Accepting request 264534 from home:vitezslav_cizek:branches:network

- update to 3.0.5 Some of the new features: * Allow LDAP to specify arbitrary attributes for dynamic clients. * Allow one level of backslashes (finally). See radiusd.conf, "correct_escapes" setting. * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 in EAP methods. * Allow multiple new connections to be spawned simultaneously in the connection pool, to cope with spikes in traffic. * Use kqueue on systems which support it. This allows for better scaling when using many sockets. * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as thee counterpart to "set module status" * "ipaddr" will now use v6 if no v4 address is present. You should use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. * "client" sections will allow "ipaddr = 192.192.0/24". The old "netmask" is still accepted, but the new format is preferred. * Allow custom HTTP headers to be set for rlm_rest requests using control:REST-HTTP-Header (attributes consumed after use). * Extend format of %{rest:} expansion to allow HTTP method and POST data to be specified and urlquoting. * Add support for aliases in rlm_ldap. * Add support for connection pool sharing to all modules that use the connection pool (pool = <instance>). * "tls" sections now have a "psk_query" configuration item, for dynamic queries to discover a key from a PSK identity. OBS-URL: https://build.opensuse.org/request/show/264534 OBS-URL: https://build.opensuse.org/package/show/network/freeradius-server?expand=0&rev=65
2014-12-10 14:10:07 +00:00 · 2014-12-10 14:10:07 +00:00 · 62c8979d76
commit 62c8979d76
parent 135ea14879
7 changed files with 66 additions and 21 deletions
--- a/freeradius-server-3.0.3.tar.bz2
+++ b/freeradius-server-3.0.3.tar.bz2
@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:781488e18f7b80e241bb5dafa07fcf8f2f7fbe897b337a07367e3f73749ae729
-size 2762771
--- a/freeradius-server-3.0.3.tar.bz2.sig
+++ b/freeradius-server-3.0.3.tar.bz2.sig
--- a/freeradius-server-3.0.5.tar.bz2
+++ b/freeradius-server-3.0.5.tar.bz2
@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5da09a66b5104fc6f4306d5dc867a12f34068bca17860ff480bf29fe1c70d3f2
+size 2835915
--- a/freeradius-server-3.0.5.tar.bz2.sig
+++ b/freeradius-server-3.0.5.tar.bz2.sig
--- a/freeradius-server-opensslversion.patch
+++ b/freeradius-server-opensslversion.patch
@ -1,13 +0,0 @@
-Index: freeradius-server-3.0.3/src/main/version.c
-===================================================================
--- freeradius-server-3.0.3.orig/src/main/version.c
-+++ freeradius-server-3.0.3/src/main/version.c
-@@ -48,7 +48,7 @@ int ssl_check_consistency(void)
- 
- 	ssl_linked = SSLeay();
- 
-	if (ssl_linked != ssl_built) {
-+	if ((ssl_linked&~0xfff) != (ssl_built&~0xfff)) {
- 		ERROR("libssl version mismatch.  built: %lx linked: %lx",
- 		       (unsigned long) ssl_built,
- 		       (unsigned long) ssl_linked);
--- a/freeradius-server.changes
+++ b/freeradius-server.changes
@ -1,3 +1,53 @@
+-------------------------------------------------------------------
+Wed Dec  3 14:22:03 UTC 2014 - vcizek@suse.com
+
+- update to 3.0.5
+  Some of the new features:
+  * Allow LDAP to specify arbitrary attributes for dynamic
+    clients.
+  * Allow one level of backslashes (finally).  See radiusd.conf,
+    "correct_escapes" setting.
+  * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2
+    in EAP methods.
+  * Allow multiple new connections to be spawned simultaneously
+    in the connection pool, to cope with spikes in traffic.
+  * Use kqueue on systems which support it.  This allows for
+    better scaling when using many sockets.
+  * Home server "response_window" can now take fractions of a
+    second.  See proxy.conf.
+  * radmin now supports "show module status", as thee counterpart
+    to "set module status"
+  * "ipaddr" will now use v6 if no v4 address is present.  You should
+    use "ipv4addr" or "ipv6addr" to force v4/v6 addresses.
+  * "client" sections will allow "ipaddr = 192.192.0/24".  The old
+    "netmask" is still accepted, but the new format is preferred.
+  * Allow custom HTTP headers to be set for rlm_rest requests using
+    control:REST-HTTP-Header (attributes consumed after use).
+  * Extend format of %{rest:} expansion to allow HTTP method and POST
+    data to be specified
+    and urlquoting.
+  * Add support for aliases in rlm_ldap.
+  * Add support for connection pool sharing to all modules that use
+    the connection pool (pool = <instance>).
+  * "tls" sections now have a "psk_query" configuration item, for dynamic
+    queries to discover a key from a PSK identity.
+  * Preliminary support for EAP channel bindings.
+  * Foundational work for dynamic home servers.  They do not yet work,
+    but this is now only a matter of updating the "realm" module in
+    a future release.
+  * Support &attr[*] syntax to copy all instances of an attribute when
+    used with the += operator in an update section. May be qualified with
+    a tag.
+  * The logintime and expiration modules can now be listed in the
+    post-auth section.  This makes some configurations simpler.
+  * rlm_sqlippool is now IPV6 capable.  Set "ipv6 = yes" to get
+    Framed-IPv6-Prefix returned.  The SQL queries have NOT been updated.
+    Please submit patches.
+  and numerous; bugfixes
+- remove gpg-offline
+- create /run/radiusd after install
+- drop freeradius-server-opensslversion.patch (upstream)
+
 -------------------------------------------------------------------
 Mon Dec  1 10:52:28 UTC 2014 - meissner@suse.com

