2014-12-10 15:10:07 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 3 14:22:03 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 3.0.5
|
|
|
|
|
Some of the new features:
|
|
|
|
|
* Allow LDAP to specify arbitrary attributes for dynamic
|
|
|
|
|
clients.
|
|
|
|
|
* Allow one level of backslashes (finally). See radiusd.conf,
|
|
|
|
|
"correct_escapes" setting.
|
|
|
|
|
* When supported by OpenSSL, allow TLS 1.1 and TLS 1.2
|
|
|
|
|
in EAP methods.
|
|
|
|
|
* Allow multiple new connections to be spawned simultaneously
|
|
|
|
|
in the connection pool, to cope with spikes in traffic.
|
|
|
|
|
* Use kqueue on systems which support it. This allows for
|
|
|
|
|
better scaling when using many sockets.
|
|
|
|
|
* Home server "response_window" can now take fractions of a
|
|
|
|
|
second. See proxy.conf.
|
|
|
|
|
* radmin now supports "show module status", as thee counterpart
|
|
|
|
|
to "set module status"
|
|
|
|
|
* "ipaddr" will now use v6 if no v4 address is present. You should
|
|
|
|
|
use "ipv4addr" or "ipv6addr" to force v4/v6 addresses.
|
|
|
|
|
* "client" sections will allow "ipaddr = 192.192.0/24". The old
|
|
|
|
|
"netmask" is still accepted, but the new format is preferred.
|
|
|
|
|
* Allow custom HTTP headers to be set for rlm_rest requests using
|
|
|
|
|
control:REST-HTTP-Header (attributes consumed after use).
|
|
|
|
|
* Extend format of %{rest:} expansion to allow HTTP method and POST
|
|
|
|
|
data to be specified
|
|
|
|
|
and urlquoting.
|
|
|
|
|
* Add support for aliases in rlm_ldap.
|
|
|
|
|
* Add support for connection pool sharing to all modules that use
|
|
|
|
|
the connection pool (pool = <instance>).
|
|
|
|
|
* "tls" sections now have a "psk_query" configuration item, for dynamic
|
|
|
|
|
queries to discover a key from a PSK identity.
|
|
|
|
|
* Preliminary support for EAP channel bindings.
|
|
|
|
|
* Foundational work for dynamic home servers. They do not yet work,
|
|
|
|
|
but this is now only a matter of updating the "realm" module in
|
|
|
|
|
a future release.
|
|
|
|
|
* Support &attr[*] syntax to copy all instances of an attribute when
|
|
|
|
|
used with the += operator in an update section. May be qualified with
|
|
|
|
|
a tag.
|
|
|
|
|
* The logintime and expiration modules can now be listed in the
|
|
|
|
|
post-auth section. This makes some configurations simpler.
|
|
|
|
|
* rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get
|
|
|
|
|
Framed-IPv6-Prefix returned. The SQL queries have NOT been updated.
|
|
|
|
|
Please submit patches.
|
|
|
|
|
and numerous; bugfixes
|
|
|
|
|
- remove gpg-offline
|
|
|
|
|
- create /run/radiusd after install
|
|
|
|
|
- drop freeradius-server-opensslversion.patch (upstream)
|
|
|
|
|
|
2014-12-01 12:50:00 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 1 10:52:28 UTC 2014 - meissner@suse.com
|
|
|
|
|
|
|
|
|
|
- freeradius-server-opensslversion.patch: do not check the minor
|
|
|
|
|
version of openssl, minor versions are supposed to be compatible.
|
|
|
|
|
bnc#906682
|
|
|
|
|
|
2014-08-04 11:27:38 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Aug 3 18:31:49 UTC 2014 - sfalken@opensuse.org
|
|
|
|
|
|
|
|
|
|
- added patch to changelog to fix factory-auto failure (Req #242825)
|
|
|
|
|
added:
|
|
|
|
|
freeradius-server-var_run.patch
|
|
|
|
|
|
2014-07-29 11:39:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 28 12:28:44 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- fixed SUSE spelling in a filename (bnc#889034)
|
|
|
|
|
* don't install suse/README.SuSE
|
|
|
|
|
- remove old tarball and signature file
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 22 12:17:52 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- spec run through spec-cleaner
|
|
|
|
|
- don't install files to /var/run
|
|
|
|
|
|
2014-05-19 16:03:12 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri May 16 13:31:41 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 3.0.3
|
|
|
|
|
Many bugfixes
|
|
|
|
|
Feature improvements
|
|
|
|
|
* Everything now builds with no warnings from the C compiler,
|
|
|
|
|
clang static analyzer, or cppcheck.
|
|
|
|
|
* rlm_ldap now supports defining the LDAP attribute name via
|
|
|
|
|
backticked expansion (i.e. shell command) in
|
|
|
|
|
RADIUS <-> LDAP mappings.
|
|
|
|
|
* rlm_ldap now supports older style generic attributes.
|
|
|
|
|
* dynamic expansions (e.g. "%{expr:1 + 2}" are now parsed
|
|
|
|
|
when the server starts. Syntax errors in the strings
|
|
|
|
|
are caught, and a descriptive error is printed.
|
|
|
|
|
* Static regular expressions (e.g. /a*b/) are now parsed
|
|
|
|
|
when the server starts. Syntax errors in the strings
|
|
|
|
|
are caught, and a descriptive error is printed.
|
|
|
|
|
* dynamic expansions are cached after being parsed. They are
|
|
|
|
|
no longer re-parsed at run-time for every request.
|
|
|
|
|
* regular expressions are now parsed and cached when the server
|
|
|
|
|
starts.
|
|
|
|
|
* Added the %{rest:} expansion to rlm_rest, which will send
|
|
|
|
|
a GET request to the URL passed as the format string.
|
|
|
|
|
Any body text will be written to the expansion buffer.
|
|
|
|
|
* rlm_rest now available as a debian package.
|
|
|
|
|
* When an 'if' condition statically evaluates to true/false,
|
|
|
|
|
unlang does more static optimization. For examples, see
|
|
|
|
|
src/tests/keywords/if-skip
|
|
|
|
|
* All modules are marked as safe for '-C', which lets the
|
|
|
|
|
dynamic expansion checks work in more situations.
|
|
|
|
|
* Added 'none' and 'custom' rlm_rest body types. 'custom'
|
|
|
|
|
allows sending of arbitrary expanded text and content-type
|
|
|
|
|
headers.
|
|
|
|
|
* Added "config" section to Perl. See mods-available/perl
|
|
|
|
|
* Added '%v' which expands to the server version - Patch
|
|
|
|
|
from Alan Buxey.
|
|
|
|
|
* more mis-matched casts are caught in "if" conditions,
|
|
|
|
|
and descriptive errors are printed.
|
|
|
|
|
* Support basic response validation in radclient. This allows
|
|
|
|
|
administrators to write local test cases for their
|
|
|
|
|
site-specific configurations.
|
|
|
|
|
* Removed radconf2xml and radmin "show client config" and
|
|
|
|
|
"show home_server config".
|
|
|
|
|
* Forbid running with vulnerable versions of OpenSSL.
|
|
|
|
|
See "allow_vulnerable_openssl" in the "security"
|
|
|
|
|
subsection of "radiusd.conf"
|
|
|
|
|
* Catch underlying "heartbleed" problem, so that nothing bad
|
|
|
|
|
happens even when using a vulnerable version of OpenSSL.
|
|
|
|
|
* Add locking API for sql_null, linelog, and detail modules,
|
|
|
|
|
which should improve performance and work around issues
|
|
|
|
|
on platforms with bad file locking.
|
|
|
|
|
* Allow DHCP NAKs to be delayed, via setting
|
|
|
|
|
reply:FreeRADIUS-Response-Delay = 1
|
|
|
|
|
* Allow tag and array references anywhere attributes
|
|
|
|
|
are allowed in "unlang".
|
|
|
|
|
* many enhancements to radsniff, including output
|
|
|
|
|
to collectd, ipv6 support and packet loss statistics.
|
|
|
|
|
* Many dictionary updates (ZTE, Brocade, Motorola).
|
|
|
|
|
* rlm_yubikey now automatically splits passwords from OTP
|
|
|
|
|
strings.
|
|
|
|
|
* The detail file reader is now threaded by default.
|
|
|
|
|
This should improve performance reading the files.
|
|
|
|
|
- dropped freeradius-server-CVE-2014-2015.patch (upstream)
|
|
|
|
|
|
2014-03-03 09:59:27 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 28 09:04:08 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- fix for CVE-2014-2015 (bnc#864576)
|
|
|
|
|
* denial of service in rlm_pap hash processing
|
|
|
|
|
* added freeradius-server-CVE-2014-2015.patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 29 13:53:30 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- remove the old 3.0.0 sources
|
|
|
|
|
|
2014-01-28 09:16:51 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jan 25 14:44:31 UTC 2014 - mardnh@gmx.de
|
|
|
|
|
|
|
|
|
|
- update to 3.0.1
|
|
|
|
|
Feature improvements
|
|
|
|
|
* Add "timeout" to exec, and "ntlm_auth_timeout" to mschap.
