Accepting request 563800 from home:stroeder:branches:network

update to 3.0.16

OBS-URL: https://build.opensuse.org/request/show/563800
OBS-URL: https://build.opensuse.org/package/show/network/freeradius-server?expand=0&rev=106
This commit is contained in:
OBS User mrdocs 2018-01-15 00:19:02 +00:00 committed by Git OBS Bridge
parent b0d20bd6c1
commit f4f7f11d57
6 changed files with 93 additions and 6 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:23267d8505e7b2909f5bdbf3938ca077c1fe122290dc969304d4f3b594f7e3ba
size 3038070

Binary file not shown.

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:120cb1b75b434f8a2a9f9813da6df99ab92b8e6e24980353f314b04f517e0d84
size 3054887

Binary file not shown.

View File

@ -1,3 +1,92 @@
-------------------------------------------------------------------
Thu Jan 11 23:15:49 UTC 2018 - michael@stroeder.com
- update to 3.0.16
Feature improvements
* rlm_python now supports multiple lists. From #2031.
* Add trust router re-keying. From #2007.
* Add support for Samba / AD LDAP schema.
See doc/schemas/ldap/samba/README.txt and
doc/schemas/ldap/samba/
* Add "tls_min_version" and "tls_max_version" to EAP module
for Debian OpenSSL issues.
* Better documentation for client certificates in PEAP and TTLS:
it usually doesn't work. Fixes #2068.
* Distinguish login failure from AD unavailable. Fixes #2069.
* Update RH spec files. Fixes #2070.
* Run Post-Proxy-Type if all home servers are dead.
Fixes #2072.
* Print offending IP addresses when EAP sessions come from
two upstream home servers, and rate-limit the messages.
* Minor packaging updates.
* Better documentation for rlm_rest.
* EAP-FAST now has it's own "cipher_list", so that it is
easier to configure.
* EAP-FAST now forcibly disables TLS1.2, until such time
as we implement the new keying mechanism from TLS1.2.
* Add documentation for allow_expired_crl.
* Update Debian logrotation. #2093 and #2101.
* DHCP relay can now drop responses. #2095.
* rlm_sqlippool can now assign Delegated-IPv6-Prefix.
It also now can assign any IPv4 or IPv6 address.
Based on patches from maximumG. #2094.
See raddb/mods-available/sqlippool for changes.
* radeapclient can now use EAP-SIM-Ki to dynamically
create the necessary triplets.
* Explain why many LDAP connections are closed.
Fixes #1969.
* Debian build / package issues fixed by Matthew Newton.
* dictionary.patton updates from Brice Schaffner. Fixes #2137.
* Added scripts to build "inner-server.pem", and updated
mods-config/inner-eap and certs/README to match.
* Added provisions for using an external CA. See raddb/certs/
* Include dhcpclient binary in freeradius-dhcp debian packge.
Bug fixes
* Bind the lifetime of program name and python path to the module
FR-AD-002 (redone)
* Pass correct statement length into sqlite3_prepare[_v2]
FR-AD-003 (redone)
* Allow 100-Continue responses with additional headers in rlm_rest.
* fix corner case where detail files were not being locked
correctly.
* Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
Fixes #1947
* Clean up exfile code. Which should help to avoid issues
with reading / writing 100's of detail files.
* Fix build for winbind. Patch from Alex Clouter.
* Fix checkrad for Mikrotik. Patch from Muchael Ducharme.
* Fix home server stats lookup. Patch from Phil Mayers.
* Add libjson-c3 as an optional dependency.
* Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
against NSS, which breaks the server. Fixes #2040.
* rlm_python fixes. Fixes #2041
* Typos in "man" pages. Fixes #2045
* Expand "next" in %{%{...}:-%{...}}. Fixes #2048
* Don't add TLS attributes twice. Fixes #2050.
* Fix memory allocation in rlm_rest. Fixes #2051.
* Update trustrouter for new API. Fixes #2059.
* Fix SQLite issues on FreeBSD. Fixes #2060
* Don't do debug logging of bad passwords. Fixes #2064.
* More graceful handling of "die" in rlm_perl. Fixes #2073.
* Fix occasional crash when using
cisco_accounting_username_bug = yes
* EAP-FAST fixes from Isaac Boukris.
#2078, #2076, and #2082, #2126.
* DHCP fixes, relay, #2092, add run-time check, #2028
* Decode multiple RADIUS packets at a time in highly loaded
RadSec connections. Patch from Jan Tomasek. #2106.
* TunnelPassword is not "single value" in LDAP schema.
Fixes #2061.
* sql log now opens the expanded filename, not the input one.
This was a regression introduced in 3.0.15.
* Remove unnecessary UNIQUE constrain in Oracle schemas.
* Fix SSL thread and locking issues when modules also use SSL.
Fixes #2125 and #2129.
* Re-add dhcpclient "raw packet" changes. Patches from
Nicolas Chaigne and Matthew Newton. Fixes #2155.
-------------------------------------------------------------------
Tue Sep 19 11:18:53 UTC 2017 - adam.majer@suse.de

View File

@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
Version: 3.0.15
Version: 3.0.16
Release: 0
%if 0%{?suse_version} > 1140
@ -565,7 +565,6 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/date
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/detail
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/detail.log
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/dhcp
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/digest
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/dynamic_clients
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/eap
@ -786,7 +785,6 @@ systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/schema.sql
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/extras
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/extras/update_radacct_group.sql
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/extras/voip-postpaid.conf
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/main/postgresql/extras/cisco_h323_db_schema.sql