freeradius.git
9 years agoClean up changes no longer needed.
Sam Hartman [Thu, 10 Jul 2014 14:13:17 +0000 (10:13 -0400)]
Clean up changes no longer needed.

we had several hunks left over from merges with upstream that are no longer needed.
Clean up the upstream diff.

9 years agofr_inaddr_mask fix 0 prefix
Sam Hartman [Thu, 10 Jul 2014 13:42:18 +0000 (09:42 -0400)]
fr_inaddr_mask fix 0 prefix

Don't depend on the behavior of shifting by 32-bits on a 32-bit type.

9 years agofind_client: min prefix of 0 needs to work
Sam Hartman [Thu, 10 Jul 2014 11:41:09 +0000 (07:41 -0400)]
find_client: min prefix of 0 needs to work

Use signed loop counter to permit 0-1 to be <= min_prefix

9 years agoAllow null parent in add_home_server
Sam Hartman [Wed, 9 Jul 2014 11:28:07 +0000 (07:28 -0400)]
Allow null parent in add_home_server

When dynamically adding a home server it is likely that no config
section will be available thus no parent section.

9 years agoChannel bindings fixes
Kevin Wasserman [Wed, 2 Jul 2014 11:56:39 +0000 (07:56 -0400)]
Channel bindings fixes

-fix size calculation
-skip unwanted attrs when copying
-add safety check to copy code in case size is wrong
-add cast to get correct result from talloc_array_length()

9 years agoDon't call free on talloc'ed channel bindings packet
Kevin Wasserman [Mon, 30 Jun 2014 15:41:32 +0000 (11:41 -0400)]
Don't call free on talloc'ed channel bindings packet

9 years agorealms_pools_add -> realm_pool_add
Kevin Wasserman [Sat, 28 Jun 2014 09:46:38 +0000 (05:46 -0400)]
realms_pools_add -> realm_pool_add

9 years agoFix cursor initialization bugs in eap_chbind_vp2packet
Kevin Wasserman [Sat, 28 Jun 2014 09:22:25 +0000 (05:22 -0400)]
Fix cursor initialization bugs in eap_chbind_vp2packet

9 years agoeliminate unneeded debug spew
Kevin Wasserman [Thu, 26 Jun 2014 17:44:58 +0000 (13:44 -0400)]
eliminate unneeded debug spew

9 years agomore whitespace
Kevin Wasserman [Thu, 26 Jun 2014 17:41:00 +0000 (13:41 -0400)]
more whitespace

9 years agowhitespace cleanup
Kevin Wasserman [Thu, 26 Jun 2014 17:39:28 +0000 (13:39 -0400)]
whitespace cleanup

9 years agoeliminate eap_chbind_packet_t
Kevin Wasserman [Thu, 26 Jun 2014 17:37:08 +0000 (13:37 -0400)]
eliminate eap_chbind_packet_t

9 years agoeliminate bogus whitespace diff
Kevin Wasserman [Thu, 26 Jun 2014 17:24:24 +0000 (13:24 -0400)]
eliminate bogus whitespace diff

9 years agoRemove redundant call to set_psk_client_callback()
Kevin Wasserman [Thu, 26 Jun 2014 17:20:21 +0000 (13:20 -0400)]
Remove redundant call to set_psk_client_callback()

9 years agoRemove duplicate chbind functions now located in eap_chbind.*
Kevin Wasserman [Thu, 26 Jun 2014 17:07:59 +0000 (13:07 -0400)]
Remove duplicate chbind functions now located in eap_chbind.*

9 years agoMerge remote-tracking branch 'freeradius/v3.0.x' into tr-upgrade
Kevin Wasserman [Thu, 26 Jun 2014 17:06:19 +0000 (13:06 -0400)]
Merge remote-tracking branch 'freeradius/v3.0.x' into tr-upgrade

