OpenBSD CVS

CVS log for src/usr.sbin/radiusd/radiusd_radius.c


[BACK] Up to [local] / src / usr.sbin / radiusd

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.20 / (download) - annotate - [select for diffs], Fri Feb 9 07:41:32 2024 UTC (3 months, 4 weeks ago) by yasuoka
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, HEAD
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)

Add nochroot parameter to module_drop_privilege() so that modules can
use unveil(2) instead of chroot(2) if need.

Revision 1.19 / (download) - annotate - [select for diffs], Mon Sep 4 10:49:20 2023 UTC (9 months ago) by yasuoka
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE, OPENBSD_7_4
Changes since 1.18: +4 -3 lines
Diff to previous 1.18 (colored)

Don't return an extra OK message.  Also call module_destroy() when
exit(3).

Revision 1.18 / (download) - annotate - [select for diffs], Wed Dec 28 21:30:18 2022 UTC (17 months, 1 week ago) by jmc
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_3
Changes since 1.17: +2 -2 lines
Diff to previous 1.17 (colored)

spelling fixes; from paul tagliamonte
any parts of his diff not taken are noted on tech

Revision 1.17 / (download) - annotate - [select for diffs], Fri Jun 28 13:32:49 2019 UTC (4 years, 11 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.16: +2 -2 lines
Diff to previous 1.16 (colored)

When system calls indicate an error they return -1, not some arbitrary
value < 0.  errno is only updated in this case.  Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

Revision 1.16 / (download) - annotate - [select for diffs], Mon Apr 1 11:05:41 2019 UTC (5 years, 2 months ago) by yasuoka
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.15: +8 -3 lines
Diff to previous 1.15 (colored)

Pass the debug status to modules. Also some non functional changes
(comment, log message, and rearrange lines).

Revision 1.15 / (download) - annotate - [select for diffs], Mon Apr 1 10:34:02 2019 UTC (5 years, 2 months ago) by yasuoka
Branch: MAIN
Changes since 1.14: +2 -2 lines
Diff to previous 1.14 (colored)

Update authenticator and message authenticator always.  Previous was
to keep the original authenticators and modify them only if needed.
But actually, there supposed to be no case such that the original
authenticators can be used for the client.  Original diff from IIJ.

Revision 1.14 / (download) - annotate - [select for diffs], Mon Apr 1 09:25:14 2019 UTC (5 years, 2 months ago) by yasuoka
Branch: MAIN
Changes since 1.13: +29 -28 lines
Diff to previous 1.13 (colored)

Make "secret" become a required configuration for both client and
radius module.  "secret" for client was required already, but it
hadn't cause an error if it's missing.  Original diff from IIJ.

Revision 1.13 / (download) - annotate - [select for diffs], Tue May 30 16:30:22 2017 UTC (7 years ago) by yasuoka
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4, OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.12: +2 -4 lines
Diff to previous 1.12 (colored)

Don't call TAILQ_REMOVE twice.  This caused radiusd crash if it has a
pending request when it stops.

Revision 1.12 / (download) - annotate - [select for diffs], Mon Mar 21 00:49:36 2016 UTC (8 years, 2 months ago) by guenther
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.11: +3 -13 lines
Diff to previous 1.11 (colored)

Instead of creating a socket with socket() or accept() and then
setting the O_NONBLOCK flag on it with fcntl(F_SETFL) afterwards,
just pass SOCK_NONBLOCK to socket() or accept4() and get it right
to begin with.

ok millert@ krw@ beck@ deraadt@ jca@

Revision 1.11 / (download) - annotate - [select for diffs], Tue Nov 3 05:09:22 2015 UTC (8 years, 7 months ago) by mmcc
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.10: +3 -1 lines
Diff to previous 1.10 (colored)

Blank lines around pledge call.

Revision 1.10 / (download) - annotate - [select for diffs], Tue Oct 27 04:30:44 2015 UTC (8 years, 7 months ago) by yasuoka
Branch: MAIN
Changes since 1.9: +2 -2 lines
Diff to previous 1.9 (colored)

Initialize module_radius_req before use it.

diff from Yuuichi Someya

Revision 1.9 / (download) - annotate - [select for diffs], Tue Oct 27 04:27:01 2015 UTC (8 years, 7 months ago) by yasuoka
Branch: MAIN
Changes since 1.8: +17 -2 lines
Diff to previous 1.8 (colored)

Set O_NONBLOCK for UDP sockets not to block on recv().  Actually
block had happened if an error of the socket is handled by send().

diff from Yuuichi Someya.

Revision 1.8 / (download) - annotate - [select for diffs], Mon Oct 19 22:07:37 2015 UTC (8 years, 7 months ago) by yasuoka
Branch: MAIN
Changes since 1.7: +3 -1 lines
Diff to previous 1.7 (colored)

Add pledge(2) for radiusctl(8) and radiusd(8).
- radiusd: "stdio inet"
- radiusd_radius: "stdio inet"
- radiusd_bsdauth:
  - "stdio proc" for the non-priviledged process
  - "stdio getpw rpath proc exec" for the priviledged process
- radiusctl: "stdio dns inet"

"go ahead" deraadt

Revision 1.7 / (download) - annotate - [select for diffs], Sun Aug 2 21:27:27 2015 UTC (8 years, 10 months ago) by yasuoka
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

Fix radiusd_radius to use syslog(3).  It had used stderr for debug.

Revision 1.6 / (download) - annotate - [select for diffs], Thu Jul 30 09:21:51 2015 UTC (8 years, 10 months ago) by yasuoka
Branch: MAIN
Changes since 1.5: +27 -23 lines
Diff to previous 1.5 (colored)

Use the dedicated log function instead of log_warn().  Also, fix the
variable name again.

Revision 1.5 / (download) - annotate - [select for diffs], Thu Jul 30 09:16:30 2015 UTC (8 years, 10 months ago) by yasuoka
Branch: MAIN
Changes since 1.4: +28 -28 lines
Diff to previous 1.4 (colored)

Fix the variable name for struct radius_server.  It was confused.

Revision 1.4 / (download) - annotate - [select for diffs], Thu Jul 30 06:17:36 2015 UTC (8 years, 10 months ago) by yasuoka
Branch: MAIN
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)

q_id didn't pass to radiusd_radius properly.  It should be u_int not u_int.

Revision 1.3 / (download) - annotate - [select for diffs], Mon Jul 27 09:27:23 2015 UTC (8 years, 10 months ago) by yasuoka
Branch: MAIN
Changes since 1.2: +95 -95 lines
Diff to previous 1.2 (colored)

Stop using _this in radiusd modules.

Revision 1.2 / (download) - annotate - [select for diffs], Mon Jul 27 08:58:09 2015 UTC (8 years, 10 months ago) by yasuoka
Branch: MAIN
Changes since 1.1: +4 -5 lines
Diff to previous 1.1 (colored)

Drop the privilege from modules.  "radiusd_radius" could simply run
without root.  "radiusd_bsdauth" uses some functions which needs root.
So separate its process into a privileged process and a non-privileged
process.

Revision 1.1 / (download) - annotate - [select for diffs], Tue Jul 21 04:06:04 2015 UTC (8 years, 10 months ago) by yasuoka
Branch: MAIN

Add radiusd(8) and radiusctl(8).  They are WIP.  radiusd(8) is a RADIUS
server and radiusctl(8) is to control the server.  radiusd(8) currently
supports bsdauth and radius (upstream radius servers) as authentication
backends.

fixes from jsg blambert
ok deraadt

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.