Alan T. DeKok [Tue, 22 Jun 2010 14:37:54 +0000 (16:37 +0200)]
interface is a #define on Mingw
Alan T. DeKok [Tue, 22 Jun 2010 12:19:56 +0000 (14:19 +0200)]
Add <instance>-SQL-Group, just like the LDAP module
Alan T. DeKok [Sat, 26 Jun 2010 16:56:59 +0000 (18:56 +0200)]
Correct logic in pairmove2 now that we have vendor separate from attr
Alan T. DeKok [Tue, 15 Jun 2010 10:12:12 +0000 (12:12 +0200)]
More descriptive error messages
Alan T. DeKok [Mon, 14 Jun 2010 08:50:06 +0000 (10:50 +0200)]
Simple rules to build HTML files if we don't have sphinx
Alan T. DeKok [Mon, 14 Jun 2010 08:44:58 +0000 (10:44 +0200)]
Makefile / index for Sphinx builds
We don't change the existing build, as we're in a "stable" release,
and we don't want to change functionality.
Alan T. DeKok [Mon, 14 Jun 2010 08:44:46 +0000 (10:44 +0200)]
Minor cleanups
Alan T. DeKok [Mon, 14 Jun 2010 08:42:31 +0000 (10:42 +0200)]
Manually pull from git "old-dev" branch
Alan T. DeKok [Mon, 14 Jun 2010 08:42:09 +0000 (10:42 +0200)]
New RST versions from bjlockie
Alan T. DeKok [Mon, 14 Jun 2010 08:41:15 +0000 (10:41 +0200)]
Moved files without changing contents
In preparation for commiting new RST versions
Alan T. DeKok [Fri, 11 Jun 2010 12:54:07 +0000 (14:54 +0200)]
Fixes to make more modules build
Alan T. DeKok [Thu, 10 Jun 2010 08:58:04 +0000 (10:58 +0200)]
Ensure we do PINGs only for UDP packets.
Alan T. DeKok [Mon, 31 May 2010 13:54:54 +0000 (15:54 +0200)]
Made ONE caller for request_stats_final.
It doesn't hurt to push some of the stats off until later.
Alan T. DeKok [Thu, 10 Jun 2010 08:07:04 +0000 (10:07 +0200)]
Catch "ping" packets before
Alan T. DeKok [Thu, 10 Jun 2010 06:08:54 +0000 (08:08 +0200)]
Fix typo
Alan T. DeKok [Wed, 9 Jun 2010 13:09:02 +0000 (15:09 +0200)]
Cleaned up debug output to be readable
Alan T. DeKok [Wed, 9 Jun 2010 06:38:05 +0000 (08:38 +0200)]
Enable MS-CHAPv1 support in radclient.
Alan T. DeKok [Wed, 9 Jun 2010 06:36:44 +0000 (08:36 +0200)]
Move MS-CHAP code to separate files.
Alan T. DeKok [Wed, 9 Jun 2010 06:31:46 +0000 (08:31 +0200)]
Removed the "unix" module from the default configuration
Few people do Unix authentication any more, and it is starting to
cause problems.
Alan T. DeKok [Tue, 8 Jun 2010 14:28:23 +0000 (16:28 +0200)]
Install cryptpasswd as "radcrypt"
Alan T. DeKok [Tue, 8 Jun 2010 13:15:23 +0000 (15:15 +0200)]
Shorten debug message
Alan T. DeKok [Thu, 10 Jun 2010 08:29:09 +0000 (10:29 +0200)]
Use correct variable to look up attributes in the dictionary
2.1.x use "attribute = attr << 16 | vendor". In 2.2, we can
use (attr, vendor) directly
Alan T. DeKok [Tue, 8 Jun 2010 12:45:05 +0000 (14:45 +0200)]
Fix proxying of inner tunneled requests
Set the source/dst IP of the proxied packet to "unknown" in TTLS/PEAP
When sending, force the source IP address of the packet to whatever
the home server is using.
