pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/net



Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Jun 25 11:42:49 UTC 2021

Modified Files:
        pkgsrc/net/freeradius: Makefile Makefile.common PLIST distinfo
        pkgsrc/net/freeradius-freetds: Makefile
        pkgsrc/net/freeradius-perl: Makefile
        pkgsrc/net/freeradius-rest: Makefile
        pkgsrc/net/freeradius-sqlite3: Makefile
Added Files:
        pkgsrc/net/freeradius/patches: patch-src_main_command.c
            patch-src_main_util.c
Removed Files:
        pkgsrc/net/freeradius/patches: patch-main_command.c patch-main_util.c

Log Message:
freeradius: updated to 3.0.23

FreeRADIUS 3.0.23

Feature improvements
* Update dictionary.aruba
* Add "set home_server state ... down" in order to mark the
  home server as administratively down.  Use "alive" to bring
  it back to life.
* Add Post-Auth-Type "Client-Lost" which should make it easier
  to log when clients stop responding.
* Add sites-available/totp as an example of how to use TOTP.
* Add %{mschap:Domain-Name}.
* Cache TLS messages in &session-state, for more debugging.
* Notes in eap configuration about TLS 1.0 / TLS 1.1, and setting
  cipher_list = "DEFAULT@SECLEVEL=1"
* Added MANY warning messages about using TLS 1.3 with EAP.
  In short, don't use it.  Microsoft will support it in fall 2021.

Bug fixes
* Fix crash in some cases when home server is down, in debug mode.
* Fix (again) "read clients from SQL" functionality.
* Fix sql_map to return values in more situations.
* Silently ignore LEAP configuration instead of erroring out.

FreeRADIUS 3.0.22

Feature improvements
* Many new "unlang" documentation files.  See "make docsite"
  and then see build/docsite/freeradius-server/*/index.html
* Limited support for dynamic home servers.  See proxy.conf
  and doc/configuration/dynamic_home_servers.md
* Add support for prepend operator ^=.  See "man unlang" for
  for details.
* Added rlm_totp, for use with the Google Authenticator app.
  See mods-available/totp.
* The default minimum TLS version is now TLS 1.2, as per RFC 8996.
  Older versions can be allowed by setting tls_min_version, and
  updating "cipher_list".
* Significantly improve the readability and contents of TLS
  debug messages.
* Allow CoA and Disconnect messages over TLS sockets.
* Automatically set fragment size / MTU, so that PEAP/EAP-TLS
  works, and no longer requires manual changes to the configuration.
* Allow "configurable_client_cert=yes" for EAP-TLS.  This should
  only be used for a "walled garden".  See mods-available/eap
* Add TLS 1.2 support for EAP-Fast.  Patches from Alex Clouter.
* Add ca_path_reload_interval option for tls.  See mods-available/eap.
* Abfab-tls updates from Alejandro Perez.
* Add "tls_min_version" to ldap module configuration.
* We now support running policies when receiving a RadSec connection.
  See sites-available/default, "New-TLS-Connection".
* Update TLS "ecdh_curve" code to allow for multiple curves.
* Allow delta CRLs.
* add rlm_sql_map, which can handle multiple columns from an SQL
  query.  See raddb/mods-available/sql_map.
* New xlat for setting status of rlm_always instances and new
  resource-check example virtual server for manipulating control flow
  in unlang policies based on status of some external resource.
  Patches from Terry Burton.
* Update radmin to show more information about the home servers
  using "show home_server list all".
* The default configuration now replies with EAP-Key-Name, if it
  is available, and was requested.
* Include extensions in generated certificates.
* Ignore user-provided dhparams in FIPS mode.
  Patch from Alexander Scheel.
* Remove native support for Cisco LEAP.  It is insecure, and
  should not be used.  Proxying LEAP is still supported.
* Allow use of password preparation methods with rlm_eap_pwd.
  Patch from Michael Braun.
* Many, many, improvements for DHCP from Nick Porter and Terry Burton.
* More RFC compliance for various corner cases of DHCP,
* Use DHCP-specific schemas.
* Add stored procedures for DHCP lease allocation
* Add support for DHCP-Decline.
* Added mods-available/dhcp_sql which is a DHCP-specific instance
  of the SQL module.
* Treat DHCP Discover and Request differently for lease allocation times.
* Add support for PBKDF2 keys.
* Update dictionary.mikrotik, dictionary.aruba, dictionary.paloalto,
   dictionary.juniper, dictionary.bskyb,
  dictionary.alcatel.sr.
* Update default PostgreSQL schema to use "text" instead of
  a fixed-size "varchar".
* Add radmin command "show client list verbose", which gives a lot
  more information about each client.
* Add support for EAPS-AKA authentication to rlm_wimax.
* Add rlm_rest support for HTTP/2.
* Add REST-HTTP-Status-Code attribute holding HTTP status code.
* Add option to set http_negotiation in rlm_rest.
* Encode / decode NAS-Filter-Rule according to RFC 4849.
  Inside of FreeRADIUS, each NAS-Filter-Rule just looks like
  a string.  But "on the wire", it follows RFC 4849.
  See src/tests/unit/rfc4849.txt
* Allow attributes using old names in configuration files, SQL,
  or modules to match attributes in the packet which use
  new names.
* Allow querying IPv6 stats via FreeRADIUS-Stats-Client-IPv6-Address
  and FreeRADIUS-Stats-Server-IPv6-Address
* Add warnings if there is no "real" User-Name to identify users.
* Add sample configuration to update Stripped-User-Name and/or
  Class for user sessions. See sites-available/default
* Add configuration to suppress printing values for User-Name, etc.
  See radiusd.conf, "suppress_secrets"
* Support dictionary.telrad, which is also in WiMAX format.
* PEAP 'proxy_tunneled_request_as_eap' is now configurable
  at runtime with Proxy-Tunneled-Request-As-EAP.
* Debug output now lists client/server proposed TLS ciphers.
* Add support for TLS1.3, patches from Alexander Clouter

