CVS: cvs.openbsd.org: src

2024-09-26 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/26 18:38:49

Modified files:
sys/net: pipex.c 

Log message:
Previous pipex.c,v 1.155 was broken if the client was not behind a NAT.

ok mvs



CVS: cvs.openbsd.org: src

2024-09-15 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/15 05:08:50

Modified files:
sbin/iked  : config.c iked.h ikev2.c radius.c 

Log message:
Add handling of "Class" attribute.  diff from markus

ok markus



CVS: cvs.openbsd.org: src

2024-09-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/14 23:31:23

Modified files:
usr.sbin/radiusd: radiusd_eap2mschap.c radiusd_ipcp.c 

Log message:
Improve the log messages and white spaces.



CVS: cvs.openbsd.org: src

2024-09-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/14 23:26:05

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c radiusd_ipcp.h 
usr.sbin/radiusctl: parser.c parser.h radiusctl.8 radiusctl.c 

Log message:
Add "delete" command to "radiusctl ipcp".  Also, send  "stop" that was
missing when disconnecting all when acct-{on,off} received.



CVS: cvs.openbsd.org: src

2024-09-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/14 23:14:32

Modified files:
usr.sbin/radiusd: radiusd_module.c 

Log message:
Handle EAGAIN properly and fix the log when disconnected.



CVS: cvs.openbsd.org: src

2024-09-10 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/10 18:41:51

Modified files:
sbin/iked  : radius.c 

Log message:
Fix a typo



CVS: cvs.openbsd.org: src

2024-09-09 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/09 17:38:29

Modified files:
sbin/iked  : radius.c 

Log message:
When accounting start the type attribute was added twice.
from markus



CVS: cvs.openbsd.org: src

2024-09-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/01 22:45:22

Modified files:
usr.sbin/radiusctl: parser.c 

Log message:
Coding of the handling of errors for  hadn't be completed.



CVS: cvs.openbsd.org: src

2024-09-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/01 22:00:51

Modified files:
sys/dev/pci: pcidevs.h pcidevs_data.h 

Log message:
regen



CVS: cvs.openbsd.org: src

2024-09-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/09/01 21:59:40

Modified files:
sys/dev/pci: pcidevs 

Log message:
Add Intel X540 X550 virtual function devices.  From Yuichiro NAITO.

ok jmatthew



CVS: cvs.openbsd.org: src

2024-08-16 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/16 21:28:22

Modified files:
sbin/iked  : radius.c 

Log message:
Fix some memory leaks in the RADIUS part.

ok tobhe



CVS: cvs.openbsd.org: src

2024-08-16 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/16 03:54:21

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Make sure that the uptime field is always updated.  Previously it was
used before initialized when the database has a session.



CVS: cvs.openbsd.org: src

2024-08-16 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/16 03:52:16

Modified files:
usr.sbin/radiusd: radiusd_eap2mschap.c radiusd_ipcp.c 
  radiusd_radius.c 

Log message:
Free memory as much as possible.  Also, fix a use-after-free when exiting.



CVS: cvs.openbsd.org: src

2024-08-16 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/16 03:50:09

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Send a reply to the control client when DAE is timed out instead of
silence.  Also, fix a broken error string.



CVS: cvs.openbsd.org: src

2024-08-16 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/16 03:45:52

Modified files:
usr.sbin/radiusd: radiusd_local.h 

Log message:
Delete req_modified.  Which is not used.



CVS: cvs.openbsd.org: src

2024-08-15 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/15 01:24:28

Modified files:
usr.sbin/radiusd: parse.y 

Log message:
Accept empty lines for authopts to fix the parser to accept the old
syntax.  It was broken by parse.y 1.18.  Found by Mike at mgm51.com.



CVS: cvs.openbsd.org: src

2024-08-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/14 01:06:50

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Messages from modules were leaked.  Call imsg_free() for them.



CVS: cvs.openbsd.org: src

2024-08-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/14 01:04:54

Modified files:
usr.sbin/radiusd: radiusd.c radiusd_local.h 

Log message:
Don't abort the query when it is requesting to the next module.



