freeradius.git
7 years agoInitialize out before calling radius_axlat or radius_axlat_struct
Philippe Wooding [Tue, 13 Sep 2016 11:20:00 +0000 (13:20 +0200)]
Initialize out before calling radius_axlat or radius_axlat_struct

7 years agoMerge pull request #1815 from alanbuxey/v3.0.x
Arran Cudbard-Bell [Sat, 5 Nov 2016 19:24:41 +0000 (15:24 -0400)]
Merge pull request #1815 from alanbuxey/v3.0.x

fixed variable in accounting policy to use correct "&" prefix - no more warnings with default configuration

7 years agoMerge branch 'v3.0.x' into v3.0.x
Arran Cudbard-Bell [Sat, 5 Nov 2016 19:20:48 +0000 (15:20 -0400)]
Merge branch 'v3.0.x' into v3.0.x

7 years agosuccess may still return nothing. Should help with #1824
Alan T. DeKok [Fri, 4 Nov 2016 18:09:34 +0000 (14:09 -0400)]
success may still return nothing.  Should help with #1824

7 years agoNUL terminating strings is a good idea.
Alan T. DeKok [Fri, 4 Nov 2016 15:35:43 +0000 (11:35 -0400)]
NUL terminating strings is a good idea.

7 years agomore error messages
Alan T. DeKok [Fri, 4 Nov 2016 12:38:35 +0000 (08:38 -0400)]
more error messages

7 years agoMerge pull request #1819 from jrouzierinverse/ldap-null-check
Alan DeKok [Fri, 4 Nov 2016 13:43:23 +0000 (09:43 -0400)]
Merge pull request #1819 from jrouzierinverse/ldap-null-check

Check if info.ldapai_extensions is not NULL before freeing it

7 years agoIgnore dirs from other branches
Arran Cudbard-Bell [Thu, 3 Nov 2016 20:13:21 +0000 (16:13 -0400)]
Ignore dirs from other branches

7 years agoInitialise tminfo Closes #1820
Arran Cudbard-Bell [Thu, 3 Nov 2016 20:11:32 +0000 (16:11 -0400)]
Initialise tminfo Closes #1820

7 years agoMerge branch 'v3.0.x' into ldap-null-check
Arran Cudbard-Bell [Thu, 3 Nov 2016 14:33:04 +0000 (10:33 -0400)]
Merge branch 'v3.0.x' into ldap-null-check

7 years agonote recent changes
Alan T. DeKok [Thu, 3 Nov 2016 13:54:41 +0000 (09:54 -0400)]
note recent changes

7 years agoRename lt_* to fr_*. Fixes #1277
Alan T. DeKok [Thu, 3 Nov 2016 13:50:56 +0000 (09:50 -0400)]
Rename lt_* to fr_*.  Fixes #1277

Which fixes linker issues in libraries which link to libtool,
and then sometimes get the wrong function.

Changed via:

perl -p -i -e 's/lt_dlhandle/fr_dlhandle/g;s/lt_dlopenext/fr_dlopenext/g;s/lt_dlsym/fr_dlsym/g;s/lt_dlclose/fr_dlclose/g;s/lt_dlerror/fr_dlerror/g;' $(find . -name "*.[ch]" -print)

7 years agoMerge branch 'v3.0.x' into v3.0.x
Alan Buxey [Tue, 1 Nov 2016 20:39:56 +0000 (20:39 +0000)]
Merge branch 'v3.0.x' into v3.0.x

7 years agoallow Calling-Station-Id and Chargeable-User-Identity to pass through
Alan Buxey [Tue, 1 Nov 2016 20:38:56 +0000 (20:38 +0000)]
allow Calling-Station-Id and Chargeable-User-Identity to pass through

ensures configuration works out of box for various roaming consortia

7 years agoCheck if info.ldapai_extensions is not NULL before freeing it
James Rouzier [Tue, 1 Nov 2016 17:13:53 +0000 (13:13 -0400)]
Check if info.ldapai_extensions is not NULL before freeing it

7 years agoMerge pull request #1799 from intersvyaz/v3.0.x-patch2
Arran Cudbard-Bell [Mon, 31 Oct 2016 15:21:52 +0000 (11:21 -0400)]
Merge pull request #1799 from intersvyaz/v3.0.x-patch2

rlm_ldap: cleanup memory after ldap version query

7 years agoMerge branch 'v3.0.x' into v3.0.x-patch2
Arran Cudbard-Bell [Mon, 31 Oct 2016 14:44:06 +0000 (10:44 -0400)]
Merge branch 'v3.0.x' into v3.0.x-patch2

