freeradius.git
8 years agoUpdate ChangeLog
Arran Cudbard-Bell [Fri, 9 Oct 2015 21:11:47 +0000 (17:11 -0400)]
Update ChangeLog

8 years agoIgnore callbacks for pseudo content types. Fixes EAP-TTLS MSCHAPv2 (and possibly...
Arran Cudbard-Bell [Fri, 9 Oct 2015 20:32:45 +0000 (16:32 -0400)]
Ignore callbacks for pseudo content types.  Fixes EAP-TTLS MSCHAPv2 (and possibly others) with OpenSSL 1.0.2

8 years agoMake it clear whether we're sending or receiving ssl data
Arran Cudbard-Bell [Fri, 9 Oct 2015 20:32:12 +0000 (16:32 -0400)]
Make it clear whether we're sending or receiving ssl data

8 years agoFormatting
Arran Cudbard-Bell [Fri, 9 Oct 2015 20:31:56 +0000 (16:31 -0400)]
Formatting

8 years agoadd const
Alan T. DeKok [Fri, 9 Oct 2015 13:38:56 +0000 (09:38 -0400)]
add const

8 years agoEnabling global logging and not doing logging is surprising
Alan T. DeKok [Fri, 9 Oct 2015 13:01:33 +0000 (09:01 -0400)]
Enabling global logging and not doing logging is surprising

8 years agoMerge pull request #1316 from jpereira/debug/map
Arran Cudbard-Bell [Fri, 9 Oct 2015 00:35:53 +0000 (20:35 -0400)]
Merge pull request #1316 from jpereira/debug/map

Adding #ifdef DEBUG_MAP for map_dump()

8 years agoMerge pull request #1318 from jpereira/bug/nas_type
Arran Cudbard-Bell [Thu, 8 Oct 2015 23:07:34 +0000 (19:07 -0400)]
Merge pull request #1318 from jpereira/bug/nas_type

Fix issue where field nas_type is not accessible via %{client:} xlat, for clients loaded from SQL

8 years agoFix issue where field nas_type would not be accessible via
Jorge Pereira [Thu, 8 Oct 2015 22:39:48 +0000 (19:39 -0300)]
Fix issue where field nas_type would not be accessible via
the %{client:} xlat, for clients loaded from SQL.

8 years agoAdding #ifdef DEBUG_MAP for map_dump()
Jorge Pereira [Thu, 8 Oct 2015 17:20:47 +0000 (14:20 -0300)]
Adding #ifdef DEBUG_MAP for map_dump()

8 years agoCID #1325789
Arran Cudbard-Bell [Wed, 7 Oct 2015 23:16:17 +0000 (19:16 -0400)]
CID #1325789

8 years agoAdd Arista-User-Priv-Level, Arista-User-Role and Arista-CVP-Role
Hua Zhong [Thu, 8 Oct 2015 06:42:21 +0000 (23:42 -0700)]
Add Arista-User-Priv-Level, Arista-User-Role and Arista-CVP-Role

8 years agoFix tests on macs running in rootless mode
Arran Cudbard-Bell [Wed, 7 Oct 2015 02:34:12 +0000 (22:34 -0400)]
Fix tests on macs running in rootless mode

Die Apple die...

8 years agoFormatting
Arran Cudbard-Bell [Wed, 7 Oct 2015 00:39:38 +0000 (20:39 -0400)]
Formatting

8 years agoMerge pull request #1310 from mcnewton/deb30a
Alan DeKok [Wed, 7 Oct 2015 17:13:52 +0000 (13:13 -0400)]
Merge pull request #1310 from mcnewton/deb30a

update debian radius user to freerad for control socket config

8 years agoAllow virtual home servers to process EAP. Fixes #1311
Alan T. DeKok [Wed, 7 Oct 2015 14:58:14 +0000 (10:58 -0400)]
Allow virtual home servers to process EAP.  Fixes #1311

8 years agoFix example
Alan T. DeKok [Wed, 7 Oct 2015 14:52:45 +0000 (10:52 -0400)]
Fix example

8 years agoAdd "verify" target for laziness
Alan T. DeKok [Wed, 7 Oct 2015 14:27:36 +0000 (10:27 -0400)]
Add "verify" target for laziness

8 years agoupdate debian radius user to freerad for control socket config
Matthew Newton [Wed, 7 Oct 2015 11:03:34 +0000 (12:03 +0100)]
update debian radius user to freerad for control socket config

8 years agoMerge pull request #1307 from jpereira/feature/policy-proxy-request
Arran Cudbard-Bell [Tue, 6 Oct 2015 22:34:12 +0000 (18:34 -0400)]
Merge pull request #1307 from jpereira/feature/policy-proxy-request