|
|
|
|
|
So that run-away child processes are caught earlier.
|
|
|
|
|
* Allow TLS clients to use "proto = tls", in which case
|
|
|
|
|
TLS is required. The shared secret is then set to "radsec".
|
|
|
|
|
* More documentation in the tls virtual server.
|
|
|
|
|
* Add "date" module for date formatting.
|
|
|
|
|
See raddb/mods-available/date.
|
|
|
|
|
* Added unit test suite for internal server functionality
|
|
|
|
|
* When loading "update" sections, check if the RHS is a literal
|
|
|
|
|
value. If so, syntax check it immediately.
|
|
|
|
|
* Update LDAP module documentation and functionality.
|
|
|
|
|
The generic attribute can now update lists.
|
|
|
|
|
* Updated dictionary.extreme.
|
|
|
|
|
* Update sqlippool to do clears as a separate transaction,
|
|
|
|
|
and at most once per second. This should help MySQL.
|
|
|
|
|
* Respect control:Response-Packet-Type for all types of
|
|
|
|
|
requests.
|
|
|
|
|
* Add support for SSL encryption to the MySQL driver.
|
|
|
|
|
* Allow arbitrary connection parameters to be used with the
|
|
|
|
|
PostgreSQL driver.
|
|
|
|
|
* Changes to the OpenLDAP schema to fully expose functionality
|
|
|
|
|
of the new LDAP module.
|
|
|
|
|
* Update debian packaging to include a freeradius-config
|
|
|
|
|
package. This package may be provided as a site local
|
|
|
|
|
package to avoid fighting with the preinstalled config
|
|
|
|
|
files.
|
|
|
|
|
Bug fixes
|
|
|
|
|
* Use correct field for ARP setting in DHCP.
|
|
|
|
|
* Fix crash on debug condition (#454).
|
|
|
|
|
* Fix a number of minor issues caught by the clang
|
|
|
|
|
analyzer.
|
|
|
|
|
* Set WARNING messages to yellow instead of normal text.
|
|
|
|
|
* Correct debug colorise logic. Patch from Phil Mayers.
|
|
|
|
|
* Encode attributes of type "ethernet". No one uses them,
|
|
|
|
|
but it makes sense.
|
|
|
|
|
* Work around regex initialization issues.
|
|
|
|
|
* Fix build when linking against OpenSSL.
|
|
|
|
|
* Print IDs as positive numbers, which helps for large DHCP
|
|
|
|
|
XIDs.
|
|
|
|
|
* Fix issue with sql_ippool.
|
|
|
|
|
* sqlcounter now uses 64-bit counters, to deal with 4G overflow.
|
|
|
|
|
* Fix issues with DHCP subsystem.
|
|
|
|
|
* Don't build / install disabled modules, or their config
|
|
|
|
|
files.
|
|
|
|
|
* Fix build for OSX Mavericks, which hid the header files
|
|
|
|
|
in a magical place.
|
|
|
|
|
* Fix LEAP buffer issue. You should still avoid LEAP.
|
|
|
|
|
* Mark "unknown" WiMAX attributes as being WiMAX.
|
|
|
|
|
* Fix typo in packet decoder for fragmented extended attrs
|
|
|
|
|
* RPM spec fixes.
|
|
|
|
|
* Fix rlm_perl build issues when not using threads.
|
|
|
|
|
* Enable %{Response-Packet-Type} again.
|
|
|
|
|
* Update configuration file parser to handle "bool"
|
|
|
|
|
consistently.
|
|
|
|
|
* Update declarations of global boolean variables to use
|
|
|
|
|
"bool" consistently. This fixes an issue where some
|
|
|
|
|
modules were instantiated in "config check" mode and
|
|
|
|
|
did not work correctly.
|
|
|
|
|
* Make more messages debug instead of info, to avoid
|
|
|
|
|
polluting the logs with messages that can't be fixed.
|
|
|
|
|
* Set operator in internal unlang code to suppress spurious
|
|
|
|
|
warning messages.
|
|
|
|
|
* Fix debian packaging.
|
|
|
|
|
* Added "status" to Debian init script.
|
|
|
|
|
* Fix "update outer.request" to update the outer request.
|
|
|
|
|
* Don't print TLS debugging messages when not in debug mode.
|
|
|
|
|
* Correctly manage counters for "limit" sections of TCP / TLS
|
|
|
|
|
"listen" sockets.
|
|
|
|
|
* Fix libldap debug output.
|
|
|
|
|
* Fix rlm_ldap tls functionality.
|
|
|
|
|
* Initialise OpenSSL globals early to avoid issues with the
|
|
|
|
|
PostgreSQL library.
|
|
|
|
|
* Fix typo in sqlcounter expansion code. Fixes #463
|
|
|
|
|
* Overwrite previous instances of SQL-User-Name when adding
|
|
|
|
|
it to the request.
|
|
|
|
|
* Work around bugs in both MIT and heimdal versions of
|
|
|
|
|
krb5_copy_context(), which caused segfaults in
|
|
|
|
|
multithreaded mode.
|
|
|
|
|
* Provide meaningful error messages if Heimdal krb5 is used.
|
|
|
|
|
* Fix attribute supression in rlm_detail.
|
|
|
|
|
* Exit with error code if child fails to complete server
|
|
|
|
|
initialisation after forking. This allows init scripts to
|
|
|
|
|
correctly report whether the server started ok.
|
|
|
|
|
|
2013-10-22 06:03:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 21 12:06:19 UTC 2013 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- don't build with experimental modules
|
|
|
|
|
- fix packaging bugs:
|
|
|
|
|
* install init scripts only on <= 11.4
|
|
|
|
|
* install systemd unit
|
|
|
|
|
* add %defattr for submodules
|
|
|
|
|
|
2013-10-16 20:25:42 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Oct 15 15:15:24 UTC 2013 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 3.0.0
|
|
|
|
|
* new feature release
|
|
|
|
|
* see /usr/share/doc/packages/freeradius-server/ChangeLog
|
|
|
|
|
for complete list of changes in this release
|
|
|
|
|
* documentation for upgrading from 2.x is in /etc/raddb/README.rst
|
|
|
|
|
- drop oracle support (wasn't built anyway)
|
|
|
|
|
- dropped patches (obsolete):
|
|
|
|
|
* freeradius-server-2.1.6-codecleanup.patch
|
|
|
|
|
* freeradius-server-2.1.6-dialup_admin.patch
|
|
|
|
|
* freeradius-server-2.1.1-edirectory.patch
|
|
|
|
|
- added systemd service unit
|
|
|
|
|
* radiusd.service
|
|
|
|
|
- added systemd-tmpfile for /var/run/radiusd
|
|
|
|
|
* freeradius-tmpfiles.conf
|
|
|
|
|
- added gpg-offline verification
|
|
|
|
|
* freeradius-server.keyring
|
|
|
|
|
|
2013-09-05 17:22:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 5 17:22:43 CEST 2013 - mls@suse.de
|
|
|
|
|
|
|
|
|
|
- add libperl_requires, as we link against libperl and thus
|
|
|
|
|
need a specific version of perl
|
|
|
|
|
|
2012-10-01 16:32:33 +02:00
|
|
|
-------------------------------------------------------------------
|
2013-03-15 08:35:06 +01:00
|
|
|
Thu Mar 14 15:17:37 UTC 2013 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- fixed a bug in the logrotate script (bnc#797292)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2012-10-01 16:32:33 +02:00
|
|
|
Mon Oct 1 11:34:31 UTC 2012 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- files in sites-available/ are now %config(noreplace) [bnc#781756]
|
|
|
|
|
|
2012-09-11 11:31:52 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Sep 10 14:20:57 UTC 2012 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 2.2.0
|
|
|
|
|
- see /usr/share/doc/packages/freeradius-server/ChangeLog
|
|
|
|
|
for complete list of changes in this release
|
|
|
|
|
- fixes CVE-2012-3547 (bnc#777834)
|
|
|
|
|
- dropped freeradius-server-2.1.6-overflow.patch (upstream)
|
|
|
|
|
- dropped freeradius-server-sha1-default.patch (upstream)
|
|
|
|
|
- refreshed freeradius-server-fix-cert-bootstrap.patch
|
|
|
|
|
|
2012-06-03 12:41:40 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 28 11:47:32 UTC 2012 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- Use the new 'su' logrotate option (bnc#677335)
|
|
|
|
|
|
2011-10-19 16:15:30 +02:00
|
|
|
-------------------------------------------------------------------
|
2012-05-17 00:31:35 +02:00
|
|
|
Mon May 14 21:47:20 UTC 2012 - joop.boonen@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Enable the same CFLAGS as for other hardware
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2011-10-19 16:15:30 +02:00
|
|
|
Wed Oct 19 13:55:27 UTC 2011 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- update to 2.1.12
|
|
|
|
|
Feature improvements
|
|
|
|
|
* Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
|
|
|
|
|
dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
|
|
|
|
|
* Added support for PCRE from Phil Mayers
|
|
|
|
|
* Configurable file permission in rlm_linelog
|
|
|
|
|
* Added "relaxed" option to rlm_attr_filter. This copies attributes
|
|
|
|
|
if at least one match occurred.
