From b60d0d32221cb2a9f2afd428b79a3fb2bf105f0e Mon Sep 17 00:00:00 2001 From: Antonio Torres Date: Thu, 13 Nov 2025 10:00:10 +0100 Subject: [PATCH] Reintroduce "ignore home server ping packets" It was accidentally removed after the rebase to 3.0.27. Resolves: RHEL-127981 Signed-off-by: Antonio Torres --- ...dius-ignore-home-server-ping-packets.patch | 28 +++++++++++++++++++ freeradius.spec | 8 +++++- 2 files changed, 35 insertions(+), 1 deletion(-) create mode 100644 freeradius-ignore-home-server-ping-packets.patch diff --git a/freeradius-ignore-home-server-ping-packets.patch b/freeradius-ignore-home-server-ping-packets.patch new file mode 100644 index 0000000..1a1774c --- /dev/null +++ b/freeradius-ignore-home-server-ping-packets.patch @@ -0,0 +1,28 @@ +From 3a9449539e4c5a74c85685cad6abe6edf412f701 Mon Sep 17 00:00:00 2001 +From: "Alan T. DeKok" +Date: Wed, 10 Jul 2024 09:29:39 -0400 +Subject: [PATCH] ignore home server "ping" packets. Fixes #5363 + +--- + src/main/stats.c | 8 ++++++++ + 1 file changed, 8 insertions(+) + +diff --git a/src/main/stats.c b/src/main/stats.c +index 29f2c48f4b9c8..64cbafea931f9 100644 +--- a/src/main/stats.c ++++ b/src/main/stats.c +@@ -95,6 +95,14 @@ void request_stats_final(REQUEST *request) + + if ((request->options & RAD_REQUEST_OPTION_STATS) != 0) return; + ++ /* ++ * This packet was originated by the server, and not ++ * received from a client. It's a status-server or home ++ * server "ping" packet. So we ignore it for statistics ++ * purposes. ++ */ ++ if (!request->packet) return; ++ + /* don't count statistic requests */ + if (request->packet->code == PW_CODE_STATUS_SERVER) { + return; diff --git a/freeradius.spec b/freeradius.spec index 6ac84d2..283069e 100644 --- a/freeradius.spec +++ b/freeradius.spec @@ -1,7 +1,7 @@ Summary: High-performance and highly configurable free RADIUS server Name: freeradius Version: 3.0.27 -Release: 1%{?dist} +Release: 2%{?dist} License: GPLv2+ and LGPLv2+ URL: http://www.freeradius.org/ @@ -29,6 +29,7 @@ Patch5: freeradius-bootstrap-make-permissions.patch Patch6: freeradius-ldap-infinite-timeout-on-starttls.patch Patch7: freeradius-bootstrap-pass-noenc-to-certificate-generation.patch Patch8: freeradius-no-sqlippool-tool.patch +Patch9: freeradius-ignore-home-server-ping-packets.patch %global docdir %{?_pkgdocdir}%{!?_pkgdocdir:%{_docdir}/%{name}-%{version}} @@ -216,6 +217,7 @@ This plugin provides the REST support for the FreeRADIUS server project. %patch6 -p1 %patch7 -p1 %patch8 -p1 +%patch9 -p1 %build # Force compile/link options, extra security for network facing daemon @@ -905,6 +907,10 @@ EOF %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/rest %changelog +* Thu Nov 13 2025 Antonio Torres - 3.0.27-2 +- Reintroduce "Ignore home server ping packets" + Resolves: RHEL-127981 + * Tue Jul 08 2025 Antonio Torres - 3.0.27-1 - Rebase to upstream 3.0.27 Resolves: RHEL-102101