freeradius.git
10 years agoradius.h: chbind_response code is 1147 not 1140
Sam Hartman [Tue, 24 Sep 2013 17:40:32 +0000 (13:40 -0400)]
radius.h: chbind_response code is 1147 not 1140

10 years agoUse the default request if there's no "." in the reference.
Alan T. DeKok [Wed, 4 Sep 2013 14:41:52 +0000 (10:41 -0400)]
Use the default request if there's no "." in the reference.

update outer.reply {
User-Name := foo
}

ends up parsing "User-Name" with a default list of "outer",
BUT because "User-Name" has no ".", the old code would return
a hard-coded CURRENT
(cherry picked from commit 6c11dbdb704f9a6bc5cb2701b4ac974b162a260e)

10 years agoeap channel binding: update for talloc changes
Sam Hartman [Thu, 27 Jun 2013 13:44:10 +0000 (09:44 -0400)]
eap channel binding: update  for talloc changes

* paircreate gains context
* pairmake gains context
* pairmoveto ->pairfilter

10 years agotls: update psk xlat call
Sam Hartman [Thu, 27 Jun 2013 13:42:22 +0000 (09:42 -0400)]
tls: update psk xlat call

Ilclude talloc context in xlat and setup of psk-user-identity in request.

10 years agofix bugs in psk_server_callback
Sam Hartman [Thu, 11 Apr 2013 19:25:38 +0000 (15:25 -0400)]
fix bugs in psk_server_callback

10 years agoSample trust_router config
Sam Hartman [Thu, 11 Apr 2013 09:25:14 +0000 (05:25 -0400)]
Sample trust_router config

10 years agoAdd trust router library to rlm_realm
Margaret Wasserman [Wed, 10 Apr 2013 22:56:43 +0000 (18:56 -0400)]
Add trust router library to rlm_realm

10 years agoRemove hidden structs
Sam Hartman [Wed, 10 Apr 2013 21:49:04 +0000 (17:49 -0400)]
Remove hidden structs

10 years agoTrust router response handler
Sam Hartman [Wed, 10 Apr 2013 20:27:15 +0000 (16:27 -0400)]
Trust router response handler

10 years agoexpose tls_init_ctx
Sam Hartman [Wed, 10 Apr 2013 20:26:43 +0000 (16:26 -0400)]
expose tls_init_ctx

10 years agoInitial tr integration code, compiles but not complete.
Margaret Wasserman [Wed, 10 Apr 2013 20:17:42 +0000 (16:17 -0400)]
Initial tr integration code, compiles but not complete.

10 years agoFix typo
Sam Hartman [Fri, 5 Apr 2013 17:45:41 +0000 (13:45 -0400)]
Fix typo

10 years agohex for nulls and lulz
Sam Hartman [Thu, 4 Apr 2013 09:42:58 +0000 (05:42 -0400)]
hex for nulls and lulz

10 years agotls: permit psks to be configured for clients
Sam Hartman [Wed, 3 Apr 2013 19:14:23 +0000 (15:14 -0400)]
tls: permit psks to be configured for clients

10 years agofixups
Sam Hartman [Tue, 2 Apr 2013 18:11:33 +0000 (18:11 +0000)]
fixups

10 years agopsk: enable server callback always
Sam Hartman [Wed, 3 Apr 2013 18:23:37 +0000 (14:23 -0400)]
psk: enable server callback always

10 years agotls: server stuff
Sam Hartman [Tue, 2 Apr 2013 16:59:01 +0000 (12:59 -0400)]
tls: server stuff

10 years agottls: return channel bindings on half round trip success
Sam Hartman [Mon, 25 Mar 2013 23:41:44 +0000 (19:41 -0400)]
ttls: return channel bindings on half round trip success

If we get a channel binding request at the same time we'd like to
return an access accept, return a challenge instead.

10 years agochbind: update length calculation
Sam Hartman [Mon, 25 Mar 2013 13:49:23 +0000 (09:49 -0400)]
chbind: update length calculation

10 years agochbind: logic error oops
Sam Hartman [Sun, 24 Mar 2013 20:20:03 +0000 (16:20 -0400)]
chbind: logic error oops

10 years agoupdate dictionaries with ABFAB attributes
Sam Hartman [Wed, 20 Mar 2013 01:39:31 +0000 (21:39 -0400)]
update dictionaries with ABFAB attributes

10 years agoupdate usage of pairmoveto
Sam Hartman [Wed, 6 Mar 2013 14:00:13 +0000 (09:00 -0500)]
update usage of pairmoveto

10 years agoUpdate rlm_eap channel binding for new apis
Sam Hartman [Wed, 6 Mar 2013 01:43:38 +0000 (20:43 -0500)]
Update rlm_eap channel binding for new apis

10 years agottls chbind: update VSA to use
Sam Hartman [Sun, 5 Feb 2012 22:40:56 +0000 (17:40 -0500)]
ttls chbind: update VSA to use

Unfortunately 134 was used by microsoft groups.

