pkgsrc/net/freeradius/config.mk
adam 69f39f18e9 freeradius: updated to 3.0.25
FreeRADIUS 3.0.25

Feature improvements
* Better debug output when proxying is disabled
* Updates to support PostgreSQL 14

Bug fixes
* Add `correct_escapes` back into default configuration
* Fix undeclared variable with some compile options
* Quiet erroneous debug output
* Fix segfault when proxying to zombie home server
* Fix resolving values to enum strings in rlm_rest
* Fix printing raw values rather than enum strings in rlm_couchbase


FreeRADIUS 3.0.24

Feature improvements
* Add sanitizer options to configure script.
* Log information needed by Wireshark to decode TLS sessions.
* Allow more liberal SQL commands in rlm_sql_map.
* Update dictionary.apc, dictionary.h3c
* Add new Acct-Status-Type Subsystem-On and Subsystem-Off.
  See dictionary.iana and
  https://freeradius.org/rfc/acct_status_type_subsystem.html
* Add reject_unknown_intermediate_ca.  See mods-available/eap
* Add dynamic loading of certificates via TLS-Session-Cert-File.
  See raddb/certs/realms/README.md
* Add Server Name Indication (SNI) for outbound RadSec connections.
  See raddb/sites-available/tls, and the home server tls configuration.
* Support SNI for inbound RadSec connections.  Certificates will
  be loaded from "realm_dir" in the "tls" section.  SNI will be
  cached in the TLS-Server-Name-Indication attribute.
* Preliminary support for haproxy "PROXY" protocol.
  See sites-available/tls, "proxy_protocol" and doc/antora/modules/howto/pages/protocols/proxy/
* Generate parse errors in more circumstances when we know that the
  configuration is wrong.
* Add "weeklycounter" to sample sqlcounter configuration
* Add certificate attributes to the request list, even if the certificates
  have expired.
* The Simultaneous-Use code is now IPv6 aware, and can deal with
  NAS-IPv6-Address.
* Add dictionary.cambium

Bug fixes
* Fix crash in trustrouter module. Patch from Alejandro Perez
* Fix crash in state handling.
* Don't alter global options in redhat logrotate scripts.
* EAP-FAST will print errors and continue, rather than exiting
  when OpenSSL fails various internal sanity checks.
* Allow admin to manually change core limits, even when core limits
  are disabled. Patch from Antonio Torres.
* Fix chunked rlm_rest HTTP body.
  Patch from Nathan Ward.
* Many fixes around the SQL ippool queries.conf and schema.
  Patches from Jorge Periera.
* Fix MySQL stored procedures.
* Rework connection pool management for corner cases.
* Final fix for double free.
* Fix sqlcounter wrong memory free.
* Accept slow writes from proxies over TCP, which allows the
  server to make more progress when it receives partial packets.
* Add 'weeklycounter' for rlm_sqlcounter.
* Outbound proxying over TCP / TLS is better able to deal with
  partial TCP reads, and has fewer issues with slow networks.
* Fix wrong data-type of Acct-Delay-Time in rlm_unix.
* Fix EAP-FAST PAC lifetime calculation.
