![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / net / radiusd-cistron
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
radiusd-cistron: remove Upstream development stopped, recommended to switch to FreeRadius, in 2012.
Add SHA512 digests for distfiles for net category Problems found with existing digests: Package haproxy distfile haproxy-1.5.14.tar.gz 159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Problems found locating distfiles: Package bsddip: missing distfile bsddip-1.02.tar.Z Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2 Package djbdns: missing distfile djbdns-cachestats.patch Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch Package gated: missing distfile gated-3-5-11.tar.gz Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz Package poink: missing distfile poink-1.6.tar.gz Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch Package waste: missing distfile waste-source.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
DESTDIR support
Update radiusd-cistron to 1.6.8. pkgsrc changes: * add a patch to fix build problem with gcc4. Changes: radiusd-cistron (1.6.8) cistron; urgency=low * Allow Tunnel attributes to be proxied. * Change log() -> log_msg() everywhere to shut up GCC 3.x * free() authreq after receiving packet from unknow client * Add wildcard flag to realms file * Use wildmat for Realm = compares in users file * Fix an endianness bug in rad_check_multi (Simon Byrnand <simon@igrin.co.nz>)
Add DragonFly support. Fix errno.
Add RMD160 digests.
radiusd-cistron (1.6.7) cistron; urgency=medium
* Fix checkrad.pl::cisco_snmp and usrhiper_snmp so that communities
other than "public" can be used too.
* Error out on superflous command line args (optind >= argc)
* Encrypt CHAP-Password in radclient so that CHAP can be tested too
* Add "wildcard" option to realms - if you set this option, you can
match on the entire username using shell wildcards in the realms file.
* If the nastype in /etc/raddb/naslist is set to 'none' for a nas,
logins on that nas will have no simultaneous use restrictions imposed
and those logins will not count towards the total amount of logins.
* Removed 'raduse' and manpage.
* Can disable radutmp with "-u none" (likewise radwtmp with "-W none",
though we already had "-w" for that).
* Call checkrad with an extra argument, the framed IP address.
* Fix bug where $INCLUDEing a file without any records would
cause the rest of the original file to be ignored
* Support for 64-bit wide integers (integer8 type). If compiled with
gcc, users file can contain both hex and decimal 64-bit values,
and 64-bit values are printed in decimal. With other compilers
(no "long long" support) only hex 64-bit values are supported.
* Change "_" to "-" in dictionary.redback and change the 64 bits
values to integer8.
* Moved the dictionary files to /usr/local/share/radius. Now
only /etc/raddb/dictionary remains that $INCLUDES all the others.
For new installs only; existing installations won't be changed
* Make integer in the format string of sprintf(buf, "%03d:%.20s", ..) in
make_wtmp() unsigned (%u), otherwise the sprintf could in some cases
(negative NAS-Port, very long NAS-name) overrun the buffer by one
byte, overwriting the least significant byte of the return address
on the stack with a \0. Not sure if this is exploitable or not,
but it could be a security problem.
* Make sure ut.login (struct radutmp member) is treated everywhere
as a NON-zero terminated string.
* Make sure unsigned integers are used in all places using lvalues
(32 bits radius values), especially nas_port.
* radrelay: update id of packet when retransmitting.
* Print an error and free the request struct if we receive an unknown
packet type.
* rad_check_multi: if username/NAS/port match, don't count as dup.
Convert to use bsd.pkg.install.mk: - Honour PKG_SYSCONFDIR. - Use OWN_DIRS_PERMS to handle the /var/log/radacct directory. - Use RCD_SCRIPTS to install a NetBSD rc.d compatible script. Bump PKGREVISION to 1.
Update to 1.6.6 - vendor supplied fix for CERT announced radiusd issues.
Updated to 1.6.5. * Bug fixes * Clean up BSD password file support again * Fixed bug in auth.c wrt decoding of short password attributes. * Server now replies to Status-Server inquiries. * Add "-v" switch to radzap (suggested by Dan Harkless). * Add "-Z" switch to radiusd, prevents logging of passwords for -y (suggested by Dan Harkless). * Change "duplicate detected" message to actually show _what_ authentication packet causes the duplicate * Wrote manualpages for radlast,radzap, radwho, radclient, radtest, radwatch and raduse. Yes, documentation! * Added -P pidfile option to radiusd and radrelay See the doc/ChangeLog file for a comple list of changes!
Added radiusd-cistron which was submitted in pkg/13274.