2005-08-14 20:01:54 +02:00
|
|
|
# $NetBSD: Makefile,v 1.32 2005/08/14 18:01:54 adrianp Exp $
|
Adding freeradius package. Thanks to David Ferlier <david@netbsd-fr.org>
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
2003-02-27 09:51:00 +01:00
|
|
|
|
- Update to freeradius 1.0.4
- The security issues mentioned in this update were incorporated
into patch-ak previously and a security advisory was already
made in regards to this.
> FreeRADIUS 1.0.4 ; Date: 2005/06/11 22:46:52, urgency=medium
>
> * Fix installation problem.
> * Increase a buffer size, so radrelay doesn't truncate values.
> * Updates in the documentation. Patches from Thor Spruyt.
>
> FreeRADIUS 1.0.3 ; Date: 2005/06/03 17:15:11, urgency=high
> Security Fixes
> * Always escape the strings in the SQL module.
> * Check buffer bound when input character needs escaping in
> the SQL module. Bug found by Primoz Bratanic.
>
> Bug fixes
> * Return EAP-Fail in Access-Reject, rather than an empty Access-Reject
> * Don't send Proxy-State from home server in TTLS.
> * Fixes for forking external programs, so the server doesn't
> suddenly stop processing requests, or stop forking programs.
> * radzap now works, but it's command-line options have changed
> completely, and it's a shell script.
> * radwho has updated command-line options, and no longer reads
> Unix "utmp" files.
> * Fix bug in calling checkrad script with NAS port > 9999999
> * Fix long-standing bug when both crypt and pthreads are in use
> * Don't SEGV when rlm_sql gets 'NULL' value from request.
> * Re-arrange code in radrelay to not duplicate accounting packets.
> * In rlm_attr_rewrite, change the value when the attribute type
> is different from string.
