freeradius.git
9 years agoman: Remove client attribute description
Nikolai Kondrashov [Tue, 2 Dec 2014 14:39:28 +0000 (16:39 +0200)]
man: Remove client attribute description

Remove attribute description from clients.conf(5) source as it is
outdated, lists just a few attributes and wasn't updated for more than a
year. Refer to clients.conf file itself, instead.

9 years agoAlways get the "certs" index for SSL.
Alan T. DeKok [Tue, 2 Dec 2014 18:54:23 +0000 (13:54 -0500)]
Always get the "certs" index for SSL.

9 years agoBump for version 3.0.6
Alan T. DeKok [Tue, 2 Dec 2014 18:34:32 +0000 (13:34 -0500)]
Bump for version 3.0.6

9 years agoClarify debugging message
Alan T. DeKok [Tue, 2 Dec 2014 15:05:27 +0000 (10:05 -0500)]
Clarify debugging message

9 years agoDebug attributes added in cbtls_verify
Alan T. DeKok [Tue, 2 Dec 2014 15:03:33 +0000 (10:03 -0500)]
Debug attributes added in cbtls_verify

9 years agoIf we're doing fallback resolution we need to set the address family to AF_UNSPEC...
Arran Cudbard-Bell [Mon, 1 Dec 2014 19:15:45 +0000 (14:15 -0500)]
If we're doing fallback resolution we need to set the address family to AF_UNSPEC to get both IPv6 and IPv4 addresses

The af that was passed in, is then used to set the preference

9 years agoAdd extra tests for auto prefix conversion to condition.txt
Arran Cudbard-Bell [Mon, 1 Dec 2014 19:10:57 +0000 (14:10 -0500)]
Add extra tests for auto prefix conversion to condition.txt

9 years agoFix the conffile parser to parse RHS literals as prefix types when the LHS is an...
Arran Cudbard-Bell [Mon, 1 Dec 2014 18:19:23 +0000 (13:19 -0500)]
Fix the conffile parser to parse RHS literals as prefix types when the LHS is an IPv4 address or IPv6 address

9 years agoFixup ipprefix tests
Arran Cudbard-Bell [Mon, 1 Dec 2014 15:26:37 +0000 (10:26 -0500)]
Fixup ipprefix tests

9 years agoTypo
Arran Cudbard-Bell [Mon, 1 Dec 2014 14:52:50 +0000 (09:52 -0500)]
Typo

9 years agoIf sanity checks are converted to warnings, they should continue not cause module...
Arran Cudbard-Bell [Mon, 1 Dec 2014 00:08:04 +0000 (19:08 -0500)]
If sanity checks are converted to warnings, they should continue not cause module instantiation to fail...

9 years agoCheck more query strings at boot time.
Alan T. DeKok [Sun, 30 Nov 2014 16:21:31 +0000 (11:21 -0500)]
Check more query strings at boot time.

And therefore don't check query[0] at run time

9 years agoExtra config is a warning, not an error
Alan T. DeKok [Sun, 30 Nov 2014 16:17:59 +0000 (11:17 -0500)]
Extra config is a warning, not an error

9 years agoThe rbtree submodule is always needed, therefore build it, too
Alan T. DeKok [Sun, 30 Nov 2014 16:09:12 +0000 (11:09 -0500)]
The rbtree submodule is always needed, therefore build it, too

9 years agoJust set query fields to NULL if the strings are zerolength
Arran Cudbard-Bell [Fri, 28 Nov 2014 19:06:37 +0000 (14:06 -0500)]
Just set query fields to NULL if the strings are zerolength

9 years agoAdd more sanity checks to rlm_sql
Arran Cudbard-Bell [Fri, 28 Nov 2014 18:57:09 +0000 (13:57 -0500)]
Add more sanity checks to rlm_sql

9 years agoFix case where the user isn't found in any groups, where we'd go on to process profil...
Arran Cudbard-Bell [Fri, 28 Nov 2014 18:23:58 +0000 (13:23 -0500)]
Fix case where the user isn't found in any groups, where we'd go on to process profiles if user reply-item was Fall-Through = yes

9 years agoFix typo in rlm_sql.c, need to use goto in group evaluation loop as continue still...
Arran Cudbard-Bell [Fri, 28 Nov 2014 18:17:41 +0000 (13:17 -0500)]
Fix typo in rlm_sql.c, need to use goto in group evaluation loop as continue still evaluates the condition

9 years agoNote recent changes
Alan T. DeKok [Fri, 28 Nov 2014 16:50:18 +0000 (11:50 -0500)]
Note recent changes