7 years agofixed variable to use the "&" prefix
Alan Buxey [Sun, 30 Oct 2016 22:27:38 +0000 (22:27 +0000)]
fixed variable to use the "&" prefix

7 years agoMerge pull request #1811 from Caspinol/v3.0.x
Arran Cudbard-Bell [Sat, 29 Oct 2016 11:53:41 +0000 (07:53 -0400)]
Merge pull request #1811 from Caspinol/v3.0.x

Refer to raiusd.conf for more examples

7 years agoRefer to raiusd.conf for more examples
Kris [Fri, 28 Oct 2016 15:49:56 +0000 (16:49 +0100)]
Refer to raiusd.conf for more examples

7 years agoMerge pull request #1810 from qnet-herwin/indentation_rlm_mschap
Alan DeKok [Fri, 28 Oct 2016 11:36:42 +0000 (07:36 -0400)]
Merge pull request #1810 from qnet-herwin/indentation_rlm_mschap

Indentation fix in rlm_mschap.c

7 years agoIndentation fix in rlm_mschap.c
Herwin Weststrate [Fri, 28 Oct 2016 11:11:03 +0000 (13:11 +0200)]
Indentation fix in rlm_mschap.c

7 years agoMerge pull request #1806 from candlerb/v3.0.x/candlerb/eap-updated
Alan DeKok [Wed, 26 Oct 2016 14:47:42 +0000 (10:47 -0400)]
Merge pull request #1806 from candlerb/v3.0.x/candlerb/eap-updated

Add commented-out example to eap section to handle "updated" response

7 years agoAdd commented-out example to eap section to handle "updated" response
Brian Candler [Tue, 25 Oct 2016 17:19:10 +0000 (18:19 +0100)]
Add commented-out example to eap section to handle "updated" response

This occurs part-way through a PEAP tunneled exchange, and can cause
additional database lookups.

7 years agotypo
Alan T. DeKok [Tue, 25 Oct 2016 12:46:10 +0000 (08:46 -0400)]
typo

7 years agono longer needed
Alan T. DeKok [Sun, 23 Oct 2016 15:57:06 +0000 (11:57 -0400)]
no longer needed

7 years agoCheck for new OpenSSL. Fixes #1803
Alan T. DeKok [Sat, 22 Oct 2016 22:20:35 +0000 (18:20 -0400)]
Check for new OpenSSL.  Fixes #1803

Old versions of OpenSSL don't have the necessary functions or
macro definitions, so we don't build rlm_eap_fast for them.

7 years agorlm_ldap: cleanup memory after ldap version query
Aleksey Katargin [Wed, 19 Oct 2016 10:25:07 +0000 (15:25 +0500)]
rlm_ldap: cleanup memory after ldap version query

Signed-off-by: Aleksey Katargin <gureedo@intersvyaz.net>
7 years agoMerge pull request #1795 from intersvyaz/v3.0.x-patch1
Alan DeKok [Wed, 19 Oct 2016 17:56:43 +0000 (13:56 -0400)]
Merge pull request #1795 from intersvyaz/v3.0.x-patch1

conffile: cleanup section children and tail on data remove

7 years agonote recent changes
Alan T. DeKok [Wed, 19 Oct 2016 16:39:35 +0000 (12:39 -0400)]
note recent changes

7 years agoreturn RLM_MODULE_NOTFOUND if nothing was found
Alan T. DeKok [Wed, 19 Oct 2016 16:37:27 +0000 (12:37 -0400)]
return RLM_MODULE_NOTFOUND if nothing was found

7 years agoMerge branch 'v3.0.x' into v3.0.x-patch1
Alan DeKok [Wed, 19 Oct 2016 13:52:36 +0000 (09:52 -0400)]
Merge branch 'v3.0.x' into v3.0.x-patch1

7 years agoAdd cipher_server_preference. Manual port of #1797
Alan T. DeKok [Wed, 19 Oct 2016 13:48:48 +0000 (09:48 -0400)]
Add cipher_server_preference.  Manual port of #1797

7 years agoconffile: cleanup section children and tail on data remove
Aleksey Katargin [Wed, 19 Oct 2016 08:05:11 +0000 (13:05 +0500)]
conffile: cleanup section children and tail on data remove

Signed-off-by: Aleksey Katargin <gureedo@intersvyaz.net>
7 years agoMerge pull request #1793 from andre-luiz-dos-santos/patch-1
Alan DeKok [Mon, 17 Oct 2016 16:15:50 +0000 (12:15 -0400)]
Merge pull request #1793 from andre-luiz-dos-santos/patch-1

