| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
Ensures the user/group are correctly substituted into the config file so that
the daemon can run as root then drop privileges appropriately, as well as
creating the rundir as necessary.
Submitted by Jorge Schrauwen in NetBSD/pkgsrc#58. Bump PKGREVISION.
|
|
Based on a PR from @coyhile
(https://github.com/joyent/pkgsrc/issues/18). Splits modules with
external dependencies into separate packages.
The 1.1.x branch was EOL'd in 2008. No upgrade guide from 1.1.x to 3.0.x
seem to exist.
Summary of improvements in 3.x:
- Moved configuration entries in radiusd.conf to make more sense.
- Added the "integer64" and "ipv4prefix" data types.
- Added RADIUS over TLS (i.e. RadSec). See raddb/sites-available/tls.
- Updated internal API to support new attributes and formats.
- Added code to send SNMP Traps. See raddb/trigger.conf.
- Added preliminary support for Apple's Grand Central Dispatch.
- Added provisions for raddb/dictionary.local, for local changes See
raddb/dictionary for more details.
- Added packet/s tracking. See max_pps in the "listen" section.
- The %{} expansions and "unlang" conditions are now parsed at server
start. Descriptive errors are produced for syntax and format errors.
- Casting is now supported for "unlang" comparisons. See "man unlang"
e.g. <ipaddr>127.0.0.1 == Framed-IP-Address.
- Direct comparison of attribute references is now supported e.g. &Foo
== &Bar. This avoids stringification of the attributes.
- Direct assignment of attributes is now supported e.g. Foo := &Bar. It
also works for "octets" data types.
- Comparisons of IPv4 and IPv6 prefixes are now supported The "<"
operator means "within the prefix" for comparisons.
- New sha1 xlat expansion (thanks to Alan Buxey).
- Colourised log messages when logging to stdout. Look for yellow
warnings and red errors. Doing this will save you a LOT of grief.
- If the PCRE library is available, use it (insted of the POSIX
functions) to process regular expressions (thanks to Phil Mayers).
- -xv now displays all the features the server was built with, and the
versions of the core libraries (libtalloc, libssl).
Summary of improvements in 2.x:
- simple policy language (see "man unlang")
- virtual servers ("raddb/sites-available/README")
- IPv6 support
- better proxy support ("raddb/proxy.conf")
- More EAP types
- Debugging output should be <em>much</em> easier to understand
- VMPS support
- More modules have been moved to "stable" status (python, etc.)
- SQL configuration has been cleaned up (see "raddb/sql/*")
- limited support for HUP. (The configuration for some modules is
re-loaded on HUP. Nothing else is reloaded.)
- check configuration and exit ("radiusd -C")
- Server core is now event based (simpler, more powerful)
|
|
bump to nb2
|
|
Fix the rc.d script: add rcvar definition and no need to source /etc/rc.subr
twice.
Bump PKGREVISION to 7.
|
|
root:wheel in the startup script.
- Again thanks to kbrand (at) dplanet.ch for the suggestion.
|
|
reboot.
- Issue spotted and patch sent to me from kbrand (at) dplanet.ch, thanks.
- Bumped PKGREVISION
|
|
- Fix builds on 1.6 and 2.0_BETA
- ok'ed wiz@
- Addresses PR 26987 opened by Rui Paulo, thanks.
- Fix startup script using the wrong options
- Lots of changes including
- Denial-of-Service Security Fix.
- Make IPv6 support work better.
- Many, many minor bug fixes and feature enhancements.
- EAP-module feature improvements.
|
|
- Install all configuration files under the examples directory.
- Copy configuration files to PKG_SYSCONFDIR using CONF_FILES.
- Honour PKG_SYSCONFDIR.
- Use OWN_DIRS to handle the /var/run/radiusd status directory.
- Use RCD_SCRIPTS to handle the rc.d script automatically.
As a result, bump PKGREVISION to 3.
|
|
variables.
Added CONLICTS line to show conflict with radius-cistern. I will also add
a CONFLICTS line to radius-cistern although I will send a PR to have this
situation fixed so that both can coexist.
|
|
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
|
