freeradius.git
14 years agoFix passwords to have even length
Alan T. DeKok [Fri, 2 Oct 2009 08:52:44 +0000 (10:52 +0200)]
Fix passwords to have even length

14 years agoIncrease max_sessions
Alan T. DeKok [Thu, 1 Oct 2009 13:07:51 +0000 (15:07 +0200)]
Increase max_sessions

14 years agoPrint more descriptive error message for too many EAP sessions
Alan T. DeKok [Thu, 1 Oct 2009 13:06:59 +0000 (15:06 +0200)]
Print more descriptive error message for too many EAP sessions

14 years agoevent.c frees the listener, so we don't need to
Alan T. DeKok [Thu, 1 Oct 2009 09:15:55 +0000 (11:15 +0200)]
event.c frees the listener, so we don't need to

14 years agoMoved illegal attributes to the new dictionary
Alan T. DeKok [Thu, 1 Oct 2009 08:39:22 +0000 (10:39 +0200)]
Moved illegal attributes to the new dictionary

14 years agoAllow old-style dictionary formats, too
Alan T. DeKok [Wed, 30 Sep 2009 07:54:25 +0000 (09:54 +0200)]
Allow old-style dictionary formats, too

14 years agoUse packet codes from libradius
Alan T. DeKok [Tue, 29 Sep 2009 18:24:40 +0000 (20:24 +0200)]
Use packet codes from libradius

14 years agoMoved Ascends illegal attributes to their own file
Alan T. DeKok [Tue, 29 Sep 2009 08:10:59 +0000 (10:10 +0200)]
Moved Ascends illegal attributes to their own file

14 years agoAssign variable before using it
Alan T. DeKok [Sun, 27 Sep 2009 17:45:20 +0000 (19:45 +0200)]
Assign variable before using it

14 years agoUse new API
Alan T. DeKok [Sun, 27 Sep 2009 16:28:17 +0000 (18:28 +0200)]
Use new API

14 years agoInclude proto in API, no matter what build options
Alan T. DeKok [Sun, 27 Sep 2009 16:23:18 +0000 (18:23 +0200)]
Include proto in API, no matter what build options

It's too hardware to have proto as a compile-time option
for the API.  Instead, we add it everywhere.  This slows down the
UDP-only case, but ensures that we can distinguish between a
home server of (ip,port) udp, and a home server of the same (ip,port)
and tcp

14 years agoRemoved unnecessary line
Alan T. DeKok [Fri, 25 Sep 2009 09:46:06 +0000 (11:46 +0200)]
Removed unnecessary line

14 years agoBe more flexible about parsing detail files
Alan T. DeKok [Fri, 25 Sep 2009 09:21:50 +0000 (11:21 +0200)]
Be more flexible about parsing detail files

Allow any operator, not just '='

14 years agoClean up state machine so it's more forgiving
Alan T. DeKok [Fri, 25 Sep 2009 09:01:27 +0000 (11:01 +0200)]
Clean up state machine so it's more forgiving

14 years agoFixed typo && include attrs.access_challenge in build
Alan T. DeKok [Thu, 24 Sep 2009 20:01:54 +0000 (22:01 +0200)]
Fixed typo && include attrs.access_challenge in build

14 years agoFixed compile error
Alan T. DeKok [Thu, 24 Sep 2009 15:37:07 +0000 (17:37 +0200)]
Fixed compile error

14 years ago64-bit fixes.
bduncan [Tue, 22 Sep 2009 16:24:57 +0000 (09:24 -0700)]
64-bit fixes.

14 years agoCheck for NOOP from opendir.c
bduncan [Tue, 22 Sep 2009 16:23:47 +0000 (09:23 -0700)]
Check for NOOP from opendir.c

14 years ago64-bit fixes and return NOOP for AD users.
bduncan [Tue, 22 Sep 2009 16:22:49 +0000 (09:22 -0700)]
64-bit fixes and return NOOP for AD users.

14 years agoGet private key passphrase from keychain using certadmin command.
bduncan [Tue, 22 Sep 2009 16:20:02 +0000 (09:20 -0700)]
Get private key passphrase from keychain using certadmin command.

14 years agoJumbo patch to clean up socket handling
Alan T. DeKok [Thu, 24 Sep 2009 15:28:56 +0000 (17:28 +0200)]
Jumbo patch to clean up socket handling

The transport protocol code is now more merged, and the "fr_tcp_radius_t"
structure and API are deleted.  The resulting code is simpler and smaller.