Minor typo

7 years agoMinor typo
André Luiz dos Santos [Mon, 17 Oct 2016 15:26:32 +0000 (13:26 -0200)]
Minor typo

7 years agoMerge pull request #1792 from mcnewton/v3.0.x
Alan DeKok [Mon, 17 Oct 2016 14:37:55 +0000 (10:37 -0400)]
Merge pull request #1792 from mcnewton/v3.0.x

rlm_mschap: fix up password change test

7 years agorlm_mschap: fix up password change test
Matthew Newton [Mon, 17 Oct 2016 13:55:54 +0000 (14:55 +0100)]
rlm_mschap: fix up password change test

7 years agoadded RFC 7930
Alan T. DeKok [Wed, 12 Oct 2016 14:13:00 +0000 (10:13 -0400)]
added RFC 7930

7 years agoMerge pull request #1777 from zmousm/raddebug-dash-n
Alan DeKok [Tue, 11 Oct 2016 17:13:49 +0000 (13:13 -0400)]
Merge pull request #1777 from zmousm/raddebug-dash-n

Let raddebug also have the -n option

7 years agonote recent changes
Alan T. DeKok [Tue, 11 Oct 2016 17:12:04 +0000 (13:12 -0400)]
note recent changes

7 years agovps may be NULL. Fixes #1778
Alan T. DeKok [Tue, 11 Oct 2016 16:54:54 +0000 (12:54 -0400)]
vps may be NULL.  Fixes #1778

The VERIFY_LIST macro shouild be protected by an "if *vps" check.
It should also be run once all of the VPs have been added,
and not on every VP which is added.

7 years agoLet raddebug also have the -n option
Zenon Mousmoulas [Mon, 10 Oct 2016 05:20:00 +0000 (08:20 +0300)]
Let raddebug also have the -n option

7 years agoMerge pull request #1772 from zmousm/fix-deb-patch
Alan DeKok [Sat, 8 Oct 2016 13:39:33 +0000 (09:39 -0400)]
Merge pull request #1772 from zmousm/fix-deb-patch

Refresh debian/patches/radiusd-to-freeradius.diff

7 years agoMerge pull request #1775 from stapelberg/patch-1
Alan DeKok [Sat, 8 Oct 2016 13:29:30 +0000 (09:29 -0400)]
Merge pull request #1775 from stapelberg/patch-1

fix: macro `IR(hours|minutes|seconds)' not defined

7 years agofix: macro `IR(hours|minutes|seconds)' not defined
Michael Stapelberg [Sat, 8 Oct 2016 11:51:51 +0000 (13:51 +0200)]
fix: macro `IR(hours|minutes|seconds)' not defined

7 years agoRefresh debian/patches/radiusd-to-freeradius.diff
Zenon Mousmoulas [Sat, 8 Oct 2016 07:42:13 +0000 (10:42 +0300)]
Refresh debian/patches/radiusd-to-freeradius.diff

dpkg-source aborts due to missing initial spaces and fuzz in one
context line

7 years agoit's not a warning message
Alan T. DeKok [Wed, 5 Oct 2016 14:56:33 +0000 (10:56 -0400)]
it's not a warning message

7 years agofix warning messages for packet possibly truncated
Alan T. DeKok [Tue, 4 Oct 2016 18:43:28 +0000 (14:43 -0400)]
fix warning messages for packet possibly truncated

rely on the "encode" function to display warning messages.
And make the warning messages debug only

7 years agocheck num_rows before using them
Alan T. DeKok [Mon, 3 Oct 2016 15:05:08 +0000 (11:05 -0400)]
check num_rows before using them

7 years agoCheck for expiry only if the password was OK. Fixes #1762
Alan T. DeKok [Mon, 3 Oct 2016 13:22:22 +0000 (09:22 -0400)]
Check for expiry only if the password was OK.  Fixes #1762

7 years agonote recent changes
Alan T. DeKok [Mon, 3 Oct 2016 13:15:21 +0000 (09:15 -0400)]
note recent changes

7 years agoMerge pull request #1767 from djjudas21/patch-1
Alan DeKok [Mon, 3 Oct 2016 13:11:05 +0000 (09:11 -0400)]
Merge pull request #1767 from djjudas21/patch-1

Fix typo in %files section to avoid error building RPM

7 years agoFix typo in %files section to avoid error building RPM
Jonathan [Mon, 3 Oct 2016 10:42:06 +0000 (11:42 +0100)]
Fix typo in %files section to avoid error building RPM

File not found: /home/jg4461/rpmbuild/BUILDROOT/freeradius-3.0.12-2.el7.centos.x86_64/usr/share/man/man1/radcounter.1.gz