CVS: cvs.openbsd.org: src

2024-08-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/13 22:50:31

Modified files:
lib/libradius  : radius.c radius_msgauth.c 

Log message:
timingsafe_bcmp() is better than timingsafe_memcmp() for the purpose.



CVS: cvs.openbsd.org: src

2024-08-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/13 22:47:08

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Initialize dae objects properly.



CVS: cvs.openbsd.org: src

2024-08-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/13 22:44:07

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Don't abort the query when a duplicated query is received.  Also tweak
the log message.



CVS: cvs.openbsd.org: src

2024-08-08 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/08 03:16:37

Modified files:
lib/libradius  : radius.c radius_msgauth.c 

Log message:
Use timingsafe_memcmp() when comparing the authenticators.  from iij.



CVS: cvs.openbsd.org: src

2024-08-07 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/07 21:58:53

Modified files:
sbin/iked  : radius.c 

Log message:
Fix a typo in log message.



CVS: cvs.openbsd.org: src

2024-08-07 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/07 01:15:18

Modified files:
usr.sbin/radiusd: radiusd_ipcp.8 

Log message:
Fix a typo



CVS: cvs.openbsd.org: src

2024-08-03 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/03 21:56:57

Modified files:
usr.sbin/radiusd: radiusd_bsdauth.8 radiusd_eap2mschap.8 
  radiusd_file.8 radiusd_ipcp.8 radiusd_radius.8 
  radiusd_standard.8 

Log message:
Use "module" for the modules.  Add a link to radiusd_file(8) from
radiusd_eap2mschap(8).



CVS: cvs.openbsd.org: src

2024-08-02 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/08/02 06:43:55

Modified files:
usr.sbin/npppd/npppd: npppd.c 

Log message:
Backout previous.  It was incompleted and too early.



CVS: cvs.openbsd.org: src

2024-07-31 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/31 18:58:14

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Use arc4random_uniform(n) instead of "% n".



CVS: cvs.openbsd.org: src

2024-07-31 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/31 18:05:16

Modified files:
usr.sbin/npppd/npppd: npppd.c 

Log message:
Change the routing entry of the pool addresses from blackhole to
reject.  This is better because the routing cache can be purged by the
reject.



CVS: cvs.openbsd.org: src

2024-07-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/30 07:41:15

Modified files:
sys/net: if_pppx.c 

Log message:
Exports the statistics when PIPEXDSESSION.  Found by ymatsui at iij.

ok mvs



CVS: cvs.openbsd.org: src

2024-07-26 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/26 09:51:09

Modified files:
sys/net: pipex_local.h 

Log message:
Mark ipsecflowinfo immutable.

ok mvs



CVS: cvs.openbsd.org: src

2024-07-26 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/26 09:45:31

Modified files:
sys/net: pipex.c 

Log message:
In pipex_l2tp_input(), check if ipsecflowinfo is not changed instead
of updating it blindly.

ok mvs



CVS: cvs.openbsd.org: src

2024-07-25 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/25 01:24:41

Modified files:
regress/lib/libradius: test23.c 

Log message:
Fix test23.  It assumed the place of the attribute is unchanged.  But now,
the message-authenticator is located at first always.  found anton



CVS: cvs.openbsd.org: src

2024-07-24 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/24 02:27:20

Modified files:
usr.sbin/radiusctl: parser.c parser.h radiusctl.8 radiusctl.c 

Log message:
dd "msgauth" option for "test" command to specify whether use
Message-Authentication or not.



CVS: cvs.openbsd.org: src

2024-07-24 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/24 02:22:26

Modified files:
lib/libradius  : Makefile shlib_version 
Added files:
lib/libradius  : Symbols.list 

Log message:
Add Symbols.list and enable version script to hide some local functions.



CVS: cvs.openbsd.org: src

2024-07-24 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/24 02:19:16

Modified files:
lib/libradius  : radius_attr.c radius_msgauth.c 
 radius_new_request_packet.3 radius_local.h 

Log message:
Place Message-Authenticator at the beginning of the attributes
as draft-ietf-radext-deprecating-radius-02 suggests.