|
|
|
|
|
* Added documentation on dynamic clients.
|
|
|
|
|
See raddb/modules/dynamic_clients.
|
|
|
|
|
* Added support for elliptical curve cryptography.
|
|
|
|
|
See ecdh_curve in raddb/eap.conf.
|
|
|
|
|
* Added support for 802.1X MIBs in checkrad
|
|
|
|
|
* Added support for %{rand:...}, which generates a uniformly
|
|
|
|
|
distributed number between 0 and the number you specify.
|
|
|
|
|
* Created "man" pages for all installed commands, and documented
|
|
|
|
|
options for all commands. Patch from John Dennis.
|
|
|
|
|
* Allow radsniff to decode encrypted VSAs and CoA packets.
|
|
|
|
|
Patch from Bjorn Mork.
|
|
|
|
|
* Always send Message-Authenticator in radtest. Patch from John Dennis.
|
|
|
|
|
radclient continues to be more flexible.
|
|
|
|
|
* Updated Oracle schema and queries
|
|
|
|
|
* Added SecurID module. See src/modules/rlm_securid/README
|
|
|
|
|
Bug fixes
|
|
|
|
|
* Fix memory leak in rlm_detail
|
|
|
|
|
* Fix "failed to insert event"
|
|
|
|
|
* Allow virtual servers to be reloaded on HUP.
|
|
|
|
|
It no longer complains about duplicate virtual servers.
|
|
|
|
|
* Fix %{string:...} expansion
|
|
|
|
|
* Fix "server closed socket" loop in radmin
|
|
|
|
|
* Set ownership of control socket when starting up
|
|
|
|
|
* Always allow root to connect to control socket, even if
|
|
|
|
|
"uid" is set. They're root. They can already do anything.
|
|
|
|
|
* Save all attributes in Access-Accept when proxying inner-tunnel
|
|
|
|
|
EAP-MSCHAPv2
|
|
|
|
|
* Fixes for DHCP relaying.
|
|
|
|
|
* Check certificate validity when using OCSP.
|
|
|
|
|
* Updated Oracle "configure" script
|
|
|
|
|
* Fixed typos in dictionary.alvarion
|
|
|
|
|
* WARNING on potential proxy loop.
|
|
|
|
|
* Be more aggressive about clearing old requests from the
|
|
|
|
|
internal queue
|
|
|
|
|
* Don't open network sockets when using -C
|
|
|
|
|
- freeradius-server-snprintf-overflow.patch merged in upstream
|
|
|
|
|
|
2011-10-03 13:34:29 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 27 13:05:59 UTC 2011 - vcizek@suse.com
|
|
|
|
|
|
|
|
|
|
- fixed interaction with eDirectory (bnc#720620)
|
|
|
|
|
|
2011-06-24 13:29:48 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 24 09:18:52 UTC 2011 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- update to 2.1.11
|
|
|
|
|
- see /usr/share/doc/packages/freeradius-server/ChangeLog
|
|
|
|
|
for complete list of changes in this release
|
|
|
|
|
- add freeradius-server-snprintf-overflow.patch
|
|
|
|
|
- use spec-cleaner
|
|
|
|
|
|
2011-05-26 17:24:56 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue May 24 19:18:44 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
|
|
- Supress timestamps in binaries, breaks build-compare.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Oct 4 10:54:23 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- update to 2.1.10
|
|
|
|
|
- see /usr/share/doc/packages/freeradius-server/ChangeLog
|
|
|
|
|
for complete list of changes in this release
|
|
|
|
|
- drop freeradius-server-2.1.6-edir-64bit.patch (fixed upstream)
|
|
|
|
|
|
2010-09-17 13:04:14 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Sep 16 14:22:15 CEST 2010 - pgajdos@suse.cz
|
|
|
|
|
|
|
|
|
|
- radiusd reload after logrotate [bnc#634445]
|
|
|
|
|
|
2010-06-21 21:27:27 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 21 19:24:08 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- update to 2.1.9 (bnc#615699)
|
|
|
|
|
- bugfix release, for list of changes please see
|
|
|
|
|
/usr/share/doc/packages/freeradius-server/ChangeLog
|
|
|
|
|
|
2010-05-03 23:30:26 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 3 13:50:08 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- add freeradius-server-initscript-pidfile.patch
|
|
|
|
|
- handle /var/run on tmpfs
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Mar 21 08:43:58 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- specfile cleanup
|
|
|
|
|
|
2010-03-11 01:38:48 +01:00
|
|
|
-------------------------------------------------------------------
|
2010-03-11 15:03:14 +01:00
|
|
|
Thu Mar 11 12:44:18 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- drop freeradius-server-2.1.6-ltdl.patch - not needed anymore
|
|
|
|
|
- clean up specfile
|
|
|
|
|
- remove bind-libs, zlib-devel from BuildRequires - not needed
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2010-03-11 01:38:48 +01:00
|
|
|
Tue Mar 9 15:01:46 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- update to 2.1.8
|
|
|
|
|
- for full list of changes, please see
|
|
|
|
|
/usr/share/doc/packages/freeradius-server/ChangeLog
|
|
|
|
|
- drop freeradius-server-no-default-case.patch: fixed upstream
|
|
|
|
|
|
2009-12-18 14:50:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 17 15:50:19 UTC 2009 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- update to 2.1.7
|
|
|
|
|
- for full list of changes, please see
|
|
|
|
|
/usr/share/doc/packages/freeradius-server/ChangeLog
|
|
|
|
|
|
2009-10-22 13:30:14 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 22 09:05:35 UTC 2009 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- freeradius-server-no-default-case.patch (bnc#527742)
|
|
|
|
|
|
2009-10-21 00:16:10 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 15 09:05:18 UTC 2009 - puzel@novell.com
|
|
|
|
|
|
|
|
|
|
- freeradius-server-sha1-default.patch (bnc#546042)
|
|
|
|
|
- freeradius-server-fix-cert-bootstrap.patch (bnc#546041)
|
|
|
|
|
|
2009-06-20 05:50:06 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jun 19 10:35:46 CEST 2009 - coolo@novell.com
|
|
|
|
|
|
|
|
|
|
- disable as-needed for this package as it fails to build with it
|
|
|
|
|
|
2009-06-02 17:00:18 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jun 2 15:50:59 CEST 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.1.6
|
|
|
|
|
o Feature improvements
|
|
|
|
|
* radclient exits with 0 on successful (accept / ack), and 1
|
|
|
|
|
otherwise (no response / reject)
|
|
|
|
|
* Added support for %{sql:UPDATE ..}, and insert/delete
|
|
|
|
|
Patch from Arran Cudbard-Bell
|
|
|
|
|
* Added sample "do not respond" policy. See raddb/policy.conf
|
|
|
|
|
and raddb/sites-available/do_not_respond
|
|
|
|
|
* Cleanups to Suse spec file from Norbert Wegener
|
|
|
|
|
* New VSAs for Juniper from Bjorn Mork
|
|
|
|
|
* Include more RFC dictionaries in the default install
|
|
|
|
|
* More documentation for the WiMAX module
|
|
|
|
|
* Added "chase_referrals" and "rebind" configuration to rlm_ldap.
|
|
|
|
|
This helps with Active Directory. See raddb/modules/ldap
|
|
|
|
|
* Don't load pre/post-proxy if proxying is disabled.
|
|
|
|
|
* Added %{md5:...}, which returns MD5 hash in hex.
|
|
|
|
|
* Added configurable "retry_interval" and "poll_interval"
|
|
|
|
|
for "detail" listeners.
|
|
|
|
|
* Added "delete_mppe_keys" configuration option to rlm_wimax.
|
|
|
|
|
Apparently some WiMAX clients misbehave when they see those keys.
|
|
|
|
|
* Added experimental rlm_ruby from
|
|
|
|
|
http://github.com/Antti/freeradius-server/tree/master
|
|
|
|
|
* Add Tunnel attributes to ldap.attrmap
|
|
|
|
|
* Enable virtual servers to be reloaded on HUP. For now, only
|
|
|
|
|
the "authorize", "authenticate", etc. processing sections are
|
|
|
|
|
reloaded. Clients and "listen" sections are NOT reloaded.
|
|
|
|
|
* Updated "radwatch" script to be more robust. See scripts/radwatch
|
|
|
|
|
* Added certificate compatibility notes in raddb/certs/README,
|
|
|
|
|
for compatibility with different operating systems. (i.e. Windows)
|
|
|
|
|
o Bug fixes
|
|
|
|
|
* Minor changes to allow building without VQP.
|
|
|
|
|
* Minor fixes from John Center
|
|
|
|
|
* Fixed raddebug example
|
|
|
|
|
* Don't crash when deleting attributes via unlang
|
|
|
|
|
* Be friendlier to very fast clients
|
|
|
|
|
* Updated the "detail" listener so that it only polls once,
|
|
|
|
|
and not many times in a row, leaking memory each time...