Conflicts:
src/include/realms.h
src/main/realms.c
src/main/tls.c
src/modules/rlm_eap/libeap/eap_chbind.c
src/modules/rlm_eap/libeap/eap_chbind.h
src/modules/rlm_eap/radeapclient.c
src/modules/rlm_eap/types/rlm_eap_ttls/ttls.c

9 years agoSet a timer for marking a home server dead. Closes #712
Alan T. DeKok [Thu, 26 Jun 2014 12:33:32 +0000 (08:33 -0400)]
Set a timer for marking a home server dead.  Closes #712

9 years agoNote recent changes
Alan T. DeKok [Thu, 26 Jun 2014 12:20:15 +0000 (08:20 -0400)]
Note recent changes

9 years agoPass2 for attributes in existence checks
Alan T. DeKok [Thu, 26 Jun 2014 12:17:30 +0000 (08:17 -0400)]
Pass2 for attributes in existence checks

if (&foo-LDAP-Group) {
...
}

9 years agoUpdate ChangeLog
Arran Cudbard-Bell [Thu, 26 Jun 2014 11:00:57 +0000 (12:00 +0100)]
Update ChangeLog

9 years agoUpdate ChangeLog
Arran Cudbard-Bell [Thu, 26 Jun 2014 10:59:00 +0000 (11:59 +0100)]
Update ChangeLog

9 years agoRemove redundant includes of netinet/in.h
Arran Cudbard-Bell [Thu, 26 Jun 2014 10:55:53 +0000 (11:55 +0100)]
Remove redundant includes of netinet/in.h

9 years agoSet errno appropriately if we're building without IPv6 support and an IPv6 socket...
Arran Cudbard-Bell [Thu, 26 Jun 2014 10:55:40 +0000 (11:55 +0100)]
Set errno appropriately if we're building without IPv6 support and an IPv6 socket is requested

9 years agoDefine __APPLE_USER_RFC_2292 so the IPv6 socket options are exposed on OSX
Arran Cudbard-Bell [Thu, 26 Jun 2014 10:55:12 +0000 (11:55 +0100)]
Define __APPLE_USER_RFC_2292 so the IPv6 socket options are exposed on OSX

9 years agoUpdated some required packages for Debian build
Herwin Weststrate [Thu, 26 Jun 2014 09:59:13 +0000 (11:59 +0200)]
Updated some required packages for Debian build

With newer version of Debian (Jessie) or Ubuntu (Trusty), the packages
libjson0{,-dev} are transitional packages. Prefer their replacements if
they're available.

9 years agoUse sizeof
Arran Cudbard-Bell [Thu, 26 Jun 2014 08:17:11 +0000 (09:17 +0100)]
Use sizeof

9 years agoCheck return code of write
Arran Cudbard-Bell [Thu, 26 Jun 2014 00:24:19 +0000 (01:24 +0100)]
Check return code of write

9 years agoUse _fr_fault_log by default
Arran Cudbard-Bell [Wed, 25 Jun 2014 23:03:38 +0000 (00:03 +0100)]
Use _fr_fault_log by default

9 years agoOnly register fr_fault signal handlers if we're not running under a debugger
Arran Cudbard-Bell [Wed, 25 Jun 2014 22:29:45 +0000 (23:29 +0100)]
Only register fr_fault signal handlers if we're not running under a debugger

9 years agoAllow delayed references to attributes. Helps with #711
Alan T. DeKok [Wed, 25 Jun 2014 21:20:19 +0000 (17:20 -0400)]
Allow delayed references to attributes.  Helps with #711

The short answer for the issue is to use attribute references.

if (&ldap-psec-Ldap-Group == "Professors") {
    ...
}

however, using "&" would result in an error.  This commit allows
the "&", which will make the check work.

9 years agoJust print out what we have for debugging.
Alan T. DeKok [Wed, 25 Jun 2014 20:30:51 +0000 (16:30 -0400)]
Just print out what we have for debugging.

