freeradius.git
11 years agoAllow ${Foo-Bar:-%{...}} again release_2_2_0
Alan T. DeKok [Mon, 10 Sep 2012 11:51:34 +0000 (13:51 +0200)]
Allow ${Foo-Bar:-%{...}} again

11 years agoNote final changes
Alan T. DeKok [Mon, 10 Sep 2012 06:22:25 +0000 (08:22 +0200)]
Note final changes

11 years agoFix CVE-2012-3547. Found by Timo Warns
Alan T. DeKok [Mon, 10 Sep 2012 06:18:34 +0000 (08:18 +0200)]
Fix CVE-2012-3547.  Found by Timo Warns

11 years agoMerge pull request #85 from fajarnugraha/v2.1.x-suse-20120910
Arran Cudbard-Bell [Mon, 10 Sep 2012 07:25:05 +0000 (00:25 -0700)]
Merge pull request #85 from fajarnugraha/v2.1.x-suse-20120910

Fix suse package to build and run cleanly for 2.2.0

11 years agosuse: build fixes
Fajar A. Nugraha [Mon, 10 Sep 2012 06:40:14 +0000 (13:40 +0700)]
suse: build fixes

* drop libeap-ikev2-devel build requirement, as it's not available in
  the main opensuse repository. It will still be used if already
  installed.
* add "--with-system-libltdl"

11 years agosuse: imported freeradius-server-2.1.12-6.1.src.rpm
Fajar A. Nugraha [Mon, 10 Sep 2012 06:36:12 +0000 (13:36 +0700)]
suse: imported freeradius-server-2.1.12-6.1.src.rpm

Imported freeradius-server-2.1.12-6.1.src.rpm, from
Network:AAA repository of the OpenSUSE Project to suse/ directory
with the following exception (part of the original freeradius.spec):
* Specfile is freeradius.spec instead of freeradius-server.spec
* Version is 2.2.0, Release is 0

11 years agoDocument more changes
Arran Cudbard-Bell [Sat, 8 Sep 2012 20:51:41 +0000 (22:51 +0200)]
Document more changes

11 years agoMinor fixes
Arran Cudbard-Bell [Sat, 8 Sep 2012 20:16:39 +0000 (21:16 +0100)]
Minor fixes

11 years agoRemove duplicate declaration
Arran Cudbard-Bell [Fri, 7 Sep 2012 20:03:34 +0000 (22:03 +0200)]
Remove duplicate declaration

11 years agoDon't die if the clients file doesn't contain client <name> {}
Arran Cudbard-Bell [Fri, 7 Sep 2012 16:01:59 +0000 (17:01 +0100)]
Don't die if the clients file doesn't contain client <name> {}

11 years agoDon't die if the clients file doesn't contain client {}
Arran Cudbard-Bell [Fri, 7 Sep 2012 15:39:27 +0000 (16:39 +0100)]
Don't die if the clients file doesn't contain client {}

11 years agoHungroups and hints should default to NULL, so theyre disabled if omitted
Arran Cudbard-Bell [Fri, 7 Sep 2012 13:47:39 +0000 (14:47 +0100)]
Hungroups and hints should default to NULL, so theyre disabled if omitted

11 years agoUpdate src/modules/rlm_cache/rlm_cache.c
Arran Cudbard-Bell [Thu, 6 Sep 2012 16:55:27 +0000 (18:55 +0200)]
Update src/modules/rlm_cache/rlm_cache.c

11 years agoChange attribute section name
Arran Cudbard-Bell [Thu, 6 Sep 2012 16:54:26 +0000 (18:54 +0200)]
Change attribute section name

11 years agoAdd cache to accounting and preacct
Arran Cudbard-Bell [Thu, 6 Sep 2012 16:50:15 +0000 (18:50 +0200)]
Add cache to accounting and preacct

11 years agoCheck for more parse errors when reading dicts. Bug found by Coverity
Alan T. DeKok [Thu, 6 Sep 2012 09:32:16 +0000 (11:32 +0200)]
Check for more parse errors when reading dicts.  Bug found by Coverity

11 years agoDouble-check that we don't over-run the buffer
Alan T. DeKok [Thu, 6 Sep 2012 09:25:45 +0000 (11:25 +0200)]
Double-check that we don't over-run the buffer

11 years agoCheck for memset of zero
Alan T. DeKok [Thu, 6 Sep 2012 09:22:24 +0000 (11:22 +0200)]
Check for memset of zero

11 years agoClose directory when done with it. Bug found by Coverity
Alan T. DeKok [Thu, 6 Sep 2012 09:21:09 +0000 (11:21 +0200)]
Close directory when done with it.  Bug found by Coverity

