|
 |
5fa452 |
Summary: High-performance and highly configurable free RADIUS server
|
|
|
5fa452 |
Name: freeradius
|
|
|
5fa452 |
Version: 3.0.13
|
|
|
a7bcdb |
Release: 15%{?dist}
|
|
|
5fa452 |
License: GPLv2+ and LGPLv2+
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
URL: http://www.freeradius.org/
|
|
|
5fa452 |
|
|
|
5fa452 |
# Is elliptic curve cryptography supported?
|
|
|
5fa452 |
%if 0%{?rhel} >= 7 || 0%{?fedora} >= 20
|
|
|
5fa452 |
%global HAVE_EC_CRYPTO 1
|
|
|
5fa452 |
%else
|
|
|
5fa452 |
%global HAVE_EC_CRYPTO 0
|
|
|
5fa452 |
%endif
|
|
|
5fa452 |
|
|
|
5fa452 |
%global dist_base freeradius-server-%{version}
|
|
|
5fa452 |
|
|
|
5fa452 |
Source0: ftp://ftp.freeradius.org/pub/radius/%{dist_base}.tar.bz2
|
|
|
5fa452 |
Source100: radiusd.service
|
|
|
5fa452 |
Source102: freeradius-logrotate
|
|
|
5fa452 |
Source103: freeradius-pam-conf
|
|
|
5fa452 |
Source104: freeradius-tmpfiles.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
Patch1: freeradius-redhat-config.patch
|
|
|
5fa452 |
Patch2: freeradius-Fix-some-issues-found-with-static-analyzers.patch
|
|
|
5fa452 |
Patch3: freeradius-Handle-connection-error-in-rlm_ldap_cacheable_groupo.patch
|
|
|
5fa452 |
Patch4: freeradius-radtest-should-use-Cleartext-Password-for-EAP.patch
|
|
|
5fa452 |
Patch5: freeradius-disable-internal-OpenSSL-cache.patch
|
|
|
5fa452 |
Patch6: freeradius-check-sizeof-packet-.-Found-by-PVS-Studio.patch
|
|
|
5fa452 |
Patch7: freeradius-parse-port.-Closes-2000.patch
|
|
|
5fa452 |
Patch8: freeradius-set-S_IWUSER-when-creating-the-file-not-later.patch
|
|
|
5fa452 |
Patch9: freeradius-FR-GV-302-do-checks-based-on-pointers-not-on-decoded.patch
|
|
|
5fa452 |
Patch10: freeradius-FR-GV-301-handle-malformed-WiMAX-attributes.patch
|
|
|
5fa452 |
Patch11: freeradius-make-data2vp_extended-be-more-like-data2vp_wimax.patch
|
|
|
5fa452 |
Patch12: freeradius-FR-GV-206-decode-option-60-string-not-63-octets-and-.patch
|
|
|
5fa452 |
Patch13: freeradius-FR-GV-303-do-memchr-of-end-p-not-q-p.patch
|
|
|
5fa452 |
Patch14: freeradius-FR-GV-304-check-for-option-overflowing-the-packet.patch
|
|
|
5fa452 |
Patch15: freeradius-FR-GV-201-check-input-output-length-in-make_secret.patch
|
|
|
5fa452 |
Patch16: freeradius-Fix-double-free-in-rlm_sql-acct_redundant.patch
|
|
|
5fa452 |
Patch17: freeradius-EAP-PWD-curve-handling.patch
|
|
|
a7bcdb |
Patch18: freeradius-CVE-2019-13456-10-iterations.patch
|
|
|
a7bcdb |
Patch19: freeradius-paircompare-attribute-reference.patch
|
|
|
a7bcdb |
Patch20: freeradius-no-cleartext-password.patch
|
|
|
a7bcdb |
Patch21: freeradius-correct-receiving-multiple-packets.patch
|
|
|
a7bcdb |
Patch22: freeradius-CVE-2019-17185-DoS-multithreaded-BN-CTX.patch
|
|
|
5fa452 |
|
|
|
5fa452 |
%global docdir %{?_pkgdocdir}%{!?_pkgdocdir:%{_docdir}/%{name}-%{version}}
|
|
|
5fa452 |
|
|
|
5fa452 |
BuildRequires: autoconf
|
|
|
5fa452 |
BuildRequires: gdbm-devel
|
|
|
5fa452 |
BuildRequires: openssl
|
|
|
5fa452 |
BuildRequires: openssl-devel
|
|
|
5fa452 |
BuildRequires: pam-devel
|
|
|
5fa452 |
BuildRequires: zlib-devel
|
|
|
5fa452 |
BuildRequires: net-snmp-devel
|
|
|
5fa452 |
BuildRequires: net-snmp-utils
|
|
|
5fa452 |
BuildRequires: readline-devel
|
|
|
5fa452 |
BuildRequires: libpcap-devel
|
|
|
5fa452 |
BuildRequires: systemd-units
|
|
|
5fa452 |
BuildRequires: libtalloc-devel
|
|
|
5fa452 |
BuildRequires: pcre-devel
|
|
|
5fa452 |
BuildRequires: tncfhh-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
%if ! 0%{?rhel}
|
|
|
5fa452 |
BuildRequires: libyubikey-devel
|
|
|
5fa452 |
BuildRequires: ykclient-devel
|
|
|
5fa452 |
%endif
|
|
|
5fa452 |
|
|
|
5fa452 |
Requires: openssl >= 1.0.1e-34
|
|
|
5fa452 |
Requires(pre): shadow-utils glibc-common
|
|
|
5fa452 |
Requires(post): systemd-sysv
|
|
|
5fa452 |
Requires(post): systemd-units
|
|
|
5fa452 |
Requires(preun): systemd-units
|
|
|
5fa452 |
Requires(postun): systemd-units
|
|
|
5fa452 |
|
|
|
5fa452 |
%description
|
|
|
5fa452 |
The FreeRADIUS Server Project is a high performance and highly configurable
|
|
|
5fa452 |
GPL'd free RADIUS server. The server is similar in some respects to
|
|
|
5fa452 |
Livingston's 2.0 server. While FreeRADIUS started as a variant of the
|
|
|
5fa452 |
Cistron RADIUS server, they don't share a lot in common any more. It now has
|
|
|
5fa452 |
many more features than Cistron or Livingston, and is much more configurable.
|
|
|
5fa452 |
|
|
|
5fa452 |
FreeRADIUS is an Internet authentication daemon, which implements the RADIUS
|
|
|
5fa452 |
protocol, as defined in RFC 2865 (and others). It allows Network Access
|
|
|
5fa452 |
Servers (NAS boxes) to perform authentication for dial-up users. There are
|
|
|
5fa452 |
also RADIUS clients available for Web servers, firewalls, Unix logins, and
|
|
|
5fa452 |
more. Using RADIUS allows authentication and authorization for a network to
|
|
|
5fa452 |
be centralized, and minimizes the amount of re-configuration which has to be
|
|
|
5fa452 |
done when adding or deleting new users.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package doc
|
|
|
5fa452 |
Group: Documentation
|
|
|
5fa452 |
Summary: FreeRADIUS documentation
|
|
|
5fa452 |
|
|
|
5fa452 |
%description doc
|
|
|
5fa452 |
All documentation supplied by the FreeRADIUS project is included
|
|
|
5fa452 |
in this package.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package utils
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Summary: FreeRADIUS utilities
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
Requires: libpcap >= 0.9.4
|
|
|
5fa452 |
|
|
|
5fa452 |
%description utils
|
|
|
5fa452 |
The FreeRADIUS server has a number of features found in other servers,
|
|
|
5fa452 |
and additional features not found in any other server. Rather than
|
|
|
5fa452 |
doing a feature by feature comparison, we will simply list the features
|
|
|
5fa452 |
of the server, and let you decide if they satisfy your needs.
|
|
|
5fa452 |
|
|
|
5fa452 |
Support for RFC and VSA Attributes Additional server configuration
|
|
|
5fa452 |
attributes Selecting a particular configuration Authentication methods
|
|
|
5fa452 |
|
|
|
5fa452 |
%package devel
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Summary: FreeRADIUS development files
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
|
|
|
5fa452 |
%description devel
|
|
|
5fa452 |
Development headers and libraries for FreeRADIUS.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package ldap
|
|
|
5fa452 |
Summary: LDAP support for freeradius
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
BuildRequires: openldap-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
%description ldap
|
|
|
5fa452 |
This plugin provides the LDAP support for the FreeRADIUS server project.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package krb5
|
|
|
5fa452 |
Summary: Kerberos 5 support for freeradius
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
BuildRequires: krb5-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
%description krb5
|
|
|
5fa452 |
This plugin provides the Kerberos 5 support for the FreeRADIUS server project.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package perl
|
|
|
5fa452 |
Summary: Perl support for freeradius
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
|
|
|
5fa452 |
%{?fedora:BuildRequires: perl-devel}
|
|
|
5fa452 |
BuildRequires: perl-devel
|
|
|
5fa452 |
BuildRequires: perl(ExtUtils::Embed)
|
|
|
5fa452 |
|
|
|
5fa452 |
%description perl
|
|
|
5fa452 |
This plugin provides the Perl support for the FreeRADIUS server project.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package python
|
|
|
5fa452 |
Summary: Python support for freeradius
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
BuildRequires: python-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
%description python
|
|
|
5fa452 |
This plugin provides the Python support for the FreeRADIUS server project.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package mysql
|
|
|
5fa452 |
Summary: MySQL support for freeradius
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
BuildRequires: mysql-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
%description mysql
|
|
|
5fa452 |
This plugin provides the MySQL support for the FreeRADIUS server project.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package postgresql
|
|
|
5fa452 |
Summary: Postgresql support for freeradius
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
BuildRequires: postgresql-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
%description postgresql
|
|
|
5fa452 |
This plugin provides the postgresql support for the FreeRADIUS server project.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package sqlite
|
|
|
5fa452 |
Summary: SQLite support for freeradius
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
BuildRequires: sqlite-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
%description sqlite
|
|
|
5fa452 |
This plugin provides the SQLite support for the FreeRADIUS server project.
|
|
|
5fa452 |
|
|
|
5fa452 |
%package unixODBC
|
|
|
5fa452 |
Summary: Unix ODBC support for freeradius
|
|
|
5fa452 |
Group: System Environment/Daemons
|
|
|
5fa452 |
Requires: %{name} = %{version}-%{release}
|
|
|
5fa452 |
BuildRequires: unixODBC-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
%description unixODBC
|
|
|
5fa452 |
This plugin provides the unixODBC support for the FreeRADIUS server project.
|
|
|
5fa452 |
|
|
|
5fa452 |
|
|
|
5fa452 |
%prep
|
|
|
5fa452 |
%setup -q -n %{dist_base}
|
|
|
5fa452 |
# Note: We explicitly do not make patch backup files because 'make install'
|
|
|
5fa452 |
# mistakenly includes the backup files, especially problematic for raddb config files.
|
|
|
5fa452 |
%patch1 -p1
|
|
|
5fa452 |
%patch2 -p1
|
|
|
5fa452 |
%patch3 -p1
|
|
|
5fa452 |
%patch4 -p1
|
|
|
5fa452 |
%patch5 -p1
|
|
|
5fa452 |
%patch6 -p1
|
|
|
5fa452 |
%patch7 -p1
|
|
|
5fa452 |
%patch8 -p1
|
|
|
5fa452 |
%patch9 -p1
|
|
|
5fa452 |
%patch10 -p1
|
|
|
5fa452 |
%patch11 -p1
|
|
|
5fa452 |
%patch12 -p1
|
|
|
5fa452 |
%patch13 -p1
|
|
|
5fa452 |
%patch14 -p1
|
|
|
5fa452 |
%patch15 -p1
|
|
|
5fa452 |
%patch16 -p1
|
|
|
5fa452 |
%patch17 -p1
|
|
|
a7bcdb |
%patch18 -p1
|
|
|
a7bcdb |
%patch19 -p1
|
|
|
a7bcdb |
%patch20 -p1
|
|
|
a7bcdb |
%patch21 -p1
|
|
|
a7bcdb |
%patch22 -p1
|
|
|
5fa452 |
|
|
|
5fa452 |
%build
|
|
|
5fa452 |
# Force compile/link options, extra security for network facing daemon
|
|
|
5fa452 |
%global _hardened_build 1
|
|
|
5fa452 |
|
|
|
5fa452 |
%configure \
|
|
|
5fa452 |
--libdir=%{_libdir}/freeradius \
|
|
|
5fa452 |
--disable-openssl-version-check \
|
|
|
5fa452 |
--with-udpfromto \
|
|
|
5fa452 |
--with-threads \
|
|
|
5fa452 |
--with-docdir=%{docdir} \
|
|
|
5fa452 |
--with-rlm-sql_postgresql-include-dir=/usr/include/pgsql \
|
|
|
5fa452 |
--with-rlm-sql-postgresql-lib-dir=%{_libdir} \
|
|
|
5fa452 |
--with-rlm-sql_mysql-include-dir=/usr/include/mysql \
|
|
|
5fa452 |
--with-mysql-lib-dir=%{_libdir}/mysql \
|
|
|
5fa452 |
--with-unixodbc-lib-dir=%{_libdir} \
|
|
|
5fa452 |
--with-rlm-dbm-lib-dir=%{_libdir} \
|
|
|
5fa452 |
--with-rlm-krb5-include-dir=/usr/kerberos/include \
|
|
|
5fa452 |
--without-rlm_eap_ikev2 \
|
|
|
5fa452 |
--without-rlm_sql_iodbc \
|
|
|
5fa452 |
--without-rlm_sql_firebird \
|
|
|
5fa452 |
--without-rlm_sql_db2 \
|
|
|
5fa452 |
--without-rlm_sql_oracle \
|
|
|
5fa452 |
--without-rlm_rest \
|
|
|
5fa452 |
--without-rlm_unbound \
|
|
|
5fa452 |
--without-rlm_redis \
|
|
|
5fa452 |
--without-rlm_rediswho \
|
|
|
5fa452 |
--without-rlm_cache_memcached
|
|
|
5fa452 |
|
|
|
5fa452 |
make
|
|
|
5fa452 |
|
|
|
5fa452 |
%install
|
|
|
5fa452 |
mkdir -p $RPM_BUILD_ROOT/%{_localstatedir}/lib/radiusd
|
|
|
5fa452 |
make install R=$RPM_BUILD_ROOT
|
|
|
5fa452 |
|
|
|
5fa452 |
# logs
|
|
|
5fa452 |
mkdir -p $RPM_BUILD_ROOT/var/log/radius/radacct
|
|
|
5fa452 |
touch $RPM_BUILD_ROOT/var/log/radius/{radutmp,radius.log}
|
|
|
5fa452 |
|
|
|
5fa452 |
install -D -m 644 %{SOURCE100} $RPM_BUILD_ROOT/%{_unitdir}/radiusd.service
|
|
|
5fa452 |
install -D -m 644 %{SOURCE102} $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/radiusd
|
|
|
5fa452 |
install -D -m 644 %{SOURCE103} $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/radiusd
|
|
|
5fa452 |
|
|
|
5fa452 |
install -d -m 0755 %{buildroot}%{_prefix}/lib/tmpfiles.d
|
|
|
5fa452 |
mkdir -p %{buildroot}%{_localstatedir}/run/
|
|
|
5fa452 |
install -d -m 0710 %{buildroot}%{_localstatedir}/run/radiusd/
|
|
|
5fa452 |
install -d -m 0700 %{buildroot}%{_localstatedir}/run/radiusd/tmp
|
|
|
5fa452 |
install -m 0644 %{SOURCE104} %{buildroot}%{_prefix}/lib/tmpfiles.d/radiusd.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
# install SNMP MIB files
|
|
|
5fa452 |
mkdir -p $RPM_BUILD_ROOT%{_datadir}/snmp/mibs/
|
|
|
5fa452 |
install -m 644 mibs/*RADIUS*.mib $RPM_BUILD_ROOT%{_datadir}/snmp/mibs/
|
|
|
5fa452 |
|
|
|
5fa452 |
# remove unneeded stuff
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/*.crt
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/*.csr
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/*.der
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/*.key
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/*.pem
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/*.p12
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/index.*
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/serial*
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/dh
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/certs/random
|
|
|
5fa452 |
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/usr/sbin/rc.radiusd
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/usr/bin/rbmonkey
|
|
|
5fa452 |
rm -rf $RPM_BUILD_ROOT/%{_libdir}/freeradius/*.a
|
|
|
5fa452 |
rm -rf $RPM_BUILD_ROOT/%{_libdir}/freeradius/*.la
|
|
|
5fa452 |
|
|
|
5fa452 |
rm -rf $RPM_BUILD_ROOT/etc/raddb/mods-config/sql/main/mssql
|
|
|
5fa452 |
|
|
|
5fa452 |
rm -rf $RPM_BUILD_ROOT/etc/raddb/mods-config/sql/ippool/oracle
|
|
|
5fa452 |
rm -rf $RPM_BUILD_ROOT/etc/raddb/mods-config/sql/ippool-dhcp/oracle
|
|
|
5fa452 |
rm -rf $RPM_BUILD_ROOT/etc/raddb/mods-config/sql/main/oracle
|
|
|
5fa452 |
|
|
|
5fa452 |
rm $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/mods-available/unbound
|
|
|
5fa452 |
rm $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/mods-config/unbound/default.conf
|
|
|
5fa452 |
rm $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/mods-available/couchbase
|
|
|
5fa452 |
rm $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/mods-available/abfab*
|
|
|
5fa452 |
rm $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/policy.d/abfab*
|
|
|
5fa452 |
rm $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/policy.d/moonshot-targeted-ids
|
|
|
5fa452 |
rm $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/sites-available/abfab*
|
|
|
5fa452 |
|
|
|
5fa452 |
rm $RPM_BUILD_ROOT/%{_libdir}/freeradius/rlm_test.so
|
|
|
5fa452 |
|
|
|
5fa452 |
# remove unsupported config files
|
|
|
5fa452 |
rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/experimental.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
# install doc files omitted by standard install
|
|
|
5fa452 |
for f in COPYRIGHT CREDITS INSTALL.rst README.rst VERSION; do
|
|
|
5fa452 |
cp $f $RPM_BUILD_ROOT/%{docdir}
|
|
|
5fa452 |
done
|
|
|
5fa452 |
cp LICENSE $RPM_BUILD_ROOT/%{docdir}/LICENSE.gpl
|
|
|
5fa452 |
cp src/lib/LICENSE $RPM_BUILD_ROOT/%{docdir}/LICENSE.lgpl
|
|
|
5fa452 |
cp src/LICENSE.openssl $RPM_BUILD_ROOT/%{docdir}/LICENSE.openssl
|
|
|
5fa452 |
|
|
|
5fa452 |
# add Red Hat specific documentation
|
|
|
5fa452 |
cat >> $RPM_BUILD_ROOT/%{docdir}/REDHAT << EOF
|
|
|
5fa452 |
|
|
|
5fa452 |
Red Hat, RHEL, Fedora, and CentOS specific information can be found on the
|
|
|
5fa452 |
FreeRADIUS Wiki in the Red Hat FAQ.