|
|
|
|
|
* Update comparison for Packet-Src-IP-Address (etc.) so that
|
|
|
|
|
the operators other than '==' work.
|
|
|
|
|
* Did autoconf magic to work around weird libtool bug
|
|
|
|
|
* Make rlm_perl keep tags for tagged attributes in more situations
|
|
|
|
|
* Update UID checking for radmin
|
|
|
|
|
* Added "include_length" field for TTLS. It's needed for RFC
|
|
|
|
|
compliance, but not (apparently) for interoperability.
|
|
|
|
|
- FreeRADIUS 2.1.5
|
|
|
|
|
* Release number skipped due to procedural issues.
|
|
|
|
|
- FreeRADIUS 2.1.4
|
|
|
|
|
o Feature improvements
|
|
|
|
|
* Permit multiple "-e" in radmin.
|
|
|
|
|
* Add support for originating CoA-Request and Disconnect-Request.
|
|
|
|
|
See raddb/sites-available/originate-coa.
|
|
|
|
|
* Added "lifetime" and "max_queries" to raddb/sql.conf.
|
|
|
|
|
This helps address the problem of hung SQL sockets.
|
|
|
|
|
* Allow packets to be injected via radmin. See "inject help"
|
|
|
|
|
in radmin.
|
|
|
|
|
* Answer VMPS reconfirmation request. Patch from Hermann Lauer.
|
|
|
|
|
* Sample logrotate script in scripts/logrotate.freeradius
|
|
|
|
|
* Add configurable poll interval for "detail" listeners
|
|
|
|
|
* New "raddebug" command. This prints debugging information from
|
|
|
|
|
a running server. See "man raddebug.
|
|
|
|
|
* Add "require_message_authenticator" configuration to home_server
|
|
|
|
|
configuration. This makes the server add Message-Authenticator
|
|
|
|
|
to all outgoing Access-Request packets.
|
|
|
|
|
* Added smsotp module, as contributed by Siemens.
|
|
|
|
|
* Enabled the administration socket in the default install.
|
|
|
|
|
See raddb/sites-available/control-socket, and "man radmin"
|
|
|
|
|
* Handle duplicate clients, such as with replicated or
|
|
|
|
|
load-balanced SQL servers and "readclients = yes"
|
|
|
|
|
o Bug fixes
|
|
|
|
|
* Clean up control sockets when they are closed, so that we don't
|
|
|
|
|
leak memory.
|
|
|
|
|
* Define SUN_LEN for systems that don't have it.
|
|
|
|
|
* Correct some boundary conditions in the conditional checker ("if")
|
|
|
|
|
in "unlang". Bug noted by Arran Cudbard-Bell.
|
|
|
|
|
* Work around minor building issues in gmake. This should only
|
|
|
|
|
have affected developers.
|
|
|
|
|
* Change how we manage unprivileged user/group, so that we do not
|
|
|
|
|
create control sockets owned by root.
|
|
|
|
|
* Fixed more minor issues found by Coverity.
|
|
|
|
|
* Allow raddb/certs/bootstrap to run when there is no "make"
|
|
|
|
|
command installed.
|
|
|
|
|
* In radiusd.conf, run_dir depends on the name of the program,
|
|
|
|
|
and isn't hard-coded to "..../radiusd"
|
|
|
|
|
* Check for EOF in more places in the "detail" file reader.
|
|
|
|
|
* Added Freeswitch dictionary.
|
|
|
|
|
* Chop ethernet frames in VMPS, rather than droppping packets.
|
|
|
|
|
* Fix EAP-TLS bug. Patch from Arnaud Ebalard
|
|
|
|
|
* Don't lose string for regex-compares in the "users" file.
|
|
|
|
|
* Expose more functions in rlm_sql to rlm_sqlippool, which
|
|
|
|
|
helps on systems where RTLD_GLOBAL is off.
|
|
|
|
|
* Fix typos in MySQL schemas for ippools.
|
|
|
|
|
* Remove macro that was causing build issues on some platforms.
|
|
|
|
|
* Fixed issues with dead home servers. Bug noted by Chris Moules.
|
|
|
|
|
* Fixed "access after free" with some dynamic clients.
|
|
|
|
|
|
2009-02-10 18:49:14 +01:00
|
|
|
-------------------------------------------------------------------
|
2009-04-07 12:55:17 +02:00
|
|
|
Thu Mar 26 15:58:44 CET 2009 - crrodriguez@suse.de
|
|
|
|
|
|
|
|
|
|
- do not ship static modules
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2009-02-10 18:49:14 +01:00
|
|
|
Tue Feb 10 10:38:27 CET 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.1.3
|
|
|
|
|
o Feature Improvements
|
|
|
|
|
* Allow running with user=radiusd and binding to secure sockets.
|
|
|
|
|
* Start sending Status-Server "are you alive" messages earlier,
|
|
|
|
|
which helps with proxying multiple realms to a home server.
|
|
|
|
|
* Removed thread pool code from rlm_perl. It's not necessary.
|
|
|
|
|
* Added example Perl configuration to raddb/modules/perl
|
|
|
|
|
* Force OpenSSL to support certificates with SHA256. This seems
|
|
|
|
|
to be necessary for WiMAX certs.
|
|
|
|
|
o Bug Fixes
|
|
|
|
|
* Fix Debian patch to allow it to build.
|
|
|
|
|
* Fix potential NULL dereference in debugging mode on certain
|
|
|
|
|
platforms for TTLS and PEAP inner tunnels.
|
|
|
|
|
* Fix uninitialized memory in handling of vendor definitions
|
|
|
|
|
* Fix parsing of quoted (but non-string) attributes in
|
|
|
|
|
the users< file.
|
|
|
|
|
* Initialize unknown NAS IP to 255.255.255.255, rather than 0.0.0.0
|
|
|
|
|
* use SUN_LEN in control socket, to avoid truncation on some platforms.
|
|
|
|
|
* Correct internal handling of debug condition to prevent it
|
|
|
|
|
from being over-written.
|
|
|
|
|
* Check return code of regcomp in unlang, so that invalid regular
|
|
|
|
|
expressions are caught rather than mishandled.
|
|
|
|
|
* Make rlm_sql use <ltdl.h>. Addresses bug #610.
|
|
|
|
|
* Document list "type = status" better. Closes bug #580.
|
|
|
|
|
* Set "default days" for certificates, because OpenSSL won't do it.
|
|
|
|
|
This closes bug #615.
|
|
|
|
|
* Reference correct list in example raddb/modules/ldap. Closes #596.
|
|
|
|
|
* Increase default schema size for Acct-Session-Id to 64. Closes #540.
|
|
|
|
|
* Fix use of temporary files in dialup-admin. Closes #605
|
|
|
|
|
and addresses CVE-2008-4474.
|
|
|
|
|
* Addressed a number of minor issues found by Coverity.
|
|
|
|
|
* Added DHCP option 150 to the dictionary. Closes #618.
|
|
|
|
|
|
|
|
|
|
- removed CVE-2008-4474.patch (included in update)
|
|
|
|
|
|
|
|
|
|
- fixed buffer overflow (overflow.patch)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Feb 10 10:19:32 CET 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- fixed eDirectory bug on 64bit architectures (edir-64bit.patch)
|
|
|
|
|
[bnc#474006]
|
|
|
|
|
|
2009-02-06 23:05:47 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 6 15:19:04 CET 2009 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- moved manpages from section 1 to utils subpackage [bnc#469682]
|
|
|
|
|
|
2009-01-09 16:39:51 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 9 16:04:22 CET 2009 - prusnak@suse.cz
|
|
|
|
|
|
2009-01-09 18:25:30 +01:00
|
|
|
- fixed bootstraping of certificates in %post [bnc#461998]
|
2009-01-09 16:39:51 +01:00
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 9 11:41:06 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- fixed CVE-2008-4474 [bnc#433762]
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 9 11:37:04 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.1.1
|
|
|
|
|
o Feature Improvements
|
|
|
|
|
* Many more options and features are available via radmin.
|
|
|
|
|
See man radmin and raddb/sites-available/control-socket.
|
|
|
|
|
* Many more commands available via the control socket.
|
|
|
|
|
Connect via radmin, and type help for more information.
|
|
|
|
|
* Added dictionary.networkphysics and dictionary.lancom.
|
|
|
|
|
* Calculate WiMAX MIP keys, and added sample WiMAX SQL tables.
|
|
|
|
|
o Bug Fixes
|
|
|
|
|
* Fixed bug that made radmin not work.
|
|
|
|
|
* Fixed Suse && Debian package scripts.
|
|
|
|
|
* Fixed issues with dynamic clients.
|
|
|
|
|
* Fixed configure checks for -lreadline
|
|
|
|
|
* rlm_sqlippool no longer needs to be linked to rlm_sql.
|
|
|
|
|
* Add statistics for detail file listeners. This closes bug #593.