9 years agoThe variable name is "max_response_timeouts"
Alan T. DeKok [Wed, 25 Jun 2014 20:04:54 +0000 (16:04 -0400)]
The variable name is "max_response_timeouts"

9 years agoOnly register signal handlers if we have a PANIC_ACTION set
Arran Cudbard-Bell [Wed, 25 Jun 2014 20:28:33 +0000 (21:28 +0100)]
Only register signal handlers if we have a PANIC_ACTION set

9 years agoCID #1223702
Arran Cudbard-Bell [Wed, 25 Jun 2014 19:47:32 +0000 (20:47 +0100)]
CID #1223702

9 years agoUpdated return type of process_reply to rlm_rcode_t
Herwin Weststrate [Wed, 25 Jun 2014 18:56:37 +0000 (20:56 +0200)]
Updated return type of process_reply to rlm_rcode_t

Minor code cleanup.

9 years agoAdd secret "dynamic" flag to realms
Alan T. DeKok [Wed, 25 Jun 2014 16:43:11 +0000 (12:43 -0400)]
Add secret "dynamic" flag to realms

Which adds mutexes to the RBtree for home server add and lookup.
i.e. the mutexes are likely to be contended, and therefore
slower

9 years agoUse newSVpvn so we don't SEGV on zero length values in rlm_perl
Arran Cudbard-Bell [Wed, 25 Jun 2014 16:42:36 +0000 (17:42 +0100)]
Use newSVpvn so we don't SEGV on zero length values in rlm_perl

9 years agoAdd fr_abin2hex
Arran Cudbard-Bell [Wed, 25 Jun 2014 16:39:42 +0000 (17:39 +0100)]
Add fr_abin2hex

9 years agoExposed realm_realm_add()
Alan T. DeKok [Wed, 25 Jun 2014 16:18:50 +0000 (12:18 -0400)]
Exposed realm_realm_add()

For future work

9 years agoExposed realm_pool_add()
Alan T. DeKok [Wed, 25 Jun 2014 16:13:05 +0000 (12:13 -0400)]
Exposed realm_pool_add()

For future work

9 years agoExposed realm_home_server_add()
Alan T. DeKok [Wed, 25 Jun 2014 16:07:07 +0000 (12:07 -0400)]
Exposed realm_home_server_add()

For future work

9 years agoPrint out limits when opening/closing proxy sockets.
Alan T. DeKok [Wed, 25 Jun 2014 15:38:16 +0000 (11:38 -0400)]
Print out limits when opening/closing proxy sockets.

Should help debug issue #680

9 years agoSimilar += fixes for other modules
Arran Cudbard-Bell [Wed, 25 Jun 2014 14:28:48 +0000 (15:28 +0100)]
Similar += fixes for other modules

9 years agoremove the bootstrap from this VS
Alan Buxey [Tue, 24 Jun 2014 22:28:59 +0000 (23:28 +0100)]
remove the bootstrap from this VS

its commented out and NOT in eap.conf

9 years agoserver should be ready on IPv6 by default
Alan Buxey [Tue, 24 Jun 2014 22:35:31 +0000 (23:35 +0100)]
server should be ready on IPv6 by default

FR should be ready for IPv6 out of the box. auth/acct done.

9 years agoSome shells don't support the '+=' concatenation operator.
Philippe Wooding [Wed, 25 Jun 2014 13:46:51 +0000 (15:46 +0200)]
Some shells don't support the '+=' concatenation operator.

9 years agoMerge pull request #709 from qnet-herwin/perl_fixes_707
Arran Cudbard-Bell [Wed, 25 Jun 2014 14:18:56 +0000 (15:18 +0100)]
Merge pull request #709 from qnet-herwin/perl_fixes_707

Fixed some segfaults in rlm_perl

9 years agoFixed some segfaults in rlm_perl
Herwin Weststrate [Wed, 25 Jun 2014 14:05:49 +0000 (16:05 +0200)]
Fixed some segfaults in rlm_perl

This should fix the changes of #707

9 years agoWe don't actually copy...
Arran Cudbard-Bell [Wed, 25 Jun 2014 13:06:52 +0000 (14:06 +0100)]
We don't actually copy...