Bug fixes
* Fix long-term double free due to PCRE calling our "free"
  function twice.
* Respect the "log_reject" configuration item in more places.
  This lowers the number of "Login incorrect"
  messages when "log_reject = no".
* Fix rpmbuild for Centos > 6.  Patch from Matthew Newton.
* Run Post-Proxy-Type Fail... when all home servers are down.
* Note that rlm_replicate can only use UDP, and not TCP or TLS.
* DHCP pool lookup is now keyed by Client Identifier (Option 61) when
  supplied by client, otherwise the hardware address is used. Compliant
  with RFC 2132. This change will not affect existing systems on upgrade,
  but new installations will use the new behavior.
  Patch from Terry Burton.
* Fix minor spelling mistakes in man pages.  Patch from
  Alexander Scheel.
* Don't print invalid tags in rlm_cache, among other places.
* Do home_server failover immediately when an initial TCP / Radsec
  connection fails.
* Port EAP-PWD constant time fixes from "master" branch.  The issue
  was verified by Mohamed Sabt, and a patch supplied by
  Daniel De Almeida Braga.
* Clear error on SQLITE_BUSY to prevent memory leak in corner cases.
  Patch from Nick Porter.
* Properly add SQL clients to virtual servers.
* Update documentation for cert generation.  Patch from Alexander Scheel.
* Use better API when decoding DHCP packets, to avoid unnecessary work.
  This improves performance noticeably.
* Parse locale-dependent dates.
* Strip out "-frecord-gcc-switches" from rlm_python3 configure build.
* Fix radiusd.conf ENV LD_PRELOAD function.
* Update the "sql" module so that it uses fewer handles for group selection,
  which means that it is less likely to complain that the
  connection pool is exhausted.
* Update the "sql" module to return "ok" when no rows have been updated
  for accounting on/off.
* Make the "date" module handle UTC more consistently.
* Check for, and complain about, inconsistent use of tls_min_version
  versus disable_tlsv1
* Fix "read client from SQL" code so that it properly ties clients
  to a virtual server.  Also document the behavior.
* Update / correct data types in dictionary.wimax
* Fix edge case in rlm_rest post decoder which could lead to the value of
  a post attribute being lost in the case where the output buffer was completely
  full after writing an attribute value, and more attributes needed to be encoded.
  Reported by Adrian Smith.
* Fix leak with unknown attributes in detail reader.
* Fix parenting issues in rlm_yubikey.
* Update Mongo examples to be correct.

Notices
* CentOS 6, Debian 8 (Jessie) and Ubuntu 14 (Trusty) are EOL and no
  longer supported. Docker files have been removed.


To generate a diff of this commit:
cvs rdiff -u -r1.110 -r1.111 pkgsrc/net/freeradius/Makefile
cvs rdiff -u -r1.8 -r1.9 pkgsrc/net/freeradius/Makefile.common
cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/freeradius/PLIST
cvs rdiff -u -r1.41 -r1.42 pkgsrc/net/freeradius/distinfo
cvs rdiff -u -r1.14 -r1.15 pkgsrc/net/freeradius-freetds/Makefile
cvs rdiff -u -r1.9 -r1.10 pkgsrc/net/freeradius-perl/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/net/freeradius-rest/Makefile
cvs rdiff -u -r1.15 -r1.16 pkgsrc/net/freeradius-sqlite3/Makefile
cvs rdiff -u -r1.1 -r0 pkgsrc/net/freeradius/patches/patch-main_command.c
cvs rdiff -u -r1.2 -r0 pkgsrc/net/freeradius/patches/patch-main_util.c
cvs rdiff -u -r0 -r1.1 pkgsrc/net/freeradius/patches/patch-src_main_command.c \
    pkgsrc/net/freeradius/patches/patch-src_main_util.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/freeradius/Makefile
diff -u pkgsrc/net/freeradius/Makefile:1.110 pkgsrc/net/freeradius/Makefile:1.111
--- pkgsrc/net/freeradius/Makefile:1.110        Mon May 24 19:53:17 2021
+++ pkgsrc/net/freeradius/Makefile      Fri Jun 25 11:42:48 2021
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.110 2021/05/24 19:53:17 wiz Exp $
+# $NetBSD: Makefile,v 1.111 2021/06/25 11:42:48 adam Exp $
 
 .include "Makefile.common"
 
 PKGNAME=       ${DISTNAME:S/-server//}
-PKGREVISION=   3
 COMMENT=       Free RADIUS server implementation
 
 BUILD_DEFS+=           VARBASE
@@ -53,153 +52,9 @@ SUBST_VARS.secconf= RADIUS_USER RADIUS_G
 FILES_SUBST+=          RADIUS_USER=${RADIUS_USER} RADIUS_GROUP=${RADIUS_GROUP}
 MESSAGE_SUBST+=                BOOTSTRAP=${PKG_SYSCONFDIR}/certs/bootstrap
 
-EGDIR=                 ${PREFIX}/share/examples/freeradius
+EGDIR=         ${PREFIX}/share/examples/freeradius
 