Cleaned up how the listeners and even handlers deal with sockets.
The proxy sockets are now pushed into the proxy packet list, and are
not used in the main listener list.

The proxy packet list now deals with src/dst, and not just destination.

14 years agoChanged order of code to avoid race conditions
Alan T. DeKok [Thu, 24 Sep 2009 15:12:53 +0000 (17:12 +0200)]
Changed order of code to avoid race conditions

14 years agoEnsure that cached SSL sessions have data
Alan T. DeKok [Thu, 24 Sep 2009 15:12:33 +0000 (17:12 +0200)]
Ensure that cached SSL sessions have data

14 years agoFix arguments to client_find
Alan T. DeKok [Thu, 17 Sep 2009 10:03:36 +0000 (12:03 +0200)]
Fix arguments to client_find

14 years agoBump to version 2.1.8
Alan T. DeKok [Wed, 16 Sep 2009 15:14:55 +0000 (17:14 +0200)]
Bump to version 2.1.8

14 years agoMore plumbing to get the server to listen on TCP sockets.
Dante [Wed, 16 Sep 2009 12:12:47 +0000 (14:12 +0200)]
More plumbing to get the server to listen on TCP sockets.

The last two functions are in a separate patch to make the merge easier.

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoMore plumbing to get to home servers via TCP
Dante [Wed, 16 Sep 2009 12:06:17 +0000 (14:06 +0200)]
More plumbing to get to home servers via TCP

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoFree tcp structure, too
Dante [Wed, 16 Sep 2009 11:57:40 +0000 (13:57 +0200)]
Free tcp structure, too

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoAllow outgoing TCP connections to home servers.
Dante [Wed, 16 Sep 2009 10:24:44 +0000 (12:24 +0200)]
Allow outgoing TCP connections to home servers.

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoAdd scaffolding for proxy listeners.
Dante [Wed, 16 Sep 2009 10:17:34 +0000 (12:17 +0200)]
Add scaffolding for proxy listeners.

The functions exist, but aren't called by anyone.

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoMore ifdef's and assertions for checkign TCP != UDP
Dante [Tue, 15 Sep 2009 21:11:47 +0000 (23:11 +0200)]
More ifdef's and assertions for checkign TCP != UDP

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoTrack the number of outstanding packets on a TCP connection.
Dante [Tue, 15 Sep 2009 21:08:29 +0000 (23:08 +0200)]
Track the number of outstanding packets on a TCP connection.

This allows us to free the connection when all packets are
accounted for, and the connection is to be marked "closed"

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoStop processing packets when the socket is closed.
Dante [Tue, 15 Sep 2009 21:03:21 +0000 (23:03 +0200)]
Stop processing packets when the socket is closed.

If the socket from the client, or to the proxy is closed,
then handle that situation.

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoDocument TCP options for clients and home servers.
Dante [Tue, 15 Sep 2009 15:57:53 +0000 (17:57 +0200)]
Document TCP options for clients and home servers.

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoAllow radclient to send/receive RADIUS over TCP
Dante [Tue, 15 Sep 2009 15:46:15 +0000 (17:46 +0200)]
Allow radclient to send/receive RADIUS over TCP

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoAllow the packet API to auto-discover TCP
Dante [Tue, 15 Sep 2009 15:44:34 +0000 (17:44 +0200)]
Allow the packet API to auto-discover TCP

It will now call the udp/tcp "receive packet" function
as appropriate, so that the callers do not need to be changed
in order to handle TCP.

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoAllow clients to use TCP
Dante [Tue, 15 Sep 2009 15:43:17 +0000 (17:43 +0200)]
Allow clients to use TCP

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoAllow home servers to use TCP
Dante [Tue, 15 Sep 2009 15:34:34 +0000 (17:34 +0200)]
Allow home servers to use TCP

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoAllow TCP code to build if WITH_TCP is defined
Dante [Tue, 15 Sep 2009 15:33:49 +0000 (17:33 +0200)]
Allow TCP code to build if WITH_TCP is defined

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoHeader file and protocol handler for RADIUS over TCP
Dante [Tue, 15 Sep 2009 15:17:40 +0000 (17:17 +0200)]
Header file and protocol handler for RADIUS over TCP

This is the first step to getting full support for RADIUS
over TCP into the server.