CVS: cvs.openbsd.org: src

2024-07-22 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/22 04:00:16

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Fix ipcp module to use (the maximum sequence number from the db) + 1
properly.



CVS: cvs.openbsd.org: src

2024-07-22 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/22 03:39:23

Modified files:
usr.sbin/radiusctl: radiusctl.c 
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Modify ipcp module to return a result for
IMSG_RADIUSD_MODULE_IPCP_DISCONNECT and radiusctl to handle the
result.



CVS: cvs.openbsd.org: src

2024-07-22 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/22 03:27:16

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Make some functions "static".



CVS: cvs.openbsd.org: src

2024-07-18 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/18 16:40:09

Modified files:
usr.sbin/radiusd: radiusd_file.c 

Log message:
Send Access-Reject when the authentication is not handled or the user
is not found.



CVS: cvs.openbsd.org: src

2024-07-18 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/18 16:18:00

Modified files:
usr.sbin/radiusd: radiusd_file.c 

Log message:
unveil .db is needed.  Also move pledge() earlier.



CVS: cvs.openbsd.org: src

2024-07-18 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/18 02:58:59

Modified files:
sbin/iked  : radius.c 

Log message:
Fix memory leaks and improve id handling of iked_radserver_req.
original diff from markus

ok tobhe



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 20:45:32

Modified files:
libexec/login_radius: raddauth.c 

Log message:
Since libcrypto is used to calc message authenticator, use libcrypto
md5 also in other places instead libc md5.

ok millert



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 18:28:53

Modified files:
usr.sbin/radiusd: radiusd.conf.5 

Log message:
Add a link to radiud_file(8)



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 14:50:28

Modified files:
libexec/login_radius: Makefile raddauth.c 

Log message:
Add Message-Authenticator attriubte when sending Access-Request.

ok millert



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 05:31:46

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c radiusd_local.h 

Log message:
Fix some gcc warnings



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 05:19:27

Modified files:
usr.sbin/radiusd: radiusd_eap2mschap.c 

Log message:
Error if config parameter is unknown.  This also fixes a gcc warning.
spotted by deraadt



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 05:13:22

Modified files:
usr.sbin/radiusd: radiusd.conf.5 

Log message:
Document "authentication-filter".



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 05:05:11

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Decrypt "Password" attribute always before passing the packet to
modules.  Also, don't assume the authenticator of the packet from the
module that has no secret is valid.



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 04:15:39

Modified files:
usr.sbin/radiusd: radiusd_file.c 

Log message:
Delete log_info() line for debug.



CVS: cvs.openbsd.org: src

2024-07-17 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/17 02:26:19

Modified files:
usr.sbin/npppd/npppd: parse.y 

Log message:
Fix indent



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 10:22:59

Modified files:
usr.sbin/radiusd: radiusd.conf.5 
usr.sbin/radiusd/radiusd_file: Makefile 
Added files:
usr.sbin/radiusd: radiusd_file.8 

Log message:
Add radiusd_file(5) and link it from radiusd.conf(5).



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 10:09:23

Modified files:
usr.sbin/radiusd: Makefile Makefile.inc parse.y radiusd.conf.5 
Added files:
usr.sbin/radiusd: eap2mschap_local.h radiusd_eap2mschap.8 
  radiusd_eap2mschap.c 
usr.sbin/radiusd/radiusd_eap2mschap: Makefile 

Log message:
Add new radiusd_eap2mschap module.  It provides conversions from EAP
to MSCHAPv2.



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 09:34:20

src/usr.sbin/radiusd/radiusd_eap2mschap

Update of /cvs/src/usr.sbin/radiusd/radiusd_eap2mschap
In directory cvs.openbsd.org:/tmp/cvs-serv41962/radiusd_eap2mschap

Log Message:
Directory /cvs/src/usr.sbin/radiusd/radiusd_eap2mschap added to the repository



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 09:31:49

Modified files:
usr.sbin/radiusd: radiusd.c radiusd_local.h 
usr.sbin/radiusd/radiusd: Makefile 
Added files:
usr.sbin/radiusd: radius_subr.c radius_subr.h 

Log message:
Move radius_attr_{,un}hide() to radius_subr.c.



