1
0
Dominique Leuenberger 2014-12-23 10:50:40 +00:00 committed by Git OBS Bridge
commit 3a0777f18d
6 changed files with 79 additions and 23 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:781488e18f7b80e241bb5dafa07fcf8f2f7fbe897b337a07367e3f73749ae729
size 2762771

Binary file not shown.

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:5da09a66b5104fc6f4306d5dc867a12f34068bca17860ff480bf29fe1c70d3f2
size 2835915

View File

@ -1,3 +1,66 @@
-------------------------------------------------------------------
Mon Dec 22 09:09:16 UTC 2014 - dimstar@opensuse.org
- Drop .keyring and .sig file: freeradius-server still uses MD5
signatures, which are no longer validated/accepted by GPG 2.1.
-------------------------------------------------------------------
Wed Dec 3 14:22:03 UTC 2014 - vcizek@suse.com
- update to 3.0.5
Some of the new features:
* Allow LDAP to specify arbitrary attributes for dynamic
clients.
* Allow one level of backslashes (finally). See radiusd.conf,
"correct_escapes" setting.
* When supported by OpenSSL, allow TLS 1.1 and TLS 1.2
in EAP methods.
* Allow multiple new connections to be spawned simultaneously
in the connection pool, to cope with spikes in traffic.
* Use kqueue on systems which support it. This allows for
better scaling when using many sockets.
* Home server "response_window" can now take fractions of a
second. See proxy.conf.
* radmin now supports "show module status", as thee counterpart
to "set module status"
* "ipaddr" will now use v6 if no v4 address is present. You should
use "ipv4addr" or "ipv6addr" to force v4/v6 addresses.
* "client" sections will allow "ipaddr = 192.192.0/24". The old
"netmask" is still accepted, but the new format is preferred.
* Allow custom HTTP headers to be set for rlm_rest requests using
control:REST-HTTP-Header (attributes consumed after use).
* Extend format of %{rest:} expansion to allow HTTP method and POST
data to be specified
and urlquoting.
* Add support for aliases in rlm_ldap.
* Add support for connection pool sharing to all modules that use
the connection pool (pool = <instance>).
* "tls" sections now have a "psk_query" configuration item, for dynamic
queries to discover a key from a PSK identity.
* Preliminary support for EAP channel bindings.
* Foundational work for dynamic home servers. They do not yet work,
but this is now only a matter of updating the "realm" module in
a future release.
* Support &attr[*] syntax to copy all instances of an attribute when
used with the += operator in an update section. May be qualified with
a tag.
* The logintime and expiration modules can now be listed in the
post-auth section. This makes some configurations simpler.
* rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get
Framed-IPv6-Prefix returned. The SQL queries have NOT been updated.
Please submit patches.
and numerous; bugfixes
- remove gpg-offline
- create /run/radiusd after install
- drop freeradius-server-opensslversion.patch (upstream)
-------------------------------------------------------------------
Mon Dec 1 10:52:28 UTC 2014 - meissner@suse.com
- freeradius-server-opensslversion.patch: do not check the minor
version of openssl, minor versions are supposed to be compatible.
bnc#906682
-------------------------------------------------------------------
Sun Aug 3 18:31:49 UTC 2014 - sfalken@opensuse.org

View File

@ -1,15 +0,0 @@
pub 1024R/E402497D 2002-02-26
uid Alan T. DeKok <aland@freeradius.org>
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.9 (GNU/Linux)
mI0DPHvAUwAAAQQAurbJqE0YQ2rtnzGohprGUxg8Sp2daZ75BBGhtf7SYcn7GO+5
T2JxVpAmuCtyCYf1LHlq8BlWLKmT9sFLDFTFtRl8X0tGwQ8kHZGmDZ4u7FKFiITH
QIwIAhC8MUKbKCbj52qCSPX8EIiaSLye9Aihbnq5NOSyRm6rqS6Xi+QCSX0ABRG0
JEFsYW4gVC4gRGVLb2sgPGFsYW5kQGZyZWVyYWRpdXMub3JnPokAlQMFEDx7wFOp
LpeL5AJJfQEBe84D/A/FUpBe3J9BIWLxas9rRBRpHObyP0qdr271efbDMXXyd4ei
DHMMh0lm0HbMNEppFs15itzPQucLmzFmoxyjQ2Qjs/aJ8TjZpZdq5K5hpgD24bqQ
/4IWOmuisrQJzo1QvjudbEHnHnOSLHzkxSOQxs4XKtmtQopwcB5Z+PMx/RWS
=keuR
-----END PGP PUBLIC KEY BLOCK-----

View File

@ -24,7 +24,7 @@
%global with_sysvinit 1
%endif
Name: freeradius-server
Version: 3.0.3
Version: 3.0.5
Release: 0
Summary: Very Highly Configurable Radius Server
License: GPL-2.0 and LGPL-2.1
@ -33,8 +33,6 @@ Url: http://www.freeradius.org/
Source: ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2
Source1: radiusd.service
Source2: freeradius-tmpfiles.conf
Source10: ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2.sig
Source11: %{name}.keyring
Patch2: freeradius-server-2.1.6-rcradiusd.patch
Patch7: freeradius-server-fix-cert-bootstrap.patch
Patch8: freeradius-server-initscript-pidfile.patch
@ -50,7 +48,6 @@ BuildRequires: gcc-c++
BuildRequires: gdbm-devel
BuildRequires: gettext-devel
BuildRequires: glibc-devel
BuildRequires: gpg-offline
BuildRequires: krb5-devel
BuildRequires: libcom_err-devel
BuildRequires: libcurl-devel
@ -193,7 +190,6 @@ Requires: %{name} = %{version}
This plugin provides the SQLite support for the FreeRADIUS server project.
%prep
%gpg_verify %{SOURCE10}
%setup -q
%patch2
%patch7 -p1
@ -317,6 +313,7 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
%if 0%{?suse_version} > 1140
%service_add_post %{unitname}.service
systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf
%endif
%preun
@ -388,6 +385,10 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/files/*
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/preprocess
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/preprocess/*
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/python/radiusd.py
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/counter
@ -424,6 +425,9 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/copy-acct-to-home-server
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/buffered-sql
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/tls
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/abfab-tls
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/abfab-tr-idp
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/channel_bindings
# sites-enabled
# symlink: %{_sysconfdir}/raddb/sites-enabled/xxx -> ../sites-available/xxx
@ -492,6 +496,8 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/yubikey
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/unbound
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/unpack
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/abfab_psk_sql
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/couchbase
# mods-enabled
# symlink: %{_sysconfdir}/raddb/mods-enabled/xxx -> ../mods-available/xxx
@ -537,6 +543,8 @@ chgrp radiusd %{_sysconfdir}/raddb/certs/*
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/eap
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/filter
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/operator-name
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/abfab-tr
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/debug
%config(noreplace) %{_sysconfdir}/raddb/users
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/templates.conf