Signed-off-by: Alan T. DeKok <aland@freeradius.org>
14 years agoUpdate change logs before 2.1.7 release_2_1_7
Alan T. DeKok [Mon, 14 Sep 2009 14:43:29 +0000 (16:43 +0200)]
Update change logs before 2.1.7

14 years agoPrint out a little more information
Alan T. DeKok [Mon, 14 Sep 2009 12:29:23 +0000 (14:29 +0200)]
Print out a little more information

14 years agoMove "set state" to before log message
Alan T. DeKok [Mon, 14 Sep 2009 12:26:15 +0000 (14:26 +0200)]
Move "set state" to before log message

To avoid race conditions... though I'm not sure why this would
happen

14 years agoAs posted to the list.
Alan T. DeKok [Sun, 13 Sep 2009 15:07:22 +0000 (17:07 +0200)]
As posted to the list.

It isn't made live yet, because we have no idea if it works or not

14 years agoRemoved redundant code
Alan T. DeKok [Sun, 13 Sep 2009 14:01:51 +0000 (16:01 +0200)]
Removed redundant code

14 years agoMake a better name
Alan T. DeKok [Fri, 11 Sep 2009 15:14:09 +0000 (17:14 +0200)]
Make a better name

14 years agoWrap crap with more crap
Alan T. DeKok [Fri, 11 Sep 2009 15:12:06 +0000 (17:12 +0200)]
Wrap crap with more crap

14 years agoMore updates
Alan T. DeKok [Thu, 10 Sep 2009 13:16:40 +0000 (15:16 +0200)]
More updates

14 years agoAdded sample configs for MySQL cluster
Alan T. DeKok [Thu, 10 Sep 2009 13:02:39 +0000 (15:02 +0200)]
Added sample configs for MySQL cluster

14 years agoUpdate to new syntax
Alan T. DeKok [Wed, 9 Sep 2009 14:27:16 +0000 (16:27 +0200)]
Update to new syntax

14 years agoCheck value of Fall-Through, too
Alan T. DeKok [Wed, 9 Sep 2009 12:12:35 +0000 (14:12 +0200)]
Check value of Fall-Through, too

14 years agoBe less forgiving about the allowed operators.
Alan T. DeKok [Tue, 8 Sep 2009 11:56:54 +0000 (13:56 +0200)]
Be less forgiving about the allowed operators.

If they're not a "foo = bar" type of operator, then return
an error

14 years agoWrap header file in protective #ifdef
Alan T. DeKok [Mon, 7 Sep 2009 05:49:34 +0000 (07:49 +0200)]
Wrap header file in protective #ifdef

14 years agoNo need to include modules.h twice
Alan T. DeKok [Mon, 7 Sep 2009 05:48:57 +0000 (07:48 +0200)]
No need to include modules.h twice

14 years agoCheck for the proper number of arguments to rebind
Alan T. DeKok [Sun, 6 Sep 2009 13:58:59 +0000 (15:58 +0200)]
Check for the proper number of arguments to rebind

14 years agoReplace references to <ltdl.h> with <freeradius-devel/modpriv.h>
Alan T. DeKok [Sat, 5 Sep 2009 16:26:08 +0000 (18:26 +0200)]
Replace references to <ltdl.h> with <freeradius-devel/modpriv.h>

As part of our grand plan to better the world by ridding it of libltdl.

14 years agoFirst stab at removing libltdl.
Alan T. DeKok [Sat, 5 Sep 2009 16:24:57 +0000 (18:24 +0200)]
First stab at removing libltdl.

The code is protected by preprocessor directives so that it doesn't
affect the release.  But it's a good first step to removing insanity.

14 years agoFirst stab at removing libltdl.
Alan T. DeKok [Sat, 5 Sep 2009 16:17:26 +0000 (18:17 +0200)]
First stab at removing libltdl.

The code is protected by preprocessor directives so that it doesn't
affect the release.  But it's a good first step to removing insanity.

14 years agoReference $(INCLTDL) instead of fixed link
Alan T. DeKok [Sat, 5 Sep 2009 15:54:43 +0000 (17:54 +0200)]
Reference $(INCLTDL) instead of fixed link

This means that all of the system builds with the same version
of libltdl, either the local OR the system one

14 years agoWork around insane retarded libtool && libltdl issues.
Alan T. DeKok [Sat, 5 Sep 2009 15:37:31 +0000 (17:37 +0200)]
Work around insane retarded libtool && libltdl issues.