9 years agoDo something sane for converting FreeRADIUS values to Kamelschewine. Fixes #707
Arran Cudbard-Bell [Wed, 25 Jun 2014 13:04:11 +0000 (14:04 +0100)]
Do something sane for converting FreeRADIUS values to Kamelschewine. Fixes #707

Apparently Spracheschewine means porcupine

9 years agoAdd fr_cursor_next_peek
Arran Cudbard-Bell [Wed, 25 Jun 2014 12:59:55 +0000 (13:59 +0100)]
Add fr_cursor_next_peek

9 years agoFormatting
Arran Cudbard-Bell [Wed, 25 Jun 2014 12:59:44 +0000 (13:59 +0100)]
Formatting

9 years agoPopulate DHCP-Paramter-Request-List values dynamically
Arran Cudbard-Bell [Wed, 25 Jun 2014 11:52:33 +0000 (12:52 +0100)]
Populate DHCP-Paramter-Request-List values dynamically

9 years agoRemove param documentation from all connection callbacks
Arran Cudbard-Bell [Wed, 25 Jun 2014 11:06:44 +0000 (12:06 +0100)]
Remove param documentation from all connection callbacks

9 years agoDoxygen is stupid, so delete doxygen comments.
Alan T. DeKok [Wed, 25 Jun 2014 11:03:18 +0000 (07:03 -0400)]
Doxygen is stupid, so delete doxygen comments.

It keeps complaining that "ctx" isn't documented.  Fine.  Go away.

9 years agoFix spurious soft asserts Fixes #706
Arran Cudbard-Bell [Wed, 25 Jun 2014 10:56:51 +0000 (11:56 +0100)]
Fix spurious soft asserts Fixes #706

9 years agoUse NULL for talloc ctx in EAP
Alan T. DeKok [Tue, 24 Jun 2014 23:29:44 +0000 (19:29 -0400)]
Use NULL for talloc ctx in EAP

It's safer

9 years agoAdd in rad_virtual_server() which is now required for libeap
Alan T. DeKok [Tue, 24 Jun 2014 21:22:37 +0000 (17:22 -0400)]
Add in rad_virtual_server() which is now required for libeap

9 years agoAdd support for Vendor Specific Suboptions (RFC 4243)
Arran Cudbard-Bell [Fri, 13 Jun 2014 10:12:04 +0000 (11:12 +0100)]
Add support for Vendor Specific Suboptions (RFC 4243)

Add support for array type suboptions

Allow terminating suboption and padding suboption

Add dictionary attributes for a many more DHCP RFCs

9 years agoGlue channel bindings into the TTLS code
Alan T. DeKok [Tue, 24 Jun 2014 18:42:55 +0000 (14:42 -0400)]
Glue channel bindings into the TTLS code

9 years agoChannel binding encode/decoder and process functions
Alan T. DeKok [Tue, 24 Jun 2014 18:42:30 +0000 (14:42 -0400)]
Channel binding encode/decoder and process functions

9 years agoAttributes and definitions fo channel bindings
Alan T. DeKok [Tue, 24 Jun 2014 18:42:10 +0000 (14:42 -0400)]
Attributes and definitions fo channel bindings

9 years agoMove debug messages into rad_virtual_server
Alan T. DeKok [Tue, 24 Jun 2014 18:06:36 +0000 (14:06 -0400)]
Move debug messages into rad_virtual_server

To remove duplication

9 years agoMove exit functions to debug.c
Arran Cudbard-Bell [Tue, 24 Jun 2014 17:07:12 +0000 (18:07 +0100)]
Move exit functions to debug.c

9 years agoMerge pull request #700 from mcnewton/rlm_files
Arran Cudbard-Bell [Tue, 24 Jun 2014 16:32:01 +0000 (17:32 +0100)]
Merge pull request #700 from mcnewton/rlm_files

make "this file is processed in order" more clear...