9 years agoSkip post-auth when finishing originated CoA requests
Alan T. DeKok [Fri, 28 Nov 2014 16:45:37 +0000 (11:45 -0500)]
Skip post-auth when finishing originated CoA requests

9 years agoCall Post-Auth-Type Reject if we reject in post-auth
Alan T. DeKok [Fri, 28 Nov 2014 16:33:14 +0000 (11:33 -0500)]
Call Post-Auth-Type Reject if we reject in post-auth

And write "Login OK" only if post-auth returns OK

And move Access-Request logic from process.c to rad_postauth

9 years agoPrint "Login OK" AFTER post-auth, instead of before
Alan T. DeKok [Fri, 28 Nov 2014 15:57:37 +0000 (10:57 -0500)]
Print "Login OK" AFTER post-auth, instead of before

So that we can reject users in the post-auth section

9 years agoAdd doc header for normify
Arran Cudbard-Bell [Fri, 28 Nov 2014 16:29:35 +0000 (11:29 -0500)]
Add doc header for normify

9 years agoCorrect check of rlm_sql_select_query rcode
Arran Cudbard-Bell [Fri, 28 Nov 2014 15:49:59 +0000 (10:49 -0500)]
Correct check of rlm_sql_select_query rcode

9 years agoanother issue...
Arran Cudbard-Bell [Thu, 27 Nov 2014 19:16:17 +0000 (14:16 -0500)]
another issue...

9 years agoFix infinite loop on Fall-Through = yes when processing groups
Arran Cudbard-Bell [Thu, 27 Nov 2014 18:11:32 +0000 (13:11 -0500)]
Fix infinite loop on Fall-Through = yes when processing groups

9 years agoDon't call MS-CHAP for NT-Hash passwords.
Alan T. DeKok [Thu, 27 Nov 2014 17:57:45 +0000 (12:57 -0500)]
Don't call MS-CHAP for NT-Hash passwords.

So that passwords with backslashes work better

9 years agoSkip both characters, not just the escape. Closes #842
Alan T. DeKok [Wed, 26 Nov 2014 20:50:34 +0000 (15:50 -0500)]
Skip both characters, not just the escape.  Closes #842

9 years agoBe more generous about values for correct escapes
Alan T. DeKok [Wed, 26 Nov 2014 20:48:10 +0000 (15:48 -0500)]
Be more generous about values for correct escapes

9 years agoRevert "Enable control-socket by default, but only for root"
Alan T. DeKok [Wed, 26 Nov 2014 20:22:40 +0000 (15:22 -0500)]
Revert "Enable control-socket by default, but only for root"

This doesn't work on OSX.

This reverts commit 7eadf64919d046216a3d9c6504b6aa9d2f037b57.

9 years agoEnable control-socket by default, but only for root
Alan T. DeKok [Wed, 26 Nov 2014 19:27:23 +0000 (14:27 -0500)]
Enable control-socket by default, but only for root

9 years agoBreakout PAP header processing function, and add some tests
Arran Cudbard-Bell [Wed, 26 Nov 2014 16:53:59 +0000 (11:53 -0500)]
Breakout PAP header processing function, and add some tests
Only complain in PAP if the Auth-Type != our Auth-Type

9 years agoFormatting in cursor.c
Arran Cudbard-Bell [Wed, 26 Nov 2014 16:59:22 +0000 (11:59 -0500)]
Formatting in cursor.c

9 years agoFix another spurious warning
Arran Cudbard-Bell [Wed, 26 Nov 2014 16:53:33 +0000 (11:53 -0500)]
Fix another spurious warning

9 years agoAnd don't complain about LM-Password if we have NT-Password
Arran Cudbard-Bell [Wed, 26 Nov 2014 16:49:24 +0000 (11:49 -0500)]
And don't complain about LM-Password if we have NT-Password

9 years agoFix spurious LM-Password / NT-Password warnings
Arran Cudbard-Bell [Wed, 26 Nov 2014 16:45:30 +0000 (11:45 -0500)]
Fix spurious LM-Password / NT-Password warnings

9 years agoNote recent changes
Alan T. DeKok [Wed, 26 Nov 2014 18:06:04 +0000 (13:06 -0500)]
Note recent changes

9 years agoTypo fix in comments
Herwin Weststrate [Wed, 26 Nov 2014 16:43:56 +0000 (17:43 +0100)]
Typo fix in comments

completelty => completely

9 years agoFixed off-by-one error when trying to cast attribute to ascend
Herwin Weststrate [Wed, 26 Nov 2014 16:23:22 +0000 (17:23 +0100)]
Fixed off-by-one error when trying to cast attribute to ascend

