Accepting request 903141 from home:susnux:branches:network

- Add ldap-schemas subpackage for OpenLDAP radius schemas - Add freeradius-server-fix-perl-shbang.patch to fix RPMlint warnings - Fix RPMlint warnings about macros and permissions - Update to version 3.0.23 OBS-URL: https://build.opensuse.org/request/show/903141 OBS-URL: https://build.opensuse.org/package/show/network/freeradius-server?expand=0&rev=146
2021-06-30 15:33:22 +00:00 · 2021-06-30 15:33:22 +00:00 · 91edf028a2
commit 91edf028a2
parent a5d102d662
7 changed files with 215 additions and 22 deletions
--- a/freeradius-server-3.0.21.tar.bz2
+++ b/freeradius-server-3.0.21.tar.bz2
@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c22dad43954b0cbc957564d3f8cbb942ff09853852d2c2155d54e6bd641a4e7d
-size 3184588
--- a/freeradius-server-3.0.21.tar.bz2.sig
+++ b/freeradius-server-3.0.21.tar.bz2.sig
--- a/freeradius-server-3.0.23.tar.bz2
+++ b/freeradius-server-3.0.23.tar.bz2
@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:08ce42bf0ec217704ca163619c06efcae8a6d6a8ae7a626d77da9a6fd210e235
+size 3381917
--- a/freeradius-server-3.0.23.tar.bz2.sig
+++ b/freeradius-server-3.0.23.tar.bz2.sig
--- a/freeradius-server-fix-perl-shbang.patch
+++ b/freeradius-server-fix-perl-shbang.patch
@ -0,0 +1,27 @@
+diff -Nur freeradius-server-3.0.23/doc/rfc/genref.pl new/doc/rfc/genref.pl
+--- freeradius-server-3.0.23/doc/rfc/genref.pl	2021-06-10 16:49:17.000000000 +0200
+++ new/doc/rfc/genref.pl	2021-06-27 17:40:13.946667745 +0200
+@@ -1,4 +1,4 @@
+-#!/usr/bin/env perl
+#!/usr/bin/perl
+ foreach $file (@ARGV) {
+     open FILE, "<$file" || die "Error opening $file: $!\n";
+ 
+diff -Nur freeradius-server-3.0.23/doc/rfc/per-rfc.pl new/doc/rfc/per-rfc.pl
+--- freeradius-server-3.0.23/doc/rfc/per-rfc.pl	2021-06-10 16:49:17.000000000 +0200
+++ new/doc/rfc/per-rfc.pl	2021-06-27 17:40:32.390794075 +0200
+@@ -1,4 +1,4 @@
+-#!/usr/bin/env perl
+#!/usr/bin/perl
+ 
+ #
+ #   Read in the references, and put into an associative array
+diff -Nur freeradius-server-3.0.23/doc/rfc/rewrite.pl new/doc/rfc/rewrite.pl
+--- freeradius-server-3.0.23/doc/rfc/rewrite.pl	2021-06-10 16:49:17.000000000 +0200
+++ new/doc/rfc/rewrite.pl	2021-06-27 17:40:41.162865842 +0200
+@@ -1,4 +1,4 @@
+-#!/usr/bin/env perl
+#!/usr/bin/perl
+ 
+ #
+ #   Read in the references, and put into an associative array
--- a/freeradius-server.changes
+++ b/freeradius-server.changes
@ -1,4 +1,123 @@
 -------------------------------------------------------------------
+Sun Jun 27 15:43:02 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
+
+- Add ldap-schemas subpackage for OpenLDAP radius schemas
+- Add freeradius-server-fix-perl-shbang.patch to fix RPMlint warnings
+- Fix RPMlint warnings about macros and permissions
+
+-------------------------------------------------------------------
+Sat Jun 26 21:12:24 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
+
+- Update to version 3.0.23
+  * Feature improvements
+    * Add "set home_server state ... down" in order to mark the home
+      server as administratively down.  Use "alive" to bring it back
+      to life.
+    * Add Post-Auth-Type "Client-Lost" which should make it easier
+      to log when clients stop responding.
+    * Cache TLS messages in &session-state, for more debugging.
+    * Notes in eap configuration about TLS 1.0 / TLS 1.1, and setting
+      cipher_list = "DEFAULT@SECLEVEL=1"
+    * Added MANY warning messages about using TLS 1.3 with EAP.
+  * Bug fixes
+    * Fix crash in some cases when home server is down, in debug mode.
+    * Fix (again) "read clients from SQL" functionality.
+    * Fix sql_map to return values in more situations.
+    * Silently ignore LEAP configuration instead of erroring out.
+- Update to version 3.0.22
+  * Feature improvements
+    * Limited support for dynamic home servers.
+    * Add support for prepend operator ^=.
+    * Added rlm_totp, for use with the Google Authenticator app.
+    * The default minimum TLS version is now TLS 1.2, as per RFC 8996.
+      Older versions can be allowed by setting tls_min_version, and
+      updating "cipher_list".
+    * Significantly improve the readability and contents of TLS
+      debug messages.
+    * Allow CoA and Disconnect messages over TLS sockets.
+    * Automatically set fragment size / MTU, so that PEAP/EAP-TLS
+      works, and no longer requires manual changes to the configuration.
+    * Allow "configurable_client_cert=yes" for EAP-TLS.
+    * Add TLS 1.2 support for EAP-Fast.
