freeradius.git
10 years agoActually include postgresql postinst changes debian/3.0.0git+dfsg+moonshot3-2
Sam Hartman [Sat, 1 Jun 2013 17:33:01 +0000 (13:33 -0400)]
Actually include postgresql postinst changes

10 years agodocument changes
Sam Hartman [Sat, 1 Jun 2013 16:01:01 +0000 (12:01 -0400)]
document changes

10 years agoMerge branch 'tr-integ' into debian
Sam Hartman [Sat, 1 Jun 2013 15:56:57 +0000 (11:56 -0400)]
Merge branch 'tr-integ' into debian

10 years agoCreate non xlated values too!
Arran Cudbard-Bell [Wed, 6 Mar 2013 22:20:25 +0000 (17:20 -0500)]
Create non xlated values too!

(cherry picked from commit a9c6f01a35cce47142e5dadaa400f232e66c0482)

11 years agoinclude sqlite3
Sam Hartman [Thu, 18 Apr 2013 18:33:47 +0000 (14:33 -0400)]
include sqlite3

11 years agonote breaks freeradius <3
Sam Hartman [Thu, 18 Apr 2013 16:03:44 +0000 (12:03 -0400)]
note breaks freeradius <3

11 years agoNew moonshot integration
Sam Hartman [Thu, 18 Apr 2013 16:00:50 +0000 (12:00 -0400)]
New moonshot integration

11 years agoMerge remote-tracking branch 'origin/tr-integ' into debian
Sam Hartman [Thu, 18 Apr 2013 15:58:57 +0000 (11:58 -0400)]
Merge remote-tracking branch 'origin/tr-integ' into debian

11 years agoName is always needed in dhcp.c even for non-developer builds
Sam Hartman [Wed, 17 Apr 2013 17:35:02 +0000 (13:35 -0400)]
Name is always needed in dhcp.c even for non-developer builds

11 years agoUse original client DH params in proxied request.
Margaret Wasserman [Mon, 15 Apr 2013 13:23:12 +0000 (09:23 -0400)]
Use original client DH params in proxied request.

11 years agofix bugs in psk_server_callback
Sam Hartman [Thu, 11 Apr 2013 19:25:38 +0000 (15:25 -0400)]
fix bugs in psk_server_callback

11 years agoenable sqlite in build
Sam Hartman [Thu, 11 Apr 2013 19:25:10 +0000 (15:25 -0400)]
enable sqlite in build

11 years agoFixes to initialize TLS & home server fields.
Margaret Wasserman [Thu, 11 Apr 2013 19:31:22 +0000 (15:31 -0400)]
Fixes to initialize TLS & home server fields.

11 years agotrust_router: fix logic errors
Sam Hartman [Thu, 11 Apr 2013 09:25:27 +0000 (05:25 -0400)]
trust_router: fix logic errors

AF_INET is not 4
Actually traverse linked list

11 years agoSample trust_router config
Sam Hartman [Thu, 11 Apr 2013 09:25:14 +0000 (05:25 -0400)]
Sample trust_router config

11 years agotls: Don't require random file
Sam Hartman [Thu, 11 Apr 2013 09:24:46 +0000 (05:24 -0400)]
tls: Don't require random file

11 years agoAdd trust router library to rlm_realm
Margaret Wasserman [Wed, 10 Apr 2013 22:56:43 +0000 (18:56 -0400)]
Add trust router library to rlm_realm

11 years agoRemove hidden structs
Sam Hartman [Wed, 10 Apr 2013 21:49:04 +0000 (17:49 -0400)]
Remove hidden structs

11 years agoMerge branch 'tr-integ' of moonshot.suchdamage.org:/srv/git/freeradius into tr-integ
Sam Hartman [Wed, 10 Apr 2013 21:30:40 +0000 (17:30 -0400)]
Merge branch 'tr-integ' of moonshot.suchdamage.org:/srv/git/freeradius into tr-integ

Conflicts:
src/modules/rlm_realm/trustrouter_integ.c

11 years agoTrust router response handler
Sam Hartman [Wed, 10 Apr 2013 20:27:15 +0000 (16:27 -0400)]
Trust router response handler

11 years agoexpose tls_init_ctx
Sam Hartman [Wed, 10 Apr 2013 20:26:43 +0000 (16:26 -0400)]
expose tls_init_ctx

11 years agoInitial tr integration code, compiles but not complete.
Margaret Wasserman [Wed, 10 Apr 2013 20:17:42 +0000 (16:17 -0400)]
Initial tr integration code, compiles but not complete.

