Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2021-07-01 07:05:49
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new.2625 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "freeradius-server"
Thu Jul 1 07:05:49 2021 rev:86 rq:903262 version:3.0.23
Changes:
--------
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2021-01-04 19:09:44.819412095 +0100
+++
/work/SRC/openSUSE:Factory/.freeradius-server.new.2625/freeradius-server.changes
2021-07-01 07:06:12.075211424 +0200
@@ -1,0 +2,119 @@
+Sun Jun 27 15:43:02 UTC 2021 - Ferdinand Thiessen <[email protected]>
+
+- Add ldap-schemas subpackage for OpenLDAP radius schemas
+- Add freeradius-server-fix-perl-shbang.patch to fix RPMlint warnings
+- Fix RPMlint warnings about macros and permissions
+
+-------------------------------------------------------------------
+Sat Jun 26 21:12:24 UTC 2021 - Ferdinand Thiessen <[email protected]>
+
+- Update to version 3.0.23
+ * Feature improvements
+ * Add "set home_server state ... down" in order to mark the home
+ server as administratively down. Use "alive" to bring it back
+ to life.
+ * Add Post-Auth-Type "Client-Lost" which should make it easier
+ to log when clients stop responding.
+ * Cache TLS messages in &session-state, for more debugging.
+ * Notes in eap configuration about TLS 1.0 / TLS 1.1, and setting
+ cipher_list = "DEFAULT@SECLEVEL=1"
+ * Added MANY warning messages about using TLS 1.3 with EAP.
+ * Bug fixes
+ * Fix crash in some cases when home server is down, in debug mode.
+ * Fix (again) "read clients from SQL" functionality.
+ * Fix sql_map to return values in more situations.
+ * Silently ignore LEAP configuration instead of erroring out.
+- Update to version 3.0.22
+ * Feature improvements
+ * Limited support for dynamic home servers.
+ * Add support for prepend operator ^=.
+ * Added rlm_totp, for use with the Google Authenticator app.
+ * The default minimum TLS version is now TLS 1.2, as per RFC 8996.
+ Older versions can be allowed by setting tls_min_version, and
+ updating "cipher_list".
+ * Significantly improve the readability and contents of TLS
+ debug messages.
+ * Allow CoA and Disconnect messages over TLS sockets.
+ * Automatically set fragment size / MTU, so that PEAP/EAP-TLS
+ works, and no longer requires manual changes to the configuration.
+ * Allow "configurable_client_cert=yes" for EAP-TLS.
+ * Add TLS 1.2 support for EAP-Fast.
+ * Add ca_path_reload_interval option for tls.
+ * Add "tls_min_version" to ldap module configuration.
+ * Support running policies when receiving a RadSec connection.
+ * Update TLS "ecdh_curve" code to allow for multiple curves.
+ * Allow delta CRLs.
+ * add rlm_sql_map, which can handle multiple columns from an SQL
+ query. See raddb/mods-available/sql_map.
+ * New xlat for setting status of rlm_always instances and new
+ resource-check example virtual server for manipulating control flow
+ in unlang policies based on status of some external resource.
+ Patches from Terry Burton.
+ * Update radmin to show more information about the home servers
+ using "show home_server list all".
+ * The default configuration now replies with EAP-Key-Name, if it
+ is available, and was requested.
+ * Include extensions in generated certificates.
+ * Ignore user-provided dhparams in FIPS mode.
+ * Remove native support for Cisco LEAP. It is insecure, and
+ should not be used. Proxying LEAP is still supported.
+ * Allow use of password preparation methods with rlm_eap_pwd.
+ * More RFC compliance for various corner cases of DHCP,
+ * Use DHCP-specific schemas.
+ * Add stored procedures for DHCP lease allocation
+ * Add support for DHCP-Decline.
+ * Added mods-available/dhcp_sql which is a DHCP-specific instance
+ of the SQL module.
+ * Treat DHCP Discover and Request differently for lease allocation times.
+ * Add support for PBKDF2 keys.
+ * Update default PostgreSQL schema to use "text" instead of
+ a fixed-size "varchar".
+ * Add radmin command "show client list verbose", which gives a lot
+ more information about each client.