|
|
|
5fa452 |
|
|
|
5fa452 |
http://wiki.freeradius.org/guide/Red-Hat-FAQ
|
|
|
5fa452 |
|
|
|
5fa452 |
Please reference that document.
|
|
|
5fa452 |
|
|
|
5fa452 |
All documentation is in the freeradius-doc sub-package.
|
|
|
5fa452 |
|
|
|
5fa452 |
EOF
|
|
|
5fa452 |
|
|
|
5fa452 |
|
|
|
5fa452 |
# Make sure our user/group is present prior to any package or subpackage installation
|
|
|
5fa452 |
%pre
|
|
|
5fa452 |
getent group radiusd >/dev/null || /usr/sbin/groupadd -r -g 95 radiusd > /dev/null 2>&1
|
|
|
5fa452 |
getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd -u 95 -c "radiusd user" -d %{_localstatedir}/lib/radiusd -s /sbin/nologin radiusd > /dev/null 2>&1
|
|
|
5fa452 |
exit 0
|
|
|
5fa452 |
|
|
|
5fa452 |
%post
|
|
|
5fa452 |
%systemd_post radiusd.service
|
|
|
5fa452 |
if [ $1 -eq 1 ]; then # install
|
|
|
5fa452 |
# Initial installation
|
|
|
5fa452 |
if [ ! -e /etc/raddb/certs/server.pem ]; then
|
|
|
5fa452 |
/sbin/runuser -g radiusd -c 'umask 007; /etc/raddb/certs/bootstrap' > /dev/null 2>&1
|
|
|
5fa452 |
fi
|
|
|
5fa452 |
fi
|
|
|
5fa452 |
exit 0
|
|
|
5fa452 |
|
|
|
5fa452 |
%preun
|
|
|
5fa452 |
%systemd_preun radiusd.service
|
|
|
5fa452 |
|
|
|
5fa452 |
%postun
|
|
|
5fa452 |
%systemd_postun_with_restart radiusd.service
|
|
|
5fa452 |
if [ $1 -eq 0 ]; then # uninstall
|
|
|
5fa452 |
getent passwd radiusd >/dev/null && /usr/sbin/userdel radiusd > /dev/null 2>&1
|
|
|
5fa452 |
getent group radiusd >/dev/null && /usr/sbin/groupdel radiusd > /dev/null 2>&1
|
|
|
5fa452 |
fi
|
|
|
5fa452 |
exit 0
|
|
|
5fa452 |
|
|
|
5fa452 |
/bin/systemctl try-restart radiusd.service >/dev/null 2>&1 || :
|
|
|
5fa452 |
|
|
|
5fa452 |
|
|
|
5fa452 |
%files
|
|
|
5fa452 |
%defattr(-,root,root)
|
|
|
5fa452 |
|
|
|
5fa452 |
# doc
|
|
|
5fa452 |
%doc %{docdir}/LICENSE.gpl
|
|
|
5fa452 |
%doc %{docdir}/LICENSE.lgpl
|
|
|
5fa452 |
%doc %{docdir}/LICENSE.openssl
|
|
|
5fa452 |
%doc %{docdir}/REDHAT
|
|
|
5fa452 |
|
|
|
5fa452 |
# system
|
|
|
5fa452 |
%config(noreplace) %{_sysconfdir}/pam.d/radiusd
|
|
|
5fa452 |
%config(noreplace) %{_sysconfdir}/logrotate.d/radiusd
|
|
|
5fa452 |
%{_unitdir}/radiusd.service
|
|
|
5fa452 |
%{_prefix}/lib/tmpfiles.d/radiusd.conf
|
|
|
5fa452 |
%dir %attr(710,radiusd,radiusd) %{_localstatedir}/run/radiusd
|
|
|
5fa452 |
%dir %attr(700,radiusd,radiusd) %{_localstatedir}/run/radiusd/tmp
|
|
|
5fa452 |
%dir %attr(755,radiusd,radiusd) %{_localstatedir}/lib/radiusd
|
|
|
5fa452 |
|
|
|
5fa452 |
# configs (raddb)
|
|
|
5fa452 |
%dir %attr(755,root,radiusd) /etc/raddb
|
|
|
5fa452 |
%defattr(-,root,radiusd)
|
|
|
5fa452 |
/etc/raddb/README.rst
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/panic.gdb
|
|
|
5fa452 |
|
|
|
5fa452 |
%attr(644,root,radiusd) %config(noreplace) /etc/raddb/dictionary
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/clients.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/templates.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/trigger.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
# symlink: /etc/raddb/hints -> ./mods-config/preprocess/hints
|
|
|
5fa452 |
%config /etc/raddb/hints
|
|
|
5fa452 |
|
|
|
5fa452 |
# symlink: /etc/raddb/huntgroups -> ./mods-config/preprocess/huntgroups
|
|
|
5fa452 |
%config /etc/raddb/huntgroups
|
|
|
5fa452 |
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/proxy.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/radiusd.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
# symlink: /etc/raddb/users -> ./mods-config/files/authorize
|
|
|
5fa452 |
%config(noreplace) /etc/raddb/users
|
|
|
5fa452 |
|
|
|
5fa452 |
# certs
|
|
|
5fa452 |
%dir %attr(770,root,radiusd) /etc/raddb/certs
|
|
|
5fa452 |
%config(noreplace) /etc/raddb/certs/Makefile
|
|
|
5fa452 |
%config(noreplace) /etc/raddb/certs/passwords.mk
|
|
|
5fa452 |
/etc/raddb/certs/README
|
|
|
5fa452 |
%config(noreplace) /etc/raddb/certs/xpextensions
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/certs/*.cnf
|
|
|
5fa452 |
%attr(750,root,radiusd) /etc/raddb/certs/bootstrap
|
|
|
5fa452 |
|
|
|
5fa452 |
# mods-config
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config
|
|
|
5fa452 |
/etc/raddb/mods-config/README.rst
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/attr_filter
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/attr_filter/*
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/files
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/files/*
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/preprocess
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/preprocess/*
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/counter
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/cui
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/ippool
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/ippool-dhcp
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main
|
|
|
5fa452 |
|
|
|
5fa452 |
# sites-available
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/sites-available
|
|
|
5fa452 |
/etc/raddb/sites-available/README
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/control-socket
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/decoupled-accounting
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/robust-proxy-accounting
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/soh
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/coa
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/example
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/inner-tunnel
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/dhcp
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/check-eap-tls
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/status
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/dhcp.relay
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/virtual.example.com
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/originate-coa
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/vmps
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/default
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/proxy-inner-tunnel
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/dynamic-clients
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/copy-acct-to-home-server
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/buffered-sql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/tls
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/channel_bindings
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/challenge
|
|
|
5fa452 |
|
|
|
5fa452 |
# sites-enabled
|
|
|
5fa452 |
# symlink: /etc/raddb/sites-enabled/xxx -> ../sites-available/xxx
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/sites-enabled
|
|
|
5fa452 |
%config(missingok) /etc/raddb/sites-enabled/inner-tunnel
|
|
|
5fa452 |
%config(missingok) /etc/raddb/sites-enabled/default
|
|
|
5fa452 |
|
|
|
5fa452 |
# mods-available
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-available
|
|
|
5fa452 |
/etc/raddb/mods-available/README.rst
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/always
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/attr_filter
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/cache
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/cache_eap
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/chap
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/counter
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/cui
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/date
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/detail
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/detail.example.com
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/detail.log
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/dhcp
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/dhcp_sqlippool
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/digest
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/dynamic_clients
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/eap
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/echo
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/etc_group
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/exec
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/expiration
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/expr
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/files
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/idn
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/inner-eap
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/ippool
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/linelog
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/logintime
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/mac2ip
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/mac2vlan
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/mschap
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/ntlm_auth
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/opendirectory
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/otp
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/pam
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/pap
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/passwd
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/preprocess
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/python
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/radutmp
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/realm
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/redis
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/rediswho
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/replicate
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/rest
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/smbpasswd
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/smsotp
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/soh
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/sometimes
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/sql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/sqlcounter
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/sqlippool
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/sradutmp
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/unix
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/unpack
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/utf8
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/wimax
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/yubikey
|
|
|
5fa452 |
|
|
|
5fa452 |
# mods-enabled
|
|
|
5fa452 |
# symlink: /etc/raddb/mods-enabled/xxx -> ../mods-available/xxx
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-enabled
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/always
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/attr_filter
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/cache_eap
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/chap
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/date
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/detail
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/detail.log
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/dhcp
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/digest
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/dynamic_clients
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/eap
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/echo
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/exec
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/expiration
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/expr
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/files
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/linelog
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/logintime
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/mschap
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/ntlm_auth
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/pap
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/passwd
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/preprocess
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/radutmp
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/realm
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/replicate
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/soh
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/sradutmp
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/unix
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/unpack
|
|
|
5fa452 |
%config(missingok) /etc/raddb/mods-enabled/utf8
|
|
|
5fa452 |
|
|
|
5fa452 |
# policy
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/policy.d
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/accounting
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/canonicalization
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/control
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/cui
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/debug
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/dhcp
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/eap
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/filter
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.d/operator-name
|
|
|
5fa452 |
|
|
|
5fa452 |
|
|
|
5fa452 |
# binaries
|
|
|
5fa452 |
%defattr(-,root,root)
|
|
|
5fa452 |
/usr/sbin/checkrad
|
|
|
5fa452 |
/usr/sbin/raddebug
|
|
|
5fa452 |
/usr/sbin/radiusd
|
|
|
5fa452 |
/usr/sbin/radmin
|
|
|
5fa452 |
|
|
|
5fa452 |
# dictionaries
|
|
|
5fa452 |
%dir %attr(755,root,root) /usr/share/freeradius
|
|
|
5fa452 |
/usr/share/freeradius/*
|
|
|
5fa452 |
|
|
|
5fa452 |
# logs
|
|
|
5fa452 |
%dir %attr(700,radiusd,radiusd) /var/log/radius/
|
|
|
5fa452 |
%dir %attr(700,radiusd,radiusd) /var/log/radius/radacct/
|
|
|
5fa452 |
%ghost %attr(644,radiusd,radiusd) /var/log/radius/radutmp
|
|
|
5fa452 |
%ghost %attr(600,radiusd,radiusd) /var/log/radius/radius.log
|
|
|
5fa452 |
|
|
|
5fa452 |
# libs
|
|
|
5fa452 |
%attr(755,root,root) %{_libdir}/freeradius/lib*.so*
|
|
|
5fa452 |
|
|
|
5fa452 |
# loadable modules
|
|
|
5fa452 |
%dir %attr(755,root,root) %{_libdir}/freeradius
|
|
|
5fa452 |
%{_libdir}/freeradius/proto_dhcp.so
|
|
|
5fa452 |
%{_libdir}/freeradius/proto_vmps.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_always.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_attr_filter.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_cache.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_cache_rbtree.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_chap.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_counter.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_cram.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_date.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_detail.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_dhcp.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_digest.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_dynamic_clients.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_fast.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_gtc.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_leap.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_md5.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_mschapv2.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_peap.so
|
|
|
5fa452 |
%if %{HAVE_EC_CRYPTO}
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_pwd.so
|
|
|
5fa452 |
%endif
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_sim.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_tls.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_tnc.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_eap_ttls.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_exec.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_expiration.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_expr.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_files.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_ippool.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_linelog.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_logintime.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_mschap.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_otp.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_pam.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_pap.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_passwd.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_preprocess.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_radutmp.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_realm.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_replicate.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_soh.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sometimes.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sql.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sqlcounter.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sqlippool.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sql_null.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_unix.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_unpack.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_utf8.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_wimax.so
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_yubikey.so
|
|
|
5fa452 |
|
|
|
5fa452 |
# main man pages
|
|
|
5fa452 |
%doc %{_mandir}/man5/clients.conf.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/dictionary.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/radiusd.conf.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/radrelay.conf.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_always.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_attr_filter.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_chap.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_counter.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_detail.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_digest.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_expr.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_files.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_idn.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_mschap.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_pap.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_passwd.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_realm.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_sql.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/rlm_unix.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/unlang.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/users.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man8/raddebug.8.gz
|
|
|
5fa452 |
%doc %{_mandir}/man8/radiusd.8.gz
|
|
|
5fa452 |
%doc %{_mandir}/man8/radmin.8.gz
|
|
|
5fa452 |
%doc %{_mandir}/man8/radrelay.8.gz
|
|
|
5fa452 |
|
|
|
5fa452 |
# MIB files
|
|
|
5fa452 |
%{_datadir}/snmp/mibs/*RADIUS*.mib
|
|
|
5fa452 |
|
|
|
5fa452 |
%files doc
|
|
|
5fa452 |
|
|
|
5fa452 |
%doc %{docdir}/
|
|
|
5fa452 |
|
|
|
5fa452 |
|
|
|
5fa452 |
%files utils
|
|
|
5fa452 |
/usr/bin/*
|
|
|
5fa452 |
|
|
|
5fa452 |
# utils man pages
|
|
|
5fa452 |
%doc %{_mandir}/man1/radclient.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man1/radeapclient.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man1/radlast.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man1/radtest.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man1/radwho.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man1/radzap.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man1/rad_counter.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man1/smbencrypt.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man1/dhcpclient.1.gz
|
|
|
5fa452 |
%doc %{_mandir}/man5/checkrad.5.gz
|
|
|
5fa452 |
%doc %{_mandir}/man8/radcrypt.8.gz
|
|
|
5fa452 |
%doc %{_mandir}/man8/radsniff.8.gz
|
|
|
5fa452 |
%doc %{_mandir}/man8/radsqlrelay.8.gz
|
|
|
5fa452 |
%doc %{_mandir}/man8/rlm_ippool_tool.8.gz
|
|
|
5fa452 |
|
|
|
5fa452 |
%files devel
|
|
|
5fa452 |
/usr/include/freeradius
|
|
|
5fa452 |
|
|
|
5fa452 |
%files krb5
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_krb5.so
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/krb5
|
|
|
5fa452 |
|
|
|
5fa452 |
%files perl
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/perl
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/perl
|
|
|
5fa452 |
%attr(640,root,radiusd) /etc/raddb/mods-config/perl/example.pl
|
|
|
5fa452 |
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_perl.so
|
|
|
5fa452 |
|
|
|
5fa452 |
%files python
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/python
|
|
|
5fa452 |
/etc/raddb/mods-config/python/example.py*
|
|
|
5fa452 |
/etc/raddb/mods-config/python/radiusd.py*
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_python.so
|
|
|
5fa452 |
|
|
|
5fa452 |
%files mysql
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/counter/mysql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/mysql/dailycounter.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/mysql/expire_on_login.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/mysql/monthlycounter.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/mysql/noresetcounter.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/cui/mysql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/cui/mysql/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/cui/mysql/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/ippool/mysql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool/mysql/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool/mysql/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/ippool-dhcp/mysql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/mysql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/mysql/setup.sql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/mysql/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/mysql/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/mysql/extras
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/mysql/extras/wimax
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/mysql/extras/wimax/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/mysql/extras/wimax/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/ndb
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/ndb/setup.sql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/ndb/schema.sql
|
|
|
5fa452 |
/etc/raddb/mods-config/sql/main/ndb/README
|
|
|
5fa452 |
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sql_mysql.so
|
|
|
5fa452 |
|
|
|
5fa452 |
%files postgresql
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/counter/postgresql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/postgresql/dailycounter.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/postgresql/expire_on_login.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/postgresql/monthlycounter.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/postgresql/noresetcounter.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/cui/postgresql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/cui/postgresql/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/cui/postgresql/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/ippool/postgresql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool/postgresql/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool/postgresql/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/postgresql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/setup.sql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/postgresql/extras
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/extras/update_radacct_group.sql
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/extras/voip-postpaid.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/postgresql/extras/cisco_h323_db_schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sql_postgresql.so
|
|
|
5fa452 |
|
|
|
5fa452 |
%files sqlite
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/counter/sqlite
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/sqlite/dailycounter.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/sqlite/expire_on_login.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/sqlite/monthlycounter.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/counter/sqlite/noresetcounter.conf
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/cui/sqlite
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/cui/sqlite/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/cui/sqlite/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/ippool/sqlite
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool/sqlite/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool/sqlite/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/ippool-dhcp/sqlite
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool-dhcp/sqlite/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/ippool-dhcp/sqlite/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/main/sqlite
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/sqlite/queries.conf
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-config/sql/main/sqlite/schema.sql
|
|
|
5fa452 |
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sql_sqlite.so
|
|
|
5fa452 |
|
|
|
5fa452 |
%files ldap
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_ldap.so
|
|
|
5fa452 |
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/ldap
|
|
|
5fa452 |
|
|
|
5fa452 |
%files unixODBC
|
|
|
5fa452 |
%{_libdir}/freeradius/rlm_sql_unixodbc.so
|
|
|
5fa452 |
|
|
|
5fa452 |
%changelog
|
|
|
a7bcdb |
* Thu Apr 16 2020 Alexander Scheel <ascheel@redhat.com> - 3.0.13-15
|
|
|
a7bcdb |
- Fixes EAP-PWD: DoS issues due to multithreaded BN_CTX access
|
|
|
a7bcdb |
Resolves: bz#1818808
|
|
|
a7bcdb |
|
|
|
a7bcdb |
* Fri Feb 7 2020 Alexander Scheel <ascheel@redhat.com> - 3.0.13-14
|
|
|
a7bcdb |
- Fixes receiving of multiple RADIUS packets under load
|
|
|
a7bcdb |
Resolves: bz#1630684
|
|
|
a7bcdb |
|
|
|
a7bcdb |
* Fri Feb 7 2020 Alexander Scheel <ascheel@redhat.com> - 3.0.13-13
|
|
|
a7bcdb |
- Fixes logging of cleartext pap password
|
|
|
a7bcdb |
Resolves: bz#1677435
|
|
|
a7bcdb |
|
|
|
a7bcdb |
* Fri Feb 7 2020 Alexander Scheel <ascheel@redhat.com> - 3.0.13-12
|
|
|
a7bcdb |
- Fixes paircompare with attribute references and expansions
|
|
|
a7bcdb |
Resolves: bz#1592741
|
|
|
a7bcdb |
|
|
|
a7bcdb |
* Tue Feb 4 2020 Alexander Scheel <ascheel@redhat.com> - 3.0.13-11
|
|
|
a7bcdb |
- Fixes logrotate, EAP-PWD vulnerability
|
|
|
a7bcdb |
Resolves: bz#1719368 privilege escalation due to insecure logrotate configuration
|
|
|
a7bcdb |
Resolves: bz#1751796 eap-pwd: Information leak due to aborting when needing more than 10 iterations
|
|
|
a7bcdb |
|
|
|
5fa452 |
* Thu Apr 25 2019 Alexander Scheel <ascheel@redhat.com> - 3.0.13-10
|
|
|
5fa452 |
- Fixes two EAP-PWD security issues
|
|
|
a7bcdb |
Resolves: bz#1699414 authentication bypass with an invalid curve attack
|
|
|
a7bcdb |
Resolves: bz#1699419 fake authentication using reflection
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Feb 22 2018 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-9
|
|
|
5fa452 |
- Fix double free in rlm_sql acct_redundant
|
|
|
5fa452 |
Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
|
|
|
5fa452 |
unknown value" when using module sql rlm_sql
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Jul 17 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-8
|
|
|
5fa452 |
- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
|
|
|
5fa452 |
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
|
|
|
5fa452 |
data2vp_wimax()
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jul 11 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-7
|
|
|
5fa452 |
- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
|
|
|
5fa452 |
to improper output buffer size check in make_secret()
|
|
|
5fa452 |
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
|
|
|
5fa452 |
fr_dhcp_decode() when decoding option 63
|
|
|
5fa452 |
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
|
|
|
5fa452 |
data2vp_wimax()
|
|
|
5fa452 |
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
|
|
|
5fa452 |
exhaustion with 'concat' attributes
|
|
|
5fa452 |
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
|
|
|
5fa452 |
dhcp_attr2vp()
|
|
|
5fa452 |
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
|
|
|
5fa452 |
fr_dhcp_decode_suboptions()
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jun 15 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-6
|
|
|
5fa452 |
- Avoid race condition when creating session cache file
|
|
|
5fa452 |
Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
|
|
|
5fa452 |
authentication bypass
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jun 06 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-5
|
|
|
5fa452 |
- Refer to correct package version in configuration comments for Bug#1458746
|
|
|
5fa452 |
(CVE-2017-9148) fix.