* Print correct encoded packet length when debugging
2021-11-12 12:27:38 +00:00

296 lines
12 KiB
Makefile

# $NetBSD: config.mk,v 1.2 2021/11/12 12:27:38 adam Exp $
# cd ${WRKSRC}/raddb; find . -type f | sort | sed 's,^./,EGFILES+=\t,'
EGFILES+= certs/Makefile
EGFILES+= certs/README.md
EGFILES+= certs/bootstrap
EGFILES+= certs/ca.cnf
EGFILES+= certs/client.cnf
EGFILES+= certs/inner-server.cnf
EGFILES+= certs/server.cnf
EGFILES+= certs/xpextensions
EGFILES+= clients.conf
EGFILES+= dictionary
EGFILES+= experimental.conf
EGFILES+= mods-available/README.rst
EGFILES+= mods-available/abfab_psk_sql
EGFILES+= mods-available/always
EGFILES+= mods-available/attr_filter
EGFILES+= mods-available/cache
EGFILES+= mods-available/cache_eap
EGFILES+= mods-available/chap
EGFILES+= mods-available/couchbase
EGFILES+= mods-available/counter
EGFILES+= mods-available/cui
EGFILES+= mods-available/date
EGFILES+= mods-available/detail
EGFILES+= mods-available/detail.example.com
EGFILES+= mods-available/detail.log
EGFILES+= mods-available/dhcp
EGFILES+= mods-available/dhcp_files
EGFILES+= mods-available/dhcp_passwd
EGFILES+= mods-available/dhcp_sql
EGFILES+= mods-available/dhcp_sqlippool
EGFILES+= mods-available/digest
EGFILES+= mods-available/dynamic_clients
EGFILES+= mods-available/eap
EGFILES+= mods-available/echo
EGFILES+= mods-available/etc_group
EGFILES+= mods-available/exec
EGFILES+= mods-available/expiration
EGFILES+= mods-available/expr
EGFILES+= mods-available/files
EGFILES+= mods-available/idn
EGFILES+= mods-available/inner-eap
EGFILES+= mods-available/ippool
EGFILES+= mods-available/krb5
EGFILES+= mods-available/ldap
EGFILES+= mods-available/linelog
EGFILES+= mods-available/logintime
EGFILES+= mods-available/mac2ip
EGFILES+= mods-available/mac2vlan
EGFILES+= mods-available/moonshot-targeted-ids
EGFILES+= mods-available/mschap
EGFILES+= mods-available/ntlm_auth
EGFILES+= mods-available/opendirectory
EGFILES+= mods-available/otp
EGFILES+= mods-available/pam
EGFILES+= mods-available/pap
EGFILES+= mods-available/passwd
EGFILES+= mods-available/perl
EGFILES+= mods-available/preprocess
EGFILES+= mods-available/python
EGFILES+= mods-available/python3
EGFILES+= mods-available/radutmp
EGFILES+= mods-available/realm
EGFILES+= mods-available/redis
EGFILES+= mods-available/rediswho
EGFILES+= mods-available/replicate
EGFILES+= mods-available/rest
EGFILES+= mods-available/smbpasswd
EGFILES+= mods-available/smsotp
EGFILES+= mods-available/soh
EGFILES+= mods-available/sometimes
EGFILES+= mods-available/sql
EGFILES+= mods-available/sql_map
EGFILES+= mods-available/sqlcounter
EGFILES+= mods-available/sqlippool
EGFILES+= mods-available/sradutmp
EGFILES+= mods-available/totp
EGFILES+= mods-available/unbound
EGFILES+= mods-available/unix
EGFILES+= mods-available/unpack
EGFILES+= mods-available/utf8
EGFILES+= mods-available/wimax
EGFILES+= mods-available/yubikey
EGFILES+= mods-config/README.rst
EGFILES+= mods-config/attr_filter/access_challenge
EGFILES+= mods-config/attr_filter/access_reject
EGFILES+= mods-config/attr_filter/accounting_response
EGFILES+= mods-config/attr_filter/coa