This fixes the bug described in #843

9 years agoUse correct escapes in the tests
Alan T. DeKok [Wed, 26 Nov 2014 17:54:14 +0000 (12:54 -0500)]
Use correct escapes in the tests

9 years agoUse correct comments
Alan T. DeKok [Wed, 26 Nov 2014 16:20:02 +0000 (11:20 -0500)]
Use correct comments

9 years agoFix bug when using "correct_escapes=no". Closes #842
Alan T. DeKok [Wed, 26 Nov 2014 16:16:45 +0000 (11:16 -0500)]
Fix bug when using "correct_escapes=no".  Closes #842

9 years agotemplate_names should really be tmpl_names and should be in tmpl.c
Arran Cudbard-Bell [Tue, 25 Nov 2014 21:59:20 +0000 (16:59 -0500)]
template_names should really be tmpl_names and should be in tmpl.c

9 years agoremove tmpl_names it was a less complete duplicate of template names
Arran Cudbard-Bell [Tue, 25 Nov 2014 21:47:07 +0000 (16:47 -0500)]
remove tmpl_names it was a less complete duplicate of template names

9 years agoas found on the net
Alan T. DeKok [Tue, 25 Nov 2014 21:45:45 +0000 (16:45 -0500)]
as found on the net

9 years agoBetter error message, refer to mods-enabled
Alan T. DeKok [Tue, 25 Nov 2014 21:10:17 +0000 (16:10 -0500)]
Better error message, refer to mods-enabled

9 years agoWhitespace
Alan T. DeKok [Tue, 25 Nov 2014 19:41:43 +0000 (14:41 -0500)]
Whitespace

9 years agoRestore v3.0.x behaviour in rlm_cache
Arran Cudbard-Bell [Tue, 25 Nov 2014 15:30:33 +0000 (10:30 -0500)]
Restore v3.0.x behaviour in rlm_cache

9 years agoUpdate encoded pointer before checking for additional values
Arran Cudbard-Bell [Tue, 25 Nov 2014 14:42:26 +0000 (09:42 -0500)]
Update encoded pointer before checking for additional values

9 years agoStandardise rlm_cache output with rlm_sql
Arran Cudbard-Bell [Tue, 25 Nov 2014 04:54:36 +0000 (23:54 -0500)]
Standardise rlm_cache output with rlm_sql

9 years agoTweaks to libldap version output
Arran Cudbard-Bell [Tue, 25 Nov 2014 04:45:58 +0000 (23:45 -0500)]
Tweaks to libldap version output

9 years agoThese absolutely don't need to be at the default debug log level
Arran Cudbard-Bell [Tue, 25 Nov 2014 03:48:27 +0000 (22:48 -0500)]
These absolutely don't need to be at the default debug log level

9 years agoFixup log output to file
Arran Cudbard-Bell [Tue, 25 Nov 2014 03:44:58 +0000 (22:44 -0500)]
Fixup log output to file

It was pretty awful before...

9 years agoUpdate cache
Arran Cudbard-Bell [Mon, 24 Nov 2014 22:50:12 +0000 (17:50 -0500)]
Update cache

9 years agoIgnore .ok files
Arran Cudbard-Bell [Mon, 24 Nov 2014 22:37:43 +0000 (17:37 -0500)]
Ignore .ok files

9 years agoAllow "if" etc. in the "instantiate" section
Alan T. DeKok [Mon, 24 Nov 2014 22:18:11 +0000 (17:18 -0500)]
Allow "if" etc. in the "instantiate" section

9 years agoUpdate ChangeLog
Arran Cudbard-Bell [Mon, 24 Nov 2014 22:16:21 +0000 (17:16 -0500)]
Update ChangeLog

9 years agoNote recent changes
Alan T. DeKok [Mon, 24 Nov 2014 22:08:54 +0000 (17:08 -0500)]
Note recent changes

9 years agoDocument redundant xlats
Alan T. DeKok [Sat, 15 Nov 2014 13:50:23 +0000 (08:50 -0500)]
Document redundant xlats

9 years agoFailed to register redundant xlat is a warning, not an error
Alan T. DeKok [Fri, 14 Nov 2014 19:18:41 +0000 (14:18 -0500)]
Failed to register redundant xlat is a warning, not an error

9 years agoConvert redundant checks to load time instead of run-time
Alan T. DeKok [Sat, 15 Nov 2014 13:14:11 +0000 (08:14 -0500)]
Convert redundant checks to load time instead of run-time

9 years agoFail if we can't find an xlat by this name
Alan T. DeKok [Fri, 14 Nov 2014 19:18:29 +0000 (14:18 -0500)]
Fail if we can't find an xlat by this name

9 years agoAdd redundancy for XLATs.
Alan T. DeKok [Fri, 14 Nov 2014 18:54:56 +0000 (13:54 -0500)]
Add redundancy for XLATs.

