freeradius.git
8 years agoDeocde DHCP-Vendor-Specific-Information as octets
Alan T. DeKok [Mon, 15 Jun 2015 16:05:07 +0000 (12:05 -0400)]
Deocde DHCP-Vendor-Specific-Information as octets

Because creating RADIUS VSAs for DHCP data is a bad idea.

8 years agoMust set prefix when doing IP address comparisons in check_for_realm
Arran Cudbard-Bell [Mon, 15 Jun 2015 15:43:01 +0000 (11:43 -0400)]
Must set prefix when doing IP address comparisons in check_for_realm

8 years agoDepend on the dictionary
Alan T. DeKok [Mon, 15 Jun 2015 15:42:53 +0000 (11:42 -0400)]
Depend on the dictionary

8 years agoAdd some DHCP unit tests
Alan T. DeKok [Mon, 15 Jun 2015 15:40:29 +0000 (11:40 -0400)]
Add some DHCP unit tests

8 years agoUse '=' instead of '+='
Alan T. DeKok [Mon, 15 Jun 2015 15:34:32 +0000 (11:34 -0400)]
Use '=' instead of '+='

When creating attributes from packets.

8 years agoLink DHCP code to libfreeradius-dhcp
Alan T. DeKok [Mon, 15 Jun 2015 15:10:37 +0000 (11:10 -0400)]
Link DHCP code to libfreeradius-dhcp

8 years agoMerge pull request #1057 from pwdng/v3.0.x
Alan DeKok [Mon, 15 Jun 2015 13:11:30 +0000 (09:11 -0400)]
Merge pull request #1057 from pwdng/v3.0.x

Update RPM spec file to reflect redis module is now stable

8 years agoTypo fix: retrived => retrieved
Herwin Weststrate [Thu, 4 Jun 2015 12:02:40 +0000 (14:02 +0200)]
Typo fix: retrived => retrieved

8 years agoTypo fix: expnsion => expansion
Herwin Weststrate [Thu, 16 Apr 2015 06:00:10 +0000 (08:00 +0200)]
Typo fix: expnsion => expansion

8 years agoTypo fix: reqex => regex
Herwin Weststrate [Wed, 15 Apr 2015 13:55:54 +0000 (15:55 +0200)]
Typo fix: reqex => regex

8 years agoPartial revert of 93e6ebe0.
Alan T. DeKok [Mon, 15 Jun 2015 11:36:37 +0000 (07:36 -0400)]
Partial revert of 93e6ebe0.

If the home server is dead, there's no request->proxy, and
no fallback server.  So we can't run proxy-proxy-type fail

8 years agoPort fix from sqlcounter
Alan T. DeKok [Sun, 14 Jun 2015 16:29:18 +0000 (12:29 -0400)]
Port fix from sqlcounter

8 years agoCheck for from==NULL. Fixes #1054
Alan T. DeKok [Sun, 14 Jun 2015 14:12:30 +0000 (10:12 -0400)]
Check for from==NULL.  Fixes #1054

8 years agoNo map support in v3.0.x.
Arran Cudbard-Bell [Sun, 14 Jun 2015 02:49:56 +0000 (22:49 -0400)]
No map support in v3.0.x.

8 years agoBackport SASL interactive bind (non interactive didn't work anyway...) Fixes #991
Arran Cudbard-Bell [Sun, 14 Jun 2015 02:06:42 +0000 (22:06 -0400)]
Backport SASL interactive bind (non interactive didn't work anyway...) Fixes #991

8 years agoSync function docs in rlm_ldap with v3.1.x
Arran Cudbard-Bell [Sun, 14 Jun 2015 01:54:40 +0000 (21:54 -0400)]
Sync function docs in rlm_ldap with v3.1.x

8 years agoMerge pull request #1052 from jpereira/develop-debian
Arran Cudbard-Bell [Sat, 13 Jun 2015 23:47:46 +0000 (19:47 -0400)]
Merge pull request #1052 from jpereira/develop-debian

Please, don't show the debian/freeradius-dhcp

8 years agoDon't set resource pointers to NULL when the handle is freed (in SQL drivers)
Arran Cudbard-Bell [Sat, 13 Jun 2015 23:35:44 +0000 (19:35 -0400)]
Don't set resource pointers to NULL when the handle is freed (in SQL drivers)

8 years agoDocument OpenDirectory and MS-CHAP
Alan T. DeKok [Sat, 13 Jun 2015 15:07:56 +0000 (11:07 -0400)]
Document OpenDirectory and MS-CHAP