+    * Add ca_path_reload_interval option for tls.
+    * Add "tls_min_version" to ldap module configuration.
+    * Support running policies when receiving a RadSec connection.
+    * Update TLS "ecdh_curve" code to allow for multiple curves.
+    * Allow delta CRLs.
+    * add rlm_sql_map, which can handle multiple columns from an SQL
+      query.  See raddb/mods-available/sql_map.
+    * New xlat for setting status of rlm_always instances and new
+      resource-check example virtual server for manipulating control flow
+      in unlang policies based on status of some external resource.
+      Patches from Terry Burton.
+    * Update radmin to show more information about the home servers
+      using "show home_server list all".
+    * The default configuration now replies with EAP-Key-Name, if it
+      is available, and was requested.
+    * Include extensions in generated certificates.
+    * Ignore user-provided dhparams in FIPS mode.
+    * Remove native support for Cisco LEAP.  It is insecure, and
+      should not be used.  Proxying LEAP is still supported.
+    * Allow use of password preparation methods with rlm_eap_pwd.
+    * More RFC compliance for various corner cases of DHCP,
+    * Use DHCP-specific schemas.
+    * Add stored procedures for DHCP lease allocation
+    * Add support for DHCP-Decline.
+    * Added mods-available/dhcp_sql which is a DHCP-specific instance
+      of the SQL module.
+    * Treat DHCP Discover and Request differently for lease allocation times.
+    * Add support for PBKDF2 keys.
+    * Update default PostgreSQL schema to use "text" instead of
+      a fixed-size "varchar".
+    * Add radmin command "show client list verbose", which gives a lot
+      more information about each client.
+    * Add support for EAPS-AKA authentication to rlm_wimax.
+    * Add rlm_rest support for HTTP/2.
+    * Add REST-HTTP-Status-Code attribute holding HTTP status code.
+    * Add option to set http_negotiation in rlm_rest.  Fixes #2821.
+    * Encode / decode NAS-Filter-Rule according to RFC 4849.
+    * Allow attributes using old names in configuration files, SQL,
+      or modules to match attributes in the packet which use
+      new names.
+    * Allow querying IPv6 stats via FreeRADIUS-Stats-Client-IPv6-Address
+      and FreeRADIUS-Stats-Server-IPv6-Address
+    * Add warnings if there is no "real" User-Name to identify users.
+    * Add sample configuration to update Stripped-User-Name and/or
+      Class for user sessions. See sites-available/default
+    * Add configuration to suppress printing values for User-Name, etc.
+    * Support dictionary.telrad, which is also in WiMAX format.
+    * PEAP 'proxy_tunneled_request_as_eap' is now configurable
+      at runtime with Proxy-Tunneled-Request-As-EAP.
+    * Debug output now lists client/server proposed TLS ciphers.
+    * Add support for TLS1.3
+  * Bug fixes
+    * Fix long-term double free due to PCRE calling our "free"
+      function twice.
+    * Respect the "log_reject" configuration item in more places.
+    * Run Post-Proxy-Type Fail... when all home servers are down.
+    * Note that rlm_replicate can only use UDP, and not TCP or TLS.
+    * DHCP pool lookup is now keyed by Client Identifier (Option 61)
+      when supplied by client, otherwise the hardware address is used.
+      Compliant with RFC 2132. This change will not affect existing
+      systems on upgrade, but new installations will use the new behavior.
+    * Don't print invalid tags in rlm_cache, among other places.
+    * Do home_server failover immediately when an initial TCP / Radsec
+      connection fails.
+    * Clear error on SQLITE_BUSY to prevent memory leak in corner cases.
+    * Properly add SQL clients to virtual servers.
+    * Use better API when decoding DHCP packets, to avoid unnecessary work.
+    * Parse locale-dependent dates.
+    * Fix radiusd.conf ENV LD_PRELOAD function.
+    * Make the "date" module handle UTC more consistently.
+    * Check for, and complain about, inconsistent use of tls_min_version
+      versus disable_tlsv1
+    * Fix "read client from SQL" code so that it properly ties clients
+      to a virtual server.  Also document the behavior.
+    * Fix leak with unknown attributes in detail reader.
+    * Fix parenting issues in rlm_yubikey.
+- Drop __DATE__ __TIME__ fixes, implicitly done with source_date_epoch
+  variable supported by gcc >= 7
+-------------------------------------------------------------------
 Mon Jan  4 12:51:06 UTC 2021 - Adam Majer <adam.majer@suse.de>

