2009-04-23 20:26:05 by Adam Ciarcinski | Files touched by this commit (12) | |
Log message:
FreeRADIUS 2.1.4 Tue Mar 10 17:05:00 CEST 2009; , urgency=medium
* Permit multiple "-e" in radmin.
* Add support for originating CoA-Request and Disconnect-Request.
See raddb/sites-available/originate-coa.
* Added "lifetime" and "max_queries" to raddb/sql.conf.
This helps address the problem of hung SQL sockets.
* Allow packets to be injected via radmin. See "inject help" in radmin.
* Answer VMPS reconfirmation request.
* Sample logrotate script in scripts/logrotate.freeradius
* Add configurable poll interval for "detail" listeners
* New "raddebug" command. This prints debugging information from
a running server.
* Add "require_message_authenticator" configuration to home_server
configuration. This makes the server add Message-Authenticator
to all outgoing Access-Request packets.
* Added smsotp module.
* Enabled the administration socket in the default install.
See raddb/sites-available/control-socket, and "man radmin"
* Handle duplicate clients, such as with replicated or
load-balanced SQL servers and "readclients = yes"
* Bug fixes
|
2008-12-19 23:49:18 by Adrian Portelli | Files touched by this commit (3) |
Log message:
Update to 2.1.3
This should fix PR#39952
MAKE_JOBS_SAFE=no
05 December 2008 - Version 2.1.3 has been released.
The focus of this release is stability.
Feature Improvements
* Allow running with user=radiusd and binding to secure sockets.
* Start sending Status-Server "are you alive" messages earlier, which \
helps with proxying multiple realms to a home server.
* Removed thread pool code from rlm_perl. It's not necessary.
* Added example Perl configuration to raddb/modules/perl
* Force OpenSSL to support certificates with SHA256. This seems to be necessary \
for WiMAX certs.
Bug Fixes
* Fix Debian patch to allow it to build.
* Fix potential NULL dereference in debugging mode on certain platforms for TTLS \
and PEAP inner tunnels.
* Fix uninitialized memory in handling of vendor definitions
* Fix parsing of quoted (but non-string) attributes in the users< file.
* Initialize unknown NAS IP to 255.255.255.255, rather than 0.0.0.0
* use SUN_LEN in control socket, to avoid truncation on some platforms.
* Correct internal handling of debug condition to prevent it from being over-written.
* Check return code of regcomp in unlang, so that invalid regular expressions \
are caught rather than mishandled.
* Make rlm_sql use <ltdl.h>. Addresses bug #610.
* Document list "type = status" better. Closes bug #580.
* Set "default days" for certificates, because OpenSSL won't do it. \
This closes bug #615.
* Reference correct list in example raddb/modules/ldap. Closes #596.
* Increase default schema size for Acct-Session-Id to 64. Closes #540.
* Fix use of temporary files in dialup-admin. Closes #605 and addresses \
CVE-2008-4474.
* Addressed a number of minor issues found by Coverity.
* Added DHCP option 150 to the dictionary. Closes #618.
04 December 2008 - Version 2.1.2 has been released.
Due to packaging issues, 2.1.2 has been pulled from the net.
|
2008-10-12 15:57:27 by Adrian Portelli | Files touched by this commit (8) |
Log message:
Update to 2.1.1
Patches mainly from adam@ with some changes by me
05 September 2008 - Version 2.1.0 has been released.
The focus of this release is features.
Feature Improvements
* Clients may now be defined dynamically, based on IP address. See \
raddb/sites-available/dynamic-clients.
* SNMP support is now available through an experimental Perl script. See \
scripts/snmp-proxy/README
* SNMP statistics are also available through Status-Server packets. See \
raddb/sites-available/status
* Added more Microsoft attributes from bug #568.
* The linelog module has more functionality and flexibility. See \
raddb/modules/linelog.
* The debugging output has been sanitized. It should be much more readable.
