Phil Mayers [Fri, 8 Oct 2010 09:26:15 +0000 (11:26 +0200)]
ok, working SoH standalone module
Phil Mayers [Fri, 8 Oct 2010 07:36:15 +0000 (09:36 +0200)]
Base SoH code for Microsoft NAP.
This code will be used by other protocols (PEAP, DHCP) to encode/decode
the SoH information.
Alan T. DeKok [Fri, 8 Oct 2010 07:28:08 +0000 (09:28 +0200)]
Fix call to otp_write
Alan T. DeKok [Thu, 7 Oct 2010 08:30:12 +0000 (10:30 +0200)]
Fixes from clang / scan-build
Nothing to see here, folks. Move along.
Alan T. DeKok [Sun, 3 Oct 2010 09:53:10 +0000 (11:53 +0200)]
Signed / unsigned fixes and function prototypes
This reduces the number of warnings on compile.
Alan T. DeKok [Fri, 1 Oct 2010 13:35:28 +0000 (15:35 +0200)]
Protect pcap_fopen calls
Apparently not all versions of pcap have this <sigh>
Alan T. DeKok [Thu, 30 Sep 2010 10:28:32 +0000 (12:28 +0200)]
More patches to build without certain features
Alan T. DeKok [Thu, 30 Sep 2010 07:42:16 +0000 (09:42 +0200)]
Allow building WITHOUT_STATS
Alan T. DeKok [Wed, 29 Sep 2010 14:36:24 +0000 (16:36 +0200)]
Enable building WITHOUT_ACCOUNTING
Alan T. DeKok [Wed, 29 Sep 2010 14:05:24 +0000 (16:05 +0200)]
Enable building #WITHOUT_PROXY
Alan T. DeKok [Wed, 29 Sep 2010 13:47:28 +0000 (15:47 +0200)]
Ignore post-proxy type if proxy is disabled
Alan T. DeKok [Tue, 28 Sep 2010 11:03:56 +0000 (13:03 +0200)]
Better way of updating cf_data_add
Alan T. DeKok [Tue, 28 Sep 2010 10:07:30 +0000 (12:07 +0200)]
Disable example config in default build
Alan T. DeKok [Mon, 27 Sep 2010 12:02:05 +0000 (14:02 +0200)]
Note TLS-Client-Cert-* attributes
Alan T. DeKok [Sun, 26 Sep 2010 08:24:54 +0000 (10:24 +0200)]
Added '-F' to filter RADIUS from input to output
This can be used to "clean up" horrible pcap files that people create.
i.e. when asked for a RADIUS pcap file, they just capture *everything*
on the interface for a period of time. This makes it harder to track
down the real RADIUS issues.
Adding -F makes it easy to filter the packets.
Alan T. DeKok [Sat, 25 Sep 2010 15:57:09 +0000 (17:57 +0200)]
Fix long-standing bug where unix Groupcmp didn't work
It was looking in the wrong list for the user name.
Alan T. DeKok [Sat, 25 Sep 2010 20:13:12 +0000 (22:13 +0200)]
Updates from redhat
Alan T. DeKok [Thu, 23 Sep 2010 12:06:29 +0000 (14:06 +0200)]
Use server version for version string
Alan T. DeKok [Wed, 22 Sep 2010 09:44:34 +0000 (11:44 +0200)]
Fix condition for attribute not found
This is a "false" comparison, but not a syntax error in the evaluation logic
Alan T. DeKok [Wed, 22 Sep 2010 06:04:22 +0000 (08:04 +0200)]
Bootstrap CoA home servers, as they can stand alone.
For the next rev, loop over all home servers *first*, before creating
the pools.