|
|
|
5fa452 |
Related: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
|
|
|
5fa452 |
authentication bypass
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jun 06 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-4
|
|
|
5fa452 |
- Disable internal OpenSSL cache.
|
|
|
5fa452 |
Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
|
|
|
5fa452 |
authentication bypass
|
|
|
5fa452 |
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
|
|
|
5fa452 |
Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
|
|
|
5fa452 |
- Parse port as well as address for dhcpclient destination
|
|
|
5fa452 |
Resolves: Bug#1457825 dhcpclient does no accept IP:PORT
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Mar 29 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-3
|
|
|
5fa452 |
- Explicitly disable rlm_cache_memcached to avoid error when the module's
|
|
|
5fa452 |
dependencies are installed, and it is built, but not packaged.
|
|
|
5fa452 |
Related: Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
|
|
|
5fa452 |
- Prevent segfaults by adding a missing handling of connection errors in
|
|
|
5fa452 |
rlm_ldap.
|
|
|
5fa452 |
Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
|
|
|
5fa452 |
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
|
|
|
5fa452 |
Resolves: Bug#1436619 radtest does not work with eap-md5
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Mar 23 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-2
|
|
|
5fa452 |
- Fix some issues found with static analyzers.
|
|
|
5fa452 |
Resolves: Bug#1432103 FreeRADIUS fails covscan checks
|
|
|
5fa452 |
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
|
|
|
5fa452 |
Related: Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Mar 07 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.13-1
|
|
|
5fa452 |
- Upgrade to upstream v3.0.13 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
Related: Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
|
|
|
5fa452 |
Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
|
|
|
5fa452 |
compile time
|
|
|
5fa452 |
Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
|
|
|
5fa452 |
can't connect to mysql server
|
|
|
5fa452 |
Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Feb 21 2017 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-2
|
|
|
5fa452 |
- Do not fail logrotate if radiusd is not running.
|
|
|
5fa452 |
Resolves: Bug#1365226 error running non-shared postrotate script for
|
|
|
5fa452 |
/var/log/radius/radius.log of
|
|
|
5fa452 |
'/var/log/radius/radius.log '
|
|
|
5fa452 |
- Fix output to log file specified with -l option.
|
|
|
5fa452 |
Resolves: Bug#1421207 radiusd does not work with log file specified by -l
|
|
|
5fa452 |
option
|
|
|
5fa452 |
- Fix long hostnames interpreted as IP addresses.
|
|
|
5fa452 |
Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
|
|
|
5fa452 |
name as a domain name
|
|
|
5fa452 |
- Avoid clashes with libtool library symbols.
|
|
|
5fa452 |
Resolves: Bug#1391960 undefined symbol: get_vtable in
|
|
|
5fa452 |
/usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
|
|
|
5fa452 |
- Remove mentions of Auth-Type = System from docs.
|
|
|
5fa452 |
Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
|
|
|
5fa452 |
- Improve ip/v4/v6/addr documentation.
|
|
|
5fa452 |
Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
|
|
|
5fa452 |
and AAAA entries
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Nov 25 2016 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.12-1
|
|
|
5fa452 |
- Upgrade to upstream v3.0.12 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
Related: Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
|
|
|
5fa452 |
Resolves: Bug#1358989 FreeRADIUS stops reading the accounting packets from the
|
|
|
5fa452 |
detail file
|
|
|
5fa452 |
Resolves: Bug#1269217 FreeRADIUS triggers mprotect with large radius reply
|
|
|
5fa452 |
Resolves: Bug#1344183 radiusd crashed in rbtree_find() after receiving a packet
|
|
|
5fa452 |
Resolves: Bug#1370431 FreeRADIUS fails to establish LDAP connections under
|
|
|
5fa452 |
load
|
|
|
5fa452 |
Resolves: Bug#1397981 [abrt] freeradius: radiusd killed by SIGSEGV
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Apr 18 2016 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.11-1
|
|
|
5fa452 |
- Upgrade to upstream v3.0.11 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
Resolves: Bug#1197551
|
|
|
5fa452 |
Resolves: Bug#1179745
|
|
|
5fa452 |
Resolves: Bug#1202751 Rebase FreeRADIUS to 3.0.7 or later minor release
|
|
|
5fa452 |
Resolves: Bug#1289849 FreeRadius should start after ldap, ipa and krb5kdc
|
|
|
5fa452 |
Resolves: Bug#1208886 Add the latest Mikrotik dictionary into Freeradius
|
|
|
5fa452 |
Resolves: Bug#1198620 radutmp should not rotate
|
|
|
5fa452 |
Resolves: Bug#1180979 Freeradius is installing files under /etc/tmpfiles.d/
|
|
|
5fa452 |
Resolves: Bug#1187904 radiusd logrotate config file contains old style
|
|
|
5fa452 |
"/sbin/service radius reload" reload call
|
|
|
5fa452 |
Resolves: Bug#1167846 radiusd fails to load clients from ldap
|
|
|
5fa452 |
Resolves: Bug#1422018 /usr/lib/systemd/system/radiusd.service is marked
|
|
|
5fa452 |
executable. Please remove executable permission bits
|
|
|
5fa452 |
Resolves: Bug#1167843 support for older style generic attributes in
|
|
|
5fa452 |
rlm_ldap doesn't work
|
|
|
5fa452 |
Resolves: Bug#1354234 home servers are marked as dead by radiusd
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Dec 09 2015 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.10-1
|
|
|
5fa452 |
- Upgrade to upstream v3.0.10 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
Related: Bug#1202751
|
|
|
5fa452 |
Resolves: Bug#1340334 freeradius: Decryption of very long Tunnel-Passwords
|
|
|
5fa452 |
can cause buffer overflow
|
|
|
5fa452 |
- Remove rlm_eap_tnc support as the required package "tncfhh" was retired.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Aug 19 2015 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.9-1
|
|
|
5fa452 |
- Upgrade to upstream v3.0.9 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
Related: Bug#1202751
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Apr 28 2015 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.8-1
|
|
|
5fa452 |
- Upgrade to upstream v3.0.8 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
Related: Bug#1202751
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Mar 19 2015 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.7-1
|
|
|
5fa452 |
- Upgrade to upstream v3.0.7 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
Related: Bug#1202751
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Dec 26 2014 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-6
|
|
|
5fa452 |
- Don't remove backslash from unknown escape sequences in LDAP values.
|
|
|
5fa452 |
Resolves: Bug#1173526
|
|
|
5fa452 |
- Improve dhcpclient and rad_counter online help.
|
|
|
5fa452 |
Resolves: Bug#1146966
|
|
|
5fa452 |
- raddb: Move trigger.conf INCLUDE before modules, making it easier to refer
|
|
|
5fa452 |
to trigger variables from module configurations.
|
|
|
5fa452 |
Resolves: Bug#1155961
|
|
|
5fa452 |
- Fix ipaddr option fallback onto ipv6.
|
|
|
5fa452 |
Resolves: Bug#1168868
|
|
|
5fa452 |
- raddb: Comment on ipaddr/ipv4addr/ipv6addr use.
|
|
|
5fa452 |
Resolves: Bug#1168247
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Dec 09 2014 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-5
|
|
|
5fa452 |
- Disable rlm_rest building explicitly to avoid unintended builds on some
|
|
|
5fa452 |
architectures breaking RPM build.
|
|
|
5fa452 |
Resolves: Bug#1162156
|
|
|
5fa452 |
- Add -D option support to dhcpclient.
|
|
|
5fa452 |
Related: Bug#1146939
|
|
|
5fa452 |
- Don't install rbmonkey - a test tool only useful to developers.
|
|
|
5fa452 |
Related: Bug#1146966
|
|
|
5fa452 |
- Update clients(5) man page
|
|
|
5fa452 |
Resolves: Bug#1147464
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Oct 30 2014 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-4
|
|
|
5fa452 |
- Fix possible group info corruption/segfault in rlm_unix' fr_getgrnam.
|
|
|
5fa452 |
- Fix file configuration item parsing.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Oct 29 2014 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-3
|
|
|
5fa452 |
- Fix a number of trigger issues.
|
|
|
5fa452 |
Resolves: Bug#1110407 radiusd doesn't send snmp trap after "radmin -e 'hup
|
|
|
5fa452 |
files'"
|
|
|
5fa452 |
Resolves: Bug#1110414 radiusd doesn't send snmp trap when sql connection is
|
|
|
5fa452 |
opened,closed or fail
|
|
|
5fa452 |
Resolves: Bug#1110186 radiusd doesn't send snmp trap when ldap connection
|
|
|
5fa452 |
fails/opens/closes
|
|
|
5fa452 |
Resolves: Bug#1109164 snmp trap messages send by radiusd are inconsistent
|
|
|
5fa452 |
and incomplete
|
|
|
5fa452 |
- Fix two omissions from radtest manpage.
|
|
|
5fa452 |
Resolves: Bug#1146898 'eap-md5' value is missing in -t option in SYNOPSIS
|
|
|
5fa452 |
of radtest man page
|
|
|
5fa452 |
Resolves: Bug#1114669 Missing -P option in radtest manpage
|
|
|
5fa452 |
- Disable OpenSSL version checking to avoid the need to edit radiusd.conf to
|
|
|
5fa452 |
confirm heartbleed is fixed.
|
|
|
5fa452 |
Resolves: Bug#1155070 FreeRADIUS doesn't start after upgrade due to failing
|
|
|
5fa452 |
OpenSSL version check
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Oct 6 2014 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-2
|
|
|
5fa452 |
- Fix abort on home server triggers.
|
|
|
5fa452 |
Resolves: Bug#1113509 radiusd aborts when it has no proxy response with active
|
|
|
5fa452 |
snmp traps
|
|
|
5fa452 |
- Fix segfault upon example.pl read failure.
|
|
|
5fa452 |
Resolves: Bug#1146403 radiusd segfaults when file for perl module has
|
|
|
5fa452 |
wrong permissions
|
|
|
5fa452 |
- Fix example.pl permissions.
|
|
|
5fa452 |
Resolves: Bug#1146406 /etc/raddb/mods-config/perl/example.pl has wrong
|
|
|
5fa452 |
permissions and radiusd fails to start
|
|
|
5fa452 |
- Fix integer handling in various cases.
|
|
|
5fa452 |
Resolves: Bug#1146441 upstream test suite fails
|
|
|
5fa452 |
- Fix dhcpclient's dictionary.dhcp loading.
|
|
|
5fa452 |
Resolves: Bug#1146939 dhcpclient lookups dictionary.dhcp file in wrong
|
|
|
5fa452 |
location
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Sep 15 2014 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-1
|
|
|
5fa452 |
- Upgrade to upstream 3.0.4 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Sep 8 2014 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.4-0.1.rc2
|
|
|
5fa452 |
- Upgrade to upstream 3.0.4-rc2 release.