|
|
|
|
|
* Fixed printing of some WiMAX attributes.
|
|
|
|
|
* Fixed double free on exit() in rlm_attr_filter.
|
|
|
|
|
* Fixed build issues on Solaris.
|
|
|
|
|
* Fixed fast session resumption for EAP-TLS.
|
|
|
|
|
|
2008-09-15 12:38:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 15 12:37:31 CEST 2008 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- make radrelay a hardlink to radiusday (instead of identical copy)
|
2008-09-15 12:38:16 +02:00
|
|
|
|
2008-09-09 22:09:38 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Sep 9 19:49:08 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.1.0
|
|
|
|
|
o Feature Improvements
|
|
|
|
|
* Clients may now be defined dynamically, based on IP address.
|
|
|
|
|
See raddb/sites-available/dynamic-clients.
|
|
|
|
|
* SNMP support is now available through an experimental Perl script.
|
|
|
|
|
See scripts/snmp-proxy/README
|
|
|
|
|
* SNMP statistics are also available through Status-Server packets.
|
|
|
|
|
See raddb/sites-available/status
|
|
|
|
|
* Added more Microsoft attributes from bug #568.
|
|
|
|
|
* The linelog module has more functionality and flexibility.
|
|
|
|
|
See raddb/modules/linelog.
|
|
|
|
|
* The debugging output has been sanitized. It should be much more
|
|
|
|
|
readable.
|
|
|
|
|
* Debug logs can now be turned on/off while the server is running,
|
|
|
|
|
for a user, group, realm, etc. See the log section of raddb/radiusd.conf.
|
|
|
|
|
* Added support for WiMAX Forum attributes. The dynamic keys are
|
|
|
|
|
not yet calculated. See share/dictionary.wimax
|
|
|
|
|
* Added session resumption for PEAP and TTLS.
|
|
|
|
|
See raddb/eap.conf, and the cache sub-section.
|
|
|
|
|
* Added radmin command-line tool for administering a running server.
|
|
|
|
|
See man radmin and raddb/sites-available/control-socket.
|
|
|
|
|
o Bug Fixes
|
|
|
|
|
* Double escaping of '\\' in the users (and some other) files
|
|
|
|
|
has been fixed. If you have '\\' in the users file, your
|
|
|
|
|
configuration will need to be checked, and fixed!
|
|
|
|
|
* Parse security section of radiusd.conf. This was accidentally
|
|
|
|
|
deleted in 2.0.5. Closes bug #566.
|
|
|
|
|
* Bind to interface before IP, which allows DHCP sockets to listen
|
|
|
|
|
on "*" for multiple interfaces.
|
|
|
|
|
* Fix handling of giaddr in DHCP responses.
|
|
|
|
|
* Corrected parsing of status_check in home_server so that it works.
|
|
|
|
|
* Fix hints so that "Puser" works again.
|
|
|
|
|
* Removed length restrictions on attribute names in the dictionaries.
|
|
|
|
|
* Update socket code to avoid C compiler optimizations.
|
|
|
|
|
|
2008-08-28 02:03:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 28 01:31:33 CEST 2008 - ro@suse.de
|
|
|
|
|
|
2008-09-09 22:09:38 +02:00
|
|
|
- remove deprecated startvar from fillup_and_insserv call
|
2008-08-28 02:03:25 +02:00
|
|
|
|
2008-08-27 02:43:30 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 26 12:01:12 CEST 2008 - pth@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix Required-Stop in init scripts.
|
|
|
|
|
|
2008-05-16 13:48:48 +02:00
|
|
|
-------------------------------------------------------------------
|
2008-07-24 22:17:53 +02:00
|
|
|
Wed Jul 23 11:06:13 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.0.5
|
2008-10-09 12:18:30 +02:00
|
|
|
Feature improvements
|
|
|
|
|
* Permit SQL authorize_reply_query to be empty.
|
|
|
|
|
* Allow setting response packet type in Post-Proxy-Type Fail
|
|
|
|
|
handler.
|
|
|
|
|
* Added install-chown target to set correct permission and ownership
|
|
|
|
|
make RADMIN=radmin RGROUP=radius install-chown
|
|
|
|
|
* Support for LDAP-Group and other dynamic comparison attributes
|
|
|
|
|
in unlang. Developed from a patch by Jason Alderfer.
|
|
|
|
|
* Added chroot support. See radiusd.conf for comments.
|
|
|
|
|
* Allow clients of 0/0. We do not recommend using this, though.
|
|
|
|
|
* Moved many module configurations into raddb/modules/*
|
|
|
|
|
|
|
|
|
|
Bug fixes
|
|
|
|
|
* Allow proxying to virtual servers for accounting packets, too.
|
|
|
|
|
* Added "num fields" function to PostgreSQL client.
|
|
|
|
|
* Updated proxy fallback mechanism to validate fallback servers,
|
|
|
|
|
and to process fallback requests in a child thread.
|
|
|
|
|
* rlm_realm returns "ok" for LOCAL realms, not "noop".
|
|
|
|
|
* Fixed some DHCP code handling. The examples should now work.
|
2008-07-24 22:17:53 +02:00
|
|
|
|
|
|
|
|
- updated to 2.0.4
|
2008-10-09 12:18:30 +02:00
|
|
|
Feature improvements
|
|
|
|
|
* Allow "virtual_server" in "realm" and "home_server" sections.
|
|
|
|
|
See raddb/proxy.conf and raddb/sites-available/virtual.example.com.
|
|
|
|
|
* Allow "passwd" module to be listed in "accounting" and "post-auth".
|
|
|
|
|
* Added "fallback" to "home_server_pool" configuration, to handle
|
|
|
|
|
the case of all home servers being dead. See raddb/proxy.conf.
|
|
|
|
|
* Added sample text to raddb/sites-available/inner-tunnel which
|
|
|
|
|
can simplify debugging of inner tunnel configurations.
|
|
|
|
|
* Added regular expression matching in realm names. See
|
|
|
|
|
raddb/proxy.conf for examples.
|
|
|
|
|
* Added simple DHCP server functionality. For comments, see
|
|
|
|
|
raddb/sites-available/dhcp.
|
|
|
|
|
* Added file globbing capabilities to detail file reader
|
|
|
|
|
* Added sample raddb/sites-available/robust-proxy-accounting
|
|
|
|
|
* Clients in SQL can now refer to a virtual server.
|
|
|
|
|
Patch from Michael Bretterklieber.
|
|
|
|
|
* Added some examples of creating RADIUS administrator in SQL,
|
|
|
|
|
and assigning appropriate access rights.
|
|
|
|
|
|
|
|
|
|
Bug fixes
|
|
|
|
|
* Install all files in raddb/sites-available
|
|
|
|
|
* Allow non-threaded builds.
|
|
|
|
|
* Don't treat '0x' as special for known attributes that are not
|
|
|
|
|
of type "octets".
|
|
|
|
|
* Fix log error in rlm_pap.
|
|
|
|
|
* Remove documentation about non-existent functionality.
|
|
|
|
|
* Updated warning messages in debug output.
|
|
|
|
|
* Fix handling of timeouts in rlm_ldap that affected 64-bit systems.
|
|
|
|
|
This fix was supposed to go into 2.0.3, but did not make it.
|
|
|
|
|
* Fix event handling in debug mode for failed proxy requests.
|
|
|
|
|
* Fix memleak in fifos. Closes #537.
|
|
|
|
|
* Fix memleak on blocked threads. Closes #538.
|
|
|
|
|
* Perform additional checks on NULL realms. Closes #541.
|
|
|
|
|
* Fix handling of "clients" in "listen" section.
|
|
|
|
|
* When detail file cannot process a packet, sleep for longer
|
|
|
|
|
to let the rest of the server do something.
|
|
|
|
|
* Add missing table to raddb/sql/mssql/schema.sql. Closes #545.
|
|
|
|
|
* Updated rlm_sql_postgresql to build with PostgreSQL 7.x.
|
|
|
|
|
Closes #533.
|
|
|
|
|
* Fix "postauth" of rlm_ldap to look for LDAP-UserDn in the
|
|
|
|
|
correct place.
|
|
|
|
|
* Update rlm_attr_filter for some corner cases. Closes #543.
|
|
|
|
|
* Fixed memory leak in libfreeradius event handler.
|
|
|
|
|
* In the SQL Accounting on/off queries, remove the restriction
|
|
|
|
|
that the session time had to be zero.
|
2008-07-24 22:17:53 +02:00
|
|
|
|
|
|
|
|
- dropped obsoleted patches
|
|
|
|
|
* event-fifo-threads.patch (included in update)
|
|
|
|
|
* raddb.patch (no longer needed)
|
|
|
|
|
|
|
|
|
|
- added logrotate to Recommends
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2008-05-16 13:48:48 +02:00
|
|
|
Tue May 13 18:25:19 CEST 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- fix crashes in events, fifo and threads (event-fifo-threads.patch)
|
|
|
|
|
|
2008-05-06 01:17:29 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon May 5 15:02:10 CEST 2008 - pth@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix coding errors that made the package fail to build.