Adding new policy 'debug_proxy_request'

8 years agoAdding new policy 'debug_proxy_request'
Jorge Pereira [Tue, 6 Oct 2015 22:30:34 +0000 (19:30 -0300)]
Adding new policy 'debug_proxy_request'

8 years agoname2 might not exist. Don't use it for debugging if so
Alan T. DeKok [Tue, 6 Oct 2015 18:05:54 +0000 (14:05 -0400)]
name2 might not exist.  Don't use it for debugging if so

8 years agoMerge pull request #1305 from mcnewton/build30x
Arran Cudbard-Bell [Tue, 6 Oct 2015 13:00:06 +0000 (09:00 -0400)]
Merge pull request #1305 from mcnewton/build30x

always apply debian patches even when only building arch binaries

8 years agoalways apply debian patches even when only building arch binaries
Matthew Newton [Tue, 6 Oct 2015 12:50:58 +0000 (13:50 +0100)]
always apply debian patches even when only building arch binaries

bug found by Fajar A. Nugraha

8 years agoBump for 3.0.11
Alan T. DeKok [Mon, 5 Oct 2015 19:02:17 +0000 (15:02 -0400)]
Bump for 3.0.11

8 years agoNote recent changes release_3_0_10
Alan T. DeKok [Mon, 5 Oct 2015 18:22:28 +0000 (14:22 -0400)]
Note recent changes

8 years agoUpdate ChangeLog
Arran Cudbard-Bell [Mon, 5 Oct 2015 16:06:47 +0000 (12:06 -0400)]
Update ChangeLog

8 years agoUse correct variable name
Alan T. DeKok [Mon, 5 Oct 2015 14:51:10 +0000 (10:51 -0400)]
Use correct variable name

8 years agoCheck for smb_ctrl
Alan T. DeKok [Mon, 5 Oct 2015 13:30:16 +0000 (09:30 -0400)]
Check for smb_ctrl

8 years agoFix old compiler warnings
Alan T. DeKok [Mon, 5 Oct 2015 13:27:59 +0000 (09:27 -0400)]
Fix old compiler warnings

8 years agoCorrect MSCHAP-Error format for MSCAHPv1
Arran Cudbard-Bell [Mon, 5 Oct 2015 05:56:55 +0000 (01:56 -0400)]
Correct MSCHAP-Error format for MSCAHPv1

Always log meaningful messages for all errors

8 years agoAlways include V and M in failure messages
Arran Cudbard-Bell [Sun, 4 Oct 2015 22:56:29 +0000 (18:56 -0400)]
Always include V and M in failure messages

8 years agoFormatting
Arran Cudbard-Bell [Sun, 4 Oct 2015 22:55:52 +0000 (18:55 -0400)]
Formatting

8 years agoNAS-Port should be 32bits
Arran Cudbard-Bell [Mon, 5 Oct 2015 14:16:45 +0000 (10:16 -0400)]
NAS-Port should be 32bits

8 years agoUpdate ChangeLog
Arran Cudbard-Bell [Sun, 4 Oct 2015 22:59:29 +0000 (18:59 -0400)]
Update ChangeLog

8 years agoFix off by one error in rlm_mschap that sometimes meant correctly formatted MS-CHAP...
Arran Cudbard-Bell [Sun, 4 Oct 2015 22:41:38 +0000 (18:41 -0400)]
Fix off by one error in rlm_mschap that sometimes meant correctly formatted MS-CHAP-Error messages were not returned

(sometimes is that the behaviour depended on an uninitialised byte)

8 years agoMerge pull request #1297 from jpereira/fix/policy1
Alan DeKok [Sun, 4 Oct 2015 14:09:00 +0000 (10:09 -0400)]
Merge pull request #1297 from jpereira/fix/policy1

Adding 'coa' list in 'debug_all' policy

8 years agoAdding 'coa' list in 'debug_all' policy
Jorge Pereira [Sun, 4 Oct 2015 07:15:41 +0000 (04:15 -0300)]
Adding 'coa' list in 'debug_all' policy

8 years agoCheck for, and fix, misconfigurations. Fixes #1292
Alan T. DeKok [Sat, 3 Oct 2015 13:10:55 +0000 (09:10 -0400)]
Check for, and fix, misconfigurations.  Fixes #1292

If there's no group membership query, don't do group handling.
And warn the user that the configuration is broken.

