summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2017-06-21Fixed vrf support; broke in moving to upstream 1.4 version.Dave Olson
Minor fix, and repositioning of the code. Also needed to add the code for the IPv6 case as well. Minor formatting fix to man page.
2017-06-21removed useless and annoying debug printDave Olson
2017-06-20Add changes to allow VRF, and mapped users (no local accounts)Dave Olson
Add changes allow admins to set up RADIUS clients with no local knowledge of the RADIUS accounts (no adduser required, nor LDAP, etc.) This is done by using the nss-mapuser package. The only real change to this package is to set up the SUDO prompt, so it's the RADIUS login name, in the pam_sm_acct_mgmt entry point. Bumped the version to 1.4.1 Change the PACKAGE info in configure to reflect Cumulus, and also a few related fields. Changed maintiner to dev-support Also incorporated changes to make debuging builds easier under debian. Added comment and description of src_ip to the config file (author of the src_ip changes hadn't yet done that), and removed the location of config file from comments, since debian installs to a different location. Quieted config complaints; can't move to current because current is GPLv3, and this doesn't use autoconf. Tried to capture the 5 years of changes between 1.3.17 and 1.4.0 Added lintian overrides. Fixed up debian/copyright file to be standard format, and match (approximately) the source files. overrides don't quite work, because source vs binary confusion, but documents them Added debian install files Added man page for the plugin, and for the RADIUS client config file
2017-03-21add IPv6 supportMiquel van Smoorenburg
2017-02-08fix ingored return codeAlan T. DeKok
2017-02-08Check conf->sockfd against FD_SETSIZE. Fixes #24Alan T. DeKok
2017-02-08Ensure password is initialized. Fixes #27Alan T. DeKok
2017-02-08Check for poll.h and use that if it existsAlan T. DeKok
2017-02-08Allow using either poll / selectAlan T. DeKok
2017-02-08Merge pull request #25 from mweissen13/masterAlan DeKok
Replaced select with poll to allow file descriptors >FD_SETSIZE
2017-02-08Merge pull request #19 from liske/calling-accAlan DeKok
Add Calling-Station-Id to accounting requests.
2017-02-08Merge pull request #18 from samuelvarley/masterAlan DeKok
Make module (almost) thread-safe.
2016-12-01Copy password to buffer before rounding lengthJustin Standring
2016-11-28Replaced select with poll to allow file descriptors >FD_SETSIZEmweissen13
2016-05-17Check for too long linesAlan T. DeKok
2016-05-17use buffer size. Found by Dennis GoodletAlan T. DeKok
2016-01-17Add Calling-Station-Id to accounting requests.Thomas Liske
2015-12-10Thread safety: Control debug with local variable.Samuel Varley
2015-12-10Thread safety: Store the name of conf file in radius_conf_t.Samuel Varley
I needed to move the position of the structures so I could use the CONST macro with the new member.
2015-12-10Thread safety: Use strerror_r() instead of strerror().Samuel Varley
2015-12-10Thread safety: Use getaddrinfo() instead of getservbyname().Samuel Varley
2015-12-01Thread safety: Use getaddrinfo() instead of gethostbyname().Samuel Varley
2015-11-24Thread safety: Store session start time as PAM data.Samuel Varley
Previously, it was stored as file-scope variable. I also deleted the file-scope variable, "live_server", because it was not being used.
2015-11-24Ensure config.h is included first.Samuel Varley
pam_radius_auth.c was including config.h via pam_radius_auth.h but only after other library header files had been included. This meant you could have _GNU_SOURCE, for example, defined in config.h but it did not have any effect on which library functions were provided.
2015-10-31Clear out trailing part of the bufferAlan T. DeKok
2015-09-26Fix NetBSD build.Benny Siegert
This preprocessor define should be replaced by a test in the configure script, instead of a hardcoded list of operating systems.
2015-09-26Quell warnings for isdigit.Benny Siegert
Explicitly cast the arg to isdigit to an unsigned char.
2015-09-08Allow src_ip to be setAlan T. DeKok
2015-07-13More build checks.Alan T. DeKok
If configure fails, don't build anything
2015-07-13Build objects in src directoryAlan T. DeKok
Which is a bit better practice
2015-07-09Send password to next layer on fail, tooAlan T. DeKok
2015-05-21Use "length", which has been limited in sizeAlan T. DeKok
2014-12-02Use port 0 instead of trying to be stupid about itAlan T. DeKok
2014-11-26add force_prompt option to enforce new password prompt for use with TokenJens Kuehnel
2014-09-03Add Calling-Station-Id to Access-Request after challenge. Closes #13Alan T. DeKok
2014-08-29new parameter max_challenge limits number of Access-ChallengesWalter de Jong
Force authentication failure when a certain amount of challenges has been reached. This is a workaround for buggy servers that keep issueing challenges, when they should really send Access-Reject. The limit is configurable through parameter "max_challenge". The default is 0, which means the workaround is disabled. An invalid or negative value also disables this workaround.
2014-08-28Merge pull request #10 from sara-nl/surfsaraArran Cudbard-Bell
SURFsara fixes and changes
2014-08-15check return value of rad_converse()Walter de Jong
2014-08-15code style consistencyWalter de Jong
2014-08-15no semicolons here (empty statements)Walter de Jong
2014-08-06clear the responseWalter de Jong
Just making sure, it seems cleaner to make sure that the function can not exit with the response in some random/undefined state
2014-08-06use DPRINT for logging debug messagesWalter de Jong
2014-08-06fix wrong format string modifierWalter de Jong
2014-08-06only print debug messages when configuredWalter de Jong
2014-08-06protect against buffer overflowWalter de Jong
2014-06-17Added 'prompt' optionBennett Samowich
2014-05-25TypoArran Cudbard-Bell
2014-05-25Hack until we have time to write an autoconf checkArran Cudbard-Bell
2014-03-06Add basic autoconf scriptArran Cudbard-Bell