1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
FreeRADIUS 3.2.1 Mon 03 Oct 2022 12:00:00 EDT urgency=low
Feature improvements
* Add dictionary.ciena, dictionary.nile, and DHCPv4 dictionaries,
* Add simultaneous-use queries for MS SQL.
* Add radmin command for "stats pool <module-name>"
Which prints out statistics about the connection pools
* Client statistics now shows "conflicts", to count conflicting
packets.
* New optional "lightweight accounting-on/off" strategy. When
refreshing queries.conf you should also add the new nasreload table
and corresponding GRANTs to your DB schema.
* Add TLS-Client-Cert-X509v3-Certificate-Policies, which helps with
Eduroam. Suggested by Stefan Winter.
* Allow auth+acct for TCP sockets, too.
* Add rlm_cache_redis. See raddb/mods-available/cache for details
* Allow radmin to look up home servers by name, too.
* Ensure that dynamic clients don't create loops on duplicates.
Reported by Sam Yee.
* Removed rlm_sqlhpwippool. There was no documentation, no configuration,
and the module was ~15 years old with no one using it.
* Marked rlm_python3 as stable.
* Add sigalgs_list. See raddb/mods-available/eap. Patch from
Boris Lytochkin.
* For rlm_linelog, when opening files in /dev, look at "permissions" to see
whether to open them r/w.
* More flexibility for dynamic home servers. See doc/configuration/dynamic_home_servers.md
and raddb/home_servers/README.md
* Allow setting of application_name for PostgreSQL. See mods-available/sql.
Bug fixes
* Correct test for open sessions in radacct for MS SQL.
* The linelog module now opens /dev/stdout in "write-only" mode
if the permissions are set to "u+w" (0002).
* Various fixes to rlm_unbound from Nick Porter.
* PEAP now correctly runs Post-Auth-Type Accept
* Create "TLS-Cert-*" for outbound Radsec, instead of TLS-Client-Cert-*
Fixes #4698. See sites-available/tls, and fix_cert_order.
* Minor updates and fixes to CI, Dockerfiles and packaging.
* Fix rlm_python3 build with python >= 3.10. Fixes #4441
FreeRADIUS 3.2.0 Thu 21 Apr 2022 12:00:00 EDT urgency=low
Configuration changes
* "correct_escapes" has been removed, and is always set to "true"
internally. Configuration changes may be required if you are
using configurations from before 3.0.5. Other than this
difference, 3.2.x is compatible with 3.0.x, and configurations
from 3.0.x can be simply copied into a system running 3.2.x.
Feature improvements
* All features from 3.0.x are included in the 3.2.x releases. In addition:
* Add 'reset_day' and '%%r' parameter for rlm_sqlcounter to specify which
day of the month the counter should be reset.
* Partial backport of rlm_json from v4, providing the json_encode xlat.
See mods-available/json for documentation.
* Support for haproxy "PROXY" protocol.
See sites-available/tls, "proxy_protocol" and doc/antora/modules/howto/pages/protocols/proxy/
* Support for sending CoA-Request and Disconnect-Request packets
in "reverse" down RadSec tunnels. Experimental for now, and
undocumented.
* It is now possible to run a virtual server when saving / loading
TLS cache attributes. See sites-available/tls-cache for
more information.
* Removed the "cram" module. It was undocumented, and used old
and insecure authentication methods.
* Remove the "otp" module. The "otpd" program it needs is no longer available,
and the module has not been usable since at least 2015.
* All features from 3.0.x are included in the 3.2.x releases.
* 3.2.0 requires OpenSSL 1.0.2 or greater.
Bug fixes
* All bug fixes from 3.0.x are included in the 3.2.x releases.
|