|
|
|
|
|
|
2008-03-21 03:37:47 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 19 17:23:48 CET 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.0.3
|
2008-10-09 12:18:30 +02:00
|
|
|
Feature improvements
|
|
|
|
|
* Updated raddb/certs/ca.cnf with extensions to allow ca.der
|
|
|
|
|
to be imported as a CA on Symbian and Windows Mobile devices.
|
|
|
|
|
Closes bug #524
|
|
|
|
|
* Enable multiple matches in "hints" via Fall-Through = Yes.
|
|
|
|
|
Closes bug #477
|
|
|
|
|
* Added preliminary SQLite driver, contibuted by Apple.
|
|
|
|
|
Untested, with no sample configuration. This address bug #470.
|
|
|
|
|
* Updated logging sub-system so that log messages from libfreeradius
|
|
|
|
|
can go to the log file, and not stdout.
|
|
|
|
|
* Added dictionary.rfc5176
|
|
|
|
|
* EAP module now checks for instance name, and uses that for
|
|
|
|
|
authentication. This avoids the need to set Auth-Type when
|
|
|
|
|
there are multiple instances of the EAP module.
|
|
|
|
|
* Added Module-Return-Code attribute, which contains the value
|
|
|
|
|
returned by the previous module (ok/fail/update/etc.)
|
|
|
|
|
Bug fixes
|
|
|
|
|
* Corrected typos in rlm_dbm. Closes bugs #521 and #522.
|
|
|
|
|
* Detail file "listen" sections now work much better.
|
|
|
|
|
* Don't allow old "log_*" to over-ride new format. Closes bug #525
|
|
|
|
|
* Initialize allocated memory in Oracle SQL driver. This fixes
|
|
|
|
|
occasional crashes on some systems. Closes bug #518
|
|
|
|
|
* Call correct function in rlm_protocol_filter. This enables the
|
|
|
|
|
module to build. Closes bug #512.
|
|
|
|
|
* Added deprecated flag to build for rlm_krb5. This allows it to
|
|
|
|
|
run on 64-bit systems. Closes bug #491
|
|
|
|
|
* Corrected error message when parsing invalid configurations
|
|
|
|
|
so it doesn't crash. Closes bug #527
|
|
|
|
|
* Fix handling of timeouts in rlm_ldap that affected 64-bit systems.
|
|
|
|
|
* Handle $INCLUDE's in "instantiate" section. Closes #528.
|
|
|
|
|
* Format updates to "man" pages from Stephen Gran.
|
2008-03-21 03:37:47 +01:00
|
|
|
|
|
|
|
|
- updated to 2.0.2
|
2008-10-09 12:18:30 +02:00
|
|
|
Feature improvements
|
|
|
|
|
* Added notes on how to debug the server in radiusd.conf
|
|
|
|
|
* Moved all "log_*" in radiusd.conf to log{} section.
|
|
|
|
|
The old configurations are still accepted, though.
|
|
|
|
|
* Added ca.der target in raddb/certs/Makefile. This is
|
|
|
|
|
needed for importing CA certs into Windows.
|
|
|
|
|
* Added ability send raw attributes via "Raw-Attribute = 0x0102..."
|
|
|
|
|
This is available only debug builds. It can be used
|
|
|
|
|
to create invalid packets! Use it with care.
|
|
|
|
|
* Permit "unlang" policies inside of Auth-Type{} sub-sections
|
|
|
|
|
of the authenticate{} section. This makes some policies easier
|
|
|
|
|
to implement.
|
|
|
|
|
* "listen" sections can now have "type = proxy". This lets you
|
|
|
|
|
control which IP is used for sending proxied requests.
|
|
|
|
|
* Added note on SSL performance to raddb/certs/README
|
|
|
|
|
Bug fixes
|
|
|
|
|
* Fixed reading of "detail" files.
|
|
|
|
|
* Allow inner EAP tunneled sessions to be proxied.
|
|
|
|
|
* Corrected MySQL schemas
|
|
|
|
|
* syslog now works in log{} section.
|
|
|
|
|
* Corrected typo in raddb/certs/client.cnf
|
|
|
|
|
* Updated raddb/sites-available/proxy-inner-tunnel to
|
|
|
|
|
permit authentication to work.
|
|
|
|
|
* Ignore zero-length attributes in received packets.
|
|
|
|
|
* Correct memcpy when dealing with unknown attributes.
|
|
|
|
|
* Corrected debugging messages in attr_rewrite.
|
|
|
|
|
* Corrected generation of State attribute in EAP. This
|
|
|
|
|
fixes the "failed to remember handler" issues.
|
|
|
|
|
* Fall back to DEFAULT realm if no realm was found.
|
|
|
|
|
Based on a patch from Vincent Magnin.
|
|
|
|
|
* Updated example raddb/sites-available/proxy-inner-tunnel
|
|
|
|
|
* Corrected behavior of attr_filter to match documentation.
|
|
|
|
|
This is NOT backwards compatible with previous versions!
|
|
|
|
|
See "man rlm_attr_filter" for details.
|
2008-03-21 03:37:47 +01:00
|
|
|
|
|
|
|
|
- dropped patches:
|
|
|
|
|
* conf_read.patch (included in update)
|
|
|
|
|
* strncat.patch (obsoleted by update)
|
|
|
|
|
|
2008-02-01 04:33:23 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 29 14:33:35 CET 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- replace obsoleted call to conf_read with cf_file_read (conf_read.patch)
|
|
|
|
|
- split off -doc subpackage
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jan 24 16:39:37 CET 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- fix strncat usage (strncat.patch)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 22 16:23:12 CET 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 2.0.1
|
|
|
|
|
* improve unlang
|
|
|
|
|
* update acct_module
|
|
|
|
|
* fix parsing of syslog logging
|
|
|
|
|
* minor fixes over 2.0.0
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 22 13:58:25 CET 2008 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- renamed to freeradius-server (to follow upstream change)
|
|
|
|
|
- updated to 2.0.0:
|
|
|
|
|
o Feature improvements
|
|
|
|
|
* Debugging mode is much clearer and easier to read.
|
|
|
|
|
* A new policy language makes many configurations trivial.
|
|
|
|
|
See "man unlang" for a complete description.
|
|
|
|
|
* Virtual servers are now supported. This permits clear separation
|
|
|
|
|
of policies. See raddb/sites-available/README
|
|
|
|
|
* EAP-TLS (PEAP, EAP-TTLS) and OpenSSL certificates "just work".
|
|
|
|
|
See raddb/certs/README for details.
|
|
|
|
|
* Proxying is much more configurable than before.
|
|
|
|
|
See proxy.conf for documentation on pools, and new config items.
|
|
|
|
|
* Full support for IPv6.
|
|
|
|
|
* Much more complete support for the RADIUS SNMP MIBs.
|
|
|
|
|
* HUP now works. Only some modules are re-loaded,
|
|
|
|
|
and the server configuation is *not* reloaded.
|
|
|
|
|
* "check config" option now works. See "man radiusd"
|
|
|
|
|
* radrelay functionality is now included in the server core.
|
|
|
|
|
See raddb/sites-available/copy-acct-to-home-server
|
|
|
|
|
* VMPS support. It is minimal, but functional.
|
|
|
|
|
* Cleaned up internal API's and names, including library names.
|
|
|
|
|
o Bug fixes
|
|
|
|
|
* Many.
|
|
|
|
|
- removed obsolete patch:
|
|
|
|
|
* type_punning.patch
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Dec 4 18:08:41 CET 2007 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- remove openldap2 from BuildRequires
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 6 13:16:58 CET 2007 - prusnak@suse.cz
|
|
|
|
|
|
|
|
|
|
- updated to 1.1.7
|
|
|
|
|
Feature Improvements
|
|
|
|
|
* Updated LDAP documentation.
|
|
|
|
|
* Added note on DH parameters in eap.conf, and debugging messages
|
|
|
|
|
which complain if DH is used, but not configured properly.
|
|
|
|
|
* Updated the Mikrotik dictionary. Added a note that the sample
|
|
|
|
|
dictionary they supply is broken.
|
|
|
|
|
* Output more information on blocked threads, which should help
|
|
|
|
|
narrow down which modules is causing the problem.
|
|
|
|
|
* Added more eDirectory support.
|
|
|
|
|
* rlm_ldap now prints out attributes in the standard format
|
|
|
|
|
* Enabled server-side handling of procedures in MySQL
|
|
|
|
|
Bug Fixes
|
|
|
|
|
* Added NT-Hash support for mschap_xlat.
|
|
|
|
|
* Corrected documentation to point to correct location of files.
|
|
|
|
|
* Checks for more recent FreeBSD versions.
|
|
|
|
|
* uses -DLDAP_DEPRECATED to avoid OpenLDAP crashes.
|
|
|
|
|
* Use correct value for authentication name in rlm_mschap.