Alan T. DeKok [Tue, 21 Sep 2010 09:09:44 +0000 (11:09 +0200)]
Move variable declaration to the start of the block
Alan T. DeKok [Tue, 21 Sep 2010 09:08:16 +0000 (11:08 +0200)]
Made listener_print be CONST
Manual merge of
3ab506f60fb46010a
Alan T. DeKok [Tue, 21 Sep 2010 08:16:00 +0000 (10:16 +0200)]
Added toupper function
Alan T. DeKok [Tue, 21 Sep 2010 08:10:41 +0000 (10:10 +0200)]
As posted to the list by Alexander Kubatkin
Alan T. DeKok [Tue, 21 Sep 2010 08:08:17 +0000 (10:08 +0200)]
More attributes as sent in by a nice person at HP
Alan T. DeKok [Mon, 20 Sep 2010 14:49:13 +0000 (16:49 +0200)]
Added tolower function
Alan T. DeKok [Sun, 19 Sep 2010 06:49:51 +0000 (08:49 +0200)]
Multiple calls to ber_printf seem to work better. Closes #106
Alan T. DeKok [Sun, 19 Sep 2010 06:46:06 +0000 (08:46 +0200)]
Retry on write failure. Closes bug #58
Alan T. DeKok [Sun, 19 Sep 2010 06:41:44 +0000 (08:41 +0200)]
Various fixes
If timeout is zero, set it to 1^6. That should be good enough.
Don't filter output through sed, this makes it impossible to kill the
"tail" process.
Catch the tail PID, and kill it on exit.
Trap on signals, not on normal exit.
Duplicate code in trap for normal exit. This ensures that the code is
only executed once.
Alan T. DeKok [Sat, 18 Sep 2010 15:21:56 +0000 (17:21 +0200)]
Fixed typo
Alan T. DeKok [Sat, 18 Sep 2010 14:06:46 +0000 (16:06 +0200)]
Clean up loopback / inaddr_any checks
Alan T. DeKok [Fri, 17 Sep 2010 12:59:33 +0000 (14:59 +0200)]
Added "del client <ipaddr>" command for dynamic clients
Alan T. DeKok [Fri, 17 Sep 2010 10:13:23 +0000 (12:13 +0200)]
Fix typo
Alan T. DeKok [Fri, 17 Sep 2010 09:07:12 +0000 (11:07 +0200)]
Added dynamic port-access attributes
As noted by HP
Alan T. DeKok [Fri, 17 Sep 2010 09:06:31 +0000 (11:06 +0200)]
Removed unused attribute
HP says #47 isn't used by anyone.
Alan T. DeKok [Thu, 16 Sep 2010 19:17:10 +0000 (21:17 +0200)]
Fix logic for using udpfromto
Notes from bug #110
Alan T. DeKok [Wed, 15 Sep 2010 14:59:08 +0000 (16:59 +0200)]
Use local EAP, even if the realm doesn't exist
Alan T. DeKok [Wed, 15 Sep 2010 11:38:06 +0000 (13:38 +0200)]
Fix typo
Alan T. DeKok [Tue, 14 Sep 2010 00:52:55 +0000 (02:52 +0200)]
Added functions for sql_affected_rows and sql_error
These look like they're not used right now, but they're worth having
Alan T. DeKok [Tue, 14 Sep 2010 00:40:24 +0000 (02:40 +0200)]
Allow sqlite filename to be specified in the configuration file.
Undocumented for now. Based on a patch from Sven Anders
Alan T. DeKok [Mon, 13 Sep 2010 14:55:34 +0000 (16:55 +0200)]
Module-Failure-Message goes in request, not in reply
Alan T. DeKok [Mon, 13 Sep 2010 09:55:36 +0000 (11:55 +0200)]
Fix parameter passing issue. closes bug #105
Alan T. DeKok [Sun, 12 Sep 2010 08:57:05 +0000 (10:57 +0200)]
Moved to RST format.
Alan T. DeKok [Sun, 12 Sep 2010 08:51:59 +0000 (10:51 +0200)]
Renamed in preparation for moving to RST format.
Alan T. DeKok [Tue, 14 Sep 2010 00:37:36 +0000 (02:37 +0200)]
Be more forgiving when starting proxy sockets.
Manual merge of
92beaf4f00ef
Alan T. DeKok [Fri, 10 Sep 2010 14:40:18 +0000 (16:40 +0200)]
Add message from ntlm_auth to Module-Failure-Message
Alan T. DeKok [Fri, 10 Sep 2010 13:31:35 +0000 (15:31 +0200)]
More docs on the inner tunnel stuff
Alan T. DeKok [Fri, 10 Sep 2010 12:22:16 +0000 (14:22 +0200)]
Fix typo in error message
Alan T. DeKok [Fri, 10 Sep 2010 11:55:47 +0000 (13:55 +0200)]
Fix typo in command-line option
And set "libltdl-installable" if we're using our local libltdl.
