freeradius.git
15 years agoMore updates
Alan T. DeKok [Wed, 15 Oct 2008 13:38:13 +0000 (15:38 +0200)]
More updates

15 years agoCheck for getresuid && setresuid
Alan T. DeKok [Wed, 15 Oct 2008 13:30:52 +0000 (15:30 +0200)]
Check for getresuid && setresuid

15 years agoRemoved thread pool from Perl module.
Alan T. DeKok [Wed, 15 Oct 2008 05:50:03 +0000 (07:50 +0200)]
Removed thread pool from Perl module.

Also moved configuration from experimental.conf to it's own module,
and removed configuration for thread pool

15 years agoIt's not 2.1.1
Alan T. DeKok [Mon, 13 Oct 2008 15:27:11 +0000 (17:27 +0200)]
It's not 2.1.1

15 years agoDon't add -lreadline to LIBS
Alan T. DeKok [Wed, 15 Oct 2008 13:25:46 +0000 (15:25 +0200)]
Don't add -lreadline to LIBS

15 years agolibreadline is a library, not a dependency
Alan T. DeKok [Sun, 12 Oct 2008 07:37:16 +0000 (09:37 +0200)]
libreadline is a library, not a dependency

15 years agonote changes pulled from main
Alan T. DeKok [Wed, 15 Oct 2008 13:24:39 +0000 (15:24 +0200)]
note changes pulled from main

15 years agostart sending Status-Server messages earlier
Alan T. DeKok [Fri, 10 Oct 2008 10:06:38 +0000 (12:06 +0200)]
start sending Status-Server messages earlier

We now start sending them at the START of the zombie period,
which means that a "live" home server is marked "dead" less often.

i.e. an upstream proxy is responsible for realms A && B.  We're
currently proxying packets for realm A only... and their upstream
is down.  If our upstream doesn't respond, we might think that
it's down, when really it's being stupid.  So, we start pinging
it with Status-Server.  If it responds, we keep sending it packets,
including packets for realm B.

15 years agoTemporarily drop permissions
Alan T. DeKok [Sun, 28 Sep 2008 07:07:22 +0000 (09:07 +0200)]
Temporarily drop permissions

See "suid demystified" paper.  We drop permissions, but keep a
saved UID.  Then we restore permissions while binding to sockets.
This lets us run as an unprivileged user, but still bind to privileged
ports.

TO DO: add '-u user -g group -R chroot' to command-line options,
and switch UIDs *immediately* on start.  This minimizes the amount
of code that runs as root.

TO DO: move suidup/down calls to wrap the bind() calls, and the BINDTODEVICE
calls, to even further minimize the code.

15 years agoUse SUN_LEN, which fixes portability issues
Alan T. DeKok [Sat, 4 Oct 2008 08:39:52 +0000 (10:39 +0200)]
Use SUN_LEN, which fixes portability issues

15 years agoFix typos in previous commit
Alan T. DeKok [Sat, 4 Oct 2008 07:39:11 +0000 (09:39 +0200)]
Fix typos in previous commit

15 years agoInitialize nas_address to INADDR_NONE
Alan T. DeKok [Fri, 3 Oct 2008 07:28:51 +0000 (09:28 +0200)]
Initialize nas_address to INADDR_NONE

15 years agoParse attributes that are string
Alan T. DeKok [Wed, 1 Oct 2008 12:11:21 +0000 (14:11 +0200)]
Parse attributes that are string

Foo = "bar baz"

  This needs to be parsed as a type, not as a string, if Foo is date,
for example.