11 years agoClose socket on error. Bug found by Coverity
Alan T. DeKok [Thu, 6 Sep 2012 09:18:15 +0000 (11:18 +0200)]
Close socket on error.  Bug found by Coverity

11 years agoClose FD if there's nothing to log. Bug found by Coverity
Alan T. DeKok [Thu, 6 Sep 2012 09:11:02 +0000 (11:11 +0200)]
Close FD if there's nothing to log.  Bug found by Coverity

11 years agoEnsure all fields are initialized
Alan T. DeKok [Thu, 6 Sep 2012 09:09:46 +0000 (11:09 +0200)]
Ensure all fields are initialized

11 years agoCommand sockets are debug messages, not info
Alan T. DeKok [Thu, 6 Sep 2012 09:28:18 +0000 (11:28 +0200)]
Command sockets are debug messages, not info

11 years agoFix possible bug
Alan T. DeKok [Thu, 6 Sep 2012 09:00:26 +0000 (11:00 +0200)]
Fix possible bug

11 years agoFix use after free. Bug found by Coverity
Alan T. DeKok [Thu, 6 Sep 2012 08:57:53 +0000 (10:57 +0200)]
Fix use after free.  Bug found by Coverity

11 years agoOnly log known Acct-Status-Types. Bug found by Coverity
Alan T. DeKok [Thu, 6 Sep 2012 08:55:03 +0000 (10:55 +0200)]
Only log known Acct-Status-Types.  Bug found by Coverity

11 years agoAdded script for monit
Alan T. DeKok [Sun, 2 Sep 2012 08:12:14 +0000 (10:12 +0200)]
Added script for monit

11 years agoAdd debug option
Arran Cudbard-Bell [Thu, 6 Sep 2012 08:58:19 +0000 (10:58 +0200)]
Add debug option

11 years agoAdd hup to default logrotate script
Arran Cudbard-Bell [Wed, 5 Sep 2012 17:46:25 +0000 (18:46 +0100)]
Add hup to default logrotate script

11 years agoAllow defaults to come from env
Arran Cudbard-Bell [Wed, 5 Sep 2012 17:23:13 +0000 (18:23 +0100)]
Allow defaults to come from env

11 years agoUpdate wiki link
Arran Cudbard-Bell [Wed, 5 Sep 2012 10:19:48 +0000 (12:19 +0200)]
Update wiki link

11 years agoMerge pull request #83 from arr2036/v2.1.x
Arran Cudbard-Bell [Tue, 4 Sep 2012 16:46:00 +0000 (09:46 -0700)]
Merge pull request #83 from arr2036/v2.1.x

Add option to disable krb5 cache

11 years agoAdd option to disable krb5 cache
Arran Cudbard-Bell [Tue, 28 Aug 2012 10:20:06 +0000 (11:20 +0100)]
Add option to disable krb5 cache

11 years agoMerge pull request #81 from fajarnugraha/v2.1.x-redhat-20120904
Alan DeKok [Tue, 4 Sep 2012 07:40:37 +0000 (00:40 -0700)]
Merge pull request #81 from fajarnugraha/v2.1.x-redhat-20120904

redhat package fix

11 years agoredhat: remove freeradius-postgres-sql.patch
Fajar A. Nugraha [Tue, 4 Sep 2012 06:49:48 +0000 (13:49 +0700)]
redhat: remove freeradius-postgres-sql.patch

Obsoleted by commit 607109d and 87ab12b

11 years agoredhat: rlm_cache && rlm_wimax are now "stable"
Fajar A. Nugraha [Tue, 4 Sep 2012 06:46:48 +0000 (13:46 +0700)]
redhat: rlm_cache && rlm_wimax are now "stable"

Adjust spec and patch to accomodate commit aee30b9

11 years agoTweak file read/parse errors, they're confusing when that's all you see
Arran Cudbard-Bell [Mon, 3 Sep 2012 11:00:38 +0000 (12:00 +0100)]
Tweak file read/parse errors, they're confusing when that's all you see

11 years agoAdd configuration check on restart/reload
Arran Cudbard-Bell [Fri, 31 Aug 2012 14:49:21 +0000 (15:49 +0100)]
Add configuration check on restart/reload
Add configtest option
Switch to lsb functions for start/stop

11 years agoUpdate the most visible copyright notices
Arran Cudbard-Bell [Fri, 31 Aug 2012 09:55:41 +0000 (10:55 +0100)]
Update the most visible copyright notices

