Alan T. DeKok [Wed, 15 Oct 2008 13:38:13 +0000 (15:38 +0200)]
More updates
Alan T. DeKok [Wed, 15 Oct 2008 13:30:52 +0000 (15:30 +0200)]
Check for getresuid && setresuid
Alan T. DeKok [Wed, 15 Oct 2008 05:50:03 +0000 (07:50 +0200)]
Removed thread pool from Perl module.
Also moved configuration from experimental.conf to it's own module,
and removed configuration for thread pool
Alan T. DeKok [Mon, 13 Oct 2008 15:27:11 +0000 (17:27 +0200)]
It's not 2.1.1
Alan T. DeKok [Wed, 15 Oct 2008 13:25:46 +0000 (15:25 +0200)]
Don't add -lreadline to LIBS
Alan T. DeKok [Sun, 12 Oct 2008 07:37:16 +0000 (09:37 +0200)]
libreadline is a library, not a dependency
Alan T. DeKok [Wed, 15 Oct 2008 13:24:39 +0000 (15:24 +0200)]
note changes pulled from main
Alan T. DeKok [Fri, 10 Oct 2008 10:06:38 +0000 (12:06 +0200)]
start sending Status-Server messages earlier
We now start sending them at the START of the zombie period,
which means that a "live" home server is marked "dead" less often.
i.e. an upstream proxy is responsible for realms A && B. We're
currently proxying packets for realm A only... and their upstream
is down. If our upstream doesn't respond, we might think that
it's down, when really it's being stupid. So, we start pinging
it with Status-Server. If it responds, we keep sending it packets,
including packets for realm B.
Alan T. DeKok [Sun, 28 Sep 2008 07:07:22 +0000 (09:07 +0200)]
Temporarily drop permissions
See "suid demystified" paper. We drop permissions, but keep a
saved UID. Then we restore permissions while binding to sockets.
This lets us run as an unprivileged user, but still bind to privileged
ports.
TO DO: add '-u user -g group -R chroot' to command-line options,
and switch UIDs *immediately* on start. This minimizes the amount
of code that runs as root.
TO DO: move suidup/down calls to wrap the bind() calls, and the BINDTODEVICE
calls, to even further minimize the code.
Alan T. DeKok [Sat, 4 Oct 2008 08:39:52 +0000 (10:39 +0200)]
Use SUN_LEN, which fixes portability issues
Alan T. DeKok [Sat, 4 Oct 2008 07:39:11 +0000 (09:39 +0200)]
Fix typos in previous commit
Alan T. DeKok [Fri, 3 Oct 2008 07:28:51 +0000 (09:28 +0200)]
Initialize nas_address to INADDR_NONE
Alan T. DeKok [Wed, 1 Oct 2008 12:11:21 +0000 (14:11 +0200)]
Parse attributes that are string
Foo = "bar baz"
This needs to be parsed as a type, not as a string, if Foo is date,
for example.
Alan T. DeKok [Tue, 30 Sep 2008 13:23:13 +0000 (15:23 +0200)]
Initialize pool to zero
This fixes a problem where dv->flags != 0 in dict_addvendor
Alan T. DeKok [Fri, 26 Sep 2008 12:11:23 +0000 (14:11 +0200)]
fake->server may be NULL
Alan T. DeKok [Fri, 26 Sep 2008 08:40:49 +0000 (10:40 +0200)]
Fix for ${name}
Alan T. DeKok [Thu, 25 Sep 2008 08:41:26 +0000 (10:41 +0200)]
Note more changes
Alan T. DeKok [Thu, 25 Sep 2008 08:41:13 +0000 (10:41 +0200)]
Note more changes
Alan T. DeKok [Wed, 24 Sep 2008 15:12:23 +0000 (17:12 +0200)]
Get session resumption working for EAP-TLS, too
Alan T. DeKok [Wed, 24 Sep 2008 12:30:56 +0000 (14:30 +0200)]
Renumber MSK and EMSK to match the rest of the code
Alan T. DeKok [Wed, 24 Sep 2008 12:05:54 +0000 (14:05 +0200)]
Move "unknown" client code to common area
This simplifies the code (less is better), and enables us to add
a central DoS method. From a quick inspection of the code,
there appears to be more that can be done. Many of the receive
functions have duplicate code, which should be abstracted.