+ * Add support for EAPS-AKA authentication to rlm_wimax.
+ * Add rlm_rest support for HTTP/2.
+ * Add REST-HTTP-Status-Code attribute holding HTTP status code.
+ * Add option to set http_negotiation in rlm_rest. Fixes #2821.
+ * Encode / decode NAS-Filter-Rule according to RFC 4849.
+ * Allow attributes using old names in configuration files, SQL,
+ or modules to match attributes in the packet which use
+ new names.
+ * Allow querying IPv6 stats via FreeRADIUS-Stats-Client-IPv6-Address
+ and FreeRADIUS-Stats-Server-IPv6-Address
+ * Add warnings if there is no "real" User-Name to identify users.
+ * Add sample configuration to update Stripped-User-Name and/or
+ Class for user sessions. See sites-available/default
+ * Add configuration to suppress printing values for User-Name, etc.
+ * Support dictionary.telrad, which is also in WiMAX format.
+ * PEAP 'proxy_tunneled_request_as_eap' is now configurable
+ at runtime with Proxy-Tunneled-Request-As-EAP.
+ * Debug output now lists client/server proposed TLS ciphers.
+ * Add support for TLS1.3
+ * Bug fixes
+ * Fix long-term double free due to PCRE calling our "free"
+ function twice.
+ * Respect the "log_reject" configuration item in more places.
+ * Run Post-Proxy-Type Fail... when all home servers are down.
+ * Note that rlm_replicate can only use UDP, and not TCP or TLS.
+ * DHCP pool lookup is now keyed by Client Identifier (Option 61)
+ when supplied by client, otherwise the hardware address is used.
+ Compliant with RFC 2132. This change will not affect existing
+ systems on upgrade, but new installations will use the new behavior.
+ * Don't print invalid tags in rlm_cache, among other places.
+ * Do home_server failover immediately when an initial TCP / Radsec
+ connection fails.
+ * Clear error on SQLITE_BUSY to prevent memory leak in corner cases.
+ * Properly add SQL clients to virtual servers.
+ * Use better API when decoding DHCP packets, to avoid unnecessary work.
+ * Parse locale-dependent dates.
+ * Fix radiusd.conf ENV LD_PRELOAD function.
+ * Make the "date" module handle UTC more consistently.
+ * Check for, and complain about, inconsistent use of tls_min_version
+ versus disable_tlsv1
+ * Fix "read client from SQL" code so that it properly ties clients
+ to a virtual server. Also document the behavior.
+ * Fix leak with unknown attributes in detail reader.
+ * Fix parenting issues in rlm_yubikey.
+- Drop __DATE__ __TIME__ fixes, implicitly done with source_date_epoch
+ variable supported by gcc >= 7
+-------------------------------------------------------------------
Old:
----
freeradius-server-3.0.21.tar.bz2
freeradius-server-3.0.21.tar.bz2.sig
New:
----
freeradius-server-3.0.23.tar.bz2
freeradius-server-3.0.23.tar.bz2.sig
freeradius-server-fix-perl-shbang.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ freeradius-server.spec ++++++
--- /var/tmp/diff_new_pack.mqE3NX/_old 2021-07-01 07:06:12.647206956 +0200
+++ /var/tmp/diff_new_pack.mqE3NX/_new 2021-07-01 07:06:12.651206924 +0200
@@ -18,7 +18,7 @@
%define unitname radiusd
Name: freeradius-server
-Version: 3.0.21
+Version: 3.0.23
Release: 0
%if 0%{?suse_version} >= 1500
@@ -60,6 +60,7 @@
Source100: freeradius.keyring
Source1: radiusd.service
Source2: freeradius-tmpfiles.conf
+Patch0: freeradius-server-fix-perl-shbang.patch
Patch1: freeradius-server-tmpfiles.patch
Patch2: freeradius-server-radiusd-logrotate.patch
Patch3: freeradius-server-rcradiusd.patch
@@ -182,6 +183,14 @@
%description ldap
FreeRADIUS plugin providing LDAP support.