--- a/freeradius-server.spec
+++ b/freeradius-server.spec
@ -24,7 +24,7 @@
 %global with_sysvinit 1
 %endif
 Name:           freeradius-server
-Version:        3.0.3
+Version:        3.0.5
 Release:        0
 Summary:        Very Highly Configurable Radius Server
 License:        GPL-2.0 and LGPL-2.1
@ -42,7 +42,6 @@ Patch9:         freeradius-server-radius-reload-logrotate.patch
 # PATCH-FIX-SUSE use 'su' logrotate option (bnc#677335)
 Patch12:        freeradius-server-2.1.1-logrotate_su.patch
 Patch13:        freeradius-server-var_run.patch
-Patch14:        freeradius-server-opensslversion.patch
 BuildRequires:  apache2-devel
 BuildRequires:  cyrus-sasl-devel
 BuildRequires:  db-devel
@ -51,7 +50,6 @@ BuildRequires:  gcc-c++
 BuildRequires:  gdbm-devel
 BuildRequires:  gettext-devel
 BuildRequires:  glibc-devel
-BuildRequires:  gpg-offline
 BuildRequires:  krb5-devel
 BuildRequires:  libcom_err-devel
 BuildRequires:  libcurl-devel
@ -194,7 +192,6 @@ Requires:       %{name} = %{version}
 This plugin provides the SQLite support for the FreeRADIUS server project.

 %prep
-%gpg_verify %{SOURCE10}
 %setup -q
 %patch2
 %patch7 -p1
@ -202,7 +199,6 @@ This plugin provides the SQLite support for the FreeRADIUS server project.
 %patch9 -p1
 %patch12 -p1
 %patch13 -p1
-%patch14 -p1

 %build
 modified="$(sed -n '/^----/n;s/ - .*$//;p;q' "%{_sourcedir}/%{name}.changes")"
@ -319,6 +315,7 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*

 %if 0%{?suse_version} > 1140
 %service_add_post %{unitname}.service
+systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %endif

 %preun
@ -390,6 +387,10 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/files/*
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/preprocess
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/preprocess/*
+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/python/radiusd.py
+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql

 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/counter
@ -426,6 +427,9 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/copy-acct-to-home-server
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/buffered-sql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/tls
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/abfab-tls
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/abfab-tr-idp
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/channel_bindings

 # sites-enabled
 # symlink: %{_sysconfdir}/raddb/sites-enabled/xxx -> ../sites-available/xxx
@ -494,6 +498,8 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/yubikey
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/unbound
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/unpack
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/abfab_psk_sql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/couchbase

 # mods-enabled
 # symlink: %{_sysconfdir}/raddb/mods-enabled/xxx -> ../mods-available/xxx
@ -539,6 +545,8 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/eap
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/filter
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/operator-name
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/abfab-tr
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/debug

 %config(noreplace) %{_sysconfdir}/raddb/users
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/templates.conf