2005-07-09 19:25:00 +02:00
|
|
|
DISTNAME= freeradius-1.0.4
|
2005-08-14 20:01:54 +02:00
|
|
|
PKGREVISION= 1
|
Adding freeradius package. Thanks to David Ferlier <david@netbsd-fr.org>
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
2003-02-27 09:51:00 +01:00
|
|
|
CATEGORIES= net
|
|
|
|
|
MASTER_SITES= ftp://ftp.freeradius.org/pub/radius/ \
|
|
|
|
|
ftp://ftp.Awfulhak.org/pub/radius/
|
|
|
|
|
|
2005-03-02 22:50:18 +01:00
|
|
|
MAINTAINER= adrianp@NetBSD.org
|
Adding freeradius package. Thanks to David Ferlier <david@netbsd-fr.org>
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
2003-02-27 09:51:00 +01:00
|
|
|
HOMEPAGE= http://www.freeradius.org/
|
|
|
|
|
COMMENT= Free RADIUS server implementation
|
|
|
|
|
|
2004-10-02 14:06:03 +02:00
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
|
|
2004-09-23 21:51:21 +02:00
|
|
|
CONFLICTS+= radiusd-cistron*
|
2005-07-16 03:19:06 +02:00
|
|
|
USE_TOOLS+= gmake perl:run
|
2004-09-23 21:51:21 +02:00
|
|
|
GNU_CONFIGURE= YES
|
|
|
|
|
USE_PKGINSTALL= YES
|
|
|
|
|
LIBTOOLIZE_PLIST= NO
|
2004-10-02 14:06:03 +02:00
|
|
|
PLIST_SRC= ${WRKDIR}/.PLIST_SRC
|
2004-12-22 11:07:21 +01:00
|
|
|
FILES_SUBST+= ROOT_USER=${ROOT_USER}
|
|
|
|
|
FILES_SUBST+= ROOT_GROUP=${ROOT_GROUP}
|
2005-03-02 22:44:55 +01:00
|
|
|
USE_OLD_DES_API= YES
|
|
|
|
|
|
|
|
|
|
BUILDLINK_DEPENDS.openssl+= openssl>=0.9.7
|
2004-09-23 21:51:21 +02:00
|
|
|
|
|
|
|
|
# This package currently breaks using our libtool. It does not appear to use
|
|
|
|
|
# libtool properly/fully and as a result the daemon does not compile correctly.
|
|
|
|
|
#
|
|
|
|
|
#USE_LIBTOOL= YES
|
|
|
|
|
#LIBTOOL_OVERRIDE= libtool
|
|
|
|
|
|
|
|
|
|
CONFIGURE_ARGS+= --with-logdir=${VARBASE}/log
|
|
|
|
|
CONFIGURE_ARGS+= --localstatedir=${VARBASE}
|
2005-02-09 10:14:26 +01:00
|
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFBASEDIR}
|
2003-07-30 14:08:47 +02:00
|
|
|
CONFIGURE_ARGS+= --disable-ltdl-install
|
|
|
|
|
CONFIGURE_ARGS+= --with-ltdl-lib=${PREFIX}/lib
|
|
|
|
|
CONFIGURE_ARGS+= --with-ltdl-include=${PREFIX}/include
|
2004-01-30 22:44:39 +01:00
|
|
|
CONFIGURE_ARGS+= --without-rlm_ippool
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_smb
|
2004-09-23 21:51:21 +02:00
|
|
|
CONFIGURE_ARGS+= --without-rlm_krb5
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_ldap
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_pam
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_iodbc
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_mysql
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_postgresql
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_oracle
|
|
|
|
|
CONFIGURE_ARGS+= --without-rlm_sql_unixodbc
|
|
|
|
|
CONFIGURE_ARGS+= --without-snmp
|
2003-07-30 16:50:07 +02:00
|
|
|
|
2004-11-10 23:27:32 +01:00
|
|
|
SUBST_CLASSES= make
|
|
|
|
|
SUBST_STAGE.make= post-patch
|
2004-11-16 14:51:45 +01:00
|
|
|
SUBST_FILES.make= src/modules/rlm_ldap/Makefile.in \
|
2005-02-18 17:59:57 +01:00
|
|
|
src/modules/rlm_mschap/Makefile \
|
|
|
|
|
src/modules/rlm_sql/drivers/rlm_sql_postgresql/Makefile.in
|
2004-11-16 14:51:45 +01:00
|
|
|
SUBST_SED.make= -e "s|RLM_LDFLAGS =|RLM_LDFLAGS = \
|
2005-02-18 17:59:57 +01:00
|
|
|
-L../../../src/lib/.libs/ -lradius|g" \
|
|
|
|
|
-e "s|RLM_SQL_LIBS =|RLM_SQL_LIBS = \
|
|
|
|
|
-L${PREFIX}/lib|g"
|
2004-11-10 23:27:32 +01:00
|
|
|
SUBST_MESSAGE.make= "Fixing Makefiles."
|
|
|
|
|
|
2004-10-02 14:06:03 +02:00
|
|
|
.include "options.mk"
|
|
|
|
|
|
2003-07-30 16:50:07 +02:00
|
|
|
RCD_SCRIPTS= radiusd
|
|
|
|
|
|
2004-09-23 21:51:21 +02:00
|
|
|
OWN_DIRS= ${VARBASE}/run/radiusd
|
2003-07-30 16:50:07 +02:00
|
|
|
|
|
|
|
|
PKG_SYSCONFSUBDIR= raddb
|
|
|
|
|
EGDIR= ${PREFIX}/share/examples/freeradius
|
2004-09-23 21:51:21 +02:00
|
|
|
|
|
|
|
|
EGFILES= acct_users attrs certs/demoCA/index.txt.old \
|
|
|
|
|
certs/demoCA/cacert.pem certs/demoCA/index.txt \
|
|
|
|
|
certs/demoCA/serial.old certs/demoCA/serial \
|
|
|
|
|
certs/newcert.pem certs/README certs/dh \
|
|
|
|
|
certs/cert-clt.der certs/cert-clt.p12 certs/cert-clt.pem \