10 years agomake eap channel bindings functional (at least with with ttls-mschap)
Kevin [Sun, 5 Feb 2012 20:09:17 +0000 (15:09 -0500)]
make eap channel bindings functional (at least with with ttls-mschap)

10 years agobugfix for loop
Kevin [Sat, 4 Feb 2012 23:48:30 +0000 (18:48 -0500)]
bugfix for loop

10 years agoeap channel binding fixes
Kevin [Sat, 4 Feb 2012 22:07:23 +0000 (17:07 -0500)]
eap channel binding fixes

10 years agorlm_eap: add eap_chbind.c to build
Sam Hartman [Sat, 4 Feb 2012 02:20:09 +0000 (21:20 -0500)]
rlm_eap: add eap_chbind.c to build

10 years agorlm_eap: fix channel binding errors
Sam Hartman [Sat, 4 Feb 2012 01:30:33 +0000 (20:30 -0500)]
rlm_eap: fix channel binding errors

Fix logic and other erros in initial channel binding implementation

10 years agoInitial code for EAP Channel Binding support.
Margaret Wasserman [Fri, 3 Feb 2012 21:59:23 +0000 (16:59 -0500)]
Initial code for EAP Channel Binding support.

10 years agochbind: sample virtual server
Sam Hartman [Fri, 3 Feb 2012 19:09:23 +0000 (14:09 -0500)]
chbind: sample virtual server

this is a sample channel binding virtual server for
draft-ietf-abfab-gss-eap.  It's not complete but is intended to be
sufficient to start testing.

10 years agoEap channel binding support code
Kevin [Fri, 3 Feb 2012 13:15:10 +0000 (08:15 -0500)]
Eap channel binding support code

10 years agoAdded attribute and values for EAP channel binding response codes.
Margaret Wasserman [Fri, 3 Feb 2012 02:45:31 +0000 (21:45 -0500)]
Added attribute and values for EAP channel binding response codes.

10 years agoSkeleton of trust router integration
Sam Hartman [Fri, 4 Jan 2013 02:07:48 +0000 (21:07 -0500)]
Skeleton of trust router integration

Functions to convert a TR response into freeradius structures and add
a realm.

10 years agorealms_realm_add
Sam Hartman [Thu, 29 Nov 2012 19:30:07 +0000 (14:30 -0500)]
realms_realm_add

Expose an interface for adding a realm.

10 years agorealms_pool_add
Sam Hartman [Thu, 29 Nov 2012 16:57:34 +0000 (11:57 -0500)]
realms_pool_add

Implement function to add a pool exposed beyond realms.c

10 years agoExpose home_server addition
Sam Hartman [Wed, 28 Nov 2012 21:36:23 +0000 (16:36 -0500)]
Expose home_server addition

Split the code to add home servers to the trees and validate them from
config section parsing code.  The split code does not handle locking
yet.

10 years agoInstalled links depend on the installation dir. Closes #360
Alan T. DeKok [Thu, 11 Jul 2013 12:05:44 +0000 (14:05 +0200)]
Installed links depend on the installation dir.  Closes #360

Through the simple expedient of having the rules for the links
active ONLY when the directory doesn't exist.  If the directory
exists, the rules aren't active, and no links are created

10 years agoDon't echo if we do nothing
Alan T. DeKok [Thu, 11 Jul 2013 12:05:25 +0000 (14:05 +0200)]
Don't echo if we do nothing

10 years agoRe-enable [n] [#] and [*]. Closes #354.
Alan T. DeKok [Thu, 11 Jul 2013 07:37:30 +0000 (09:37 +0200)]
Re-enable [n] [#] and [*].  Closes #354.

This code was deleted during the change to cursors.