7 years agoMerge pull request #1763 from alanbuxey/patch-1
Arran Cudbard-Bell [Sat, 1 Oct 2016 12:05:11 +0000 (13:05 +0100)]
Merge pull request #1763 from alanbuxey/patch-1

another typo fix and capitalisations

7 years agoanother typo fix and capitalisations
Alan Buxey [Sat, 1 Oct 2016 11:46:02 +0000 (12:46 +0100)]
another typo fix and capitalisations

7 years agoupdate for 3.0.13
Alan T. DeKok [Fri, 30 Sep 2016 11:58:43 +0000 (07:58 -0400)]
update for 3.0.13

7 years agoadd "date" module
Alan T. DeKok [Fri, 30 Sep 2016 11:36:33 +0000 (07:36 -0400)]
add "date" module

7 years agobump for 3.0.13
Alan T. DeKok [Fri, 30 Sep 2016 11:36:50 +0000 (07:36 -0400)]
bump for 3.0.13

7 years agotypo release_3_0_12
Alan T. DeKok [Thu, 29 Sep 2016 15:19:48 +0000 (11:19 -0400)]
typo

7 years agonote recent changes.
Alan T. DeKok [Thu, 29 Sep 2016 14:55:38 +0000 (10:55 -0400)]
note recent changes.

7 years agoallow for old-style names, too
Alan T. DeKok [Thu, 29 Sep 2016 14:42:58 +0000 (10:42 -0400)]
allow for old-style names, too

7 years agosimplify debug messages
Alan T. DeKok [Thu, 29 Sep 2016 14:33:22 +0000 (10:33 -0400)]
simplify debug messages

we don't need 'request %u' in RDEBUG messages

7 years agomore &
Alan T. DeKok [Thu, 29 Sep 2016 14:25:15 +0000 (10:25 -0400)]
more &

7 years agoFix compile without ascend binary. fixes #1761
Alan T. DeKok [Wed, 28 Sep 2016 15:16:51 +0000 (11:16 -0400)]
Fix compile without ascend binary.  fixes #1761

7 years agoMerge pull request #1760 from jrouzierinverse/feature/eap-fast-3.0.x
Alan DeKok [Tue, 27 Sep 2016 19:52:30 +0000 (15:52 -0400)]
Merge pull request #1760 from jrouzierinverse/feature/eap-fast-3.0.x

Fix talloc parenting issue

7 years agoFix talloc parenting issue
James Rouzier [Tue, 27 Sep 2016 19:41:16 +0000 (15:41 -0400)]
Fix talloc parenting issue

7 years agonotes on AD
Alan T. DeKok [Tue, 27 Sep 2016 19:12:23 +0000 (15:12 -0400)]
notes on AD

7 years agobuild headers before scanning
Alan T. DeKok [Sun, 10 Jul 2016 18:03:18 +0000 (14:03 -0400)]
build headers before scanning

7 years agoMerge pull request #1759 from mcnewton/v3.0.x
Matthew Newton [Tue, 27 Sep 2016 11:43:09 +0000 (12:43 +0100)]
Merge pull request #1759 from mcnewton/v3.0.x

small dhcpclient man page tweaks

7 years agosmall dhcpclient man page tweaks
Matthew Newton [Tue, 27 Sep 2016 11:02:32 +0000 (12:02 +0100)]
small dhcpclient man page tweaks

7 years agoone more check for virtual servers
Alan T. DeKok [Mon, 26 Sep 2016 20:39:36 +0000 (16:39 -0400)]
one more check for virtual servers

7 years agoskip virtual servers in a pool
Alan T. DeKok [Mon, 26 Sep 2016 20:20:30 +0000 (16:20 -0400)]
skip virtual servers in a pool

7 years agoremove from proxy hash on ping timeout
Alan T. DeKok [Mon, 26 Sep 2016 20:16:49 +0000 (16:16 -0400)]
remove from proxy hash on ping timeout

7 years agoDon't ignore the fact we've hit vulnerable versions in previous checks
Arran Cudbard-Bell [Mon, 26 Sep 2016 15:47:51 +0000 (16:47 +0100)]
Don't ignore the fact we've hit vulnerable versions in previous checks

7 years agoreorder list
Alan T. DeKok [Mon, 26 Sep 2016 15:06:11 +0000 (11:06 -0400)]
reorder list

7 years agoone last check to narrow down the possibilities
Alan T. DeKok [Mon, 26 Sep 2016 15:00:33 +0000 (11:00 -0400)]
one last check to narrow down the possibilities

