pkgsrc/net/freeradius2/options.mk

148 lines
3.4 KiB
Makefile
Raw Normal View History

Update "freeradius2" package to version 2.1.8. Changes since version 2.1.7: - Feature improvements * Print more descriptive error message for too many EAP sessions. This gives hints on what to do when "failed to store handler" * Commands received from radmin are now printed on stdout when in debugging mode. * Allow accounting packets to be written to a detail file, even if they were read from a different detail file. * Added OpenSSL license exception (src/LICENSE.openssl) - Bug fixes * DHCP sockets can now set the broadcast flag before binding to a socket. You need to set "broadcast = yes" in the DHCP listener. * Be more restrictive on string parsing in the config files * Fix password length in scripts/create-users.pl * Be more flexible about parsing the detail file. This allows it to read files where the attributes have been edited. * Ensure that requests read from the detail file are cleaned up (i.e. don't leak) if they are proxied without a response. * Write the PID file after opening sockets, not before (closes bug #29) * Proxying large numbers of packets no longer gives error "unable to open proxy socket". * Avoid mutex locks in libc after fork * Retry packet from detail file if there was no response. * Allow old-style dictionary formats, where the vendor name is the last field in an ATTRIBUTE definition. * Removed all recursive use of mutexes. Some systems just don't support this. * Allow !* to work as documented. * make templates work (see templates.conf) * Enabled "allow_core_dumps" to work again * Print better errors when reading invalid dictionaries * Sign client certificates with CA, rather than server certs. * Fix potential crash in rlm_passwd when file was closed * Fixed corner cases in conditional dynamic expansion. * Use InnoDB for MySQL IP Pools, to gain transactional support * Apply patch to libltdl for CVE-2009-3736. * Fixed a few issues found by LLVM's static checker * Keep track of "bad authenticators" for accounting packets * Keep track of "dropped packets" for auth/acct packets * Synced the "debian" directory with upstream * Made "unlang" use unsigned 32-bit integers, to match the dictionaries. While here fix broken user destination directory installation as well.
2010-05-23 19:28:44 +02:00
# $NetBSD: options.mk,v 1.4 2010/05/23 17:28:44 tron Exp $
Update "freeradius2" package to version 2.1.8. Changes since version 2.1.7: - Feature improvements * Print more descriptive error message for too many EAP sessions. This gives hints on what to do when "failed to store handler" * Commands received from radmin are now printed on stdout when in debugging mode. * Allow accounting packets to be written to a detail file, even if they were read from a different detail file. * Added OpenSSL license exception (src/LICENSE.openssl) - Bug fixes * DHCP sockets can now set the broadcast flag before binding to a socket. You need to set "broadcast = yes" in the DHCP listener. * Be more restrictive on string parsing in the config files * Fix password length in scripts/create-users.pl * Be more flexible about parsing the detail file. This allows it to read files where the attributes have been edited. * Ensure that requests read from the detail file are cleaned up (i.e. don't leak) if they are proxied without a response. * Write the PID file after opening sockets, not before (closes bug #29) * Proxying large numbers of packets no longer gives error "unable to open proxy socket". * Avoid mutex locks in libc after fork * Retry packet from detail file if there was no response. * Allow old-style dictionary formats, where the vendor name is the last field in an ATTRIBUTE definition. * Removed all recursive use of mutexes. Some systems just don't support this. * Allow !* to work as documented. * make templates work (see templates.conf) * Enabled "allow_core_dumps" to work again * Print better errors when reading invalid dictionaries * Sign client certificates with CA, rather than server certs. * Fix potential crash in rlm_passwd when file was closed * Fixed corner cases in conditional dynamic expansion. * Use InnoDB for MySQL IP Pools, to gain transactional support * Apply patch to libltdl for CVE-2009-3736. * Fixed a few issues found by LLVM's static checker * Keep track of "bad authenticators" for accounting packets * Keep track of "dropped packets" for auth/acct packets * Synced the "debian" directory with upstream * Made "unlang" use unsigned 32-bit integers, to match the dictionaries. While here fix broken user destination directory installation as well.
2010-05-23 19:28:44 +02:00
PKG_OPTIONS_VAR= PKG_OPTIONS.freeradius
PKG_SUPPORTED_OPTIONS= freeradius-simul-use kerberos ldap mysql
PKG_SUPPORTED_OPTIONS+= pam perl pgsql snmp
PKG_OPTIONS_OPTIONAL_GROUPS= dbm odbc
Update "freeradius2" package to version 2.1.8. Changes since version 2.1.7: - Feature improvements * Print more descriptive error message for too many EAP sessions. This gives hints on what to do when "failed to store handler" * Commands received from radmin are now printed on stdout when in debugging mode. * Allow accounting packets to be written to a detail file, even if they were read from a different detail file. * Added OpenSSL license exception (src/LICENSE.openssl) - Bug fixes * DHCP sockets can now set the broadcast flag before binding to a socket. You need to set "broadcast = yes" in the DHCP listener. * Be more restrictive on string parsing in the config files * Fix password length in scripts/create-users.pl * Be more flexible about parsing the detail file. This allows it to read files where the attributes have been edited. * Ensure that requests read from the detail file are cleaned up (i.e. don't leak) if they are proxied without a response. * Write the PID file after opening sockets, not before (closes bug #29) * Proxying large numbers of packets no longer gives error "unable to open proxy socket". * Avoid mutex locks in libc after fork * Retry packet from detail file if there was no response. * Allow old-style dictionary formats, where the vendor name is the last field in an ATTRIBUTE definition. * Removed all recursive use of mutexes. Some systems just don't support this. * Allow !* to work as documented. * make templates work (see templates.conf) * Enabled "allow_core_dumps" to work again * Print better errors when reading invalid dictionaries * Sign client certificates with CA, rather than server certs. * Fix potential crash in rlm_passwd when file was closed * Fixed corner cases in conditional dynamic expansion. * Use InnoDB for MySQL IP Pools, to gain transactional support * Apply patch to libltdl for CVE-2009-3736. * Fixed a few issues found by LLVM's static checker * Keep track of "bad authenticators" for accounting packets * Keep track of "dropped packets" for auth/acct packets * Synced the "debian" directory with upstream * Made "unlang" use unsigned 32-bit integers, to match the dictionaries. While here fix broken user destination directory installation as well.