Otherwise, it will *still* use the system one. <sigh>
Alan T. DeKok [Thu, 9 Sep 2010 13:29:29 +0000 (15:29 +0200)]
Add support for extended attributes: draft-dekok-radext-radius-extensions
We can encode / decode all non-TLV types without a problem.
TLVs are currently limited to one level (241.1.2), and to the
length of the encapsulating RADIUS attribute.
The "M" flag for extended attributes with flags is not supported.
Alan T. DeKok [Thu, 9 Sep 2010 12:49:01 +0000 (14:49 +0200)]
Close file on error condition
Alan T. DeKok [Thu, 9 Sep 2010 12:40:48 +0000 (14:40 +0200)]
Free memory if out of memory
Alan T. DeKok [Thu, 9 Sep 2010 12:33:03 +0000 (14:33 +0200)]
Ensure we leave room for the trailing NUL
Bjørn Mork [Wed, 8 Sep 2010 13:17:15 +0000 (15:17 +0200)]
Updating dictionary.erx based on Juniper documentation
Also adding a note about JUNOS (M/MX) usage of this dictionary.
Signed-off-by: Bjørn Mork <bjorn@mork.no>
Alan T. DeKok [Thu, 9 Sep 2010 11:15:04 +0000 (13:15 +0200)]
Print error message if we're not configured to listen on any ports
Manual merge of
a50005713e5238
Alan T. DeKok [Wed, 8 Sep 2010 06:05:50 +0000 (08:05 +0200)]
Added missing check for lookup
Alan T. DeKok [Tue, 7 Sep 2010 20:37:41 +0000 (22:37 +0200)]
Made warning messages more consistent
Alan T. DeKok [Tue, 7 Sep 2010 20:36:35 +0000 (22:36 +0200)]
Regularized error messages
Alan T. DeKok [Tue, 7 Sep 2010 20:36:04 +0000 (22:36 +0200)]
Remove port 1814 from the default pcap filter. It isn't necessary
Alan T. DeKok [Tue, 7 Sep 2010 20:20:55 +0000 (22:20 +0200)]
Fix escaping rules. Closes bug #46
Alan T. DeKok [Tue, 7 Sep 2010 15:17:43 +0000 (17:17 +0200)]
Log issuer, not root cert.
Also only create attributes for the client && issuing certificate.
Alan T. DeKok [Tue, 7 Sep 2010 15:07:13 +0000 (17:07 +0200)]
Minor fixes as suggested by Michael Ross
- fix typo in Expiraton
- sprintf of serial was using the start of the buffer, and not the pointer
- use names for array references, rather than hard-coded numbers
- correct reference to issuer/subject
Alan T. DeKok [Mon, 6 Sep 2010 07:45:13 +0000 (09:45 +0200)]
Added support for {nthash} for compatibility with radiator
Alan T. DeKok [Fri, 3 Sep 2010 10:44:11 +0000 (12:44 +0200)]
Added ability to verify client certificates
Disabled in the default build.
Alan T. DeKok [Thu, 2 Sep 2010 15:48:40 +0000 (17:48 +0200)]
Remove \n from log messages
Alan T. DeKok [Thu, 2 Sep 2010 12:57:52 +0000 (14:57 +0200)]
Create Module-Failure-Message for *all* callback errors
Alan T. DeKok [Thu, 2 Sep 2010 12:53:44 +0000 (14:53 +0200)]
Fixed typo
Alan T. DeKok [Fri, 3 Sep 2010 08:17:55 +0000 (10:17 +0200)]
Removed test user
Alan T. DeKok [Wed, 1 Sep 2010 15:10:22 +0000 (17:10 +0200)]
Add /usr/lib to search path, to avoid warning messages on build
Alan T. DeKok [Wed, 1 Sep 2010 09:13:46 +0000 (11:13 +0200)]
Change default raddebug timeout to 60s
Alan T. DeKok [Tue, 31 Aug 2010 11:21:03 +0000 (13:21 +0200)]
Just published
Alan T. DeKok [Mon, 30 Aug 2010 14:55:00 +0000 (16:55 +0200)]
Fixed typo
Alan T. DeKok [Mon, 30 Aug 2010 13:18:48 +0000 (15:18 +0200)]
Catch LDAP constraint violation
closed bug #18
Alan T. DeKok [Mon, 30 Aug 2010 10:59:59 +0000 (12:59 +0200)]
Updated from bug #102
Alan T. DeKok [Fri, 27 Aug 2010 14:42:50 +0000 (16:42 +0200)]
Include DHCP test client.
