Update to 1.1.0
> FreeRADIUS 1.1.0 ; $Date: 2006/01/04 05:55:19 $, urgency=low
> Feature improvements
> * rlm_ldap has "set_auth_type" configuration option, which should
> address some configuration problems when using it.
> * Fix MIT Kerberos bug
> * Modules can be load balanced, both in isolation and redundantly.
> See doc/load-balance.txt for more information.
> * rlm_perl is now marked "stable"
> * N-tier certificate patch from Mohammed Petiwala.
> * Copied dictionaries from the CVS head (many, many, more vendors)
> * Enabled support for weird VSA formats, like Lucent and Starent.
> * Support encrypted IP address and integers, for Juniper clients.
> * Add PEAP machine authentication support in module "rlm_mschap".
> * Support User-Password field encryption in digest mode.
> * rlm_x99_token has become rlm_otp (with lots of changes).
> * Add rlm_sqlcounter to the list of stable modules.
> * Read MySQL specific options in sections [freeradius] and [client]
> from file "my.cnf".
> * Support the ${Cisco-AVPair[n]} syntax.
> * Execute modules in {Pre,Post}-Proxy-Type stanzas.
> * Add new options to radclient to run stress tests on the server.
> * New module "rlm_sql_log" to postpone the storage of accounting data
> in a SQL database. See rlm_sql_log(5) manpage.
> * New program "radsqlrelay" which sends the SQL logfile according to
> the SQL server's capabilities.
>
> Bug fixes
> * 306 (HUP when built with threads, but executed with -s)
> * 285 (more attributes in dictionary.cisco.vpn3000)
> * rlm_digest has a number of bug fixes to authentication types.
> * Don't leak memory in module "rlm_sql".
> * Update the dictionaries, so that VALUEs with the same name,
> but different numbers, aren't allowed.
> * Queue the request before looking for available threads.
> * Don't free the check items after we received the proxy reply.
> * Expand config variables in included files, too.
> * Check the return value of accounting modules and don't proxy
> invalid requests.
> * In rlm_passwd, don't close a file stream more than once.
> * Fix format string errors in rlm_sql.c, spotted by Primoz Bratanic.
> * Walk the whole string in when escaping strings in rlm_ldap.
> * Include crypt.h if it is available so we get a prototype for crypt(),
> spotted by Konstantin Kubatkin.
> * Removed (for almost all uses) length restrictions on vendor names
> and VALUE names.
> * Don't leak memory when proxying an Access-Challenge response.
> * Make the sleep time user-defined, so radrelay can send more than
> 7 requests/s.
> * Fix a memory leak in rlm_checkval.
> * radclient doesn't resend countless times packets with invalid
> signature.
> * Fix segfault and mem leak in rlm_pam.
2006-02-05 16:34:08 +01:00
|
|
|
# $NetBSD: options.mk,v 1.7 2006/02/05 15:34:08 adrianp Exp $
|
2004-10-02 14:06:03 +02:00
|
|
|
|
|
|
|
|
PKG_OPTIONS_VAR= PKG_OPTIONS.freeradius
|
2005-08-31 20:32:47 +02:00
|
|
|
|
|
|
|
|
PKG_OPTIONS_OPTIONAL_GROUPS= dbm
|
|
|
|
|
PKG_OPTIONS_GROUP.dbm= bdb gdbm
|
|
|
|
|
|
|
|
|
|
PKG_SUPPORTED_OPTIONS= ldap mysql pgsql snmp
|
2005-08-29 16:28:12 +02:00
|
|
|
PKG_SUGGESTED_OPTIONS= gdbm
|