2010-05-23 19:28:44 +02:00
PKG_OPTIONS_GROUP.dbm= bdb gdbm
PKG_OPTIONS_GROUP.odbc= iodbc unixodbc
PKG_SUGGESTED_OPTIONS= freeradius-simul-use gdbm
.include "../../mk/bsd.options.mk"
PLIST_VARS+= dbm gdbm iodbc ldap kerberos mysql pam pgsql unixodbc perl
###
### GDBM or Berkeley DB 1.x support
###
.if !empty(PKG_OPTIONS:Mgdbm)
. include "../../databases/gdbm/buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_dbm
PLIST.dbm= yes
PLIST.gdbm= yes
.elif !empty(PKG_OPTIONS:Mbdb) && exists(/usr/include/ndbm.h)
BDB_ACCEPTED= db1
. include "../../mk/bdb.buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_dbm
PLIST.dbm= yes
.else
CONFIGURE_ARGS+= --without-rlm_dbm
.endif
###
### PERL support
###
.if !empty(PKG_OPTIONS:Mperl)
. include "../../lang/perl5/buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_perl
PLIST.perl= yes
.else
CONFIGURE_ARGS+= --without-rlm_perl
.endif
###
### OpenLDAP support
###
.if !empty(PKG_OPTIONS:Mldap)
. include "../../databases/openldap-client/buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_ldap
PLIST.ldap= yes
.else
CONFIGURE_ARGS+= --without-rlm_ldap
.endif
###
### IODBC support
###
.if !empty(PKG_OPTIONS:Miodbc)
. include "../../databases/iodbc/buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_sql_iodbc
PLIST.iodbc= yes
.else
CONFIGURE_ARGS+= --without-rlm_sql_iodbc
.endif
###
### UnixDBC support
###
.if !empty(PKG_OPTIONS:Munixodbc)
. include "../../databases/unixodbc/buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_sql_unixodbc
PLIST.unixodbc= yes
.else
CONFIGURE_ARGS+= --without-rlm_sql_unixodbc
.endif
###
### PostgreSQL support
###
.if !empty(PKG_OPTIONS:Mpgsql)
. include "../../mk/pgsql.buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_sql_postgresql
PLIST.pgsql= yes
.else
CONFIGURE_ARGS+= --without-rlm_sql_postgresql
.endif
###
### MySQL support
###
.if !empty(PKG_OPTIONS:Mmysql)
. include "../../mk/mysql.buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_sql_mysql
PLIST.mysql= yes
.else
CONFIGURE_ARGS+= --without-rlm_sql_mysql
.endif
###
### SNMP support
###
### Please note that snmp support is limited. Freeradius looks like it's
### after the old ucd-snmp (v4.x) headers and ucd-snmp isn't in pkgsrc any
### more. Compatability mode on the current net-snmp (v5.x) does not seem
### to work either. So it will find a few snmp utilites but other than that
### it's limited, at best.
###
.if !empty(PKG_OPTIONS:Msnmp)
. include "../../net/net-snmp/buildlink3.mk"
CONFIGURE_ARGS+= --with-snmp
.else
CONFIGURE_ARGS+= --without-snmp
.endif
###
### Kerberos 5 support
###
.if !empty(PKG_OPTIONS:Mkerberos)
. include "../../mk/krb5.buildlink3.mk"
CONFIGURE_ARGS+= --with-rlm_krb5
. if defined(KRB5_TYPE) && ${KRB5_TYPE} == "heimdal"
CONFIGURE_ARGS+= --enable-heimdal-krb5
. endif
PLIST.kerberos= yes
.else
CONFIGURE_ARGS+= --without-rlm_krb5
.endif
###
### Enable Simultaneous-Use which needs snmpwalk and snmpget
###
.if !empty(PKG_OPTIONS:Mfreeradius-simul-use)
. include "../../net/net-snmp/buildlink3.mk"
.else
CONFIGURE_ENV+= ac_cv_path_SNMPGET=""
CONFIGURE_ENV+= ac_cv_path_SNMPWALK=""
.endif
###
### PAM support
###
.if !empty(PKG_OPTIONS:Mpam)
CONFIGURE_ARGS+= --with-rlm_pam
MESSAGE_SRC+= ${WRKDIR}/.MESSAGE_SRC.pam
PLIST.pam= yes
.else
CONFIGURE_ARGS+= --without-rlm_pam
.endif