openSUSE Build Service

buildservice-autocommit accepted request 1148113 from

Dominique Leuenberger (dimstar_suse) 3 months ago (revision 170)

baserev update by copy to link target

Dominique Leuenberger (dimstar_suse) accepted request 1147358 from

Christian Boltz (cboltz) 3 months ago (revision 169)

- fix directory permissions for
  /etc/raddb/mods-config/sql/moonshot-targeted-ids/*sql*
  (boo#1220025, accidentally discovered via boo#1220024)

buildservice-autocommit accepted request 1145150 from

Adam Majer (adamm) 3 months ago (revision 168)

baserev update by copy to link target

Adam Majer (adamm) accepted request 1144489 from

Marcus Meissner (msmeissn) 3 months ago (revision 167)

- provides for user(radiusd), group(radiusd) and group (winbind) bsc#1219600

buildservice-autocommit accepted request 1121419 from

Adam Majer (adamm) 6 months ago (revision 166)

baserev update by copy to link target

Adam Majer (adamm) committed 6 months ago (revision 165)

CVE numbers

Adam Majer (adamm) committed 6 months ago (revision 164)

CVE references added only

buildservice-autocommit accepted request 1108446 from

Adam Majer (adamm) 8 months ago (revision 163)

baserev update by copy to link target

Adam Majer (adamm) committed 8 months ago (revision 162)

Adam Majer (adamm) committed 8 months ago (revision 161)

- update to version 3.2.3:
  Feature Improvements
  * Add "max_retries" for connection pools. Fixes #4908.
  * Update dictionary.ciena, dictionary.huawei, dictionary.wifialliance and
    dictionary.wispr; add dictionary.eleven.
  * You can now list "eap" in the "pre-proxy" section. If the packet contains a
    malformed EAP message, then the request will be rejected The home server
    will either reject (or discard) this packet anyways, so this change can
    only help with large proxy scenarios.
  * Show warnings if libldap is not using OpenSSL.
  * Support RADIUS/1.1. See
    https://datatracker.ietf.org/doc/draft-dekok-radext-radiusv11/ Disabled by
    default, can be enabled by passing `--with-radiusv11` to the configure
    script. For now, this is for testing interoperability.
  * Add extra sanity checks for malformed EAP attributes.
  * More TLS debugging output.
  * Clear old module instance data before HUP reload. Avoids burst memory use
    when e.g. using large data files with rlm_files.
  * `rlm_cache_redis` is now included in the freeradius-redis packages.
Bug Fixes
  * Don't leak MD contexts with OpenSSL 3.0.
  * Increase internal buffer size for TLS connections, which can help with
    high-load proxies.
  * Send Status-Server checks for TLS connections.
  * Give descriptive error if "update CoA" is used with "fake" packets, as it
    won't work. i.e. inner-tunnel and virtual home servers.
  * Many small ASAN / LSAN fixes from Jorge Pereira.
  * Close inbound RADIUS/TLS socket on TLS errors. When a home server sees a
    TLS error, it will now close the socket, so proxies do not have an open
    (but dead) TLS connection.

buildservice-autocommit accepted request 1063506 from

Adam Majer (adamm) over 1 year ago (revision 160)

baserev update by copy to link target

Adam Majer (adamm) committed over 1 year ago (revision 159)

- update to version 3.2.1:
  Feature Improvements
  *  Add dictionary.ciena, dictionary.nile, and DHCPv4 dictionaries
  *  Add simultaneous-use queries for MS SQL
  *  Add radmin command for "stats pool <module-name>"
     which prints out statistics about the connection pools.
  *  Client statistics now shows "conflicts",
     to count conflicting packets.
  *  New optional "lightweight accounting-on/off" strategy.
     When refreshing queries.conf you should also add the new
     nasreload table and corresponding GRANTs to your DB schema.
  *  Add TLS-Client-Cert-X509v3-Certificate-Policies, which helps
     with Eduroam.
  *  Allow auth+acct for TCP sockets, too.
  *  Add rlm_cache_redis. See raddb/mods-available/cache for details.
  *  Allow radmin to look up home servers by name, too.
  *  Ensure that dynamic clients don't create loops on duplicates
  *  Removed rlm_sqlhpwippool. There was no documentation, no configuration,
     and the module was ~15 years old with no one using it.
  *  Marked rlm_python3 as stable.
  *  Add sigalgs_list. See raddb/mods-available/eap
  *  For rlm_linelog, when opening files in /dev, look at "permissions"
     to see whether to open them r/w.
  *  More flexibility for dynamic home servers. See
     doc/configuration/dynamic_home_servers.md and
     raddb/home_servers/README.md.
  *  Allow setting of application_name for PostgreSQL.
     See mods-available/sql.
  Bug Fixes
  *  Correct test for open sessions in radacct for MS SQL.

buildservice-autocommit accepted request 1058729 from

Adam Majer (adamm) over 1 year ago (revision 158)

baserev update by copy to link target

Adam Majer (adamm) accepted request 1058211 from

Stefan Schubert (schubi2) over 1 year ago (revision 157)

- Migration of PAM settings to /usr/lib/pam.d.

buildservice-autocommit accepted request 1006870 from

Adam Majer (adamm) over 1 year ago (revision 156)

baserev update by copy to link target

Adam Majer (adamm) accepted request 1006867 from

Michael Ströder (stroeder) over 1 year ago (revision 155)

- use chown with colon instead dot in radiusd.service

buildservice-autocommit accepted request 991370 from

Adam Majer (adamm) almost 2 years ago (revision 154)

baserev update by copy to link target

Adam Majer (adamm) accepted request 991315 from

William Brown (firstyear) almost 2 years ago (revision 153)

- Resolve issue with linking python3 with rlm-python

Adam Majer (adamm) accepted request 950901 from

Samuel Cabrero (scabrero) over 2 years ago (revision 152)

- Remove libwbclient-devel BuildRequires in favor of
  pkgconfig(wbclient); (jsc#SLE-20577);

Adam Majer (adamm) committed over 2 years ago (revision 151)

Add missing bug report in the log

Places

Revisions of freeradius-server

Places