diff --git a/freeradius-server-3.0.19.tar.bz2 b/freeradius-server-3.0.19.tar.bz2 deleted file mode 100644 index 55d32c8..0000000 --- a/freeradius-server-3.0.19.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f457c356e07b6c3cce3e05231c68e23bdfba8452d0db479fe1c85e114e6283c9 -size 3127564 diff --git a/freeradius-server-3.0.19.tar.bz2.sig b/freeradius-server-3.0.19.tar.bz2.sig deleted file mode 100644 index 5db36a8..0000000 Binary files a/freeradius-server-3.0.19.tar.bz2.sig and /dev/null differ diff --git a/freeradius-server-3.0.21.tar.bz2 b/freeradius-server-3.0.21.tar.bz2 new file mode 100644 index 0000000..e0604a9 --- /dev/null +++ b/freeradius-server-3.0.21.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c22dad43954b0cbc957564d3f8cbb942ff09853852d2c2155d54e6bd641a4e7d +size 3184588 diff --git a/freeradius-server-3.0.21.tar.bz2.sig b/freeradius-server-3.0.21.tar.bz2.sig new file mode 100644 index 0000000..0636530 Binary files /dev/null and b/freeradius-server-3.0.21.tar.bz2.sig differ diff --git a/freeradius-server-enable-python3.patch b/freeradius-server-enable-python3.patch new file mode 100644 index 0000000..b95c48a --- /dev/null +++ b/freeradius-server-enable-python3.patch @@ -0,0 +1,32 @@ +Index: freeradius-server-3.0.20/src/modules/stable +=================================================================== +--- freeradius-server-3.0.20.orig/src/modules/stable ++++ freeradius-server-3.0.20/src/modules/stable +@@ -25,6 +25,7 @@ rlm_passwd + rlm_perl + rlm_preprocess + rlm_python ++rlm_python3 + rlm_radutmp + rlm_realm + rlm_rest +Index: freeradius-server-3.0.20/src/modules/rlm_python3/example.py +=================================================================== +--- freeradius-server-3.0.20.orig/src/modules/rlm_python3/example.py ++++ freeradius-server-3.0.20/src/modules/rlm_python3/example.py +@@ -1,4 +1,4 @@ +-#! /usr/bin/env python3 ++#!/usr/bin/python3 + # + # Python module example file + # Miguel A.L. Paraz +Index: freeradius-server-3.0.20/src/modules/rlm_python3/radiusd.py +=================================================================== +--- freeradius-server-3.0.20.orig/src/modules/rlm_python3/radiusd.py ++++ freeradius-server-3.0.20/src/modules/rlm_python3/radiusd.py +@@ -1,4 +1,4 @@ +-#! /usr/bin/env python3 ++#!/usr/bin/python3 + # + # Definitions for RADIUS programs + # diff --git a/freeradius-server-opensslversion.patch b/freeradius-server-opensslversion.patch index 392ffd3..ebac44e 100644 --- a/freeradius-server-opensslversion.patch +++ b/freeradius-server-opensslversion.patch @@ -2,45 +2,17 @@ Author: Adam Majer Summary: SUSE OpenSSL version scheme does not follow upstream. Relax, breathe, apply. -Index: freeradius-server-3.0.12/src/main/version.c +Index: freeradius-server-3.0.20/src/main/version.c =================================================================== ---- freeradius-server-3.0.12.orig/src/main/version.c -+++ freeradius-server-3.0.12/src/main/version.c -@@ -50,36 +50,7 @@ static long ssl_built = OPENSSL_VERSION_ +--- freeradius-server-3.0.20.orig/src/main/version.c ++++ freeradius-server-3.0.20/src/main/version.c +@@ -52,6 +52,9 @@ static long ssl_built = OPENSSL_VERSION_ */ int ssl_check_consistency(void) { -- long ssl_linked; -- -- ssl_linked = SSLeay(); -- -- /* -- * Status mismatch always triggers error. -- */ -- if ((ssl_linked & 0x0000000f) != (ssl_built & 0x0000000f)) { -- mismatch: -- ERROR("libssl version mismatch. built: %lx linked: %lx", -- (unsigned long) ssl_built, -- (unsigned long) ssl_linked); -- -- return -1; -- } -- -- /* -- * Use the OpenSSH approach and relax fix checks after version -- * 1.0.0 and only allow moving backwards within a patch -- * series. -- */ -- if (ssl_built & 0xf0000000) { -- if ((ssl_built & 0xfffff000) != (ssl_linked & 0xfffff000) || -- (ssl_built & 0x00000ff0) > (ssl_linked & 0x00000ff0)) goto mismatch; -- /* -- * Before 1.0.0 we require the same major minor and fix version -- * and ignore the patch number. -- */ -- } else if ((ssl_built & 0xfffff000) != (ssl_linked & 0xfffff000)) goto mismatch; -- -+ // noop, since ABI is compatible for SUSE OpenSSL - return 0; - } ++ // noop, since ABI is compatible for SUSE OpenSSL ++ return 0; ++ + long ssl_linked; + ssl_linked = SSLeay(); diff --git a/freeradius-server.changes b/freeradius-server.changes