forked from pool/freeradius-server
This commit is contained in:
parent
655cbba530
commit
c67accb0a5
@ -1,12 +0,0 @@
|
|||||||
--- src/modules/rlm_protocol_filter/rlm_protocol_filter.c
|
|
||||||
+++ src/modules/rlm_protocol_filter/rlm_protocol_filter.c
|
|
||||||
@@ -100,8 +100,7 @@
|
|
||||||
return -1;
|
|
||||||
}
|
|
||||||
|
|
||||||
- inst->cs = conf_read("rlm_protocol_filter", 0,
|
|
||||||
- inst->filename, NULL);
|
|
||||||
+ inst->cs = cf_file_read(inst->filename);
|
|
||||||
if (!inst->cs) {
|
|
||||||
filter_detach(inst);
|
|
||||||
return -1;
|
|
@ -1,38 +0,0 @@
|
|||||||
--- src/modules/rlm_sim_files/rlm_sim_files.c
|
|
||||||
+++ src/modules/rlm_sim_files/rlm_sim_files.c
|
|
||||||
@@ -163,7 +163,7 @@
|
|
||||||
if(f)
|
|
||||||
{
|
|
||||||
imsi[0]='\0';
|
|
||||||
- strncat(imsi, f, sizeof(imsi));
|
|
||||||
+ strncat(imsi, f, sizeof(imsi)-1);
|
|
||||||
fieldcount++;
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -177,7 +177,7 @@
|
|
||||||
if(f)
|
|
||||||
{
|
|
||||||
chal[2]='\0';
|
|
||||||
- strncat(chal+2, f, sizeof(chal)-2);
|
|
||||||
+ strncat(chal+2, f, sizeof(chal)-3);
|
|
||||||
fieldcount++;
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -185,7 +185,7 @@
|
|
||||||
if(f)
|
|
||||||
{
|
|
||||||
sres[2]='\0';
|
|
||||||
- strncat(sres+2, f, sizeof(sres)-2);
|
|
||||||
+ strncat(sres+2, f, sizeof(sres)-3);
|
|
||||||
fieldcount++;
|
|
||||||
}
|
|
||||||
|
|
||||||
@@ -193,7 +193,7 @@
|
|
||||||
if(f)
|
|
||||||
{
|
|
||||||
kc[2]='\0';
|
|
||||||
- strncat(kc+2, f, sizeof(kc)-2);
|
|
||||||
+ strncat(kc+2, f, sizeof(kc)-3);
|
|
||||||
fieldcount++;
|
|
||||||
}
|
|
||||||
|
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:d5e1cd96762cc2091d64198bc50d03690f94dfd4d96b36a042dda1490b8143df
|
|
||||||
size 2270018
|
|
11
freeradius-server-2.0.3-raddb.patch
Normal file
11
freeradius-server-2.0.3-raddb.patch
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
--- raddb/Makefile
|
||||||
|
+++ raddb/Makefile
|
||||||
|
@@ -15,6 +15,8 @@
|
||||||
|
policy.txt preproxy_users proxy.conf radiusd.conf \
|
||||||
|
snmp.conf sql.conf sqlippool.conf users policy.conf \
|
||||||
|
sites-available/default sites-available/example \
|
||||||
|
+ sites-available/buffered-sql sites-available/copy-acct-to-home-server \
|
||||||
|
+ sites-available/inner-tunnel sites-available/proxy-inner-tunnel sites-available/vmps \
|
||||||
|
sites-available/README
|
||||||
|
|
||||||
|
#
|
3
freeradius-server-2.0.3.tar.bz2
Normal file
3
freeradius-server-2.0.3.tar.bz2
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:3184e9be6d88df3cdf72a08a7e00222c17bc360289ecf14219df9c81d68d7f79
|
||||||
|
size 2298963
|
@ -1,3 +1,79 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Mar 19 17:23:48 CET 2008 - prusnak@suse.cz
|
||||||
|
|
||||||
|
- updated to 2.0.3
|
||||||
|
Feature improvements
|
||||||
|
* Updated raddb/certs/ca.cnf with extensions to allow ca.der
|
||||||
|
to be imported as a CA on Symbian and Windows Mobile devices.
