42:21 +0000 (23:42 -0500)]
Typos

9 years agoShould be HAVE_REGEX
Arran Cudbard-Bell [Sat, 13 Dec 2014 04:38:56 +0000 (23:38 -0500)]
Should be HAVE_REGEX

9 years agoFmt is used
Arran Cudbard-Bell [Sat, 13 Dec 2014 01:59:47 +0000 (20:59 -0500)]
Fmt is used

9 years agoUnneeded debug
Arran Cudbard-Bell [Sat, 13 Dec 2014 01:59:19 +0000 (20:59 -0500)]
Unneeded debug

9 years agoAdd support for named capture groups
Arran Cudbard-Bell [Sat, 13 Dec 2014 00:22:51 +0000 (19:22 -0500)]
Add support for named capture groups

9 years agoDoxygen
Arran Cudbard-Bell [Sat, 13 Dec 2014 00:22:36 +0000 (19:22 -0500)]
Doxygen

9 years agoFix handling of regexes with > 32 capture groups
Arran Cudbard-Bell [Sat, 13 Dec 2014 00:22:15 +0000 (19:22 -0500)]
Fix handling of regexes with > 32 capture groups

9 years agoNeed MAX_REGEX + 1 for the complete match group
Arran Cudbard-Bell [Sat, 13 Dec 2014 00:21:44 +0000 (19:21 -0500)]
Need MAX_REGEX + 1 for the complete match group

9 years agoxlat_inst only needed for foreach
Arran Cudbard-Bell [Sat, 13 Dec 2014 00:20:52 +0000 (19:20 -0500)]
xlat_inst only needed for foreach

9 years agoFix xlat_tokenize code so it handles arbitrary numbers of capture groups
Arran Cudbard-Bell [Sat, 13 Dec 2014 00:20:30 +0000 (19:20 -0500)]
Fix xlat_tokenize code so it handles arbitrary numbers of capture groups

9 years agoTypo
Arran Cudbard-Bell [Fri, 12 Dec 2014 20:56:24 +0000 (15:56 -0500)]
Typo

9 years agoSwitch to new subcapture handling code
Arran Cudbard-Bell [Fri, 12 Dec 2014 20:54:19 +0000 (15:54 -0500)]
Switch to new subcapture handling code

9 years agoAdd always flag to fr_debug_break
Arran Cudbard-Bell [Fri, 12 Dec 2014 18:14:54 +0000 (13:14 -0500)]
Add always flag to fr_debug_break

9 years agoCreate abstraction layer around regular expression libraries
Arran Cudbard-Bell [Fri, 12 Dec 2014 18:14:34 +0000 (13:14 -0500)]
Create abstraction layer around regular expression libraries

Call libpcre with native functions, and use the JIT where appropriate/possible

Call regnexec and regncomp where available, and complain about null bytes in patterns and subjects if they're not.

9 years agoReturn -1 if we can't allocate memory for node for request data
Arran Cudbard-Bell [Fri, 12 Dec 2014 18:03:04 +0000 (13:03 -0500)]
Return -1 if we can't allocate memory for node for request data

9 years agoPrint PCRE library version
Arran Cudbard-Bell [Fri, 12 Dec 2014 18:02:37 +0000 (13:02 -0500)]
Print PCRE library version

9 years agoOutput debug for virtual expansions
Arran Cudbard-Bell [Fri, 12 Dec 2014 18:02:23 +0000 (13:02 -0500)]
Output debug for virtual expansions

9 years agoUpdate truncation test to work around limitations in some regular expressions max...
Arran Cudbard-Bell [Fri, 12 Dec 2014 18:01:31 +0000 (13:01 -0500)]
Update truncation test to work around limitations in some regular expressions max repetition limit

9 years agoClarify warning message
Alan T. DeKok [Fri, 12 Dec 2014 12:25:27 +0000 (07:25 -0500)]
Clarify warning message

9 years agoFormatting
Arran Cudbard-Bell [Thu, 11 Dec 2014 16:46:06 +0000 (11:46 -0500)]
Formatting