pyrad 2.3__tar.gz → 2.5.0__tar.gz

pyrad-2.5.0/CHANGES.rst

@@ -0,0 +1,301 @@
+Changelog
+=========
+
+2.5 - Jan 29, 2026
+-------------------
+
+* Drop support of Python 2.x
+
+* Add salt decryption of encrypted attributes
+
+* Fix #194 salt-encryption
+
+* Fix #213 EncodeIPv6Prefix
+
+* Fix for UTF-8
+
+* Fix fix usage of socket.getaddrinfo
+
+* Fix #197 KeyError when handling CoA packet for 0.0.0.0
+
+* Fix create CoA packet in client_async
+
+* Fix #152 and add corresponding unittests
+
+* Fixed unittests
+
+2.4 - Nov 23, 2020
+-------------------
+
+* Support poetry for for building this project
+
+* Use secrets.SysRandom instead of random.SystemRandom if possible
+
+* `.get` on Packets has an optional default parameter (to mimic dict.get())
+
+* Fix: digestmod is not optional in python3.8 anymore
+
+* Fix: authenticator was refreshed before the packet was generated
+
+* Fix bug causing Message-Authenticator verification to fail if
+  multiple instances of an attribute do not appear sequentially in
+  the attributes list
+
+* Fixed #140 VerifyReply broken when multiple instances of same attribute are
+  not adjacent on reply
+
+* Fixed #135 Missing send_packet for async Client
+
+* Fixed #126 python3 support for SaltCrypt
+  (was previously broken)
+
+2.3 - Feb 6, 2020
+------------------
+
+* Fixed #124 remove reuse_address=True from async server/client
+
+* Fixed #121 Unknown attribute key error
+
+2.2 - Oct 19, 2019
+------------------
+
+* Add message authenticator support (attribute 80)
+
+* Add support for multiple values of the same attribute (#95)
+
+* Add experimental async client and server implementation for python >=3.5.
+
+* Add IPv6 bind support for client and server.
+
+* Add support of tlv and integer64 attributes.
+
+* Multiple minor enhancements and fixes.
+
+2.1 - Feb 2, 2017
+-----------------
+
+* Add CoA support (client and server).
+
+* Add tagged attribute support (send only).
+
+* Add salt encryption support (encrypt 2).
+
+* Add ascend data filter support (human readable format to octets).
+
+* Add ipv6 address and prefix support.
+
+* Add support for octet strings in hex (starting with 0x).
+
+* Add support for types short, signed and byte.
+
+* Add support for VSA's with multiple sub TLV's.
+
+* Use a different random generator to improve the security of generated
+  packet ids and authenticators.
+
+
+2.0 - May 15, 2011
+------------------
+
+* Start moving codebase to PEP8 compatible coding style.
+
+* Add support for Python 3.2.
+
+* Several code cleanups. As a side effect Python versions before 2.6
+  are unfortunatley no longer supported. If you use Python 2.5 or older
+  Pyrad 1.2 will still work for you.
+
+
+1.2 - July 12, 2009
+-------------------
+
+* Setup sphinx based documentation.
+
+* Use hashlib instead of md5, if present. This fixes deprecation warnings
+  for python 2.6. Patch from Jeremy Liané.
+
+* Support parsing VENDOR format specifications in dictionary files. Patch by
+  Kristoffer Grönlun.
+
+* Supprt $INCLUDE directores in dictionary files. Patch by
+  Kristoffer Grönlun.
+
+* Standardize on 4 spaces for indents. Patch by Kristoffer Grönlund/
+  Purplescout.
+
+* Make sure all encoding utility methods raise a TypeError if a value of
+  the wrong type is passed in.
+
+
+1.1 - September 30, 2007
+------------------------
+
+* Add the 'octets' datatype from FreeRADIUS. This is treated just like string;
+  the only difference is how FreeRADIUS prints it.
+
+* Check against unimplemented datatypes in EncodeData and DecodeData instead
+  of assuming an identity transform works.
+
+* Make Packet.has_key and __contains__ gracefully handle unknown attributes.
+  Based on a patch from Alexey V Michurun <am@rol.ru>.
+
+* Add a __delitem__ implementation to Packet. Based on a patch from
+  Alexey V Michurun <am@rol.ru>.
+
+
+1.0 - September 16, 2007
+------------------------
+
+* Add unit tests. Pyrad now has 100% test coverage!
+