|
||||||
|
Closes bug #524
|
||||||
|
* Enable multiple matches in "hints" via Fall-Through = Yes.
|
||||||
|
Closes bug #477
|
||||||
|
* Added preliminary SQLite driver, contibuted by Apple.
|
||||||
|
Untested, with no sample configuration. This address bug #470.
|
||||||
|
* Updated logging sub-system so that log messages from libfreeradius
|
||||||
|
can go to the log file, and not stdout.
|
||||||
|
* Added dictionary.rfc5176
|
||||||
|
* EAP module now checks for instance name, and uses that for
|
||||||
|
authentication. This avoids the need to set Auth-Type when
|
||||||
|
there are multiple instances of the EAP module.
|
||||||
|
* Added Module-Return-Code attribute, which contains the value
|
||||||
|
returned by the previous module (ok/fail/update/etc.)
|
||||||
|
Bug fixes
|
||||||
|
* Corrected typos in rlm_dbm. Closes bugs #521 and #522.
|
||||||
|
* Detail file "listen" sections now work much better.
|
||||||
|
* Don't allow old "log_*" to over-ride new format. Closes bug #525
|
||||||
|
* Initialize allocated memory in Oracle SQL driver. This fixes
|
||||||
|
occasional crashes on some systems. Closes bug #518
|
||||||
|
* Call correct function in rlm_protocol_filter. This enables the
|
||||||
|
module to build. Closes bug #512.
|
||||||
|
* Added deprecated flag to build for rlm_krb5. This allows it to
|
||||||
|
run on 64-bit systems. Closes bug #491
|
||||||
|
* Corrected error message when parsing invalid configurations
|
||||||
|
so it doesn't crash. Closes bug #527
|
||||||
|
* Fix handling of timeouts in rlm_ldap that affected 64-bit systems.
|
||||||
|
* Handle $INCLUDE's in "instantiate" section. Closes #528.
|
||||||
|
* Format updates to "man" pages from Stephen Gran.
|
||||||
|
|
||||||
|
- updated to 2.0.2
|
||||||
|
Feature improvements
|
||||||
|
* Added notes on how to debug the server in radiusd.conf
|
||||||
|
* Moved all "log_*" in radiusd.conf to log{} section.
|
||||||
|
The old configurations are still accepted, though.
|
||||||
|
* Added ca.der target in raddb/certs/Makefile. This is
|
||||||
|
needed for importing CA certs into Windows.
|
||||||
|
* Added ability send raw attributes via "Raw-Attribute = 0x0102..."
|
||||||
|
This is available only debug builds. It can be used
|
||||||
|
to create invalid packets! Use it with care.
|
||||||
|
* Permit "unlang" policies inside of Auth-Type{} sub-sections
|
||||||
|
of the authenticate{} section. This makes some policies easier
|
||||||
|
to implement.
|
||||||
|
* "listen" sections can now have "type = proxy". This lets you
|
||||||
|
control which IP is used for sending proxied requests.
|
||||||
|
* Added note on SSL performance to raddb/certs/README
|
||||||
|
Bug fixes
|
||||||
|
* Fixed reading of "detail" files.
|
||||||
|
* Allow inner EAP tunneled sessions to be proxied.
|
||||||
|
* Corrected MySQL schemas
|
||||||
|
* syslog now works in log{} section.
|
||||||
|
* Corrected typo in raddb/certs/client.cnf
|
||||||
|
* Updated raddb/sites-available/proxy-inner-tunnel to
|
||||||
|
permit authentication to work.
|
||||||
|
* Ignore zero-length attributes in received packets.
|
||||||
|
* Correct memcpy when dealing with unknown attributes.
|
||||||
|
* Corrected debugging messages in attr_rewrite.