7 years agoMerge pull request #1758 from TheMysteriousX/v3.0.x
Arran Cudbard-Bell [Mon, 26 Sep 2016 14:55:28 +0000 (15:55 +0100)]
Merge pull request #1758 from TheMysteriousX/v3.0.x

Check the CVE ID, not the name

7 years agoAdd checks for Linux && OSX
Alan T. DeKok [Mon, 26 Sep 2016 14:54:33 +0000 (10:54 -0400)]
Add checks for Linux && OSX

7 years agofix typos
Alan T. DeKok [Mon, 26 Sep 2016 14:54:26 +0000 (10:54 -0400)]
fix typos

7 years agoCheck the CVE ID, not the name
Adam Bishop [Mon, 26 Sep 2016 14:52:02 +0000 (15:52 +0100)]
Check the CVE ID, not the name

7 years agonote recent changes
Alan T. DeKok [Mon, 26 Sep 2016 14:27:25 +0000 (10:27 -0400)]
note recent changes

7 years agoUse opendir(/proc/self/fd) when we don't have closefrom(). Fixes #1757
Alan T. DeKok [Mon, 26 Sep 2016 14:25:39 +0000 (10:25 -0400)]
Use opendir(/proc/self/fd) when we don't have closefrom().  Fixes #1757

7 years agoadded F_MAXFD
Alan T. DeKok [Mon, 26 Sep 2016 12:10:07 +0000 (08:10 -0400)]
added F_MAXFD

7 years agoadded F_CLOSEM, which might work, too
Alan T. DeKok [Mon, 26 Sep 2016 12:08:04 +0000 (08:08 -0400)]
added F_CLOSEM, which might work, too

7 years agoadd new man pages
Alan T. DeKok [Mon, 26 Sep 2016 11:53:14 +0000 (07:53 -0400)]
add new man pages

7 years agoadd man page for dhcpclient
Alan Buxey [Mon, 19 Sep 2016 10:39:02 +0000 (11:39 +0100)]
add man page for dhcpclient

7 years agoadd man page for rad_counter
Alan Buxey [Mon, 19 Sep 2016 10:39:54 +0000 (11:39 +0100)]
add man page for rad_counter

7 years agoupdate for new CVEs
Alan T. DeKok [Mon, 26 Sep 2016 11:41:49 +0000 (07:41 -0400)]
update for new CVEs

7 years agoallow acknowledged CVEs
Alan T. DeKok [Mon, 26 Sep 2016 11:40:04 +0000 (07:40 -0400)]
allow acknowledged CVEs

7 years agoDon't open new connections when exiting. Addresses #1604.
Alan T. DeKok [Sun, 25 Sep 2016 15:06:11 +0000 (11:06 -0400)]
Don't open new connections when exiting.  Addresses #1604.

When we a get a SIGTERM or SIGQUIT, mark "exiting", and stop
returning new connections.  Also, don't allow reconnection of
existing connections.  This should help with CTRL-C.

7 years agoparent attributes from the right place.
Alan T. DeKok [Fri, 23 Sep 2016 19:41:08 +0000 (15:41 -0400)]
parent attributes from the right place.

7 years agoenable "date" by default
Alan T. DeKok [Fri, 23 Sep 2016 18:01:08 +0000 (14:01 -0400)]
enable "date" by default

7 years agonote recent changes
Alan T. DeKok [Fri, 23 Sep 2016 13:56:28 +0000 (09:56 -0400)]
note recent changes

7 years agoclean up OCSP / verify routines
Alan T. DeKok [Fri, 23 Sep 2016 13:55:33 +0000 (09:55 -0400)]
clean up OCSP / verify routines

7 years agoMerge pull request #1755 from spaetow/patch-3
Alan DeKok [Thu, 22 Sep 2016 23:34:47 +0000 (19:34 -0400)]
Merge pull request #1755 from spaetow/patch-3

Adding ABFAB-specific things to last 3.0.x release.

7 years agominor update to rejection message
Alan T. DeKok [Thu, 22 Sep 2016 20:07:24 +0000 (16:07 -0400)]
minor update to rejection message

7 years agoinner tunnel of EAP-FAST cannot be proxied
Alan T. DeKok [Thu, 22 Sep 2016 20:06:54 +0000 (16:06 -0400)]
inner tunnel of EAP-FAST cannot be proxied

7 years agoFix tls_global_version_check() function and message
Alan T. DeKok [Thu, 22 Sep 2016 15:59:08 +0000 (11:59 -0400)]
Fix tls_global_version_check() function and message

there is now more than one vulnerability in OpenSSL.

7 years agosimplify code
Alan T. DeKok [Thu, 22 Sep 2016 15:55:14 +0000 (11:55 -0400)]
simplify code