2006-01-08 19:35:08 +01:00
|
|
|
# $NetBSD: Makefile,v 1.41 2006/01/08 18:35:11 xtraeme Exp $
|
Adding freeradius package. Thanks to David Ferlier <david@netbsd-fr.org>
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
2003-02-27 09:51:00 +01:00
|
|
|
|
Update to 1.0.5
> Security Fixes
> * SQL injection attack in the module "rlm_sqlcounter".
> * Buffer overflows in the module "rlm_sqlcounter".
> * Expansion of variable %t may write 26 bytes beyond the buffer
> bound. Primoz Bratanic is credited with the discovery of these
> three bugs.
>
> Bug fixes
> * Don't de-reference a NULL pointer if the auth-type is unknown
> in the function rad_check_password().
> * Escape more characters in the LDAP queries.
> Bug found by Suse engineers.
> * In rlm_sql_unixodbc, don't call rad_malloc from sql_error(),
> it leaks memory.
> * Fix an off-by-one error in the module rlm_sql_unixodbc.
> Bug found by Suse engineers.
> * In rlm_sql, resize the buffer for the value of SQL-User-Name.
> * Initialize memory for a new SQL socket in the module rlm_sql.
> * Don't add too many attributes after running an external program.
> Bug found by Suse engineers.
> * Fix an off-by-one error in the function getthing().
> * snprintf() and vsnprintf() replacements were not compiled if
> the autoconf tests didn't find the functions.
> * Don't use vsprintf() anymore, but the replacement for vsnprintf()
> in libradius instead.
> * The function decode_attribute() may write beyond buffer bounds.
> Bug found by Suse engineers.
> * Fix a memset() in the function request_enqueue() which was
> begining at the wrong address. Bug found by Matthias Ruttman.
> * Fix an off-by-one error in the function xlat_copy().
> Bug found by Primoz Bratanic.
> * Fix other off-by-one errors in module "rlm_unix", too.
> Bug found by Allan Bazinet.
> * Fix a 2-byte over-run read in function rad_decode().
> * Update thread pool queue properly.
> * Autonconf tests try first any user-specified directory,
> otherwise they may pick up the wrong version.
> * Delete the autoconf tests for the libldap dependancies.
> * Install all the regular files under the "doc" directory.
> * Distinguish between exit code <0 (failure) and >0 (reject)
> in Exec-Program-Wait. Patch from Thor Spruyt.
> * Make Expiration work.
> * Clean up the code for opening a proxy socket.
> * When finding a realm to proxy to, if all are dead, wake them
> if wake_all_if_all_dead is true.
> * In radwho, print the NAS-Port as unsigned int.
> * Use extended regex instead of basic regex in rlm_attr_filter.
> * Catch the case where someone deletes a directory that rlm_detail
> is using.
> * Use the variable $(LDFLAGS) when linking a module.
> * Ignore the Stripped-User-Name when a realm has the "nostrip"
> directive.
> * Add support for NT-Password in rlm_pap.
> * In rlm_sqlcounter, use the time left to the next reset if it's
> inferior to the time left in the counter.
> * Calculate Message-Authenticator correctly for Accounting-Request
> and Accounting-Response. Bug found by Paolo Rotela.
> * Build on MAC OS X. Still need --disable-shared, though.
> * Fix bug #255 (crash with expired CRL's, etc.)
> * Fix quote removal of the values from a SQL database.
> * Reap the zombie process after a command run from "Exec-Program".
> * Allow to cancel proxy of accounting with "Proxy-To-Realm := LOCAL".
> * Don't copy VSA's to an Access-Reject packet.