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 09:27:57

Modified files:
usr.sbin/radiusd: parse.y radiusd.c radiusd.h radiusd_local.h 
  radiusd_module.c radiusd_module.h 

Log message:
Add "authentication-filter".  Add new 2 imsg types so that
authentication modules can request the next authentication and the
next authentication can receive the result of the previous and modify
the result.



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 09:13:41

Modified files:
usr.sbin/radiusd: radiusd_file.c 

Log message:
Set length of MPPE send/recv key.



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 07:44:30

Modified files:
usr.sbin/radiusd: Makefile parse.y 
Added files:
usr.sbin/radiusd: chap_ms.c chap_ms.h radiusd_file.c 
usr.sbin/radiusd/radiusd_file: Makefile 

Log message:
Add radiusd_file(8) module.  It provides authencation by a local file.



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 07:40:24

src/usr.sbin/radiusd/radiusd_file

Update of /cvs/src/usr.sbin/radiusd/radiusd_file
In directory cvs.openbsd.org:/tmp/cvs-serv54662/radiusd_file

Log Message:
Directory /cvs/src/usr.sbin/radiusd/radiusd_file added to the repository



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 07:36:44

Modified files:
usr.sbin/radiusd: radiusd.c radiusd_local.h 

Log message:
Add "radiusd" field to struct radius_query.



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 05:12:32

Modified files:
usr.sbin/radiusctl: radiusctl.c 

Log message:
Mistakenly the same challenge is used for testing CHAP.



CVS: cvs.openbsd.org: src

2024-07-14 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/14 04:52:50

Modified files:
usr.sbin/npppd/npppd: chap.c 

Log message:
Make the lines of md5chap understandable.



CVS: cvs.openbsd.org: src

2024-07-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/13 08:28:27

Modified files:
sbin/iked  : radius.c 

Log message:
NULL check must be inside the loop.  found tobhe

ok tobhe



CVS: cvs.openbsd.org: src

2024-07-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/13 08:19:09

Modified files:
sbin/iked  : radius.c 

Log message:
Fix radius.c again^2.  Cancel previous and revert the latest one
(sent to tech@).



CVS: cvs.openbsd.org: src

2024-07-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/13 08:08:53

Modified files:
sbin/iked  : radius.c 

Log message:
Fix radius.c again.  Previous was old one.



CVS: cvs.openbsd.org: src

2024-07-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/13 07:06:47

Modified files:
usr.sbin/radiusd: parse.y radiusd.c 

Log message:
Use calloc(3) instead of malloc(3).  "accounting" is used without
initialization. Also don't check request authenticator for other than
Accounting-Request.



CVS: cvs.openbsd.org: src

2024-07-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/13 06:25:07

Modified files:
sbin/iked  : radius.c 

Log message:
Fix radius.c.  Previous it was broken.



CVS: cvs.openbsd.org: src

2024-07-13 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/13 06:22:46

Modified files:
sbin/iked  : Makefile config.c eap.c eap.h iked.c 
 iked.conf.5 iked.h ikev2.c ikev2_msg.c 
 ikev2_pld.c parse.y pfkey.c policy.c types.h 
Added files:
sbin/iked  : radius.c 

Log message:
Add RADIUS support.  Authentication, accounting, and "Dynamic
Authorization Extensions"(DAE) are supported.
feedback markus stu

ok tobhe



CVS: cvs.openbsd.org: src

2024-07-12 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/12 09:54:52

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Fix a typo in log



CVS: cvs.openbsd.org: src

2024-07-12 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/12 09:54:11

Modified files:
usr.sbin/npppd/npppd: npppd_radius.c 

Log message:
Fix Disconnect-Ack not to have an Error-Cause attribute.  Tweak
some log messages.



CVS: cvs.openbsd.org: src

2024-07-11 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/11 08:14:56

Modified files:
usr.sbin/radiusd: radiusd_ipcp.8 

Log message:
Update the example because now npppd can be a DAE server.