+* Moved the proxy server has been out of the server module to a new
+  proxy module.
+
+* Fix several errors that prevented the proxy code from working.
+
+* Use the standard logging module instead of printing to stdout.
+
+* The default dictionary for Server instances was shared between all
+  instances, possibly leading to unwanted data pollution. Each Server now
+  gets its own dict instance if none is passed in to the constructor.
+
+* Fixed a timeout handling problem in the client: after receiving an
+  invalid reply the current time was not updated, possibly leading to
+  the client blocking forever.
+
+* Switch to setuptools, allowing pyrad to be distributed as an egg
+  via the python package index.
+
+* Use absolute instead of relative imports.
+
+* Sockets are now opened with SO_REUSEADDR enabled to allow for faster
+  restarts.
+
+
+0.9 - April 25, 2007
+------------------------
+
+* Start using trac to manage the project: http://code.wiggy.net/tracker/pyrad/
+
+* [bug 3] Fix handling of packets with an id of 0
+
+* [bug 2] Fix handling of file descriptor parameters in the server
+  code and example.
+
+* [bug 4] Fix wrong variable name in exception raised when encountering
+  an overly long packet.
+
+* [bug 5] Fix error message in parse error for dictionaries.
+
+* [bug 8] Packet.CreateAuthenticator is now a static method.
+
+
+0.8
+---
+
+* Fix time-handling in the client packet sending code: it would loop
+  forever since the now time was updated at the wrong moment. Fix from
+  Michael Mitchell <Michael.Mitchell@team.telstra.com>
+
+* Fix passing of dict parameter when creating reply packets
+
+
+0.7
+---
+
+* add HandleAuthPacket and HandleAcctPacket hooks to Server class.
+  Request from Thomas Boettcher.
+
+* Pass on dict attribute when creating a reply packet. Requested by
+  Thomas Boettcher.
+
+* Allow specififying new attributes when using
+  Server.CreateReplyPacket. Requested by Thomas Boettcher.
+
+
+0.6
+---
+
+* packet.VerifyReply() had a syntax error when not called with a raw packet.
+
+* Add bind() method to the Client class.
+
+* [SECURITY] Fix handling of timeouts in client module: when a bad
+  packet was received pyrad immediately started the next retry instead of
+  discarding it and waiting for a timeout. This could be exploited by
+  sending a number of bogus responses before a correct reply to make pyrad
+  not see the real response.
+
+* correctly set Acct-Delay-Time when resending accounting requests packets.
+
+* verify account request packages as well (from Farshad Khoshkhui).
+
+* protect against packets with bogus lengths (from Farshad Khoshkhui).
+
+
+0.5
+---
+
+* Fix typo in server class which broke handling of accounting packets.
+
+* Create seperate AuthPacket and AcctPacket classes; this resulted in
+  a fair number of API changes.
+
+* Packets now know how to create and verify replies.
+
+* Client now directs authentication and accounting packets to the
+  correct port on the server.
+
+* Add twisted support via the new curved module.
+
+* Fix incorrect exception handling in client code.
+
+* Update example server to handle accounting packets.
+
+* Add example for sending account packets.
+
+
+0.4
+---
+
+* Fix last case of bogus exception usage.
+
+* Move RADIUS code constants to packet module.
+
+* Add support for decoding passwords and generating reply packets to Packet
+  class.
+
+* Add basic RADIUS server and proxy implementation.
+
+
+0.3
+---
+
+* client.Timeout is now derived from Exception.
+
+* Docstring documentation added.
+
+* Include example dictionaries and authentication script.
+
+
+0.2
+---
+
+* Use proper exceptions.
+
+* Encode and decode vendor attributes.
+
+* Dictionary can parse vendor dictionaries.
+
+* Dictionary can handle attribute values.
+
+* Enhance most constructors; they now take extra optional parameters
+  with initialisation info.
+
+* No longer use obsolete python interfaces like whrandom.
+
+
+0.1
+---
+
+* First release