Via the "instantiate" section

redundant my_sql {
sql1
sql2
sql3
}

And now "%{my_sql:...}" will work

9 years agoUpdate documentation for += and [#] [*]
Arran Cudbard-Bell [Mon, 24 Nov 2014 21:59:33 +0000 (16:59 -0500)]
Update documentation for += and [#] [*]

9 years agoPrefix some examples with '&' in man unlang
Arran Cudbard-Bell [Mon, 24 Nov 2014 21:58:24 +0000 (16:58 -0500)]
Prefix some examples with '&' in man unlang

9 years agoRun PEAP and TTLS tests if eapol_test exists
Alan T. DeKok [Mon, 24 Nov 2014 21:59:57 +0000 (16:59 -0500)]
Run PEAP and TTLS tests if eapol_test exists

9 years agoRelax restrictions on modules in instantiate
Alan T. DeKok [Mon, 24 Nov 2014 21:59:28 +0000 (16:59 -0500)]
Relax restrictions on modules in instantiate

We can have "files.authorize", for example...

9 years agoMake it the same as other tests
Alan T. DeKok [Mon, 24 Nov 2014 21:10:13 +0000 (16:10 -0500)]
Make it the same as other tests

9 years agoSet the prefix in the ip address we use to locate the home server
Arran Cudbard-Bell [Mon, 24 Nov 2014 21:44:42 +0000 (16:44 -0500)]
Set the prefix in the ip address we use to locate the home server

9 years agoNote recent changes
Alan T. DeKok [Mon, 24 Nov 2014 20:44:35 +0000 (15:44 -0500)]
Note recent changes

9 years agoDocument &Attribute-Name[*]
Alan T. DeKok [Mon, 24 Nov 2014 20:44:06 +0000 (15:44 -0500)]
Document &Attribute-Name[*]

9 years agoFix raddebug so it exits on condition parse error
Arran Cudbard-Bell [Mon, 24 Nov 2014 20:41:24 +0000 (15:41 -0500)]
Fix raddebug so it exits on condition parse error

9 years agoTypo
Arran Cudbard-Bell [Mon, 24 Nov 2014 20:41:10 +0000 (15:41 -0500)]
Typo

9 years agoAllow "group" in instantiate
Alan T. DeKok [Mon, 24 Nov 2014 20:27:47 +0000 (15:27 -0500)]
Allow "group" in instantiate

9 years agoWrite condition parsing errors back to radmin so we know when they've failed
Arran Cudbard-Bell [Mon, 24 Nov 2014 20:04:59 +0000 (15:04 -0500)]
Write condition parsing errors back to radmin so we know when they've failed

9 years agoFix issues from previous commit
Arran Cudbard-Bell [Mon, 24 Nov 2014 20:04:26 +0000 (15:04 -0500)]
Fix issues from previous commit

9 years agoImplement auto-reconnect in radmin (if the server goes away we re-establish the socke...
Arran Cudbard-Bell [Mon, 24 Nov 2014 19:12:55 +0000 (14:12 -0500)]
Implement auto-reconnect in radmin (if the server goes away we re-establish the socket on the next command)

9 years agoTidy up preprocessor stuff in radmin.c
Arran Cudbard-Bell [Mon, 24 Nov 2014 19:07:36 +0000 (14:07 -0500)]
Tidy up preprocessor stuff in radmin.c

9 years agoForbid "users" file from doing regex compares of non-string attrs
Alan T. DeKok [Mon, 24 Nov 2014 18:49:18 +0000 (13:49 -0500)]
Forbid "users" file from doing regex compares of non-string attrs

9 years agoFix PEAP. This is mostly a revert of 22c9033c07e4e
Alan T. DeKok [Mon, 24 Nov 2014 18:44:58 +0000 (13:44 -0500)]
Fix PEAP.  This is mostly a revert of 22c9033c07e4e

With log.lvl changed back to options for things which use
options, but don't want to muck with the log levels

9 years agoDepend on the modules, not on the non-existent config files
Alan T. DeKok [Mon, 24 Nov 2014 17:20:39 +0000 (12:20 -0500)]
Depend on the modules, not on the non-existent config files

9 years agoLook at request->proxy, not fake->packet
Alan T. DeKok [Mon, 24 Nov 2014 13:10:02 +0000 (08:10 -0500)]
Look at request->proxy, not fake->packet