15 years agoInitialize pool to zero
Alan T. DeKok [Tue, 30 Sep 2008 13:23:13 +0000 (15:23 +0200)]
Initialize pool to zero

This fixes a problem where dv->flags != 0 in dict_addvendor

15 years agofake->server may be NULL
Alan T. DeKok [Fri, 26 Sep 2008 12:11:23 +0000 (14:11 +0200)]
fake->server may be NULL

15 years agoFix for ${name}
Alan T. DeKok [Fri, 26 Sep 2008 08:40:49 +0000 (10:40 +0200)]
Fix for ${name}

15 years agoNote more changes release_2_1_1
Alan T. DeKok [Thu, 25 Sep 2008 08:41:26 +0000 (10:41 +0200)]
Note more changes

15 years agoNote more changes
Alan T. DeKok [Thu, 25 Sep 2008 08:41:13 +0000 (10:41 +0200)]
Note more changes

15 years agoGet session resumption working for EAP-TLS, too
Alan T. DeKok [Wed, 24 Sep 2008 15:12:23 +0000 (17:12 +0200)]
Get session resumption working for EAP-TLS, too

15 years agoRenumber MSK and EMSK to match the rest of the code
Alan T. DeKok [Wed, 24 Sep 2008 12:30:56 +0000 (14:30 +0200)]
Renumber MSK and EMSK to match the rest of the code

15 years agoMove "unknown" client code to common area
Alan T. DeKok [Wed, 24 Sep 2008 12:05:54 +0000 (14:05 +0200)]
Move "unknown" client code to common area

This simplifies the code (less is better), and enables us to add
a central DoS method.  From a quick inspection of the code,
there appears to be more that can be done.  Many of the receive
functions have duplicate code, which should be abstracted.

15 years agoAdded comments describing what to do
Alan T. DeKok [Tue, 23 Sep 2008 14:53:24 +0000 (16:53 +0200)]
Added comments describing what to do

15 years agoCreate MIP4 keys.
Alan T. DeKok [Tue, 23 Sep 2008 14:51:07 +0000 (16:51 +0200)]
Create MIP4 keys.

15 years agoExpose MSK and EMSK
Alan T. DeKok [Tue, 23 Sep 2008 14:49:38 +0000 (16:49 +0200)]
Expose MSK and EMSK

15 years agoMore relay oddness
Alan T. DeKok [Tue, 23 Sep 2008 13:18:25 +0000 (15:18 +0200)]
More relay oddness

15 years agoFix handling for relays.
Alan T. DeKok [Tue, 23 Sep 2008 13:02:34 +0000 (15:02 +0200)]
Fix handling for relays.

Some relays are hard-coded to send to the server port, and expect to
see replies back to their IP, server port.  However, they ALSO
use that server port for sending packets.  i.e.

relay:67 -> server:67

Relays that send FROM 68, and expect replies back TO 67 are broken.

15 years agoSample schema && queries for WiMAX MIP keys
Alan T. DeKok [Tue, 23 Sep 2008 12:33:14 +0000 (14:33 +0200)]
Sample schema && queries for WiMAX MIP keys

15 years agodefine DEBUG4
Alan T. DeKok [Tue, 23 Sep 2008 09:04:48 +0000 (11:04 +0200)]
define DEBUG4

15 years agoDon't free strings parsed by the config API
Alan T. DeKok [Mon, 22 Sep 2008 08:45:12 +0000 (10:45 +0200)]
Don't free strings parsed by the config API

15 years agoRemoved duplicate variable definitions
Alan T. DeKok [Sun, 21 Sep 2008 12:32:31 +0000 (14:32 +0200)]
Removed duplicate variable definitions

15 years agoFixed compile warnings
Alan T. DeKok [Sun, 21 Sep 2008 12:25:40 +0000 (14:25 +0200)]
Fixed compile warnings

15 years agoBuild the module only if manually configured
Alan T. DeKok [Sun, 21 Sep 2008 12:21:49 +0000 (14:21 +0200)]
Build the module only if manually configured

15 years agoAdded GPL headers
Alan T. DeKok [Sun, 21 Sep 2008 12:20:13 +0000 (14:20 +0200)]
Added GPL headers

15 years agoFixed compiler warnings
Alan T. DeKok [Sun, 21 Sep 2008 12:19:51 +0000 (14:19 +0200)]
Fixed compiler warnings