 - freeradius-server-radiusd-logrotate.patch: move logrotate
--- a/freeradius-server.spec
+++ b/freeradius-server.spec
@ -18,7 +18,7 @@

 %define unitname radiusd
 Name:           freeradius-server
-Version:        3.0.21
+Version:        3.0.23
 Release:        0

 %if 0%{?suse_version} >= 1500
@ -60,6 +60,7 @@ Source99:       ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.b
 Source100:      freeradius.keyring
 Source1:        radiusd.service
 Source2:        freeradius-tmpfiles.conf
+Patch0:         freeradius-server-fix-perl-shbang.patch
 Patch1:         freeradius-server-tmpfiles.patch
 Patch2:         freeradius-server-radiusd-logrotate.patch
 Patch3:         freeradius-server-rcradiusd.patch
@ -182,6 +183,14 @@ Requires:       %{name} = %{version}
 %description ldap
 FreeRADIUS plugin providing LDAP support.

+%package ldap-schemas
+Summary:        FreeRADIUS support for OpenLDAP
+Group:          System/Daemons
+Requires:       openldap2
+
+%description ldap-schemas
+FreeRADIUS schemas for OpenLDAP.
+
 %package krb5
 Summary:        Kerberos 5 support for freeradius
 Group:          System/Daemons
@ -249,11 +258,7 @@ FreeRADIUS plugin providing SQLite support.
 %autosetup -p1