11 years agoFix typo
Sam Hartman [Fri, 5 Apr 2013 17:45:41 +0000 (13:45 -0400)]
Fix typo

11 years agotls: permit psks to be configured for clients
Sam Hartman [Wed, 3 Apr 2013 19:14:23 +0000 (15:14 -0400)]
tls: permit psks to be configured for clients

11 years agopsk: enable server callback always
Sam Hartman [Wed, 3 Apr 2013 18:23:37 +0000 (14:23 -0400)]
psk: enable server callback always

11 years agoTLS PSK: server callback
Sam Hartman [Tue, 2 Apr 2013 16:59:01 +0000 (12:59 -0400)]
TLS PSK: server callback

Use radius_xlat to look up a potential key on incoming TLS PSK connections.

11 years agoMerge branch 'kevin-chbind' into tr-integ
Sam Hartman [Tue, 19 Mar 2013 18:50:19 +0000 (14:50 -0400)]
Merge branch 'kevin-chbind' into tr-integ

Conflicts:
src/main/realms.c

11 years agodebian: include dirs in freeradius package
Sam Hartman [Fri, 8 Mar 2013 21:25:45 +0000 (16:25 -0500)]
debian: include dirs in freeradius package

11 years agoDebian: create /var/log/freeradius
Sam Hartman [Fri, 8 Mar 2013 18:46:13 +0000 (13:46 -0500)]
Debian: create /var/log/freeradius

11 years agoDebian: enable developer because disable-developer doesn't work right now
Sam Hartman [Fri, 8 Mar 2013 17:15:15 +0000 (12:15 -0500)]
Debian: enable developer because disable-developer doesn't work right now

11 years agodebian: require talloc as build dependency
Sam Hartman [Fri, 8 Mar 2013 16:14:23 +0000 (11:14 -0500)]
debian: require talloc as build dependency

11 years agomoonshot version
Sam Hartman [Fri, 8 Mar 2013 15:22:12 +0000 (10:22 -0500)]
moonshot version

11 years ago3.0(native) for now
Sam Hartman [Fri, 8 Mar 2013 15:21:59 +0000 (10:21 -0500)]
3.0(native) for now

11 years agodebian: depend on modern freeradius-common
Sam Hartman [Fri, 8 Mar 2013 15:20:42 +0000 (10:20 -0500)]
debian: depend on modern freeradius-common

11 years agoDebian: rlm_dbm went away; don't install
Sam Hartman [Fri, 8 Mar 2013 15:18:45 +0000 (10:18 -0500)]
Debian: rlm_dbm went away; don't install

11 years agodebian: remove makefiles that don't exist from install targets
Sam Hartman [Fri, 8 Mar 2013 15:16:34 +0000 (10:16 -0500)]
debian: remove makefiles that don't exist from install targets

11 years agoSkeleton of trust router integration
Sam Hartman [Fri, 4 Jan 2013 02:07:48 +0000 (21:07 -0500)]
Skeleton of trust router integration

Functions to convert a TR response into freeradius structures and add
a realm.

11 years agorealms_realm_add
Sam Hartman [Thu, 29 Nov 2012 19:30:07 +0000 (14:30 -0500)]
realms_realm_add

Expose an interface for adding a realm.

11 years agorealms_pool_add
Sam Hartman [Thu, 29 Nov 2012 16:57:34 +0000 (11:57 -0500)]
realms_pool_add

Implement function to add a pool exposed beyond realms.c

11 years agoExpose home_server addition
Sam Hartman [Wed, 28 Nov 2012 21:36:23 +0000 (16:36 -0500)]
Expose home_server addition

Split the code to add home servers to the trees and validate them from
config section parsing code.  The split code does not handle locking
yet.