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage).
|
|
|
5fa452 |
- Add installation of SNMP MIB files.
|
|
|
5fa452 |
- Resolves: Bug#1036562 Missing doc page for kerberos module
|
|
|
5fa452 |
- Resolves: Bug#1099625 Default message digest defaults to sha1
|
|
|
5fa452 |
- Resolves: Bug#1109159 missing mib files in freeradius package
|
|
|
5fa452 |
- Resolves: Bug#1113010 radiusd doesn't send snmp trap when max_threads value
|
|
|
5fa452 |
is reached
|
|
|
5fa452 |
- Resolves: Bug#1114669 Missing -P option in radtest manpage
|
|
|
5fa452 |
- Resolves: Bug#1115128 radisud can't start if proto = udp is specified
|
|
|
5fa452 |
- Resolves: Bug#1115134 radiusd aborts after 'Access-Request' when listens on
|
|
|
5fa452 |
TCP port
|
|
|
5fa452 |
- Resolves: Bug#1115137 radiusd listens on udp port even if proto = tcp is
|
|
|
5fa452 |
specified
|
|
|
5fa452 |
- Resolves: Bug#1126725 radiusd silently fails when start_servers is higher
|
|
|
5fa452 |
than max_servers
|
|
|
5fa452 |
- Resolves: Bug#1135446 Radeapclient is not available
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Feb 27 2014 Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 3.0.1-6
|
|
|
5fa452 |
- Fix CVE-2014-2015 "freeradius: stack-based buffer overflow flaw in rlm_pap
|
|
|
5fa452 |
module"
|
|
|
5fa452 |
- resolves: bug#1066984 (fedora 1066763)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Feb 27 2014 John Dennis <jdennis@redhat.com> - 3.0.1-5
|
|
|
5fa452 |
- resolves: bug#1068798 (fedora 1068795)
|
|
|
5fa452 |
rlm_perl attribute values truncated
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 3.0.1-4
|
|
|
5fa452 |
- Mass rebuild 2014-01-24
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sun Jan 19 2014 John Dennis <jdennis@redhat.com> - 3.0.1-3
|
|
|
5fa452 |
- resolves: bug#1055073 (fedora 1055072)
|
|
|
5fa452 |
rlm_ippool; bad config file attribute and fails to send reply attributes
|
|
|
5fa452 |
- resolves: bug#1055567 (fedora 1056227)
|
|
|
5fa452 |
bad mysql sql syntax
|
|
|
5fa452 |
- change CFLAGS -imacros to -include to address gcc/gdb bug 1004526
|
|
|
5fa452 |
where gdb will not display source information, only <command-line>
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Jan 15 2014 Honza Horak <hhorak@redhat.com> - 3.0.1-2
|
|
|
5fa452 |
- Rebuild for mariadb-libs
|
|
|
5fa452 |
Related: #1045013
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jan 14 2014 John Dennis <jdennis@redhat.com> - 3.0.1-1
|
|
|
5fa452 |
- Upgrade to upstream 3.0.1 release, full config compatible with 3.0.0.
|
|
|
5fa452 |
This is a roll-up of all upstream bugs fixes found in 3.0.0
|
|
|
5fa452 |
See upstream ChangeLog for details (in freeradius-doc subpackage)
|
|
|
5fa452 |
- resolves: bug#1052450 (fedora 1053020)
|
|
|
5fa452 |
- resolves: bug#1044748 (fedora 1044747)
|
|
|
5fa452 |
- resolves: bug#1048475 (fedora 1048474)
|
|
|
5fa452 |
- resolves: bug#1043037 (fedora 1043036)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 3.0.0-5
|
|
|
5fa452 |
- Mass rebuild 2013-12-27
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Nov 26 2013 John Dennis <jdennis@redhat.com> - 3.0.0-4
|
|
|
5fa452 |
- resolves: bug#1031035
|
|
|
5fa452 |
remove radeapclient man page,
|
|
|
5fa452 |
upstream no longer supports radeapclient, use eapol_test instead
|
|
|
5fa452 |
- resolves: bug#1031061
|
|
|
5fa452 |
rlm_eap_leap memory corruption, see freeradius-rlm_leap.patch
|
|
|
5fa452 |
- move man pages for utils into utils subpackage from doc subpackage
|
|
|
5fa452 |
- fix HAVE_EC_CRYPTO test to include f20
|
|
|
5fa452 |
- add new directory /var/run/radiusd/tmp
|
|
|
5fa452 |
update mods-available/eap so tls-common.verify.tmpdir to point to it
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Nov 13 2013 John Dennis <jdennis@redhat.com> - 3.0.0-3
|
|
|
5fa452 |
- resolves: bug#1029941
|
|
|
5fa452 |
PW_TYPE_BOOLEAN config item should be declared int, not bool
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Oct 28 2013 John Dennis <jdennis@redhat.com> - 3.0.0-2
|
|
|
5fa452 |
- resolves: bug#1024119
|
|
|
5fa452 |
tncfhh-devel is now available in RHEL-7, remove conditional BuildRequires
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Oct 9 2013 John Dennis <jdennis@redhat.com> - 3.0.0-1
|
|
|
5fa452 |
- Offical 3.0 gold release from upstream
|
|
|
5fa452 |
- resolves: bug#1000455
|
|
|
5fa452 |
- resolves: bug#891305
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Aug 26 2013 John Dennis <jdennis@redhat.com> - 3.0.0-0.3.rc0
|
|
|
5fa452 |
- add missingok config attribute to /etc/raddb/sites-enabled/* symlinks
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sat Aug 03 2013 Petr Pisar <ppisar@redhat.com> - 3.0.0-0.2.rc0
|
|
|
5fa452 |
- Perl 5.18 rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Jul 26 2013 Ville Skyttä <ville.skytta@iki.fi> - 3.0.0-0.1.rc0
|
|
|
5fa452 |
- Install docs to %%{_pkgdocdir} where available.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Jul 22 2013 John Dennis <jdennis@redhat.com> - 3.0.0-0.rc0
|
|
|
5fa452 |
- Upgrade to new upstream major version release
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Jul 17 2013 Petr Pisar <ppisar@redhat.com> - 2.2.0-7
|
|
|
5fa452 |
- Perl 5.18 rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.0-6
|
|
|
5fa452 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Dec 14 2012 John Dennis <jdennis@redhat.com> - 2.2.0-5
|
|
|
5fa452 |
- resolves: bug#850119 - Introduce new systemd-rpm macros (>= F18)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Dec 13 2012 John Dennis <jdennis@redhat.com> - 2.2.0-4
|
|
|
5fa452 |
- add compile option -fno-strict-aliasing
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Dec 13 2012 John Dennis <jdennis@redhat.com> - 2.2.0-3
|
|
|
5fa452 |
- specify homedir (/var/lib/radiusd) for radiusd user in useradd,
|
|
|
5fa452 |
do not permit useradd to default the homedir.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Dec 12 2012 John Dennis <jdennis@redhat.com> - 2.2.0-2
|
|
|
5fa452 |
- add security options to compiler/linker
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Dec 10 2012 John Dennis <jdennis@redhat.com> - 2.2.0-1
|
|
|
5fa452 |
- resolves: bug#876564 - fails to start without freeradius-mysql
|
|
|
5fa452 |
- use upstream version of freeradius-exclude-config-file.patch
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Oct 3 2012 John Dennis <jdennis@redhat.com> - 2.2.0-0
|
|
|
5fa452 |
- Add new patch to avoid reading .rpmnew, .rpmsave and other invalid
|
|
|
5fa452 |
files when loading config files
|
|
|
5fa452 |
- Upgrade to new 2.2.0 upstream release
|
|
|
5fa452 |
- Upstream changelog for 2.1.12:
|
|
|
5fa452 |
Feature improvements
|
|
|
5fa452 |
* 100% configuration file compatible with 2.1.x.
|
|
|
5fa452 |
The only fix needed is to disallow "hashsize=0" for rlm_passwd
|
|
|
5fa452 |
* Update Aruba, Alcatel Lucent, APC, BT, PaloAlto, Pureware,
|
|
|
5fa452 |
Redback, and Mikrotik dictionaries
|
|
|
5fa452 |
* Switch to using SHA1 for certificate digests instead of MD5.
|
|
|
5fa452 |
See raddb/certs/*.cnf
|
|
|
5fa452 |
* Added copyright statements to the dictionaries, so that we know
|
|
|
5fa452 |
when people are using them.
|
|
|
5fa452 |
* Better documentation for radrelay and detail file writer.
|
|
|
5fa452 |
See raddb/modules/radrelay and raddb/radrelay.conf
|
|
|
5fa452 |
* Added TLS-Cert-Subject-Alt-Name-Email from patch by Luke Howard
|
|
|
5fa452 |
* Added -F <file> to radwho
|
|
|
5fa452 |
* Added query timeouts to MySQL driver. Patch from Brian De Wolf.
|
|
|
5fa452 |
* Add /etc/default/freeradius to debian package.
|
|
|
5fa452 |
Patch from Matthew Newton
|
|
|
5fa452 |
* Finalize DHCP and DHCP relay code. It should now work everywhere.
|
|
|
5fa452 |
See raddb/sites-available/dhcp, src_ipaddr and src_interface.
|
|
|
5fa452 |
* DHCP capabilitiies are now compiled in by default.
|
|
|
5fa452 |
It runs as a DHCP server ONLY when manually enabled.
|
|
|
5fa452 |
* Added one letter expansions: %G - request minute and %I request
|
|
|
5fa452 |
ID.
|
|
|
5fa452 |
* Added script to convert ISC DHCP lease files to SQL pools.
|
|
|
5fa452 |
See scripts/isc2ippool.pl
|
|
|
5fa452 |
* Added rlm_cache to cache arbitrary attributes.
|
|
|
5fa452 |
* Added max_use to rlm_ldap to force connection to be re-established
|
|
|
5fa452 |
after a given number of queries.
|
|
|
5fa452 |
* Added configtest option to Debian init scripts, and automatic
|
|
|
5fa452 |
config test on restart.
|
|
|
5fa452 |
* Added cache config item to rlm_krb5. When set to "no" ticket
|
|
|
5fa452 |
caching is disabled which may increase performance.
|
|
|
5fa452 |
|
|
|
5fa452 |
Bug fixes
|
|
|
5fa452 |
* Fix CVE-2012-3547. All users of 2.1.10, 2.1.11, 2.1.12,
|
|
|
5fa452 |
and 802.1X should upgrade immediately.
|
|
|
5fa452 |
* Fix typo in detail file writer, to skip writing if the packet
|
|
|
5fa452 |
was read from this detail file.
|
|
|
5fa452 |
* Free cached replies when closing resumed SSL sessions.
|
|
|
5fa452 |
* Fix a number of issues found by Coverity.
|
|
|
5fa452 |
* Fix memory leak and race condition in the EAP-TLS session cache.
|
|
|
5fa452 |
Thanks to Phil Mayers for tracking down OpenSSL APIs.
|
|
|
5fa452 |
* Restrict ATTRIBUTE names to character sets that make sense.
|
|
|
5fa452 |
* Fix EAP-TLS session Id length so that OpenSSL doesn't get
|
|
|
5fa452 |
excited.
|
|
|
5fa452 |
* Fix SQL IPPool logic for non-timer attributes. Closes bug #181
|
|
|
5fa452 |
* Change some informational messages to DEBUG rather than error.
|
|
|
5fa452 |
* Portability fixes for FreeBSD. Closes bug #177
|
|
|
5fa452 |
* A much better fix for the _lt__PROGRAM__LTX_preloaded_symbols
|
|
|
5fa452 |
nonsense.
|
|
|
5fa452 |
* Safely handle extremely long lines in conf file variable expansion
|
|
|
5fa452 |
* Fix for Debian bug #606450
|
|
|
5fa452 |
* Mutex lock around rlm_perl Clone routines. Patch from Eike Dehling
|
|
|
5fa452 |
* The passwd module no longer permits "hashsize = 0". Setting that
|
|
|
5fa452 |
is pointless for a host of reasons. It will also break the server.
|
|
|
5fa452 |
* Fix proxied inner-tunnel packets sometimes having zero authentication
|
|
|
5fa452 |
vector. Found by Brian Julin.
|
|
|
5fa452 |
* Added $(EXEEXT) to Makefiles for portability. Closes bug #188.
|
|
|
5fa452 |
* Fix minor build issue which would cause rlm_eap to be built twice.
|
|
|
5fa452 |
* When using "status_check=request" for a home server, the username
|
|
|
5fa452 |
and password must be specified, or the server will not start.
|
|
|
5fa452 |
* EAP-SIM now calculates keys from the SIM identity, not from the
|
|
|
5fa452 |
EAP-Identity. Changing the EAP type via NAK may result in
|
|
|
5fa452 |
identities changing. Bug reported by Microsoft EAP team.
|
|
|
5fa452 |
* Use home server src_ipaddr when sending Status-Server packets
|
|
|
5fa452 |
* Decrypt encrypted ERX attributes in CoA packets.
|
|
|
5fa452 |
* Fix registration of internal xlat's so %{mschap:...} doesn't
|
|
|
5fa452 |
disappear after a HUP.
|
|
|
5fa452 |
* Can now reference tagged attributes in expansions.
|
|
|
5fa452 |
e.g. %{Tunnel-Type:1} and %{Tunnel-Type:1[0]} now work.
|
|
|
5fa452 |
* Correct calculation of Message-Authenticator for CoA and Disconnect
|
|
|
5fa452 |
replies. Patch from Jouni Malinen
|
|
|
5fa452 |
* Install rad_counter, for managing rlm_counter files.
|
|
|
5fa452 |
* Add unique index constraint to all SQL flavours so that alternate
|
|
|
5fa452 |
queries work correctly.
|
|
|
5fa452 |
* The TTLS diameter decoder is now more lenient. It ignores
|
|
|
5fa452 |
unknown attributes, instead of rejecting the TTLS session.
|
|
|
5fa452 |
* Use "globfree" in detail file reader. Prevents very slow leak.
|
|
|
5fa452 |
Closes bug #207.
|
|
|
5fa452 |
* Operator =~ shouldn't copy the attribute, like :=. It should
|
|
|
5fa452 |
instead behave more like ==.
|
|
|
5fa452 |
* Build main Debian package without SQL dependencies
|
|
|
5fa452 |
* Use max_queue_size in threading code
|
|
|
5fa452 |
* Update permissions in raddb/sql/postgresql/admin.sql
|
|
|
5fa452 |
* Added OpenSSL_add_all_algorithms() to fix issues where OpenSSL
|
|
|
5fa452 |
wouldn't use methods it knew about.
|
|
|
5fa452 |
* Add more sanity checks in dynamic_clients code so the server won't
|
|
|
5fa452 |
crash if it attempts to load a badly formated client definition.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.12-10
|
|
|
5fa452 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Jun 08 2012 Petr Pisar <ppisar@redhat.com> - 2.1.12-9
|
|
|
5fa452 |
- Perl 5.16 rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue May 15 2012 John Dennis <jdennis@redhat.com> - 2.1.12-8
|
|
|
5fa452 |
- resolves: bug#821407 - openssl dependency
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sat Apr 14 2012 John Dennis <jdennis@redhat.com> - 2.1.12-7
|
|
|
5fa452 |
- resolves: bug#810605 Segfault with freeradius-perl threading
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Feb 28 2012 John Dennis <jdennis@redhat.com> - 2.1.12-6
|
|
|
5fa452 |
Fixing bugs in RHEL6 rebase, applying fixes here as well
|
|
|
5fa452 |
resolves: bug#700870 freeradius not compiled with --with-udpfromto
|
|
|
5fa452 |
resolves: bug#753764 shadow password expiration does not work
|
|
|
5fa452 |
resolves: bug#712803 radtest script is not working with eap-md5 option
|
|
|
5fa452 |
resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Feb 7 2012 John Dennis <jdennis@redhat.com> - 2.1.12-5
|
|
|
5fa452 |
- resolves: bug#781877 (from RHEL5) rlm_dbm_parse man page misspelled
|
|
|
5fa452 |
- resolves: bug#760193 (from RHEL5) radtest PPPhint option is not parsed properly
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sun Jan 15 2012 John Dennis <jdennis@redhat.com> - 2.1.12-4
|
|
|
5fa452 |
- resolves: bug#781744
|
|
|
5fa452 |
systemd service file incorrectly listed pid file as
|
|
|
5fa452 |
/var/run/radiusd/radiusd which it should have been
|
|
|
5fa452 |
/var/run/radiusd/radiusd.pid
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.12-3
|
|
|
5fa452 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Oct 31 2011 John Dennis <jdennis@redhat.com> - 2.1.12-2
|
|
|
5fa452 |
- rename /etc/tmpfiles.d/freeradius.conf to /etc/tmpfiles.d/radiusd.conf
|
|
|
5fa452 |
remove config(noreplace) because it must match files section and
|
|
|
5fa452 |
permissions differ between versions.
|
|
|
5fa452 |
- fixup macro usage for /var/run & /var/lib
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Oct 3 2011 John Dennis <jdennis@redhat.com> - 2.1.12-1
|
|
|
5fa452 |
- Upgrade to latest upstream release: 2.1.12
|
|
|
5fa452 |
- Upstream changelog for 2.1.12:
|
|
|
5fa452 |
Feature improvements
|
|
|
5fa452 |
* Updates to dictionary.erx, dictionary.siemens, dictionary.starent,
|
|
|
5fa452 |
dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol
|
|
|
5fa452 |
* Added support for PCRE from Phil Mayers
|
|
|
5fa452 |
* Configurable file permission in rlm_linelog
|
|
|
5fa452 |
* Added "relaxed" option to rlm_attr_filter. This copies attributes
|
|
|
5fa452 |
if at least one match occurred.
|
|
|
5fa452 |
* Added documentation on dynamic clients.
|
|
|
5fa452 |
See raddb/modules/dynamic_clients.
|
|
|
5fa452 |
* Added support for elliptical curve cryptography.
|
|
|
5fa452 |
See ecdh_curve in raddb/eap.conf.
|
|
|
5fa452 |
* Added support for 802.1X MIBs in checkrad
|
|
|
5fa452 |
* Added support for %{rand:...}, which generates a uniformly
|
|
|
5fa452 |
distributed number between 0 and the number you specify.
|
|
|
5fa452 |
* Created "man" pages for all installed commands, and documented
|
|
|
5fa452 |
options for all commands. Patch from John Dennis.
|
|
|
5fa452 |
* Allow radsniff to decode encrypted VSAs and CoA packets.
|
|
|
5fa452 |
Patch from Bjorn Mork.
|
|
|
5fa452 |
* Always send Message-Authenticator in radtest. Patch from John Dennis.
|
|
|
5fa452 |
radclient continues to be more flexible.
|
|
|
5fa452 |
* Updated Oracle schema and queries
|
|
|
5fa452 |
* Added SecurID module. See src/modules/rlm_securid/README
|
|
|
5fa452 |
|
|
|
5fa452 |
Bug fixes
|
|
|
5fa452 |
* Fix memory leak in rlm_detail
|
|
|
5fa452 |
* Fix "failed to insert event"
|
|
|
5fa452 |
* Allow virtual servers to be reloaded on HUP.
|
|
|
5fa452 |
It no longer complains about duplicate virtual servers.
