Reintroduce "ignore home server ping packets"

It was accidentally removed after the rebase to 3.0.27.

Resolves: RHEL-127981
Signed-off-by: Antonio Torres <antorres@redhat.com>
This commit is contained in:
Antonio Torres 2025-11-13 10:00:10 +01:00
parent c3f30c42a6
commit b60d0d3222
No known key found for this signature in database
GPG Key ID: 359FAF777296F653
2 changed files with 35 additions and 1 deletions

View File

@ -0,0 +1,28 @@
From 3a9449539e4c5a74c85685cad6abe6edf412f701 Mon Sep 17 00:00:00 2001
From: "Alan T. DeKok" <aland@freeradius.org>
Date: Wed, 10 Jul 2024 09:29:39 -0400
Subject: [PATCH] ignore home server "ping" packets. Fixes #5363
---
src/main/stats.c | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/src/main/stats.c b/src/main/stats.c
index 29f2c48f4b9c8..64cbafea931f9 100644
--- a/src/main/stats.c
+++ b/src/main/stats.c
@@ -95,6 +95,14 @@ void request_stats_final(REQUEST *request)
if ((request->options & RAD_REQUEST_OPTION_STATS) != 0) return;
+ /*
+ * This packet was originated by the server, and not
+ * received from a client. It's a status-server or home
+ * server "ping" packet. So we ignore it for statistics
+ * purposes.
+ */
+ if (!request->packet) return;
+
/* don't count statistic requests */
if (request->packet->code == PW_CODE_STATUS_SERVER) {
return;

View File

@ -1,7 +1,7 @@
Summary: High-performance and highly configurable free RADIUS server
Name: freeradius
Version: 3.0.27
Release: 1%{?dist}
Release: 2%{?dist}
License: GPLv2+ and LGPLv2+
URL: http://www.freeradius.org/
@ -29,6 +29,7 @@ Patch5: freeradius-bootstrap-make-permissions.patch
Patch6: freeradius-ldap-infinite-timeout-on-starttls.patch
Patch7: freeradius-bootstrap-pass-noenc-to-certificate-generation.patch
Patch8: freeradius-no-sqlippool-tool.patch
Patch9: freeradius-ignore-home-server-ping-packets.patch
%global docdir %{?_pkgdocdir}%{!?_pkgdocdir:%{_docdir}/%{name}-%{version}}
@ -216,6 +217,7 @@ This plugin provides the REST support for the FreeRADIUS server project.
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1
%build
# Force compile/link options, extra security for network facing daemon
@ -905,6 +907,10 @@ EOF
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/rest
%changelog
* Thu Nov 13 2025 Antonio Torres <antorres@redhat.com> - 3.0.27-2
- Reintroduce "Ignore home server ping packets"
Resolves: RHEL-127981
* Tue Jul 08 2025 Antonio Torres <antorres@redhat.com> - 3.0.27-1
- Rebase to upstream 3.0.27
Resolves: RHEL-102101