9 years agoSync rlm_cache.c with master
Arran Cudbard-Bell [Sat, 22 Nov 2014 02:20:38 +0000 (21:20 -0500)]
Sync rlm_cache.c with master

9 years agoAdd support for &Attribute[#]
Arran Cudbard-Bell [Fri, 21 Nov 2014 04:56:23 +0000 (23:56 -0500)]
Add support for &Attribute[#]

9 years agoAdd memcached rlm_cache_driver
Arran Cudbard-Bell [Thu, 13 Nov 2014 22:39:46 +0000 (17:39 -0500)]
Add memcached rlm_cache_driver

9 years agoAdd configure scripts for rlm_cache so we can run sub configure scripts for drivers
Arran Cudbard-Bell [Thu, 13 Nov 2014 04:54:54 +0000 (23:54 -0500)]
Add configure scripts for rlm_cache so we can run sub configure scripts for drivers

9 years agodlclose driver handles on mod_detach (rlm_cache)
Arran Cudbard-Bell [Sun, 16 Nov 2014 19:07:12 +0000 (14:07 -0500)]
dlclose driver handles on mod_detach (rlm_cache)

9 years agoAdd internal API for rlm_cache module
Arran Cudbard-Bell [Thu, 13 Nov 2014 01:27:54 +0000 (20:27 -0500)]
Add internal API for rlm_cache module

9 years agoBinary attributes printed to strings *must* be prefixed with 0x.
Arran Cudbard-Bell [Thu, 13 Nov 2014 22:05:16 +0000 (17:05 -0500)]
Binary attributes printed to strings *must* be prefixed with 0x.

Else they're not parseable back into binary attributes...

9 years agoAvoid strduping literal template values when doing comparisons
Arran Cudbard-Bell [Thu, 6 Nov 2014 05:07:28 +0000 (00:07 -0500)]
Avoid strduping literal template values when doing comparisons

9 years agoFix for if ("%{Tmp-Integer-0}" =~ /"%{Tmp-Integer-0}"/
Arran Cudbard-Bell [Wed, 5 Nov 2014 22:36:29 +0000 (17:36 -0500)]
Fix for if ("%{Tmp-Integer-0}" =~ /"%{Tmp-Integer-0}"/

and other minor issues

9 years agoAdd support for multivalued attribute comparison
Arran Cudbard-Bell [Wed, 5 Nov 2014 21:08:35 +0000 (16:08 -0500)]
Add support for multivalued attribute comparison

9 years agoFormatting fixes in rlm_couchbase
Arran Cudbard-Bell [Sat, 22 Nov 2014 01:00:05 +0000 (20:00 -0500)]
Formatting fixes in rlm_couchbase

9 years agoSmall fast followers to 'checksimul' feature
Aaron Hurt [Fri, 21 Nov 2014 19:54:51 +0000 (13:54 -0600)]
Small fast followers to 'checksimul' feature
* remove redundant free
* use actual null values instead of empty strings for start/stop timestamp
* allow user specification of the view query key with xlat
* add pre and post verification session count debugging
* update example strip policy to new reference style
* adjust documentation as needed

9 years agoBump before 3.0.5 release_3_0_5
Alan T. DeKok [Fri, 21 Nov 2014 20:14:41 +0000 (15:14 -0500)]
Bump before 3.0.5

9 years agoNote recent changes
Alan T. DeKok [Fri, 21 Nov 2014 20:14:00 +0000 (15:14 -0500)]
Note recent changes

9 years agoMake "example" a dependency, too
Alan T. DeKok [Fri, 21 Nov 2014 19:55:57 +0000 (14:55 -0500)]
Make "example" a dependency, too

9 years agoOnly transition to READ_STATE_END from READ_STATE_ATTR_BEGIN Fixes #835
Arran Cudbard-Bell [Fri, 21 Nov 2014 17:00:29 +0000 (12:00 -0500)]
Only transition to READ_STATE_END from READ_STATE_ATTR_BEGIN Fixes #835

9 years agoDon't re-use debug level for flags. Closes #839
Alan T. DeKok [Fri, 21 Nov 2014 16:34:19 +0000 (11:34 -0500)]
Don't re-use debug level for flags.  Closes #839

9 years agoMerge pull request #837 from leprechau/feature/check_simul
Arran Cudbard-Bell [Fri, 21 Nov 2014 16:19:53 +0000 (11:19 -0500)]
Merge pull request #837 from leprechau/feature/check_simul

Implement and document requested simultaneous use checking feature.