|
||||||
|
* Corrected generation of State attribute in EAP. This
|
||||||
|
fixes the "failed to remember handler" issues.
|
||||||
|
* Fall back to DEFAULT realm if no realm was found.
|
||||||
|
Based on a patch from Vincent Magnin.
|
||||||
|
* Updated example raddb/sites-available/proxy-inner-tunnel
|
||||||
|
* Corrected behavior of attr_filter to match documentation.
|
||||||
|
This is NOT backwards compatible with previous versions!
|
||||||
|
See "man rlm_attr_filter" for details.
|
||||||
|
|
||||||
|
- dropped patches:
|
||||||
|
* conf_read.patch (included in update)
|
||||||
|
* strncat.patch (obsoleted by update)
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Tue Jan 29 14:33:35 CET 2008 - prusnak@suse.cz
|
Tue Jan 29 14:33:35 CET 2008 - prusnak@suse.cz
|
||||||
|
|
||||||
|
@ -1,5 +1,5 @@
|
|||||||
#
|
#
|
||||||
# spec file for package freeradius-server (Version 2.0.1)
|
# spec file for package freeradius-server (Version 2.0.3)
|
||||||
#
|
#
|
||||||
# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
||||||
# This file and all modifications and additions to the pristine
|
# This file and all modifications and additions to the pristine
|
||||||
@ -9,9 +9,10 @@
|
|||||||
#
|
#
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Name: freeradius-server
|
Name: freeradius-server
|
||||||
Version: 2.0.1
|
Version: 2.0.3
|
||||||
Release: 2
|
Release: 1
|
||||||
License: GPL v2 only; LGPL v2.1 only
|
License: GPL v2 only; LGPL v2.1 only
|
||||||
Group: Productivity/Networking/Radius/Servers
|
Group: Productivity/Networking/Radius/Servers
|
||||||
Provides: radiusd
|
Provides: radiusd
|
||||||
@ -20,14 +21,11 @@ Obsoletes: freeradius < %{version}
|
|||||||
Conflicts: radiusd-livingston radiusd-cistron icradius
|
Conflicts: radiusd-livingston radiusd-cistron icradius
|
||||||
Url: http://www.freeradius.org/
|
Url: http://www.freeradius.org/
|
||||||
Summary: Very Highly Configurable Radius Server
|
Summary: Very Highly Configurable Radius Server
|
||||||
Source0: %{name}-%{version}.tar.bz2
|
Source: %{name}-%{version}.tar.bz2
|
||||||
Source1: radqkstart.pdf
|
|
||||||
Source2: radadmin.pdf
|
|
||||||
Patch0: %{name}-%{version}-ltdl.patch
|
Patch0: %{name}-%{version}-ltdl.patch
|
||||||
Patch1: %{name}-%{version}-dialup_admin.patch
|
Patch1: %{name}-%{version}-dialup_admin.patch
|
||||||
Patch2: %{name}-%{version}-rcradiusd.patch
|
Patch2: %{name}-%{version}-rcradiusd.patch
|
||||||
Patch3: %{name}-%{version}-strncat.patch
|
Patch3: %{name}-%{version}-raddb.patch
|
||||||
Patch4: %{name}-%{version}-conf_read.patch
|
|
||||||
PreReq: %{_sbindir}/useradd %{_sbindir}/groupadd
|
PreReq: %{_sbindir}/useradd %{_sbindir}/groupadd
|
||||||
PreReq: perl
|
PreReq: perl
|
||||||
PreReq: %insserv_prereq %fillup_prereq
|
PreReq: %insserv_prereq %fillup_prereq
|
||||||
@ -36,10 +34,10 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|||||||
%define apxs2 apxs2-prefork
|
%define apxs2 apxs2-prefork
|
||||||
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
|
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
|
||||||
Requires: %{name}-libs = %{version}
|
Requires: %{name}-libs = %{version}
|
||||||
Requires: python
|
Requires: python perl
|
||||||