CVS: cvs.openbsd.org: src

2024-07-11 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/11 08:05:59

Modified files:
usr.sbin/npppd/npppd: npppd.c npppd.conf.5 npppd.h 
  npppd_config.c npppd_local.h 
  npppd_radius.c npppd_radius.h parse.y 

Log message:
Add Dynamic Authorization Extensions (DAE) for RADIUS server feature
to npppd.  It can be configured now so that it accepts disconnect
requests and this works together with radiusd_ipcp(8) module.  Also
"nas-id" becomes configurable.



CVS: cvs.openbsd.org: src

2024-07-11 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/11 07:29:08

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Add more attributes to Disconnect-Request following the RFC's
suggestions.  Also nas_ipv6 wasn't stored by a mistake.



CVS: cvs.openbsd.org: src

2024-07-10 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/10 12:59:10

Modified files:
usr.sbin/radiusd: radiusd_ipcp.c 

Log message:
Fix the problem that it breaks the event timer because there is no
consideration for new disconnect requests during requesting DAE.  The
ipcp module didn't send a DAE request again once DAE request failed.
Also fix log messages.



CVS: cvs.openbsd.org: src

2024-07-10 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/10 10:30:43

Modified files:
usr.sbin/radiusd: parse.y radiusd.c 

Log message:
Fix memory leaks, a use after free, accessing outside the region
introduced by recent commits.  Found by malloc(3).



CVS: cvs.openbsd.org: src

2024-07-09 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/09 11:34:10

Modified files:
usr.sbin/radiusd: radiusd_ipcp.8 

Log message:
Fix a typo



CVS: cvs.openbsd.org: src

2024-07-09 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/09 11:26:14

Modified files:
usr.sbin/radiusd: Makefile parse.y radiusd.c radiusd.conf.5 
  radiusd.h radiusd_local.h radiusd_module.c 
usr.sbin/radiusd/radiusd: Makefile 
usr.sbin/radiusctl: Makefile parser.c parser.h radiusctl.8 
radiusctl.c 
Added files:
usr.sbin/radiusd: control.c control.h radiusd_ipcp.8 
  radiusd_ipcp.c radiusd_ipcp.h 
usr.sbin/radiusd/radiusd_ipcp: Makefile 
usr.sbin/radiusctl: json.c json.h 

Log message:
Add radiusd_ipcp(8).  A module which provides IP configuration through
RADIUS Access-Accept messages and manages IP address pool through
RADIUS accounting messages.



CVS: cvs.openbsd.org: src

2024-07-09 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/09 11:25:22

src/usr.sbin/radiusd/radiusd_ipcp

Update of /cvs/src/usr.sbin/radiusd/radiusd_ipcp
In directory cvs.openbsd.org:/tmp/cvs-serv37834/usr.sbin/radiusd/radiusd_ipcp

Log Message:
Directory /cvs/src/usr.sbin/radiusd/radiusd_ipcp added to the repository



CVS: cvs.openbsd.org: src

2024-07-02 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/03 00:09:13

Modified files:
usr.sbin/radiusd: radiusd.conf.5 

Log message:
Add missing "module standard".  It is needed before use it.



CVS: cvs.openbsd.org: src

2024-07-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/01 18:35:56

Modified files:
usr.sbin/radiusd: radiusd.conf.5 

Log message:
Fix previous.  The place of "accounting" was wrong.



CVS: cvs.openbsd.org: src

2024-07-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/01 18:33:51

Modified files:
usr.sbin/radiusd: parse.y radiusd.c radiusd.conf.5 radiusd.h 
  radiusd_local.h radiusd_module.c 
  radiusd_module.h radiusd_standard.8 
  radiusd_standard.c 

Log message:
Add support for RADIUS accounting.



CVS: cvs.openbsd.org: src

2024-07-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/01 18:00:12

Modified files:
usr.sbin/radiusd: parse.y radiusd.conf.5 
usr.sbin/radiusd/radiusd_bsdauth: Makefile 
usr.sbin/radiusd/radiusd_radius: Makefile 
usr.sbin/radiusd/radiusd_standard: Makefile 
Added files:
usr.sbin/radiusd: radiusd_bsdauth.8 radiusd_radius.8 
  radiusd_standard.8 

Log message:
Change the syntax for "module" and "authenticate".  "module" can have
a {} block now.  On the other hand, "authentication" can be without a
{} block.  The previous syntax is still accepted.  Also make
specifying the path of "module" be optional.