2005-09-11 14:57:34 +02:00
|
|
|
DISTNAME= freeradius-1.0.5
|
2006-01-08 19:35:08 +01:00
|
|
|
PKGREVISION= 3
|
Adding freeradius package. Thanks to David Ferlier <david@netbsd-fr.org>
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
2003-02-27 09:51:00 +01:00
|
|
|
CATEGORIES= net
|
|
|
|
|
MASTER_SITES= ftp://ftp.freeradius.org/pub/radius/ \
|
|
|
|
|
ftp://ftp.Awfulhak.org/pub/radius/
|
|
|
|
|
|
2005-03-02 22:50:18 +01:00
|
|
|
MAINTAINER= adrianp@NetBSD.org
|
Adding freeradius package. Thanks to David Ferlier <david@netbsd-fr.org>
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
2003-02-27 09:51:00 +01:00
|
|
|
HOMEPAGE= http://www.freeradius.org/
|
|
|
|
|
COMMENT= Free RADIUS server implementation
|
|
|
|
|
|
2004-10-02 14:06:03 +02:00
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
|
|
2004-09-23 21:51:21 +02:00
|
|
|
CONFLICTS+= radiusd-cistron*
|
2005-07-16 03:19:06 +02:00
|
|
|
USE_TOOLS+= gmake perl:run
|
2004-09-23 21:51:21 +02:00
|
|
|
GNU_CONFIGURE= YES
|
|
|
|
|
LIBTOOLIZE_PLIST= NO
|
2004-10-02 14:06:03 +02:00
|
|
|
PLIST_SRC= ${WRKDIR}/.PLIST_SRC
|
2005-12-05 21:49:47 +01:00
|
|
|
FILES_SUBST+= ROOT_USER=${ROOT_USER:Q}
|
|
|
|
|
FILES_SUBST+= ROOT_GROUP=${ROOT_GROUP:Q}
|
2005-03-02 22:44:55 +01:00
|
|
|
USE_OLD_DES_API= YES
|
|
|
|
|
|
|
|
|
|
BUILDLINK_DEPENDS.openssl+= openssl>=0.9.7
|
2004-09-23 21:51:21 +02:00
|
|
|
|
|
|
|
|
# This package currently breaks using our libtool. It does not appear to use
|
|
|
|
|
# libtool properly/fully and as a result the daemon does not compile correctly.
|
|
|
|
|
#
|
|
|
|
|
#USE_LIBTOOL= YES
|
|
|
|
|
#LIBTOOL_OVERRIDE= libtool
|
|
|
|
|
|
|
|
|
|
CONFIGURE_ARGS+= --with-logdir=${VARBASE}/log
|
2005-12-06 00:55:01 +01:00
|
|
|
CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q}
|
|
|
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASEDIR:Q}
|
2003-07-30 14:08:47 +02:00
|
|
|
CONFIGURE_ARGS+= --disable-ltdl-install
|
|
|
|
|
CONFIGURE_ARGS+= --with-ltdl-lib=${PREFIX}/lib
|
|
|
|
|
CONFIGURE_ARGS+= --with-ltdl-include=${PREFIX}/include
|
2004-01-30 22:44:39 +01:00
|
|
|
CONFIGURE_ARGS+= --without-rlm_ippool
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_smb
|
2004-09-23 21:51:21 +02:00
|
|
|
CONFIGURE_ARGS+= --without-rlm_krb5
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_pam
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_iodbc
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_oracle
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_unixodbc
|
2003-07-30 16:50:07 +02:00
|
|
|
|
2005-12-05 21:49:47 +01:00
|
|
|
SUBST_CLASSES+= make
|
2004-11-10 23:27:32 +01:00
|
|
|
SUBST_STAGE.make= post-patch
|
2004-11-16 14:51:45 +01:00
|
|
|
SUBST_FILES.make= src/modules/rlm_ldap/Makefile.in \
|
2005-02-18 17:59:57 +01:00
|
|
|
src/modules/rlm_mschap/Makefile \
|
|
|
|
|
src/modules/rlm_sql/drivers/rlm_sql_postgresql/Makefile.in
|
2004-11-16 14:51:45 +01:00
|
|
|
SUBST_SED.make= -e "s|RLM_LDFLAGS =|RLM_LDFLAGS = \
|
2005-02-18 17:59:57 +01:00
|
|
|
-L../../../src/lib/.libs/ -lradius|g" \
|
|
|
|
|
-e "s|RLM_SQL_LIBS =|RLM_SQL_LIBS = \
|
|
|
|
|
-L${PREFIX}/lib|g"
|
2004-11-10 23:27:32 +01:00
|
|
|
SUBST_MESSAGE.make= "Fixing Makefiles."