8 years agoCheck if we got group_da
Arran Cudbard-Bell [Fri, 2 Oct 2015 17:56:37 +0000 (13:56 -0400)]
Check if we got group_da

8 years agoMerge pull request #1294 from mcnewton/lintian30x
Alan DeKok [Fri, 2 Oct 2015 16:50:33 +0000 (12:50 -0400)]
Merge pull request #1294 from mcnewton/lintian30x

tidy up a load of lintian warnings

8 years agotidy up a load of lintian warnings
Matthew Newton [Fri, 2 Oct 2015 15:34:12 +0000 (16:34 +0100)]
tidy up a load of lintian warnings

8 years agoMerge pull request #1287 from qnet-herwin/lintian
Arran Cudbard-Bell [Fri, 2 Oct 2015 01:45:41 +0000 (21:45 -0400)]
Merge pull request #1287 from qnet-herwin/lintian

Some more debian fixes

8 years agoMerge pull request #1290 from mcnewton/v3.0.x
Arran Cudbard-Bell [Thu, 1 Oct 2015 23:36:22 +0000 (19:36 -0400)]
Merge pull request #1290 from mcnewton/v3.0.x

revert recent dh_testroot change

8 years agorevert recent dh_testroot change
Matthew Newton [Thu, 1 Oct 2015 22:32:34 +0000 (23:32 +0100)]
revert recent dh_testroot change

Successfully enforced fakeroot in normal build, but then annoyingly fails in
sbuild which calls each build target separately and doesn't use fakeroot for
the build target.

8 years agoSync debian packaging changes from v3.1.x
Arran Cudbard-Bell [Thu, 1 Oct 2015 21:33:59 +0000 (17:33 -0400)]
Sync debian packaging changes from v3.1.x

8 years agoUpdates. Addresses #1288
Alan T. DeKok [Thu, 1 Oct 2015 18:52:19 +0000 (14:52 -0400)]
Updates.  Addresses #1288

8 years agoUse quotes. Addresses #1288
Alan T. DeKok [Thu, 1 Oct 2015 18:51:11 +0000 (14:51 -0400)]
Use quotes.  Addresses #1288

8 years agoFixed copy-paste error for new debian packages
Herwin Weststrate [Thu, 1 Oct 2015 17:16:43 +0000 (19:16 +0200)]
Fixed copy-paste error for new debian packages

8 years agoAdded new packages to gitignore in debian folder
Herwin Weststrate [Thu, 1 Oct 2015 17:15:21 +0000 (19:15 +0200)]
Added new packages to gitignore in debian folder

8 years agoMerge pull request #1285 from mcnewton/debtidy
Alan DeKok [Thu, 1 Oct 2015 15:19:16 +0000 (11:19 -0400)]
Merge pull request #1285 from mcnewton/debtidy

debian packaging updates

8 years agoMerge pull request #1270 from mcnewton/v3.0.x
Alan DeKok [Thu, 1 Oct 2015 15:17:37 +0000 (11:17 -0400)]
Merge pull request #1270 from mcnewton/v3.0.x

debian package fails trying to build sqlhpwippool

8 years agodebian package fails when not building with fakeroot
Matthew Newton [Thu, 24 Sep 2015 13:16:50 +0000 (14:16 +0100)]
debian package fails when not building with fakeroot

8 years agomissing space
Matthew Newton [Thu, 1 Oct 2015 01:01:17 +0000 (02:01 +0100)]
missing space

8 years agoadd freeradius-yubikey debian package
Matthew Newton [Thu, 1 Oct 2015 00:58:40 +0000 (01:58 +0100)]
add freeradius-yubikey debian package

also include libykclient-dev to build that functionality as well

8 years agoupdate debian freeradius package info
Matthew Newton [Thu, 1 Oct 2015 00:36:07 +0000 (01:36 +0100)]
update debian freeradius package info

adds snmp as a suggests as the build states snmpget or snmpwalk may
be required for checkrad

8 years agotry harder to find isql.h
Matthew Newton [Thu, 1 Oct 2015 00:14:24 +0000 (01:14 +0100)]
try harder to find isql.h

location has moved between debian wheezy and jessie

8 years agoadd memcached and redis debian packages
Matthew Newton [Wed, 30 Sep 2015 22:09:17 +0000 (23:09 +0100)]
add memcached and redis debian packages

8 years agofreeradius-config depends on openssl
Matthew Newton [Wed, 30 Sep 2015 22:03:08 +0000 (23:03 +0100)]
freeradius-config depends on openssl

If you try and install it on its own for some reason then it barfs
on gendh if openssl isn't there.