2004-10-02 14:06:03 +02:00
|
|
|
|
|
|
|
|
.include "../../mk/bsd.options.mk"
|
|
|
|
|
|
|
|
|
|
###
|
2005-08-29 16:28:12 +02:00
|
|
|
### Use GDBM or Berkeley DB 1.x for storing user details
|
2004-10-02 14:06:03 +02:00
|
|
|
###
|
2005-08-29 16:28:12 +02:00
|
|
|
.if !empty(PKG_OPTIONS:Mgdbm)
|
|
|
|
|
. include "../../databases/gdbm/buildlink3.mk"
|
|
|
|
|
CONFIGURE_ARGS+= --with-rlm_dbm
|
|
|
|
|
PLIST_SRC+= ${PKGDIR}/PLIST.dbm ${PKGDIR}/PLIST.gdbm
|
|
|
|
|
.elif !empty(PKG_OPTIONS:Mbdb) && exists(/usr/include/ndbm.h)
|
|
|
|
|
BDB_ACCEPTED= db1
|
|
|
|
|
. include "../../mk/bdb.buildlink3.mk"
|
|
|
|
|
CONFIGURE_ARGS+= --with-rlm_dbm
|
|
|
|
|
PLIST_SRC+= ${PKGDIR}/PLIST.dbm
|
|
|
|
|
.else
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_dbm
|
2004-10-02 14:06:03 +02:00
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
###
|
|
|
|
|
### Use OpenLDAP for storing user details
|
|
|
|
|
###
|
|
|
|
|
.if !empty(PKG_OPTIONS:Mldap)
|
2005-08-29 16:28:12 +02:00
|
|
|
. include "../../databases/openldap/buildlink3.mk"
|
2004-10-02 14:06:03 +02:00
|
|
|
CONFIGURE_ARGS+= --with-rlm_ldap
|
|
|
|
|
PLIST_SRC+= ${PKGDIR}/PLIST.ldap
|
2005-08-29 16:28:12 +02:00
|
|
|
.else
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_ldap
|
2004-10-02 14:06:03 +02:00
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
###
|
2005-08-29 16:28:12 +02:00
|
|
|
### Use PostgreSQL for storing user details
|
2004-10-02 14:06:03 +02:00
|
|
|
###
|
2005-08-29 16:28:12 +02:00
|
|
|
.if !empty(PKG_OPTIONS:Mpgsql)
|
|
|
|
|
. include "../../mk/pgsql.buildlink3.mk"
|
2004-10-02 14:06:03 +02:00
|
|
|
CONFIGURE_ARGS+= --with-rlm_sql_postgresql
|
|
|
|
|
PLIST_SRC+= ${PKGDIR}/PLIST.pgsql
|
2005-08-29 16:28:12 +02:00
|
|
|
.else
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_postgresql
|
2004-10-02 14:06:03 +02:00
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
###
|
2004-10-29 09:07:44 +02:00
|
|
|
### Use MySQL for storing user details
|
2004-10-02 14:06:03 +02:00
|
|
|
###
|
2004-10-29 09:07:44 +02:00
|
|
|
.if !empty(PKG_OPTIONS:Mmysql)
|
|
|
|
|
. include "../../mk/mysql.buildlink3.mk"
|
2004-10-02 14:06:03 +02:00
|
|
|
CONFIGURE_ARGS+= --with-rlm_sql_mysql
|
|
|
|
|
PLIST_SRC+= ${PKGDIR}/PLIST.mysql
|
2005-08-29 16:28:12 +02:00
|
|
|
.else
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_mysql
|
2004-10-02 14:06:03 +02:00
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
###
|
|
|
|
|
### Compile in SNMP support
|
|
|
|
|
###
|
2005-03-02 22:44:55 +01:00
|
|
|
### Please note that snmp support is limited. Freeradius looks like it's
|
2004-10-02 14:06:03 +02:00
|
|
|
### after the old ucd-snmp (v4.x) headers and ucd-snmp isn't in pkgsrc any
|
|
|
|
|
### more. Compatability mode on the current net-snmp (v5.x) does not seem
|
|
|
|
|
### to work either. So it will find a few snmp utilites but other than that
|
|
|
|
|
### it's limited, at best.
|
|
|
|
|
###
|
|
|
|
|
###
|
|
|
|
|
.if !empty(PKG_OPTIONS:Msnmp)
|
|
|
|
|
CONFIGURE_ARGS+= --with-snmp
|
2005-08-29 16:28:12 +02:00
|
|
|
.else
|
|
|
|
|
CONFIGURE_ARGS+= --without-snmp
|
2004-10-02 14:06:03 +02:00
|
|
|
.endif
|
