summaryrefslogtreecommitdiff
path: root/net/freeradius/Makefile
AgeCommit message (Collapse)AuthorFilesLines
2006-09-10Update to 1.1.3:adrianp1-3/+2
This version has been released to fix build issues in 1.1.2. The build tools (autoconf, libtool, libltld) have been upgraded to a recent version, and the server now builds "out of the box" on more platforms. Other fixes include: * More dictionary updates * Oracle support for radsqlrelay * Security and portability fixes to rlm_otp * Experimental module to store IP's in an SQL table. * Miscellaneous bug fixes
2006-08-11Add an extra MESSAGE if the user has selected to compile freeradius withadrianp1-1/+6
PAM support. From discussions with John Nemeth.
2006-08-10Default to running radiusd as a non-root useradrianp1-20/+41
bump to nb2
2006-08-09Add in PAM supportadrianp1-3/+6
Fix mySQL PLIST Fix all PLISTs to avoid a nightmare when the nb number is changed Bump to nb1
2006-07-14Update to 1.1.2adrianp1-4/+2
* Updated dictionaries (as always), * Extended Ascend "abinary" support for Juniper, * Configurable "cipher_list" for EAP methods that use TLS, * Additional checks on cert issuer validation for EAP methods that use TLS, * SQL IODBC bug fixes, * Updates to the LDAP module, * Better catching of errors in the config files, * Miscellaneous other fixes In addition to this add an extra option to options.mk which is "freeradius-simul-use". This will enable Simultaneous-Use and is enabled by default. If you disable it freeradius can be built without depending on the net-snmp package. Original idea from John Nemeth.
2006-07-13pkglintificationadrianp1-12/+11
Add kerberos support - Patch from Kevin Sullivan in PR #33732 Bump to nb4
2006-07-07LIBTOOL_OVERRIDE generally doesn't need to be specified anymore... justjlam1-2/+1
set OVERRIDE_DIRDEPTH to find any libtool scripts deeper in the WRKSRC tree unless they're named something other than "libtool". SHLIBTOOL_OVERRIDE generally doesn't need to be specified either -- just define it to the empty list and shlibtool-override will look for libtool scripts.
2006-04-10Add missing files to PLIST. Fix interpreter path in bin/radsqlrelay.joerg1-2/+4
Bump revision.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-2/+2
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-22Use libtool PLIST handling, it works now. Add some missing symlinksjoerg1-5/+7
for libtool archives, remove the .a and .so entries. Bump revision. Add DragonFly detection for shared libraries. Always try to find -lssl with -lcrypto, unbreaking the test at least on DragonFly, but should not harm elsewhere.
2006-03-22Fix typo which resulted in a failed install.adrianp1-2/+3
Issue found by Wolfgang Solfrank.
2006-03-21Remove some old hacks that are no longer neededadrianp1-15/+11
Use our libtool Update to 1.1.1 Fixes security issue (DoS): http://secunia.com/advisories/19300/ > Security fixes > * Additional state checking in the EAP-MSCHAPv2 module. > Bug found by Steffen Schuster. > > Feature improvements > * More dictionary updates > * Additional tests and fixes for Digest module from Phillipe Sultan. > * Add new "phone" response mode to rlm_otp/cryptocard. > * Put the eap sessions into a tree, so that looking them up is very > fast, and no longer O(n) in the number of sessions. > * Install the schema examples for a set of backends with the rest > of the documentation. > * Add support for xlat expansion of attributes from LDAP. > > Bug fixes > * Fix rlm_perl crash. (closes: #348) > * Fix handling of CoA-Request packets (close #344). Also correct > name of CoA packets. > * Fix an error on x86_64 machines when reading dictionaries. > (closes: #312) > * Fix compilation errors on FreeBSD and NetBSD because of rlm_otp > module. (closes: #314 #328) > * Workaround Cisco bug in State attribute handling in rlm_otp. > * Support LP64 for async mode in rlm_otp. > * Fix libtool problems on Debian with rlm_eap_peap and rlm_eap_ttls > modules. (closes: #75) > * Make "use_tunneled_reply" work properly for PEAP. > * Copy the whole string when getting a one-to-one-mapped attribute > from LDAP (closes: #261) > * Fix net-snmp's ucd-snmp compatibility mode.