-EGFILES=               certs/ca.cnf certs/client.cnf certs/inner-server.cnf \
-                       certs/Makefile certs/README certs/server.cnf \
-                       certs/xpextensions \
-                       clients.conf dictionary experimental.conf \
-                       mods-available/abfab_psk_sql mods-available/always \
-                       mods-available/attr_filter mods-available/cache \
-                       mods-available/cache_eap mods-available/chap \
-                       mods-available/couchbase mods-available/counter \
-                       mods-available/cui mods-available/date \
-                       mods-available/detail mods-available/detail.example.com \
-                       mods-available/detail.log mods-available/dhcp \
-                       mods-available/dhcp_sqlippool mods-available/digest \
-                       mods-available/dynamic_clients mods-available/eap \
-                       mods-available/echo mods-available/etc_group \
-                       mods-available/exec mods-available/expiration \
-                       mods-available/expr mods-available/files \
-                       mods-available/idn mods-available/inner-eap \
-                       mods-available/ippool mods-available/krb5 \
-                       mods-available/ldap mods-available/linelog \
-                       mods-available/logintime mods-available/mac2ip \
-                       mods-available/mac2vlan mods-available/mschap \
-                       mods-available/ntlm_auth mods-available/opendirectory \
-                       mods-available/otp mods-available/pam \
-                       mods-available/pap mods-available/passwd \
-                       mods-available/perl mods-available/preprocess \
-                       mods-available/python mods-available/radutmp \
-                       mods-available/README.rst mods-available/realm \
-                       mods-available/redis mods-available/rediswho \
-                       mods-available/replicate mods-available/rest \
-                       mods-available/smbpasswd mods-available/smsotp \
-                       mods-available/soh mods-available/sometimes \
-                       mods-available/sql mods-available/sqlcounter \
-                       mods-available/sqlippool mods-available/sradutmp \
-                       mods-available/unbound mods-available/unix \
-                       mods-available/unpack mods-available/utf8 \
-                       mods-available/wimax mods-available/yubikey \
-                       mods-config/attr_filter/access_challenge \
-                       mods-config/attr_filter/access_reject \
-                       mods-config/attr_filter/accounting_response \
-                       mods-config/attr_filter/post-proxy \
-                       mods-config/attr_filter/pre-proxy \
-                       mods-config/files/accounting \
-                       mods-config/files/authorize \
-                       mods-config/files/pre-proxy \
-                       mods-config/perl/example.pl \
-                       mods-config/preprocess/hints \
-                       mods-config/preprocess/huntgroups \
-                       mods-config/README.rst \
-                       mods-config/sql/counter/mysql/dailycounter.conf \
-                       mods-config/sql/counter/mysql/expire_on_login.conf \
-                       mods-config/sql/counter/mysql/monthlycounter.conf \
-                       mods-config/sql/counter/mysql/noresetcounter.conf \
-                       mods-config/sql/counter/postgresql/dailycounter.conf \
-                       mods-config/sql/counter/postgresql/expire_on_login.conf \
-                       mods-config/sql/counter/postgresql/monthlycounter.conf \
-                       mods-config/sql/counter/postgresql/noresetcounter.conf \
-                       mods-config/sql/counter/sqlite/dailycounter.conf \
-                       mods-config/sql/counter/sqlite/expire_on_login.conf \
-                       mods-config/sql/counter/sqlite/monthlycounter.conf \
-                       mods-config/sql/counter/sqlite/noresetcounter.conf \
-                       mods-config/sql/cui/mysql/queries.conf \
-                       mods-config/sql/cui/mysql/schema.sql \
-                       mods-config/sql/cui/postgresql/queries.conf \
-                       mods-config/sql/cui/postgresql/schema.sql \
-                       mods-config/sql/cui/sqlite/queries.conf \
-                       mods-config/sql/cui/sqlite/schema.sql \
-                       mods-config/sql/ippool/mysql/queries.conf \
-                       mods-config/sql/ippool/mysql/schema.sql \
-                       mods-config/sql/ippool/oracle/queries.conf \
-                       mods-config/sql/ippool/oracle/schema.sql \
-                       mods-config/sql/ippool/postgresql/queries.conf \
-                       mods-config/sql/ippool/postgresql/schema.sql \
-                       mods-config/sql/ippool/sqlite/queries.conf \
-                       mods-config/sql/ippool/sqlite/schema.sql \
-                       mods-config/sql/ippool-dhcp/mysql/queries.conf \
-                       mods-config/sql/ippool-dhcp/mysql/schema.sql \
-                       mods-config/sql/ippool-dhcp/oracle/queries.conf \
-                       mods-config/sql/ippool-dhcp/oracle/schema.sql \
-                       mods-config/sql/ippool-dhcp/sqlite/queries.conf \
-                       mods-config/sql/ippool-dhcp/sqlite/schema.sql \
-                       mods-config/sql/main/mssql/queries.conf \
-                       mods-config/sql/main/mssql/schema.sql \
-                       mods-config/sql/main/mysql/extras/wimax/queries.conf \
-                       mods-config/sql/main/mysql/extras/wimax/schema.sql \
-                       mods-config/sql/main/mysql/queries.conf \
-                       mods-config/sql/main/mysql/schema.sql \
-                       mods-config/sql/main/mysql/setup.sql \
-                       mods-config/sql/main/ndb/README \
-                       mods-config/sql/main/ndb/schema.sql \
-                       mods-config/sql/main/ndb/setup.sql \
-                       mods-config/sql/main/oracle/queries.conf \
-                       mods-config/sql/main/oracle/schema.sql \
-                       mods-config/sql/main/postgresql/extras/cisco_h323_db_schema.sql \
-                       mods-config/sql/main/postgresql/extras/voip-postpaid.conf \
-                       mods-config/sql/main/postgresql/queries.conf \
-                       mods-config/sql/main/postgresql/schema.sql \
-                       mods-config/sql/main/postgresql/setup.sql \
-                       mods-config/sql/main/sqlite/queries.conf \
-                       mods-config/sql/main/sqlite/schema.sql \
-                       mods-config/unbound/default.conf \
-                       panic.gdb policy.d/abfab-tr policy.d/accounting \
-                       policy.d/canonicalization policy.d/control policy.d/cui \
-                       policy.d/debug policy.d/dhcp policy.d/eap policy.d/filter \
-                       policy.d/moonshot-targeted-ids policy.d/operator-name \
-                       proxy.conf radiusd.conf README.rst \
-                       sites-available/abfab-tls sites-available/abfab-tr-idp \
-                       sites-available/buffered-sql sites-available/challenge \
-                       sites-available/channel_bindings sites-available/check-eap-tls \
-                       sites-available/coa sites-available/control-socket \
-                       sites-available/copy-acct-to-home-server \
-                       sites-available/decoupled-accounting \
-                       sites-available/default \
-                       sites-available/dhcp \
-                       sites-available/dhcp.relay \
-                       sites-available/dynamic-clients \
-                       sites-available/example \
-                       sites-available/inner-tunnel \
-                       sites-available/originate-coa \
-                       sites-available/proxy-inner-tunnel \
-                       sites-available/README \
-                       sites-available/robust-proxy-accounting \
-                       sites-available/soh \
-                       sites-available/status \
-                       sites-available/tls \
-                       sites-available/virtual.example.com \
-                       users templates.conf trigger.conf
-
-EGDIRS=                        certs mods-available mods-config mods-config/attr_filter mods-config/files \
-                       mods-config/perl mods-config/preprocess mods-config/sql mods-config/sql/counter \
-                       mods-config/sql/counter/mysql mods-config/sql/counter/postgresql \
-                       mods-config/sql/counter/sqlite mods-config/sql/cui mods-config/sql/cui/mysql \
-                       mods-config/sql/cui/postgresql mods-config/sql/cui/sqlite mods-config/sql/ippool \
-                       mods-config/sql/ippool-dhcp mods-config/sql/ippool-dhcp/mysql \
-                       mods-config/sql/ippool-dhcp/oracle mods-config/sql/ippool-dhcp/sqlite \
-                       mods-config/sql/ippool/mysql mods-config/sql/ippool/oracle \
-                       mods-config/sql/ippool/postgresql mods-config/sql/ippool/sqlite \
-                       mods-config/sql/main mods-config/sql/main/mssql mods-config/sql/main/mysql \
-                       mods-config/sql/main/mysql/extras mods-config/sql/main/mysql/extras/wimax \
-                       mods-config/sql/main/ndb mods-config/sql/main/oracle \
-                       mods-config/sql/main/postgresql mods-config/sql/main/postgresql/extras \
-                       mods-config/sql/main/sqlite mods-config/unbound mods-enabled \
-                       policy.d sites-available sites-enabled
-
-REPLACE_PERL+=         scripts/sql/radsqlrelay \
-                       src/modules/rlm_counter/rad_counter
+.include "config.mk"
 