9 years agoFix build when building on OSX, using non standard libssl, and a non standard version...
Arran Cudbard-Bell [Wed, 8 Jan 2014 18:25:00 +0000 (18:25 +0000)]
Fix build when building on OSX, using non standard libssl, and a non standard version of clang/gcc (or a < OSX 10.9 version of clang/gcc)

9 years agoExtra include dirs should be specified with -isystem
Arran Cudbard-Bell [Tue, 24 Jun 2014 14:52:44 +0000 (15:52 +0100)]
Extra include dirs should be specified with -isystem

9 years agomake "this file is processed in order" more clear...
Matthew Newton [Tue, 24 Jun 2014 10:06:47 +0000 (11:06 +0100)]
make "this file is processed in order" more clear...

9 years agotalloc_steal the packet after reading it
Alan T. DeKok [Tue, 24 Jun 2014 13:20:25 +0000 (09:20 -0400)]
talloc_steal the packet after reading it

9 years agonewvector should be a bool
Arran Cudbard-Bell [Tue, 24 Jun 2014 12:18:27 +0000 (13:18 +0100)]
newvector should be a bool

9 years agoEnsure packet is parented correctly
Alan T. DeKok [Tue, 24 Jun 2014 12:54:48 +0000 (08:54 -0400)]
Ensure packet is parented correctly

9 years agoPrint which packet in the request failed validation
Arran Cudbard-Bell [Tue, 24 Jun 2014 11:57:12 +0000 (12:57 +0100)]
Print which packet in the request failed validation

9 years agoMinor connection API fixes
Arran Cudbard-Bell [Tue, 24 Jun 2014 10:11:55 +0000 (11:11 +0100)]
Minor connection API fixes

9 years agoPrint out TAG_ANY attributes correctly
Arran Cudbard-Bell [Tue, 24 Jun 2014 09:15:03 +0000 (10:15 +0100)]
Print out TAG_ANY attributes correctly

When attributes are inserted into the lists they should have their tag set to TAG_NONE if their tag was previously TAG_ANY

9 years agoSimpler VERIFY_REQUEST macro in process.c
Arran Cudbard-Bell [Mon, 23 Jun 2014 21:14:06 +0000 (22:14 +0100)]
Simpler VERIFY_REQUEST macro in process.c

9 years agoThread-safe VERIFY_REQUEST
Alan T. DeKok [Mon, 23 Jun 2014 21:02:29 +0000 (17:02 -0400)]
Thread-safe VERIFY_REQUEST

9 years agoIncrease cbuff size
Arran Cudbard-Bell [Mon, 23 Jun 2014 20:31:17 +0000 (21:31 +0100)]
Increase cbuff size

9 years agoAllow for dynamically expanded PSK.
Alan T. DeKok [Mon, 23 Jun 2014 20:11:44 +0000 (16:11 -0400)]
Allow for dynamically expanded PSK.

When a client connects to a server, the server can now dynamically
determine which PSK to use for that client.

9 years agoTypo
Arran Cudbard-Bell [Mon, 23 Jun 2014 19:34:53 +0000 (20:34 +0100)]
Typo

9 years agoMultiple fixes for circular buffer based backtraces
Arran Cudbard-Bell [Mon, 23 Jun 2014 18:21:26 +0000 (19:21 +0100)]
Multiple fixes for circular buffer based backtraces

9 years agoFormatting
Arran Cudbard-Bell [Mon, 23 Jun 2014 18:21:12 +0000 (19:21 +0100)]
Formatting

9 years agoOther obviously bad, allocations
Arran Cudbard-Bell [Mon, 23 Jun 2014 15:50:42 +0000 (16:50 +0100)]
Other obviously bad, allocations

9 years agoRemove fr_connection_delete
Arran Cudbard-Bell [Mon, 23 Jun 2014 15:17:42 +0000 (16:17 +0100)]
Remove fr_connection_delete

9 years agoPass a threadsafe ctx into fr_connection_pool create callback
Arran Cudbard-Bell [Mon, 23 Jun 2014 13:54:13 +0000 (14:54 +0100)]
Pass a threadsafe ctx into fr_connection_pool create callback

Create callbacks should allocate any connection specific data in this specially created thread safe ctx.