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg1-1/+2
2006-02-05Update to 1.1.0adrianp1-9/+9
> FreeRADIUS 1.1.0 ; $Date: 2006/01/04 05:55:19 $, urgency=low > Feature improvements > * rlm_ldap has "set_auth_type" configuration option, which should > address some configuration problems when using it. > * Fix MIT Kerberos bug > * Modules can be load balanced, both in isolation and redundantly. > See doc/load-balance.txt for more information. > * rlm_perl is now marked "stable" > * N-tier certificate patch from Mohammed Petiwala. > * Copied dictionaries from the CVS head (many, many, more vendors) > * Enabled support for weird VSA formats, like Lucent and Starent. > * Support encrypted IP address and integers, for Juniper clients. > * Add PEAP machine authentication support in module "rlm_mschap". > * Support User-Password field encryption in digest mode. > * rlm_x99_token has become rlm_otp (with lots of changes). > * Add rlm_sqlcounter to the list of stable modules. > * Read MySQL specific options in sections [freeradius] and [client] > from file "my.cnf". > * Support the ${Cisco-AVPair[n]} syntax. > * Execute modules in {Pre,Post}-Proxy-Type stanzas. > * Add new options to radclient to run stress tests on the server. > * New module "rlm_sql_log" to postpone the storage of accounting data > in a SQL database. See rlm_sql_log(5) manpage. > * New program "radsqlrelay" which sends the SQL logfile according to > the SQL server's capabilities. > > Bug fixes > * 306 (HUP when built with threads, but executed with -s) > * 285 (more attributes in dictionary.cisco.vpn3000) > * rlm_digest has a number of bug fixes to authentication types. > * Don't leak memory in module "rlm_sql". > * Update the dictionaries, so that VALUEs with the same name, > but different numbers, aren't allowed. > * Queue the request before looking for available threads. > * Don't free the check items after we received the proxy reply. > * Expand config variables in included files, too. > * Check the return value of accounting modules and don't proxy > invalid requests. > * In rlm_passwd, don't close a file stream more than once. > * Fix format string errors in rlm_sql.c, spotted by Primoz Bratanic. > * Walk the whole string in when escaping strings in rlm_ldap. > * Include crypt.h if it is available so we get a prototype for crypt(), > spotted by Konstantin Kubatkin. > * Removed (for almost all uses) length restrictions on vendor names > and VALUE names. > * Don't leak memory when proxying an Access-Challenge response. > * Make the sleep time user-defined, so radrelay can send more than > 7 requests/s. > * Fix a memory leak in rlm_checkval. > * radclient doesn't resend countless times packets with invalid > signature. > * Fix segfault and mem leak in rlm_pam.
2006-01-08Bump PKGREVISION due to mysql.buildlink3.mk changes (default mysqlxtraeme1-2/+2
pkg has been changed to 5.x). Reminded by wiz... thanks.
2005-12-29Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mkjlam1-2/+1
automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
2005-12-05Ran "pkglint --autofix", which corrected some of the quoting issues inrillig1-3/+3
CONFIGURE_ARGS.
2005-12-05Fixed pkglint warnings. The warnings are mostly quoting issues, forrillig1-4/+4
example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html
2005-11-28Remove unneeded undefadrianp1-2/+5
Add -fPIC for amd64 platform to fix build. Reported in PR 31225 by Eric Radman
2005-09-22PLIST fixes pointed out by bulk buildsadrianp1-2/+2
Bump to nb2
2005-09-20Add logging fix from FreeRADIUS CVS pointed out by aland (at) ox.orgadrianp1-1/+2
Bump to nb1
2005-09-11Update to 1.0.5adrianp1-3/+2
> Security Fixes > * SQL injection attack in the module "rlm_sqlcounter". > * Buffer overflows in the module "rlm_sqlcounter". > * Expansion of variable %t may write 26 bytes beyond the buffer > bound. Primoz Bratanic is credited with the discovery of these > three bugs. > > Bug fixes > * Don't de-reference a NULL pointer if the auth-type is unknown > in the function rad_check_password(). > * Escape more characters in the LDAP queries. > Bug found by Suse engineers. > * In rlm_sql_unixodbc, don't call rad_malloc from sql_error(), > it leaks memory. > * Fix an off-by-one error in the module rlm_sql_unixodbc. > Bug found by Suse engineers. > * In rlm_sql, resize the buffer for the value of SQL-User-Name. > * Initialize memory for a new SQL socket in the module rlm_sql. > * Don't add too many attributes after running an external program. > Bug found by Suse engineers. > * Fix an off-by-one error in the function