10 years agoBuffer may be NULL. Closes #358
Alan T. DeKok [Thu, 11 Jul 2013 07:02:29 +0000 (09:02 +0200)]
Buffer may be NULL.  Closes #358

10 years agoRestructure map2request and dependencies to return a status code instead of VALUE_PAIRs
Arran Cudbard-Bell [Wed, 10 Jul 2013 22:44:18 +0000 (23:44 +0100)]
Restructure map2request and dependencies to return a status code instead of VALUE_PAIRs

10 years agoRemove invalid assert, this could fail for VALUE_PAIR producing execs
Arran Cudbard-Bell [Wed, 10 Jul 2013 18:16:08 +0000 (19:16 +0100)]
Remove invalid assert, this could fail for VALUE_PAIR producing execs

10 years agoSet map operator on copied filtered attributes
Arran Cudbard-Bell [Wed, 10 Jul 2013 18:14:54 +0000 (19:14 +0100)]
Set map operator on copied filtered attributes

10 years ago-lpcreposix must be listed in linker arguments before any other libraries to avoid...
Arran Cudbard-Bell [Wed, 10 Jul 2013 18:02:51 +0000 (19:02 +0100)]
-lpcreposix must be listed in linker arguments before any other libraries to avoid picking up posix regex symbols. Fixes #357

On my system OSX 10.8.4 this resulted in a SEGV in regncomp.

10 years agopcreposix manual says both -lpcre and -lpcreposix need to be passed
Arran Cudbard-Bell [Wed, 10 Jul 2013 17:43:27 +0000 (18:43 +0100)]
pcreposix manual says both -lpcre and -lpcreposix need to be passed

10 years agoFix messed up macro
Arran Cudbard-Bell [Wed, 10 Jul 2013 16:55:32 +0000 (17:55 +0100)]
Fix messed up macro

10 years agoAlways set command to NULL after calling ct_cancel
Arran Cudbard-Bell [Wed, 10 Jul 2013 16:50:19 +0000 (17:50 +0100)]
Always set command to NULL after calling ct_cancel

10 years agoIf we know the destination is a list, copy all instances of the source attribute
Arran Cudbard-Bell [Wed, 10 Jul 2013 14:38:11 +0000 (15:38 +0100)]
If we know the destination is a list, copy all instances of the source attribute

10 years agoCurrently not finding an attribute causes an abort of the update section
Arran Cudbard-Bell [Wed, 10 Jul 2013 14:33:07 +0000 (15:33 +0100)]
Currently not finding an attribute causes an abort of the update section

10 years agoFix exec support in update sections. Fixes #355
Arran Cudbard-Bell [Wed, 10 Jul 2013 14:02:03 +0000 (15:02 +0100)]
Fix exec support in update sections. Fixes #355

10 years agoFixes #356
Arran Cudbard-Bell [Wed, 10 Jul 2013 13:59:04 +0000 (14:59 +0100)]
Fixes #356

10 years agoMissed colon
Arran Cudbard-Bell [Wed, 10 Jul 2013 13:57:32 +0000 (14:57 +0100)]
Missed colon

10 years agoEverywhere else just uses <core>
Arran Cudbard-Bell [Wed, 10 Jul 2013 13:57:00 +0000 (14:57 +0100)]
Everywhere else just uses <core>

10 years agoDisable recurssion for nested attributes until the server actually supports them
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:44:06 +0000 (11:44 +0100)]
Disable recurssion for nested attributes until the server actually supports them

10 years agoShouldn't allocate in the NULL context
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:39:42 +0000 (11:39 +0100)]
Shouldn't allocate in the NULL context

10 years agoDie bubble die (radsniff)
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:27:29 +0000 (11:27 +0100)]
Die bubble die (radsniff)

10 years agoFix debug output alignment in radsniff
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:24:59 +0000 (11:24 +0100)]
Fix debug output alignment in radsniff

10 years agoFix double quoted VALUE_PAIR definitions
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:12:30 +0000 (11:12 +0100)]
Fix double quoted VALUE_PAIR definitions

10 years agoRevert "Crappy hack for dependency issues"
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:03:27 +0000 (11:03 +0100)]
Revert "Crappy hack for dependency issues"

This reverts commit a43e5129080b2cb6ae4fb55d369b22253548e782.