|
|
|
5fa452 |
* Fix %{string:...} expansion
|
|
|
5fa452 |
* Fix "server closed socket" loop in radmin
|
|
|
5fa452 |
* Set ownership of control socket when starting up
|
|
|
5fa452 |
* Always allow root to connect to control socket, even if
|
|
|
5fa452 |
"uid" is set. They're root. They can already do anything.
|
|
|
5fa452 |
* Save all attributes in Access-Accept when proxying inner-tunnel
|
|
|
5fa452 |
EAP-MSCHAPv2
|
|
|
5fa452 |
* Fixes for DHCP relaying.
|
|
|
5fa452 |
* Check certificate validity when using OCSP.
|
|
|
5fa452 |
* Updated Oracle "configure" script
|
|
|
5fa452 |
* Fixed typos in dictionary.alvarion
|
|
|
5fa452 |
* WARNING on potential proxy loop.
|
|
|
5fa452 |
* Be more aggressive about clearing old requests from the
|
|
|
5fa452 |
internal queue
|
|
|
5fa452 |
* Don't open network sockets when using -C
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Sep 21 2011 Tom Callaway <spot@fedoraproject.org> - 2.1.11-7
|
|
|
5fa452 |
- restore defattr customization in the main package
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Sep 9 2011 Tom Callaway <spot@fedoraproject.org> - 2.1.11-6
|
|
|
5fa452 |
- add missing systemd scriptlets
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Sep 8 2011 Tom Callaway <spot@fedoraproject.org> - 2.1.11-5
|
|
|
5fa452 |
- convert to systemd
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jul 21 2011 Petr Sabata <contyk@redhat.com> - 2.1.11-4
|
|
|
5fa452 |
- Perl mass rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Jul 20 2011 Petr Sabata <contyk@redhat.com> - 2.1.11-3
|
|
|
5fa452 |
- Perl mass rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jun 23 2011 John Dennis <jdennis@redhat.com> - 2.1.11-2
|
|
|
5fa452 |
- reload the server (i.e. HUP) after logrotate
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Jun 22 2011 John Dennis <jdennis@redhat.com> - 2.1.11-1
|
|
|
5fa452 |
- Upgrade to latest upstream release: 2.1.11
|
|
|
5fa452 |
- Remove the following two patches as upstream has incorporated them:
|
|
|
5fa452 |
freeradius-radtest-ipv6.patch
|
|
|
5fa452 |
freeradius-lt-dladvise.patch
|
|
|
5fa452 |
- Upstream changelog for 2.1.11:
|
|
|
5fa452 |
Feature improvements
|
|
|
5fa452 |
* Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.
|
|
|
5fa452 |
All vendors need to read it and follow its directions.
|
|
|
5fa452 |
* Microsoft SoH support for PEAP from Phil Mayers.
|
|
|
5fa452 |
See doc/SoH.txt
|
|
|
5fa452 |
* Certificate "bootstrap" script now checks for certificate expiry.
|
|
|
5fa452 |
See comments in raddb/eap.conf, and then "make_cert_command".
|
|
|
5fa452 |
* Support for dynamic expansion of EAP-GTC challenges.
|
|
|
5fa452 |
Patch from Alexander Clouter.
|
|
|
5fa452 |
* OCSP support from Alex Bergmann. See raddb/eap.conf, "ocsp"
|
|
|
5fa452 |
section.
|
|
|
5fa452 |
* Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.
|
|
|
5fa452 |
* Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.
|
|
|
5fa452 |
* Experimental redis support from Gabriel Blanchard.
|
|
|
5fa452 |
See raddb/modules/redis and raddb/modules/rediswho
|
|
|
5fa452 |
* Add "key" to rlm_fastusers. Closes bug #126.
|
|
|
5fa452 |
* Added scripts/radtee from original software at
|
|
|
5fa452 |
http://horde.net/~jwm/software/misc/comparison-tee
|
|
|
5fa452 |
* Updated radmin "man" page for new commands.
|
|
|
5fa452 |
* radsniff now prints the hex decoding of the packet (-x -x -x)
|
|
|
5fa452 |
* mschap module now reloads its configuration on HUP
|
|
|
5fa452 |
* Added experimental "replicate" module. See raddb/modules/replicate
|
|
|
5fa452 |
* Policy "foo" can now refer to module "foo". This lets you
|
|
|
5fa452 |
over-ride the behavior of a module.
|
|
|
5fa452 |
* Policy "foo.authorize" can now over-ride the behavior of module
|
|
|
5fa452 |
"foo", "authorize" method.
|
|
|
5fa452 |
* Produce errors in more situations when the configuration files
|
|
|
5fa452 |
have invalid syntax.
|
|
|
5fa452 |
|
|
|
5fa452 |
Bug fixes
|
|
|
5fa452 |
* Ignore pre/post-proxy sections if proxying is disabled
|
|
|
5fa452 |
* Add configure checks for pcap_fopen*.
|
|
|
5fa452 |
* Fix call to otp_write in rlm_otp
|
|
|
5fa452 |
* Fix issue with Access-Challenge checking from 2.1.10, when the
|
|
|
5fa452 |
debug flag was set after server startup. Closes #116 and #117.
|
|
|
5fa452 |
* Fix typo in zombie period start time.
|
|
|
5fa452 |
* Fix leak in src/main/valuepair.c. Patch from James Ballantine.
|
|
|
5fa452 |
* Allow radtest to use spaces in shared secret.
|
|
|
5fa452 |
Patch from Cedric Carree.
|
|
|
5fa452 |
* Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.
|
|
|
5fa452 |
Patch from James Ballantine.
|
|
|
5fa452 |
* Remove MN-FA key generation. The NAS does this, not AAA.
|
|
|
5fa452 |
Patch from Ben Weichman.
|
|
|
5fa452 |
* Include dictionary.mikrotik by default. Closes bug #121.
|
|
|
5fa452 |
* Add group membership query to MS-SQL examples. Closes bug #120.
|
|
|
5fa452 |
* Don't cast NAS-Port to integer in Postgresql queries.
|
|
|
5fa452 |
Closes bug #112.
|
|
|
5fa452 |
* Fixes for libtool and autoconf from Sam Hartman.
|
|
|
5fa452 |
* radsniff should read the dictionaries in more situations.
|
|
|
5fa452 |
* Use fnmatch to check for detail file reader==writer.
|
|
|
5fa452 |
Closes bug #128.
|
|
|
5fa452 |
* Check for short writes (i.e. disk full) in rlm_detail.
|
|
|
5fa452 |
Closes bug #130. Patches and testing from John Morrissey.
|
|
|
5fa452 |
* Fix typo in src/lib/token.c. Closes bug #124
|
|
|
5fa452 |
* Allow workstation trust accounts to use MS-CHAP.
|
|
|
5fa452 |
Closes bug #123.
|
|
|
5fa452 |
* Assigning foo=`/bin/echo hello` now produces a syntax error
|
|
|
5fa452 |
if it is done outside of an "update" section.
|
|
|
5fa452 |
* Fix "too many open file descriptors" problem when using
|
|
|
5fa452 |
"verify client" in eap.conf.
|
|
|
5fa452 |
* Many fixes to dialup_admin for PHP5, by Stefan Winter.
|
|
|
5fa452 |
* Allow preprocess module to have "hints = " and "huntgroups =",
|
|
|
5fa452 |
which allows them to be empty or non-existent.
|
|
|
5fa452 |
* Renamed "php3" files to "php" in dialup_admin/
|
|
|
5fa452 |
* Produce error when sub-TLVs are used in a dictionary. They are
|
|
|
5fa452 |
supported only in the "master" branch, and not in 2.1.x.
|
|
|
5fa452 |
* Minor fix in dictionary.redback. Closes bug #138.
|
|
|
5fa452 |
* Fixed MySQL "NULL" issues in ippool.conf. Closes bug #129.
|
|
|
5fa452 |
* Fix to Access-Challenge warning from Ken-ichirou Matsuzawa.
|
|
|
5fa452 |
Closes bug #118.
|
|
|
5fa452 |
* DHCP fixes to send unicast packets in more situations.
|
|
|
5fa452 |
* Fix to udpfromto, to enable it to work on IPv6 networks.
|
|
|
5fa452 |
* Fixes to the Oracle accounting_onoff_query.
|
|
|
5fa452 |
* When using both IPv4 and IPv6 home servers, ensure that we use the
|
|
|
5fa452 |
correct local socket for proxying. Closes bug #143.
|
|
|
5fa452 |
* Suppress messages when thread pool is nearly full, all threads
|
|
|
5fa452 |
are busy, and we can't create new threads.
|
|
|
5fa452 |
* IPv6 is now enabled for udpfromto. Closes bug #141
|
|
|
5fa452 |
* Make sqlippool query buffer the same size as sql module.
|
|
|
5fa452 |
Closes bug #139.
|
|
|
5fa452 |
* Make Coa / Disconnect proxying work again.
|
|
|
5fa452 |
* Configure scripts for rlm_caching from Nathaniel McCallum
|
|
|
5fa452 |
* src/lib/dhcp.c and src/include/libradius.h are LGPL, not GPL.
|
|
|
5fa452 |
* Updated password routines to use time-insensitive comparisons.
|
|
|
5fa452 |
This prevents timing attacks (though none are known).
|
|
|
5fa452 |
* Allow sqlite module to do normal SELECT queries.
|
|
|
5fa452 |
* rlm_wimax now has a configure script
|
|
|
5fa452 |
* Moved Ascend, USR, and Motorola "illegal" dictionaries to separate
|
|
|
5fa452 |
files. See share/dictionary for explanations.
|
|
|
5fa452 |
* Check for duplicate module definitions in the modules{} section,
|
|
|
5fa452 |
and refuse to start if duplicates are found.
|
|
|
5fa452 |
* Check for duplicate virtual servers, and refuse to start if
|
|
|
5fa452 |
duplicates are found.
|
|
|
5fa452 |
* Don't use udpfromto if source is INADDR_ANY. Closes bug #148.
|
|
|
5fa452 |
* Check pre-conditions before running radmin "inject file".
|
|
|
5fa452 |
* Don't over-ride "no match" with "match" for regexes.
|
|
|
5fa452 |
Closes bug #152.
|
|
|
5fa452 |
* Make retry and error message configurable in mschap.
|
|
|
5fa452 |
See raddb/modules/mschap
|
|
|
5fa452 |
* Allow EAP-MSCHAPv2 to send error message to client. This change
|
|
|
5fa452 |
allows some clients to prompt the user for a new password.
|
|
|
5fa452 |
See raddb/eap.conf, mschapv2 section, "send_error".
|
|
|
5fa452 |
* Load the default virtual server before any others.
|
|
|
5fa452 |
This matches what users expect, and reduces confusion.
|
|
|
5fa452 |
* Fix configure checks for udpfromto. Fixes Debian bug #606866
|
|
|
5fa452 |
* Definitive fix for bug #35, where the server could crash under
|
|
|
5fa452 |
certain loads. Changes src/lib/packet.c to use RB trees.
|
|
|
5fa452 |
* Updated "configure" checks to allow IPv6 udpfromto on Linux.
|
|
|
5fa452 |
* SQL module now returns NOOP if the accounting start/interim/stop
|
|
|
5fa452 |
queries don't do anything.
|
|
|
5fa452 |
* Allow %%{outer.control: ... } in string expansions
|
|
|
5fa452 |
* home_server coa config now matches raddb/proxy.conf
|
|
|
5fa452 |
* Never send a reply to a DHCP Release.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jun 16 2011 Marcela Mašláňová <mmaslano@redhat.com> - 2.1.10-8
|
|
|
5fa452 |
- Perl mass rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Mar 23 2011 John Dennis <jdennis@redhat.com> - 2.1.10-7
|
|
|
5fa452 |
- Resolves: #689045 Using rlm_perl cause radiusd failed to start
|
|
|
5fa452 |
Fix configure typo which caused lt_dladvise_* functions to be skipped.
|
|
|
5fa452 |
run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
|
|
|
5fa452 |
Implemented by: freeradius-lt-dladvise.patch
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Mar 23 2011 John Dennis <jdennis@redhat.com> - 2.1.10-6
|
|
|
5fa452 |
- Resolves: #599528 - make radtest IPv6 compatible
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Mar 23 2011 Dan Horák <dan@danny.cz> - 2.1.10-5
|
|
|
5fa452 |
- rebuilt for mysql 5.5.10 (soname bump in libmysqlclient)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.10-4
|
|
|
5fa452 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sat Jan 1 2011 John Dennis <jdennis@redhat.com> - 2.1.10-3
|
|
|
5fa452 |
- bug 666589 - removing freeradius from system does not delete the user "radiusd"
|
|
|
5fa452 |
fix scriptlet argument testing, simplify always exiting with zero
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Dec 30 2010 John Dennis <jdennis@redhat.com> - 2.1.10-2
|
|
|
5fa452 |
- rebuild for new MySQL libs
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Oct 19 2010 John Dennis <jdennis@redhat.com> - 2.1.10-1
|
|
|
5fa452 |
Feature improvements
|
|
|
5fa452 |
* Install the "radcrypt" program.
|
|
|
5fa452 |
* Enable radclient to send requests containing MS-CHAPv1
|
|
|
5fa452 |
Send packets with: MS-CHAP-Password = "password". It will
|
|
|
5fa452 |
be automatically converted to the correct MS-CHAP attributes.
|
|
|
5fa452 |
* Added "-t" command-line option to radtest. You can use "-t pap",
|
|
|
5fa452 |
"-t chap", "-t mschap", or "-t eap-md5". The default is "-t pap"
|
|
|
5fa452 |
* Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
|
|
|
5fa452 |
This change and the previous one makes PEAP testing much easier.
|
|
|
5fa452 |
* Added more documentation and examples for the "passwd" module.
|
|
|
5fa452 |
* Added dictionaries for RFC 5607 and RFC 5904.
|
|
|
5fa452 |
* Added note in proxy.conf that we recommend setting
|
|
|
5fa452 |
"require_message_authenticator = yes" for all home servers.
|
|
|
5fa452 |
* Added example of second "files" configuration, with documentation.
|
|
|
5fa452 |
This shows how and where to use two instances of a module.
|
|
|
5fa452 |
* Updated radsniff to have it write pcap files, too. See '-w'.
|
|
|
5fa452 |
* Print out large WARNING message if we send an Access-Challenge
|
|
|
5fa452 |
for EAP, and receive no follow-up messages from the client.
|
|
|
5fa452 |
* Added Cached-Session-Policy for EAP session resumption. See
|
|
|
5fa452 |
raddb/eap.conf.
|
|
|
5fa452 |
* Added support for TLS-Cert-* attributes. For details, see
|
|
|
5fa452 |
raddb/sites-available/default, "post-auth" section.
|
|
|
5fa452 |
* Added sample raddb/modules/{opendirectory,dynamic_clients}
|
|
|
5fa452 |
* Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
|
|
|
5fa452 |
* Added RFCs 5607, 5904, and 5997.
|
|
|
5fa452 |
* For EAP-TLS, client certificates can now be validated using an
|
|
|
5fa452 |
external command. See eap.conf, "validate" subsection of "tls".
|
|
|
5fa452 |
* Made rlm_pap aware of {nthash} prefix, for compatibility with
|
|
|
5fa452 |
legacy RADIUS systems.
|
|
|
5fa452 |
* Add Module-Failure-Message for mschap module (ntlm_auth)
|
|
|
5fa452 |
* made rlm_sql_sqlite database configurable. Use "filename"
|
|
|
5fa452 |
in sql{} section.
|
|
|
5fa452 |
* Added %%{tolower: ...string ... }, which returns the lowercase
|
|
|
5fa452 |
version of the string. Also added %%{toupper: ... } for uppercase.
|
|
|
5fa452 |
|
|
|
5fa452 |
Bug fixes
|
|
|
5fa452 |
* Fix endless loop when there are multiple sub-options for
|
|
|
5fa452 |
DHCP option 82.
|
|
|
5fa452 |
* More debug output when sending / receiving DHCP packets.
|
|
|
5fa452 |
* EAP-MSCHAPv2 should return the MPPE keys when used outside
|
|
|
5fa452 |
of a TLS tunnel. This is needed for IKE.
|
|
|
5fa452 |
* Added SSL "no ticket" option to prevent SSL from creating sessions
|
|
|
5fa452 |
without IDs. We need the IDs, so this option should be set.
|
|
|
5fa452 |
* Fix proxying of packets from inside a TTLS/PEAP tunnel.
|
|
|
5fa452 |
Closes bug #25.
|
|
|
5fa452 |
* Allow IPv6 address attributes to be created from domain names
|
|
|
5fa452 |
Closes bug #82.
|
|
|
5fa452 |
* Set the string length to the correct value when parsing double
|
|
|
5fa452 |
quotes. Closes bug #88.
|
|
|
5fa452 |
* No longer look users up in /etc/passwd in the default configuration.
|
|
|
5fa452 |
This can be reverted by enabling "unix" in the "authorize" section.
|
|
|
5fa452 |
* More #ifdef's to enable building on systems without certain
|
|
|
5fa452 |
features.
|
|
|
5fa452 |
* Fixed SQL-Group comparison to register only if the group
|
|
|
5fa452 |
query is defined.
|
|
|
5fa452 |
* Fixed SQL-Group comparison to register <instance>-SQL-Group,
|
|
|
5fa452 |
just like rlm_ldap. This lets you have multiple SQL group checks.
|
|
|
5fa452 |
* Fix scanning of octal numbers in "unlang". Closes bug #89.
|
|
|
5fa452 |
* Be less aggressive about freeing "stuck" requests. Closes bug #35.