|
|
|
|
|
|
2004-10-02 14:06:03 +02:00
|
|
|
.include "options.mk"
|
|
|
|
|
|
2003-07-30 16:50:07 +02:00
|
|
|
RCD_SCRIPTS= radiusd
|
|
|
|
|
|
2004-09-23 21:51:21 +02:00
|
|
|
OWN_DIRS= ${VARBASE}/run/radiusd
|
2003-07-30 16:50:07 +02:00
|
|
|
|
|
|
|
|
PKG_SYSCONFSUBDIR= raddb
|
|
|
|
|
EGDIR= ${PREFIX}/share/examples/freeradius
|
2004-09-23 21:51:21 +02:00
|
|
|
|
|
|
|
|
EGFILES= acct_users attrs certs/demoCA/index.txt.old \
|
|
|
|
|
certs/demoCA/cacert.pem certs/demoCA/index.txt \
|
|
|
|
|
certs/demoCA/serial.old certs/demoCA/serial \
|
|
|
|
|
certs/newcert.pem certs/README certs/dh \
|
|
|
|
|
certs/cert-clt.der certs/cert-clt.p12 certs/cert-clt.pem \
|
|
|
|
|
certs/cert-srv.der certs/cert-srv.p12 certs/cert-srv.pem \
|
|
|
|
|
certs/newreq.pem certs/random certs/root.der certs/root.p12 \
|
|
|
|
|
certs/root.pem clients clients.conf dictionary.in eap.conf \
|
|
|
|
|
experimental.conf hints huntgroups ldap.attrmap mssql.conf \
|
|
|
|
|
naslist naspasswd oraclesql.conf pgsql-voip.conf \
|
|
|
|
|
postgresql.conf preproxy_users proxy.conf radiusd.conf.in \
|
|
|
|
|
realms snmp.conf sql.conf users x99.conf x99passwd.sample \
|
|
|
|
|
radiusd.conf dictionary
|
|
|
|
|
|
|
|
|
|
.for f in ${EGFILES}
|
|
|
|
|
CONF_FILES+= ${EGDIR}/${f} ${PKG_SYSCONFDIR}/${f}
|
|
|
|
|
.endfor
|
|
|
|
|
|
|
|
|
|
.include "../../security/openssl/buildlink3.mk"
|
2004-10-15 14:03:52 +02:00
|
|
|
.include "../../devel/libltdl/buildlink3.mk"
|
2004-05-08 09:37:40 +02:00
|
|
|
.include "../../mk/pthread.buildlink3.mk"
|
2003-11-03 11:09:50 +01:00
|
|
|
|
|
|
|
|
.if defined(PTHREAD_TYPE) && ${PTHREAD_TYPE} == "none"
|
2004-11-11 00:06:14 +01:00
|
|
|
CONFIGURE_ARGS+= --without-threads
|
2003-11-03 11:09:50 +01:00
|
|
|
.endif
|
|
|
|
|
|
2004-11-16 14:51:45 +01:00
|
|
|
.if defined(PTHREAD_TYPE) && ${PTHREAD_TYPE} == "pth"
|
|
|
|
|
.include "../../devel/pthread-sem/buildlink3.mk"
|
|
|
|
|
SUBST_SED.make+= -e "s|@ldap_ldflags@|@ldap_ldflags@ \
|
2005-03-02 22:44:55 +01:00
|
|
|
-lpthread -lsemaphore|g"
|
2004-11-16 14:51:45 +01:00
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
.if defined(PTHREAD_TYPE) && ${PTHREAD_TYPE} == "native"
|
|
|
|
|
SUBST_SED.make+= -e "s|@ldap_ldflags@|@ldap_ldflags@ \
|
2005-03-02 22:44:55 +01:00
|
|
|
-lpthread|g"
|
2004-11-16 14:51:45 +01:00
|
|
|
.endif
|
|
|
|
|
|
2005-11-29 00:44:02 +01:00
|
|
|
.if ${MACHINE_ARCH} == "amd64"
|
|
|
|
|
CFLAGS+= -fPIC
|
|
|
|
|
.endif
|
|
|
|
|
|
2004-12-19 19:59:12 +01:00
|
|
|
pre-build:
|
|
|
|
|
cd ${WRKSRC} && ${LN} -s src/lib lib
|
|
|
|
|
|
|
|
|
|
post-build:
|
|
|
|
|
@${CP} ${PKGDIR}/PLIST ${WRKDIR}/.PLIST_SRC
|
|
|
|
|
|
|
|
|
|
post-install:
|
|
|
|
|
${INSTALL_DATA_DIR} ${EGDIR}
|
|
|
|
|
${INSTALL_DATA_DIR} ${EGDIR}/certs
|
|
|
|
|
${INSTALL_DATA_DIR} ${EGDIR}/certs/demoCA
|
2005-08-29 16:28:12 +02:00
|
|
|
.for f in ${EGFILES}
|
|
|
|
|
${INSTALL_DATA} ${WRKSRC}/raddb/${f} ${EGDIR}/${f}
|
|
|
|
|
.endfor
|
2004-12-19 19:59:12 +01:00
|
|
|
@${MKDIR} ${PKG_SYSCONFDIR}/certs
|
|
|
|
|
@${MKDIR} ${PKG_SYSCONFDIR}/certs/demoCA
|
|
|
|
|
cd ${WRKSRC} && ${FIND} . -name .libs | ${XARGS} ${RM} -rf
|
|
|
|
|
|
Adding freeradius package. Thanks to David Ferlier <david@netbsd-fr.org>
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
2003-02-27 09:51:00 +01:00
|
|
|
.include "../../mk/bsd.pkg.mk"
|