8 years agoMerge pull request #1283 from mcnewton/deb1
Arran Cudbard-Bell [Wed, 30 Sep 2015 21:22:16 +0000 (17:22 -0400)]
Merge pull request #1283 from mcnewton/deb1

refresh quilt patches

8 years agorefresh quilt patches
Matthew Newton [Wed, 30 Sep 2015 21:07:12 +0000 (22:07 +0100)]
refresh quilt patches

8 years agoMerge pull request #1282 from mcnewton/debjson
Arran Cudbard-Bell [Wed, 30 Sep 2015 20:24:43 +0000 (16:24 -0400)]
Merge pull request #1282 from mcnewton/debjson

swap order of json libraries in debian package

8 years agoswap order of json libraries in debian package
Matthew Newton [Wed, 30 Sep 2015 19:57:31 +0000 (20:57 +0100)]
swap order of json libraries in debian package

Building using sbuild for debian wheezy fails because libjson-c2 does not exist
in wheezy and apt dependency checking seems to short circuit the or.

Swapping around means building works on wheezy sbuild. It doesn't affect
jessie/stretch/sid because libjson0 exists as a transitional package just
pulling in libjson-c2 anyway.

8 years agoMerge pull request #1281 from alanbuxey/patch-11
Alan DeKok [Wed, 30 Sep 2015 19:34:03 +0000 (15:34 -0400)]
Merge pull request #1281 from alanbuxey/patch-11

Update ChangeLog

8 years agoUpdate ChangeLog
Alan Buxey [Wed, 30 Sep 2015 18:41:54 +0000 (19:41 +0100)]
Update ChangeLog

8 years agoMerge pull request #1279 from mcnewton/ch30x
Arran Cudbard-Bell [Wed, 30 Sep 2015 11:39:21 +0000 (07:39 -0400)]
Merge pull request #1279 from mcnewton/ch30x

update recent changes

8 years agoupdate recent changes
Matthew Newton [Wed, 30 Sep 2015 10:00:05 +0000 (11:00 +0100)]
update recent changes

8 years agoclarify other message
Alan T. DeKok [Tue, 29 Sep 2015 15:03:37 +0000 (11:03 -0400)]
clarify other message

8 years agoMerge pull request #1278 from mcnewton/updatehelp
Alan DeKok [Tue, 29 Sep 2015 15:02:35 +0000 (11:02 -0400)]
Merge pull request #1278 from mcnewton/updatehelp

update help to show equivalents for some options

8 years agoupdate help to show equivalents for some options
Matthew Newton [Tue, 29 Sep 2015 14:39:38 +0000 (15:39 +0100)]
update help to show equivalents for some options

8 years agonote recent changes
Alan T. DeKok [Mon, 28 Sep 2015 14:39:46 +0000 (10:39 -0400)]
note recent changes

8 years agoDon't go to next sibling on empty case. Fixes #1274
Alan T. DeKok [Mon, 28 Sep 2015 13:29:13 +0000 (09:29 -0400)]
Don't go to next sibling on empty case.  Fixes #1274

8 years agoFix checks for EVS
Alan T. DeKok [Mon, 28 Sep 2015 12:28:56 +0000 (08:28 -0400)]
Fix checks for EVS

8 years agoToo many spaces
Arran Cudbard-Bell [Sat, 26 Sep 2015 03:01:59 +0000 (23:01 -0400)]
Too many spaces

8 years agoDifferent bits needed for alternation and consumed
Arran Cudbard-Bell [Sat, 26 Sep 2015 03:01:04 +0000 (23:01 -0400)]
Different bits needed for alternation and consumed

8 years agoShow who is sending the wrong packets
Jorge Pereira [Sat, 26 Sep 2015 02:16:51 +0000 (23:16 -0300)]
Show who is sending the wrong packets

8 years agonote recent changes
Alan T. DeKok [Fri, 25 Sep 2015 13:49:10 +0000 (09:49 -0400)]
note recent changes

8 years agoRevert "Don't do tlv checks on 'internal' attributes". Fixes #1272
Alan T. DeKok [Fri, 25 Sep 2015 11:08:28 +0000 (07:08 -0400)]
Revert "Don't do tlv checks on 'internal' attributes". Fixes #1272

This reverts commit e040518aa15a29d3fbb6fafb764080997a9c9a71.