index 96e9d5f..fc3c94e 100644 --- a/freeradius-server.changes +++ b/freeradius-server.changes @@ -1,3 +1,158 @@ +------------------------------------------------------------------- +Tue Mar 24 15:31:22 UTC 2020 - Adam Majer + +- update to 3.0.21 + + +Feature Improvements + + * New stored procedure for allocating IPs with PostgreSQL + Rates of 1500 IPs per second are now possible + See raddb/mods-config/sql/ippool/postgresql/procedure.sql + * Add SQL IP pool support for Microsoft SQL Server + See raddb/mods-config/sql/ippool/mssql/ + * Added RCNTEC dictionary. Closes #3168. + * Added Pica8 dictionary. Closes #3179. + * Add TLS-Client-Cert-Valid-Since attribute holding not + Before date Patch from Boris Lytochkin. Fixes #3157. + * Generate attributes containing unknown OIDs See raddb/sites-available/tls + * Update the WiMAX dictionary. + * Added ability to rlm_python(Python2) show a stacktrace + from errors. #2979. + * Add WiFi Alliance Policy OIDs. + See raddb/certs/xpextensions + * radmin now shows coa stats, too. + * Sample schema extensions for summarizing data in SQL + See mods-config/sql/main/*/process-radacct.sql + * Update dictionary.aerohive, dictionary.fortinet, + dictionary.arista and dictionary.erx. + * Added VAS Experts dictionary. + * Many updates to RPM and jenkins builds from Matthew Newton. + * Added %C (time now in seconds) and %c (microsecond component of now) + back-ported from the "master" branch. + * Add reload capability to systemd unit file in Debian and RedHat. + * Increase timestamp precision in postauth to maximum supported by each + database and simplify (and make more consistent between drivers) + the timestamps in SQL queries by using expansions. + * Option to set dictionary path in raduat script. + +Bug Fixes + + * Various fixes found by PVS-Studio. + * Set permissions of certificates in bootstrap shell script Fixes #3132. + * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141. + * Skip processing proxy reply if there are no home servers available. + * Update SQLite IPPool queries. Fixes #3177 + * rlm_sql_unixodbc fixes. Fixes #2822. + * Fixes when building with LibreSSL. + * Fix the rlm_python3 build. Note that this module is experimental. #3183. + * The rlm_python should append the 'python_path' paths in 'sys.path'. + It fixes the expected behavior to use the existing Python modules + Fixes #3180. + * Fix rlm_python to print the script errors properly. + * Bound total query time for PostgreSQL. Fixes #3253. + * Many fixes to Oracle sqlippool. It now does 500 IPs per second + without any tuning. Fixes #3270. + * Reference sqlippool by it's correct name. Fixes #3272. + * Revert 3.0.20 patch which caused crashes on duplicate clients. + * Update WiMAX-MSK attribute. Fixes #3280. + * Fix crash when trying to access non-existant regex capture group. + * Use timestamps (request or server) rather than SQL NOW() + in accounting queries so that these are stable when replayed + from a file buffer. + +- freeradius-python3_patches.patch: upstreamed + +------------------------------------------------------------------- +Tue Mar 17 13:42:37 UTC 2020 - Adam Majer + +- update to 3.0.20 + +Feature Improvements + * Added Force10 dictionary. + * Update dictionary.hp with new attributes. #2690. + * Update dictionary.aruba with new attributes. #2696. + * Fix side-channel leak in EAP-PWD (bsc#1166858, CVE-2019-20510) + * Relax OpenSSL version checks, now that their API is both public, and stable. + * Note that tls_min_version/tls_max_version also support "1.3" + Since there is no standard yet for EAP with TLS 1.3, it will not work. + * Added tripplite dictionary from #2760. + * Switch to the async interface for rlm_sql_postgresql so that + we can enforce query_timeout. + * Added new LDAP option 'allow_dangling_group_ref'. + * Updated documentation and functionality for EAP session caching + See "cache" section of mods-available/eap. + * Tighten systemd unit file security. Fixes #2637. + * Disable TLS 1.0 and TLS 1.1 support in the default configuration + We STRONGLY recommend doing this for all installations. + * Add expansions for *outgoing* Radsec connections + "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and + TLS-Cert-* attributes. Fixes #2839. + * Add %{listen:tls} which returns "yes" or "no" for + TLS