 .for f in ${EGFILES}
 CONF_FILES_PERMS+=     ${EGDIR}/${f} ${PKG_SYSCONFDIR}/${f} \

Index: pkgsrc/net/freeradius/Makefile.common
diff -u pkgsrc/net/freeradius/Makefile.common:1.8 pkgsrc/net/freeradius/Makefile.common:1.9
--- pkgsrc/net/freeradius/Makefile.common:1.8   Wed Jan 13 09:06:15 2021
+++ pkgsrc/net/freeradius/Makefile.common       Fri Jun 25 11:42:48 2021
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile.common,v 1.8 2021/01/13 09:06:15 nia Exp $
+# $NetBSD: Makefile.common,v 1.9 2021/06/25 11:42:48 adam Exp $
 # used by net/freeradius/Makefile.module
 
-DISTNAME=      freeradius-server-3.0.21
+DISTNAME=      freeradius-server-3.0.23
 CATEGORIES=    net
 MASTER_SITES=  ftp://ftp.freeradius.org/pub/freeradius/
 EXTRACT_SUFX=  .tar.bz2

Index: pkgsrc/net/freeradius/PLIST
diff -u pkgsrc/net/freeradius/PLIST:1.34 pkgsrc/net/freeradius/PLIST:1.35
--- pkgsrc/net/freeradius/PLIST:1.34    Wed Apr  8 12:25:51 2020
+++ pkgsrc/net/freeradius/PLIST Fri Jun 25 11:42:48 2021
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.34 2020/04/08 12:25:51 adam Exp $
+@comment $NetBSD: PLIST,v 1.35 2021/06/25 11:42:48 adam Exp $
 bin/dhcpclient
 bin/map_unit
 bin/rad_counter
@@ -13,6 +13,7 @@ bin/radtest
 bin/radwho
 bin/radzap
 bin/rlm_ippool_tool
+bin/rlm_sqlippool_tool
 bin/smbencrypt
 include/freeradius/attributes.h
 include/freeradius/autoconf.h
@@ -105,7 +106,6 @@ lib/rlm_dynamic_clients.${SOEXT}
 lib/rlm_eap.${SOEXT}
 lib/rlm_eap_fast.${SOEXT}
 lib/rlm_eap_gtc.${SOEXT}
-lib/rlm_eap_leap.${SOEXT}
 lib/rlm_eap_md5.${SOEXT}
 lib/rlm_eap_mschapv2.${SOEXT}
 lib/rlm_eap_peap.${SOEXT}
@@ -132,10 +132,12 @@ lib/rlm_replicate.${SOEXT}
 lib/rlm_soh.${SOEXT}
 lib/rlm_sometimes.${SOEXT}
 lib/rlm_sql.${SOEXT}
+lib/rlm_sql_map.${SOEXT}
 lib/rlm_sql_null.${SOEXT}
 lib/rlm_sqlcounter.${SOEXT}
 lib/rlm_sqlippool.${SOEXT}
 lib/rlm_test.${SOEXT}
+lib/rlm_totp.${SOEXT}
 lib/rlm_unix.${SOEXT}
 lib/rlm_unpack.${SOEXT}
 lib/rlm_utf8.${SOEXT}
@@ -179,6 +181,7 @@ man/man8/radrelay.8
 man/man8/radsniff.8
 man/man8/radsqlrelay.8
 man/man8/rlm_ippool_tool.8
+man/man8/rlm_sqlippool_tool.8
 sbin/checkrad
 sbin/raddebug
 sbin/radiusd
@@ -187,12 +190,89 @@ sbin/rc.radiusd
 share/doc/freeradius/ChangeLog
 share/doc/freeradius/Makefile.sphinx
 share/doc/freeradius/README
+share/doc/freeradius/antora/antora.yml
+share/doc/freeradius/antora/modules/ROOT/assets/images/favicon.png
+share/doc/freeradius/antora/modules/ROOT/assets/images/favicon.svg
+share/doc/freeradius/antora/modules/ROOT/assets/images/networkradius.png
+share/doc/freeradius/antora/modules/ROOT/nav.adoc
+share/doc/freeradius/antora/modules/ROOT/pages/directories.adoc
+share/doc/freeradius/antora/modules/ROOT/pages/index.adoc
+share/doc/freeradius/antora/modules/howto/nav.adoc
+share/doc/freeradius/antora/modules/howto/pages/index.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/enable.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/index.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy_common_options.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy_device_options.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy_ippool_access.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy_ippool_creation.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy_network_options.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/policy_subnet_options.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/prepare.adoc
+share/doc/freeradius/antora/modules/howto/pages/protocols/dhcp/test.adoc
+share/doc/freeradius/antora/modules/installation/nav.adoc
+share/doc/freeradius/antora/modules/installation/pages/dependencies.adoc
+share/doc/freeradius/antora/modules/installation/pages/index.adoc
+share/doc/freeradius/antora/modules/installation/pages/packages.adoc
+share/doc/freeradius/antora/modules/installation/pages/source.adoc
+share/doc/freeradius/antora/modules/installation/pages/upgrade.adoc
+share/doc/freeradius/antora/modules/unlang/nav.adoc
+share/doc/freeradius/antora/modules/unlang/pages/attr.adoc
+share/doc/freeradius/antora/modules/unlang/pages/break.adoc
+share/doc/freeradius/antora/modules/unlang/pages/case.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/and.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/cmp.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/eq.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/index.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/not.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/operands.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/or.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/para.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/regex.adoc
+share/doc/freeradius/antora/modules/unlang/pages/condition/return_codes.adoc
+share/doc/freeradius/antora/modules/unlang/pages/default.adoc