EGFILES+= mods-config/attr_filter/post-proxy
EGFILES+= mods-config/attr_filter/pre-proxy
EGFILES+= mods-config/files/accounting
EGFILES+= mods-config/files/authorize
EGFILES+= mods-config/files/dhcp
EGFILES+= mods-config/files/pre-proxy
EGFILES+= mods-config/perl/example.pl
EGFILES+= mods-config/preprocess/hints
EGFILES+= mods-config/preprocess/huntgroups
EGFILES+= mods-config/sql/counter/mysql/dailycounter.conf
EGFILES+= mods-config/sql/counter/mysql/expire_on_login.conf
EGFILES+= mods-config/sql/counter/mysql/monthlycounter.conf
EGFILES+= mods-config/sql/counter/mysql/noresetcounter.conf
EGFILES+= mods-config/sql/counter/mysql/weeklycounter.conf
EGFILES+= mods-config/sql/counter/postgresql/dailycounter.conf
EGFILES+= mods-config/sql/counter/postgresql/expire_on_login.conf
EGFILES+= mods-config/sql/counter/postgresql/monthlycounter.conf
EGFILES+= mods-config/sql/counter/postgresql/noresetcounter.conf
EGFILES+= mods-config/sql/counter/postgresql/weeklycounter.conf
EGFILES+= mods-config/sql/counter/sqlite/dailycounter.conf
EGFILES+= mods-config/sql/counter/sqlite/expire_on_login.conf
EGFILES+= mods-config/sql/counter/sqlite/monthlycounter.conf
EGFILES+= mods-config/sql/counter/sqlite/noresetcounter.conf
EGFILES+= mods-config/sql/counter/sqlite/weeklycounter.conf
EGFILES+= mods-config/sql/cui/mysql/queries.conf
EGFILES+= mods-config/sql/cui/mysql/schema.sql
EGFILES+= mods-config/sql/cui/postgresql/queries.conf
EGFILES+= mods-config/sql/cui/postgresql/schema.sql
EGFILES+= mods-config/sql/cui/sqlite/queries.conf
EGFILES+= mods-config/sql/cui/sqlite/schema.sql
EGFILES+= mods-config/sql/dhcp/mssql/queries.conf
EGFILES+= mods-config/sql/dhcp/mssql/schema.sql
EGFILES+= mods-config/sql/dhcp/mysql/queries.conf
EGFILES+= mods-config/sql/dhcp/mysql/schema.sql
EGFILES+= mods-config/sql/dhcp/mysql/setup.sql
EGFILES+= mods-config/sql/dhcp/oracle/queries.conf
EGFILES+= mods-config/sql/dhcp/oracle/schema.sql
EGFILES+= mods-config/sql/dhcp/postgresql/queries.conf
EGFILES+= mods-config/sql/dhcp/postgresql/schema.sql
EGFILES+= mods-config/sql/dhcp/postgresql/setup.sql
EGFILES+= mods-config/sql/dhcp/sqlite/queries.conf
EGFILES+= mods-config/sql/dhcp/sqlite/schema.sql
EGFILES+= mods-config/sql/ippool-dhcp/mssql/procedure.sql
EGFILES+= mods-config/sql/ippool-dhcp/mssql/queries.conf
EGFILES+= mods-config/sql/ippool-dhcp/mssql/schema.sql
EGFILES+= mods-config/sql/ippool-dhcp/mysql/procedure-no-skip-locked.sql
EGFILES+= mods-config/sql/ippool-dhcp/mysql/procedure.sql
EGFILES+= mods-config/sql/ippool-dhcp/mysql/queries.conf
EGFILES+= mods-config/sql/ippool-dhcp/mysql/schema.sql
EGFILES+= mods-config/sql/ippool-dhcp/oracle/procedure.sql
EGFILES+= mods-config/sql/ippool-dhcp/oracle/queries.conf
EGFILES+= mods-config/sql/ippool-dhcp/oracle/schema.sql
EGFILES+= mods-config/sql/ippool-dhcp/postgresql/procedure.sql
EGFILES+= mods-config/sql/ippool-dhcp/postgresql/queries.conf
EGFILES+= mods-config/sql/ippool-dhcp/postgresql/schema.sql
EGFILES+= mods-config/sql/ippool-dhcp/sqlite/queries.conf
EGFILES+= mods-config/sql/ippool-dhcp/sqlite/schema.sql
EGFILES+= mods-config/sql/ippool/mongo/queries.conf
