2010-05-29 13:47:37 by OBATA Akio | Files touched by this commit (1) |
Log message:
Need pcap to build RADIUS sniffer, so need to buildlink with net/libpcap.
Noticed by Daniel Vergien via PR#43382.
|
2010-05-23 19:28:45 by Matthias Scheler | Files touched by this commit (4) |
Log message:
Update "freeradius2" package to version 2.1.8. Changes since version 2.1.7:
- Feature improvements
* Print more descriptive error message for too many EAP sessions.
This gives hints on what to do when "failed to store handler"
* Commands received from radmin are now printed on stdout when
in debugging mode.
* Allow accounting packets to be written to a detail file, even
if they were read from a different detail file.
* Added OpenSSL license exception (src/LICENSE.openssl)
- Bug fixes
* DHCP sockets can now set the broadcast flag before binding to a
socket. You need to set "broadcast = yes" in the DHCP listener.
* Be more restrictive on string parsing in the config files
* Fix password length in scripts/create-users.pl
* Be more flexible about parsing the detail file. This allows
it to read files where the attributes have been edited.
* Ensure that requests read from the detail file are cleaned up
(i.e. don't leak) if they are proxied without a response.
* Write the PID file after opening sockets, not before
(closes bug #29)
* Proxying large numbers of packets no longer gives error
"unable to open proxy socket".
* Avoid mutex locks in libc after fork
* Retry packet from detail file if there was no response.
* Allow old-style dictionary formats, where the vendor name is the
last field in an ATTRIBUTE definition.
* Removed all recursive use of mutexes. Some systems just don't
support this.
* Allow !* to work as documented.
* make templates work (see templates.conf)
* Enabled "allow_core_dumps" to work again
* Print better errors when reading invalid dictionaries
* Sign client certificates with CA, rather than server certs.
* Fix potential crash in rlm_passwd when file was closed
* Fixed corner cases in conditional dynamic expansion.
* Use InnoDB for MySQL IP Pools, to gain transactional support
* Apply patch to libltdl for CVE-2009-3736.
* Fixed a few issues found by LLVM's static checker
* Keep track of "bad authenticators" for accounting packets
* Keep track of "dropped packets" for auth/acct packets
* Synced the "debian" directory with upstream
* Made "unlang" use unsigned 32-bit integers, to match the
dictionaries.
While here fix broken user destination directory installation as well.
|
2010-01-17 13:02:58 by Thomas Klausner | Files touched by this commit (724) | |
Log message:
Recursive PKGREVISION bump for jpeg update to 8.
|
2009-12-21 21:34:06 by Joerg Sonnenberger | Files touched by this commit (11) | |
Log message:
Bump revisions for libltdl update.
|
2009-10-11 11:18:25 by Adam Ciarcinski | Files touched by this commit (5) |
Log message:
Changes 2.1.7:
* Full support for CoA and Disconnect packets as per RFC 3576 and RFC 5176.
Both receiving and proxying packets is supported.
* Added "src_ipaddr" configuration to "home_server". See \
proxy.conf for details.
* radsniff now accepts -I, to read from a filename instead of a device.
* radsniff also prints matching requests and any responses to those requests
when '-r' is used.
* Added example of attr_filter for Access-Challenge packets
* Added support for udpfromto in DHCP code
* radmin can now selectively mark modules alive/dead. See "set module \
state".
* Added customizable messages on login success/fail.
* Document "chase_referrals" and "rebind" in raddb/modules/ldap
* Preliminary implementation of DHCP relay.
* Made thread pool section optional. If it doesn't exist, the server will run
single-threaded.
* More...
|
2009-09-29 11:34:09 by Adam Ciarcinski | Files touched by this commit (2) |
Log message:
Added "perl" as an option to fix PR#42064
|
2009-07-17 20:00:26 by Adrian Portelli | Files touched by this commit (126) |
Log message:
Give up MAINTAINER
|
2009-06-14 20:09:49 by Joerg Sonnenberger | Files touched by this commit (291) |
Log message:
Remove @dirrm entries from PLISTs
|
2009-05-28 08:00:38 by Adam Ciarcinski | Files touched by this commit (6) |
Log message:
Changes 2.1.6:
* radclient exits with 0 on successful (accept / ack), and 1 otherwise
(no response / reject)
* Added support for %{sql:UPDATE ..}, and insert/delete
* Added sample "do not respond" policy
* New VSAs for Juniper from Bjorn Mork
* Include more RFC dictionaries in the default install
* More documentation for the WiMAX module
* Added "chase_referrals" and "rebind" configuration to rlm_ldap
* Don't load pre/post-proxy if proxying is disabled
* Added %{md5:...}, which returns MD5 hash in hex
* Added configurable "retry_interval" and "poll_interval" \
for "detail"
listeners.
* Added "delete_mppe_keys" configuration option to rlm_wimax.
Apparently some WiMAX clients misbehave when they see those keys.
* Added experimental rlm_ruby
* Add Tunnel attributes to ldap.attrmap
* Enable virtual servers to be reloaded on HUP
* Updated "radwatch" script to be more robust
* Added certificate compatibility notes in raddb/certs/README, for
compatibility with different operating systems. (i.e. Windows)
* Bug Fixes
|
2009-04-23 20:27:28 by Adam Ciarcinski | Files touched by this commit (2) |
Log message:
FreeRADIUS 2.1.4 Tue Mar 10 17:05:00 CEST 2009; , urgency=medium
* Permit multiple "-e" in radmin.
* Add support for originating CoA-Request and Disconnect-Request.
See raddb/sites-available/originate-coa.
* Added "lifetime" and "max_queries" to raddb/sql.conf.
This helps address the problem of hung SQL sockets.
* Allow packets to be injected via radmin. See "inject help" in radmin.
* Answer VMPS reconfirmation request.
* Sample logrotate script in scripts/logrotate.freeradius
* Add configurable poll interval for "detail" listeners
* New "raddebug" command. This prints debugging information from
a running server.
* Add "require_message_authenticator" configuration to home_server
configuration. This makes the server add Message-Authenticator
to all outgoing Access-Request packets.
* Added smsotp module.
* Enabled the administration socket in the default install.
See raddb/sites-available/control-socket, and "man radmin"
* Handle duplicate clients, such as with replicated or
load-balanced SQL servers and "readclients = yes"
* Bug fixes
|