summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2015-08-03Add radiusctl.8YASUOKA Masahiko
ok deraadt
2015-08-03Make radiusd.conf.5 describe all configuration optionsYASUOKA Masahiko
2015-08-02Fix styles. Also delete -h option since any other ctl command doesn't haveYASUOKA Masahiko
it.
2015-08-02Check the received packet length properly.YASUOKA Masahiko
2015-08-02Fire pending events when the module starts.YASUOKA Masahiko
2015-08-02Tweak XXX comments.YASUOKA Masahiko
2015-08-02radiusd_module with libevent didn't stop when the daemon stops. FixYASUOKA Masahiko
it to delete its event handler properly.
2015-08-02Fix radiusd_radius to use syslog(3). It had used stderr for debug.YASUOKA Masahiko
2015-08-02Fix radiusd to start without -d. Also stop using event_initialized()YASUOKA Masahiko
to check whether the event handler is set.
2015-08-01Tweak needs_root() output.Antoine Jacoutot
When using "ls" with a root action, properly output the action and flags in the error output; from Theo Buehler
2015-07-31repair hsts header output, wrong format strings caused brokenSebastian Benoit
Strict-Transport-Security headers. Add __format__ attribute to kv_set() and kv_setkey() to make it easier to spot such problems. Found by and fix from Donovan Watteau <tsoomi -AT- gmail -DOT- com>, thanks for your help. ok deraadt@
2015-07-30Use the dedicated log function instead of log_warn(). Also, fix theYASUOKA Masahiko
variable name again.
2015-07-30Fix the variable name for struct radius_server. It was confused.YASUOKA Masahiko
2015-07-30Fix typo in comment.YASUOKA Masahiko
2015-07-30q_id didn't pass to radiusd_radius properly. It should be u_int not u_int.YASUOKA Masahiko
2015-07-29backout the previous: it broke wordpress somehow.Reyk Floeter
we need more care to find a proper fix for the fastcgi headers. acknowledged by deraadt@
2015-07-29fix bug where other than the last of multiple forward rules in httpSebastian Benoit
protocols would be ignored, reported and fixed by J. Fischer (lists -AT- mistrust -DOT- net) and reminded by (trondd -AT- kagu-tsuchi -DOT- com), thanks! ok deraadt@
2015-07-29Read fcgi response records until we have the whole http header and canFlorian Obser
parse it. Otherwise http headers can leak into the body. Pointed out by Jean-Philippe Ouellet on bugs@ Thanks! OK reyk, commit ASAP deraadt@
2015-07-29add a FILES section to make clear where RADIUS configuration fileIgor Sobrado
is placed by default. ok yasuoka@
2015-07-28make -B with bad checksums cope. Reported by millert@Marc Espie
2015-07-28spacingReyk Floeter
2015-07-28add HSTS to fcgi responsesFlorian Obser
OK reyk
2015-07-28add a FILES section to make clear where RADIUS configuration fileIgor Sobrado
is placed by default. ok yasuoka@
2015-07-27use file system path (.Pa) semantic markup macros where appropriate.Igor Sobrado
2015-07-27use file system path (.Pa) semantic markup macros where appropriate.Igor Sobrado
ok jmc@
2015-07-27use file system path (.Pa) semantic markup macros where appropriate.Igor Sobrado
ok jmc@
2015-07-27Stop using _this in radiusd modules.YASUOKA Masahiko
2015-07-27Drop the privilege from modules. "radiusd_radius" could simply runYASUOKA Masahiko
without root. "radiusd_bsdauth" uses some functions which needs root. So separate its process into a privileged process and a non-privileged process.
2015-07-27Use log_warn() instead of warn() in radiusd_module_load(). Also fix style.YASUOKA Masahiko
2015-07-26fix format stringCharles Longeau
ok deraadt@
2015-07-25Use .Cm rather than .Ar for fixed strings passed as arguments (commandIngo Schwarze
modifiers). Patch from Michael Reed <m dot reed at mykolab dot com>, tweaked by jmc@.
2015-07-25Fix usage() output.Antoine Jacoutot
from Michael Reed
2015-07-24an TLS -> a TLS; from thanos tsouanasJason McIntyre
2015-07-23change the expansion of %m and %c in installpath during -beta to theJoerg Jung
snapshots/ folder ok phessler@ sthen@
2015-07-23The realm in authenticate directive of config file isn't escaped for '"' char.Sebastien Marie
The diff corrects this problem by using VIS_DQ. ok reyk@ florian@
2015-07-23Make npppd use libradius(3). Remove radius+ files.YASUOKA Masahiko
2015-07-23Build and install radiusd(8) and radiusctl(8) as default. They stillYASUOKA Masahiko
lack of privsep and man page, they will be fixed soon. ok deraadt
2015-07-21quote the %T title, to avoid confusing groff;Jason McIntyre
2015-07-21Remove the check for the connected flag since it is no longer around.Claudio Jeker
Minimal fix to unbreak the tree.
2015-07-21add missing -n to the SYNOPSIS and usage() and -d to the DESCRIPTION;Ingo Schwarze
OK yasuoka@
2015-07-21Document the "ldpctl show discovery" command.Renato Westphal
ok claudio@
2015-07-21Introduce two show commands for l2vpns.Renato Westphal
ok claudio@
2015-07-21Re-enable the reload command.Renato Westphal
ok claudio@
2015-07-21Improve the show lib command.Renato Westphal
ok claudio@
2015-07-21switch dpb from sudo to doas (and env as required); ok sthen@Christian Weisgerber
2015-07-21Call control_cleanup() from the ldpe process, where it belongs.Renato Westphal
ok claudio@
2015-07-21Rename, move and reuse mapping list functions.Renato Westphal
ok claudio@
2015-07-21Remove more unused defines.Renato Westphal
ok claudio@
2015-07-21Fix some awful ipc synchronization issues.Renato Westphal
Under some rare circumstances the following can happen: 1 - one neighbor sends a label withdraw followed by a fatal notification message; 2 - ldpe parses the label withdraw and sends it to lde; 3 - ldpe parses the fatal notification message and closes the session; 4 - lde processes the label withdraw and asks ldpe to send a label release; 5 - at around the same time, ldpe restarts the session with the neighbor; 6 - ldpe processes the lde message and then sends a label release to the new neighbor. The problem is that we don't want a message enqueue to a neighbor to be sent after the session is restarted. If a session is closed, all the enqueued messages should be discarded. To acomplish this, we update the peerid of the nbr structure everytime the session is established. ok claudio@
2015-07-21Validate ip addresses on configuration.Renato Westphal
ok claudio@