Alan T. DeKok [Tue, 23 Sep 2008 14:53:24 +0000 (16:53 +0200)]
Added comments describing what to do
Alan T. DeKok [Tue, 23 Sep 2008 14:51:07 +0000 (16:51 +0200)]
Create MIP4 keys.
Alan T. DeKok [Tue, 23 Sep 2008 14:49:38 +0000 (16:49 +0200)]
Expose MSK and EMSK
Alan T. DeKok [Tue, 23 Sep 2008 13:18:25 +0000 (15:18 +0200)]
More relay oddness
Alan T. DeKok [Tue, 23 Sep 2008 13:02:34 +0000 (15:02 +0200)]
Fix handling for relays.
Some relays are hard-coded to send to the server port, and expect to
see replies back to their IP, server port. However, they ALSO
use that server port for sending packets. i.e.
relay:67 -> server:67
Relays that send FROM 68, and expect replies back TO 67 are broken.
Alan T. DeKok [Tue, 23 Sep 2008 12:33:14 +0000 (14:33 +0200)]
Sample schema && queries for WiMAX MIP keys
Alan T. DeKok [Tue, 23 Sep 2008 09:04:48 +0000 (11:04 +0200)]
define DEBUG4
Alan T. DeKok [Mon, 22 Sep 2008 08:45:12 +0000 (10:45 +0200)]
Don't free strings parsed by the config API
Alan T. DeKok [Sun, 21 Sep 2008 12:32:31 +0000 (14:32 +0200)]
Removed duplicate variable definitions
Alan T. DeKok [Sun, 21 Sep 2008 12:25:40 +0000 (14:25 +0200)]
Fixed compile warnings
Alan T. DeKok [Sun, 21 Sep 2008 12:21:49 +0000 (14:21 +0200)]
Build the module only if manually configured
Alan T. DeKok [Sun, 21 Sep 2008 12:20:13 +0000 (14:20 +0200)]
Added GPL headers
Alan T. DeKok [Sun, 21 Sep 2008 12:19:51 +0000 (14:19 +0200)]
Fixed compiler warnings
Alan T. DeKok [Sun, 21 Sep 2008 12:14:46 +0000 (14:14 +0200)]
Note 2.1.1
Alan T. DeKok [Sun, 21 Sep 2008 06:41:09 +0000 (08:41 +0200)]
Added sip-conf-id
Alan T. DeKok [Sun, 21 Sep 2008 05:48:44 +0000 (07:48 +0200)]
More wrappers around debug_packet
Alan T. DeKok [Sat, 20 Sep 2008 10:30:38 +0000 (12:30 +0200)]
Document port
Alan T. DeKok [Sat, 20 Sep 2008 08:45:36 +0000 (10:45 +0200)]
Build on systems without pthread
Alan T. DeKok [Thu, 18 Sep 2008 16:21:32 +0000 (18:21 +0200)]
I'm not an idiot. I'm just pretending to be one.
Alan T. DeKok [Thu, 18 Sep 2008 16:05:56 +0000 (18:05 +0200)]
No longer need snmp.conf
Alan T. DeKok [Thu, 18 Sep 2008 13:47:30 +0000 (15:47 +0200)]
Deleted
Alan T. DeKok [Thu, 18 Sep 2008 13:47:22 +0000 (15:47 +0200)]
Latest set of updates
Alan T. DeKok [Thu, 18 Sep 2008 13:47:08 +0000 (15:47 +0200)]
Apparently spaces are necessary.