10 years agoCopy paste error
Arran Cudbard-Bell [Wed, 10 Jul 2013 10:02:02 +0000 (11:02 +0100)]
Copy paste error

10 years agoFix PCRE checks, and make code build cleanly without regex
Arran Cudbard-Bell [Tue, 9 Jul 2013 23:00:09 +0000 (00:00 +0100)]
Fix PCRE checks, and make code build cleanly without regex

10 years agoWe use extended regexps when available, this is no longer configurable
Arran Cudbard-Bell [Tue, 9 Jul 2013 21:55:25 +0000 (22:55 +0100)]
We use extended regexps when available, this is no longer configurable

10 years agoregcomp whitespace changes
Arran Cudbard-Bell [Tue, 9 Jul 2013 21:49:46 +0000 (22:49 +0100)]
regcomp whitespace changes

10 years agoTypo
Arran Cudbard-Bell [Tue, 9 Jul 2013 21:08:32 +0000 (22:08 +0100)]
Typo

10 years agoFix all the update list debug output
Arran Cudbard-Bell [Tue, 9 Jul 2013 21:04:43 +0000 (22:04 +0100)]
Fix all the update list debug output

Make list output more detailed

Consistently use single quotes for literal strings, only use double quotes around things being expanded

Replace delimitst with quote char, to allow caller to pass any quoting char

10 years agoSimplify paircopy functions and fix them so they can't return half copied lists
Arran Cudbard-Bell [Tue, 9 Jul 2013 17:48:15 +0000 (18:48 +0100)]
Simplify paircopy functions and fix them so they can't return half copied lists

10 years agoSprinkle vp->type = VT_DATA in more places, this will be needed later
Arran Cudbard-Bell [Tue, 9 Jul 2013 17:41:17 +0000 (18:41 +0100)]
Sprinkle vp->type = VT_DATA in more places, this will be needed later

10 years agoFix support for list copy
Arran Cudbard-Bell [Tue, 9 Jul 2013 17:39:38 +0000 (18:39 +0100)]
Fix support for list copy

Fix attribute to list copy

Remove not yet valid assertion

Don't allocate VALUE_PAIRs just to free them later

Fixes #353

10 years agoAdd functions for validating a list of VALUE_PAIRs against another list, using paircmp
Arran Cudbard-Bell [Tue, 9 Jul 2013 13:59:27 +0000 (14:59 +0100)]
Add functions for validating a list of VALUE_PAIRs against another list, using paircmp

10 years agoAdd merge sort for VALUE_PAIRs
Arran Cudbard-Bell [Tue, 9 Jul 2013 13:58:51 +0000 (14:58 +0100)]
Add merge sort for VALUE_PAIRs

10 years agoAdd pairremove, which removes a pair from a linked list
Arran Cudbard-Bell [Tue, 9 Jul 2013 13:34:56 +0000 (14:34 +0100)]
Add pairremove, which removes a pair from a linked list

10 years agoCall talloc_set_log_stderr() in all utilities, so we get talloc debugging output...
Arran Cudbard-Bell [Tue, 9 Jul 2013 14:30:57 +0000 (15:30 +0100)]
Call talloc_set_log_stderr() in all utilities, so we get talloc debugging output on error

10 years agoZero-length strings are permitted Closes #352
Alan T. DeKok [Mon, 8 Jul 2013 19:46:32 +0000 (21:46 +0200)]
Zero-length strings are permitted  Closes #352

10 years agoMerge pull request #349 from alanbuxey/master
Arran Cudbard-Bell [Mon, 8 Jul 2013 18:36:17 +0000 (11:36 -0700)]
Merge pull request #349 from alanbuxey/master

DANTE VSA dictionary

10 years agoMerge pull request #351 from fajarnugraha/master-suse-20130708
Arran Cudbard-Bell [Mon, 8 Jul 2013 14:04:05 +0000 (07:04 -0700)]
Merge pull request #351 from fajarnugraha/master-suse-20130708

Fix suse package to build and run cleanly for current master branch

10 years agosuse: remove doc/examples and radrelay
Fajar A. Nugraha [Mon, 8 Jul 2013 08:36:25 +0000 (15:36 +0700)]
suse: remove doc/examples and radrelay

doc/examples are gone
raddb/radrelay.conf is no longer installed

10 years agosuse: commit missing files and delete unused file
Fajar A. Nugraha [Mon, 8 Jul 2013 06:43:02 +0000 (13:43 +0700)]
suse: commit missing files and delete unused file

Two new files present in my local working directory were previously
uncommited in git repo:
* freeradius-server-rpmlintrc
* freeradius-server-tmpfiles.conf
These files come from freeradius-server-2.1.12-6.1.src.rpm,
already imported on v2.x.x branch.