+share/doc/freeradius/antora/modules/unlang/pages/else.adoc
+share/doc/freeradius/antora/modules/unlang/pages/elsif.adoc
+share/doc/freeradius/antora/modules/unlang/pages/foreach.adoc
+share/doc/freeradius/antora/modules/unlang/pages/group.adoc
+share/doc/freeradius/antora/modules/unlang/pages/if.adoc
+share/doc/freeradius/antora/modules/unlang/pages/index.adoc
+share/doc/freeradius/antora/modules/unlang/pages/keywords.adoc
+share/doc/freeradius/antora/modules/unlang/pages/list.adoc
+share/doc/freeradius/antora/modules/unlang/pages/load-balance.adoc
+share/doc/freeradius/antora/modules/unlang/pages/module.adoc
+share/doc/freeradius/antora/modules/unlang/pages/module_builtin.adoc
+share/doc/freeradius/antora/modules/unlang/pages/module_method.adoc
+share/doc/freeradius/antora/modules/unlang/pages/redundant-load-balance.adoc
+share/doc/freeradius/antora/modules/unlang/pages/redundant.adoc
+share/doc/freeradius/antora/modules/unlang/pages/return.adoc
+share/doc/freeradius/antora/modules/unlang/pages/return_codes.adoc
+share/doc/freeradius/antora/modules/unlang/pages/switch.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/all_types.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/double.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/index.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/ip.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/numb.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/string/backticks.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/string/double.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/string/escaping.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/string/single.adoc
+share/doc/freeradius/antora/modules/unlang/pages/type/string/unquoted.adoc
+share/doc/freeradius/antora/modules/unlang/pages/update.adoc
+share/doc/freeradius/antora/modules/unlang/pages/xlat/alternation.adoc
+share/doc/freeradius/antora/modules/unlang/pages/xlat/attribute.adoc
+share/doc/freeradius/antora/modules/unlang/pages/xlat/builtin.adoc
+share/doc/freeradius/antora/modules/unlang/pages/xlat/character.adoc
+share/doc/freeradius/antora/modules/unlang/pages/xlat/index.adoc
+share/doc/freeradius/antora/modules/unlang/pages/xlat/module.adoc
+share/doc/freeradius/antora/modules/unlang/partials/rcode_table.adoc
 share/doc/freeradius/bugs
 share/doc/freeradius/concepts/aaa.rst
 share/doc/freeradius/concepts/proxy.rst
 share/doc/freeradius/configuration/acct_type.rst
 share/doc/freeradius/configuration/autz_type.rst
 share/doc/freeradius/configuration/configurable_failover.rst
+share/doc/freeradius/configuration/dynamic_home_servers.md
 share/doc/freeradius/configuration/load_balance.rst
 share/doc/freeradius/configuration/post_auth_type
 share/doc/freeradius/configuration/session_type
@@ -327,7 +407,7 @@ share/doc/freeradius/vendor/cisco.rst
 share/doc/freeradius/vendor/proxim
 share/examples/freeradius/README.rst
 share/examples/freeradius/certs/Makefile
-share/examples/freeradius/certs/README
+share/examples/freeradius/certs/README.md
 share/examples/freeradius/certs/bootstrap
 share/examples/freeradius/certs/ca.cnf
 share/examples/freeradius/certs/client.cnf
@@ -354,6 +434,9 @@ share/examples/freeradius/mods-available
 share/examples/freeradius/mods-available/detail.example.com
 share/examples/freeradius/mods-available/detail.log
 share/examples/freeradius/mods-available/dhcp
+share/examples/freeradius/mods-available/dhcp_files
+share/examples/freeradius/mods-available/dhcp_passwd
+share/examples/freeradius/mods-available/dhcp_sql
 share/examples/freeradius/mods-available/dhcp_sqlippool
 share/examples/freeradius/mods-available/digest
 share/examples/freeradius/mods-available/dynamic_clients
@@ -396,9 +479,11 @@ share/examples/freeradius/mods-available
 share/examples/freeradius/mods-available/soh
 share/examples/freeradius/mods-available/sometimes
 share/examples/freeradius/mods-available/sql
+share/examples/freeradius/mods-available/sql_map
 share/examples/freeradius/mods-available/sqlcounter
 share/examples/freeradius/mods-available/sqlippool
 share/examples/freeradius/mods-available/sradutmp
+share/examples/freeradius/mods-available/totp
 share/examples/freeradius/mods-available/unbound
 share/examples/freeradius/mods-available/unix
 share/examples/freeradius/mods-available/unpack
@@ -409,10 +494,12 @@ share/examples/freeradius/mods-config/RE
 share/examples/freeradius/mods-config/attr_filter/access_challenge
 share/examples/freeradius/mods-config/attr_filter/access_reject
 share/examples/freeradius/mods-config/attr_filter/accounting_response
+share/examples/freeradius/mods-config/attr_filter/coa
 share/examples/freeradius/mods-config/attr_filter/post-proxy
 share/examples/freeradius/mods-config/attr_filter/pre-proxy
 share/examples/freeradius/mods-config/files/accounting