Alan T. DeKok [Thu, 18 Sep 2008 12:59:46 +0000 (14:59 +0200)]
Typos
Alan T. DeKok [Thu, 18 Sep 2008 12:59:31 +0000 (14:59 +0200)]
Proxy stats
Alan T. DeKok [Thu, 18 Sep 2008 12:56:09 +0000 (14:56 +0200)]
Renamed
Alan T. DeKok [Thu, 18 Sep 2008 12:49:11 +0000 (14:49 +0200)]
More munin stuff
Alan T. DeKok [Thu, 18 Sep 2008 10:56:02 +0000 (12:56 +0200)]
Minor changes, +x, cleanups
Alan T. DeKok [Thu, 18 Sep 2008 08:21:04 +0000 (10:21 +0200)]
Add echo. Don't strip TOO many spaces
Alan T. DeKok [Thu, 18 Sep 2008 06:08:22 +0000 (08:08 +0200)]
Print home servers, too
Alan T. DeKok [Thu, 18 Sep 2008 05:58:55 +0000 (07:58 +0200)]
One more \n
Alan T. DeKok [Thu, 18 Sep 2008 05:56:57 +0000 (07:56 +0200)]
Add line # to error, and add home2, not home
Alan T. DeKok [Wed, 17 Sep 2008 15:52:24 +0000 (17:52 +0200)]
Sample file for Munin, using new radmin tool.
Ain't this easy, folks?
Alan T. DeKok [Wed, 17 Sep 2008 15:21:53 +0000 (17:21 +0200)]
global home server stats && server version
Alan T. DeKok [Wed, 17 Sep 2008 12:53:29 +0000 (14:53 +0200)]
Call sql_escape_func
Alan T. DeKok [Wed, 17 Sep 2008 12:49:50 +0000 (14:49 +0200)]
Expose sql_escape_func
Alan T. DeKok [Wed, 17 Sep 2008 09:47:03 +0000 (11:47 +0200)]
For 2.1.1
Alan T. DeKok [Wed, 17 Sep 2008 09:45:17 +0000 (11:45 +0200)]
Update for 2.1.1
Alan T. DeKok [Wed, 17 Sep 2008 09:22:38 +0000 (11:22 +0200)]
Don't need the \r
Alan T. DeKok [Wed, 17 Sep 2008 09:22:10 +0000 (11:22 +0200)]
Decode WiMAX non-TLV's properly.
And TLV's that are continued, too
Alan T. DeKok [Wed, 17 Sep 2008 09:21:30 +0000 (11:21 +0200)]
TLV's are 0x
Alan T. DeKok [Tue, 16 Sep 2008 09:46:50 +0000 (11:46 +0200)]
More printf's
Alan T. DeKok [Mon, 15 Sep 2008 15:01:19 +0000 (17:01 +0200)]
Document new options
Alan T. DeKok [Mon, 15 Sep 2008 14:59:19 +0000 (16:59 +0200)]
Output to file
Alan T. DeKok [Mon, 15 Sep 2008 14:33:18 +0000 (16:33 +0200)]
More info for home server list
Alan T. DeKok [Mon, 15 Sep 2008 10:48:03 +0000 (12:48 +0200)]
Added -i <file>, and ignore comments
Alan T. DeKok [Mon, 15 Sep 2008 09:27:42 +0000 (11:27 +0200)]
added "outstanding" to home_server stats
Alan T. DeKok [Mon, 15 Sep 2008 09:00:18 +0000 (11:00 +0200)]
Simplify code some more
Alan T. DeKok [Mon, 15 Sep 2008 08:49:44 +0000 (10:49 +0200)]
Get/set home server state alive/dead
Alan T. DeKok [Sun, 14 Sep 2008 14:21:23 +0000 (16:21 +0200)]
More checks for weird systems
Alan T. DeKok [Sun, 14 Sep 2008 14:13:42 +0000 (16:13 +0200)]
Corrected typo
Alan T. DeKok [Sun, 14 Sep 2008 14:12:41 +0000 (16:12 +0200)]
