4694497b69
* Fix checkrad.pl::cisco_snmp and usrhiper_snmp so that communities
other than "public" can be used too.
* Error out on superflous command line args (optind >= argc)
* Encrypt CHAP-Password in radclient so that CHAP can be tested too
* Add "wildcard" option to realms - if you set this option, you can
match on the entire username using shell wildcards in the realms file.
* If the nastype in /etc/raddb/naslist is set to 'none' for a nas,
logins on that nas will have no simultaneous use restrictions imposed
and those logins will not count towards the total amount of logins.
* Removed 'raduse' and manpage.
* Can disable radutmp with "-u none" (likewise radwtmp with "-W none",
though we already had "-w" for that).
* Call checkrad with an extra argument, the framed IP address.
* Fix bug where $INCLUDEing a file without any records would
cause the rest of the original file to be ignored
* Support for 64-bit wide integers (integer8 type). If compiled with
gcc, users file can contain both hex and decimal 64-bit values,
and 64-bit values are printed in decimal. With other compilers
(no "long long" support) only hex 64-bit values are supported.
* Change "_" to "-" in dictionary.redback and change the 64 bits
values to integer8.
* Moved the dictionary files to /usr/local/share/radius. Now
only /etc/raddb/dictionary remains that $INCLUDES all the others.
For new installs only; existing installations won't be changed
* Make integer in the format string of sprintf(buf, "%03d:%.20s", ..) in
make_wtmp() unsigned (%u), otherwise the sprintf could in some cases
(negative NAS-Port, very long NAS-name) overrun the buffer by one
byte, overwriting the least significant byte of the return address
on the stack with a \0. Not sure if this is exploitable or not,
but it could be a security problem.
* Make sure ut.login (struct radutmp member) is treated everywhere
as a NON-zero terminated string.
* Make sure unsigned integers are used in all places using lvalues
(32 bits radius values), especially nas_port.
* radrelay: update id of packet when retransmitting.
* Print an error and free the request struct if we receive an unknown
packet type.
* rad_check_multi: if username/NAS/port match, don't count as dup.
47 lines
1.6 KiB
Text
47 lines
1.6 KiB
Text
$NetBSD: patch-ab,v 1.4 2003/12/16 19:19:41 martti Exp $
|
|
|
|
--- src/Make.inc.orig Thu Apr 10 13:51:47 2003
|
|
+++ src/Make.inc Tue Dec 16 20:10:28 2003
|
|
@@ -4,7 +4,7 @@
|
|
#
|
|
#
|
|
|
|
-RADIUS_DIR = /etc/raddb
|
|
+RADIUS_DIR = ${PREFIX}/share/examples/raddb
|
|
|
|
SERVER_OBJS = radiusd.o files.o acct.o pam.o version.o proxy.o \
|
|
exec.o auth.o timestr.o cache.o readusers.o
|
|
@@ -115,8 +115,6 @@
|
|
|
|
install:
|
|
# Install the binaries
|
|
- $(DINSTALL) $(SBINDIR)
|
|
- $(DINSTALL) $(BINDIR)
|
|
$(DINSTALL) $(RADIUS_DIR)
|
|
$(INSTALL) -m 755 -s radiusd $(SBINDIR)/radiusd
|
|
$(INSTALL) -m 755 -s radrelay $(SBINDIR)/radrelay
|
|
@@ -127,23 +125,11 @@
|
|
$(INSTALL) -m 755 checkrad.pl $(SBINDIR)/checkrad
|
|
$(INSTALL) -m 755 radlast $(BINDIR)
|
|
$(INSTALL) -m 755 radtest $(BINDIR)
|
|
- # Install the man pages
|
|
- @for section in 1 5 8; do \
|
|
- $(DINSTALL) $(MANDIR)/man$$section; \
|
|
- for manfile in ../doc/*.$$section*; do \
|
|
- echo $(INSTALL) -m 644 $$manfile $(MANDIR)/man$$section; \
|
|
- $(INSTALL) -m 644 $$manfile $(MANDIR)/man$$section; \
|
|
- done ; \
|
|
- done
|
|
- test -n "$(DBM)" || rm -f $(MANDIR)/man8/builddbm.8rad
|
|
- @if [ -d /etc/pam.d/ ] && [ ! -f /etc/pam.d/radius ]; then \
|
|
- $(INSTALL) -m 644 ../redhat/radiusd-pam /etc/pam.d/radius;\
|
|
- fi
|
|
@# Install the config files
|
|
@echo; echo "Creating/updating files in $(RADIUS_DIR)"; \
|
|
cd ../raddb; \
|
|
for i in [a-c]* [e-z]*; do \
|
|
- [ ! -f $(RADIUS_DIR)/$$i ] && cp $$i $(RADIUS_DIR)/$$i; \
|
|
+ $(INSTALL) -m 444 $$i $(RADIUS_DIR)/$$i.sample; \
|
|
done; true
|
|
@# Install the dictionary files
|
|
@sh dict-install.sh ../raddb $(RADIUS_DIR) $(SHAREDIR)
|