|
|
|
5fa452 |
* Fix example in "originate-coa" to refer to the correct packet.
|
|
|
5fa452 |
* Change default timeout for dynamic clients to 1 hour, not 1 day.
|
|
|
5fa452 |
* Allow passwd module to map IP addresses, too.
|
|
|
5fa452 |
* Allow passwd module to be used for CoA packets
|
|
|
5fa452 |
* Put boot filename into DHCP header when DHCP-Boot-Filename
|
|
|
5fa452 |
is specified.
|
|
|
5fa452 |
* raddb/certs/Makefile no longer has certs depend on index.txt and
|
|
|
5fa452 |
serial. Closes bug #64.
|
|
|
5fa452 |
* Ignore NULL errorcode in PostgreSQL client. Closes bug #39
|
|
|
5fa452 |
* Made Exec-Program and Exec-Program-Wait work in accounting
|
|
|
5fa452 |
section again. See sites-available/default.
|
|
|
5fa452 |
* Fix long-standing memory leak in esoteric conditions. Found
|
|
|
5fa452 |
by Jerry Nichols.
|
|
|
5fa452 |
* Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
|
|
|
5fa452 |
This will automatically convert more passwords.
|
|
|
5fa452 |
* Updated rlm_pap to decode Password-With-Header, if it was base64
|
|
|
5fa452 |
encoded, and to treat the contents as potentially binary data.
|
|
|
5fa452 |
* Fix Novell eDir code to use the right function parameters.
|
|
|
5fa452 |
Closes bug #86.
|
|
|
5fa452 |
* Allow spaces to be escaped when executing external programs.
|
|
|
5fa452 |
Closes bug #93.
|
|
|
5fa452 |
* Be less restrictive about checking permissions on control socket.
|
|
|
5fa452 |
If we're root, allow connecting to a non-root socket.
|
|
|
5fa452 |
* Remove control socket on normal server exit. If the server isn't
|
|
|
5fa452 |
running, the control socket should not exist.
|
|
|
5fa452 |
* Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
|
|
|
5fa452 |
calculations. It *MAY* be different (upper / lower case) from
|
|
|
5fa452 |
the User-Name attribute. Closes bug #17.
|
|
|
5fa452 |
* If the EAP-TLS methods have problems, more SSL errors are now
|
|
|
5fa452 |
available in the Module-Failure-Message attribute.
|
|
|
5fa452 |
* Update Oracle configure scripts. Closes bug #57.
|
|
|
5fa452 |
* Added text to DESC fields of doc/examples/openldap.schema
|
|
|
5fa452 |
* Updated more documentation to use "Restructured Text" format.
|
|
|
5fa452 |
Thanks to James Lockie.
|
|
|
5fa452 |
* Fixed typos in raddb/sql/mssql/dialup.conf. Closes bug #11.
|
|
|
5fa452 |
* Return error for potential proxy loops when using "-XC"
|
|
|
5fa452 |
* Produce better error messages when slow databases block
|
|
|
5fa452 |
the server.
|
|
|
5fa452 |
* Added notes on DHCP broadcast packets for FreeBSD.
|
|
|
5fa452 |
* Fixed crash when parsing some date strings. Closes bug #98
|
|
|
5fa452 |
* Improperly formatted Attributes are now printed as "Attr-##".
|
|
|
5fa452 |
If they are not correct, they should not use the dictionary name.
|
|
|
5fa452 |
* Fix rlm_digest to be check the format of the Digest attributes,
|
|
|
5fa452 |
and return "noop" rather than "fail" if they're not right.
|
|
|
5fa452 |
* Enable "digest" in raddb/sites-available/default. This change
|
|
|
5fa452 |
enables digest authentication to work "out of the box".
|
|
|
5fa452 |
* Be less aggressive about marking home servers as zombie.
|
|
|
5fa452 |
If they are responding to some packets, they are still alive.
|
|
|
5fa452 |
* Added Packet-Transmit-Counter, to track detail file retransmits.
|
|
|
5fa452 |
Closes bug #13.
|
|
|
5fa452 |
* Added configure check for lt_dladvise_init(). If it exists, then
|
|
|
5fa452 |
using it solves some issues related to libraries loading libraries.
|
|
|
5fa452 |
* Added indexes to the MySQL IP Pool schema.
|
|
|
5fa452 |
* Print WARNING message if too many attributes are put into a packet.
|
|
|
5fa452 |
* Include dhcp test client (not built by default)
|
|
|
5fa452 |
* Added checks for LDAP constraint violation. Closes bug #18.
|
|
|
5fa452 |
* Change default raddebug timeout to 60 seconds.
|
|
|
5fa452 |
* Made error / warning messages more consistent.
|
|
|
5fa452 |
* Correct back-slash handling in variable expansion. Closes bug #46.
|
|
|
5fa452 |
You SHOULD check your configuration for backslash expansion!
|
|
|
5fa452 |
* Fix typo in "configure" script (--enable-libltdl-install)
|
|
|
5fa452 |
* Use local libltdl in more situations. This helps to avoid
|
|
|
5fa452 |
compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
|
|
|
5fa452 |
* Fix hang on startup when multiple home servers were defined
|
|
|
5fa452 |
with "src_ipaddr" field.
|
|
|
5fa452 |
* Fix 32/64 bit issue in rlm_ldap. Closes bug #105.
|
|
|
5fa452 |
* If the first "listen" section defines 127.0.0.1, don't use that
|
|
|
5fa452 |
as a source IP for proxying. It won't work.
|
|
|
5fa452 |
* When Proxy-To-Realm is set to a non-existent realm, the EAP module
|
|
|
5fa452 |
should handle the request, rather than expecting it to be proxied.
|
|
|
5fa452 |
* Fix IPv4 issues with udpfromto. Closes bug #110.
|
|
|
5fa452 |
* Clean up child processes of raddebug. Closes bugs #108 and #109
|
|
|
5fa452 |
* retry OTP if the OTP daemon fails. Closes bug #58.
|
|
|
5fa452 |
* Multiple calls to ber_printf seem to work better. Closes #106.
|
|
|
5fa452 |
* Fix "unlang" so that "attribute not found" is treated as a "false"
|
|
|
5fa452 |
comparison, rather than a syntax error in the configuration.
|
|
|
5fa452 |
* Fix issue with "Group" attribute.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sat Jul 31 2010 Orcan Ogetbil <oget[dot]fedora[at]gmail[dot]com> - 2.1.9-3
|
|
|
5fa452 |
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jun 01 2010 Marcela Maslanova <mmaslano@redhat.com> - 2.1.9-2
|
|
|
5fa452 |
- Mass rebuild with perl-5.12.0
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon May 24 2010 John Dennis <jdennis@redhat.com> - 2.1.9-1
|
|
|
5fa452 |
- update to latest upstream, mainly bug fix release
|
|
|
5fa452 |
Feature improvements
|
|
|
5fa452 |
* Add radmin command "stats detail <file>" to see what
|
|
|
5fa452 |
is going on inside of a detail file reader.
|
|
|
5fa452 |
* Added documentation for CoA. See raddb/sites-available/coa
|
|
|
5fa452 |
* Add sub-option support for Option 82. See dictionary.dhcp
|
|
|
5fa452 |
* Add "server" field to default SQL NAS table, and documented it.
|
|
|
5fa452 |
|
|
|
5fa452 |
Bug fixes
|
|
|
5fa452 |
* Reset "received ping" counter for Status-Server checks. In some
|
|
|
5fa452 |
corner cases it was not getting reset.
|
|
|
5fa452 |
* Handle large VMPS attributes.
|
|
|
5fa452 |
* Count accounting responses from a home server in SNMP / statistics
|
|
|
5fa452 |
code.
|
|
|
5fa452 |
* Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
|
|
|
5fa452 |
* radmin packet counter statistics are now unsigned, for numbers
|
|
|
5fa452 |
2^31..2^32. After that they roll over to zero.
|
|
|
5fa452 |
* Be more careful about expanding data in PAP and MS-CHAP modules.
|
|
|
5fa452 |
This prevents login failures when passwords contain '{'.
|
|
|
5fa452 |
* Clean up zombie children if there were many "exec" modules being
|
|
|
5fa452 |
run for one packet, all with "wait = no".
|
|
|
5fa452 |
* re-open log file after HUP. Closes bug #63.
|
|
|
5fa452 |
* Fix "no response to proxied packet" complaint for Coa / Disconnect
|
|
|
5fa452 |
packets. It shouldn't ignore replies to packets it sent.
|
|
|
5fa452 |
* Calculate IPv6 netmasks correctly. Closes bug #69.
|
|
|
5fa452 |
* Fix SQL module to re-open sockets if they unexpectedly close.
|
|
|
5fa452 |
* Track scope for IPv6 addresses. This lets us use link-local
|
|
|
5fa452 |
addresses properly. Closes bug #70.
|
|
|
5fa452 |
* Updated Makefiles to no longer use the shell for recursing into
|
|
|
5fa452 |
subdirs. "make -j 2" should now work.
|
|
|
5fa452 |
* Updated raddb/sql/mysql/ippool.conf to use "= NULL". Closes
|
|
|
5fa452 |
bug #75.
|
|
|
5fa452 |
* Updated Makefiles so that "make reconfig" no longer uses the shell
|
|
|
5fa452 |
for recursing into subdirs, and re-builds all "configure" files.
|
|
|
5fa452 |
* Used above method to regenerate all configure scripts.
|
|
|
5fa452 |
Closes bug #34.
|
|
|
5fa452 |
* Updated SQL module to allow "server" field of "nas" table
|
|
|
5fa452 |
to be blank: "". This means the same as it being NULL.
|
|
|
5fa452 |
* Fixed regex realm example. Create Realm attribute with value
|
|
|
5fa452 |
of realm from User-Name, not from regex. Closes bug #40.
|
|
|
5fa452 |
* If processing a DHCP Discover returns "fail / reject", ignore
|
|
|
5fa452 |
the packet rather than sending a NAK.
|
|
|
5fa452 |
* Allow '%%' to be escaped in sqlcounter module.
|
|
|
5fa452 |
* Fix typo internal hash table.
|
|
|
5fa452 |
* For PEAP and TTLS, the tunneled reply is added to the reply,
|
|
|
5fa452 |
rather than integrated via the operators. This allows multiple
|
|
|
5fa452 |
VSAs to be added, where they would previously be discarded.
|
|
|
5fa452 |
* Make request number unsigned. This changes nothing other than
|
|
|
5fa452 |
the debug output when the server receives more than 2^31 packets.
|
|
|
5fa452 |
* Don't block when reading child output in 'exec wait'. This means
|
|
|
5fa452 |
that blocked children get killed, instead of blocking the server.
|
|
|
5fa452 |
* Enabled building without any proxy functionality
|
|
|
5fa452 |
* radclient now prefers IPv4, to match the default server config.
|
|
|
5fa452 |
* Print useful error when a realm regex is invalid
|
|
|
5fa452 |
* relaxed rules for preprocess module "with_cisco_vsa_hack". The
|
|
|
5fa452 |
attributes can now be integer, ipaddr, etc. (i.e. non-string)
|
|
|
5fa452 |
* Allow rlm_ldap to build if ldap_set_rebind_proc() has only
|
|
|
5fa452 |
2 arguments.
|
|
|
5fa452 |
* Update configure script for rlm_python to avoid dynamic linking
|
|
|
5fa452 |
problems on some platforms.
|
|
|
5fa452 |
* Work-around for bug #35
|
|
|
5fa452 |
* Do suid to "user" when running in debug mode as root
|
|
|
5fa452 |
* Make "allow_core_dumps" work in more situations.
|
|
|
5fa452 |
* In detail file reader, treat bad records as EOF.
|
|
|
5fa452 |
This allows it to continue working when the disk is full.
|
|
|
5fa452 |
* Fix Oracle default accounting queries to work when there are no
|
|
|
5fa452 |
gigawords attributes. Other databases already had the fix.
|
|
|
5fa452 |
* Fix rlm_sql to show when it opens and closes sockets. It already
|
|
|
5fa452 |
says when it cannot connect, so it should say when it can connect.
|
|
|
5fa452 |
* "chmod -x" for a few C source files.
|
|
|
5fa452 |
* Pull update spec files, etc. from RedHat into the redhat/ directory.
|
|
|
5fa452 |
* Allow spaces when parsing integer values. This helps people who
|
|
|
5fa452 |
put "too much" into an SQL value field.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jan 7 2010 John Dennis <jdennis@redhat.com> - 2.1.8-2
|
|
|
5fa452 |
- resolves: bug #526559 initial install should run bootstrap to create certificates
|
|
|
5fa452 |
running radiusd in debug mode to generate inital temporary certificates
|
|
|
5fa452 |
is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
|
|
|
5fa452 |
rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
|
|
|
5fa452 |
- resolves: bug #528493 use sha1 algorithm instead of md5 during cert generation
|
|
|
5fa452 |
the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
|
|
|
5fa452 |
were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Dec 30 2009 John Dennis <jdennis@redhat.com> - 2.1.8-1
|
|
|
5fa452 |
- update to latest upstream
|
|
|
5fa452 |
Feature improvements
|
|
|
5fa452 |
* Print more descriptive error message for too many EAP sessions.
|
|
|
5fa452 |
This gives hints on what to do when "failed to store handler"
|
|
|
5fa452 |
* Commands received from radmin are now printed on stdout when
|
|
|
5fa452 |
in debugging mode.
|
|
|
5fa452 |
* Allow accounting packets to be written to a detail file, even
|
|
|
5fa452 |
if they were read from a different detail file.
|
|
|
5fa452 |
* Added OpenSSL license exception (src/LICENSE.openssl)
|
|
|
5fa452 |
|
|
|
5fa452 |
Bug fixes
|
|
|
5fa452 |
* DHCP sockets can now set the broadcast flag before binding to a
|
|
|
5fa452 |
socket. You need to set "broadcast = yes" in the DHCP listener.
|
|
|
5fa452 |
* Be more restrictive on string parsing in the config files
|
|
|
5fa452 |
* Fix password length in scripts/create-users.pl
|
|
|
5fa452 |
* Be more flexible about parsing the detail file. This allows
|
|
|
5fa452 |
it to read files where the attributes have been edited.
|
|
|
5fa452 |
* Ensure that requests read from the detail file are cleaned up
|
|
|
5fa452 |
(i.e. don't leak) if they are proxied without a response.
|
|
|
5fa452 |
* Write the PID file after opening sockets, not before
|
|
|
5fa452 |
(closes bug #29)
|
|
|
5fa452 |
* Proxying large numbers of packets no longer gives error
|
|
|
5fa452 |
"unable to open proxy socket".
|
|
|
5fa452 |
* Avoid mutex locks in libc after fork
|
|
|
5fa452 |
* Retry packet from detail file if there was no response.
|
|
|
5fa452 |
* Allow old-style dictionary formats, where the vendor name is the
|
|
|
5fa452 |
last field in an ATTRIBUTE definition.
|
|
|
5fa452 |
* Removed all recursive use of mutexes. Some systems just don't
|
|
|
5fa452 |
support this.
|
|
|
5fa452 |
* Allow !* to work as documented.
|
|
|
5fa452 |
* make templates work (see templates.conf)
|
|
|
5fa452 |
* Enabled "allow_core_dumps" to work again
|
|
|
5fa452 |
* Print better errors when reading invalid dictionaries
|
|
|
5fa452 |
* Sign client certificates with CA, rather than server certs.
|
|
|
5fa452 |
* Fix potential crash in rlm_passwd when file was closed
|
|
|
5fa452 |
* Fixed corner cases in conditional dynamic expansion.
|
|
|
5fa452 |
* Use InnoDB for MySQL IP Pools, to gain transactional support
|
|
|
5fa452 |
* Apply patch to libltdl for CVE-2009-3736.
|
|
|
5fa452 |
* Fixed a few issues found by LLVM's static checker
|
|
|
5fa452 |
* Keep track of "bad authenticators" for accounting packets
|
|
|
5fa452 |
* Keep track of "dropped packets" for auth/acct packets
|
|
|
5fa452 |
* Synced the "debian" directory with upstream
|
|
|
5fa452 |
* Made "unlang" use unsigned 32-bit integers, to match the
|
|
|
5fa452 |
dictionaries.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Dec 30 2009 John Dennis <jdennis@redhat.com> - 2.1.7-7
|
|
|
5fa452 |
- Remove devel subpackage. It doesn't make much sense to have a devel package since
|
|
|
5fa452 |
we don't ship libraries and it produces multilib conflicts.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Dec 21 2009 John Dennis <jdennis@redhat.com> - 2.1.7-6
|
|
|
5fa452 |
- more spec file clean up from review comments
|
|
|
5fa452 |
- remove freeradius-libs subpackage, move libfreeradius-eap and
|
|
|
5fa452 |
libfreeradius-radius into the main package
|
|
|
5fa452 |
- fix subpackage requires, change from freeradius-libs to main package
|
|
|
5fa452 |
- fix description of the devel subpackage, remove referene to non-shipped libs
|
|
|
5fa452 |
- remove execute permissions on src files included in debuginfo
|
|
|
5fa452 |
- remove unnecessary use of ldconfig
|
|
|
5fa452 |
- since all sub-packages now require main package remove user creation for sub-packages
|
|
|
5fa452 |
- also include the LGPL library license file in addition to the GPL license file
|
|
|
5fa452 |
- fix BuildRequires for perl so it's compatible with both Fedora, RHEL5 and RHEL6
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Dec 21 2009 John Dennis <jdennis@redhat.com> - 2.1.7-5
|
|
|
5fa452 |
- fix various rpmlint issues.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Dec 4 2009 Stepan Kasal <skasal@redhat.com> - 2.1.7-4
|
|
|
5fa452 |
- rebuild against perl 5.10.1
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Dec 3 2009 John Dennis <jdennis@redhat.com> - 2.1.7-3
|
|
|
5fa452 |
- resolves: bug #522111 non-conformant initscript
|
|
|
5fa452 |
also change permission of /var/run/radiusd from 0700 to 0755
|
|
|
5fa452 |
so that "service radiusd status" can be run as non-root
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Sep 16 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.7-2
|
|
|
5fa452 |
- use password-auth common PAM configuration instead of system-auth
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Sep 15 2009 John Dennis <jdennis@redhat.com> - 2.1.7-1
|
|
|
5fa452 |
- enable building of the rlm_wimax module
|
|
|
5fa452 |
- pcap wire analysis support is enabled and available in utils subpackage
|
|
|
5fa452 |
- Resolves bug #523053 radtest manpage in wrong package
|
|
|
5fa452 |
- update to latest upstream release, from upstream Changelog:
|
|
|
5fa452 |
Feature improvements
|
|
|
5fa452 |
* Full support for CoA and Disconnect packets as per RFC 3576
|
|
|
5fa452 |
and RFC 5176. Both receiving and proxying CoA is supported.