 share/examples/freeradius/mods-config/files/authorize
+share/examples/freeradius/mods-config/files/dhcp
 share/examples/freeradius/mods-config/files/pre-proxy
 share/examples/freeradius/mods-config/perl/example.pl
 share/examples/freeradius/mods-config/preprocess/hints
@@ -435,16 +522,38 @@ share/examples/freeradius/mods-config/sq
 share/examples/freeradius/mods-config/sql/cui/postgresql/schema.sql
 share/examples/freeradius/mods-config/sql/cui/sqlite/queries.conf
 share/examples/freeradius/mods-config/sql/cui/sqlite/schema.sql
+share/examples/freeradius/mods-config/sql/dhcp/mssql/queries.conf
+share/examples/freeradius/mods-config/sql/dhcp/mssql/schema.sql
+share/examples/freeradius/mods-config/sql/dhcp/mysql/queries.conf
+share/examples/freeradius/mods-config/sql/dhcp/mysql/schema.sql
+share/examples/freeradius/mods-config/sql/dhcp/mysql/setup.sql
+share/examples/freeradius/mods-config/sql/dhcp/oracle/queries.conf
+share/examples/freeradius/mods-config/sql/dhcp/oracle/schema.sql
+share/examples/freeradius/mods-config/sql/dhcp/postgresql/queries.conf
+share/examples/freeradius/mods-config/sql/dhcp/postgresql/schema.sql
+share/examples/freeradius/mods-config/sql/dhcp/postgresql/setup.sql
+share/examples/freeradius/mods-config/sql/dhcp/sqlite/queries.conf
+share/examples/freeradius/mods-config/sql/dhcp/sqlite/schema.sql
+share/examples/freeradius/mods-config/sql/ippool-dhcp/mssql/procedure.sql
+share/examples/freeradius/mods-config/sql/ippool-dhcp/mssql/queries.conf
+share/examples/freeradius/mods-config/sql/ippool-dhcp/mssql/schema.sql
+share/examples/freeradius/mods-config/sql/ippool-dhcp/mysql/procedure-no-skip-locked.sql
+share/examples/freeradius/mods-config/sql/ippool-dhcp/mysql/procedure.sql
 share/examples/freeradius/mods-config/sql/ippool-dhcp/mysql/queries.conf
 share/examples/freeradius/mods-config/sql/ippool-dhcp/mysql/schema.sql
+share/examples/freeradius/mods-config/sql/ippool-dhcp/oracle/procedure.sql
 share/examples/freeradius/mods-config/sql/ippool-dhcp/oracle/queries.conf
 share/examples/freeradius/mods-config/sql/ippool-dhcp/oracle/schema.sql
+share/examples/freeradius/mods-config/sql/ippool-dhcp/postgresql/procedure.sql
+share/examples/freeradius/mods-config/sql/ippool-dhcp/postgresql/queries.conf
+share/examples/freeradius/mods-config/sql/ippool-dhcp/postgresql/schema.sql
 share/examples/freeradius/mods-config/sql/ippool-dhcp/sqlite/queries.conf
 share/examples/freeradius/mods-config/sql/ippool-dhcp/sqlite/schema.sql
 share/examples/freeradius/mods-config/sql/ippool/mongo/queries.conf
 share/examples/freeradius/mods-config/sql/ippool/mssql/procedure.sql
 share/examples/freeradius/mods-config/sql/ippool/mssql/queries.conf
 share/examples/freeradius/mods-config/sql/ippool/mssql/schema.sql
+share/examples/freeradius/mods-config/sql/ippool/mysql/procedure-no-skip-locked.sql
 share/examples/freeradius/mods-config/sql/ippool/mysql/procedure.sql
 share/examples/freeradius/mods-config/sql/ippool/mysql/queries.conf
 share/examples/freeradius/mods-config/sql/ippool/mysql/schema.sql
@@ -516,6 +625,7 @@ share/examples/freeradius/mods-enabled/r
 share/examples/freeradius/mods-enabled/replicate
 share/examples/freeradius/mods-enabled/soh
 share/examples/freeradius/mods-enabled/sradutmp
+share/examples/freeradius/mods-enabled/totp
 share/examples/freeradius/mods-enabled/unix
 share/examples/freeradius/mods-enabled/unpack
 share/examples/freeradius/mods-enabled/utf8
@@ -554,10 +664,12 @@ share/examples/freeradius/sites-availabl
 share/examples/freeradius/sites-available/inner-tunnel
 share/examples/freeradius/sites-available/originate-coa
 share/examples/freeradius/sites-available/proxy-inner-tunnel
+share/examples/freeradius/sites-available/resource-check
 share/examples/freeradius/sites-available/robust-proxy-accounting
 share/examples/freeradius/sites-available/soh
 share/examples/freeradius/sites-available/status
 share/examples/freeradius/sites-available/tls
+share/examples/freeradius/sites-available/totp
 share/examples/freeradius/sites-available/virtual.example.com
 share/examples/freeradius/sites-available/vmps
 share/examples/freeradius/sites-enabled/default
@@ -608,6 +720,7 @@ share/freeradius/dictionary.bt
 share/freeradius/dictionary.cablelabs
 share/freeradius/dictionary.cabletron
 share/freeradius/dictionary.camiant
+share/freeradius/dictionary.centec
 share/freeradius/dictionary.checkpoint
 share/freeradius/dictionary.chillispot
 share/freeradius/dictionary.cisco
@@ -763,6 +876,7 @@ share/freeradius/dictionary.symbol
 share/freeradius/dictionary.t_systems_nova
 share/freeradius/dictionary.telebit
 share/freeradius/dictionary.telkom
+share/freeradius/dictionary.telrad
 share/freeradius/dictionary.terena
 share/freeradius/dictionary.trapeze
 share/freeradius/dictionary.travelping