8 years agoDocument MySQL configuration fields
Arran Cudbard-Bell [Fri, 12 Jun 2015 21:23:22 +0000 (17:23 -0400)]
Document MySQL configuration fields

8 years agoOnly MySQL uses sql_store_result
Arran Cudbard-Bell [Fri, 12 Jun 2015 21:23:11 +0000 (17:23 -0400)]
Only MySQL uses sql_store_result

8 years agoDocument the sql_error_t callback
Arran Cudbard-Bell [Fri, 12 Jun 2015 21:21:25 +0000 (17:21 -0400)]
Document the sql_error_t callback

8 years agoPlease, don't show the debian/freeradius-dhcp
Jorge Pereira [Fri, 12 Jun 2015 17:35:30 +0000 (14:35 -0300)]
Please, don't show the debian/freeradius-dhcp

8 years agoProperly decode "long" EVS which are unknown
Alan T. DeKok [Fri, 12 Jun 2015 15:45:28 +0000 (11:45 -0400)]
Properly decode "long" EVS which are unknown

8 years agoDecode EVS data types correctly.
Alan T. DeKok [Fri, 12 Jun 2015 15:24:41 +0000 (11:24 -0400)]
Decode EVS data types correctly.

8 years agoFix documentation for EVS types
Alan T. DeKok [Fri, 12 Jun 2015 15:09:01 +0000 (11:09 -0400)]
Fix documentation for EVS types

8 years agoUse da->vendor not da->attr for EVS block vendor
Alan T. DeKok [Fri, 12 Jun 2015 15:05:30 +0000 (11:05 -0400)]
Use da->vendor not da->attr for EVS block vendor

8 years agoRe-arrange add vendor code
Alan T. DeKok [Fri, 12 Jun 2015 13:33:06 +0000 (09:33 -0400)]
Re-arrange add vendor code

8 years agoIf the TLVs are malformed, they're unknown
Alan T. DeKok [Thu, 11 Jun 2015 15:41:33 +0000 (11:41 -0400)]
If the TLVs are malformed, they're unknown

8 years agoUse pairmemcpy instead of doing it manually
Alan T. DeKok [Thu, 11 Jun 2015 15:39:11 +0000 (11:39 -0400)]
Use pairmemcpy instead of doing it manually

8 years agoModule rlm_redis and rlm_rediswho, welcome to stable world!
Jorge Pereira [Thu, 11 Jun 2015 17:41:44 +0000 (14:41 -0300)]
Module rlm_redis and rlm_rediswho, welcome to stable world!

8 years agobetter check during redisFree() in the rlm_redis
Jorge Pereira [Thu, 11 Jun 2015 19:18:58 +0000 (16:18 -0300)]
better check during redisFree() in the rlm_redis

8 years agoRemove unused variable
Alan T. DeKok [Thu, 11 Jun 2015 15:33:41 +0000 (11:33 -0400)]
Remove unused variable

8 years agoimprove the debug messages in the rlm_redis
Jorge Pereira [Wed, 10 Jun 2015 21:41:49 +0000 (18:41 -0300)]
improve the debug messages in the rlm_redis

8 years agoMore WiMAX tests
Alan T. DeKok [Thu, 11 Jun 2015 15:06:48 +0000 (11:06 -0400)]
More WiMAX tests

8 years agoMore tests for multiple WiMAX attributes
Alan T. DeKok [Wed, 10 Jun 2015 19:15:51 +0000 (15:15 -0400)]
More tests for multiple WiMAX attributes

8 years agoCalculate final length correctly
Alan T. DeKok [Wed, 10 Jun 2015 19:14:33 +0000 (15:14 -0400)]
Calculate final length correctly

8 years agomore documentation for hotspot attributes
Alan T. DeKok [Wed, 10 Jun 2015 17:16:30 +0000 (13:16 -0400)]
more documentation for hotspot attributes

8 years agoUpdate RPM spec file to reflect redis module is now stable
Philippe Wooding [Thu, 11 Jun 2015 15:16:02 +0000 (17:16 +0200)]
Update RPM spec file to reflect redis module is now stable

8 years agoImprove the error messages in the rlm_redis
Jorge Pereira [Wed, 10 Jun 2015 18:02:06 +0000 (15:02 -0300)]
Improve the error messages in the rlm_redis

8 years agoFixing a memory leak in the rlm_redis
Jorge Pereira [Wed, 10 Jun 2015 18:01:19 +0000 (15:01 -0300)]
Fixing a memory leak in the rlm_redis

