trust_router.git
9 years agoFix insert statement v1.5.1-debian
Sam Hartman [Thu, 26 Mar 2015 01:21:01 +0000 (21:21 -0400)]
Fix insert statement

9 years agoMerge branch 'master' into debian
Sam Hartman [Thu, 26 Mar 2015 01:20:33 +0000 (21:20 -0400)]
Merge branch 'master' into debian

Fix insert statement

9 years agoUpdate release
Sam Hartman [Thu, 26 Mar 2015 01:20:26 +0000 (21:20 -0400)]
Update release

9 years agoInsert into psk_keys_tab not psk_keys
Sam Hartman [Thu, 26 Mar 2015 01:19:48 +0000 (21:19 -0400)]
Insert into psk_keys_tab not psk_keys

9 years agoNew upstream version
Sam Hartman [Wed, 25 Mar 2015 18:30:32 +0000 (14:30 -0400)]
New upstream version

* Remove database if schema  if is outdated

* Include updated schema to fix key expirations

9 years agoMerge branch 'master' into debian
Sam Hartman [Wed, 25 Mar 2015 18:25:48 +0000 (14:25 -0400)]
Merge branch 'master' into debian

Version 1.5.1

9 years agoVersion 1.5.1; new schema
Sam Hartman [Wed, 25 Mar 2015 18:25:38 +0000 (14:25 -0400)]
Version 1.5.1; new schema

9 years agoDon't include expired keys in the psk_keys table
Sam Hartman [Wed, 25 Mar 2015 18:21:54 +0000 (14:21 -0400)]
Don't include expired keys in the psk_keys table

FreeRADIUS directly queries psk_keys.  It's important that it not
match expired keys.  Instead create a table psk_keys_tab and make
psk_keys a view that excludes expired keys.

9 years agoUpdate spec release 1.5
Sam Hartman [Wed, 18 Mar 2015 19:25:51 +0000 (15:25 -0400)]
Update spec release

9 years agoNew version
Sam Hartman [Tue, 17 Mar 2015 19:20:33 +0000 (15:20 -0400)]
New version

9 years agoMerge branch 'master' into debian
Sam Hartman [Tue, 17 Mar 2015 19:18:56 +0000 (15:18 -0400)]
Merge branch 'master' into debian
Move logging to tr_internal

9 years agoMove logging to tr_internal
Sam Hartman [Tue, 17 Mar 2015 19:18:48 +0000 (15:18 -0400)]
Move logging to tr_internal

9 years agoFix typo
Sam Hartman [Tue, 17 Mar 2015 17:39:36 +0000 (13:39 -0400)]
Fix typo

9 years agoRequire sufficiently new moonshot-gss-eap rpm
Sam Hartman [Tue, 17 Mar 2015 16:29:12 +0000 (12:29 -0400)]
Require sufficiently new moonshot-gss-eap rpm

9 years agoNew version
Sam Hartman [Tue, 17 Mar 2015 16:28:09 +0000 (12:28 -0400)]
New version

9 years agoMerge branch 'master' into debian
Sam Hartman [Tue, 17 Mar 2015 16:27:10 +0000 (12:27 -0400)]
Merge branch 'master' into debian
Pull in expiration fix

9 years agoUpdate release in spec
Sam Hartman [Tue, 17 Mar 2015 16:27:00 +0000 (12:27 -0400)]
Update release in spec

9 years agoExpiration should be minimum of configured and incoming from current request
Sam Hartman [Tue, 17 Mar 2015 16:26:31 +0000 (12:26 -0400)]
Expiration should be minimum of configured and incoming from current request

9 years agoRun into trouble with mech_eap < 0.9.3 because of context deletion problem
Sam Hartman [Mon, 16 Mar 2015 18:47:31 +0000 (14:47 -0400)]
Run into trouble with mech_eap < 0.9.3 because of context deletion problem

9 years agoUpdate spec version
Sam Hartman [Fri, 13 Mar 2015 20:25:05 +0000 (16:25 -0400)]
Update spec version

9 years agoFix comparison operator
Sam Hartman [Fri, 13 Mar 2015 20:23:42 +0000 (16:23 -0400)]
Fix comparison operator

9 years agoFix sense of comparison in schema.
Sam Hartman [Fri, 13 Mar 2015 20:23:06 +0000 (16:23 -0400)]
Fix sense of comparison in schema.

9 years agoFix sense of comparison in schema.
Sam Hartman [Fri, 13 Mar 2015 20:23:06 +0000 (16:23 -0400)]
Fix sense of comparison in schema.

9 years agoFix version string
Sam Hartman [Thu, 12 Mar 2015 18:11:22 +0000 (14:11 -0400)]
Fix version string

9 years agofix typo
Sam Hartman [Thu, 12 Mar 2015 17:09:36 +0000 (13:09 -0400)]
fix typo

9 years agofix typo
Sam Hartman [Thu, 12 Mar 2015 17:09:36 +0000 (13:09 -0400)]
fix typo

9 years agoWe now require glib-devel
Sam Hartman [Thu, 12 Mar 2015 16:43:46 +0000 (12:43 -0400)]
We now require glib-devel

9 years agoNative for now doing pre-releases.
Sam Hartman [Thu, 12 Mar 2015 16:36:22 +0000 (12:36 -0400)]
Native for now doing pre-releases.

9 years agoMerge branch 'master' into debian
Sam Hartman [Thu, 12 Mar 2015 16:35:14 +0000 (12:35 -0400)]
Merge branch 'master' into debian

Most of the 1.5 changes

Conflicts:
trust_router.spec

9 years agoSchema updates; exclude expired keys from view
Sam Hartman [Thu, 12 Mar 2015 16:33:50 +0000 (12:33 -0400)]
Schema updates; exclude expired keys from view

9 years agotids handler fixes
Sam Hartman [Thu, 12 Mar 2015 16:11:36 +0000 (12:11 -0400)]
tids handler fixes

* use talloc for server responses

* bind expiration to right value in statement

9 years agoKey expiration in minutes
Sam Hartman [Thu, 12 Mar 2015 15:34:20 +0000 (11:34 -0400)]
Key expiration in minutes

9 years agoNew Upstream Release
Sam Hartman [Wed, 11 Mar 2015 14:53:39 +0000 (10:53 -0400)]
New Upstream Release

* New Upstream Release
* Support Key expiration and  logging

9 years agoFix logging configuration
Sam Hartman [Wed, 11 Mar 2015 22:31:55 +0000 (18:31 -0400)]
Fix logging configuration

9 years agoMerge branch 'logging_changes' of https://github.com/adam-bishop/trust_router
Sam Hartman [Wed, 11 Mar 2015 17:31:36 +0000 (13:31 -0400)]
Merge branch 'logging_changes' of https://github.com/adam-bishop/trust_router

Pull in two additional fixes from Adam.

9 years agoExplicitly call tr_log_open when we're not being used as a library
Adam Bishop [Wed, 11 Mar 2015 14:47:27 +0000 (14:47 +0000)]
Explicitly call tr_log_open when we're not being used as a library

9 years agoDon't call openlog() implicitly
Adam Bishop [Wed, 11 Mar 2015 14:46:59 +0000 (14:46 +0000)]
Don't call openlog() implicitly

9 years agoincrement version
Sam Hartman [Wed, 11 Mar 2015 14:49:31 +0000 (10:49 -0400)]
increment version

9 years agoConnection clean up
Sam Hartman [Wed, 11 Mar 2015 14:15:59 +0000 (10:15 -0400)]
Connection clean up

We need to clean up the connection file descriptor and the gss context.

* tidc_fwd_request is the wrong place to free the TID_REQ because it does not allocate it

* tid_req_dup needs to use talloc; duplicated requests are freed by
  the original request

* tidc_send_message frees its request

* The request destructor closes the connection.

* Keep track of whether a request is duplicated; only free the connection and gss context in the original request.

9 years agoLogic for expiration and path
Sam Hartman [Tue, 10 Mar 2015 20:18:07 +0000 (16:18 -0400)]
Logic for expiration and path

* Add path as requests are received at a tids

* Calculate expiration in tids

* Insert expiration into database

* Update schema

* tids now requires glib

9 years agoAdd expiration and path to messages
Sam Hartman [Tue, 10 Mar 2015 20:10:45 +0000 (16:10 -0400)]
Add expiration and path to messages

Handle path and key expiration in encoders and decoders.

9 years agoReal syslog support for trust router
Sam Hartman [Tue, 10 Mar 2015 00:45:38 +0000 (20:45 -0400)]
Real syslog support for trust router

Merge branch 'logging_changes' of https://github.com/adam-bishop/trust_router

Conflicts:
common/tr_config.c
common/tr_msg.c
tr/tr_main.c

9 years agoConfiguration of key expiration for APC
Sam Hartman [Tue, 10 Mar 2015 00:34:57 +0000 (20:34 -0400)]
Configuration of key expiration for APC

Add support for configuring the key expiration in the config and pass this allong as requests are forwarded.

9 years agoAdd key expiration to output message
Sam Hartman [Tue, 10 Mar 2015 00:32:02 +0000 (20:32 -0400)]
Add key expiration to output message

9 years agoStart depending on glib
Sam Hartman [Tue, 10 Mar 2015 00:31:21 +0000 (20:31 -0400)]
Start depending on glib

We need glib for ISO 8601 time functions and
plan to use it for more.

9 years agoWorkaround for glibc bug 14347
Adam Bishop [Wed, 10 Dec 2014 11:43:42 +0000 (11:43 +0000)]
Workaround for glibc bug 14347

9 years agoAdd logging to the default main config
Adam Bishop [Thu, 27 Nov 2014 15:56:58 +0000 (15:56 +0000)]
Add logging to the default main config

9 years agoReplace calls to fprintf with new tr_* macros
Adam Bishop [Tue, 9 Dec 2014 13:27:13 +0000 (13:27 +0000)]
Replace calls to fprintf with new tr_* macros

9 years agotr_main: clean up void pointer style
Sam Hartman [Mon, 9 Mar 2015 13:38:46 +0000 (09:38 -0400)]
tr_main: clean up void pointer style

9 years agoInitial path and expiration utilities
Sam Hartman [Mon, 9 Mar 2015 11:54:12 +0000 (07:54 -0400)]
Initial path and expiration utilities

Add path  functions to  tid_req and tid_resp

Add path members and expiration to tid_req and tid_resp

Update copyrights

9 years agotid_req_free: delete GSS context
Sam Hartman [Mon, 23 Feb 2015 16:58:14 +0000 (11:58 -0500)]
tid_req_free: delete GSS context

Free the gss context in a TID request.

9 years agoAdd logging values to the TR config struct, code to parse it, and a default value...
Adam Bishop [Thu, 27 Nov 2014 15:55:27 +0000 (15:55 +0000)]
Add logging values to the TR config struct, code to parse it, and a default value in case it is not configured

9 years agoAdd some audit messages to be logged
Adam Bishop [Tue, 9 Dec 2014 13:47:26 +0000 (13:47 +0000)]
Add some audit messages to be logged

9 years agoUpdate Makefile.am to include new sources
Adam Bishop [Mon, 8 Dec 2014 14:15:11 +0000 (14:15 +0000)]
Update Makefile.am to include new sources

9 years agoAdd functions to log trust query results handled by the TID server
Adam Bishop [Wed, 10 Dec 2014 18:13:24 +0000 (18:13 +0000)]
Add functions to log trust query results handled by the TID server

9 years agoAdding syslog into configure checks
Adam Bishop [Thu, 27 Nov 2014 13:40:53 +0000 (13:40 +0000)]
Adding syslog into configure checks

9 years agoSpecfile minor version bump
Adam Bishop [Thu, 27 Nov 2014 13:29:47 +0000 (13:29 +0000)]
Specfile minor version bump

9 years agoRemove single-debian-patch
Sam Hartman [Thu, 6 Nov 2014 19:40:05 +0000 (14:40 -0500)]
Remove single-debian-patch

9 years agoRemove period from default configuration message.
Margaret Wasserman [Tue, 4 Nov 2014 20:35:09 +0000 (15:35 -0500)]
Remove period from default configuration message.

9 years agoAdd default aaa server to config printout, remove redundant log mesage.
Margaret Wasserman [Tue, 4 Nov 2014 20:30:28 +0000 (15:30 -0500)]
Add default aaa server to config printout, remove redundant log mesage.

9 years agoEnable single debian patch
Sam Hartman [Thu, 6 Nov 2014 18:54:01 +0000 (13:54 -0500)]
Enable single debian patch

9 years agoPrint default realm from Config (LP: #1386654)
Sam Hartman [Tue, 4 Nov 2014 20:50:30 +0000 (15:50 -0500)]
Print default realm from Config  (LP: #1386654)

9 years agoMerge branch 'master' into debian
Sam Hartman [Tue, 4 Nov 2014 20:47:00 +0000 (15:47 -0500)]
Merge branch 'master' into debian

Include printf for default realm

9 years agoupdate spec version
Sam Hartman [Tue, 4 Nov 2014 20:46:51 +0000 (15:46 -0500)]
update spec version

9 years agoRemove period from default configuration message.
Margaret Wasserman [Tue, 4 Nov 2014 20:35:09 +0000 (15:35 -0500)]
Remove period from default configuration message.

9 years agoAdd default aaa server to config printout, remove redundant log mesage.
Margaret Wasserman [Tue, 4 Nov 2014 20:30:28 +0000 (15:30 -0500)]
Add default aaa server to config printout, remove redundant log mesage.

9 years agoTODONES!
Sam Hartman [Tue, 14 Oct 2014 06:28:28 +0000 (02:28 -0400)]
TODONES!

9 years agoFix home directory of trust router user in centos packaging
Sam Hartman [Wed, 8 Oct 2014 18:33:33 +0000 (14:33 -0400)]
Fix home directory of trust router user in centos packaging

9 years agoUpdate version in spec file
Sam Hartman [Tue, 7 Oct 2014 14:32:05 +0000 (10:32 -0400)]
Update version in spec file

9 years agowrap changelog line
Sam Hartman [Tue, 7 Oct 2014 13:33:03 +0000 (09:33 -0400)]
wrap changelog line

9 years agoNew upstream version
Sam Hartman [Tue, 7 Oct 2014 11:20:13 +0000 (07:20 -0400)]
New upstream version

9 years agorecord new upstream branch created by importing moonshot-trust-router_1.4.1.orig...
Sam Hartman [Tue, 7 Oct 2014 11:17:39 +0000 (07:17 -0400)]
record new upstream branch created by importing moonshot-trust-router_1.4.1.orig.tar.gz

9 years agogitignore
Sam Hartman [Wed, 27 Aug 2014 23:05:15 +0000 (19:05 -0400)]
gitignore

INclude gitignore files not distributed in upstream tarball

Patch-Name: gitignore

9 years agoImport moonshot-trust-router_1.4.1.orig.tar.gz upstream-debian upstream/1.4.1
Sam Hartman [Tue, 7 Oct 2014 11:17:39 +0000 (07:17 -0400)]
Import moonshot-trust-router_1.4.1.orig.tar.gz

9 years agoMark version 1.4.1 1.4.1
Sam Hartman [Tue, 7 Oct 2014 10:10:28 +0000 (06:10 -0400)]
Mark version 1.4.1

9 years agoSet busy timeout
Sam Hartman [Tue, 7 Oct 2014 10:08:55 +0000 (06:08 -0400)]
Set busy timeout

Set a busy timeout in the tids sqlite3 setup code so that we do not
fail on any database locking.  As an example in 1.4 if two tids
processes try to write at the same time, one will fail.

9 years agotr_config: remove free calls
Sam Hartman [Tue, 7 Oct 2014 10:02:35 +0000 (06:02 -0400)]
tr_config: remove free calls

Since we're using talloc, we only need to free the entire
configuration and that will cascade to sub objects.  Remove calls to
free, which are wrong anyway for talloc'd memory.

9 years agotr_req_handler: Handle non-defaulted case
Sam Hartman [Tue, 7 Oct 2014 09:57:51 +0000 (05:57 -0400)]
tr_req_handler: Handle non-defaulted case

In 1.4, we broke forwarding requests that were not defaulted.  We
looked up the community as a member of the community rather than the
realm.  Fix this logic error.

Also, update error messages to be more accurate and to fibx a spelling error.

9 years agoFix lintian errors debian/1.4-9
Sam Hartman [Fri, 3 Oct 2014 20:22:44 +0000 (16:22 -0400)]
Fix lintian errors

* Fix lintian errors:
    - Update LSB header for tids init script
    - Make tids wrapper executable
    - Override things lintian gets wrong

9 years agoFix umask of database
Sam Hartman [Fri, 3 Oct 2014 15:16:12 +0000 (11:16 -0400)]
Fix umask of database

9 years agoRemove debugging and fix postinst script to work when SHELL is not set.
Sam Hartman [Fri, 3 Oct 2014 14:20:41 +0000 (10:20 -0400)]
Remove debugging and fix postinst script to work when SHELL is not set.

9 years agoEven more debugging
Sam Hartman [Thu, 2 Oct 2014 20:45:42 +0000 (16:45 -0400)]
Even more debugging

9 years agoEven more debugging
Sam Hartman [Thu, 2 Oct 2014 20:01:34 +0000 (16:01 -0400)]
Even more debugging

9 years agoAdd debugging to postinst to try and understand dvd creation bug
Sam Hartman [Thu, 2 Oct 2014 02:37:51 +0000 (22:37 -0400)]
Add debugging to postinst to try and understand dvd creation bug

9 years agopostinst quiet about user creation
Sam Hartman [Wed, 1 Oct 2014 17:51:50 +0000 (13:51 -0400)]
postinst quiet about user creation

* postinst quiet about user creation
* tids.init:fix run levels

9 years agoCreate a schema on upgrade or install
Sam Hartman [Tue, 30 Sep 2014 19:22:07 +0000 (15:22 -0400)]
Create a schema on upgrade or install

9 years agoUpdate to fix bug in init script, Thanks Stefan
Sam Hartman [Tue, 30 Sep 2014 18:53:47 +0000 (14:53 -0400)]
Update to fix bug in init script, Thanks Stefan

9 years agoUpdate moonshot-trust-router.tids.init
Stefan Paetow [Tue, 30 Sep 2014 14:06:59 +0000 (15:06 +0100)]
Update moonshot-trust-router.tids.init

Remove an erroneous $ sign

9 years agoFix typo
Sam Hartman [Fri, 26 Sep 2014 15:41:58 +0000 (11:41 -0400)]
Fix typo

9 years agomerge patched-debian into debian
Sam Hartman [Fri, 26 Sep 2014 15:26:38 +0000 (11:26 -0400)]
merge patched-debian into debian

9 years agoBring back portal.cfg and manual.cfg
Sam Hartman [Fri, 26 Sep 2014 15:26:15 +0000 (11:26 -0400)]
Bring back portal.cfg and manual.cfg

Patch-Category: upstream

9 years agomove tids.init to redhat
Sam Hartman [Fri, 26 Sep 2014 14:57:51 +0000 (10:57 -0400)]
move tids.init to redhat

Patch from Stefan Paetow

9 years agoInstall tids init script
Sam Hartman [Fri, 26 Sep 2014 14:46:47 +0000 (10:46 -0400)]
Install tids init script

Patch by Stefan Paetow;modified slightly for Debian conventions.

9 years agochange version to 1.4-1
Sam Hartman [Fri, 26 Sep 2014 14:02:06 +0000 (10:02 -0400)]
change version to 1.4-1
New Upstream version

9 years agogitignore
Sam Hartman [Wed, 27 Aug 2014 23:05:15 +0000 (19:05 -0400)]
gitignore

INclude gitignore files not distributed in upstream tarball

Patch-Name: gitignore

9 years agoImport moonshot-trust-router_1.4.orig.tar.gz
Sam Hartman [Fri, 26 Sep 2014 13:58:14 +0000 (09:58 -0400)]
Import moonshot-trust-router_1.4.orig.tar.gz

9 years agorecord new upstream branch created by importing moonshot-trust-router_1.4.orig.tar.gz
Sam Hartman [Fri, 26 Sep 2014 13:58:14 +0000 (09:58 -0400)]
record new upstream branch created by importing moonshot-trust-router_1.4.orig.tar.gz

9 years agoActually include *.cfg in future source tarballs
Sam Hartman [Fri, 26 Sep 2014 13:51:42 +0000 (09:51 -0400)]
Actually include *.cfg in future source tarballs

9 years agodist extra files in redhat
Sam Hartman [Fri, 26 Sep 2014 13:41:44 +0000 (09:41 -0400)]
dist extra files in redhat

9 years agoMerge Stefan's changes for TIDS init scripts for Centos. 1.4
Margaret Wasserman [Tue, 23 Sep 2014 19:23:06 +0000 (15:23 -0400)]
Merge Stefan's changes for TIDS init scripts for Centos.