For freeing connection specific data, a talloc destructor should be used. The delete callback will be
removed shortly.

9 years agoRename mod_socket_create/delete to mod_conn_create/delete
Arran Cudbard-Bell [Mon, 23 Jun 2014 12:27:30 +0000 (13:27 +0100)]
Rename mod_socket_create/delete to mod_conn_create/delete

9 years agoMinor formatting in rlm_couchbase
Arran Cudbard-Bell [Mon, 23 Jun 2014 12:01:01 +0000 (13:01 +0100)]
Minor formatting in rlm_couchbase

9 years agoSame fix for eap session and handler trees
Arran Cudbard-Bell [Sat, 21 Jun 2014 15:26:01 +0000 (17:26 +0200)]
Same fix for eap session and handler trees

9 years agoDon't parent the rlm_cache rbtree directly from inst
Arran Cudbard-Bell [Sat, 21 Jun 2014 15:21:44 +0000 (17:21 +0200)]
Don't parent the rlm_cache rbtree directly from inst

9 years agoAlloc connections pools in the NULL ctx
Arran Cudbard-Bell [Fri, 20 Jun 2014 21:18:51 +0000 (22:18 +0100)]
Alloc connections pools in the NULL ctx

9 years agoRbtree shouldn't be allocated from inst
Arran Cudbard-Bell [Fri, 20 Jun 2014 19:17:05 +0000 (20:17 +0100)]
Rbtree shouldn't be allocated from inst

9 years agoAlloc handlers from the NULL context
Arran Cudbard-Bell [Fri, 20 Jun 2014 19:12:55 +0000 (20:12 +0100)]
Alloc handlers from the NULL context

9 years agoDisable NULL context tracking
Arran Cudbard-Bell [Fri, 20 Jun 2014 19:07:15 +0000 (20:07 +0100)]
Disable NULL context tracking

9 years agoDon't use prefix variable (used by AC)
Arran Cudbard-Bell [Fri, 20 Jun 2014 18:54:20 +0000 (19:54 +0100)]
Don't use prefix variable (used by AC)

9 years agoAdd support for searching in 'prefix' dirs for headers
Arran Cudbard-Bell [Fri, 20 Jun 2014 18:33:38 +0000 (19:33 +0100)]
Add support for searching in 'prefix' dirs for headers

9 years agoMerge pull request #696 from leprechau/v3.0.x
Arran Cudbard-Bell [Fri, 20 Jun 2014 16:50:40 +0000 (12:50 -0400)]
Merge pull request #696 from leprechau/v3.0.x

multiple fixes and minor additions

9 years agomultiple fixes and minor additions
Aaron Hurt [Fri, 20 Jun 2014 16:24:14 +0000 (11:24 -0500)]
multiple fixes and minor additions
* fixed json-c header inclusion for new upstream install location
* fixed server string building
* added json-c library to version checking

9 years agoCleanup IKEv2 code so it builds again
Arran Cudbard-Bell [Fri, 20 Jun 2014 15:53:44 +0000 (16:53 +0100)]
Cleanup IKEv2 code so it builds again

9 years agoSimilar fix for EAP-MSCHAPV2
Arran Cudbard-Bell [Fri, 20 Jun 2014 11:33:15 +0000 (12:33 +0100)]
Similar fix for EAP-MSCHAPV2

9 years agoSimilar fix for EAP-PWD
Arran Cudbard-Bell [Fri, 20 Jun 2014 11:32:21 +0000 (12:32 +0100)]
Similar fix for EAP-PWD

9 years agoSimilar fix for EAP-TNC
Arran Cudbard-Bell [Fri, 20 Jun 2014 11:32:03 +0000 (12:32 +0100)]
Similar fix for EAP-TNC