EGFILES+= mods-config/sql/ippool/mssql/procedure.sql
EGFILES+= mods-config/sql/ippool/mssql/queries.conf
EGFILES+= mods-config/sql/ippool/mssql/schema.sql
EGFILES+= mods-config/sql/ippool/mysql/procedure-no-skip-locked.sql
EGFILES+= mods-config/sql/ippool/mysql/procedure.sql
EGFILES+= mods-config/sql/ippool/mysql/queries.conf
EGFILES+= mods-config/sql/ippool/mysql/schema.sql
EGFILES+= mods-config/sql/ippool/oracle/procedure.sql
EGFILES+= mods-config/sql/ippool/oracle/queries.conf
EGFILES+= mods-config/sql/ippool/oracle/schema.sql
EGFILES+= mods-config/sql/ippool/postgresql/procedure.sql
EGFILES+= mods-config/sql/ippool/postgresql/queries.conf
EGFILES+= mods-config/sql/ippool/postgresql/schema.sql
EGFILES+= mods-config/sql/ippool/sqlite/queries.conf
EGFILES+= mods-config/sql/ippool/sqlite/schema.sql
EGFILES+= mods-config/sql/main/mongo/queries.conf
EGFILES+= mods-config/sql/main/mssql/process-radacct.sql
EGFILES+= mods-config/sql/main/mssql/queries.conf
EGFILES+= mods-config/sql/main/mssql/schema.sql
EGFILES+= mods-config/sql/main/mysql/extras/wimax/queries.conf
EGFILES+= mods-config/sql/main/mysql/extras/wimax/schema.sql
EGFILES+= mods-config/sql/main/mysql/process-radacct.sql
EGFILES+= mods-config/sql/main/mysql/queries.conf
EGFILES+= mods-config/sql/main/mysql/schema.sql
EGFILES+= mods-config/sql/main/mysql/setup.sql
EGFILES+= mods-config/sql/main/ndb/README
EGFILES+= mods-config/sql/main/ndb/schema.sql
EGFILES+= mods-config/sql/main/ndb/setup.sql
EGFILES+= mods-config/sql/main/oracle/process-radacct.sql
EGFILES+= mods-config/sql/main/oracle/queries.conf
EGFILES+= mods-config/sql/main/oracle/schema.sql
EGFILES+= mods-config/sql/main/postgresql/extras/cisco_h323_db_schema.sql
EGFILES+= mods-config/sql/main/postgresql/extras/voip-postpaid.conf
EGFILES+= mods-config/sql/main/postgresql/process-radacct.sql
EGFILES+= mods-config/sql/main/postgresql/queries.conf
EGFILES+= mods-config/sql/main/postgresql/schema.sql
EGFILES+= mods-config/sql/main/postgresql/setup.sql
EGFILES+= mods-config/sql/main/sqlite/process-radacct-refresh.sh
EGFILES+= mods-config/sql/main/sqlite/process-radacct-schema.sql
EGFILES+= mods-config/sql/main/sqlite/queries.conf
EGFILES+= mods-config/sql/main/sqlite/schema.sql
EGFILES+= mods-config/sql/moonshot-targeted-ids/mysql/queries.conf
EGFILES+= mods-config/sql/moonshot-targeted-ids/mysql/schema.sql
EGFILES+= mods-config/sql/moonshot-targeted-ids/postgresql/queries.conf
EGFILES+= mods-config/sql/moonshot-targeted-ids/postgresql/schema.sql
EGFILES+= mods-config/sql/moonshot-targeted-ids/sqlite/queries.conf
EGFILES+= mods-config/sql/moonshot-targeted-ids/sqlite/schema.sql
EGFILES+= mods-config/unbound/default.conf
EGFILES+= panic.gdb
EGFILES+= policy.d/abfab-tr
EGFILES+= policy.d/accounting
EGFILES+= policy.d/canonicalization
EGFILES+= policy.d/control
EGFILES+= policy.d/cui
EGFILES+= policy.d/debug
EGFILES+= policy.d/dhcp
EGFILES+= policy.d/eap
EGFILES+= policy.d/filter
EGFILES+= policy.d/moonshot-targeted-ids
EGFILES+= policy.d/operator-name
EGFILES+= policy.d/rfc7542
EGFILES+= proxy.conf
EGFILES+= radiusd.conf
EGFILES+= sites-available/README