Alan T. DeKok [Tue, 8 Jun 2010 05:56:38 +0000 (07:56 +0200)]
If we've parsed " in a string, set the length to the correct value
Alan T. DeKok [Tue, 8 Jun 2010 05:55:07 +0000 (07:55 +0200)]
Allow parsing of IPv6 addresses as domain names
Alan T. DeKok [Mon, 7 Jun 2010 21:02:08 +0000 (23:02 +0200)]
Tell OpenSSL to NOT do "no session Id" sessions
Found && fix by Andreas Hartmann
Alan T. DeKok [Mon, 7 Jun 2010 08:38:55 +0000 (10:38 +0200)]
Be more careful about parsing comments after bare words
Alan T. DeKok [Mon, 7 Jun 2010 07:52:50 +0000 (09:52 +0200)]
Fix typo
Alan T. DeKok [Mon, 7 Jun 2010 07:05:30 +0000 (09:05 +0200)]
Plain EAP-MSCHAPv2 should return the MPPE keys.
This is needed for IKE
Alan T. DeKok [Tue, 1 Jun 2010 08:32:09 +0000 (10:32 +0200)]
Move retransmits + proxy failover into child thread
If we receive a retransmit, if the home server is still alive, the proxy
core just sends another retransmit to the home server.
If the home server is down, or we need to do some more work, push that
to a child thread.
Alan T. DeKok [Tue, 1 Jun 2010 08:26:21 +0000 (10:26 +0200)]
Clean up code related to requests in child thread
There is now a "thread_pool_addrequest" when there's no pthread.
It calls radius_handle_request() as before. This makes the event.c
code a little simpler.
Make "poll detail" code call generic socket handler code. Less code,
and one central place for handling things
Alan T. DeKok [Tue, 1 Jun 2010 08:20:09 +0000 (10:20 +0200)]
Delay decoding of packet until we are in the child thread
This also delays removing the packet from the proxy hash. When the server
is busy, this means that the ID's are used for extended periods of time
as compared to 2.1.x. However, if the server is busy and can't process
existing requests, then it has no business proxying even more packets
upstream.
Alan T. DeKok [Wed, 28 Apr 2010 08:01:25 +0000 (10:01 +0200)]
Bump the module magic number.
The APIs are completely different, so the server core should enforce
a prohibition on linking old modules to the new server
Alan T. DeKok [Wed, 28 Apr 2010 06:48:29 +0000 (08:48 +0200)]
Make MSCHAP attribute lookups use Microsofts vendor-id
This was missed in earlier commits
Alan T. DeKok [Wed, 28 Apr 2010 06:42:42 +0000 (08:42 +0200)]
Ignore more auto-generated files
Alan T. DeKok [Wed, 28 Apr 2010 06:40:59 +0000 (08:40 +0200)]
Make it closer to v2.1.x for consistency
Alan T. DeKok [Tue, 27 Apr 2010 08:51:22 +0000 (10:51 +0200)]
Remove all references to "vp->attribute & 0xffff"
They now refer to vp->vendor
Alan T. DeKok [Tue, 27 Apr 2010 08:51:08 +0000 (10:51 +0200)]
Fix args to dict_addattr()
Alan T. DeKok [Wed, 14 Apr 2010 12:30:35 +0000 (14:30 +0200)]
Added back label 'stop_processing'
Alan T. DeKok [Thu, 17 Dec 2009 10:30:54 +0000 (11:30 +0100)]
Remove all limitations on vendor IDs being less than 64K
Alan T. DeKok [Thu, 17 Dec 2009 10:30:32 +0000 (11:30 +0100)]
Fix argument to pairfind
Alan T. DeKok [Thu, 17 Dec 2009 10:04:49 +0000 (11:04 +0100)]
Use new API
Alan T. DeKok [Tue, 13 Oct 2009 10:12:01 +0000 (12:12 +0200)]
Make this unsigned, too
Alan T. DeKok [Tue, 13 Oct 2009 09:15:20 +0000 (11:15 +0200)]
Only WiMAX attributes can be of type tlv
Alan T. DeKok [Tue, 13 Oct 2009 09:12:59 +0000 (11:12 +0200)]
Nested TLVs 4 deep now work...
Alan T. DeKok [Tue, 13 Oct 2009 08:57:46 +0000 (10:57 +0200)]
Fix to encode properly
Alan T. DeKok [Tue, 13 Oct 2009 08:48:24 +0000 (10:48 +0200)]
Enforce limitations
Alan T. DeKok [Tue, 13 Oct 2009 08:46:54 +0000 (10:46 +0200)]
Use external array for shifting attributes to VPs
Alan T. DeKok [Tue, 13 Oct 2009 08:43:58 +0000 (10:43 +0200)]
First stab at parameterizing tlv nonsense
Alan T. DeKok [Fri, 9 Oct 2009 12:06:35 +0000 (14:06 +0200)]
Can't these retards check for duplicate attribute names?