It's not built by default, and it's not installed. But some may
find it useful for testing.
Alan T. DeKok [Fri, 27 Aug 2010 13:20:19 +0000 (15:20 +0200)]
Made module error / warning messages consistent
Alan T. DeKok [Fri, 27 Aug 2010 13:07:33 +0000 (15:07 +0200)]
Added new attribute. Closes bug #101
Alan T. DeKok [Fri, 27 Aug 2010 13:04:16 +0000 (15:04 +0200)]
Added empty opendirectory module
Alan T. DeKok [Fri, 27 Aug 2010 10:48:14 +0000 (12:48 +0200)]
Create new mutex for Access-Challenge debug code.
This prevents the recursive mutex problem on some platforms.
Alan T. DeKok [Thu, 26 Aug 2010 14:52:59 +0000 (16:52 +0200)]
Added more documentation for dynamic clients
Alan T. DeKok [Thu, 26 Aug 2010 14:47:13 +0000 (16:47 +0200)]
Fix typos
Alan T. DeKok [Thu, 26 Aug 2010 14:31:16 +0000 (16:31 +0200)]
Ensure WITHOUT flags are set if they're not being used
Alan T. DeKok [Thu, 26 Aug 2010 14:30:56 +0000 (16:30 +0200)]
Updated copyright date and build options
Alan T. DeKok [Thu, 26 Aug 2010 10:54:55 +0000 (12:54 +0200)]
Updated documentation
Alan T. DeKok [Tue, 24 Aug 2010 13:01:00 +0000 (15:01 +0200)]
Added support for EAP-MD5, using radeapclient.
Alan T. DeKok [Wed, 25 Aug 2010 12:11:39 +0000 (14:11 +0200)]
Add warning message about packets being too long
Conflicts:
src/lib/radius.c
Alan T. DeKok [Wed, 18 Aug 2010 15:42:30 +0000 (17:42 +0200)]
Added support for TLS-Cert-* and TLS-Client-Cert-* attributes
This has been needed for a long time. They only work for methods
which use a client certificate, but it's a start.
Alan T. DeKok [Thu, 12 Aug 2010 13:59:29 +0000 (15:59 +0200)]
Mkae sure we show EAP-Message in the debug output
Alan T. DeKok [Tue, 10 Aug 2010 06:13:32 +0000 (08:13 +0200)]
Added indexes to IP Pool table
Alan T. DeKok [Mon, 9 Aug 2010 19:50:45 +0000 (21:50 +0200)]
Use pairmake() which is in libradius, not radius_pairmake()
Alan T. DeKok [Mon, 9 Aug 2010 13:10:48 +0000 (15:10 +0200)]
Add Cached-Session-Policy attribute.
This can be placed into the cache in the first EAP session, and
grabbed from the cache on subsequet packets.
Alan T. DeKok [Mon, 9 Aug 2010 12:04:13 +0000 (14:04 +0200)]
Print out WARNING if EAP session did not finish.
This functionality has been sorely needed for some time. It works
ONLY in debugging mode. It prints out a warning if the handler still
exists when the request packet is cleaned up.
Alan T. DeKok [Mon, 9 Aug 2010 09:36:03 +0000 (11:36 +0200)]
Slightly lower impact way of cleaning up old sessions
Alan T. DeKok [Mon, 9 Aug 2010 09:33:36 +0000 (11:33 +0200)]
More errors to Module-Failure-Message
Alan T. DeKok [Sat, 7 Aug 2010 21:04:19 +0000 (23:04 +0200)]
Added ability to write to pcap file
Alan T. DeKok [Sat, 7 Aug 2010 20:30:52 +0000 (22:30 +0200)]
Do more checking of command-line arguments
Alan T. DeKok [Sat, 7 Aug 2010 07:48:24 +0000 (09:48 +0200)]
Fixes for 2.2 API
Alan T. DeKok [Sat, 7 Aug 2010 07:36:36 +0000 (09:36 +0200)]
Added example of "second_files" module, with documentation
Alan T. DeKok [Fri, 6 Aug 2010 15:48:44 +0000 (17:48 +0200)]
Regularize warning messages
Alan T. DeKok [Fri, 6 Aug 2010 15:26:56 +0000 (17:26 +0200)]
Regularize error messages