+%package ldap-schemas
+Summary: FreeRADIUS support for OpenLDAP
+Group: System/Daemons
+Requires: openldap2
+
+%description ldap-schemas
+FreeRADIUS schemas for OpenLDAP.
+
%package krb5
Summary: Kerberos 5 support for freeradius
Group: System/Daemons
@@ -249,11 +258,7 @@
%autosetup -p1
%build
-./autogen.sh
-modified="$(sed -n '/^----/n;s/ - .*$//;p;q' "%{_sourcedir}/%{name}.changes")"
-DATE="\"$(date -d "${modified}" "+%%b %%e %%Y")\""
-TIME="\"$(date -d "${modified}" "+%%R")\""
-find . -type f -regex ".*\.c\|.*\.cpp\|.*\.h" -exec sed -i
"s/__DATE__/${DATE}/g;s/__TIME__/${TIME}/g" {} +
+autoreconf -fi
export CFLAGS="%{optflags} -DLDAP_DEPRECATED -fstack-protector -fPIC -DPIC"
export LDFLAGS="-pie"
%configure \
@@ -298,6 +303,9 @@
%install
mkdir -p %{buildroot}%{_localstatedir}/lib/radiusd
make install R=%{buildroot} INSTALLSTRIP=
+# Install ldap schema
+install -d %{buildroot}%{_sysconfdir}/openldap/schema
+install -m 0644 -t %{buildroot}%{_sysconfdir}/openldap/schema
doc/schemas/ldap/openldap/*.{ldif,schema}
# modify default configuration
RADDB=%{buildroot}%{_sysconfdir}/raddb
perl -i -pe 's/^#user =.*$/user = radiusd/' $RADDB/radiusd.conf
@@ -340,14 +348,14 @@
rm %{buildroot}%{_sbindir}/rc.radiusd
rm -r %{buildroot}%{_datadir}/doc/freeradius*
rm -r %{buildroot}%{_libdir}/freeradius/*.*a
-# rm %{buildroot}%{_defaultdocdir}/%{name}/Makefile
-# rm %{buildroot}%{_defaultdocdir}/%{name}/examples/Makefile
+rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/dhcp/mssql
rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/mssql
rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/mssql
+rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mssql
+rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/dhcp/oracle
+rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/oracle
rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/oracle
rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle
-rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/oracle
-#rm -r %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/postgresql
%if ! %{with json}
rm %{buildroot}%{_sysconfdir}/raddb/mods-available/rest
%endif
@@ -438,7 +446,7 @@
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/certs
%{_sysconfdir}/raddb/certs/Makefile
%{_sysconfdir}/raddb/certs/passwords.mk
-%{_sysconfdir}/raddb/certs/README
+%{_sysconfdir}/raddb/certs/README.md
%{_sysconfdir}/raddb/certs/xpextensions
%{_sysconfdir}/raddb/panic.gdb
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/certs/*.cnf
@@ -459,8 +467,8 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/moonshot-targeted-ids/*
%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/moonshot-targeted-ids
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/preprocess/*
-#%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python
-#%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/python/radiusd.py
+#%%dir %%attr(750,root,radiusd) %%{_sysconfdir}/raddb/mods-config/python
+#%%attr(640,root,radiusd) %%config(noreplace)
%%{_sysconfdir}/raddb/mods-config/python/radiusd.py
%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql
%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql
@@ -469,11 +477,12 @@
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/counter
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/cui
+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/dhcp
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main
-#%attr(640,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf
-#%attr(640,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/schema.sql
+#%%attr(640,root,radiusd)
%%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/queries.conf
+#%%attr(640,root,radiusd)
%%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle/schema.sql
%attr(640,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/sqlite/schema.sql
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/unbound
@@ -506,9 +515,11 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/abfab-tr-idp
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/channel_bindings
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/challenge
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/resource-check
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/totp
# sites-enabled
-# symlink: %{_sysconfdir}/raddb/sites-enabled/xxx -> ../sites-available/xxx
+# symlink: %%{_sysconfdir}/raddb/sites-enabled/xxx -> ../sites-available/xxx
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/sites-enabled
%config(missingok) %{_sysconfdir}/raddb/sites-enabled/inner-tunnel
%config(missingok) %{_sysconfdir}/raddb/sites-enabled/default
@@ -528,6 +539,9 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/detail.example.com
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/detail.log
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/dhcp
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/dhcp_files
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/dhcp_passwd
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/dhcp_sql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/dhcp_sqlippool
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/digest
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/dynamic_clients
@@ -571,9 +585,11 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/soh
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/sometimes
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/sql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/sql_map