15 years agoNote 2.1.1
Alan T. DeKok [Sun, 21 Sep 2008 12:14:46 +0000 (14:14 +0200)]
Note 2.1.1

15 years agoAdded sip-conf-id
Alan T. DeKok [Sun, 21 Sep 2008 06:41:09 +0000 (08:41 +0200)]
Added sip-conf-id

15 years agoMore wrappers around debug_packet
Alan T. DeKok [Sun, 21 Sep 2008 05:48:44 +0000 (07:48 +0200)]
More wrappers around debug_packet

15 years agoDocument port
Alan T. DeKok [Sat, 20 Sep 2008 10:30:38 +0000 (12:30 +0200)]
Document port

15 years agoBuild on systems without pthread
Alan T. DeKok [Sat, 20 Sep 2008 08:45:36 +0000 (10:45 +0200)]
Build on systems without pthread

15 years agoI'm not an idiot. I'm just pretending to be one.
Alan T. DeKok [Thu, 18 Sep 2008 16:21:32 +0000 (18:21 +0200)]
I'm not an idiot.  I'm just pretending to be one.

15 years agoNo longer need snmp.conf
Alan T. DeKok [Thu, 18 Sep 2008 16:05:56 +0000 (18:05 +0200)]
No longer need snmp.conf

15 years agoDeleted
Alan T. DeKok [Thu, 18 Sep 2008 13:47:30 +0000 (15:47 +0200)]
Deleted

15 years agoLatest set of updates
Alan T. DeKok [Thu, 18 Sep 2008 13:47:22 +0000 (15:47 +0200)]
Latest set of updates

15 years agoApparently spaces are necessary.
Alan T. DeKok [Thu, 18 Sep 2008 13:47:08 +0000 (15:47 +0200)]
Apparently spaces are necessary.

15 years agoTypos
Alan T. DeKok [Thu, 18 Sep 2008 12:59:46 +0000 (14:59 +0200)]
Typos

15 years agoProxy stats
Alan T. DeKok [Thu, 18 Sep 2008 12:59:31 +0000 (14:59 +0200)]
Proxy stats

15 years agoRenamed
Alan T. DeKok [Thu, 18 Sep 2008 12:56:09 +0000 (14:56 +0200)]
Renamed

15 years agoMore munin stuff
Alan T. DeKok [Thu, 18 Sep 2008 12:49:11 +0000 (14:49 +0200)]
More munin stuff

15 years agoMinor changes, +x, cleanups
Alan T. DeKok [Thu, 18 Sep 2008 10:56:02 +0000 (12:56 +0200)]
Minor changes, +x, cleanups

15 years agoAdd echo. Don't strip TOO many spaces
Alan T. DeKok [Thu, 18 Sep 2008 08:21:04 +0000 (10:21 +0200)]
Add echo.  Don't strip TOO many spaces

15 years agoPrint home servers, too
Alan T. DeKok [Thu, 18 Sep 2008 06:08:22 +0000 (08:08 +0200)]
Print home servers, too

15 years agoOne more \n
Alan T. DeKok [Thu, 18 Sep 2008 05:58:55 +0000 (07:58 +0200)]
One more \n

15 years agoAdd line # to error, and add home2, not home
Alan T. DeKok [Thu, 18 Sep 2008 05:56:57 +0000 (07:56 +0200)]
Add line # to error, and add home2, not home

15 years agoSample file for Munin, using new radmin tool.
Alan T. DeKok [Wed, 17 Sep 2008 15:52:24 +0000 (17:52 +0200)]
Sample file for Munin, using new radmin tool.

Ain't this easy, folks?