{pyrad-2.3 → pyrad-2.5.0}/LICENSE.txt

@@ -1,4 +1,5 @@
-Copyright 2017-2020 Christian Giese. All rights reserved.
+Copyright 2020 Istvan Ruzman. All rights reserved.
+Copyright 2017-2026 Christian Giese. All rights reserved.
 Copyright 2007-2008 Simplon. All rights reserved.
 Copyright 2002-2008 Wichert Akkerman. All rights reserved.
 

pyrad-2.5.0/MANIFEST.in

@@ -0,0 +1,7 @@
+include README.rst
+include CHANGES.rst
+include TODO.rst
+include LICENSE.txt
+recursive-include example *
+recursive-include docs *
+recursive-include tests/data *

pyrad-2.5.0/PKG-INFO

@@ -0,0 +1,126 @@
+Metadata-Version: 2.4
+Name: pyrad
+Version: 2.5.0
+Summary: RADIUS tools
+Author-email: Istvan Ruzman <istvan@ruzman.eu>, Christian Giese <gic@gicnet.de>, Stefan Lieberth <stefan@lieberth.net>
+License: BSD-3-Clause
+Project-URL: Repository, https://github.com/pyradius/pyrad
+Project-URL: Documentation, https://pyradius-pyrad.readthedocs.io
+Keywords: radius,authentication,AAA,accounting,authorization,RADIUS
+Classifier: Development Status :: 6 - Mature
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: BSD License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: System :: Systems Administration :: Authentication/Directory
+Requires-Python: >=3.8
+Description-Content-Type: text/x-rst
+License-File: LICENSE.txt
+Requires-Dist: netaddr>=0.8.0
+Requires-Dist: six>=1.16.0
+Provides-Extra: test
+Requires-Dist: pytest>=8; extra == "test"
+Requires-Dist: mock; python_version < "3.10" and extra == "test"
+Dynamic: license-file
+
+
+.. image:: https://github.com/pyradius/pyrad/actions/workflows/python-test.yml/badge.svg?branch=master
+    :target: https://github.com/pyradius/pyrad/actions/workflows/python-test.yml
+.. image:: https://coveralls.io/repos/github/pyradius/pyrad/badge.svg?branch=master
+    :target: https://coveralls.io/github/pyradius/pyrad?branch=master
+.. image:: https://img.shields.io/pypi/v/pyrad.svg
+    :target: https://pypi.python.org/pypi/pyrad
+.. image:: https://img.shields.io/pypi/pyversions/pyrad.svg
+    :target: https://pypi.python.org/pypi/pyrad
+.. image:: https://img.shields.io/pypi/dm/pyrad.svg
+    :target: https://pypi.python.org/pypi/pyrad
+.. image:: https://readthedocs.org/projects/pyradius-pyrad/badge/?version=latest
+    :target: https://pyradius-pyrad.readthedocs.io/en/latest/?badge=latest
+    :alt: Documentation Status
+.. image:: https://img.shields.io/pypi/l/pyrad.svg
+    :target: https://pypi.python.org/pypi/pyrad
+.. image:: https://img.shields.io/badge/Chat-darkgreen
+    :target: https://matrix.to/#/#pyradius:matrix.org
+
+Introduction
+============
+
+pyrad is an implementation of a RADIUS client/server as described in RFC2865.
+It takes care of all the details like building RADIUS packets, sending
+them and decoding responses.
+
+Here is an example of doing a authentication request::
+
+    from pyrad.client import Client
+    from pyrad.dictionary import Dictionary
+    import pyrad.packet
+
+    srv = Client(server="localhost", secret=b"Kah3choteereethiejeimaeziecumi",
+                 dict=Dictionary("dictionary"))
+
+    # create request
+    req = srv.CreateAuthPacket(code=pyrad.packet.AccessRequest,
+                               User_Name="wichert", NAS_Identifier="localhost")
+    req["User-Password"] = req.PwCrypt("password")
+
+    # send request
+    reply = srv.SendPacket(req)
+
+    if reply.code == pyrad.packet.AccessAccept:
+        print("access accepted")
+    else:
+        print("access denied")
+
+    print("Attributes returned by server:")
+    for i in reply.keys():
+        print("%s: %s" % (i, reply[i]))
+
+
+
+Requirements & Installation
+===========================
+
+pyrad requires Python 3.8 or later
+
+Installing is simple; pyrad uses the standard distutils system for installing
+Python modules::
+
+  python setup.py install
+
+
+Author, Copyright, Availability
+===============================
+
+pyrad was written by Wichert Akkerman <wichert@wiggy.net> and is maintained by 
+Christian Giese (GIC-de) and Istvan Ruzman (Istvan91). 
+
+We’re looking for contributors to support the pyrad team! If you’re interested in 
+helping with development, testing, documentation, or other areas, please contact 
+us directly.
+
+This project is licensed under a BSD license.
+
+Copyright and license information can be found in the LICENSE.txt file.
+
+The current version and documentation can be found on pypi:
+https://pypi.org/project/pyrad/
+
+Bugs and wishes can be submitted in the pyrad issue tracker on github:
+https://github.com/pyradius/pyrad/issues
+
+Related Projects & Forks
+========================
+
+**pyrad2:** Noteworthy fork with experimental RadSec (RFC 6614) support. Targets Python 3.12+, 
+adds extensive type hints, boosts test coverage, and includes fresh bug fixes.
+https://github.com/nicholasamorim/pyrad2
+
+**pyrad-server:** Lab-grade RADIUS test server built on top of pyrad.
+https://github.com/slieberth/pyrad-server