BuildRequires: db-devel e2fsprogs-devel gcc-c++ gdbm-devel gettext-devel glibc-devel libtool ncurses-devel
|
BuildRequires: db-devel e2fsprogs-devel gcc-c++ gdbm-devel gettext-devel glibc-devel libtool ncurses-devel
|
||||||
BuildRequires: libpcap net-snmp-devel openldap2-devel openssl-devel pam-devel perl postgresql-devel
|
BuildRequires: libpcap-devel net-snmp-devel openldap2-devel openssl-devel pam-devel perl postgresql-devel
|
||||||
BuildRequires: python-devel sed unixODBC-devel zlib-devel
|
BuildRequires: python-devel sed sqlite3-devel unixODBC-devel zlib-devel
|
||||||
BuildRequires: apache2-devel bind-libs cyrus-sasl-devel krb5-devel libapr1-devel libcom_err libmysqlclient-devel
|
BuildRequires: apache2-devel bind-libs cyrus-sasl-devel krb5-devel libapr1-devel libcom_err libmysqlclient-devel
|
||||||
|
|
||||||
%description
|
%description
|
||||||
@ -179,7 +177,7 @@ Summary: FreeRADIUS Documentation
|
|||||||
Requires: %{name}
|
Requires: %{name}
|
||||||
|
|
||||||
%description doc
|
%description doc
|
||||||
FreeRADIUS Documentation
|
This package contains FreeRADIUS Documentation
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@ -197,9 +195,6 @@ Authors:
|
|||||||
%patch1
|
%patch1
|
||||||
%patch2
|
%patch2
|
||||||
%patch3
|
%patch3
|
||||||
%patch4
|
|
||||||
mkdir novell
|
|
||||||
cp -f %{SOURCE1} %{SOURCE2} novell/
|
|
||||||
|
|
||||||
%build
|
%build
|
||||||
export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing -DLDAP_DEPRECATED -fstack-protector"
|
export CFLAGS="$RPM_OPT_FLAGS -fno-strict-aliasing -DLDAP_DEPRECATED -fstack-protector"
|
||||||
@ -418,6 +413,77 @@ rm -rf $RPM_BUILD_ROOT
|
|||||||
%attr(644,root,root) %{_includedir}/freeradius/*.h
|
%attr(644,root,root) %{_includedir}/freeradius/*.h
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Wed Mar 19 2008 prusnak@suse.cz
|
||||||
|
- updated to 2.0.3
|
||||||
|
Feature improvements
|
||||||
|
* Updated raddb/certs/ca.cnf with extensions to allow ca.der
|
||||||
|
to be imported as a CA on Symbian and Windows Mobile devices.
|
||||||
|
Closes bug #524
|
||||||
|
* Enable multiple matches in "hints" via Fall-Through = Yes.
|
||||||
|
Closes bug #477
|
||||||
|
* Added preliminary SQLite driver, contibuted by Apple.
|
||||||
|
Untested, with no sample configuration. This address bug #470.
|
||||||
|
* Updated logging sub-system so that log messages from libfreeradius
|
||||||
|
can go to the log file, and not stdout.
|
||||||
|
* Added dictionary.rfc5176
|
||||||
|
* EAP module now checks for instance name, and uses that for
|
||||||
|
authentication. This avoids the need to set Auth-Type when
|
||||||
|
there are multiple instances of the EAP module.
|
||||||
|
* Added Module-Return-Code attribute, which contains the value
|
||||||
|
returned by the previous module (ok/fail/update/etc.)
|
||||||
|
Bug fixes
|
||||||
|
* Corrected typos in rlm_dbm. Closes bugs #521 and #522.
|
||||||
|
* Detail file "listen" sections now work much better.
|
||||||
|
* Don't allow old "log_*" to over-ride new format. Closes bug #525
|
||||||
|
* Initialize allocated memory in Oracle SQL driver. This fixes
|
||||||
|
occasional crashes on some systems. Closes bug #518
|
||||||
|
* Call correct function in rlm_protocol_filter. This enables the
|
||||||
|
module to build. Closes bug #512.
