openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

Revisions of freeradius-server

buildservice-autocommit accepted request 1177967 from

Adam Majer (adamm) 5 days ago (revision 173)

baserev update by copy to link target

Adam Majer (adamm) committed 5 days ago (revision 172)

changelog update only

Adam Majer (adamm) committed 5 days ago (revision 171)

- update to 3.2.4
  Feature Improvements
  * Preliminary support for TEAP.
  * Update EAP module pre_proxy checks to make them less restrictive
    This prevents the "middle box" effect from affecting future traffic.
  * Many fixes and updates for Docker images.
  * Add dpsk module. See mods-available/dpsk.
  * Print out what cause the TLS operations to be made, such as the EAP
    method name (peap, ttls, etc), or RADIUS/TLS listen / proxy socket.
  * Add auto_escape to sample SQL module config.
  * Add 'if not exists' to mysql create table queries.
  * Update dictionary.aruba; add dictionary.tplink, dictionary.alphion.
  * Allow for 'encrypt=1' attributes to be longer than 128 characters.
  * Added "radsecret" program which generates strong secrets.
    See the top of the "clients.conf" file for more information.
  * radclient now prints packets as hex when using -xxx.
  * Added "-t timeout" to radsniff. It will stop processing packets
    after <timeout> seconds.
  * Support "interface = ..." on OSX and other *BSD which have IP_BOUND_IF.
  * The detail module now has a "dates_as_integer" configuration item
    See mods-available/detail for more information.
  * Add lookback/lookforward steps and more configuration to totp.
    See mods-available/totp.
  * Add "time_since" xlat to calculate elapsed time in seconds,
    milliseconds and microseconds.
  * Support "Post-Auth-Type Challenge" in the inner tunnel.
  * Add "proxy_dedup_window". See radiusd.conf.
  * Document KRB5_CLIENT_KTNAME in the "env" section of radiusd.conf.
  * Add "dedup_key" for misbehaving supplicants. See mods-available/eap.
  Bug Fixes

buildservice-autocommit accepted request 1148113 from

Dominique Leuenberger (dimstar_suse) 4 months ago (revision 170)

baserev update by copy to link target

Dominique Leuenberger (dimstar_suse) accepted request 1147358 from

Christian Boltz (cboltz) 4 months ago (revision 169)

- fix directory permissions for
  /etc/raddb/mods-config/sql/moonshot-targeted-ids/*sql*
  (boo#1220025, accidentally discovered via boo#1220024)

buildservice-autocommit accepted request 1145150 from

Adam Majer (adamm) 4 months ago (revision 168)

baserev update by copy to link target

Adam Majer (adamm) accepted request 1144489 from

Marcus Meissner (msmeissn) 4 months ago (revision 167)

- provides for user(radiusd), group(radiusd) and group (winbind) bsc#1219600

buildservice-autocommit accepted request 1121419 from

Adam Majer (adamm) 7 months ago (revision 166)

baserev update by copy to link target

Adam Majer (adamm) committed 7 months ago (revision 165)

CVE numbers

Adam Majer (adamm) committed 7 months ago (revision 164)

CVE references added only

buildservice-autocommit accepted request 1108446 from

Adam Majer (adamm) 9 months ago (revision 163)

baserev update by copy to link target

Adam Majer (adamm) committed 9 months ago (revision 162)

Adam Majer (adamm) committed 9 months ago (revision 161)

- update to version 3.2.3:
  Feature Improvements
  * Add "max_retries" for connection pools. Fixes #4908.
  * Update dictionary.ciena, dictionary.huawei, dictionary.wifialliance and
    dictionary.wispr; add dictionary.eleven.
  * You can now list "eap" in the "pre-proxy" section. If the packet contains a
    malformed EAP message, then the request will be rejected The home server
    will either reject (or discard) this packet anyways, so this change can
    only help with large proxy scenarios.
  * Show warnings if libldap is not using OpenSSL.
  * Support RADIUS/1.1. See
    https://datatracker.ietf.org/doc/draft-dekok-radext-radiusv11/ Disabled by
    default, can be enabled by passing `--with-radiusv11` to the configure
    script. For now, this is for testing interoperability.
  * Add extra sanity checks for malformed EAP attributes.
  * More TLS debugging output.
  * Clear old module instance data before HUP reload. Avoids burst memory use
    when e.g. using large data files with rlm_files.
  * `rlm_cache_redis` is now included in the freeradius-redis packages.
Bug Fixes
  * Don't leak MD contexts with OpenSSL 3.0.
  * Increase internal buffer size for TLS connections, which can help with
    high-load proxies.
  * Send Status-Server checks for TLS connections.
  * Give descriptive error if "update CoA" is used with "fake" packets, as it
    won't work. i.e. inner-tunnel and virtual home servers.
  * Many small ASAN / LSAN fixes from Jorge Pereira.
  * Close inbound RADIUS/TLS socket on TLS errors. When a home server sees a
    TLS error, it will now close the socket, so proxies do not have an open
    (but dead) TLS connection.

buildservice-autocommit accepted request 1063506 from

Adam Majer (adamm) over 1 year ago (revision 160)

baserev update by copy to link target

Adam Majer (adamm) committed over 1 year ago (revision 159)

- update to version 3.2.1:
  Feature Improvements
  *  Add dictionary.ciena, dictionary.nile, and DHCPv4 dictionaries
  *  Add simultaneous-use queries for MS SQL
  *  Add radmin command for "stats pool <module-name>"
     which prints out statistics about the connection pools.
  *  Client statistics now shows "conflicts",
     to count conflicting packets.
  *  New optional "lightweight accounting-on/off" strategy.
     When refreshing queries.conf you should also add the new
     nasreload table and corresponding GRANTs to your DB schema.
  *  Add TLS-Client-Cert-X509v3-Certificate-Policies, which helps
     with Eduroam.
  *  Allow auth+acct for TCP sockets, too.
  *  Add rlm_cache_redis. See raddb/mods-available/cache for details.
  *  Allow radmin to look up home servers by name, too.
  *  Ensure that dynamic clients don't create loops on duplicates
  *  Removed rlm_sqlhpwippool. There was no documentation, no configuration,
     and the module was ~15 years old with no one using it.
  *  Marked rlm_python3 as stable.
  *  Add sigalgs_list. See raddb/mods-available/eap
  *  For rlm_linelog, when opening files in /dev, look at "permissions"
     to see whether to open them r/w.
  *  More flexibility for dynamic home servers. See
     doc/configuration/dynamic_home_servers.md and
     raddb/home_servers/README.md.
  *  Allow setting of application_name for PostgreSQL.
     See mods-available/sql.
  Bug Fixes
  *  Correct test for open sessions in radacct for MS SQL.

buildservice-autocommit accepted request 1058729 from

Adam Majer (adamm) over 1 year ago (revision 158)

baserev update by copy to link target

Adam Majer (adamm) accepted request 1058211 from

Stefan Schubert (schubi2) over 1 year ago (revision 157)

- Migration of PAM settings to /usr/lib/pam.d.

buildservice-autocommit accepted request 1006870 from

Adam Majer (adamm) over 1 year ago (revision 156)

baserev update by copy to link target

Adam Majer (adamm) accepted request 1006867 from

Michael Ströder (stroeder) over 1 year ago (revision 155)

- use chown with colon instead dot in radiusd.service

buildservice-autocommit accepted request 991370 from

Adam Majer (adamm) almost 2 years ago (revision 154)

baserev update by copy to link target

Displaying revisions 1 - 20 of 173

Places

Revisions of freeradius-server

Places