11 years agoPaircreate in v2 doesn't take vendor
Arran Cudbard-Bell [Thu, 30 Aug 2012 13:13:32 +0000 (15:13 +0200)]
Paircreate in v2 doesn't take vendor

11 years agoAdd BT dictionary
Arran Cudbard-Bell [Thu, 30 Aug 2012 12:34:02 +0000 (13:34 +0100)]
Add BT dictionary

11 years agoNote more recent changes
Arran Cudbard-Bell [Wed, 29 Aug 2012 18:02:28 +0000 (19:02 +0100)]
Note more recent changes

11 years agoUnique indexes for everybody!
Arran Cudbard-Bell [Wed, 29 Aug 2012 17:57:23 +0000 (18:57 +0100)]
Unique indexes for everybody!

11 years agoCheck for NULL secret on dynamic clients
Alan T. DeKok [Wed, 29 Aug 2012 16:40:03 +0000 (18:40 +0200)]
Check for NULL secret on dynamic clients

11 years agoCorrect wiki link
Arran Cudbard-Bell [Wed, 29 Aug 2012 14:24:33 +0000 (15:24 +0100)]
Correct wiki link

11 years agoAdd additional attributes to support features on the 7750 service router
Arran Cudbard-Bell [Wed, 29 Aug 2012 14:18:42 +0000 (15:18 +0100)]
Add additional attributes to support features on the 7750 service router

11 years agoAdd entry hit stats
Arran Cudbard-Bell [Tue, 28 Aug 2012 15:26:10 +0000 (16:26 +0100)]
Add entry hit stats

11 years agoChange variable names inline with HEAD
Arran Cudbard-Bell [Mon, 27 Aug 2012 19:41:39 +0000 (20:41 +0100)]
Change variable names inline with HEAD

11 years agoAdd xlat support for retrieving specific attributes from the cache
Arran Cudbard-Bell [Sun, 26 Aug 2012 22:14:42 +0000 (23:14 +0100)]
Add xlat support for retrieving specific attributes from the cache

11 years agoUnblocked, not blocked
Alan T. DeKok [Fri, 24 Aug 2012 15:44:02 +0000 (17:44 +0200)]
Unblocked, not blocked

11 years agoTrack blocked / non-blocked state
Alan T. DeKok [Fri, 24 Aug 2012 15:30:18 +0000 (17:30 +0200)]
Track blocked / non-blocked state

If a REQUEST transitions from OK to STOP_PROCESSING during
a module call, say WHICH module did this.

11 years agoFixed to be compatible with 3.0
Alan T. DeKok [Fri, 24 Aug 2012 12:48:13 +0000 (14:48 +0200)]
Fixed to be compatible with 3.0

11 years agoNote recent changes
Alan T. DeKok [Fri, 24 Aug 2012 09:48:03 +0000 (11:48 +0200)]
Note recent changes

11 years agorlm_cache && rlm_wimax are now "stable".
Alan T. DeKok [Fri, 24 Aug 2012 09:45:56 +0000 (11:45 +0200)]
rlm_cache && rlm_wimax are now "stable".

Re-ordered the list so it's alphabetical

11 years agoAdd all algorithms
Alan T. DeKok [Fri, 24 Aug 2012 09:44:24 +0000 (11:44 +0200)]
Add all algorithms

Apparently OpenSSL knows about various cipher methods, but refuses
to use them unless you say "pretty please".

11 years agoAdd 'Cache-Status-Only' control attribute, to check the status of
Arran Cudbard-Bell [Thu, 23 Aug 2012 15:58:50 +0000 (16:58 +0100)]
Add 'Cache-Status-Only' control attribute, to check the status of
an entry, but not add or merge it.

Update documentation.

Only control:Cache-TTL may extend the TTL of an entry, or expire an entry.

11 years agoFix name so it works
Alan T. DeKok [Thu, 23 Aug 2012 14:11:44 +0000 (16:11 +0200)]
Fix name so it works

11 years agoAdd Redback Service-Error-Cause values
robert [Thu, 11 Aug 2011 08:52:50 +0000 (12:52 +0400)]
Add Redback Service-Error-Cause values

11 years agoAdd has_tag to Service attributes
robert [Thu, 11 Aug 2011 08:48:51 +0000 (12:48 +0400)]
Add has_tag to Service attributes

11 years agoAdded rlm_cache
Alan T. DeKok [Thu, 23 Aug 2012 12:24:57 +0000 (14:24 +0200)]
Added rlm_cache

11 years agoAdded Cache-TTL attribute
Alan T. DeKok [Thu, 23 Aug 2012 12:24:27 +0000 (14:24 +0200)]
Added Cache-TTL attribute

11 years agoAdded cf_pair_operator(). Seems useful.
Alan T. DeKok [Thu, 23 Aug 2012 12:24:07 +0000 (14:24 +0200)]
Added cf_pair_operator().  Seems useful.