8 years agoPrint slightly better errors
Alan T. DeKok [Wed, 10 Jun 2015 16:57:38 +0000 (12:57 -0400)]
Print slightly better errors

8 years agoBuild OpenDirectory on Apple
Alan T. DeKok [Wed, 10 Jun 2015 16:34:25 +0000 (12:34 -0400)]
Build OpenDirectory on Apple

8 years agorad_getgid() returns <0 on error
Alan T. DeKok [Wed, 10 Jun 2015 16:18:22 +0000 (12:18 -0400)]
rad_getgid() returns <0 on error

8 years agoUse AcctUniqueId everywhere
Arran Cudbard-Bell [Wed, 10 Jun 2015 15:13:27 +0000 (11:13 -0400)]
Use AcctUniqueId everywhere

8 years agoSwitch to using session_identifier in MySQL
Alan T. DeKok [Wed, 10 Jun 2015 14:48:21 +0000 (10:48 -0400)]
Switch to using session_identifier in MySQL

8 years agoAdd a freeradius-dhcp Debian package
Brad Cowie [Wed, 10 Jun 2015 04:59:08 +0000 (04:59 +0000)]
Add a freeradius-dhcp Debian package

Adds a new package called freeradius-dhcp for Debian platform that includes
the proto_dhcp.so library needed to listen on a DHCP socket.

8 years agoMerge pull request #1038 from jpereira/develop-dict-aptilo
Arran Cudbard-Bell [Tue, 9 Jun 2015 16:35:53 +0000 (12:35 -0400)]
Merge pull request #1038 from jpereira/develop-dict-aptilo

Add support for Aptilo Access Controller

8 years agoAdded support for Aptilo Controller
Jorge Pereira [Tue, 9 Jun 2015 16:34:11 +0000 (13:34 -0300)]
Added support for Aptilo Controller

8 years agoMore docs on stats memory
Alan T. DeKok [Tue, 9 Jun 2015 15:03:52 +0000 (11:03 -0400)]
More docs on stats memory

8 years agoAdd "stats memory" command
Alan T. DeKok [Tue, 9 Jun 2015 14:59:44 +0000 (10:59 -0400)]
Add "stats memory" command

8 years agoBump default max_requests. It's 2015. Memory is cheaper than 1999
Alan T. DeKok [Tue, 9 Jun 2015 14:14:39 +0000 (10:14 -0400)]
Bump default max_requests.  It's 2015.  Memory is cheaper than 1999

8 years agoFix issue with fr_cursor_remove
Arran Cudbard-Bell [Tue, 9 Jun 2015 05:13:34 +0000 (01:13 -0400)]
Fix issue with fr_cursor_remove

Caused unexpected behaviour removing attributes in an fr_cursor_next loop.

cursor->current would be advanced past the VP we were deleting. Which meant fr_cursor_next would skip past the next attribute.

Now we set current to be the vp before the one we're deleting, so fr_cursor_next works as expected.

8 years agofix docs
Alan T. DeKok [Mon, 8 Jun 2015 20:08:21 +0000 (16:08 -0400)]
fix docs

8 years agoPost-Proxy-Type Fail if we can't proxy to Packet-Dst-IP-Address
Alan T. DeKok [Mon, 8 Jun 2015 20:02:03 +0000 (16:02 -0400)]
Post-Proxy-Type Fail if we can't proxy to Packet-Dst-IP-Address

If you had wanted fail-over, you should have used a pool.

8 years agoAdd the vsa 'Alc-Wlan-SSID-VLAN' for Alcatel 7750
Jorge Pereira [Mon, 8 Jun 2015 18:41:10 +0000 (15:41 -0300)]
Add the vsa 'Alc-Wlan-SSID-VLAN' for Alcatel 7750

8 years agoChange length checks to warnings for v3.0.x
Arran Cudbard-Bell [Mon, 8 Jun 2015 19:05:42 +0000 (15:05 -0400)]
Change length checks to warnings for v3.0.x

8 years agoFix proxy to Packet-Dst-IP-Address.
Alan T. DeKok [Mon, 8 Jun 2015 17:50:46 +0000 (13:50 -0400)]
Fix proxy to Packet-Dst-IP-Address.

So that it uses the correct destination port.