or non-TLS connections. + * Update dictionary.lancom with new attributes. #2847. + * Added rlm_sql_mongo. See raddb/mods-available/sql. + Note that this module is experimental. + * Added more documentation in sites-available/robust-proxy-accounting. + * sqlippool now re-allocates unexpired leases, to prevent IP pool + exhaustion when clients perform multiple reauthentication attempts + * Add support to radmin keep the history in ~/.radmin_history. + * Add support for ENV and LD_PRELOAD in radiusd.conf. + See the new ENV sub-section of radiusd.conf. + * Update dictionary.aptilo. #3002. + * Update dictionary.airespace. #3039. + * Add sites-available/coa-relay, which makes CoA easier #3045. + * Add example stored procedure for IP Pools in MySQL + See mods-config/sql/ippool/mysql/procedure.sql + * Update dictionary.dhcp dictionary with the recent hardware types. + * Add experimental rlm_python3. This should largely work + the same as rlm_python, which was Python2 only. + * Add Dockerfiles for Debian10 and CentOS8. + * Add RPM spec file compatibility for RHEL/CentOS 8. + * Notes on certificate constraints. See raddb/certs/server.cnf. + * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585. + +Bug Fixes + + * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627 + * ERX-Acct-Request-Reason is "integer". Closes #2635. + * Fix a slow memory leak in the file management code. + * Try to fix file permissions if they get modified while + the server is running + * Fix slow memory leak with clients. + * Fix request and connection timeouts in rlm_rest. + * Fix systemd issues. + * Fixes from clang analyzer. + * Fix missing include for the dictionaries: + alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn, + audiocodes,avaya,bristol, columbia_university,freedhcp,garderos, + infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus. + * Fix internal sanity check when running with "-Xx". + * Allow "inner-tunnel" virtual servers to work better + with "accept" and "reject" policies. + * Fix dictionary.huawei data types for + Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address. + * Framed-Interface-ID in postgresql/queries.conf is string, + not inet Fixes #2817. + * Fix rlm_cache to complain on unknown attributes in the "update" + section of its configuration. + * Add configure checks for -latomic. This helps on armel, + mips and mipsel. Fixes #2828. + * Add support to Oracle 19 and 18. Via #2857. + * Add support for decoding tags in rlm_rest. Fixes #2848. + * Use correct passwords when updating CRLs in raddb/certs/. + * Properly separate "originate-coa" packets when accounting + packets are read from the detail file reader. + * Use the correct virtual server for pre/post-proxy. + * radsqlrelay fixes backported from "master" branch + * Fix DoS issues due to multithreaded BN_CTX access + (bsc#1166847, CVE-2019-17185) + +- disable python2 for SLE15 and Factory +- freeradius-server-enable-python3.patch: enable Python3 module +- freeradius-python3_patches.patch: backport python3 fixes from upstream +- freeradius-server-opensslversion.patch: updated + ------------------------------------------------------------------- Wed Mar 11 13:18:37 UTC 2020 - Adam Majer diff --git a/freeradius-server.spec b/freeradius-server.spec index 1011020..3f0b9f4 100644 --- a/freeradius-server.spec +++ b/freeradius-server.spec @@ -20,9 +20,15 @@ %define apxs2 apxs2-prefork %define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR) Name: freeradius-server -Version: 3.0.19 +Version: 3.0.21 Release: 0 +%if 0%{?suse_version} >= 1500 +%bcond_with python2 +%else +%bcond_without python2 +%endif + %if 0%{?suse_version} > 1140 %bcond_without systemd %bcond_without libjson @@ -62,6 +68,7 @@ Patch3: freeradius-server-rcradiusd.patch Patch5: freeradius-server-rlm_sql_unixodbc-configure.patch Patch6: freeradius-server-radclient-init-error-buffer.patch Patch7: freeradius-server-opensslversion.patch +Patch8: freeradius-server-enable-python3.patch BuildRequires: apache2-devel BuildRequires: cyrus-sasl-devel BuildRequires: db-devel @@ -96,7 +103,10 @@ BuildRequires: openssl-devel > 1.0 BuildRequires: pam-devel BuildRequires: perl BuildRequires: postgresql-devel +%if 0%{with python2} BuildRequires: python-devel +%endif +BuildRequires: python3-devel BuildRequires: sqlite3-devel