15 years agoglobal home server stats && server version
Alan T. DeKok [Wed, 17 Sep 2008 15:21:53 +0000 (17:21 +0200)]
global home server stats && server version

15 years agoCall sql_escape_func
Alan T. DeKok [Wed, 17 Sep 2008 12:53:29 +0000 (14:53 +0200)]
Call sql_escape_func

15 years agoExpose sql_escape_func
Alan T. DeKok [Wed, 17 Sep 2008 12:49:50 +0000 (14:49 +0200)]
Expose sql_escape_func

15 years agoFor 2.1.1
Alan T. DeKok [Wed, 17 Sep 2008 09:47:03 +0000 (11:47 +0200)]
For 2.1.1

15 years agoUpdate for 2.1.1
Alan T. DeKok [Wed, 17 Sep 2008 09:45:17 +0000 (11:45 +0200)]
Update for 2.1.1

15 years agoDon't need the \r
Alan T. DeKok [Wed, 17 Sep 2008 09:22:38 +0000 (11:22 +0200)]
Don't need the \r

15 years agoDecode WiMAX non-TLV's properly.
Alan T. DeKok [Wed, 17 Sep 2008 09:22:10 +0000 (11:22 +0200)]
Decode WiMAX non-TLV's properly.

And TLV's that are continued, too

15 years agoTLV's are 0x
Alan T. DeKok [Wed, 17 Sep 2008 09:21:30 +0000 (11:21 +0200)]
TLV's are 0x

15 years agoMore printf's
Alan T. DeKok [Tue, 16 Sep 2008 09:46:50 +0000 (11:46 +0200)]
More printf's

15 years agoDocument new options
Alan T. DeKok [Mon, 15 Sep 2008 15:01:19 +0000 (17:01 +0200)]
Document new options

15 years agoOutput to file
Alan T. DeKok [Mon, 15 Sep 2008 14:59:19 +0000 (16:59 +0200)]
Output to file

15 years agoMore info for home server list
Alan T. DeKok [Mon, 15 Sep 2008 14:33:18 +0000 (16:33 +0200)]
More info for home server list

15 years agoAdded -i <file>, and ignore comments
Alan T. DeKok [Mon, 15 Sep 2008 10:48:03 +0000 (12:48 +0200)]
Added -i <file>, and ignore comments

15 years agoadded "outstanding" to home_server stats
Alan T. DeKok [Mon, 15 Sep 2008 09:27:42 +0000 (11:27 +0200)]
added "outstanding" to home_server stats

15 years agoSimplify code some more
Alan T. DeKok [Mon, 15 Sep 2008 09:00:18 +0000 (11:00 +0200)]
Simplify code some more

15 years agoGet/set home server state alive/dead
Alan T. DeKok [Mon, 15 Sep 2008 08:49:44 +0000 (10:49 +0200)]
Get/set home server state alive/dead

15 years agoMore checks for weird systems
Alan T. DeKok [Sun, 14 Sep 2008 14:21:23 +0000 (16:21 +0200)]
More checks for weird systems

15 years agoCorrected typo
Alan T. DeKok [Sun, 14 Sep 2008 14:13:42 +0000 (16:13 +0200)]
Corrected typo

15 years agoBuild on systems without MSG_DONTWAIT
Alan T. DeKok [Sun, 14 Sep 2008 14:12:41 +0000 (16:12 +0200)]
Build on systems without MSG_DONTWAIT

15 years agomore #ifdef wrappers
Alan T. DeKok [Sun, 14 Sep 2008 14:07:39 +0000 (16:07 +0200)]
more #ifdef wrappers

15 years agoMore #ifdef wrappers
Alan T. DeKok [Sun, 14 Sep 2008 14:05:31 +0000 (16:05 +0200)]
More #ifdef wrappers

15 years agoRemoved need for global NO_SUCH_CHILD_PID
Alan T. DeKok [Sun, 14 Sep 2008 14:00:58 +0000 (16:00 +0200)]
Removed need for global NO_SUCH_CHILD_PID

15 years agoRemoved need for NO_SUCH_CHILD_PID
Alan T. DeKok [Sun, 14 Sep 2008 13:52:24 +0000 (15:52 +0200)]
Removed need for NO_SUCH_CHILD_PID

15 years agoeof -> at_eof
Alan T. DeKok [Sun, 14 Sep 2008 13:22:31 +0000 (15:22 +0200)]
eof -> at_eof

