Revisions of freeradius-server
buildservice-autocommit
accepted
request 298812
from
Vítězslav Čížek (vitezslav_cizek)
(revision 73)
baserev update by copy to link target
- minor adjustments/cleanup of spec and changes - update to 3.0.8 * for a detailed list of changes look at: /usr/share/doc/packages/freeradius-server/ChangeLog - new set of consolidated patch files: deleted: * freeradius-server-2.1.1-logrotate_su.patch * freeradius-server-2.1.6-rcradiusd.patch * freeradius-server-initscript-pidfile.patch * freeradius-server-radius-reload-logrotate.patch * freeradius-server-var_run.patch added: * freeradius-server-radiusd-logrotate.patch * freeradius-server-rcradiusd.patch * freeradius-server-tmpfiles.patch
Update to 3.0.8, tested running on openSUSE Tumbleweed x86_64. Please adjust things (e.g. longish changelog) as needed by you. Thanks.
buildservice-autocommit
accepted
request 281294
from
Tomáš Chvátal (scarabeus_factory)
(revision 70)
baserev update by copy to link target
- Do not disable as-needed build - Remove the with_sysconfig switch and just stick with versions
- update to 3.0.6 - fixes a segmentation fault in PEAP module (bnc#912588) Feature improvements: * radmin / raddebug conditional errors are printed to the output, instead of being discarded. * raddebug will exit if condition set with -c was invalid. * radmin auto-reconnects if the connection to the server has gone away. * rlm_cache now has submodule support. See raddb/mods-available/cache * New memcached driver for rlm_cache. See raddb/mods-available/cache * Add support for &Attribute-Name[*] in conditions. See "man unlang" for details. * Add &Attribute-Name[n] which gets the last instance of an attribute e.g. Module-Failure-Message[n]. * Allow for redundant string expansions. See the "instantiate" section of radiusd.conf. * When checking IP addresses in conditions, make the right side be parsed as an IP prefix. * Support JIT compilation of compiled regular expressions when built with libpcre. * Support named capture groups with "%{regex:<name>}" when built with libpcre. * Increase regular expression capture groups from 8 to 32. * Emit error markers for badly formed regular expressions. * Allow 'm' flag to enable multiline mode in regular expressions. * Support limited implicit attribute conversion in update sections. * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6 mapping prefix (::ffff:).
buildservice-autocommit
accepted
request 266133
from
Ismail Dönmez (namtrac)
(revision 67)
baserev update by copy to link target
- Drop .keyring and .sig file: freeradius-server still uses MD5 signatures, which are no longer validated/accepted by GPG 2.1. (with the files present, osc service lr fails, as it performs the validation)
- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = <instance>). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity.
- freeradius-server-opensslversion.patch: do not check the minor version of openssl, minor versions are supposed to be compatible. bnc#906682
buildservice-autocommit
accepted
request 243572
from
Vítězslav Čížek (vitezslav_cizek)
(revision 63)
baserev update by copy to link target
- fixed SUSE spelling in a filename (bnc#889034) * don't install suse/README.SuSE - remove old tarball and signature file - spec run through spec-cleaner - don't install files to /var/run
buildservice-autocommit
accepted
request 234720
from
Tomáš Chvátal (scarabeus_factory)
(revision 60)
baserev update by copy to link target
- update to 3.0.3 Many bugfixes Feature improvements * Everything now builds with no warnings from the C compiler, clang static analyzer, or cppcheck. * rlm_ldap now supports defining the LDAP attribute name via backticked expansion (i.e. shell command) in RADIUS <-> LDAP mappings. * rlm_ldap now supports older style generic attributes. * dynamic expansions (e.g. "%{expr:1 + 2}" are now parsed when the server starts. Syntax errors in the strings are caught, and a descriptive error is printed. * Static regular expressions (e.g. /a*b/) are now parsed when the server starts. Syntax errors in the strings are caught, and a descriptive error is printed. * dynamic expansions are cached after being parsed. They are no longer re-parsed at run-time for every request. * regular expressions are now parsed and cached when the server starts. * Added the %{rest:} expansion to rlm_rest, which will send a GET request to the URL passed as the format string. Any body text will be written to the expansion buffer. * rlm_rest now available as a debian package. * When an 'if' condition statically evaluates to true/false, unlang does more static optimization. For examples, see src/tests/keywords/if-skip * All modules are marked as safe for '-C', which lets the dynamic expansion checks work in more situations. * Added 'none' and 'custom' rlm_rest body types. 'custom' allows sending of arbitrary expanded text and content-type
buildservice-autocommit
accepted
request 224384
from
Marcus Meissner (msmeissn)
(revision 58)
baserev update by copy to link target
- fix for CVE-2014-2015 (bnc#864576) * denial of service in rlm_pap hash processing * added freeradius-server-CVE-2014-2015.patch - remove the old 3.0.0 sources
buildservice-autocommit
accepted
request 221398
from
Marcus Meissner (msmeissn)
(revision 56)
baserev update by copy to link target
Updated freeradius to version 3.0.1
Displaying revisions 101 - 120 of 173