|
|
|
|
|
* Fix over-ride for usernames when use_tunneled_reply = yes.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Apr 20 15:10:28 CEST 2007 - pth@suse.de
|
|
|
|
|
|
|
|
|
|
- Update to 1.1.6. Changes since 1.1.3:
|
2008-10-09 12:18:30 +02:00
|
|
|
Feature improvements
|
|
|
|
|
* Added dictionary.rfc4372 (Chargeable User Identity)
|
|
|
|
|
* Added dictionary.rfc4675 (VLAN and Priority)
|
|
|
|
|
* Added dictionary.rfc4679 (ADSL Forum)
|
|
|
|
|
NOTE some name differences from the RFC, due to dictionary.redback
|
|
|
|
|
* Updated rlm_python to something usable
|
|
|
|
|
* Added experimental sql "HPW" IPPools.
|
|
|
|
|
* Added more dictionaries
|
|
|
|
|
* Dictionary files now MUST NOT be globally writable.
|
|
|
|
|
* Configuration files now MUST NOT be globally readable,
|
|
|
|
|
or globally writable.
|
|
|
|
|
* Be more aggressive about freeing memory on clean exit.
|
|
|
|
|
This helps track down run-time leaks.
|
|
|
|
|
* Updated rlm_python to something usable
|
|
|
|
|
* Added experimental sql "HPW" IPPools.
|
|
|
|
|
* Major enhancements to rlm_pap, that make "encryption_scheme"
|
|
|
|
|
a thing of the past. See "man rlm_pap" for details.
|
|
|
|
|
* Added SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS flag to use
|
|
|
|
|
work-arounds that enable Windows Vista clients to work.
|
|
|
|
|
* Added preliminary code to support Firebird.
|
|
|
|
|
Use at your own risk!
|
|
|
|
|
* Send MS-CHAP2-Success, which makes EAP-TTLS/MSCHAP work on more
|
|
|
|
|
platforms.
|
|
|
|
|
* Add a new "reply-name" directive in rlm_sqlcounter to define the
|
|
|
|
|
name of the reply attribute.
|
|
|
|
|
* Added more dictionaries and attributes
|
|
|
|
|
* Print ntlm_auth failure reason in Module-Failure-Message
|
|
|
|
|
* radsqlrelay is able to get the DB password from a file instead
|
|
|
|
|
of command line.
|
|
|
|
|
|
|
|
|
|
Bug fixes
|
|
|
|
|
* Corrected typo in rlm_pap.c
|
|
|
|
|
* Corrected typo in src/main/auth.c
|
|
|
|
|
* Suppress SSL error messages if error is zero.
|
|
|
|
|
* Don't complain about "Error in read client certificate A"
|
|
|
|
|
if we expect to read it in the next packet. Fix based on patch
|
|
|
|
|
by Dan Lukes.
|
|
|
|
|
* Corrected nearly 30 bugs found by Coverity
|
|
|
|
|
See also http://scan.coverity.com
|
|
|
|
|
* Don't die on HUP. Instead leak memory (sorry). After a few
|
|
|
|
|
hundred HUP's, the server will have leaked a few megabytes of
|
|
|
|
|
memory, and you should probably re-start it. It's ugly, but
|
|
|
|
|
better than dying.
|
|
|
|
|
* Corrected a few double free's
|
|
|
|
|
* Corrected typo in radrelay, which prevented it from working
|
|
|
|
|
* Made Firebird module build
|
|
|
|
|
* Fixed bug in PostgreSQL module that caused server crash.
|
|
|
|
|
* Fixed bug in SQL module that could cause server to crash.
|
|
|
|
|
* Corrected base64 decoding in rlm_pap
|
|
|
|
|
* Don't retransmit accounting packets. The NAS should do this.
|
|
|
|
|
* Handle Client-Error in EAP-SIM.
|
|
|
|
|
* Port OpenSSL locking fixes from CVS head. This makes PEAP
|
|
|
|
|
more stable on some systems.
|
|
|
|
|
* Require Message-Authenticator in Status-Server packets
|
|
|
|
|
* Correct Tunnel-Medium-Type VALUEs in dictionary.rfc2868
|
|
|
|
|
* Be more aggressibe about freeing memory on clean exit.
|
|
|
|
|
This isn't strictly a bug fix, but it makes it easier to
|
|
|
|
|
find memory leaks
|
|
|
|
|
* Increase buffer size for dynamic expansion, which allows
|
|
|
|
|
longer SQL qeuries.
|
|
|
|
|
* Use correct line number when there's a parse error in one
|
|
|
|
|
of the configuration sections.
|
|
|
|
|
* Terminate SSL sessions in EAP on error, rather than continuing
|
|
|
|
|
in some cases.
|
|
|
|
|
* Increase buffer size to allow parsing of long octet strings
|
|
|
|
|
* Fix string termination on xlat in rlm_perl
|
|
|
|
|
* Fix a parse error in the digest module, where malformed
|
|
|
|
|
digest requests would result in the user being accepted. Oops...
|
|
|
|
|
* VALUEs can only be defined for 'integer', to catch mistakes
|
|
|
|
|
with setting VALUEs for type 'string'.
|
|
|
|
|
* Better parsing of VALUE names, so that values starting with
|
|
|
|
|
a digit work correctly.
|
|
|
|
|
* Check return from malloc.
|
|
|
|
|
* Fix a double free() in rlm_eap_tls.c
|
|
|
|
|
* Check return code of malloc() during initialization.
|
|
|
|
|
* Fix a corner case where the proxy port isn't set either in
|
|
|
|
|
radiusd.conf or in proxy.conf.
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 26 12:45:29 CEST 2007 - rguenther@suse.de
|
|
|
|
|
|
|
|
|
|
- add gdbm-devel BuildRequires
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Feb 11 18:33:47 CET 2007 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- one oversight in last change, build tested
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Feb 11 12:00:25 CET 2007 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- fix build as non-root
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 4 11:18:59 CEST 2006 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Make sure that pam_nologin.so will always be executed.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 23 20:34:55 CEST 2006 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.1.3
|
|
|
|
|
* autoconf updates
|
|
|
|
|
* More dictionary updates
|
|
|
|
|
* Security and portability fixes to rlm_otp
|
|
|
|
|
* Miscellaneous bug fixes
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 5 22:31:04 CEST 2006 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.1.2
|
|
|
|
|
* Allow tagged VSA's for Juniper.
|
|
|
|
|
* Allow Ascend "abinary" format to be specified as octets,
|
|
|
|
|
(e.g. Ascend-Data-Filter = 0x010203...)
|
|
|
|
|
* Added "cipher_list" configuration to the EAP-TLS module.
|
|
|
|
|
See "eap.conf" and "man 1 cipher" for details.
|
|
|
|
|
* Added "check_cert_issuer" configuration to the EAP-TLS module.
|
|
|
|
|
See "eap.conf" for details.
|
|
|
|
|
* Added "suppress" configuration entry to rlm_detail,
|
|
|
|
|
to suppress certain attributes (e.g. User-Password).
|
|
|
|
|
* Write SSL errors to log file, rather than stderr.