|
|
|
5fa452 |
* Added "src_ipaddr" configuration to "home_server". See
|
|
|
5fa452 |
proxy.conf for details.
|
|
|
5fa452 |
* radsniff now accepts -I, to read from a filename instead of
|
|
|
5fa452 |
a device.
|
|
|
5fa452 |
* radsniff also prints matching requests and any responses to those
|
|
|
5fa452 |
requests when '-r' is used.
|
|
|
5fa452 |
* Added example of attr_filter for Access-Challenge packets
|
|
|
5fa452 |
* Added support for udpfromto in DHCP code
|
|
|
5fa452 |
* radmin can now selectively mark modules alive/dead.
|
|
|
5fa452 |
See "set module state".
|
|
|
5fa452 |
* Added customizable messages on login success/fail.
|
|
|
5fa452 |
See msg_goodpass && msg_badpass in log{} section of radiusd.conf
|
|
|
5fa452 |
* Document "chase_referrals" and "rebind" in raddb/modules/ldap
|
|
|
5fa452 |
* Preliminary implementation of DHCP relay.
|
|
|
5fa452 |
* Made thread pool section optional. If it doesn't exist,
|
|
|
5fa452 |
the server will run single-threaded.
|
|
|
5fa452 |
* Added sample radrelay.conf for people upgrading from 1.x
|
|
|
5fa452 |
* Made proxying more stable by failing over, rather than
|
|
|
5fa452 |
rejecting the first request. See "response_window" in proxy.conf
|
|
|
5fa452 |
* Allow home_server_pools to exist without realms.
|
|
|
5fa452 |
* Add dictionary.iea (closes bug #7)
|
|
|
5fa452 |
* Added support for RFC 5580
|
|
|
5fa452 |
* Added experimental sql_freetds module from Gabriel Blanchard.
|
|
|
5fa452 |
* Updated dictionary.foundry
|
|
|
5fa452 |
* Added sample configuration for MySQL cluster in raddb/sql/ndb
|
|
|
5fa452 |
See the README file for explanations.
|
|
|
5fa452 |
Bug fixes
|
|
|
5fa452 |
* Fixed corner case where proxied packets could have extra
|
|
|
5fa452 |
character in User-Password attribute. Fix from Niko Tyni.
|
|
|
5fa452 |
* Extended size of "attribute" field in SQL to 64.
|
|
|
5fa452 |
* Fixes to ruby module to be more careful about when it builds.
|
|
|
5fa452 |
* Updated Perl module "configure" script to check for broken
|
|
|
5fa452 |
Perl installations.
|
|
|
5fa452 |
* Fix "status_check = none". It would still send packets
|
|
|
5fa452 |
in some cases.
|
|
|
5fa452 |
* Set recursive flag on the proxy mutex, which enables safer
|
|
|
5fa452 |
cleanup on some platforms.
|
|
|
5fa452 |
* Copy the EAP username verbatim, rather than escaping it.
|
|
|
5fa452 |
* Update handling so that robust-proxy-accounting works when
|
|
|
5fa452 |
all home servers are down for extended periods of time.
|
|
|
5fa452 |
* Look for DHCP option 53 anywhere in the packet, not just
|
|
|
5fa452 |
at the start.
|
|
|
5fa452 |
* Fix processing of proxy fail handler with virtual servers.
|
|
|
5fa452 |
* DHCP code now prints out correct src/dst IP addresses
|
|
|
5fa452 |
when sending packets.
|
|
|
5fa452 |
* Removed requirement for DHCP to have clients
|
|
|
5fa452 |
* Fixed handling of DHCP packets with message-type buried in the packet
|
|
|
5fa452 |
* Fixed corner case with negation in unlang.
|
|
|
5fa452 |
* Minor fixes to default MySQL & PostgreSQL schemas
|
|
|
5fa452 |
* Suppress MSCHAP complaints in debugging mode.
|
|
|
5fa452 |
* Fix SQL module for multiple instance, and possible crash on HUP
|
|
|
5fa452 |
* Fix permissions for radius.log for sites that change user/group,
|
|
|
5fa452 |
but which don't create the file before starting radiusd.
|
|
|
5fa452 |
* Fix double counting of packets when proxying
|
|
|
5fa452 |
* Make %%l work
|
|
|
5fa452 |
* Fix pthread keys in rlm_perl
|
|
|
5fa452 |
* Log reasons for EAP failure (closes bug #8)
|
|
|
5fa452 |
* Load home servers and pools that aren't referenced from a realm.
|
|
|
5fa452 |
* Handle return codes from virtual attributes in "unlang"
|
|
|
5fa452 |
(e.g. LDAP-Group). This makes "!(expr)" work for them.
|
|
|
5fa452 |
* Enable VMPS to see contents of virtual server again
|
|
|
5fa452 |
* Fix WiMAX module to be consistent with examples. (closes bug #10)
|
|
|
5fa452 |
* Fixed crash with policies dependent on NAS-Port comparisons
|
|
|
5fa452 |
* Allowed vendor IDs to be be higher than 32767.
|
|
|
5fa452 |
* Fix crash on startup with certain regexes in "hints" file.
|
|
|
5fa452 |
* Fix crash in attr_filter module when packets don't exist
|
|
|
5fa452 |
* Allow detail file reader to be faster when "load_factor = 100"
|
|
|
5fa452 |
* Add work-around for build failures with errors related to
|
|
|
5fa452 |
lt__PROGRAM__LTX_preloaded_symbols. libltdl / libtool are horrible.
|
|
|
5fa452 |
* Made ldap module "rebind" option aware of older, incompatible
|
|
|
5fa452 |
versions of OpenLDAP.
|
|
|
5fa452 |
* Check value of Fall-Through in attr_filter module.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.1.6-6
|
|
|
5fa452 |
- rebuilt with new openssl
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.6-5
|
|
|
5fa452 |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Jul 10 2009 John Dennis <jdennis@redhat.com> - 2.1.6-4
|
|
|
5fa452 |
- install COPYRIGHT CREDITS INSTALL LICENSE README into docdir
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jun 23 2009 John Dennis <jdennis@redhat.com> - 2.1.6-3
|
|
|
5fa452 |
- resolves bug #507571 freeradius packages do not check for user/group existence
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jun 2 2009 John Dennis <jdennis@redhat.com> - 2.1.6-2
|
|
|
5fa452 |
- make /etc/raddb/sites-available/* be config(noreplace)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon May 18 2009 John Dennis <jdennis@redhat.com> - 2.1.6-1
|
|
|
5fa452 |
- update to latest upstream release, from upstream Changelog:
|
|
|
5fa452 |
Feature improvements
|
|
|
5fa452 |
* radclient exits with 0 on successful (accept / ack), and 1
|
|
|
5fa452 |
otherwise (no response / reject)
|
|
|
5fa452 |
* Added support for %%{sql:UPDATE ..}, and insert/delete
|
|
|
5fa452 |
Patch from Arran Cudbard-Bell
|
|
|
5fa452 |
* Added sample "do not respond" policy. See raddb/policy.conf
|
|
|
5fa452 |
and raddb/sites-available/do_not_respond
|
|
|
5fa452 |
* Cleanups to Suse spec file from Norbert Wegener
|
|
|
5fa452 |
* New VSAs for Juniper from Bjorn Mork
|
|
|
5fa452 |
* Include more RFC dictionaries in the default install
|
|
|
5fa452 |
* More documentation for the WiMAX module
|
|
|
5fa452 |
* Added "chase_referrals" and "rebind" configuration to rlm_ldap.
|
|
|
5fa452 |
This helps with Active Directory. See raddb/modules/ldap
|
|
|
5fa452 |
* Don't load pre/post-proxy if proxying is disabled.
|
|
|
5fa452 |
* Added %%{md5:...}, which returns MD5 hash in hex.
|
|
|
5fa452 |
* Added configurable "retry_interval" and "poll_interval"
|
|
|
5fa452 |
for "detail" listeners.
|
|
|
5fa452 |
* Added "delete_mppe_keys" configuration option to rlm_wimax.
|
|
|
5fa452 |
Apparently some WiMAX clients misbehave when they see those keys.
|
|
|
5fa452 |
* Added experimental rlm_ruby from
|
|
|
5fa452 |
http://github.com/Antti/freeradius-server/tree/master
|
|
|
5fa452 |
* Add Tunnel attributes to ldap.attrmap
|
|
|
5fa452 |
* Enable virtual servers to be reloaded on HUP. For now, only
|
|
|
5fa452 |
the "authorize", "authenticate", etc. processing sections are
|
|
|
5fa452 |
reloaded. Clients and "listen" sections are NOT reloaded.
|
|
|
5fa452 |
* Updated "radwatch" script to be more robust. See scripts/radwatch
|
|
|
5fa452 |
* Added certificate compatibility notes in raddb/certs/README,
|
|
|
5fa452 |
for compatibility with different operating systems. (i.e. Windows)
|
|
|
5fa452 |
* Permit multiple "-e" in radmin.
|
|
|
5fa452 |
* Add support for originating CoA-Request and Disconnect-Request.
|
|
|
5fa452 |
See raddb/sites-available/originate-coa.
|
|
|
5fa452 |
* Added "lifetime" and "max_queries" to raddb/sql.conf.
|
|
|
5fa452 |
This helps address the problem of hung SQL sockets.
|
|
|
5fa452 |
* Allow packets to be injected via radmin. See "inject help"
|
|
|
5fa452 |
in radmin.
|
|
|
5fa452 |
* Answer VMPS reconfirmation request. Patch from Hermann Lauer.
|
|
|
5fa452 |
* Sample logrotate script in scripts/logrotate.freeradius
|
|
|
5fa452 |
* Add configurable poll interval for "detail" listeners
|
|
|
5fa452 |
* New "raddebug" command. This prints debugging information from
|
|
|
5fa452 |
a running server. See "man raddebug.
|
|
|
5fa452 |
* Add "require_message_authenticator" configuration to home_server
|
|
|
5fa452 |
configuration. This makes the server add Message-Authenticator
|
|
|
5fa452 |
to all outgoing Access-Request packets.
|
|
|
5fa452 |
* Added smsotp module, as contributed by Siemens.
|
|
|
5fa452 |
* Enabled the administration socket in the default install.
|
|
|
5fa452 |
See raddb/sites-available/control-socket, and "man radmin"
|
|
|
5fa452 |
* Handle duplicate clients, such as with replicated or
|
|
|
5fa452 |
load-balanced SQL servers and "readclients = yes"
|
|
|
5fa452 |
Bug fixes
|
|
|
5fa452 |
* Minor changes to allow building without VQP.
|
|
|
5fa452 |
* Minor fixes from John Center
|
|
|
5fa452 |
* Fixed raddebug example
|
|
|
5fa452 |
* Don't crash when deleting attributes via unlang
|
|
|
5fa452 |
* Be friendlier to very fast clients
|
|
|
5fa452 |
* Updated the "detail" listener so that it only polls once,
|
|
|
5fa452 |
and not many times in a row, leaking memory each time...
|
|
|
5fa452 |
* Update comparison for Packet-Src-IP-Address (etc.) so that
|
|
|
5fa452 |
the operators other than '==' work.
|
|
|
5fa452 |
* Did autoconf magic to work around weird libtool bug
|
|
|
5fa452 |
* Make rlm_perl keep tags for tagged attributes in more situations
|
|
|
5fa452 |
* Update UID checking for radmin
|
|
|
5fa452 |
* Added "include_length" field for TTLS. It's needed for RFC
|
|
|
5fa452 |
compliance, but not (apparently) for interoperability.
|
|
|
5fa452 |
* Clean up control sockets when they are closed, so that we don't
|
|
|
5fa452 |
leak memory.
|
|
|
5fa452 |
* Define SUN_LEN for systems that don't have it.
|
|
|
5fa452 |
* Correct some boundary conditions in the conditional checker ("if")
|
|
|
5fa452 |
in "unlang". Bug noted by Arran Cudbard-Bell.
|
|
|
5fa452 |
* Work around minor building issues in gmake. This should only
|
|
|
5fa452 |
have affected developers.
|
|
|
5fa452 |
* Change how we manage unprivileged user/group, so that we do not
|
|
|
5fa452 |
create control sockets owned by root.
|
|
|
5fa452 |
* Fixed more minor issues found by Coverity.
|
|
|
5fa452 |
* Allow raddb/certs/bootstrap to run when there is no "make"
|
|
|
5fa452 |
command installed.
|
|
|
5fa452 |
* In radiusd.conf, run_dir depends on the name of the program,
|
|
|
5fa452 |
and isn't hard-coded to "..../radiusd"
|
|
|
5fa452 |
* Check for EOF in more places in the "detail" file reader.
|
|
|
5fa452 |
* Added Freeswitch dictionary.
|
|
|
5fa452 |
* Chop ethernet frames in VMPS, rather than droppping packets.
|
|
|
5fa452 |
* Fix EAP-TLS bug. Patch from Arnaud Ebalard
|
|
|
5fa452 |
* Don't lose string for regex-compares in the "users" file.
|
|
|
5fa452 |
* Expose more functions in rlm_sql to rlm_sqlippool, which
|
|
|
5fa452 |
helps on systems where RTLD_GLOBAL is off.
|
|
|
5fa452 |
* Fix typos in MySQL schemas for ippools.
|
|
|
5fa452 |
* Remove macro that was causing build issues on some platforms.
|
|
|
5fa452 |
* Fixed issues with dead home servers. Bug noted by Chris Moules.
|
|
|
5fa452 |
* Fixed "access after free" with some dynamic clients.
|
|
|
5fa452 |
|
|
|
5fa452 |
- fix packaging bug, some directories missing execute permission
|
|
|
5fa452 |
/etc/raddb/dictionary now readable by all.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Feb 24 2009 John Dennis <jdennis@redhat.com> - 2.1.3-4
|
|
|
5fa452 |
- fix type usage in unixodbc to match new type usage in unixodbc API
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Feb 19 2009 John Dennis <jdennis@redhat.com> - 2.1.3-3
|
|
|
5fa452 |
- add pointer to Red Hat documentation in docdir
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sat Jan 24 2009 Caolán McNamara <caolanm@redhat.com> - 2.1.3-2
|
|
|
5fa452 |
- rebuild for dependencies
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Dec 4 2008 John Dennis <jdennis@redhat.com> - 2.1.3-1
|
|
|
5fa452 |
- upgrade to latest upstream release, upstream summary follows:
|
|
|
5fa452 |
The focus of this release is stability.
|
|
|
5fa452 |
Feature Improvements:
|
|
|
5fa452 |
* Allow running with "user=radiusd" and binding to secure sockets.
|
|
|
5fa452 |
* Start sending Status-Server "are you alive" messages earlier, which
|
|
|
5fa452 |
helps with proxying multiple realms to a home server.
|
|
|
5fa452 |
* Removed thread pool code from rlm_perl. It's not necessary.
|
|
|
5fa452 |
* Added example Perl configuration to raddb/modules/perl
|
|
|
5fa452 |
* Force OpenSSL to support certificates with SHA256. This seems to be
|
|
|
5fa452 |
necessary for WiMAX certs.
|
|
|
5fa452 |
Bug fixes:
|
|
|
5fa452 |
* Fix Debian patch to allow it to build.
|
|
|
5fa452 |
* Fix potential NULL dereference in debugging mode on certain
|
|
|
5fa452 |
platforms for TTLS and PEAP inner tunnels.
|
|
|
5fa452 |
* Fix uninitialized memory in handling of vendor definitions
|
|
|
5fa452 |
* Fix parsing of quoted (but non-string) attributes in the "users" file.
|
|
|
5fa452 |
* Initialize uknown NAS IP to 255.255.255.255, rather than 0.0.0.0
|
|
|
5fa452 |
* use SUN_LEN in control socket, to avoid truncation on some platforms.
|
|
|
5fa452 |
* Correct internal handling of "debug condition" to prevent it from
|
|
|
5fa452 |
being over-written.
|
|
|
5fa452 |
* Check return code of regcomp in "unlang", so that invalid regular
|
|
|
5fa452 |
expressions are caught rather than mishandled.
