Path to this page:
./
net/freeradius,
Free RADIUS server implementation
Branch: CURRENT,
Version: 3.2.5nb4,
Package name: freeradius-3.2.5nb4,
Maintainer: pkgsrc-usersFreeRADIUS is the most widely deployed RADIUS server in the world.
It is the basis for multiple commercial offerings.
DEINSTALL [+/-]# $NetBSD: DEINSTALL,v 1.5 2023/04/05 09:16:42 adam Exp $
#
# Remove default symlinks in ${PKG_SYSCONFDIR} for enabled modules/sites
#
SITES_ENABLED="default inner-tunnel"
MODS_ENABLED="always attr_filter chap date detail detail.log
digest dynamic_clients eap echo exec expiration expr
files linelog logintime mschap ntlm_auth pap passwd preprocess
radutmp realm replicate soh sradutmp totp unix unpack utf8"
case ${STAGE} in
DEINSTALL)
${ECHO} "Removing default modules and sites"
for s in ${SITES_ENABLED}; do
${RM} -f @PKG_SYSCONFDIR@/sites-enabled/${s}
done
for m in ${MODS_ENABLED}; do
${RM} -f @PKG_SYSCONFDIR@/mods-enabled/${m}
done
${RMDIR} @PKG_SYSCONFDIR@/sites-enabled
${RMDIR} @PKG_SYSCONFDIR@/mods-enabled
${RM} @PKG_SYSCONFDIR@/hints
${RM} @PKG_SYSCONFDIR@/huntgroups
${RM} @PKG_SYSCONFDIR@/users
;;
esac
MESSAGE.pam [+/-]===========================================================================
$NetBSD: MESSAGE.pam,v 1.2 2006/08/11 16:23:39 adrianp Exp $
Certain PAM modules require that radiusd run as root in order to
perform privileged operations. However, other PAM modules (e.g. pam-dbm),
will work with with radiusd running as non-root if the non-root user is
given the permissions necessary.
If you will be using a PAM module that requires radiusd to run as root
you can set the following in /etc/mk.conf:
RADIUS_USER=root
RADIUS_GROUP=wheel
And then re-install freeradius. Alternatively, you can just change the
following settings in your ${PKG_SYSCONFDIR}/radiusd.conf
user = root
group = wheel
===========================================================================
Required to run:[
databases/gdbm] [
security/openssl] [
devel/talloc]
Required to build:[
pkgtools/cwrappers]
Master sites:
Filesize: 3416.943 KB
Version history: (Expand)
- (2024-12-18) Updated to version: freeradius-3.2.5nb4
- (2024-11-15) Updated to version: freeradius-3.2.5nb3
- (2024-11-01) Updated to version: freeradius-3.2.5nb2
- (2024-11-01) Updated to version: freeradius-3.2.5nb1
- (2024-07-24) Updated to version: freeradius-3.2.5
- (2024-06-19) Updated to version: freeradius-3.2.4
CVS history: (Expand)
2024-12-18 11:58:04 by Niclas Rosenvik | Files touched by this commit (15) |
Log message:
revbump due to devel/talloc dependency changes
|
2024-11-14 23:22:33 by Thomas Klausner | Files touched by this commit (2429) |
Log message:
*: recursive bump for icu 76 shlib major version bump
|
2024-11-01 13:55:19 by Thomas Klausner | Files touched by this commit (2426) |
Log message:
*: revbump for icu downgrade
|
2024-11-01 01:54:33 by Thomas Klausner | Files touched by this commit (2427) |
Log message:
*: recursive bump for icu 76.1 shlib bump
|
2024-06-19 10:46:34 by Adam Ciarcinski | Files touched by this commit (11) | |
Log message:
freeradius: updated to 3.2.4
3.2.4
Configuration changes
Better handle backslashes in strings in the configuration files. If the \
configuration items contain backslashes, then behavior may change. However, the \
previous behavior didn't work as expected, and therefore is not likely to be \
used.
reject_delay no longer applies to proxied packets. All servers should now set \
reject_delay = 1 for security and scalability.
%{randstr:...} now returns the requested amount of data, instead of one too many \
bytes.
Feature improvements
Preliminary support for TEAP.
Update EAP module pre_proxy checks to make them less restrictive. This prevents \
the "middle box" effect from affecting future traffic.
Many fixes and updates for Docker images
Add dpsk module. See mods-available/dpsk
Print out what cause the TLS operations to be made, such as the EAP method name \
(peap, ttls, etc), or RADIUS/TLS listen / proxy socket.
Add auto_escape to sample SQL module config
Add 'if not exists' to mysql create table queries.
Update dictionary.aruba; add dictionary.tplink, dictionary.alphion
Allow for encrypt=1 attributes to be longer than 128 characters.
Added radsecret program which generates strong secrets. See the top of the \
clients.conf file for more information.
radclient now prints packets as hex when using -xxx.
Added -t timeout to radsniff. It will stop processing packets after seconds.
Support interface = ... on OSX and other *BSD which have IP_BOUND_IF.
The detail module now has a dates_as_integer configuration item. See \
mods-available/detail for more information.
Add lookback/lookforward steps and more configuration to totp. See \
mods-available/totp.
Add time_since xlat to calculate elapsed time in seconds, milliseconds and \
microseconds.
Support "Post-Auth-Type Challenge" in the inner tunnel. Patch from \
Alexander Clouter.
Add "proxy_dedup_window". See radiusd.conf.
Document KRB5_CLIENT_KTNAME in the "env" section of radiusd.conf.
Add dedup_key for misbehaving supplicants. See mods-available/eap
Bug fixes
Fix corner case with empty defaults in rlm_files.
When we have multiple attributes of the same name, always use the canonical attribute
Make FreeRADIUS-Server-EMA* attributes work again for home server exponential \
moving average statistics.
Don't send the global server stats when asked for client stats. They use the \
same attributes, so the result is confusing.
Fix multiple typos in MongoDB query.conf
Add define for illumos.
Add client configuration for TLS PSK.
Permit originate CoA after proxying to an internal virtual server
Use virtual server default when passed -i and -p on the command line.
Fix locking issues with rlm_python3.
The detail file reader will catch bad times in the file, and will not update \
Acct-Delay-Time with extreme values.
Fix issue where Message-Authenticator was calculated incorrectly for CoA / \
Disconnect ACK and NAK packets.
Update Python thread and error handling.
Fix handling of Session-State when proxying.
Run relevant post-proxy Fail-* section on CoA / Disconnect timeout.
Add limit section to AWS health check configurtion. Fixes 35300.
Use MAX in sqlite queries instead of GREATEST.
Fix typo in Mongo queries.
Fix occasional crash with bad home servers.
Minor bug fixes to the SQL freetds modules.
Fix blocking issue with RADIUS/TLS connection checks.
Fix run-time crash on configuration typos of %{substr ...} instead of %{substr:...}
Fix crash with TLS Status-Server requests.
|
2024-05-29 18:35:19 by Adam Ciarcinski | Files touched by this commit (1929) | |
Log message:
revbump after icu and protobuf updates
|
2024-01-12 15:30:12 by Jonathan Perkin | Files touched by this commit (1) |
Log message:
freeradius: Remove DEPMETHOD=build for dependencies.
The modules already have a full dependency on freeradius, which in turn has
a full dependency on all of these dependencies, so this does nothing but
cause indirect library dependency issues.
|
2023-11-08 14:21:43 by Thomas Klausner | Files touched by this commit (2377) |
Log message:
*: recursive bump for icu 74.1
|