getthing(). > * snprintf() and vsnprintf() replacements were not compiled if > the autoconf tests didn't find the functions. > * Don't use vsprintf() anymore, but the replacement for vsnprintf() > in libradius instead. > * The function decode_attribute() may write beyond buffer bounds. > Bug found by Suse engineers. > * Fix a memset() in the function request_enqueue() which was > begining at the wrong address. Bug found by Matthias Ruttman. > * Fix an off-by-one error in the function xlat_copy(). > Bug found by Primoz Bratanic. > * Fix other off-by-one errors in module "rlm_unix", too. > Bug found by Allan Bazinet. > * Fix a 2-byte over-run read in function rad_decode(). > * Update thread pool queue properly. > * Autonconf tests try first any user-specified directory, > otherwise they may pick up the wrong version. > * Delete the autoconf tests for the libldap dependancies. > * Install all the regular files under the "doc" directory. > * Distinguish between exit code <0 (failure) and >0 (reject) > in Exec-Program-Wait. Patch from Thor Spruyt. > * Make Expiration work. > * Clean up the code for opening a proxy socket. > * When finding a realm to proxy to, if all are dead, wake them > if wake_all_if_all_dead is true. > * In radwho, print the NAS-Port as unsigned int. > * Use extended regex instead of basic regex in rlm_attr_filter. > * Catch the case where someone deletes a directory that rlm_detail > is using. > * Use the variable $(LDFLAGS) when linking a module. > * Ignore the Stripped-User-Name when a realm has the "nostrip" > directive. > * Add support for NT-Password in rlm_pap. > * In rlm_sqlcounter, use the time left to the next reset if it's > inferior to the time left in the counter. > * Calculate Message-Authenticator correctly for Accounting-Request > and Accounting-Response. Bug found by Paolo Rotela. > * Build on MAC OS X. Still need --disable-shared, though. > * Fix bug #255 (crash with expired CRL's, etc.) > * Fix quote removal of the values from a SQL database. > * Reap the zombie process after a command run from "Exec-Program". > * Allow to cancel proxy of accounting with "Proxy-To-Realm := LOCAL". > * Don't copy VSA's to an Access-Reject packet.
2005-08-29- Make gdbm optional, but keep it as default. (Partial dbm support usingtv1-11/+4
a builtin Berkeley DB 1.8x can now be used with option "bdb -gdbm"; no dbm support at all can be selected with "-gdbm".) - Specify --with/--without exactly once per option. - Merge postgresql support to a single option (pgsql), and correspondingly use pgsql.buildlink3.mk to pick the builder's desired implementation. This aligns freeradius with the rest of pkgsrc, wrt pgsql support.
2005-08-14PLIST fix as pointed out by Krister on pkgsrc-bulk@adrianp1-1/+2
Bump PKGREVISION
2005-07-16Get rid of USE_PERL5. The new way to express needing the Perl executablejlam1-3/+2
around at either build-time or at run-time is: USE_TOOLS+= perl # build-time USE_TOOLS+= perl:run # run-time Also remove some places where perl5/buildlink3.mk was being included by a package Makefile, but all that the package wanted was the Perl executable.
2005-07-09- Update to freeradius 1.0.4adrianp1-4/+2
- The security issues mentioned in this update were incorporated into patch-ak previously and a security advisory was already made in regards to this. > FreeRADIUS 1.0.4 ; Date: 2005/06/11 22:46:52, urgency=medium > > * Fix installation problem. > * Increase a buffer size, so radrelay doesn't truncate values. > * Updates in the documentation. Patches from Thor Spruyt. > > FreeRADIUS 1.0.3 ; Date: 2005/06/03 17:15:11, urgency=high > Security Fixes > * Always escape the strings in the SQL module. > * Check buffer bound when input character needs escaping in > the SQL module. Bug found by Primoz Bratanic. > > Bug fixes > * Return EAP-Fail in Access-Reject, rather than an empty Access-Reject > * Don't send Proxy-State from home server in TTLS. > * Fixes for forking external programs, so the server doesn't > suddenly stop processing requests, or stop forking programs. > * radzap now works, but it's command-line options have changed > completely, and it's a shell script. > * radwho has updated command-line options, and no longer reads > Unix "utmp" files. > * Fix bug in calling checkrad script with NAS port > 9999999 > * Fix long-standing bug when both crypt and pthreads are in use > * Don't SEGV when rlm_sql gets 'NULL' value from request. > * Re-arrange code in radrelay to not duplicate accounting packets. > * In rlm_attr_rewrite, change the value when the attribute type > is different from string.