|
|
|
|
|
certs/cert-srv.der certs/cert-srv.p12 certs/cert-srv.pem \
|
|
|
|
|
certs/newreq.pem certs/random certs/root.der certs/root.p12 \
|
|
|
|
|
certs/root.pem clients clients.conf dictionary.in eap.conf \
|
|
|
|
|
experimental.conf hints huntgroups ldap.attrmap mssql.conf \
|
|
|
|
|
naslist naspasswd oraclesql.conf pgsql-voip.conf \
|
|
|
|
|
postgresql.conf preproxy_users proxy.conf radiusd.conf.in \
|
|
|
|
|
realms snmp.conf sql.conf users x99.conf x99passwd.sample \
|
|
|
|
|
radiusd.conf dictionary
|
|
|
|
|
|
|
|
|
|
.for f in ${EGFILES}
|
|
|
|
|
CONF_FILES+= ${EGDIR}/${f} ${PKG_SYSCONFDIR}/${f}
|
|
|
|
|
.endfor
|
|
|
|
|
.undef f
|
|
|
|
|
|
|
|
|
|
.include "../../security/openssl/buildlink3.mk"
|
2004-05-08 09:37:40 +02:00
|
|
|
.include "../../databases/gdbm/buildlink3.mk"
|
2004-10-15 14:03:52 +02:00
|
|
|
.include "../../devel/libltdl/buildlink3.mk"
|
2004-05-08 09:37:40 +02:00
|
|
|
.include "../../mk/pthread.buildlink3.mk"
|
2003-11-03 11:09:50 +01:00
|
|
|
|
|
|
|
|
.if defined(PTHREAD_TYPE) && ${PTHREAD_TYPE} == "none"
|
2004-11-11 00:06:14 +01:00
|
|
|
CONFIGURE_ARGS+= --without-threads
|
2003-11-03 11:09:50 +01:00
|
|
|
.endif
|
|
|
|
|
|
2004-11-16 14:51:45 +01:00
|
|
|
.if defined(PTHREAD_TYPE) && ${PTHREAD_TYPE} == "pth"
|
|
|
|
|
.include "../../devel/pthread-sem/buildlink3.mk"
|
|
|
|
|
SUBST_SED.make+= -e "s|@ldap_ldflags@|@ldap_ldflags@ \
|
2005-03-02 22:44:55 +01:00
|
|
|
-lpthread -lsemaphore|g"
|
2004-11-16 14:51:45 +01:00
|
|
|
.endif
|
|
|
|
|
|
|
|
|
|
.if defined(PTHREAD_TYPE) && ${PTHREAD_TYPE} == "native"
|
|
|
|
|
SUBST_SED.make+= -e "s|@ldap_ldflags@|@ldap_ldflags@ \
|
2005-03-02 22:44:55 +01:00
|
|
|
-lpthread|g"
|
2004-11-16 14:51:45 +01:00
|
|
|
.endif
|
|
|
|
|
|
2004-12-19 19:59:12 +01:00
|
|
|
pre-build:
|
|
|
|
|
cd ${WRKSRC} && ${LN} -s src/lib lib
|
|
|
|
|
|
|
|
|
|
post-build:
|
|
|
|
|
@${CP} ${PKGDIR}/PLIST ${WRKDIR}/.PLIST_SRC
|
|
|
|
|
|
|
|
|
|
post-install:
|
|
|
|
|
${INSTALL_DATA_DIR} ${EGDIR}
|
|
|
|
|
${INSTALL_DATA_DIR} ${EGDIR}/certs
|
|
|
|
|
${INSTALL_DATA_DIR} ${EGDIR}/certs/demoCA
|
|
|
|
|
|
|
|
|
|
. for f in ${EGFILES}
|
|
|
|
|
${INSTALL_DATA} ${WRKSRC}/raddb/${f} ${EGDIR}/${f}
|
|
|
|
|
. endfor
|
|
|
|
|
|
|
|
|
|
@${MKDIR} ${PKG_SYSCONFDIR}/certs
|
|
|
|
|
@${MKDIR} ${PKG_SYSCONFDIR}/certs/demoCA
|
|
|
|
|
cd ${WRKSRC} && ${FIND} . -name .libs | ${XARGS} ${RM} -rf
|
|
|
|
|
|
Adding freeradius package. Thanks to David Ferlier <david@netbsd-fr.org>
for putting this package together. Closes PR pkg/20013.
I had originally requested this package even though we already had the
Cistern RADIUS package because some terminal servers won't work with
one or the other of these packages. This increases the number of terminal
servers that can work with NetBSD.
from the DESCR file:
All code in this server was written from scratch.
The server is mostly compatible with livingston radiusd-2.01
(no menus or s/key support though) but with more feautures, such as:
o Can limit max. number of simultaneous logins on a per-user basis!
o Multiple DEFAULT entries, that can optionally fall-through.
o In fact, every entry can fall-through
o Deny/permit access based on huntgroup users dials into
o Set certain parameters (such as static IP address) based on huntgroup
o Extra "hints" file that can select SLIP/PPP/rlogin based on
username pattern (Puser or user.ppp is PPP, plain "user" is rlogin etc).
o Can execute an external program when user has authenticated (for example
to run a sendmail queue).
o Can use `$INCLUDE filename' in radiusd.conf, users, and dictionary files
o Can act as a proxy server, relaying requests to a remote server
o Supports Vendor-Specific attributes
o No good documentation at all, just like the original radiusd 1.16!
Then of course for general RADIUS questions, especially if you are using
Livingston / Lucent RABU equipment, there is the portmaster-radius mailing
list. Send mail to portmaster-radius-request@livingston.com to find
out how to subscribe.
2003-02-27 09:51:00 +01:00
|
|
|
.include "../../mk/bsd.pkg.mk"
|