|
|
|
|
|
* Allow a core dump on uid change on Linux
|
|
|
|
|
* Bugfixes
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 24 15:58:41 CEST 2006 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Don't strip binaries.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Mar 28 20:22:34 CEST 2006 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed an error on x86_64 machines when reading dictionaries
|
|
|
|
|
(#161503)
|
|
|
|
|
- make "use_tunneled_reply" work properly for PEAP
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 27 14:32:09 CEST 2006 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- also use fPIC on s390*
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Mar 23 20:39:02 CET 2006 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed validation issue with the EAP-MSCHAPv2 module (#160249)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 25 21:36:01 CET 2006 - mls@suse.de
|
|
|
|
|
|
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 20 18:19:32 CET 2006 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed directory permissions (#141153)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jan 19 01:23:36 CET 2006 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- changed php requires to generic ones (for php5)
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jan 14 16:40:53 CET 2006 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- use --with-udpfromto useful for systems with multiple addresses
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jan 12 22:48:30 CET 2006 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.1.0
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 11 16:03:44 CET 2006 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- adding stack-protector to CFLAGS
|
|
|
|
|
- don't package *.la files for now (#141207)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Dec 21 10:14:01 CET 2005 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed realloc() in rlm_pam
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 15 21:49:18 CET 2005 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- moved dialup_admin to subpackage and integrate it into
|
2008-02-01 04:33:23 +01:00
|
|
|
Apache 2 configuration
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Sep 26 01:35:29 CEST 2005 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- added LDAP_DEPRECATED to CFLAGS
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 23 06:09:08 CEST 2005 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.0.5
|
|
|
|
|
- updated eDirectory integration documentation
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Sep 23 01:38:53 CEST 2005 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- fix build-dir references in .la files
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 30 12:50:30 CEST 2005 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed some issues from security audit (#104195)
|
|
|
|
|
(is already upstream for 1.0.5 release)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 15 19:34:18 CEST 2005 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- fix mysql creation script (#104752)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jun 18 19:37:56 CEST 2005 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.0.4
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sun Jun 5 00:36:51 CEST 2005 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.0.3
|
|
|
|
|
- link radiusd with -pie
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 11 11:29:05 CEST 2005 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- start daemon correctly (#75979)
|
2008-02-01 04:33:23 +01:00
|
|
|
- fixed packaging on x86-64 (#75979)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 2 07:19:27 CET 2005 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- com_err.h patch not needed anymore
|
|
|
|
|
- modified spec-file to work with older distributions
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 18 11:05:35 CET 2005 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- enabled eDirectory support and added documentation
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 17 08:34:12 CET 2005 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- update to 1.0.2
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Nov 27 13:44:09 CET 2004 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed installation of radeapclient (#48549)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Nov 20 12:57:22 CET 2004 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- don't use heimdal for distributions newer than 9.2
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Nov 15 14:53:25 CET 2004 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Use common-* PAM configuration
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Oct 23 20:53:51 CEST 2004 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 1.0.1
|
|
|
|
|
- moved *.la files to devel package
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Aug 28 13:33:35 CEST 2004 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- modify logrotate config (#44436)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 17 23:55:38 CEST 2004 - sndirsch@suse.de
|
|
|
|
|
|
|
|
|
|
- fixed syntax error (Typo?) in init script
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 13 07:10:34 CEST 2004 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- added some sample scripts to documentation
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Aug 10 09:35:03 CEST 2004 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- update to 1.0.0
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 24 00:03:59 CEST 2004 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 1.0.0pre3 (version set as 0.9.9)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 5 13:36:54 CET 2004 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- disabled rlm_sql_iodbc and enabled rlm_sql_unixodb
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Jan 16 13:38:13 CET 2004 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Add pam-devel to neededforbuild
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 12 10:26:25 CET 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
|
|
- add %defattr
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Nov 28 06:56:46 CET 2003 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- security update to 0.9.3
|
2008-02-01 04:33:23 +01:00
|
|
|
* Fix a remote DoS and possible exploit due to mis-handling
|
|
|
|
|
of tagged attributes, and Tunnel-Password attribute.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Oct 16 09:02:57 CEST 2003 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 0.9.2
|
|
|
|
|
(see /usr/share/doc/packages/freeradius/ChangeLog)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 1 16:02:14 CEST 2003 - ro@suse.de
|
|
|
|
|
|
|
|
|
|
- fix include path for com_err.h
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 31 06:18:03 CEST 2003 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- use stop/restart macros
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jul 23 10:53:20 CEST 2003 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- use special user for running radiusd
|
|
|
|
|
- modify default configuration to work without changes
|
|
|
|
|
(Auth-Type = Local)
|
|
|
|
|
- added README.SuSE explaining about radiusd user
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jul 21 08:56:54 CEST 2003 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 0.9.0
|
2008-10-09 12:18:30 +02:00
|
|
|
- build against libiodbc to enable iodbc module
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jun 4 19:47:02 CEST 2003 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Add db-devel to neededforbuild.
|
|
|
|
|
- Don't use system libtool.
|
|
|
|
|
- Fix use of sort.
|
|
|
|
|
- Avoid running autoconf.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Apr 15 23:46:08 CEST 2003 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- fixed neededforbuild
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Mar 3 18:20:50 CET 2003 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- removed %ghost stuff from filelist
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 7 13:31:05 CET 2003 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Use pam_unix2.so instead of pam_unix.so
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Jan 15 15:53:21 CET 2003 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- use sasl2
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jan 14 11:42:24 CET 2003 - nadvornik@suse.cz
|
|
|
|
|
|
|
|
|
|
- fixed multi-line string literals
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 12 10:28:13 CET 2002 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 0.8.1
|
2008-10-09 12:18:30 +02:00
|
|
|
* minor bugfixes
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 2 07:20:10 CET 2002 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- removed radwatch from package
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Nov 19 08:33:36 CET 2002 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- update to 0.8
|
2008-02-01 04:33:23 +01:00
|
|
|
* Support for Status-Server packets
|
|
|
|
|
* Fixed memory leak when proxying
|
|
|
|
|
* Round-robin load balancing when proxying
|
|
|
|
|
* Many bug fixes
|
|
|
|
|
* (/usr/share/doc/packages/ChangeLog)
|
|
|
|
|
- moved modules to /usr/lib/freeradius
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Aug 19 00:06:38 CEST 2002 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- don't overwrite README's with each other
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 16 09:06:03 CEST 2002 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- added PreReq (Bug #17838)
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jun 20 01:06:41 CEST 2002 - ro@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- hack ltconfig for ppc64
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Apr 8 11:11:56 CEST 2002 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- fixed packaging on 64bit platforms
|
2008-02-01 04:33:23 +01:00
|
|
|
- added logrotate config
|
|
|
|
|
- added some sample scripts to doc-dir
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Mar 22 15:01:10 CET 2002 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 0.5
|
|
|
|
|
* MS-CHAP and MS-CHAPv2 MPPE support,
|
|
|
|
|
* EAP/MD5 and experimental EAP/TLS,
|
|
|
|
|
* Experimental PHP web administration interface,
|
|
|
|
|
* Fixes for *BSD,
|
2008-10-09 12:18:30 +02:00
|
|
|
* Configurable database queries, executed per packet
|
2008-02-01 04:33:23 +01:00
|
|
|
(e.g. %{ldap:ldap:///dc=company,dc=com?uid?sub?uid=%u}),
|
|
|
|
|
* Fix logic bug which would cause occasional server crashes,
|
|
|
|
|
* Server-side quenching of DoS attacks,
|
|
|
|
|
* Experimental Python module,
|
|
|
|
|
* Aptis, Quintum, and Foundry dictionaries,
|
|
|
|
|
* Limited support for IPv6.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 25 16:19:26 CET 2002 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- moved *.la back to main-package as it is needed for
|
2008-02-01 04:33:23 +01:00
|
|
|
dynamic loading of modules
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Feb 25 07:44:11 CET 2002 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- added patch to work with heimdal-krb5
|
2008-02-01 04:33:23 +01:00
|
|
|
- moved *.so to -devel package
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Feb 8 14:24:51 CET 2002 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- deactivated kerberos support
|
2008-10-09 12:18:30 +02:00
|
|
|
(seems to be not compatible with heimdal :-()
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Feb 7 13:27:47 CET 2002 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- changed heimdal libdir
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Dec 13 07:33:45 CET 2001 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to 0.4
|
2008-10-09 12:18:30 +02:00
|
|
|
- better use of fillup_and_insserv
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Dec 3 11:42:15 CET 2001 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- don't use START_RADIUSD anymore
|
2008-10-09 12:18:30 +02:00
|
|
|
- make use of new fillup_and_insserv macro
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Oct 12 07:03:07 CEST 2001 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- update to version 0.3
|
2008-10-09 12:18:30 +02:00
|
|
|
- packed source-archive as bz2
|
2008-02-01 04:33:23 +01:00
|
|
|
- branched package -> devel
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Fri Aug 3 07:53:54 CEST 2001 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- removed use of watcher-script
|
2008-02-01 04:33:23 +01:00
|
|
|
- removed config-check (-C) in init script
|
|
|
|
|
(it's not supported in freeradius)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Aug 2 12:22:00 CEST 2001 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- status fix in init script
|
2008-10-09 12:18:30 +02:00
|
|
|
- renamed pam-configfile: radius -> radiusd
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Aug 1 09:57:53 CEST 2001 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- updated to 0.2
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jul 26 10:06:01 CEST 2001 - kukuk@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix needed for build
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Tue Jul 10 15:05:52 CEST 2001 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- added %{suse_update_config}
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Sat Jun 23 20:52:07 CEST 2001 - schwab@suse.de
|
|
|
|
|
|
|
|
|
|
- Fix preprocessor directives inside macro arguments.
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jun 18 07:58:08 CEST 2001 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- removed absolute paths from pam-config
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed May 23 13:32:20 CEST 2001 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- first official beta-version 0.1
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Wed Mar 21 13:11:34 CET 2001 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- new snapshot 20010321 (pre-BETA)
|
2008-02-01 04:33:23 +01:00
|
|
|
- replaced start- and killproc to avoid problems with Kernel 2.4
|
|
|
|
|
using the radwatch shell-script
|
|
|
|
|
- added built of LDAP and MySQL modules
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 29 09:58:23 CET 2001 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- %files: /etc/raddb/bay.vendor -> /etc/raddb/dictionary.bay
|
2008-02-01 04:33:23 +01:00
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Mon Jan 15 10:52:42 CET 2001 - stark@suse.de
|
|
|
|
|
|
|
|
|
|
- new snapshot 20010115
|
|
|
|
|
- initial BETA package (sources are ALPHA!)
|
|
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
|
Thu Jan 4 13:32:26 CET 2001 - stark@suse.de
|
|
|
|
|
|
2008-10-09 12:18:30 +02:00
|
|
|
- CVS snapshot 20010104
|
2008-02-01 04:33:23 +01:00
|
|
|
|