{pyrad-2.3 → pyrad-2.5.0}/README.rst

@@ -1,5 +1,6 @@
-.. image:: https://travis-ci.org/pyradius/pyrad.svg?branch=master
-    :target: https://travis-ci.org/pyradius/pyrad
+
+.. image:: https://github.com/pyradius/pyrad/actions/workflows/python-test.yml/badge.svg?branch=master
+    :target: https://github.com/pyradius/pyrad/actions/workflows/python-test.yml
 .. image:: https://coveralls.io/repos/github/pyradius/pyrad/badge.svg?branch=master
     :target: https://coveralls.io/github/pyradius/pyrad?branch=master
 .. image:: https://img.shields.io/pypi/v/pyrad.svg
@@ -8,11 +9,13 @@
     :target: https://pypi.python.org/pypi/pyrad
 .. image:: https://img.shields.io/pypi/dm/pyrad.svg
     :target: https://pypi.python.org/pypi/pyrad
-.. image:: https://readthedocs.org/projects/pyrad/badge/?version=latest
-    :target: http://pyrad.readthedocs.io/en/latest/?badge=latest
+.. image:: https://readthedocs.org/projects/pyradius-pyrad/badge/?version=latest
+    :target: https://pyradius-pyrad.readthedocs.io/en/latest/?badge=latest
     :alt: Documentation Status
 .. image:: https://img.shields.io/pypi/l/pyrad.svg
     :target: https://pypi.python.org/pypi/pyrad
+.. image:: https://img.shields.io/badge/Chat-darkgreen
+    :target: https://matrix.to/#/#pyradius:matrix.org
 
 Introduction
 ============
@@ -23,7 +26,6 @@ them and decoding responses.
 
 Here is an example of doing a authentication request::
 
-    from __future__ import print_function
     from pyrad.client import Client
     from pyrad.dictionary import Dictionary
     import pyrad.packet
@@ -53,7 +55,7 @@ Here is an example of doing a authentication request::
 Requirements & Installation
 ===========================
 
-pyrad requires Python 2.7, or Python 3.4 or later
+pyrad requires Python 3.8 or later
 
 Installing is simple; pyrad uses the standard distutils system for installing
 Python modules::
@@ -67,6 +69,10 @@ Author, Copyright, Availability
 pyrad was written by Wichert Akkerman <wichert@wiggy.net> and is maintained by 
 Christian Giese (GIC-de) and Istvan Ruzman (Istvan91). 
 
+We’re looking for contributors to support the pyrad team! If you’re interested in 
+helping with development, testing, documentation, or other areas, please contact 
+us directly.
+
 This project is licensed under a BSD license.
 
 Copyright and license information can be found in the LICENSE.txt file.
@@ -76,3 +82,13 @@ https://pypi.org/project/pyrad/
 
 Bugs and wishes can be submitted in the pyrad issue tracker on github:
 https://github.com/pyradius/pyrad/issues
+
+Related Projects & Forks
+========================
+
+**pyrad2:** Noteworthy fork with experimental RadSec (RFC 6614) support. Targets Python 3.12+, 
+adds extensive type hints, boosts test coverage, and includes fresh bug fixes.
+https://github.com/nicholasamorim/pyrad2
+
+**pyrad-server:** Lab-grade RADIUS test server built on top of pyrad.
+https://github.com/slieberth/pyrad-server

pyrad-2.5.0/TODO.rst

@@ -0,0 +1,2 @@
+ToDo
+====

pyrad-2.5.0/docs/Makefile

@@ -0,0 +1,20 @@
+# Minimal makefile for Sphinx documentation
+#
+
+# You can set these variables from the command line.
+SPHINXOPTS    =
+SPHINXBUILD   = sphinx-build
+SPHINXPROJ    = pyrad
+SOURCEDIR     = source
+BUILDDIR      = build
+
+# Put it first so that "make" without argument is like "make help".
+help:
+	@$(SPHINXBUILD) -M help "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
+
+.PHONY: help Makefile
+
+# Catch-all target: route all unknown targets to Sphinx using the new
+# "make mode" option.  $(O) is meant as a shortcut for $(SPHINXOPTS).
+%: Makefile
+	@$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)