|
||||||
|
* Added deprecated flag to build for rlm_krb5. This allows it to
|
||||||
|
run on 64-bit systems. Closes bug #491
|
||||||
|
* Corrected error message when parsing invalid configurations
|
||||||
|
so it doesn't crash. Closes bug #527
|
||||||
|
* Fix handling of timeouts in rlm_ldap that affected 64-bit systems.
|
||||||
|
* Handle $INCLUDE's in "instantiate" section. Closes #528.
|
||||||
|
* Format updates to "man" pages from Stephen Gran.
|
||||||
|
- updated to 2.0.2
|
||||||
|
Feature improvements
|
||||||
|
* Added notes on how to debug the server in radiusd.conf
|
||||||
|
* Moved all "log_*" in radiusd.conf to log{} section.
|
||||||
|
The old configurations are still accepted, though.
|
||||||
|
* Added ca.der target in raddb/certs/Makefile. This is
|
||||||
|
needed for importing CA certs into Windows.
|
||||||
|
* Added ability send raw attributes via "Raw-Attribute = 0x0102..."
|
||||||
|
This is available only debug builds. It can be used
|
||||||
|
to create invalid packets! Use it with care.
|
||||||
|
* Permit "unlang" policies inside of Auth-Type{} sub-sections
|
||||||
|
of the authenticate{} section. This makes some policies easier
|
||||||
|
to implement.
|
||||||
|
* "listen" sections can now have "type = proxy". This lets you
|
||||||
|
control which IP is used for sending proxied requests.
|
||||||
|
* Added note on SSL performance to raddb/certs/README
|
||||||
|
Bug fixes
|
||||||
|
* Fixed reading of "detail" files.
|
||||||
|
* Allow inner EAP tunneled sessions to be proxied.
|
||||||
|
* Corrected MySQL schemas
|
||||||
|
* syslog now works in log{} section.
|
||||||
|
* Corrected typo in raddb/certs/client.cnf
|
||||||
|
* Updated raddb/sites-available/proxy-inner-tunnel to
|
||||||
|
permit authentication to work.
|
||||||
|
* Ignore zero-length attributes in received packets.
|
||||||
|
* Correct memcpy when dealing with unknown attributes.
|
||||||
|
* Corrected debugging messages in attr_rewrite.
|
||||||
|
* Corrected generation of State attribute in EAP. This
|
||||||
|
fixes the "failed to remember handler" issues.
|
||||||
|
* Fall back to DEFAULT realm if no realm was found.
|
||||||
|
Based on a patch from Vincent Magnin.
|
||||||
|
* Updated example raddb/sites-available/proxy-inner-tunnel
|
||||||
|
* Corrected behavior of attr_filter to match documentation.
|
||||||
|
This is NOT backwards compatible with previous versions!
|
||||||
|
See "man rlm_attr_filter" for details.
|
||||||
|
- dropped patches:
|
||||||
|
* conf_read.patch (included in update)
|
||||||
|
* strncat.patch (obsoleted by update)
|
||||||
* Tue Jan 29 2008 prusnak@suse.cz
|
* Tue Jan 29 2008 prusnak@suse.cz
|
||||||
- replace obsoleted call to conf_read with cf_file_read (conf_read.patch)
|
- replace obsoleted call to conf_read with cf_file_read (conf_read.patch)
|
||||||
- split off -doc subpackage
|
- split off -doc subpackage
|
||||||
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:e1abcf10cd89bc4f314bf537a2e1ddb071d471db3f4cdc67966998fe722d6d45
|
|
||||||
size 647389
|
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:0cfd1329edbae1296bd1250f52bc569da0cf277b84b21cc80b4528179e5f7745
|
|
||||||
size 207020
|
|
Loading…
Reference in New Issue
Block a user