BuildRequires: unixODBC-devel %if 0%{?suse_version} > 1110 @@ -110,14 +120,12 @@ Requires: %insserv_prereq Requires: %{name}-libs = %{version} Requires: coreutils Requires: pwdutils -Requires: python Requires(pre): openssl Requires(pre): perl Recommends: logrotate Provides: freeradius = %{version} Provides: radiusd Obsoletes: freeradius < %{version} -BuildRoot: %{_tmppath}/%{name}-%{version}-build %{?libperl_requires} Conflicts: radiusd-livingston radiusd-cistron icradius %if %{with systemd} @@ -199,12 +207,19 @@ FreeRADIUS plugin providing Perl support. %package python Summary: Python support for freeradius Group: System/Daemons -BuildRequires: python-devel Requires: %{name} = %{version} %description python FreeRADIUS plugin providing Python support. +%package python3 +Summary: Python3 support for freeradius +Group: System/Daemons +Requires: %{name} = %{version} + +%description python3 +FreeRADIUS plugin providing Python3 support. + %package mysql Summary: MySQL support for freeradius Group: System/Daemons @@ -233,15 +248,10 @@ Requires: %{name} = %{version} FreeRADIUS plugin providing SQLite support. %prep -%setup -q -%patch1 -p1 -%patch2 -p1 -%patch3 -p1 -%patch5 -p1 -%patch6 -p1 -%patch7 -p1 +%autosetup -p1 %build +./autogen.sh modified="$(sed -n '/^----/n;s/ - .*$//;p;q' "%{_sourcedir}/%{name}.changes")" DATE="\"$(date -d "${modified}" "+%%b %%e %%Y")\"" TIME="\"$(date -d "${modified}" "+%%R")\"" @@ -251,6 +261,7 @@ export LDFLAGS="-pie" %configure \ --disable-static \ --libdir=%{_libdir}/freeradius \ + --with-unixodbc-dir=%{_prefix} \ --disable-ltdl-install \ --enable-strict-dependencies \ --with-edir \ @@ -269,6 +280,10 @@ export LDFLAGS="-pie" --without-rlm_rediswho \ --without-rlm_sql_oracle \ --without-rlm_securid \ +%if ! %{with python2} + --without-rlm_python \ +%endif + --with-rlm-python3-include-dir=%{_includedir}/python%{python3_version}%{py3_abiflags} \ %if ! %{with memcached} --without-rlm_cache_memcached \ %endif @@ -313,32 +328,37 @@ cp -al %{buildroot}%{_sbindir}/radiusd %{buildroot}%{_sbindir}/radrelay install -D -d -m 0710 %{buildroot}%{runpath}/radiusd mv -v doc/README doc/README.doc # remove unneeded stuff -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/*.crt -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/*.csr -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/*.der -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/*.key -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/*.pem -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/*.p12 -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/index.* -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/serial* -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/dh -rm -f %{buildroot}%{_sysconfdir}/raddb/certs/random -rm -rf doc/00-OLD -rm -rf doc/.gitignore -rm -rf doc/source/.gitignore -rm -f %{buildroot}%{_sbindir}/rc.radiusd -rm -rf %{buildroot}%{_datadir}/doc/freeradius* -rm -rf %{buildroot}%{_libdir}/freeradius/*.*a -rm -f %{buildroot}%{_defaultdocdir}/%{name}/Makefile -rm -f %{buildroot}%{_defaultdocdir}/%{name}/examples/Makefile -rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/mssql -rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/oracle -rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle -rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/oracle -rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/postgresql +rm %{buildroot}%{_sysconfdir}/raddb/certs/*.crl +rm %{buildroot}%{_sysconfdir}/raddb/certs/*.crt +rm %{buildroot}%{_sysconfdir}/raddb/certs/*.csr +rm %{buildroot}%{_sysconfdir}/raddb/certs/*.der +rm %{buildroot}%{_sysconfdir}/raddb/certs/*.key +rm %{buildroot}%{_sysconfdir}/raddb/certs/*.pem +rm %{buildroot}%{_sysconfdir}/raddb/certs/*.p12 +rm %{buildroot}%{_sysconfdir}/raddb/certs/index.* +rm %{buildroot}%{_sysconfdir}/raddb/certs/serial* +rm %{buildroot}%{_sysconfdir}/raddb/certs/dh +rm doc/source/.gitignore +rm %{buildroot}%{_sbindir}/rc.radiusd +rm -r %{buildroot}%{_datadir}/doc/freeradius* +rm -r %{buildroot}%{_libdir}/freeradius/*.