15 years agoCorrect placement of bracket for non-IPv6 systems
Alan T. DeKok [Sun, 14 Sep 2008 13:19:15 +0000 (15:19 +0200)]
Correct placement of bracket for non-IPv6 systems

15 years agoDon't insert message type twice
Alan T. DeKok [Sun, 14 Sep 2008 13:15:40 +0000 (15:15 +0200)]
Don't insert message type twice

15 years agoANSI prototypes
Alan T. DeKok [Sun, 14 Sep 2008 12:57:50 +0000 (14:57 +0200)]
ANSI prototypes

15 years agoClean up XML output
Alan T. DeKok [Sun, 14 Sep 2008 10:24:10 +0000 (12:24 +0200)]
Clean up XML output

15 years agoRearrange XML output
Alan T. DeKok [Sun, 14 Sep 2008 10:23:58 +0000 (12:23 +0200)]
Rearrange XML output

15 years agoAdded help
Alan T. DeKok [Sun, 14 Sep 2008 06:52:44 +0000 (08:52 +0200)]
Added help

15 years agoadd client file <filename>
Alan T. DeKok [Sun, 14 Sep 2008 05:49:01 +0000 (07:49 +0200)]
add client file <filename>

15 years agoOne more flag to client_read
Alan T. DeKok [Sun, 14 Sep 2008 05:48:40 +0000 (07:48 +0200)]
One more flag to client_read

15 years agoUse macro for debug_packet
Alan T. DeKok [Sat, 13 Sep 2008 19:02:59 +0000 (21:02 +0200)]
Use macro for debug_packet

15 years agoUpdated text
Alan T. DeKok [Sat, 13 Sep 2008 16:26:58 +0000 (18:26 +0200)]
Updated text

15 years agoMake buffer really large
Alan T. DeKok [Sat, 13 Sep 2008 16:26:14 +0000 (18:26 +0200)]
Make buffer really large

15 years agoLoads more commands for clients && home servers
Alan T. DeKok [Sat, 13 Sep 2008 16:02:09 +0000 (18:02 +0200)]
Loads more commands for clients && home servers

15 years agoDump config as-read to FILE*
Alan T. DeKok [Sat, 13 Sep 2008 16:01:15 +0000 (18:01 +0200)]
Dump config as-read to FILE*

15 years agoAdded more 'const'
Alan T. DeKok [Sat, 13 Sep 2008 16:00:53 +0000 (18:00 +0200)]
Added more 'const'

15 years agoRemoved "show config". It's a duplicate
Alan T. DeKok [Sat, 13 Sep 2008 14:53:12 +0000 (16:53 +0200)]
Removed "show config".  It's a duplicate

15 years agoadded many more commands
Alan T. DeKok [Sat, 13 Sep 2008 14:29:43 +0000 (16:29 +0200)]
added many more commands

15 years agoAdded declaration for proxy stats
Alan T. DeKok [Sat, 13 Sep 2008 14:29:18 +0000 (16:29 +0200)]
Added declaration for proxy stats

15 years agoAdded API to manage home servers by internal number
Alan T. DeKok [Sat, 13 Sep 2008 14:29:04 +0000 (16:29 +0200)]
Added API to manage home servers by internal number

15 years agoDocument mode
Alan T. DeKok [Sat, 13 Sep 2008 08:08:01 +0000 (10:08 +0200)]
Document mode

15 years agoSet r/w mode, and mark commands as read or write
Alan T. DeKok [Sat, 13 Sep 2008 08:02:56 +0000 (10:02 +0200)]
Set r/w mode, and mark commands as read or write

15 years agoDebug packets only if NOT in debugging mode.
Alan T. DeKok [Fri, 12 Sep 2008 12:28:56 +0000 (14:28 +0200)]
Debug packets only if NOT in debugging mode.

15 years agoUse new dictionaries
Alan T. DeKok [Fri, 12 Sep 2008 12:27:34 +0000 (14:27 +0200)]
Use new dictionaries