Index: pkgsrc/net/freeradius/distinfo
diff -u pkgsrc/net/freeradius/distinfo:1.41 pkgsrc/net/freeradius/distinfo:1.42
--- pkgsrc/net/freeradius/distinfo:1.41 Thu Apr 16 15:49:30 2020
+++ pkgsrc/net/freeradius/distinfo      Fri Jun 25 11:42:48 2021
@@ -1,12 +1,12 @@
-$NetBSD: distinfo,v 1.41 2020/04/16 15:49:30 jperkin Exp $
+$NetBSD: distinfo,v 1.42 2021/06/25 11:42:48 adam Exp $
 
-SHA1 (freeradius-server-3.0.21.tar.bz2) = 3d90d63bf1452794cf9d0b04147745a254872c3f
-RMD160 (freeradius-server-3.0.21.tar.bz2) = 04a038b701f19d9c598e826a795a0cdaacd3768b
-SHA512 (freeradius-server-3.0.21.tar.bz2) = 18cc142caad2143e30bc54242e3824b5f659f2f6e8f3401c71ce3b9063de0bd8d206d84822c4ad1d99457dfd7121333d4accd0c8340fcfc6b33b8fbe24a31729
-Size (freeradius-server-3.0.21.tar.bz2) = 3184588 bytes
+SHA1 (freeradius-server-3.0.23.tar.bz2) = 292355d799cc10c4e20c315a4a90598d21e0d563
+RMD160 (freeradius-server-3.0.23.tar.bz2) = 93824fed9c47a8367365120edf489a4f580b8c11
+SHA512 (freeradius-server-3.0.23.tar.bz2) = 2369378a448035706fac77b4eddd28b950fbb587edefb5be6cf579043435cdec911b4a5326cfeabd05c28bb964e53027bcd1cd8a6a56013836f041a10326ef1a
+Size (freeradius-server-3.0.23.tar.bz2) = 3381917 bytes
 SHA1 (patch-ai) = e32ffd24b93e2cef2e72ef9a8ea59d49e1571dc0
 SHA1 (patch-configure.ac) = ffec1f851d23f560797c12eba5092f2940e4d662
-SHA1 (patch-main_command.c) = 1c79b29eb13df341906c710c8dd41860a27473dd
-SHA1 (patch-main_util.c) = e8814255c32c8469e81d62f2c7092e8d42744e85
 SHA1 (patch-raddb_radiusd.conf.in) = 353cbed35013777bf055a77cc610b50a637ae7b7
 SHA1 (patch-src_lib_udpfromto.c) = 2457f0a7223b1f3ef86d0af020290b26380e6319
+SHA1 (patch-src_main_command.c) = 1c79b29eb13df341906c710c8dd41860a27473dd
+SHA1 (patch-src_main_util.c) = e8814255c32c8469e81d62f2c7092e8d42744e85