 %build
-./autogen.sh
-modified="$(sed -n '/^----/n;s/ - .*$//;p;q' "%{_sourcedir}/%{name}.changes")"
-DATE="\"$(date -d "${modified}" "+%%b %%e %%Y")\""
-TIME="\"$(date -d "${modified}" "+%%R")\""
-find . -type f -regex ".*\.c\|.*\.cpp\|.*\.h" -exec sed -i "s/__DATE__/${DATE}/g;s/__TIME__/${TIME}/g" {} +
+autoreconf -fi
 export CFLAGS="%{optflags} -DLDAP_DEPRECATED -fstack-protector -fPIC -DPIC"
 export LDFLAGS="-pie"
 %configure \
@ -298,6 +303,9 @@ make %{?_smp_mflags}
 %install
 mkdir -p %{buildroot}%{_localstatedir}/lib/radiusd
 make install R=%{buildroot} INSTALLSTRIP=
+# Install ldap schema
+install -d         %{buildroot}%{_sysconfdir}/openldap/schema
+install -m 0644 -t %{buildroot}%{_sysconfdir}/openldap/schema doc/schemas/ldap/openldap/*.{ldif,schema}
 # modify default configuration
 RADDB=%{buildroot}%{_sysconfdir}/raddb
 perl -i -pe 's/^#user =.*$/user = radiusd/'   $RADDB/radiusd.conf
@ -340,14 +348,14 @@ rm doc/source/.gitignore
 rm %{buildroot}%{_sbindir}/rc.radiusd
 rm -r %{buildroot}%{_datadir}/doc/freeradius*
 rm -r %{buildroot}%{_libdir}/freeradius/*.*a
-# rm %{buildroot}%{_defaultdocdir}/%{name}/Makefile
-# rm %{buildroot}%{_defaultdocdir}/%{name}/examples/Makefile
+rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/dhcp/mssql
 rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/mssql
 rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/mssql
+rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mssql
+rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/dhcp/oracle
+rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/oracle
 rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/oracle
 rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle
-rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/oracle
-#rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/postgresql
 %if ! %{with json}
 rm %{buildroot}%{_sysconfdir}/raddb/mods-available/rest
 %endif
@ -438,7 +446,7 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/certs
 %{_sysconfdir}/raddb/certs/Makefile
 %{_sysconfdir}/raddb/certs/passwords.mk
-%{_sysconfdir}/raddb/certs/README
+%{_sysconfdir}/raddb/certs/README.md
 %{_sysconfdir}/raddb/certs/xpextensions
 %{_sysconfdir}/raddb/panic.gdb
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/certs/*.cnf
@ -459,8 +467,8 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/moonshot-targeted-ids/*
 %dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/moonshot-targeted-ids
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/preprocess/*
-#%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python
-#%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/python/radiusd.py
+#%%dir %%attr(750,root,radiusd) %%{_sysconfdir}/raddb/mods-config/python
+#%%attr(640,root,radiusd) %%config(noreplace) %%{_sysconfdir}/raddb/mods-config/python/radiusd.py
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql
@ -469,11 +477,12 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/counter
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/cui
+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/dhcp
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main
-#%attr(640,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf
-#%attr(640,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/schema.sql
+#%%attr(640,root,radiusd) %%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf
+#%%attr(640,root,radiusd) %%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/schema.sql
 %attr(640,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/sqlite/schema.sql

 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/unbound
@ -506,9 +515,11 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/abfab-tr-idp
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/channel_bindings
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/challenge
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/resource-check
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/totp

 # sites-enabled
-# symlink: %{_sysconfdir}/raddb/sites-enabled/xxx -> ../sites-available/xxx
+# symlink: %%{_sysconfdir}/raddb/sites-enabled/xxx -> ../sites-available/xxx
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/sites-enabled
 %config(missingok) %{_sysconfdir}/raddb/sites-enabled/inner-tunnel
 %config(missingok) %{_sysconfdir}/raddb/sites-enabled/default
@ -528,6 +539,9 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/detail.example.com
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/detail.log
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/dhcp
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/dhcp_files
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/dhcp_passwd
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/dhcp_sql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/dhcp_sqlippool
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/digest
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/dynamic_clients
@ -571,9 +585,11 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/soh
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/sometimes
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/sql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/sql_map
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/sqlcounter
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/sqlippool
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/sradutmp
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/totp
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/unix
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/utf8
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/wimax
@ -584,7 +600,7 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/couchbase

