Mpd 4.0b3 User Manual
: Introduction
: Change history
Previous: Organization of this manual
Next: Installation
1.4. Change history
Changes since version 4.0b2:
- BugFix: make PPPoE interface control events recurring, PPPoE is
not broken anymore.
- Added a new
startup
section to the config-file, wich
is loaded once at startup.
- Added a new
global
config space for all the global
settings.
- BugFix: don't generate new challenges, while retransmitting
them.
- Fix
va_args
bug on certain non-i386 platforms.
- Auto-load
ng_ether
for PPPoE connections;
fix default path for undefined service.
- Rewrite the console-stuff. Multiple telnet connections are now
allowed. There is no input-console anymore, must use telnet
instead.
- BugFix: The directly configured password wasn't taken into
account when using PAP.
- Disallow empty usernames safely.
Changes since version 4.0b1:
- Fixed a race-condition wich caused a dead-lock.
- RADIUS
- Fixed several race-conditions when sending accounting requests.
- Use the username from the access-accept packet (if present) for
accounting requests.
Changes since version 3 (most of this work was sponsored by
SURFnet SURFnet):
- Design changes:
Mpd uses now a thread-based event system using libpdel, these libpdel parts are now
integrated:
- typed_mem(3)
- pevent(3)
- alog(3)
Mpd uses a "Giant Mutex" for protecting its resources.
- Major new features:
- Implemented the Extensible Authentication Protocol RFC 2284 (EAP). Currently only
EAP-MD5 is supported (client and server side).
EAP negotiaton can be enabled at link level.
- Implemented OPIE (One-time Passwords In Everything).
- Implemented authentication against systems password database
master.passwd
.
- utmp/wtmp logging.
- Rewrites of the authentication subsystem:
- Make authentication and accounting requests asynchronous using paction(3).
- Authentication backends are acting now independently from the rest of Mpd, using
some internal structs as interface.
- The
mpd.secrets
file is now used as one authentication backends of many, it
has no special role anymore, i.e. it could be disabled.
- Generate a session-id at bundle and link level for using with accounting requests.
- RADIUS related changes:
- IMPORTANT: Mpd needs now an enhanced libradius, here are the patchsets:
4-STABLE
5-CURRENT
- Remember and send the RAD_STATE attribute.
- Message-Authenticator support.
- EAP Proxy Support.
- Added a new option for PPTP links for disabling the windowing mechanism
specified by the protocol. Disabling this will cause Mpd to violate
the protocol, possibly confusing other PPTP peers, but often results
in better performance. The windowing mechanism is a design error in
the PPTP protocol; L2TP, the successor to PPTP, removes it. You need
a recent version of FreeBSD (NGM_PPTPGRE_COOKIE >= 1082548365) in order
to get this feature.
set pptp disable windowing
- Added a new commandline option
-t
for adding ng_tee into the netgraph.
Submitted by: Gleb Smirnoff, glebius at cell dot sick dot ru
- Removed configuration parameters:
- bundle:
radius-fallback
- iface:
radius-session
, radius-idle
, radius-mtu
,
radius-route
, radius-acl
- ipcp:
radius-ip
Moved configuration parameters:
- bundle to auth:
radius-auth
, radius-acct
, authname
,
password
, max-logins
- radius to auth:
acct-update
- ccp to auth:
radius
and renamed to mppc-pol
New configuration parameters:
- link:
keep-ms-domain
, this prevents Mpd from stripping the MS-Domain,
this is can be useful when using IAS as RADIUS server.
- radius:
message-authentic
, this adds the Message-Authenticator
attribute to the RADIUS request.
- auth:
internal
, controles the usage of the mpd.secrets
file
(internal authentication backend).
- auth:
opie
, enables/disables the OPIE authentication backend.
- auth:
system
, enables/disables authentication against systems password
database.
- auth:
utmp-wtmp
, enables/disables utmp/wtmp logging.
database.
- auth:
timeout
, configureable timeout for the authentication phase.
- eap:
radius-proxy
, this causes Mpd to proxy all EAP requests to
the RADIUS server, Mpd only makes the initial Identity-Request
(this saves one round-trip), every other requests are forwarded to the RADIUS server.
This adds the possibility supporting every EAP-Type of the RADIUS server, without
implementing each EAP-Type into Mpd.
- eap:
md5
, EAP-Type MD5, it's the same as CHAP-MD5, but inside EAP frames.
- Removed defines
ENCRYPTION_MPPE
and COMPRESSION_MPPC
, they are now built in.
- Get rid of
IA_CUSTOM
define.
- BugFix: Fixed a mem-leak in the pptp-ctrl stuff.
Mpd 4.0b3 User Manual
: Introduction
: Change history
Previous: Organization of this manual
Next: Installation