Skip to content

Latest commit

 

History

History
231 lines (134 loc) · 5.78 KB

CHANGES.rst

File metadata and controls

231 lines (134 loc) · 5.78 KB
Raw

Changelog

2.1 - Feb 2, 2017

  • Add CoA support (client and server)
  • Add tagged attribute support (send only).
  • Add salt encryption support (encrypt 2).
  • Add ascend data filter support (human readable format to octets).
  • Add ipv6 address and prefix support.
  • Add support for octet strings in hex (starting with 0x).
  • Add support for types short, signed and byte.
  • Add support for VSA's with multiple sub TLV's.
  • Use a different random generator to improve the security of generated packet ids and authenticators.

2.0 - May 15, 2011

  • Start moving codebase to PEP8 compatible coding style.
  • Add support for Python 3.2.
  • Several code cleanups. As a side effect Python versions before 2.6 are unfortunatley no longer supported. If you use Python 2.5 or older Pyrad 1.2 will still work for you.

1.2 - July 12, 2009

  • Setup sphinx based documentation.
  • Use hashlib instead of md5, if present. This fixes deprecation warnings for python 2.6. Patch from Jeremy Liané.
  • Support parsing VENDOR format specifications in dictionary files. Patch by Kristoffer Grönlun.
  • Supprt $INCLUDE directores in dictionary files. Patch by Kristoffer Grönlun.
  • Standardize on 4 spaces for indents. Patch by Kristoffer Grönlund/ Purplescout.
  • Make sure all encoding utility methods raise a TypeError if a value of the wrong type is passed in.

1.1 - September 30, 2007

  • Add the 'octets' datatype from FreeRADIUS. This is treated just like string; the only difference is how FreeRADIUS prints it.
  • Check against unimplemented datatypes in EncodeData and DecodeData instead of assuming an identity transform works.
  • Make Packet.has_key and __contains__ gracefully handle unknown attributes. Based on a patch from Alexey V Michurun <am@rol.ru>.
  • Add a __delitem__ implementation to Packet. Based on a patch from Alexey V Michurun <am@rol.ru>.

1.0 - September 16, 2007

  • Add unit tests. Pyrad now has 100% test coverage!
  • Moved the proxy server has been out of the server module to a new proxy module.
  • Fix several errors that prevented the proxy code from working.
  • Use the standard logging module instead of printing to stdout.
  • The default dictionary for Server instances was shared between all instances, possibly leading to unwanted data pollution. Each Server now gets its own dict instance if none is passed in to the constructor.
  • Fixed a timeout handling problem in the client: after receiving an invalid reply the current time was not updated, possibly leading to the client blocking forever.
  • Switch to setuptools, allowing pyrad to be distributed as an egg via the python package index.
  • Use absolute instead of relative imports.
  • Sockets are now opened with SO_REUSEADDR enabled to allow for faster restarts.

0.9 - April 25, 2007

  • Start using trac to manage the project: http://code.wiggy.net/tracker/pyrad/
  • [bug 3] Fix handling of packets with an id of 0
  • [bug 2] Fix handling of file descriptor parameters in the server code and example.
  • [bug 4] Fix wrong variable name in exception raised when encountering an overly long packet.
  • [bug 5] Fix error message in parse error for dictionaries.
  • [bug 8] Packet.CreateAuthenticator is now a static method.

0.8

  • Fix time-handling in the client packet sending code: it would loop forever since the now time was updated at the wrong moment. Fix from Michael Mitchell <Michael.Mitchell@team.telstra.com>
  • Fix passing of dict parameter when creating reply packets

0.7

  • add HandleAuthPacket and HandleAcctPacket hooks to Server class. Request from Thomas Boettcher.
  • Pass on dict attribute when creating a reply packet. Requested by Thomas Boettcher.
  • Allow specififying new attributes when using Server.CreateReplyPacket. Requested by Thomas Boettcher.

0.6

  • packet.VerifyReply() had a syntax error when not called with a raw packet.
  • Add bind() method to the Client class.
  • [SECURITY] Fix handling of timeouts in client module: when a bad packet was received pyrad immediately started the next retry instead of discarding it and waiting for a timeout. This could be exploited by sending a number of bogus responses before a correct reply to make pyrad not see the real response.
  • correctly set Acct-Delay-Time when resending accounting requests packets.
  • verify account request packages as well (from Farshad Khoshkhui).
  • protect against packets with bogus lengths (from Farshad Khoshkhui).

0.5

  • Fix typo in server class which broke handling of accounting packets.
  • Create seperate AuthPacket and AcctPacket classes; this resulted in a fair number of API changes.
  • Packets now know how to create and verify replies.
  • Client now directs authentication and accounting packets to the correct port on the server.
  • Add twisted support via the new curved module.
  • Fix incorrect exception handling in client code.
  • Update example server to handle accounting packets.
  • Add example for sending account packets.

0.4

  • Fix last case of bogus exception usage.
  • Move RADIUS code constants to packet module.
  • Add support for decoding passwords and generating reply packets to Packet class.
  • Add basic RADIUS server and proxy implementation.

0.3

  • client.Timeout is now derived from Exception.
  • Docstring documentation added.
  • Include example dictionaries and authentication script.

0.2

  • Use proper exceptions.
  • Encode and decode vendor attributes.
  • Dictionary can parse vendor dictionaries.
  • Dictionary can handle attribute values.
  • Enhance most constructors; they now take extra optional parameters with initialisation info.
  • No longer use obsolete python interfaces like whrandom.

0.1

  • First release