pyrad-2.5.0/docs/make.bat

@@ -0,0 +1,36 @@
+@ECHO OFF
+
+pushd %~dp0
+
+REM Command file for Sphinx documentation
+
+if "%SPHINXBUILD%" == "" (
+	set SPHINXBUILD=sphinx-build
+)
+set SOURCEDIR=source
+set BUILDDIR=build
+set SPHINXPROJ=pyrad
+
+if "%1" == "" goto help
+
+%SPHINXBUILD% >NUL 2>NUL
+if errorlevel 9009 (
+	echo.
+	echo.The 'sphinx-build' command was not found. Make sure you have Sphinx
+	echo.installed, then set the SPHINXBUILD environment variable to point
+	echo.to the full path of the 'sphinx-build' executable. Alternatively you
+	echo.may add the Sphinx directory to PATH.
+	echo.
+	echo.If you don't have Sphinx installed, grab it from
+	echo.http://sphinx-doc.org/
+	exit /b 1
+)
+
+%SPHINXBUILD% -M %1 %SOURCEDIR% %BUILDDIR% %SPHINXOPTS%
+goto end
+
+:help
+%SPHINXBUILD% -M help %SOURCEDIR% %BUILDDIR% %SPHINXOPTS%
+
+:end
+popd

pyrad-2.5.0/docs/source/api/client.rst

@@ -0,0 +1,10 @@
+:mod:`pyrad.client` -- basic client
+===================================
+
+.. automodule:: pyrad.client
+
+  .. autoclass:: Timeout
+    :members:
+
+  .. autoclass:: Client
+    :members:

pyrad-2.5.0/docs/source/api/dictionary.rst

@@ -0,0 +1,10 @@
+:mod:`pyrad.dictionary` -- RADIUS dictionary
+============================================
+
+.. automodule:: pyrad.dictionary
+
+  .. autoclass:: ParseError
+    :members:
+
+  .. autoclass:: Dictionary
+    :members:

pyrad-2.5.0/docs/source/api/host.rst

@@ -0,0 +1,7 @@
+:mod:`pyrad.host` -- RADIUS host definition
+===========================================
+
+.. automodule:: pyrad.host
+
+  .. autoclass:: Host
+    :members:

pyrad-2.5.0/docs/source/api/packet.rst

@@ -0,0 +1,48 @@
+:mod:`pyrad.packet` -- packet encoding and decoding
+===================================================
+
+.. automodule:: pyrad.packet
+
+  .. autoclass:: Packet
+    :members:
+
+  .. autoclass:: AuthPacket
+    :members:
+
+  .. autoclass:: AcctPacket
+    :members:
+
+  .. autoclass:: CoAPacket
+    :members:
+
+  .. autoclass:: PacketError
+    :members:
+
+
+Constants
+---------
+
+The :mod:`pyrad.packet` module defines several common constants
+that are useful when dealing with RADIUS packets.
+
+The following packet codes are defined:
+
+==================    ======
+Constant name         Value
+==================    ======
+AccessRequest         1
+------------------    ------
+AccessAccept          2
+AccessReject          3
+AccountingRequest     4
+AccountingResponse    5
+AccessChallenge       11
+StatusServer          12
+StatusClient          13
+DisconnectRequest     40
+DisconnectACK         41
+DisconnectNAK         42
+CoARequest            43
+CoAACK                44
+CoANAK                45
+==================    ======

pyrad-2.5.0/docs/source/api/proxy.rst

@@ -0,0 +1,7 @@
+:mod:`pyrad.proxy` -- basic proxy
+=================================
+
+.. automodule:: pyrad.proxy
+
+  .. autoclass:: Proxy
+    :members:

pyrad-2.5.0/docs/source/api/server.rst

@@ -0,0 +1,13 @@
+:mod:`pyrad.server` -- basic server
+===================================
+
+.. automodule:: pyrad.server
+
+  .. autoclass:: RemoteHost
+    :members:
+
+  .. autoclass:: ServerPacketError
+    :members:
+
+  .. autoclass:: Server
+    :members: