1.4. Change history

Changes since version 4.0b2:

• Fix va_args bug on certain non-i386 platforms.
• Auto-load ng_ether for PPPoE connections; fix default path for undefined service.

Changes since version 4.0b1:

• Fixed a race-condition wich caused a dead-lock.
• RADIUS
  • Fixed several race-conditions when sending accounting requests.
  • Use the username from the access-accept packet (if present) for accounting requests.

Changes since version 3:

• Design changes: Mpd uses now a thread-based event system using libpdel, these libpdel parts are now integrated:
  • typed_mem(3)
  • pevent(3)
  • alog(3)
  Mpd uses a "Giant Mutex" for protecting its resources.
• Major new features:
  • Implemented the Extensible Authentication Protocol RFC 2284 (EAP). Currently only EAP-MD5 is supported (client and server side). EAP negotiaton can be enabled at link level.
  • Implemented OPIE (One-time Passwords In Everything).
  • Implemented authentication against systems password database master.passwd.
  • utmp/wtmp logging.
• Rewrites of the authentication subsystem:
  • Make authentication and accounting requests asynchronous using paction(3).
  • Authentication backends are acting now independently from the rest of Mpd, using some internal structs as interface.
  • The mpd.secrets file is now used as one authentication backends of many, it has no special role anymore, i.e. it could be disabled.
  • Generate a session-id at bundle and link level for using with accounting requests.
• RADIUS related changes:
  • IMPORTANT: Mpd needs now an enhanced libradius, here are the patchsets: 4-STABLE 5-CURRENT
  • Remember and send the RAD_STATE attribute.
  • Message-Authenticator support.
  • EAP Proxy Support.
• Added a new option for PPTP links for disabling the windowing mechanism specified by the protocol. Disabling this will cause Mpd to violate the protocol, possibly confusing other PPTP peers, but often results in better performance. The windowing mechanism is a design error in the PPTP protocol; L2TP, the successor to PPTP, removes it. You need a recent version of FreeBSD (NGM_PPTPGRE_COOKIE >= 1082548365) in order to get this feature.
  set pptp disable windowing
• Added a new commandline option -t for adding ng_tee into the netgraph.
  Submitted by: Gleb Smirnoff, glebius at cell dot sick dot ru
• Removed configuration parameters:
  • bundle: radius-fallback
  • iface: radius-session, radius-idle, radius-mtu, radius-route, radius-acl
  • ipcp: radius-ip
  Moved configuration parameters:
  • bundle to auth: radius-auth, radius-acct, authname, password, max-logins
  • radius to auth: acct-update
  • ccp to auth: radius and renamed to mppc-pol
  New configuration parameters:
  • link: keep-ms-domain, this prevents Mpd from stripping the MS-Domain, this is can be useful when using IAS as RADIUS server.
  • radius: message-authentic, this adds the Message-Authenticator attribute to the RADIUS request.
  • auth: internal, controles the usage of the mpd.secrets file (internal authentication backend).
  • auth: opie, enables/disables the OPIE authentication backend.
  • auth: system, enables/disables authentication against systems password database.
  • auth: utmp-wtmp, enables/disables utmp/wtmp logging. database.
  • auth: timeout, configureable timeout for the authentication phase.
  • eap: radius-proxy, this causes Mpd to proxy all EAP requests to the RADIUS server, Mpd only makes the initial Identity-Request (this saves one round-trip), every other requests are forwarded to the RADIUS server. This adds the possibility supporting every EAP-Type of the RADIUS server, without implementing each EAP-Type into Mpd.
  • eap: md5, EAP-Type MD5, it's the same as CHAP-MD5, but inside EAP frames.
• Removed defines ENCRYPTION_MPPE and COMPRESSION_MPPC, they are now built in.
• Get rid of IA_CUSTOM define.
• BugFix: Fixed a mem-leak in the pptp-ctrl stuff.