8 years agonote recent changes
Alan T. DeKok [Mon, 8 Jun 2015 15:51:44 +0000 (11:51 -0400)]
note recent changes

8 years agoMore. Fixes #1035
Alan T. DeKok [Mon, 8 Jun 2015 14:26:21 +0000 (10:26 -0400)]
More. Fixes #1035

8 years agoStupid Perl changes it's parsing rules. Fixes #1035
Alan T. DeKok [Mon, 8 Jun 2015 14:23:47 +0000 (10:23 -0400)]
Stupid Perl changes it's parsing rules.  Fixes #1035

8 years agoFix bug that caused spinning when home server was put in zombie state.
Philippe Wooding [Mon, 8 Jun 2015 10:18:22 +0000 (12:18 +0200)]
Fix bug that caused spinning when home server was put in zombie state.

8 years agoxlat value concat uses ','
Arran Cudbard-Bell [Mon, 8 Jun 2015 12:14:44 +0000 (08:14 -0400)]
xlat value concat uses ','

8 years agosqlhpwippool gets built irrespective of experimental
Arran Cudbard-Bell [Mon, 8 Jun 2015 02:37:30 +0000 (22:37 -0400)]
sqlhpwippool gets built irrespective of experimental

8 years agoPrint out log message before validation
Arran Cudbard-Bell [Sun, 7 Jun 2015 15:06:27 +0000 (11:06 -0400)]
Print out log message before validation

8 years agoCheck that the total length of all received fragments matches exactly the length...
Arran Cudbard-Bell [Sat, 6 Jun 2015 17:53:08 +0000 (13:53 -0400)]
Check that the total length of all received fragments matches exactly the length specified in the first fragment

8 years agoUse bools where appropriate
Arran Cudbard-Bell [Fri, 5 Jun 2015 21:47:43 +0000 (15:47 -0600)]
Use bools where appropriate

8 years agoDocument tls_session_t fields
Arran Cudbard-Bell [Fri, 5 Jun 2015 21:47:24 +0000 (15:47 -0600)]
Document tls_session_t fields

8 years agoRevert "Make WITH_DETAIL_THREAD the default."
Alan T. DeKok [Sun, 7 Jun 2015 14:47:30 +0000 (10:47 -0400)]
Revert "Make WITH_DETAIL_THREAD the default."

This reverts commit e9f596f45bf8271bde5ff46cffd4909aaa2cd234.

arg.  Some systems don't have pthreads.  <sigh>

8 years agoDo less work on check_config
Alan T. DeKok [Sun, 7 Jun 2015 14:30:19 +0000 (10:30 -0400)]
Do less work on check_config

8 years agoMake WITH_DETAIL_THREAD the default.
Alan T. DeKok [Sun, 7 Jun 2015 14:29:46 +0000 (10:29 -0400)]
Make WITH_DETAIL_THREAD the default.

8 years agoStart of "hup module" code.
Alan T. DeKok [Sat, 6 Jun 2015 14:34:13 +0000 (10:34 -0400)]
Start of "hup module" code.

Handle module config files, too.  e.g. "users" file.

It's not clear how to best handle that.  A module has to be told
to re-load the files it loads... but with no changes to the
module config section.  It's probably best to add a "hup" method
to the modules

8 years agoDocument what's going on
Alan T. DeKok [Sat, 6 Jun 2015 13:36:45 +0000 (09:36 -0400)]
Document what's going on

8 years agoCan't hup a module with bootstrap method
Alan T. DeKok [Sat, 6 Jun 2015 13:35:11 +0000 (09:35 -0400)]
Can't hup a module with bootstrap method

Becvause bootstrap registers xlat's, paircompare, etc.

8 years agoWith winbind stuff, it's no longer HUP-safe
Alan T. DeKok [Sat, 6 Jun 2015 13:31:28 +0000 (09:31 -0400)]
With winbind stuff, it's no longer HUP-safe

9 years agoFix CID 1271301
Alan T. DeKok [Fri, 5 Jun 2015 23:06:43 +0000 (19:06 -0400)]
Fix CID 1271301

Ignore the return code of rbtree_walk()

9 years agonote recent changes
Alan T. DeKok [Fri, 5 Jun 2015 19:15:42 +0000 (15:15 -0400)]
note recent changes

9 years agoCache FILE_INPUT from modules, too.
Alan T. DeKok [Fri, 5 Jun 2015 18:37:31 +0000 (14:37 -0400)]
Cache FILE_INPUT from modules, too.