Index: pkgsrc/net/freeradius-freetds/Makefile
diff -u pkgsrc/net/freeradius-freetds/Makefile:1.14 pkgsrc/net/freeradius-freetds/Makefile:1.15
--- pkgsrc/net/freeradius-freetds/Makefile:1.14 Wed Apr 21 13:25:08 2021
+++ pkgsrc/net/freeradius-freetds/Makefile      Fri Jun 25 11:42:49 2021
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.14 2021/04/21 13:25:08 adam Exp $
+# $NetBSD: Makefile,v 1.15 2021/06/25 11:42:49 adam Exp $
 
-PKGREVISION= 2
 .include "../../net/freeradius/Makefile.module"
 
 PKGNAME=       ${DISTNAME:S/-server/-freetds/}

Index: pkgsrc/net/freeradius-perl/Makefile
diff -u pkgsrc/net/freeradius-perl/Makefile:1.9 pkgsrc/net/freeradius-perl/Makefile:1.10
--- pkgsrc/net/freeradius-perl/Makefile:1.9     Mon May 24 19:53:17 2021
+++ pkgsrc/net/freeradius-perl/Makefile Fri Jun 25 11:42:49 2021
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.9 2021/05/24 19:53:17 wiz Exp $
+# $NetBSD: Makefile,v 1.10 2021/06/25 11:42:49 adam Exp $
 
-PKGREVISION= 2
 .include "../../net/freeradius/Makefile.module"
 
 PKGNAME=       ${DISTNAME:S/-server/-perl/}

Index: pkgsrc/net/freeradius-rest/Makefile
diff -u pkgsrc/net/freeradius-rest/Makefile:1.20 pkgsrc/net/freeradius-rest/Makefile:1.21
--- pkgsrc/net/freeradius-rest/Makefile:1.20    Wed Apr 21 13:25:08 2021
+++ pkgsrc/net/freeradius-rest/Makefile Fri Jun 25 11:42:49 2021
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.20 2021/04/21 13:25:08 adam Exp $
+# $NetBSD: Makefile,v 1.21 2021/06/25 11:42:49 adam Exp $
 
-PKGREVISION= 4
 .include "../../net/freeradius/Makefile.module"
 
 PKGNAME=       ${DISTNAME:S/-server/-rest/}

Index: pkgsrc/net/freeradius-sqlite3/Makefile
diff -u pkgsrc/net/freeradius-sqlite3/Makefile:1.15 pkgsrc/net/freeradius-sqlite3/Makefile:1.16
--- pkgsrc/net/freeradius-sqlite3/Makefile:1.15 Wed Apr 21 11:42:24 2021
+++ pkgsrc/net/freeradius-sqlite3/Makefile      Fri Jun 25 11:42:49 2021
@@ -1,6 +1,5 @@
-# $NetBSD: Makefile,v 1.15 2021/04/21 11:42:24 adam Exp $
+# $NetBSD: Makefile,v 1.16 2021/06/25 11:42:49 adam Exp $
 
-PKGREVISION= 4
 .include "../../net/freeradius/Makefile.module"
 
 PKGNAME=       ${DISTNAME:S/-server/-sqlite3/}

Added files:

Index: pkgsrc/net/freeradius/patches/patch-src_main_command.c
diff -u /dev/null pkgsrc/net/freeradius/patches/patch-src_main_command.c:1.1
--- /dev/null   Fri Jun 25 11:42:49 2021
+++ pkgsrc/net/freeradius/patches/patch-src_main_command.c      Fri Jun 25 11:42:48 2021
@@ -0,0 +1,23 @@
+$NetBSD: patch-src_main_command.c,v 1.1 2021/06/25 11:42:48 adam Exp $
+
+O_DIRECTORY is a Linuxism and O_NOFOLLOW is a BSDism ported to Linux
+
+--- src/main/command.c.orig    2016-09-29 15:19:48.000000000 +0000
++++ src/main/command.c
+@@ -21,6 +21,16 @@
+  * Copyright 2008 Alan DeKok <aland%deployingradius.com@localhost>
+  */
+ 
++/* 
++ * Not every implementation knows what O_DIRECTORY and O_NOFOLLOW are
++ */
++#ifndef O_DIRECTORY
++#define O_DIRECTORY 0
++#endif
++#ifndef O_NOFOLLOW
++#define O_NOFOLLOW 0
++#endif
++
+ #ifdef WITH_COMMAND_SOCKET
+ 
+ #include <freeradius-devel/parser.h>
Index: pkgsrc/net/freeradius/patches/patch-src_main_util.c
diff -u /dev/null pkgsrc/net/freeradius/patches/patch-src_main_util.c:1.1
--- /dev/null   Fri Jun 25 11:42:49 2021
+++ pkgsrc/net/freeradius/patches/patch-src_main_util.c Fri Jun 25 11:42:48 2021
@@ -0,0 +1,21 @@
+$NetBSD: patch-src_main_util.c,v 1.1 2021/06/25 11:42:48 adam Exp $
+
+O_DIRECTORY to open(2) is a Linuxism.
+
+--- src/main/util.c.orig       2016-09-29 15:19:48.000000000 +0000
++++ src/main/util.c
+@@ -31,6 +31,14 @@ RCSID("$Id: 22299f8c8d6bc98616fa025ee3da
+ #include <fcntl.h>
+ 
+ /*
++ *      Not all libc implmenetations have O_DIRECTORY to pass to
++ *      open(2)
++ */
++#ifndef O_DIRECTORY
++#define O_DIRECTORY 0
++#endif
++
++/*
+  *    The signal() function in Solaris 2.5.1 sets SA_NODEFER in
+  *    sa_flags, which causes grief if signal() is called in the
+  *    handler before the cause of the signal has been cleared.



Home | Main Index | Thread Index | Old Index