Build on systems without MSG_DONTWAIT
Alan T. DeKok [Sun, 14 Sep 2008 14:07:39 +0000 (16:07 +0200)]
more #ifdef wrappers
Alan T. DeKok [Sun, 14 Sep 2008 14:05:31 +0000 (16:05 +0200)]
More #ifdef wrappers
Alan T. DeKok [Sun, 14 Sep 2008 14:00:58 +0000 (16:00 +0200)]
Removed need for global NO_SUCH_CHILD_PID
Alan T. DeKok [Sun, 14 Sep 2008 13:52:24 +0000 (15:52 +0200)]
Removed need for NO_SUCH_CHILD_PID
Alan T. DeKok [Sun, 14 Sep 2008 13:22:31 +0000 (15:22 +0200)]
eof -> at_eof
Alan T. DeKok [Sun, 14 Sep 2008 13:19:15 +0000 (15:19 +0200)]
Correct placement of bracket for non-IPv6 systems
Alan T. DeKok [Sun, 14 Sep 2008 13:15:40 +0000 (15:15 +0200)]
Don't insert message type twice
Alan T. DeKok [Sun, 14 Sep 2008 12:57:50 +0000 (14:57 +0200)]
ANSI prototypes
Alan T. DeKok [Sun, 14 Sep 2008 10:24:10 +0000 (12:24 +0200)]
Clean up XML output
Alan T. DeKok [Sun, 14 Sep 2008 10:23:58 +0000 (12:23 +0200)]
Rearrange XML output
Alan T. DeKok [Sun, 14 Sep 2008 06:52:44 +0000 (08:52 +0200)]
Added help
Alan T. DeKok [Sun, 14 Sep 2008 05:49:01 +0000 (07:49 +0200)]
add client file <filename>
Alan T. DeKok [Sun, 14 Sep 2008 05:48:40 +0000 (07:48 +0200)]
One more flag to client_read
Alan T. DeKok [Sat, 13 Sep 2008 19:02:59 +0000 (21:02 +0200)]
Use macro for debug_packet
Alan T. DeKok [Sat, 13 Sep 2008 16:26:58 +0000 (18:26 +0200)]
Updated text
Alan T. DeKok [Sat, 13 Sep 2008 16:26:14 +0000 (18:26 +0200)]
Make buffer really large
Alan T. DeKok [Sat, 13 Sep 2008 16:02:09 +0000 (18:02 +0200)]
Loads more commands for clients && home servers
Alan T. DeKok [Sat, 13 Sep 2008 16:01:15 +0000 (18:01 +0200)]
Dump config as-read to FILE*
Alan T. DeKok [Sat, 13 Sep 2008 16:00:53 +0000 (18:00 +0200)]
Added more 'const'
Alan T. DeKok [Sat, 13 Sep 2008 14:53:12 +0000 (16:53 +0200)]
Removed "show config". It's a duplicate
Alan T. DeKok [Sat, 13 Sep 2008 14:29:43 +0000 (16:29 +0200)]
added many more commands
Alan T. DeKok [Sat, 13 Sep 2008 14:29:18 +0000 (16:29 +0200)]
Added declaration for proxy stats
Alan T. DeKok [Sat, 13 Sep 2008 14:29:04 +0000 (16:29 +0200)]
Added API to manage home servers by internal number
Alan T. DeKok [Sat, 13 Sep 2008 08:08:01 +0000 (10:08 +0200)]
Document mode
Alan T. DeKok [Sat, 13 Sep 2008 08:02:56 +0000 (10:02 +0200)]
Set r/w mode, and mark commands as read or write
Alan T. DeKok [Fri, 12 Sep 2008 12:28:56 +0000 (14:28 +0200)]
Debug packets only if NOT in debugging mode.
Alan T. DeKok [Fri, 12 Sep 2008 12:27:34 +0000 (14:27 +0200)]
Use new dictionaries