14 years agoAdded --with-system-libltdl
Alan T. DeKok [Fri, 4 Sep 2009 09:00:04 +0000 (11:00 +0200)]
Added --with-system-libltdl

To avoid horrible libtool && libltld incompatibilities

14 years agoAs posted to the list
Alan T. DeKok [Thu, 3 Sep 2009 13:33:09 +0000 (15:33 +0200)]
As posted to the list

14 years agoFix values as note on list
Alan T. DeKok [Thu, 3 Sep 2009 13:31:42 +0000 (15:31 +0200)]
Fix values as note on list

and

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080891919.shtml

14 years agoRemove reference to cui.conf which isn't added yet
Alan T. DeKok [Wed, 2 Sep 2009 12:00:21 +0000 (14:00 +0200)]
Remove reference to cui.conf which isn't added yet

14 years agoLots of notes prior to 2.1.7
Alan T. DeKok [Wed, 2 Sep 2009 08:59:20 +0000 (10:59 +0200)]
Lots of notes prior to 2.1.7

14 years agoSet DF flag for packets from the server, too
Alan T. DeKok [Tue, 1 Sep 2009 12:49:39 +0000 (14:49 +0200)]
Set DF flag for packets from the server, too

14 years agoReturn 0 if no counter exists
Alan T. DeKok [Sat, 29 Aug 2009 08:54:25 +0000 (10:54 +0200)]
Return 0 if no counter exists

14 years agoSigned-off-by: root <root@pclinux-ccalmb.lut.ac.uk>
root [Mon, 24 Aug 2009 10:44:47 +0000 (11:44 +0100)]
Signed-off-by: root <root@pclinux-ccalmb.lut.ac.uk>
fixed example ntlm_auth command so that it doesnt throw up unlang warning message

14 years agoAdded comments and simplified code
Alan T. DeKok [Sat, 29 Aug 2009 08:44:54 +0000 (10:44 +0200)]
Added comments and simplified code

14 years agoAs posted to the list
Alan T. DeKok [Fri, 21 Aug 2009 09:29:21 +0000 (11:29 +0200)]
As posted to the list

14 years agoAllow 100% to mean "read as fast as possible"
Alan T. DeKok [Thu, 20 Aug 2009 08:52:44 +0000 (10:52 +0200)]
Allow 100% to mean "read as fast as possible"

14 years agoPacket may not exist, so check for that, too
Alan T. DeKok [Thu, 20 Aug 2009 07:08:32 +0000 (09:08 +0200)]
Packet may not exist, so check for that, too

14 years agoMinor updates
Alan T. DeKok [Wed, 19 Aug 2009 07:04:26 +0000 (09:04 +0200)]
Minor updates

14 years agoDisallow NULL for regex comparisons
Alan T. DeKok [Wed, 19 Aug 2009 06:58:47 +0000 (08:58 +0200)]
Disallow NULL for regex comparisons

14 years agoFix more typos
Alan T. DeKok [Tue, 18 Aug 2009 15:23:49 +0000 (17:23 +0200)]
Fix more typos

14 years agoFixed typo
Alan T. DeKok [Tue, 18 Aug 2009 10:07:40 +0000 (12:07 +0200)]
Fixed typo

14 years agoTurn off the DF bit.
Alan T. DeKok [Tue, 18 Aug 2009 08:31:43 +0000 (10:31 +0200)]
Turn off the DF bit.

14 years agoFix args to printfy
Alan T. DeKok [Tue, 18 Aug 2009 07:47:19 +0000 (09:47 +0200)]
Fix args to printfy

14 years agoAdd notes on SHA1 versus MD5
Alan T. DeKok [Mon, 17 Aug 2009 12:25:57 +0000 (14:25 +0200)]
Add notes on SHA1 versus MD5

14 years agoAllow "no response" to DHCPy
Alan T. DeKok [Mon, 17 Aug 2009 10:14:01 +0000 (12:14 +0200)]
Allow "no response" to DHCPy

14 years agoCatch non-fatal race conditions
Alan T. DeKok [Mon, 17 Aug 2009 06:53:47 +0000 (08:53 +0200)]
Catch non-fatal race conditions