Alan T. DeKok [Fri, 9 Oct 2009 12:05:09 +0000 (14:05 +0200)]
dded the rest of the insane attributes
Alan T. DeKok [Fri, 9 Oct 2009 09:59:26 +0000 (11:59 +0200)]
Fix VSA tunnel encryption. Allow sub-TLVs to be encrypted
Alan T. DeKok [Fri, 9 Oct 2009 09:23:51 +0000 (11:23 +0200)]
Defined a whack more attributes.
OMFG. They nest TLVs 4 deep! What the FUCK is up with that?
Alan T. DeKok [Fri, 9 Oct 2009 08:17:56 +0000 (10:17 +0200)]
Renamed evil function to be less evil
Alan T. DeKok [Fri, 9 Oct 2009 08:16:12 +0000 (10:16 +0200)]
Decode 3-level TLVs
Alan T. DeKok [Thu, 8 Oct 2009 15:41:55 +0000 (17:41 +0200)]
Now properly handles continuation without memcmp && memmove
Alan T. DeKok [Thu, 8 Oct 2009 13:50:16 +0000 (15:50 +0200)]
Now packing WiMAX TLVs, too
Alan T. DeKok [Thu, 8 Oct 2009 13:41:11 +0000 (15:41 +0200)]
Added support for non-TLV WiMAX VSAs
Alan T. DeKok [Thu, 8 Oct 2009 13:20:46 +0000 (15:20 +0200)]
First stab at rewrite of vp2attr.
This makes the code MUCH clearer, with fewer intermediate variables.
It also removes the WiMAX functionality entirely, but that will
be re-added later.
Alan T. DeKok [Thu, 8 Oct 2009 12:55:51 +0000 (14:55 +0200)]
Simplify RFC format attributes
Alan T. DeKok [Thu, 8 Oct 2009 10:37:25 +0000 (12:37 +0200)]
Start separating encoding of data from headers
Alan T. DeKok [Thu, 8 Oct 2009 08:37:08 +0000 (10:37 +0200)]
Fix typo, add more insane TLVs
Alan T. DeKok [Thu, 8 Oct 2009 08:36:47 +0000 (10:36 +0200)]
New macro
Alan T. DeKok [Thu, 8 Oct 2009 08:24:21 +0000 (10:24 +0200)]
Add support for THREE layers of TLVs
We can't yet encode/decode them, but holy shit...
Alan T. DeKok [Wed, 7 Oct 2009 13:02:27 +0000 (15:02 +0200)]
Start of adding new attributes
Alan T. DeKok [Tue, 6 Oct 2009 15:46:35 +0000 (17:46 +0200)]
Don't do memcmp, it's stupid.
Do even more sanity checks on concatenated attributes, so that
we do the minimum necessary
Alan T. DeKok [Tue, 6 Oct 2009 15:33:34 +0000 (17:33 +0200)]
Enforce order on WiMAX VSAs, just like original code
Alan T. DeKok [Tue, 6 Oct 2009 15:18:57 +0000 (17:18 +0200)]
Abstract wimax insanity on encoding into another function
Alan T. DeKok [Tue, 6 Oct 2009 13:15:20 +0000 (15:15 +0200)]
Decode attributes properly
Alan T. DeKok [Tue, 6 Oct 2009 13:10:42 +0000 (15:10 +0200)]
We seem to have the encoding down pat.
We really need to duplicate rad_vp2attr() and hack the shit out of it
for ONLY WiMAX attributes
The code also does NOT decode attributes properly...
Alan T. DeKok [Tue, 6 Oct 2009 13:00:19 +0000 (15:00 +0200)]
Simplify handling of TLVs by post-facto corrections
Alan T. DeKok [Tue, 6 Oct 2009 12:38:23 +0000 (14:38 +0200)]
Be more stringent about encoding TLVs
Alan T. DeKok [Tue, 6 Oct 2009 12:37:42 +0000 (14:37 +0200)]
Enforce WiMAX continuations.
Other vendors are not allowed to have them.
Alan T. DeKok [Tue, 6 Oct 2009 12:26:09 +0000 (14:26 +0200)]
Removed WiMAX continuation hacks.
It now encodes sub-TLVs (sort of). The code is simpler, too...