2005-05-22Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions:jlam1-2/+2
USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
2005-05-18- Add fix for recent security issueadrianp1-2/+2
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-03-02- Grab maintainershipadrianp1-2/+2
2005-03-02- Whitespace policeadrianp1-3/+7
- Better handling of OpenSSL using USE_OLD_DES_API - Fix builds on 1.6.2 - Bump to nb1
2005-02-18- Update freeradius to 1.0.2adrianp1-5/+7
- Fix for PR #29437 opened by luiszuccolo(at)ciudad.com.ar, thanks for the PR ! > FreeRADIUS 1.0.2 ; $Date: 2005/02/13 01:03:20 $, urgency=medium > * Novell eDirectoty support. Patch from Novell. > * localweb & Trapeze dictionary updates. > * EAP-SIM fixes. > * Make "Strip-User-Name = No" work. > * Don't declare zero-length arrays in rlm_passwd > * Bug fix to make udpfromto code work > * radrelay shouldn't dump core if it can't read a VP from the > detail file. > * Only initialize the random pool once. > * In rlm_sql, don't escape characters twice. > * Fix MD4 calculation on big-endian machines. > * In rlm_ldap, only claim Auth-Type if a plain text password is present. > * Treat Quintium VSAs like Cisco VSAs > * Locking fixes in threading code > * rlm_krb5 includes /usr/include/et for Fedora Core > * Fix post-auth REJECT stanza processing for rejections from external > processes or home RADIUS servers > * Fix building on gcc-4.0 by not trying to access static auth_port from > other files. > * Fix building SNMP support on Solaris 9, which needs -lkstat
2005-02-09Obey PKG_SYSCONFBASEDIR.seb1-3/+3
Fix the rc.d script: add rcvar definition and no need to source /etc/rc.subr twice. Bump PKGREVISION to 7.
2004-12-28The default location of the pkgsrc-installed rc.d scripts is nowreed1-2/+2
under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
2004-12-22- Portability fix, use @ROOT_USER@:@ROOT_GROUP@ as opposed to hardcodingadrianp1-1/+3
root:wheel in the startup script. - Again thanks to kbrand (at) dplanet.ch for the suggestion.
2004-12-21- Fix freeradius not starting because of missing directory cleaned out atadrianp1-2/+2
reboot. - Issue spotted and patch sent to me from kbrand (at) dplanet.ch, thanks. - Bumped PKGREVISION
2004-12-19Move buildlink3.mk files ahead of make targets as per doc/Makefile-example.jlam1-21/+21
2004-11-16- Fix pthread issues on 1.6.xadrianp1-14/+15
- Fix builds with LDAP support - Bump PKGREVISION Thanks to Dave.Tyson (at) liverpool.ac.uk for testing a lot of these patches on the 1.6 branch.
2004-11-10- Fix incorrect ./configure syntax for non-threaded buildsadrianp1-2/+2
2004-11-10- Update options.mk because of mySQL buildlink changesadrianp1-2/+19
- Add a fix for crashes when processing EAP-PEAP requests PR 28095 Konstantin.Kabassanov (at) lip6.fr - Fix pthreads enabled builds on NetBSD systems < 2.0 - Replace patch-ai, patch-aj and patch-ak with SUBST_* (suggested by juan@)
2004-10-15Update linkage to libltdl, now in its own package.tv1-3/+3
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-2/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-10-02- Bump package to 1.0.1nb1adrianp1-1/+10
- Move to options.mk framework to support SNMP, OpenLDAP, PostgreSQL and mySQL modules - Add patches/patch-aj and patches/patch-ak for OpenLDAP and PostgreSQL builds - Add extra PLIST's for OpenLDAP, PostgreSQL and mySQL modules
2004-09-23- Update freeradius to 1.0.1adrianp1-20/+64
- Fix builds on 1.6 and 2.0_BETA - ok'ed wiz@ - Addresses PR 26987 opened by Rui Paulo, thanks. - Fix startup script using the wrong options - Lots of changes including - Denial-of-Service Security Fix. - Make IPv6 support work better. - Many, many minor bug fixes and feature enhancements. - EAP-module feature improvements.
2004-09-17Assign maintainership to tech-pkg@, requested by David Ferlierxtraeme1-2/+2
in private email.
2004-05-08Convert to buildlink3.snj1-5/+5
2004-01-30Update FreeRadius to 0.9.3david1-3/+4
2004-01-24replace deprecated USE_GMAKE with USE_GNU_TOOLS+=make.grant1-2/+2
2003-11-03Perform the pthread test the pkgsrc way: using info fromcube1-12/+9
pthread.buildlink2.mk, and certainly not using output of 'uname'.
2003-07-30Convert to the bsd.pkg.install.mk framework:jmmv1-19/+17
- Install all configuration files under the examples directory. - Copy configuration files to PKG_SYSCONFDIR using CONF_FILES. - Honour PKG_SYSCONFDIR. - Use OWN_DIRS to handle the /var/run/radiusd status directory. - Use RCD_SCRIPTS to handle the rc.d script automatically. As a result, bump PKGREVISION to 3.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-03 12:24:26 +0000