CVS: cvs.openbsd.org: src

2024-07-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/01 17:53:30

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Stop scheduling an I/O event by the timer when the imsg_buf has the data
larger than the imsg header. It prevented the receiver from receiving the
following parts of the message.



CVS: cvs.openbsd.org: src

2024-07-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/01 08:15:15

Modified files:
sbin/iked  : util.c 

Log message:
Enclose IPv6 address in a square bracket if the address is used with
the port number.

ok florian tobhe



CVS: cvs.openbsd.org: src

2024-07-01 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/07/01 01:09:07

Modified files:
usr.sbin/npppd/npppd: chap.c npppd.conf.5 npppd.h npppd_radius.c 
  pap.c parse.y ppp.c ppp.h 

Log message:
Modify IPCP to use {D,NB}NS servers from RADIUS.  Also move the
radius related functions from ppp.c to npppd_radius.c.



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 23:20:01

Modified files:
usr.sbin/radiusd: radiusd.c radiusd_local.h 

Log message:
Exit with an error code when error or module die.
CVS --



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 23:18:16

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Set SO_REUSEADDR for the listening socket.  This makes radiusd(8)
can bind both on an interface address and a wildcard address.



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 21:48:57

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Call daemon(3) before parse_config() since parse_config() of radiusd(8)
starts some sub processes and parent-child relationship with them must
be kept.  But we want to show config error on stderr, so keep stdio
files open and close them after parse_config().



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 21:32:09

Modified files:
usr.sbin/radiusd: radiusd_local.h 

Log message:
Remove unused secret field from struct radiusd_authentication



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 21:31:29

Modified files:
usr.sbin/radiusd: radiusd.c radiusd_local.h 

Log message:
Don't receive decoration when not requested.



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 21:29:21

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Show config error when -n



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 21:27:31

Modified files:
usr.sbin/radiusd: radiusd.c 

Log message:
Add missing size check.



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 21:22:07

Modified files:
usr.sbin/radiusd: radiusd.conf.5 

Log message:
"secret" without quote can be used for key or value since it is treated
specially now.



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 21:17:00

Modified files:
usr.sbin/radiusd: radiusd_radius.c 

Log message:
Tweak a white space.



CVS: cvs.openbsd.org: src

2024-06-30 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/30 21:13:42

Modified files:
usr.sbin/radiusd: parse.y 

Log message:
Delete a garbage empty definition.



CVS: cvs.openbsd.org: src

2024-06-29 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/29 05:50:31

Modified files:
lib/libradius  : radius.h 

Log message:
Fix typos in previous.



CVS: cvs.openbsd.org: src

2024-06-29 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/29 01:19:18

Modified files:
lib/libradius  : radius.h 

Log message:
Add variables for RFC 5176 Error Cause.



CVS: cvs.openbsd.org: src

2024-06-28 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/06/28 18:53:57

Modified files:
lib/libradius  : radius.h 

Log message:
Add variables for DAE for RADIUS (RFC 5176).



CVS: cvs.openbsd.org: src

2024-03-23 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/03/23 18:14:19

Removed files:
sbin/iked  : radius.c 

Log message:
Remove radius.c which is added mistakenly and under review.



CVS: cvs.openbsd.org: src

2024-03-23 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/03/23 18:05:01

Modified files:
sbin/iked  : eap.c 
Added files:
sbin/iked  : radius.c 

Log message:
Allow zero-length identity response

ok tobhe



CVS: cvs.openbsd.org: src

2024-03-23 Thread YASUOKA Masahiko
CVSROOT:/cvs
Module name:src
Changes by: yasu...@cvs.openbsd.org 2024/03/23 16:51:49

Modified files:
lib/libevent   : kqueue.c 

Log message:
In kq_del(), delete matching EV_ADD entries to prevent libevent from
passing both EV_ADD and EV_DELETE for the same fd to kevent().

ok visa



  1   2   3   4   5   6   7   8   >