Alan T. DeKok [Tue, 6 Oct 2009 12:10:45 +0000 (14:10 +0200)]
vp2attr now takes an explicit buffer size
Alan T. DeKok [Tue, 6 Oct 2009 11:06:56 +0000 (13:06 +0200)]
Add mask to vp2tlv
Alan T. DeKok [Tue, 6 Oct 2009 10:48:55 +0000 (12:48 +0200)]
Fake dictionary. Not for public use!
Alan T. DeKok [Mon, 5 Oct 2009 13:41:50 +0000 (15:41 +0200)]
Fixed typo.
We now can decode disgusting shit evil nasty WiMAX nested shit fucking
retarded gangenous TLVs
Alan T. DeKok [Mon, 5 Oct 2009 13:34:46 +0000 (15:34 +0200)]
Allow nested TLVs to be read from the dictionary.
Did I mention I hate WiMAX?
Alan T. DeKok [Mon, 5 Oct 2009 13:34:15 +0000 (15:34 +0200)]
First hack to get second level TLVs working
Alan T. DeKok [Mon, 5 Oct 2009 12:34:01 +0000 (14:34 +0200)]
Reset vendorcode AFTER creating attribute
Alan T. DeKok [Mon, 5 Oct 2009 11:58:27 +0000 (13:58 +0200)]
Fix WiMAX encoding
Alan T. DeKok [Mon, 5 Oct 2009 11:54:34 +0000 (13:54 +0200)]
Fixed comparisons to be correct
Alan T. DeKok [Mon, 5 Oct 2009 11:54:16 +0000 (13:54 +0200)]
Fixes to build
Alan T. DeKok [Mon, 5 Oct 2009 10:32:36 +0000 (12:32 +0200)]
Miracle of miracles... it seems to work
Alan T. DeKok [Mon, 5 Oct 2009 10:04:35 +0000 (12:04 +0200)]
All of the modules now build.
No idea if they work or not...
Alan T. DeKok [Mon, 5 Oct 2009 09:24:56 +0000 (11:24 +0200)]
Many more changes to get it to build.
We're not done yet!
Alan T. DeKok [Mon, 5 Oct 2009 08:58:22 +0000 (10:58 +0200)]
Automatic search and replace for pairfind.
This should catch MOST of the usages of it.
perl -pi -e 's/pairfind\((.*?),(\s*)PW_(.*?)(\s*)\)/pairfind\($1,$2PW_$3, 0$4\)/gm' `find src/main src/modules -name "*.c" -print`
Alan T. DeKok [Mon, 5 Oct 2009 08:51:16 +0000 (10:51 +0200)]
Moved API to (attr, vendor), instead of just attr
Fixed libradius.h, and src/lib.
Updated some modules to call dict_addattr() according to new API
Alan T. DeKok [Mon, 31 May 2010 08:13:38 +0000 (10:13 +0200)]
Print out more request numbers
Alan T. DeKok [Mon, 31 May 2010 06:16:55 +0000 (08:16 +0200)]
Make schema more in line with the schema for other SQL servers
Alan T. DeKok [Sat, 29 May 2010 09:34:57 +0000 (11:34 +0200)]
Print out DHCP attributes sent / received
Alan T. DeKok [Sat, 29 May 2010 09:26:56 +0000 (11:26 +0200)]
Fix endless loop when there are multiple DHCP options
Alan T. DeKok [Mon, 24 May 2010 18:20:06 +0000 (20:20 +0200)]
Set line buf on stdout/err when logs go there
This makes log messages appear more quickly.
Alan T. DeKok [Mon, 24 May 2010 05:35:31 +0000 (07:35 +0200)]
If an integer is surrounded by whitespace, it's still an integer
Alan T. DeKok [Thu, 20 May 2010 15:40:32 +0000 (17:40 +0200)]
Fix template documentation
Alan T. DeKok [Thu, 20 May 2010 13:25:51 +0000 (15:25 +0200)]
No longer needed
Alan T. DeKok [Thu, 20 May 2010 13:25:22 +0000 (15:25 +0200)]
Do cert configuration stuff
Taken from Redhat
Alan T. DeKok [Wed, 19 May 2010 14:47:03 +0000 (16:47 +0200)]
Sync with upstream
Alan T. DeKok [Wed, 19 May 2010 14:27:04 +0000 (16:27 +0200)]
Note module return codes