11 years agoMerge branch 'tr-integ' into kevin-chbind
Sam Hartman [Wed, 6 Mar 2013 19:31:03 +0000 (14:31 -0500)]
Merge branch 'tr-integ' into kevin-chbind

Conflicts:
src/main/realms.c

11 years agoupdate usage of pairmoveto
Sam Hartman [Wed, 6 Mar 2013 14:00:13 +0000 (09:00 -0500)]
update usage of pairmoveto

11 years agoUpdate rlm_eap channel binding for new apis
Sam Hartman [Wed, 6 Mar 2013 01:43:38 +0000 (20:43 -0500)]
Update rlm_eap channel binding for new apis

11 years agottls chbind: update VSA to use
Sam Hartman [Sun, 5 Feb 2012 22:40:56 +0000 (17:40 -0500)]
ttls chbind: update VSA to use

Unfortunately 134 was used by microsoft groups.

11 years agomake eap channel bindings functional (at least with with ttls-mschap)
Kevin [Sun, 5 Feb 2012 20:09:17 +0000 (15:09 -0500)]
make eap channel bindings functional (at least with with ttls-mschap)

11 years agobugfix for loop
Kevin [Sat, 4 Feb 2012 23:48:30 +0000 (18:48 -0500)]
bugfix for loop

11 years agoeap channel binding fixes
Kevin [Sat, 4 Feb 2012 22:07:23 +0000 (17:07 -0500)]
eap channel binding fixes

11 years agorlm_eap: add eap_chbind.c to build
Sam Hartman [Sat, 4 Feb 2012 02:20:09 +0000 (21:20 -0500)]
rlm_eap: add eap_chbind.c to build

11 years agorlm_eap: fix channel binding errors
Sam Hartman [Sat, 4 Feb 2012 01:30:33 +0000 (20:30 -0500)]
rlm_eap: fix channel binding errors

Fix logic and other erros in initial channel binding implementation

11 years agoInitial code for EAP Channel Binding support.
Margaret Wasserman [Fri, 3 Feb 2012 21:59:23 +0000 (16:59 -0500)]
Initial code for EAP Channel Binding support.

11 years agochbind: sample virtual server
Sam Hartman [Fri, 3 Feb 2012 19:09:23 +0000 (14:09 -0500)]
chbind: sample virtual server

this is a sample channel binding virtual server for
draft-ietf-abfab-gss-eap.  It's not complete but is intended to be
sufficient to start testing.

11 years agoEap channel binding support code
Kevin [Fri, 3 Feb 2012 13:15:10 +0000 (08:15 -0500)]
Eap channel binding support code

11 years agoAdded attribute and values for EAP channel binding response codes.
Margaret Wasserman [Fri, 3 Feb 2012 02:45:31 +0000 (21:45 -0500)]
Added attribute and values for EAP channel binding response codes.

11 years agoMerge pull request #210 from arr2036/master
Alan DeKok [Tue, 5 Mar 2013 03:06:35 +0000 (19:06 -0800)]
Merge pull request #210 from arr2036/master

DHCP fixes

11 years agoDHCP fixes from v2.1.x
Arran Cudbard-Bell [Tue, 5 Mar 2013 02:25:37 +0000 (21:25 -0500)]
DHCP fixes from v2.1.x

11 years agoWhitespace fixes
Arran Cudbard-Bell [Tue, 5 Mar 2013 02:14:03 +0000 (21:14 -0500)]
Whitespace fixes

11 years agoAdd relay ip attribute
Arran Cudbard-Bell [Mon, 4 Mar 2013 22:39:35 +0000 (17:39 -0500)]
Add relay ip attribute

11 years agoPrint option only N times, not N + 1
Alan T. DeKok [Sun, 3 Mar 2013 03:40:09 +0000 (19:40 -0800)]
Print option only N times, not N + 1

11 years agoDocument deleted modules
Alan T. DeKok [Sat, 2 Mar 2013 22:38:02 +0000 (17:38 -0500)]
Document deleted modules

11 years agoAdd field separators for MD5 functions
Alan T. DeKok [Sat, 2 Mar 2013 22:36:11 +0000 (17:36 -0500)]
Add field separators for MD5 functions

11 years agoDelete unused module.
Alan T. DeKok [Sat, 2 Mar 2013 22:23:39 +0000 (17:23 -0500)]
Delete unused module.