 # mods-enabled
-# symlink: %{_sysconfdir}/raddb/mods-enabled/xxx -> ../mods-available/xxx
+# symlink: %%{_sysconfdir}/raddb/mods-enabled/xxx -> ../mods-available/xxx
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-enabled
 %config(missingok) %{_sysconfdir}/raddb/mods-enabled/always
 %config(missingok) %{_sysconfdir}/raddb/mods-enabled/attr_filter
@ -613,6 +629,7 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %config(missingok) %{_sysconfdir}/raddb/mods-enabled/replicate
 %config(missingok) %{_sysconfdir}/raddb/mods-enabled/soh
 %config(missingok) %{_sysconfdir}/raddb/mods-enabled/sradutmp
+%config(missingok) %{_sysconfdir}/raddb/mods-enabled/totp
 %config(missingok) %{_sysconfdir}/raddb/mods-enabled/unix
 %config(missingok) %{_sysconfdir}/raddb/mods-enabled/utf8
 %config(missingok) %{_sysconfdir}/raddb/mods-enabled/unpack
@ -672,7 +689,6 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %{_libdir}/freeradius/rlm_eap.so
 %{_libdir}/freeradius/rlm_eap_fast.so
 %{_libdir}/freeradius/rlm_eap_gtc.so
-%{_libdir}/freeradius/rlm_eap_leap.so
 %{_libdir}/freeradius/rlm_eap_md5.so
 %{_libdir}/freeradius/rlm_eap_mschapv2.so
 %{_libdir}/freeradius/rlm_eap_peap.so
@ -702,6 +718,7 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %{_libdir}/freeradius/rlm_soh.so
 %{_libdir}/freeradius/rlm_sometimes.so
 %{_libdir}/freeradius/rlm_sql.so
+%{_libdir}/freeradius/rlm_sql_map.so
 %{_libdir}/freeradius/rlm_sqlcounter.so
 %{_libdir}/freeradius/rlm_sqlippool.so
 %if %{with freetds}
@ -709,6 +726,7 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %endif
 %{_libdir}/freeradius/rlm_sql_null.so
 %{_libdir}/freeradius/rlm_test.so
+%{_libdir}/freeradius/rlm_totp.so
 %{_libdir}/freeradius/rlm_unix.so
 %{_libdir}/freeradius/rlm_utf8.so
 %{_libdir}/freeradius/rlm_wimax.so
@ -779,13 +797,21 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/cui/mysql/queries.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/cui/mysql/schema.sql

+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/dhcp/mysql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/dhcp/mysql/queries.conf
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/dhcp/mysql/schema.sql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/dhcp/mysql/setup.sql
+
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/queries.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/schema.sql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/procedure.sql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/procedure-no-skip-locked.sql

 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/procedure.sql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/procedure-no-skip-locked.sql

 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/mysql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/mysql/process-radacct.sql
@ -817,10 +843,20 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/cui/postgresql/queries.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/cui/postgresql/schema.sql

+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/dhcp/postgresql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/dhcp/postgresql/queries.conf
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/dhcp/postgresql/schema.sql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/dhcp/postgresql/setup.sql
+
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql/queries.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql/schema.sql

+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/postgresql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/postgresql/procedure.sql
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/postgresql/queries.conf
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/postgresql/schema.sql
+
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/process-radacct.sql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/setup.sql
@ -845,6 +881,10 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/counter/sqlite/monthlycounter.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/counter/sqlite/noresetcounter.conf

+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/dhcp/sqlite
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/dhcp/sqlite/queries.conf
+%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/dhcp/sqlite/schema.sql
+
 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool/sqlite
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/sqlite/queries.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/sqlite/schema.sql
@ -853,7 +893,7 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/sqlite/queries.conf

 %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite
-%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/process-radacct-refresh.sh
+%attr(750,root,radiusd) %config %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/process-radacct-refresh.sh
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/process-radacct-schema.sql
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/queries.conf
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/schema.sql
@ -865,4 +905,11 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
 %{_libdir}/freeradius/rlm_ldap.so
 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/ldap

+%files ldap-schemas
+%defattr(-,root,root)
+%dir %{_sysconfdir}/openldap
+%dir %{_sysconfdir}/openldap/schema
+%config %{_sysconfdir}/openldap/schema/freeradius*.schema
+%config %{_sysconfdir}/openldap/schema/freeradius*.ldif
+
 %changelog