*a +# rm %{buildroot}%{_defaultdocdir}/%{name}/Makefile +# rm %{buildroot}%{_defaultdocdir}/%{name}/examples/Makefile +rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/mssql +rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/mssql +rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/oracle +rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle +rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/oracle +#rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/postgresql %if ! %{with json} rm %{buildroot}%{_sysconfdir}/raddb/mods-available/rest %endif +%if ! %{with python2} +rm %{buildroot}%{_sysconfdir}/raddb/mods-available/python +%endif +rm %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/mongo/queries.conf +rm %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/mongo/queries.conf +rm %{buildroot}%{_sysconfdir}/raddb/sites-available/coa-relay %pre getent group radiusd >/dev/null || %{_sbindir}/groupadd -r radiusd @@ -441,8 +461,8 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/moonshot-targeted-ids/* %dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/moonshot-targeted-ids %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/preprocess/* -%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python -%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/python/radiusd.py +#%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python +#%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/python/radiusd.py %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql @@ -457,6 +477,7 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf #%attr(640,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf #%attr(640,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/schema.sql %attr(640,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/sqlite/schema.sql + %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/unbound %attr(640,root,radiusd) %{_sysconfdir}/raddb/mods-config/unbound/default.conf @@ -535,7 +556,10 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/pap %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/passwd %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/preprocess +%if %{with python2} %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/python +%endif +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/python3 %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/radutmp %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/realm %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/redis @@ -729,11 +753,21 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf %{_libdir}/freeradius/rlm_perl.so +%if %{with python2} %files python %defattr(-,root,root) %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python +%attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python/radiusd.py %{_sysconfdir}/raddb/mods-config/python/example.py* %{_libdir}/freeradius/rlm_python.so +%endif + +%files python3 +%defattr(-,root,root) +%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python3 +%attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python3/example.py +%attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python3/radiusd.py +%{_libdir}/freeradius/rlm_python3.so %files mysql %defattr(-,root,root) @@ -750,11 +784,13 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/queries.conf %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/schema.sql +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/procedure.sql %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/mysql +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/mysql/process-radacct.sql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/mysql/setup.sql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/mysql/queries.conf %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/mysql/schema.sql @@ -788,6 +824,7 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql/schema.sql %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/process-radacct.sql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/setup.sql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/queries.conf %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/schema.sql @@ -818,6 +855,8 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/sqlite/queries.conf %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/process-radacct-refresh.sh +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/process-radacct-schema.sql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/queries.conf %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite/schema.sql