There is no sample configuration for it.  No one seems to use it.
The new "users" file parser is fast enough that there isn't
any real need for a DBM

11 years agoMark parameters unused
Alan T. DeKok [Sun, 3 Mar 2013 02:19:18 +0000 (18:19 -0800)]
Mark parameters unused

11 years agoReformatting in firebird
Arran Cudbard-Bell [Sat, 2 Mar 2013 21:41:31 +0000 (16:41 -0500)]
Reformatting in firebird

11 years agoUse correct return codes and variable types
Alan T. DeKok [Sat, 2 Mar 2013 20:55:01 +0000 (12:55 -0800)]
Use correct return codes and variable types

11 years agoRemove unused variable
Alan T. DeKok [Sat, 2 Mar 2013 20:54:35 +0000 (12:54 -0800)]
Remove unused variable

11 years agoFix compiler warnings
Alan T. DeKok [Sat, 2 Mar 2013 20:47:59 +0000 (12:47 -0800)]
Fix compiler warnings

11 years agoRemove unused variable
Alan T. DeKok [Sat, 2 Mar 2013 20:46:55 +0000 (12:46 -0800)]
Remove unused variable

11 years agoRemove unused variable
Alan T. DeKok [Sat, 2 Mar 2013 20:45:53 +0000 (12:45 -0800)]
Remove unused variable

11 years agoRemove compiler warnings
Alan T. DeKok [Sat, 2 Mar 2013 20:45:05 +0000 (12:45 -0800)]
Remove compiler warnings

11 years agoRemove more warnings
Alan T. DeKok [Sat, 2 Mar 2013 20:39:00 +0000 (12:39 -0800)]
Remove more warnings

11 years agoFix compile warnings
Alan T. DeKok [Sat, 2 Mar 2013 20:34:19 +0000 (12:34 -0800)]
Fix compile warnings

11 years agoToo many -Ls
Arran Cudbard-Bell [Sat, 2 Mar 2013 16:11:11 +0000 (11:11 -0500)]
Too many -Ls

11 years agoOnly string and integer types can have tags.
Alan T. DeKok [Sat, 2 Mar 2013 15:42:18 +0000 (10:42 -0500)]
Only string and integer types can have tags.

This should fix the issue with Coverity

11 years agoArray entry always exists
Alan T. DeKok [Sat, 2 Mar 2013 15:38:45 +0000 (10:38 -0500)]
Array entry always exists

11 years agoRemove dead code
Alan T. DeKok [Sat, 2 Mar 2013 15:37:58 +0000 (10:37 -0500)]
Remove dead code

11 years agoUse memcpy for binary structures, not strncpy
Alan T. DeKok [Sat, 2 Mar 2013 15:32:20 +0000 (10:32 -0500)]
Use memcpy for binary structures, not strncpy

11 years agoUse talloc for hs_type
Alan T. DeKok [Sat, 2 Mar 2013 15:30:38 +0000 (10:30 -0500)]
Use talloc for hs_type

We'll probably need to audit the source for similar issues.
Or, simply convert everything to talloc, and the problems
will go away.

11 years agoFree memory on error
Alan T. DeKok [Sat, 2 Mar 2013 15:26:25 +0000 (10:26 -0500)]
Free memory on error

11 years agoReturn something. No idea if it's correct.
Alan T. DeKok [Sat, 2 Mar 2013 15:10:55 +0000 (10:10 -0500)]
Return something.  No idea if it's correct.

People shouldn't be using the freetds module.

We should probably just deleted it.

11 years agoNote that it's fall-through
Alan T. DeKok [Sat, 2 Mar 2013 15:10:04 +0000 (10:10 -0500)]
Note that it's fall-through

11 years agoIf we don't re-connect, it's an error.
Alan T. DeKok [Sat, 2 Mar 2013 15:08:58 +0000 (10:08 -0500)]
If we don't re-connect, it's an error.