11 years agoOutput the name of the file were reading
Arran Cudbard-Bell [Wed, 22 Aug 2012 22:51:12 +0000 (23:51 +0100)]
Output the name of the file were reading

11 years agoFix typo
Arran Cudbard-Bell [Wed, 22 Aug 2012 16:17:24 +0000 (18:17 +0200)]
Fix typo

11 years agoFix and document max_uses
Arran Cudbard-Bell [Wed, 22 Aug 2012 15:24:52 +0000 (16:24 +0100)]
Fix and document max_uses

11 years agoUpdate src/modules/rlm_ldap/rlm_ldap.c
Arran Cudbard-Bell [Wed, 22 Aug 2012 13:50:53 +0000 (15:50 +0200)]
Update src/modules/rlm_ldap/rlm_ldap.c

Add debug message noting the closure

11 years agoAdded "max_uses" parameter
Alan T. DeKok [Wed, 22 Aug 2012 13:32:22 +0000 (15:32 +0200)]
Added "max_uses" parameter

11 years agoNuke the '[' on expansion
Alan T. DeKok [Wed, 22 Aug 2012 07:58:09 +0000 (09:58 +0200)]
Nuke the '[' on expansion

11 years agoNote recent changes
Alan T. DeKok [Tue, 21 Aug 2012 13:35:31 +0000 (15:35 +0200)]
Note recent changes

11 years agoAccounting only needs select, insert, update
Alan T. DeKok [Tue, 21 Aug 2012 13:33:50 +0000 (15:33 +0200)]
Accounting only needs select, insert, update

Not delete.  Not table mods

11 years agoe table name, not "radius.table"
Alan T. DeKok [Tue, 21 Aug 2012 13:32:47 +0000 (15:32 +0200)]
e table name, not "radius.table"

11 years agoUse max_queue_size when initializing the queues
Alan T. DeKok [Tue, 21 Aug 2012 13:31:09 +0000 (15:31 +0200)]
Use max_queue_size when initializing the queues

11 years agoClarify error message
Alan T. DeKok [Mon, 20 Aug 2012 09:29:09 +0000 (11:29 +0200)]
Clarify error message

11 years agoCommented out "unix" (radwho) and "radutmp"
Alan T. DeKok [Mon, 13 Aug 2012 13:19:32 +0000 (15:19 +0200)]
Commented out "unix" (radwho) and "radutmp"

These are used less and less.

11 years agoRemove Client-IP-Address so Acct-Unique-Session-ID stays constant, if request is...
Arran Cudbard-Bell [Mon, 20 Aug 2012 14:27:15 +0000 (15:27 +0100)]
Remove Client-IP-Address so Acct-Unique-Session-ID stays constant, if request is routed via load balancer

11 years agoAdd accounting-on / off statements
Alan T. DeKok [Fri, 10 Aug 2012 09:19:51 +0000 (11:19 +0200)]
Add accounting-on / off statements

11 years agoProduce warnings on OpenSSL problems, rather than crash.
Alan T. DeKok [Thu, 9 Aug 2012 15:54:54 +0000 (17:54 +0200)]
Produce warnings on OpenSSL problems, rather than crash.

11 years agoUpdated example
Alan T. DeKok [Thu, 9 Aug 2012 13:03:18 +0000 (15:03 +0200)]
Updated example

11 years agodon't chgrp syslog
Matthew Newton [Sun, 8 Apr 2012 21:02:55 +0000 (22:02 +0100)]
don't chgrp syslog

11 years agoNote recent changes
Alan T. DeKok [Tue, 7 Aug 2012 13:01:09 +0000 (15:01 +0200)]
Note recent changes

11 years agoMerge pull request #75 from fajarnugraha/v2.1.x-redhat-2.2.0
Arran Cudbard-Bell [Fri, 10 Aug 2012 07:25:53 +0000 (00:25 -0700)]
Merge pull request #75 from fajarnugraha/v2.1.x-redhat-2.2.0

Fix redhat package to build and run cleanly for 2.2.0

11 years agoredhat:add '--with-system-libltdl' to fix build error on RHEL6
Fajar A. Nugraha [Fri, 10 Aug 2012 06:59:31 +0000 (13:59 +0700)]
redhat:add '--with-system-libltdl' to fix build error on RHEL6