A file is unneeded an now deleted:
* radiusd-pam-old

Tested to build, install, run, and authenticate from users file on SLES-11.2

10 years agoUpdate sqlipool config, should now be sql_module_instance not sql-instance-name
Arran Cudbard-Bell [Mon, 8 Jul 2013 10:29:28 +0000 (11:29 +0100)]
Update sqlipool config, should now be sql_module_instance not sql-instance-name

10 years agoWe don't support nested reference expansions
Arran Cudbard-Bell [Mon, 8 Jul 2013 10:25:48 +0000 (11:25 +0100)]
We don't support nested reference expansions

10 years agoAs with unixodbc, let the destructor take care of freeing all memory
Arran Cudbard-Bell [Sun, 7 Jul 2013 12:19:32 +0000 (13:19 +0100)]
As with unixodbc, let the destructor take care of freeing all memory

10 years agoLet destructor handle freeing all resources
Arran Cudbard-Bell [Sun, 7 Jul 2013 12:08:55 +0000 (13:08 +0100)]
Let destructor handle freeing all resources

10 years agoCleanups and clarifications
Alan T. DeKok [Sat, 6 Jul 2013 16:00:07 +0000 (12:00 -0400)]
Cleanups and clarifications

10 years agoMinor updates
Alan T. DeKok [Sat, 6 Jul 2013 15:59:57 +0000 (11:59 -0400)]
Minor updates

10 years agoadded DANTE VSA dictionary file
Alan Buxey [Fri, 5 Jul 2013 20:27:09 +0000 (21:27 +0100)]
added DANTE VSA dictionary file

DANTE IANA attribute space 27262 - first attribute is for RADSEC TTL to
stop loops (like TCP TTL)

10 years agoMerge pull request #348 from arr2036/zero_length_exp
Alan DeKok [Fri, 5 Jul 2013 16:48:46 +0000 (09:48 -0700)]
Merge pull request #348 from arr2036/zero_length_exp

Don't generate errors on zero length expansions

10 years agoBase sql configs are in main
Arran Cudbard-Bell [Fri, 5 Jul 2013 16:30:17 +0000 (17:30 +0100)]
Base sql configs are in main

10 years agoSet dbc and env to NULL to avoid double free
Arran Cudbard-Bell [Fri, 5 Jul 2013 16:30:54 +0000 (17:30 +0100)]
Set dbc and env to NULL to avoid double free

10 years agoConsistently return a zero length buffer from xlat_process, except on error condition...
Arran Cudbard-Bell [Fri, 5 Jul 2013 15:57:35 +0000 (16:57 +0100)]
Consistently return a zero length buffer from xlat_process, except on error condition (where we free)

10 years agoDon't generate errors on zero length expansions
Arran Cudbard-Bell [Fri, 5 Jul 2013 15:20:54 +0000 (16:20 +0100)]
Don't generate errors on zero length expansions

10 years agoNotes on rlm_sql_freetds/rlm_sql_sybase
Arran Cudbard-Bell [Fri, 5 Jul 2013 13:25:27 +0000 (09:25 -0400)]
Notes on rlm_sql_freetds/rlm_sql_sybase

10 years agoFix quoting style in debug messages, should be double to match expansion quotes
Arran Cudbard-Bell [Fri, 5 Jul 2013 10:50:41 +0000 (11:50 +0100)]
Fix quoting style in debug messages, should be double to match expansion quotes

10 years agoOnly list one deprecated alternative to avoid users needing to change the config...
Arran Cudbard-Bell [Thu, 4 Jul 2013 22:08:41 +0000 (23:08 +0100)]
Only list one deprecated alternative to avoid users needing to change the config item twice

10 years agoSet the destructor only when necessary. Closes #347
Alan T. DeKok [Thu, 4 Jul 2013 20:18:55 +0000 (16:18 -0400)]
Set the destructor only when necessary.  Closes #347

and reset it before returning the memory to the caller

10 years agoWhitespace fixes
Alan T. DeKok [Thu, 4 Jul 2013 12:30:26 +0000 (08:30 -0400)]
Whitespace fixes

10 years agore-align utility help output
Arran Cudbard-Bell [Wed, 3 Jul 2013 18:15:09 +0000 (19:15 +0100)]
re-align utility help output

10 years agoUpdate README.rst
Arran Cudbard-Bell [Wed, 3 Jul 2013 22:11:25 +0000 (18:11 -0400)]
Update README.rst

10 years agoFormatting
Arran Cudbard-Bell [Wed, 3 Jul 2013 17:58:20 +0000 (18:58 +0100)]
Formatting

10 years agoAnother missed default
Arran Cudbard-Bell [Wed, 3 Jul 2013 17:07:19 +0000 (18:07 +0100)]
Another missed default

10 years agoOnly call paircompare register once per instance of rlm_ldap
Arran Cudbard-Bell [Wed, 3 Jul 2013 16:55:33 +0000 (17:55 +0100)]
Only call paircompare register once per instance of rlm_ldap