14 years agoFix typo in last commit
Alan T. DeKok [Sat, 15 Aug 2009 05:45:05 +0000 (07:45 +0200)]
Fix typo in last commit

14 years agoChave the hash comparison algorithm to avoid timing attacks
Alan T. DeKok [Fri, 14 Aug 2009 12:53:24 +0000 (14:53 +0200)]
Chave the hash comparison algorithm to avoid timing attacks

14 years agoInternal functions should be static
Alan T. DeKok [Thu, 13 Aug 2009 08:06:03 +0000 (10:06 +0200)]
Internal functions should be static

14 years agoAdded query_timeout parameter. For now, it does nothing.
Alan T. DeKok [Thu, 13 Aug 2009 08:03:27 +0000 (10:03 +0200)]
Added query_timeout parameter.  For now, it does nothing.

It is therefore not documented, either.

14 years agoAlpha version from Gabriel Blanchard
Alan T. DeKok [Thu, 13 Aug 2009 08:01:42 +0000 (10:01 +0200)]
Alpha version from Gabriel Blanchard

14 years agoFix minor issue
Alan T. DeKok [Wed, 12 Aug 2009 15:14:28 +0000 (17:14 +0200)]
Fix minor issue

14 years agoLook up home servers by type, too.
Alan T. DeKok [Wed, 12 Aug 2009 12:15:58 +0000 (14:15 +0200)]
Look up home servers by type, too.

14 years agoRemove final restrictions on attributes > 32767
Alan T. DeKok [Wed, 12 Aug 2009 09:12:49 +0000 (11:12 +0200)]
Remove final restrictions on attributes > 32767

14 years agoMove restrictions on vendor ID from 32767 to 65535
Alan T. DeKok [Wed, 12 Aug 2009 08:48:12 +0000 (10:48 +0200)]
Move restrictions on vendor ID from 32767 to 65535

Now that "attr" is stored as an unsigned integer.

Based on a patch from Rafael Ugolini

14 years agoMoved prototypes to a better place
Alan T. DeKok [Wed, 12 Aug 2009 08:22:23 +0000 (10:22 +0200)]
Moved prototypes to a better place

14 years agoMove "attr" to unsigned int
Alan T. DeKok [Wed, 12 Aug 2009 08:10:45 +0000 (10:10 +0200)]
Move "attr" to unsigned int

So that we don't have to worry about whether or not the high bit is set

14 years agoAdd "const" and remove compiler warningsy
Alan T. DeKok [Wed, 12 Aug 2009 05:46:21 +0000 (07:46 +0200)]
Add "const" and remove compiler warningsy

14 years agoMake code consistent with examples.
Alan T. DeKok [Tue, 11 Aug 2009 12:35:29 +0000 (14:35 +0200)]
Make code consistent with examples.

Fixes bug #10

14 years agorequest may be NULL
Alan T. DeKok [Mon, 10 Aug 2009 17:14:39 +0000 (19:14 +0200)]
request may be NULL

14 years agoRFC 5580 and dictionary
Alan T. DeKok [Mon, 10 Aug 2009 10:17:11 +0000 (12:17 +0200)]
RFC 5580 and dictionary

14 years agoCache module lists for VMPS and DHCP
Alan T. DeKok [Sun, 9 Aug 2009 15:26:41 +0000 (17:26 +0200)]
Cache module lists for VMPS and DHCP

14 years agoRemove wrong documentation
Alan T. DeKok [Wed, 5 Aug 2009 13:36:21 +0000 (15:36 +0200)]
Remove wrong documentation

14 years agoUse more fields in the query.
Alan T. DeKok [Mon, 3 Aug 2009 09:35:27 +0000 (11:35 +0200)]
Use more fields in the query.

These are the same fields used for the other queries, so it makes
sense to use them here

Based on a patch from Chris Moules.

14 years agoAllow home_server_pools to exist without realms
Alan T. DeKok [Mon, 3 Aug 2009 09:27:12 +0000 (11:27 +0200)]
Allow home_server_pools to exist without realms

via a pretty bad hack.  The previous code assumed that the home
servers were all loaded, which wasn't true.  This fix is temporary,
and should be replaced by one that:

1 loads all home servers
2 loads all home_server_pools
3 loads all realms

Right now, it loads the realms, and uses those to bootstrap the
pools and servers.  This is arguably wrong.