|
|
|
5fa452 |
* Make rlm_sql use <ltdl.h>. Addresses bug #610.
|
|
|
5fa452 |
* Document list "type = status" better. Closes bug #580.
|
|
|
5fa452 |
* Set "default days" for certificates, because OpenSSL won't do it.
|
|
|
5fa452 |
This closes bug #615.
|
|
|
5fa452 |
* Reference correct list in example raddb/modules/ldap. Closes #596.
|
|
|
5fa452 |
* Increase default schema size for Acct-Session-Id to 64. Closes #540.
|
|
|
5fa452 |
* Fix use of temporary files in dialup-admin. Closes #605 and
|
|
|
5fa452 |
addresses CVE-2008-4474.
|
|
|
5fa452 |
* Addressed a number of minor issues found by Coverity.
|
|
|
5fa452 |
* Added DHCP option 150 to the dictionary. Closes #618.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Dec 3 2008 John Dennis <jdennis@redhat.com> - 2.1.1-8
|
|
|
5fa452 |
- add --with-system-libtool to configure as a workaround for
|
|
|
5fa452 |
undefined reference to lt__PROGRAM__LTX_preloaded_symbols
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Dec 1 2008 John Dennis <jdennis@redhat.com> - 2.1.1-7
|
|
|
5fa452 |
- add obsoletes tag for dialupadmin subpackages which were removed
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Dec 1 2008 John Dennis <jdennis@redhat.com> - 2.1.1-7
|
|
|
5fa452 |
- add readline-devel BuildRequires
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sun Nov 30 2008 Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> - 2.1.1-4
|
|
|
5fa452 |
- Rebuild for Python 2.6
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Nov 21 2008 John Dennis <jdennis@redhat.com> - 2.1.1-3
|
|
|
5fa452 |
- make spec file buildable on RHEL5.2 by making perl-devel a fedora only dependency.
|
|
|
5fa452 |
- remove diaupadmin packages, it's not well supported and there are problems with it.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Sep 26 2008 John Dennis <jdennis@redhat.com> - 2.1.1-1
|
|
|
5fa452 |
- Resolves: bug #464119 bootstrap code could not create initial certs in /etc/raddb/certs because
|
|
|
5fa452 |
permissions were 750, radiusd running as euid radiusd could not write there, permissions now 770
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Sep 25 2008 John Dennis <jdennis@redhat.com> - 2.1.1-1
|
|
|
5fa452 |
- upgrade to new upstream 2.1.1 release
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Jul 30 2008 John Dennis <jdennis@redhat.com> - 2.0.5-2
|
|
|
5fa452 |
- Resolves: bug #453761: FreeRADIUS %%post should not include chown -R
|
|
|
5fa452 |
specify file attributes for /etc/raddb/ldap.attrmap
|
|
|
5fa452 |
fix consistent use of tabs/spaces (rpmlint warning)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Jun 9 2008 John Dennis <jdennis@redhat.com> - 2.0.5-1
|
|
|
5fa452 |
- upgrade to latest upstream, see Changelog for details,
|
|
|
5fa452 |
upstream now has more complete fix for bug #447545, local patch removed
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed May 28 2008 John Dennis <jdennis@redhat.com> - 2.0.4-1
|
|
|
5fa452 |
- upgrade to latest upstream, see Changelog for details
|
|
|
5fa452 |
- resolves: bug #447545: freeradius missing /etc/raddb/sites-available/inner-tunnel
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri May 16 2008 <jdennis@redhat.com> - 2.0.3-3
|
|
|
5fa452 |
- # Temporary fix for bug #446864, turn off optimization
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Apr 18 2008 John Dennis <jdennis@redhat.com> - 2.0.3-2
|
|
|
5fa452 |
- remove support for radrelay, it's different now
|
|
|
5fa452 |
- turn off default inclusion of SQL config files in radiusd.conf since SQL
|
|
|
5fa452 |
is an optional RPM install
|
|
|
5fa452 |
- remove mssql config files
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Apr 17 2008 John Dennis <jdennis@redhat.com> - 2.0.3-1
|
|
|
5fa452 |
- Upgrade to current upstream 2.0.3 release
|
|
|
5fa452 |
- Many thanks to Enrico Scholz for his spec file suggestions incorporated here
|
|
|
5fa452 |
- Resolve: bug #438665: Contains files owned by buildsystem
|
|
|
5fa452 |
- Add dialupadmin-mysql, dialupadmin-postgresql, dialupadmin-ldap subpackages
|
|
|
5fa452 |
to further partition external dependencies.
|
|
|
5fa452 |
- Clean up some unnecessary requires dependencies
|
|
|
5fa452 |
- Add versioned requires between subpackages
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Mar 18 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 2.0.2-2
|
|
|
5fa452 |
- add Requires for versioned perl (libperl.so)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Feb 28 2008 <jdennis@redhat.com> - 2.0.2-1
|
|
|
5fa452 |
- upgrade to new 2.0 release
|
|
|
5fa452 |
- split into subpackages for more fine grained installation
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.1.7-4.4.ipa
|
|
|
5fa452 |
- Autorebuild for GCC 4.3
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.1.7-3.4.ipa
|
|
|
5fa452 |
- Rebuild for deps
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sat Nov 10 2007 <jdennis@redhat.com> - 1.1.7-3.3.ipa
|
|
|
5fa452 |
- add support in rlm_ldap for reading clients from ldap
|
|
|
5fa452 |
- fix TLS parameter controling if a cert which fails to validate
|
|
|
5fa452 |
will be accepted (i.e. self-signed),
|
|
|
5fa452 |
rlm_ldap config parameter=tls_require_cert
|
|
|
5fa452 |
ldap LDAP_OPT_X_TLS_REQUIRE_CERT parameter was being passed to
|
|
|
5fa452 |
ldap_set_option() when it should have been ldap_int_tls_config()
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sat Nov 3 2007 <jdennis@redhat.com> - 1.1.7-3.2.ipa
|
|
|
5fa452 |
- add support in rlm_ldap for SASL/GSSAPI binds to the LDAP server
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Sep 17 2007 Thomas Woerner <twoerner@redhat.com> 1.1.7-3.1
|
|
|
5fa452 |
- made init script fully lsb conform
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Sep 17 2007 Thomas Woerner <twoerner@redhat.com> 1.1.7-3
|
|
|
5fa452 |
- fixed initscript problem (rhbz#292521)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Aug 28 2007 Thomas Woerner <twoerner@redhat.com> 1.1.7-2
|
|
|
5fa452 |
- fixed initscript for LSB (rhbz#243671, rhbz#243928)
|
|
|
5fa452 |
- fixed license tag
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Aug 7 2007 Thomas Woerner <twoerner@redhat.com> 1.1.7-1
|
|
|
5fa452 |
- new versin 1.1.7
|
|
|
5fa452 |
- install snmp MIB files
|
|
|
5fa452 |
- dropped LDAP_DEPRECATED flag, it is upstream
|
|
|
5fa452 |
- marked config files for sub packages as config (rhbz#240400)
|
|
|
5fa452 |
- moved db files to /var/lib/raddb (rhbz#199082)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Jun 15 2007 Thomas Woerner <twoerner@redhat.com> 1.1.6-2
|
|
|
5fa452 |
- radiusd expects /etc/raddb to not be world readable or writable
|
|
|
5fa452 |
/etc/raddb now belongs to radiusd, post script sets permissions
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Jun 15 2007 Thomas Woerner <twoerner@redhat.com> 1.1.6-1
|
|
|
5fa452 |
- new version 1.1.6
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Mar 9 2007 Thomas Woerner <twoerner@redhat.com> 1.1.5-1
|
|
|
5fa452 |
- new version 1.1.5
|
|
|
5fa452 |
- no /etc/raddb/otppasswd.sample anymore
|
|
|
5fa452 |
- build is pie by default, dropped pie patch
|
|
|
5fa452 |
- fixed build requirement for perl (perl-devel)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Feb 23 2007 Karsten Hopp <karsten@redhat.com> 1.1.3-3
|
|
|
5fa452 |
- remove trailing dot from summary
|
|
|
5fa452 |
- fix buildroot
|
|
|
5fa452 |
- fix post/postun/preun requirements
|
|
|
5fa452 |
- use rpm macros
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Dec 8 2006 Thomas Woerner <twoerner@redhat.com> 1.1.3-2.1
|
|
|
5fa452 |
- rebuild for new postgresql library version
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Nov 30 2006 Thomas Woerner <twoerner@redhat.com> 1.1.3-2
|
|
|
5fa452 |
- fixed ldap code to not use internals, added LDAP_DEPRECATED compile time flag
|
|
|
5fa452 |
(#210912)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Aug 15 2006 Thomas Woerner <twoerner@redhat.com> 1.1.3-1
|
|
|
5fa452 |
- new version 1.1.3 with lots of upstream bug fixes, some security fixes
|
|
|
5fa452 |
(#205654)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Aug 15 2006 Thomas Woerner <twoerner@redhat.com> 1.1.2-2
|
|
|
5fa452 |
- commented out include for sql.conf in radiusd.conf (#202561)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 1.1.2-1.1
|
|
|
5fa452 |
- rebuild
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jun 1 2006 Thomas Woerner <twoerner@redhat.com> 1.1.2-1
|
|
|
5fa452 |
- new version 1.1.2
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed May 31 2006 Thomas Woerner <twoerner@redhat.com> 1.1.1-1
|
|
|
5fa452 |
- new version 1.1.1
|
|
|
5fa452 |
- fixed incorrect rlm_sql globbing (#189095)
|
|
|
5fa452 |
Thanks to Yanko Kaneti for the fix.
|
|
|
5fa452 |
- fixed chown syntax in post script (#182777)
|
|
|
5fa452 |
- dropped gcc34, libdir and realloc-return patch
|
|
|
5fa452 |
- spec file cleanup with additional libtool build fixes
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 1.0.5-1.2
|
|
|
5fa452 |
- bump again for double-long bug on ppc(64)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.0.5-1.1
|
|
|
5fa452 |
- rebuilt for new gcc4.1 snapshot and glibc changes
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Dec 13 2005 Thomas Woerner <twoerner@redhat.com> 1.0.5-1
|
|
|
5fa452 |
- new version 1.0.5
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
|
|
|
5fa452 |
- rebuilt
|
|
|
5fa452 |
|
|
|
5fa452 |
* Sat Nov 12 2005 Tom Lane <tgl@redhat.com> - 1.0.4-5
|
|
|
5fa452 |
- Rebuild due to mysql update.
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Nov 9 2005 Tomas Mraz <tmraz@redhat.com> - 1.0.4-4
|
|
|
5fa452 |
- rebuilt with new openssl
|
|
|
5fa452 |
- fixed ignored return value of realloc
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Sep 30 2005 Tomas Mraz <tmraz@redhat.com> - 1.0.4-3
|
|
|
5fa452 |
- use include instead of pam_stack in pam config
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Jul 20 2005 Thomas Woerner <twoerner@redhat.com> 1.0.4-2
|
|
|
5fa452 |
- added missing build requires for libtool-ltdl-devel (#160877)
|
|
|
5fa452 |
- modified file list to get a report for missing plugins
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jun 28 2005 Thomas Woerner <twoerner@redhat.com> 1.0.4-1
|
|
|
5fa452 |
- new version 1.0.4
|
|
|
5fa452 |
- droppend radrelay patch (fixed upstream)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Apr 14 2005 Warren Togami <wtogami@redhat.com> 1.0.2-2
|
|
|
5fa452 |
- rebuild against new postgresql-libs
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Apr 4 2005 Thomas Woerner <twoerner@redhat.com> 1.0.2-1
|
|
|
5fa452 |
- new version 1.0.2
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Nov 19 2004 Thomas Woerner <twoerner@redhat.com> 1.0.1-3
|
|
|
5fa452 |
- rebuild for MySQL 4
|
|
|
5fa452 |
- switched over to installed libtool
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Nov 5 2004 Thomas Woerner <twoerner@redhat.com> 1.0.1-2
|
|
|
5fa452 |
- Fixed install problem of radeapclient (#138069)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Oct 6 2004 Thomas Woerner <twoerner@redhat.com> 1.0.1-1
|
|
|
5fa452 |
- new version 1.0.1
|
|
|
5fa452 |
- applied radrelay CVS patch from Kevin Bonner
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Aug 25 2004 Warren Togami <wtogami@redhat.com> 1.0.0-3
|
|
|
5fa452 |
- BuildRequires pam-devel and libtool
|
|
|
5fa452 |
- Fix errant text in description
|
|
|
5fa452 |
- Other minor cleanups
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Aug 25 2004 Thomas Woerner <twoerner@redhat.com> 1.0.0-2.1
|
|
|
5fa452 |
- renamed /etc/pam.d/radius to /etc/pam.d/radiusd to match default
|
|
|
5fa452 |
configuration (#130613)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Aug 25 2004 Thomas Woerner <twoerner@redhat.com> 1.0.0-2
|
|
|
5fa452 |
- fixed BuildRequires for openssl-devel (#130606)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Aug 16 2004 Thomas Woerner <twoerner@redhat.com> 1.0.0-1
|
|
|
5fa452 |
- 1.0.0 final
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Jul 5 2004 Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
|
|
|
5fa452 |
- added buildrequires for zlib-devel (#127162)
|
|
|
5fa452 |
- fixed libdir patch to prefer own libeap instead of installed one (#127168)
|
|
|
5fa452 |
- fixed samba account maps in LDAP for samba v3 (#127173)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jul 1 2004 Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.1
|
|
|
5fa452 |
- third "pre" release of version 1.0.0
|
|
|
5fa452 |
- rlm_ldap is using SASLv2 (#126507)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
5fa452 |
- rebuilt
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Jun 3 2004 Thomas Woerner <twoerner@redhat.com> 0.9.3-4.1
|
|
|
5fa452 |
- fixed BuildRequires for gdbm-devel
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Mar 30 2004 Harald Hoyer <harald@redhat.com> - 0.9.3-4
|
|
|
5fa452 |
- gcc34 compilation fixes
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
5fa452 |
- rebuilt
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Feb 24 2004 Thomas Woerner <twoerner@redhat.com> 0.9.3-3.2
|
|
|
5fa452 |
- added sql scripts for rlm_sql to documentation (#116435)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
|
|
|
5fa452 |
- rebuilt
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Feb 5 2004 Thomas Woerner <twoerner@redhat.com> 0.9.3-2.1
|
|
|
5fa452 |
- using -fPIC instead of -fpic for s390 ans s390x
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Feb 5 2004 Thomas Woerner <twoerner@redhat.com> 0.9.3-2
|
|
|
5fa452 |
- radiusd is pie, now
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Nov 25 2003 Thomas Woerner <twoerner@redhat.com> 0.9.3-1
|
|
|
5fa452 |
- new version 0.9.3 (bugfix release)
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri Nov 7 2003 Thomas Woerner <twoerner@redhat.com> 0.9.2-1
|
|
|
5fa452 |
- new version 0.9.2
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Sep 29 2003 Thomas Woerner <twoerner@redhat.com> 0.9.1-1
|
|
|
5fa452 |
- new version 0.9.1
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Sep 22 2003 Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
|
|
|
5fa452 |
- modify default PAM configuration to remove the directory part of the module
|
|
|
5fa452 |
name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
|
|
|
5fa452 |
multilib systems will always load the right module for the architecture
|
|
|
5fa452 |
- modify default PAM configuration to use pam_stack
|
|
|
5fa452 |
|
|
|
5fa452 |
* Mon Sep 1 2003 Thomas Woerner <twoerner@redhat.com> 0.9.0-2.1
|
|
|
5fa452 |
- com_err.h moved to /usr/include/et
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue Jul 22 2003 Thomas Woerner <twoerner@redhat.com> 0.9.0-1
|
|
|
5fa452 |
- 0.9.0 final
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed Jul 16 2003 Thomas Woerner <twoerner@redhat.com> 0.9.0-0.9.0
|
|
|
5fa452 |
- new version 0.9.0 pre3
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu May 22 2003 Thomas Woerner <twoerner@redhat.com> 0.8.1-6
|
|
|
5fa452 |
- included directory /var/log/radius/radacct for logrotate
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed May 21 2003 Thomas Woerner <twoerner@redhat.com> 0.8.1-5
|
|
|
5fa452 |
- moved log and run dir to files section, cleaned up post
|
|
|
5fa452 |
|
|
|
5fa452 |
* Wed May 21 2003 Thomas Woerner <twoerner@redhat.com> 0.8.1-4
|
|
|
5fa452 |
- added missing run dir in post
|
|
|
5fa452 |
|
|
|
5fa452 |
* Tue May 20 2003 Thomas Woerner <twoerner@redhat.com> 0.8.1-3
|
|
|
5fa452 |
- fixed module load patch
|
|
|
5fa452 |
|
|
|
5fa452 |
* Fri May 16 2003 Thomas Woerner <twoerner@redhat.com>
|
|
|
5fa452 |
- removed la files, removed devel package
|
|
|
5fa452 |
- split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
|
|
|
5fa452 |
freeradius-unixODBC
|
|
|
5fa452 |
- fixed requires and buildrequires
|
|
|
5fa452 |
- create logging dir in post if it does not exist
|
|
|
5fa452 |
- fixed module load without la files
|
|
|
5fa452 |
|
|
|
5fa452 |
* Thu Apr 17 2003 Thomas Woerner <twoerner@redhat.com>
|
|
|
5fa452 |
- Initial build.
|