11 years agoFree memory on error
Alan T. DeKok [Sat, 2 Mar 2013 15:07:15 +0000 (10:07 -0500)]
Free memory on error

11 years agoInitialize VP to NULL.
Alan T. DeKok [Sat, 2 Mar 2013 15:03:26 +0000 (10:03 -0500)]
Initialize VP to NULL.

There may be no data from the json call.  If so, we return NULL

11 years agoUse correct variable
Alan T. DeKok [Sat, 2 Mar 2013 15:02:01 +0000 (10:02 -0500)]
Use correct variable

11 years agoUse correct variable
Alan T. DeKok [Sat, 2 Mar 2013 15:00:47 +0000 (10:00 -0500)]
Use correct variable

11 years agoUse correct argument
Alan T. DeKok [Sat, 2 Mar 2013 14:58:42 +0000 (09:58 -0500)]
Use correct argument

11 years agoFree memory on bind / select failed
Alan T. DeKok [Sat, 2 Mar 2013 14:57:27 +0000 (09:57 -0500)]
Free memory on bind / select failed

11 years agoHacks for Coverity.
Alan T. DeKok [Sat, 2 Mar 2013 14:53:36 +0000 (09:53 -0500)]
Hacks for Coverity.

We know that editing the dictionaries won't happen.  Coverity doesn't

11 years agoMade "chase_referrals" and "rebind" to "yes" by default.
Alan T. DeKok [Sat, 2 Mar 2013 14:50:13 +0000 (09:50 -0500)]
Made "chase_referrals" and "rebind" to "yes" by default.

And updated the source so that it prints out warnings
if they cannot be enabled.

We should probably just remove these two options.  There are
always benefits to leaving them on.  There are no real benefits
to turning them off

11 years agoUse correct buffer for output
Alan T. DeKok [Sat, 2 Mar 2013 14:49:46 +0000 (09:49 -0500)]
Use correct buffer for output

11 years agoFixup oracle configure script
Arran Cudbard-Bell [Sat, 2 Mar 2013 05:30:37 +0000 (00:30 -0500)]
Fixup oracle configure script

11 years agoReconfig for new acinclude stuff
Arran Cudbard-Bell [Fri, 1 Mar 2013 16:51:36 +0000 (11:51 -0500)]
Reconfig for new acinclude stuff

11 years agoFix reconfig
Arran Cudbard-Bell [Fri, 1 Mar 2013 16:51:22 +0000 (11:51 -0500)]
Fix reconfig

11 years agoConfigure scripts depend on local macro files, too
Alan T. DeKok [Fri, 1 Mar 2013 16:10:42 +0000 (11:10 -0500)]
Configure scripts depend on local macro files, too

11 years agoUse GNU Make patterns to regenerate configure scripts
Alan T. DeKok [Fri, 1 Mar 2013 16:09:26 +0000 (11:09 -0500)]
Use GNU Make patterns to regenerate configure scripts

11 years agoEnsure directory name always ends with "/"
Alan T. DeKok [Fri, 1 Mar 2013 16:08:50 +0000 (11:08 -0500)]
Ensure directory name always ends with "/"

11 years agoEnsure that the directory name always ends with /
Alan T. DeKok [Fri, 1 Mar 2013 16:06:41 +0000 (11:06 -0500)]
Ensure that the directory name always ends with /

11 years agoRemove extraneous fprintf
Alan T. DeKok [Fri, 1 Mar 2013 16:02:12 +0000 (11:02 -0500)]
Remove extraneous fprintf

11 years agoProperly track absolute / relative paths
Alan T. DeKok [Fri, 1 Mar 2013 01:22:37 +0000 (20:22 -0500)]
Properly track absolute / relative paths

11 years agoProperly track relative / absolute filenames
Alan T. DeKok [Fri, 1 Mar 2013 01:19:14 +0000 (20:19 -0500)]
Properly track relative / absolute filenames

So we can do the following:

top: $INCLUDE foo/bar
foo/bar: $INCLUDE baz
foo/baz stuff

Which makes file tracking nice