8 years agoDon't do tlv checks on 'internal' attributes
Alan T. DeKok [Fri, 25 Sep 2015 01:57:05 +0000 (21:57 -0400)]
Don't do tlv checks on 'internal' attributes

8 years agoCan't use sub-TLVs if the parent isn't a TLV
Alan T. DeKok [Fri, 25 Sep 2015 01:25:41 +0000 (21:25 -0400)]
Can't use sub-TLVs if the parent isn't a TLV

8 years agobetter implementation of dict_parent
Alan T. DeKok [Fri, 25 Sep 2015 01:09:17 +0000 (21:09 -0400)]
better implementation of dict_parent

8 years agoInclude session-state in rlm_perl
Herwin Weststrate [Mon, 21 Sep 2015 10:42:18 +0000 (12:42 +0200)]
Include session-state in rlm_perl

Via the new variable %RAD_STATE.

8 years agoIncrease default query length to 2048.
Alan T. DeKok [Thu, 24 Sep 2015 14:34:58 +0000 (10:34 -0400)]
Increase default query length to 2048.

In 3.1, this restriction should be removed entirely

8 years agoDon't print secrets for old realms. Fixes #1267
Alan T. DeKok [Thu, 24 Sep 2015 13:40:36 +0000 (09:40 -0400)]
Don't print secrets for old realms.  Fixes #1267

8 years agoDst seems to be INADDR_ANY in some cases... Weird.
Arran Cudbard-Bell [Wed, 23 Sep 2015 20:42:00 +0000 (16:42 -0400)]
Dst seems to be INADDR_ANY in some cases... Weird.

8 years agoCorrect precedence for determining src ip of DHCP packet
Arran Cudbard-Bell [Wed, 23 Sep 2015 20:18:59 +0000 (16:18 -0400)]
Correct precedence for determining src ip of DHCP packet

8 years agoMore fixes for virtual attributes
Alan T. DeKok [Wed, 23 Sep 2015 18:23:04 +0000 (14:23 -0400)]
More fixes for virtual attributes

8 years agoFix typo
Alan T. DeKok [Wed, 23 Sep 2015 17:48:41 +0000 (13:48 -0400)]
Fix typo

8 years agoAllow checks for existence of virtual attrs. Fixes #1265
Alan T. DeKok [Wed, 23 Sep 2015 17:36:54 +0000 (13:36 -0400)]
Allow checks for existence of virtual attrs.  Fixes #1265

8 years agochange minimum pool size to be 2K
Alan T. DeKok [Wed, 23 Sep 2015 16:18:44 +0000 (12:18 -0400)]
change minimum pool size to be 2K

8 years agoFix crash in rlm_ldap if server goes away whilst processing profiles
Arran Cudbard-Bell [Tue, 22 Sep 2015 18:38:38 +0000 (19:38 +0100)]
Fix crash in rlm_ldap if server goes away whilst processing profiles

8 years agoInitial stab at machine-readable copyright file
Christopher Hoskin [Mon, 21 Sep 2015 19:57:58 +0000 (20:57 +0100)]
Initial stab at machine-readable copyright file

8 years agoCorrect minor issues with package descriptions
Christopher Hoskin [Sat, 19 Sep 2015 12:22:07 +0000 (13:22 +0100)]
Correct minor issues with package descriptions

8 years agoUse buildflags to enable hardening (https://wiki.debian.org/Hardening)
Christopher Hoskin [Sat, 19 Sep 2015 12:19:39 +0000 (13:19 +0100)]
Use buildflags to enable hardening (https://wiki.debian.org/Hardening)

8 years agoUpdated dh compat to 9
Christopher Hoskin [Sat, 19 Sep 2015 08:33:08 +0000 (09:33 +0100)]
Updated dh compat to 9
Updated standards to 3.9.6
Removed duplicate entry from debian/control

8 years agoPut state name into request->component
Alan T. DeKok [Tue, 22 Sep 2015 13:01:01 +0000 (09:01 -0400)]
Put state name into request->component

It makes the debug output a little easier to read, while still
allowing for complaint messages to show the state

8 years agoMerge pull request #1262 from jpereira/fix/better-msg1
Alan DeKok [Tue, 22 Sep 2015 12:34:18 +0000 (08:34 -0400)]
Merge pull request #1262 from jpereira/fix/better-msg1

Show the name of virtual-server

8 years agoShow the name of virtual-server
Jorge Pereira [Tue, 22 Sep 2015 01:08:33 +0000 (22:08 -0300)]
Show the name of virtual-server

8 years agoMerge pull request #1259 from jpereira/fix/realm1
Arran Cudbard-Bell [Mon, 21 Sep 2015 22:25:29 +0000 (23:25 +0100)]
Merge pull request #1259 from jpereira/fix/realm1

Fix single space in report message

8 years agoFix single space in report message
Jorge Pereira [Mon, 21 Sep 2015 18:54:20 +0000 (15:54 -0300)]
Fix single space in report message