EGFILES+= sites-available/abfab-tls
EGFILES+= sites-available/abfab-tr-idp
EGFILES+= sites-available/buffered-sql
EGFILES+= sites-available/challenge
EGFILES+= sites-available/channel_bindings
EGFILES+= sites-available/check-eap-tls
EGFILES+= sites-available/coa
EGFILES+= sites-available/coa-relay
EGFILES+= sites-available/control-socket
EGFILES+= sites-available/copy-acct-to-home-server
EGFILES+= sites-available/decoupled-accounting
EGFILES+= sites-available/default
EGFILES+= sites-available/dhcp
EGFILES+= sites-available/dhcp.relay
EGFILES+= sites-available/dynamic-clients
EGFILES+= sites-available/example
EGFILES+= sites-available/inner-tunnel
EGFILES+= sites-available/originate-coa
EGFILES+= sites-available/proxy-inner-tunnel
EGFILES+= sites-available/resource-check
EGFILES+= sites-available/robust-proxy-accounting
EGFILES+= sites-available/soh
EGFILES+= sites-available/status
EGFILES+= sites-available/tls
EGFILES+= sites-available/totp
EGFILES+= sites-available/virtual.example.com
EGFILES+= sites-available/vmps
EGFILES+= templates.conf
EGFILES+= trigger.conf
# cd ${WRKSRC}/raddb; find . -type d | sort | sed 's,^./,EGDIRS+=\t,'
EGDIRS+= certs
EGDIRS+= mods-available
EGDIRS+= mods-config
EGDIRS+= mods-config/attr_filter
EGDIRS+= mods-config/files
EGDIRS+= mods-config/perl
EGDIRS+= mods-config/preprocess
EGDIRS+= mods-config/sql
EGDIRS+= mods-config/sql/counter
EGDIRS+= mods-config/sql/counter/mysql
EGDIRS+= mods-config/sql/counter/postgresql
EGDIRS+= mods-config/sql/counter/sqlite
EGDIRS+= mods-config/sql/cui
EGDIRS+= mods-config/sql/cui/mysql
EGDIRS+= mods-config/sql/cui/postgresql
EGDIRS+= mods-config/sql/cui/sqlite
EGDIRS+= mods-config/sql/dhcp
EGDIRS+= mods-config/sql/dhcp/mssql
EGDIRS+= mods-config/sql/dhcp/mysql
EGDIRS+= mods-config/sql/dhcp/oracle
EGDIRS+= mods-config/sql/dhcp/postgresql
EGDIRS+= mods-config/sql/dhcp/sqlite
EGDIRS+= mods-config/sql/ippool
EGDIRS+= mods-config/sql/ippool-dhcp
EGDIRS+= mods-config/sql/ippool-dhcp/mssql
EGDIRS+= mods-config/sql/ippool-dhcp/mysql
EGDIRS+= mods-config/sql/ippool-dhcp/oracle
EGDIRS+= mods-config/sql/ippool-dhcp/postgresql
EGDIRS+= mods-config/sql/ippool-dhcp/sqlite
EGDIRS+= mods-config/sql/ippool/mongo
EGDIRS+= mods-config/sql/ippool/mssql
EGDIRS+= mods-config/sql/ippool/mysql
EGDIRS+= mods-config/sql/ippool/oracle
EGDIRS+= mods-config/sql/ippool/postgresql
EGDIRS+= mods-config/sql/ippool/sqlite
EGDIRS+= mods-config/sql/main
EGDIRS+= mods-config/sql/main/mongo
EGDIRS+= mods-config/sql/main/mssql
EGDIRS+= mods-config/sql/main/mysql
EGDIRS+= mods-config/sql/main/mysql/extras
EGDIRS+= mods-config/sql/main/mysql/extras/wimax
EGDIRS+= mods-config/sql/main/ndb
EGDIRS+= mods-config/sql/main/oracle
EGDIRS+= mods-config/sql/main/postgresql
EGDIRS+= mods-config/sql/main/postgresql/extras
EGDIRS+= mods-config/sql/main/sqlite
EGDIRS+= mods-config/sql/moonshot-targeted-ids
EGDIRS+= mods-config/sql/moonshot-targeted-ids/mysql
EGDIRS+= mods-config/sql/moonshot-targeted-ids/postgresql
EGDIRS+= mods-config/sql/moonshot-targeted-ids/sqlite
EGDIRS+= mods-config/unbound
EGDIRS+= policy.d
EGDIRS+= sites-available