1591ab9a16
- Feature improvements
* Print more descriptive error message for too many EAP sessions.
This gives hints on what to do when "failed to store handler"
* Commands received from radmin are now printed on stdout when
in debugging mode.
* Allow accounting packets to be written to a detail file, even
if they were read from a different detail file.
* Added OpenSSL license exception (src/LICENSE.openssl)
- Bug fixes
* DHCP sockets can now set the broadcast flag before binding to a
socket. You need to set "broadcast = yes" in the DHCP listener.
* Be more restrictive on string parsing in the config files
* Fix password length in scripts/create-users.pl
* Be more flexible about parsing the detail file. This allows
it to read files where the attributes have been edited.
* Ensure that requests read from the detail file are cleaned up
(i.e. don't leak) if they are proxied without a response.
* Write the PID file after opening sockets, not before
(closes bug #29)
* Proxying large numbers of packets no longer gives error
"unable to open proxy socket".
* Avoid mutex locks in libc after fork
* Retry packet from detail file if there was no response.
* Allow old-style dictionary formats, where the vendor name is the
last field in an ATTRIBUTE definition.
* Removed all recursive use of mutexes. Some systems just don't
support this.
* Allow !* to work as documented.
* make templates work (see templates.conf)
* Enabled "allow_core_dumps" to work again
* Print better errors when reading invalid dictionaries
* Sign client certificates with CA, rather than server certs.
* Fix potential crash in rlm_passwd when file was closed
* Fixed corner cases in conditional dynamic expansion.
* Use InnoDB for MySQL IP Pools, to gain transactional support
* Apply patch to libltdl for CVE-2009-3736.
* Fixed a few issues found by LLVM's static checker
* Keep track of "bad authenticators" for accounting packets
* Keep track of "dropped packets" for auth/acct packets
* Synced the "debian" directory with upstream
* Made "unlang" use unsigned 32-bit integers, to match the
dictionaries.
While here fix broken user destination directory installation as well.
147 lines
3.4 KiB
Makefile
147 lines
3.4 KiB
Makefile
# $NetBSD: options.mk,v 1.4 2010/05/23 17:28:44 tron Exp $
|
|
|
|
PKG_OPTIONS_VAR= PKG_OPTIONS.freeradius
|
|
PKG_SUPPORTED_OPTIONS= freeradius-simul-use kerberos ldap mysql
|
|
PKG_SUPPORTED_OPTIONS+= pam perl pgsql snmp
|
|
PKG_OPTIONS_OPTIONAL_GROUPS= dbm odbc
|
|
PKG_OPTIONS_GROUP.dbm= bdb gdbm
|
|
PKG_OPTIONS_GROUP.odbc= iodbc unixodbc
|
|
PKG_SUGGESTED_OPTIONS= freeradius-simul-use gdbm
|
|
|
|
.include "../../mk/bsd.options.mk"
|
|
|
|
PLIST_VARS+= dbm gdbm iodbc ldap kerberos mysql pam pgsql unixodbc perl
|
|
|
|
###
|
|
### GDBM or Berkeley DB 1.x support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mgdbm)
|
|
. include "../../databases/gdbm/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_dbm
|
|
PLIST.dbm= yes
|
|
PLIST.gdbm= yes
|
|
.elif !empty(PKG_OPTIONS:Mbdb) && exists(/usr/include/ndbm.h)
|
|
BDB_ACCEPTED= db1
|
|
. include "../../mk/bdb.buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_dbm
|
|
PLIST.dbm= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_dbm
|
|
.endif
|
|
|
|
###
|
|
### PERL support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mperl)
|
|
. include "../../lang/perl5/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_perl
|
|
PLIST.perl= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_perl
|
|
.endif
|
|
|
|
###
|
|
### OpenLDAP support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mldap)
|
|
. include "../../databases/openldap-client/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_ldap
|
|
PLIST.ldap= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_ldap
|
|
.endif
|
|
|
|
###
|
|
### IODBC support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Miodbc)
|
|
. include "../../databases/iodbc/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_sql_iodbc
|
|
PLIST.iodbc= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_sql_iodbc
|
|
.endif
|
|
|
|
###
|
|
### UnixDBC support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Munixodbc)
|
|
. include "../../databases/unixodbc/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_sql_unixodbc
|
|
PLIST.unixodbc= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_sql_unixodbc
|
|
.endif
|
|
|
|
###
|
|
### PostgreSQL support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mpgsql)
|
|
. include "../../mk/pgsql.buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_sql_postgresql
|
|
PLIST.pgsql= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_sql_postgresql
|
|
.endif
|
|
|
|
###
|
|
### MySQL support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mmysql)
|
|
. include "../../mk/mysql.buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_sql_mysql
|
|
PLIST.mysql= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_sql_mysql
|
|
.endif
|
|
|
|
###
|
|
### SNMP support
|
|
###
|
|
### Please note that snmp support is limited. Freeradius looks like it's
|
|
### after the old ucd-snmp (v4.x) headers and ucd-snmp isn't in pkgsrc any
|
|
### more. Compatability mode on the current net-snmp (v5.x) does not seem
|
|
### to work either. So it will find a few snmp utilites but other than that
|
|
### it's limited, at best.
|
|
###
|
|
.if !empty(PKG_OPTIONS:Msnmp)
|
|
. include "../../net/net-snmp/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-snmp
|
|
.else
|
|
CONFIGURE_ARGS+= --without-snmp
|
|
.endif
|
|
|
|
###
|
|
### Kerberos 5 support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mkerberos)
|
|
. include "../../mk/krb5.buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-rlm_krb5
|
|
. if defined(KRB5_TYPE) && ${KRB5_TYPE} == "heimdal"
|
|
CONFIGURE_ARGS+= --enable-heimdal-krb5
|
|
. endif
|
|
PLIST.kerberos= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_krb5
|
|
.endif
|
|
|
|
###
|
|
### Enable Simultaneous-Use which needs snmpwalk and snmpget
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mfreeradius-simul-use)
|
|
. include "../../net/net-snmp/buildlink3.mk"
|
|
.else
|
|
CONFIGURE_ENV+= ac_cv_path_SNMPGET=""
|
|
CONFIGURE_ENV+= ac_cv_path_SNMPWALK=""
|
|
.endif
|
|
|
|
###
|
|
### PAM support
|
|
###
|
|
.if !empty(PKG_OPTIONS:Mpam)
|
|
CONFIGURE_ARGS+= --with-rlm_pam
|
|
MESSAGE_SRC+= ${WRKDIR}/.MESSAGE_SRC.pam
|
|
PLIST.pam= yes
|
|
.else
|
|
CONFIGURE_ARGS+= --without-rlm_pam
|
|
.endif
|