So that we can do HUP if a file changes for a module, but
avoid HUP if all of the files remain the same

9 years agoAllow the same config file to be read twice
Alan T. DeKok [Fri, 5 Jun 2015 18:28:58 +0000 (14:28 -0400)]
Allow the same config file to be read twice

Because it's sometimes useful, and as an error, it rarely happens

9 years agore-open log file even if no config was changed
Alan T. DeKok [Fri, 5 Jun 2015 18:27:45 +0000 (14:27 -0400)]
re-open log file even if no config was changed

9 years agoIgnore HUP if no config files have changed
Alan T. DeKok [Fri, 5 Jun 2015 18:26:03 +0000 (14:26 -0400)]
Ignore HUP if no config files have changed

9 years agoMake an rbtree of files we've included
Alan T. DeKok [Fri, 5 Jun 2015 16:34:12 +0000 (12:34 -0400)]
Make an rbtree of files we've included

And track the dev / inode, instead of the filename.  It's better
and easier.

9 years agocf_file_include() is private.
Alan T. DeKok [Fri, 5 Jun 2015 14:38:51 +0000 (10:38 -0400)]
cf_file_include() is private.

And no one outside of conffile.c calls it.  Everyone else should
call cf_file_read()

9 years agoTrack include files at the top level, instead of each section
Alan T. DeKok [Fri, 5 Jun 2015 14:37:09 +0000 (10:37 -0400)]
Track include files at the top level, instead of each section

So that when we're asked to include the same file twice, but
from different sub-sections, we can track that.

9 years agoWhitespace
Alan T. DeKok [Fri, 5 Jun 2015 14:30:00 +0000 (10:30 -0400)]
Whitespace

9 years agoOCSP messages should go to the request log, not the global log
Arran Cudbard-Bell [Fri, 5 Jun 2015 18:12:42 +0000 (12:12 -0600)]
OCSP messages should go to the request log, not the global log

9 years agoCheck if eaptls_prev is NULL
Arran Cudbard-Bell [Fri, 5 Jun 2015 17:47:52 +0000 (11:47 -0600)]
Check if eaptls_prev is NULL

9 years agoFix indentation for some messages, lower priority of others to make EAP-TLS debug...
Arran Cudbard-Bell [Fri, 5 Jun 2015 16:27:12 +0000 (10:27 -0600)]
Fix indentation for some messages, lower priority of others to make EAP-TLS debug cleaner

Reword yet more log messages, so they make sense for mortals

9 years agoMove tls_status_table outside of ENABLE_OPENSSL_VERSOIN_CHECK Closes #1030
Arran Cudbard-Bell [Fri, 5 Jun 2015 15:40:07 +0000 (09:40 -0600)]
Move tls_status_table outside of ENABLE_OPENSSL_VERSOIN_CHECK Closes #1030

9 years agoDoxygen
Arran Cudbard-Bell [Fri, 5 Jun 2015 04:29:49 +0000 (22:29 -0600)]
Doxygen

9 years agoUse common prefix for all TLS log messages
Arran Cudbard-Bell [Fri, 5 Jun 2015 03:51:24 +0000 (21:51 -0600)]
Use common prefix for all TLS log messages

9 years agoMore logging fixes
Arran Cudbard-Bell [Fri, 5 Jun 2015 02:38:31 +0000 (20:38 -0600)]
More logging fixes

9 years agoDefine a prefix for ROPTIONAL global messages
Arran Cudbard-Bell [Fri, 5 Jun 2015 00:01:40 +0000 (18:01 -0600)]
Define a prefix for ROPTIONAL global messages

9 years agoRequest may be null
Arran Cudbard-Bell [Thu, 4 Jun 2015 23:33:51 +0000 (17:33 -0600)]
Request may be null

9 years agoMore minor message tweaks
Arran Cudbard-Bell [Thu, 4 Jun 2015 23:21:28 +0000 (17:21 -0600)]
More minor message tweaks

9 years agoTypos
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:57:51 +0000 (16:57 -0600)]
Typos

9 years agoClearer debugging for EAP-TLS peer fragmentation
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:42:15 +0000 (16:42 -0600)]
Clearer debugging for EAP-TLS peer fragmentation

9 years agoint_ssl_status_check should log to the request log
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:40:45 +0000 (16:40 -0600)]
int_ssl_status_check should log to the request log

9 years agoThese aren't global errors, so should be REDEBUG not RERROR
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:40:07 +0000 (16:40 -0600)]
These aren't global errors, so should be REDEBUG not RERROR

9 years agoUse standard return code message format
Arran Cudbard-Bell [Thu, 4 Jun 2015 22:29:29 +0000 (16:29 -0600)]
Use standard return code message format