11 years agoredhat:fix extra files caused by incorrect patch backup option
Fajar A. Nugraha [Fri, 10 Aug 2012 06:17:13 +0000 (13:17 +0700)]
redhat:fix extra files caused by incorrect patch backup option

11 years agoredhat:include new raddb/modules/* in spec
Fajar A. Nugraha [Fri, 10 Aug 2012 06:15:20 +0000 (13:15 +0700)]
redhat:include new raddb/modules/* in spec

11 years agoredhat:force-enable rlm_wimax since '--with-modules="rlm_wimax"' is not enough
Fajar A. Nugraha [Fri, 10 Aug 2012 06:05:16 +0000 (13:05 +0700)]
redhat:force-enable rlm_wimax since '--with-modules="rlm_wimax"' is not enough

11 years agoredhat:import debian/patches/dhcp_sqlippool-comment-out-mysql.diff
Fajar A. Nugraha [Fri, 10 Aug 2012 05:54:27 +0000 (12:54 +0700)]
redhat:import debian/patches/dhcp_sqlippool-comment-out-mysql.diff

11 years agoredhat:adjust version number in freeradius.spec
Fajar A. Nugraha [Fri, 10 Aug 2012 05:51:03 +0000 (12:51 +0700)]
redhat:adjust version number in freeradius.spec

11 years agoredhat:remove patches already applied upstream
Fajar A. Nugraha [Fri, 10 Aug 2012 04:39:39 +0000 (11:39 +0700)]
redhat:remove patches already applied upstream

Removed:
* redhat/freeradius-man.patch
* redhat/freeradius-perl.patch
* redhat/freeradius-unix-passwd-expire.patch

Modified:redhat/freeradius.spec

11 years agoredhat:certs already use default_md=sha1, so remove it from patch
Fajar A. Nugraha [Fri, 10 Aug 2012 04:31:04 +0000 (11:31 +0700)]
redhat:certs already use default_md=sha1, so remove it from patch

11 years agoImport freeradius-2.1.12-3.el6.src.rpm
Fajar A. Nugraha [Fri, 10 Aug 2012 04:25:08 +0000 (11:25 +0700)]
Import freeradius-2.1.12-3.el6.src.rpm

Import spec and additional files from freeradius-2.1.12-3.el6.src.rpm
to redhat/

11 years agoFix typo
Arran Cudbard-Bell [Thu, 9 Aug 2012 13:04:09 +0000 (15:04 +0200)]
Fix typo

11 years agoMerge pull request #74 from fajarnugraha/v2.1.x-debian-package-fix
Arran Cudbard-Bell [Tue, 7 Aug 2012 07:13:40 +0000 (00:13 -0700)]
Merge pull request #74 from fajarnugraha/v2.1.x-debian-package-fix

Fix debian package to work even without freeradius-mysql

11 years agoFix debian package to work even without freeradius-mysql
Fajar A. Nugraha [Tue, 7 Aug 2012 06:30:28 +0000 (13:30 +0700)]
Fix debian package to work even without freeradius-mysql

Added a patch to comment-out the line referencing mysql on
modules/dhcp_sqlippool in the default debian package.
This is needed so that by default users installing "freeradius"
package can always start the server, even without
"freeeradius-mysql" package installed.

11 years agoRename confusing attr
Alan T. DeKok [Thu, 2 Aug 2012 16:29:18 +0000 (09:29 -0700)]
Rename confusing attr

11 years agoIgnore regex comparisons, too
Alan T. DeKok [Wed, 1 Aug 2012 22:56:50 +0000 (15:56 -0700)]
Ignore regex comparisons, too

11 years agoV6-enable the log filename
Alan T. DeKok [Wed, 1 Aug 2012 22:55:26 +0000 (15:55 -0700)]
V6-enable the log filename

11 years agoRemove extraneneous assert
Alan T. DeKok [Wed, 1 Aug 2012 22:53:49 +0000 (15:53 -0700)]
Remove extraneneous assert

11 years agoScript to convert ISC dhcp lease files into sqlippool entries.
Arran Cudbard-Bell [Wed, 1 Aug 2012 18:05:10 +0000 (19:05 +0100)]
Script to convert ISC dhcp lease files into sqlippool entries.

11 years agoNext update time may be NULL
Alan T. DeKok [Mon, 30 Jul 2012 22:47:12 +0000 (15:47 -0700)]
Next update time may be NULL

11 years agoCheck for NULL parameters to functions
Alan T. DeKok [Mon, 30 Jul 2012 16:48:20 +0000 (18:48 +0200)]
Check for NULL parameters to functions