freeradius: Updated to 3.0.16

2018.01.11 Version 3.0.16 has been released.
The focus of this release is stability.

Feature Improvements
* rlm_python now supports multiple lists. From #2031.
* Add trust router re-keying. From #2007.
* Add support for Samba / AD LDAP schema See doc/schemas/ldap/samba/README.txt
  and doc/schemas/ldap/samba/.
* Add "tls_min_version" and "tls_max_version" to EAP module for Debian OpenSSL
  issues.
* Better documentation for client certificates in PEAP and TTLS: it usually
  doesn't work. Fixes #2068.
* Distinguish login failure from AD unavailable. Fixes #2069.
* Update RH spec files. Fixes #2070.
* Run Post-Proxy-Type if all home servers are dead Fixes #2072.
* Print offending IP addresses when EAP sessions come from two upstream home
  servers, and rate-limit the messages.
* Minor packaging updates.
* Better documentation for rlm_rest.
* EAP-FAST now has it's own "cipher_list", so that it is easier to configure.
* EAP-FAST now forcibly disables TLS1.2, until such time as we implement
  the new keying mechanism from TLS1.2.
* Add documentation for allow_expired_crl.
* Update Debian logrotation. #2093 and #2101.
* DHCP relay can now drop responses. #2095.
* rlm_sqlippool can now assign Delegated-IPv6-Prefix It also now can assign
  any IPv4 or IPv6 address Based on patches from maximumG. #2094 See
  raddb/mods-available/sqlippool for changes.
* radeapclient can now use EAP-SIM-Ki to dynamically create the necessary
  triplets.
* Explain why many LDAP connections are closed Fixes #1969.
* Debian build / package issues fixed by Matthew Newton.
* dictionary.patton updates from Brice Schaffner. Fixes #2137.
* Added scripts to build "inner-server.pem", and updated mods-config/inner-eap
  and certs/README to match.
* Added provisions for using an external CA. See raddb/certs/.
* Include dhcpclient binary in freeradius-dhcp debian packge.

Bug Fixes
* Bind the lifetime of program name and python path to the module FR-AD-002
  (redone).
* Pass correct statement length into sqlite3_prepare[_v2] FR-AD-003 (redone).
* Allow 100-Continue responses with additional headers in rlm_rest.
* fix corner case where detail files were not being locked correctly.
* Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group Fixes #1947.
* Clean up exfile code. Which should help to avoid issues with reading / writing
  100's of detail files.
* Fix build for winbind. Patch from Alex Clouter.
* Fix checkrad for Mikrotik. Patch from Muchael Ducharme.
* Fix home server stats lookup. Patch from Phil Mayers.
* Add libjson-c3 as an optional dependency.
* Require LTB OpenLDAP on CentOS / Redhat, to avoid linking against NSS,
  which breaks the server. Fixes #2040.
* rlm_python fixes. Fixes #2041.
* Typos in "man" pages. Fixes #2045.
* Expand "next" in %{%{...}:-%{...}}. Fixes #2048.
* Don't add TLS attributes twice. Fixes #2050.
* Fix memory allocation in rlm_rest. Fixes #2051.
* Update trustrouter for new API. Fixes #2059.
* Fix SQLite issues on FreeBSD. Fixes #2060.
* Don't do debug logging of bad passwords. Fixes #2064.
* More graceful handling of "die" in rlm_perl. Fixes #2073.
* Fix occasional crash when using cisco_accounting_username_bug = yes.
* EAP-FAST fixes from Isaac Boukris #2078, #2076, and #2082, #2126.
* DHCP fixes, relay, #2092, add run-time check, #2028.
* Decode multiple RADIUS packets at a time in highly loaded RadSec connections. Patch from Jan Tomasek. #2106.
* TunnelPassword is not "single value" in LDAP schema Fixes #2061.
* sql log now opens the expanded filename, not the input one This was
  a regression introduced in 3.0.15.
* Remove unnecessary UNIQUE constrain in Oracle schemas.
* Fix SSL thread and locking issues when modules also use SSL Fixes #2125 and
  #2129.
* Re-add dhcpclient "raw packet" changes. Patches from Nicolas Chaigne and
  Matthew Newton. Fixes #2155.

1 files changed, 5 insertions, 6 deletions

diff --git a/net/freeradius/Makefile b/net/freeradius/Makefile
index 63bfaf758c5..557e4c84112 100644
--- a/net/freeradius/Makefile
+++ b/net/freeradius/Makefile
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.94 2018/01/28 20:10:58 wiz Exp $
+# $NetBSD: Makefile,v 1.95 2018/04/12 01:21:07 nonaka Exp $
 
-PKGREVISION= 1
 .include "Makefile.common"
 
 PKGNAME=		${DISTNAME:S/-server//}
@@ -30,6 +29,7 @@ CONFIGURE_ARGS+=	--without-rlm_sql_oracle
 CONFIGURE_ARGS+=	--without-rlm_sql_postgresql
 CONFIGURE_ARGS+=	--without-rlm_sql_unixodbc
 
+RCD_SCRIPTS=		radiusd
 RADIUS_GROUP?=		radiusd
 RADIUS_USER?=		radiusd
 PKG_GROUPS=		${RADIUS_GROUP}
@@ -53,10 +53,10 @@ MESSAGE_SUBST+=		BOOTSTRAP=${PKG_SYSCONFDIR:Q}/certs/bootstrap
 
 EGDIR=			${PREFIX}/share/examples/freeradius
 
-EGFILES=		certs/ca.cnf certs/client.cnf certs/Makefile \
-			certs/README certs/server.cnf certs/xpextensions \
+EGFILES=		certs/ca.cnf certs/client.cnf certs/inner-server.cnf \
+			certs/Makefile certs/README certs/server.cnf \
+			certs/xpextensions \
 			clients.conf dictionary experimental.conf \
-			hints huntgroups \
 			mods-available/abfab_psk_sql mods-available/always \
 			mods-available/attr_filter mods-available/cache \
 			mods-available/cache_eap mods-available/chap \
@@ -147,7 +147,6 @@ EGFILES=		certs/ca.cnf certs/client.cnf certs/Makefile \
 			mods-config/sql/main/oracle/queries.conf \
 			mods-config/sql/main/oracle/schema.sql \
 			mods-config/sql/main/postgresql/extras/cisco_h323_db_schema.sql \
-			mods-config/sql/main/postgresql/extras/update_radacct_group.sql \
 			mods-config/sql/main/postgresql/extras/voip-postpaid.conf \
 			mods-config/sql/main/postgresql/queries.conf \
 			mods-config/sql/main/postgresql/schema.sql \