* Debug logs can now be turned on/off while the server is running, for a user, \
group, realm, etc. See the log section of raddb/radiusd.conf.
* Added support for WiMAX Forum attributes. The dynamic keys are not yet \
calculated. See share/dictionary.wimax
* Added session resumption for PEAP and TTLS. See raddb/eap.conf, and the cache \
sub-section.
* Added radmin command-line tool for administering a running server. See man \
radmin and raddb/sites-available/control-socket.
Bug Fixes
* Double escaping of '\\' in the users (and some other) files has been fixed. If \
you have '\\' in the users file, your configuration will need to be checked, and \
fixed!
* Parse security section of radiusd.conf. This was accidentally deleted in \
2.0.5. Closes bug #566.
* Bind to interface before IP, which allows DHCP sockets to listen on \
"*" for multiple interfaces.
* Fix handling of giaddr in DHCP responses.
* Corrected parsing of status_check in home_server so that it works.
* Fix hints so that "Puser" works again.
* Removed length restrictions on attribute names in the dictionaries.
* Update socket code to avoid C compiler optimizations.
25 September 2008 - Version 2.1.1 has been released.
The focus of this release is stability.
Feature Improvements
* Many more options and features are available via radmin. See man radmin and \
raddb/sites-available/control-socket.
* Many more commands available via the control socket. Connect via radmin, and \
type help for more information.
* Added dictionary.networkphysics and dictionary.lancom.
* Calculate WiMAX MIP keys, and added sample WiMAX SQL tables.
Bug Fixes
* Fixed bug that made radmin not work.
* Fixed Suse && Debian package scripts.
* Fixed issues with dynamic clients.
* Fixed configure checks for -lreadline
* rlm_sqlippool no longer needs to be linked to rlm_sql.
* Add statistics for detail file listeners. This closes bug #593.
* Fixed printing of some WiMAX attributes.
* Fixed double free on exit() in rlm_attr_filter.
* Fixed build issues on Solaris.
* Fixed fast session resumption for EAP-TLS.
|
2008-06-20 22:57:39 by Adrian Portelli | Files touched by this commit (3) |
Log message:
Version 2.0.5 has been released. The focus of this release is stability.
Feature Improvements
* Permit SQL authorize_reply_query to be empty.
* Allow setting response packet type in Post-Proxy-Type Fail handler.
* Added install-chown target to set correct permission and ownership make \
RADMIN=radmin RGROUP=radius install-chown.
* Support for LDAP-Group and other dynamic comparison attribute in unlang. \
Developed from a patch by Jason Alderfer.
* Added chroot support. See radiusd.conf for comments.
* Allow clients of 0/0. We do not recommend using this, though.
* Moved many module configurations into raddb/modules/*.
Bug Fixes
* Allow proxying to virtual servers for accounting packets, too.
* Added num_fields function to PostgreSQL client. This lets clients be read from \
a PostgreSQL database.
* Updated proxy fallback mechanism to validate fallback servers, and to process \
fallback requests in a child thread.
* The realm module returns ok for LOCAL realms, not noop.
* Fixed some DHCP code handling. The examples should now work.
|
2008-05-15 21:46:21 by Adrian Portelli | Files touched by this commit (1) |
Log message:
Remove file that never should have been imported
|
2008-05-15 21:43:47 by Adrian Portelli | Files touched by this commit (22) | |
Log message:
Freeradius version 2.0 of the server is intended to be backwards compatible
with previous versions, but also to have many new features, such as:
* simple policy language (see "man unlang")
* virtual servers (raddb/sites-available/README)
* IPv6 support
* better proxy support (raddb/proxy.conf)
* More EAP types
* Debugging output should be MUCH easier to understand
* VMPS support
* More modules are marked "stable" (python, etc.)
* SQL configuration has been cleaned up (see raddb/sql/*)
* limited support for HUP
* check configuration and exit (radiusd -C)
* Server core is now event based (simpler, more powerful)
|