e9c22b66e3
Provided by Coy Hile in joyent/pkgsrc#131. Fixes an issue where the module
builds would fail if they found a system LDAP. Fix print-PLIST while here.
FreeRADIUS 3.0.17 Tue 17 Apr 2018 14:00:00 EDT urgency=low
Feature improvements
* Add CURLOPT_CAINFO. Patch from Nicolas C.
#2167
* "stats home server" now supports "src IPADDR",
to specify home server also by source IP. Fixes #2169.
* Add Dockerfiles for a selection of common systems.
* Increase number of permitted file descriptors, for
systems with many home servers.
* Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs.
Patch from Isaac Boukris. Fixes #2205.
* Update main READMEs. Patches from Matthew Newton.
* Added dictionary.mimosa
Bug fixes
* Don't call post-proxy twice when proxying to
a virtual server. Matthew Newton, #2161.
* Use "raw" string value for shared secrets and dynamic clients.
It now parses strings with backslashes and "special characters"
correctly. Fixes #2168.
* Fix RuntimeDirectory for RedHat, from Alan Buxey.
* Relax checks in 'if' parser from Isaac Bourkis
* Minor cleanups for %{debug_attr:&request} from Isaac Boukris.
* Be more aggressive about cleaning up cached certificate attributes,
due to deficiencies in OpenSSL. Reported by Nicolas Reich.
* Be more accepting when parsing IPv6 addresses. Bug noted
by Klara Mall.
* Fix double free in rlm_sql. Fixes #2180.
* rlm_detail now writes empty Access-Accept packets.
* rlm_python can now create tagged attributes.
* Don't crash on duplicate realm + authhost / accthost.
Bug found by Richard Palmer.
* Allow partial certificate chain to trusted CA. Fixes #2162
* Treat SSL_read() returning zero as error. Fixes #2164.
* detail writer now checks if the file was renamed or deleted.
* Add User-Name to Access-Accept if EAP-Message exists,
not Stripped-User-Name.
* RedHat Systemd updates. Fixes #2184
* Use correct API for State variable in rlm_securid.
* Remove broken radclient option "-i".
* Fix "users" file (and hints, etc). So that it does not
get confused about entry ordering with multiple $INCLUDEs.
* Fix rlm_sql to expand the un-escaped string, not the raw string.
* Link default and inner-tunnel only if they exist. Fixes #2206.
* Don't use both IP_PKTINFO and IP_SENDSRCADDR.
* Always install signal handler for SIGINT (needed by Docker).
* Fix intermediate CA flow for OCSP. Fixes #2160.
Intermediate certs which are not self-signed will now be
checked.
* sqlippool now returns "fail" if it fails IP allocation.
* Fix rlm_yubikey to look for correct attribute in replay
attack check.
21 lines
721 B
C
21 lines
721 B
C
$NetBSD: patch-src_lib_udpfromto.c,v 1.3 2018/09/25 12:16:36 jperkin Exp $
|
|
|
|
Only use IP_PKTINFO if the configure checks for the necessary members
|
|
passed. Use either IP_PKTINFO or IP_SENDSRCADDR, but not both.
|
|
|
|
--- src/lib/udpfromto.c.orig 2017-07-17 12:43:00.000000000 +0000
|
|
+++ src/lib/udpfromto.c
|
|
@@ -386,11 +386,11 @@ int sendfromto(int s, void *buf, size_t
|
|
msgh.msg_name = to;
|
|
msgh.msg_namelen = tolen;
|
|
|
|
-# if defined(IP_PKTINFO) || defined(IP_SENDSRCADDR)
|
|
+# if defined(HAVE_IP_PKTINFO) || defined(IP_SENDSRCADDR)
|
|
if (from->sa_family == AF_INET) {
|
|
struct sockaddr_in *s4 = (struct sockaddr_in *) from;
|
|
|
|
-# ifdef IP_PKTINFO
|
|
+# ifdef HAVE_IP_PKTINFO
|
|
struct cmsghdr *cmsg;
|
|
struct in_pktinfo *pkt;
|
|
|