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/sqlcounter
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/sqlippool
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/sradutmp
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/totp
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/unix
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/utf8
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/wimax
@@ -584,7 +600,7 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/couchbase
# mods-enabled
-# symlink: %{_sysconfdir}/raddb/mods-enabled/xxx -> ../mods-available/xxx
+# symlink: %%{_sysconfdir}/raddb/mods-enabled/xxx -> ../mods-available/xxx
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-enabled
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/always
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/attr_filter
@@ -613,6 +629,7 @@
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/replicate
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/soh
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/sradutmp
+%config(missingok) %{_sysconfdir}/raddb/mods-enabled/totp
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/unix
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/utf8
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/unpack
@@ -672,7 +689,6 @@
%{_libdir}/freeradius/rlm_eap.so
%{_libdir}/freeradius/rlm_eap_fast.so
%{_libdir}/freeradius/rlm_eap_gtc.so
-%{_libdir}/freeradius/rlm_eap_leap.so
%{_libdir}/freeradius/rlm_eap_md5.so
%{_libdir}/freeradius/rlm_eap_mschapv2.so
%{_libdir}/freeradius/rlm_eap_peap.so
@@ -702,6 +718,7 @@
%{_libdir}/freeradius/rlm_soh.so
%{_libdir}/freeradius/rlm_sometimes.so
%{_libdir}/freeradius/rlm_sql.so
+%{_libdir}/freeradius/rlm_sql_map.so
%{_libdir}/freeradius/rlm_sqlcounter.so
%{_libdir}/freeradius/rlm_sqlippool.so
%if %{with freetds}
@@ -709,6 +726,7 @@
%endif
%{_libdir}/freeradius/rlm_sql_null.so
%{_libdir}/freeradius/rlm_test.so
+%{_libdir}/freeradius/rlm_totp.so
%{_libdir}/freeradius/rlm_unix.so
%{_libdir}/freeradius/rlm_utf8.so
%{_libdir}/freeradius/rlm_wimax.so
@@ -779,13 +797,21 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/cui/mysql/queries.conf
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/cui/mysql/schema.sql
+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/dhcp/mysql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/mysql/queries.conf
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/mysql/schema.sql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/mysql/setup.sql
+
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool/mysql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/queries.conf
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/schema.sql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/procedure.sql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/mysql/procedure-no-skip-locked.sql
%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/queries.conf
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/procedure.sql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/procedure-no-skip-locked.sql
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/mysql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/main/mysql/process-radacct.sql
@@ -817,10 +843,20 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/cui/postgresql/queries.conf
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/cui/postgresql/schema.sql
+%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/postgresql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/postgresql/queries.conf
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/postgresql/schema.sql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/postgresql/setup.sql
+
%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql/queries.conf
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql/schema.sql
+%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/postgresql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/postgresql/procedure.sql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/postgresql/queries.conf
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/postgresql/schema.sql
+
%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/main/postgresql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/main/postgresql/process-radacct.sql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/main/postgresql/setup.sql
@@ -845,6 +881,10 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/counter/sqlite/monthlycounter.conf
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/counter/sqlite/noresetcounter.conf
+%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/dhcp/sqlite
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/sqlite/queries.conf
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/dhcp/sqlite/schema.sql
+
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool/sqlite
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/sqlite/queries.conf
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/sqlite/schema.sql
@@ -853,7 +893,7 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/sqlite/queries.conf
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/main/sqlite
-%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/main/sqlite/process-radacct-refresh.sh
+%attr(750,root,radiusd) %config
%{_sysconfdir}/raddb/mods-config/sql/main/sqlite/process-radacct-refresh.sh
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/main/sqlite/process-radacct-schema.sql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/main/sqlite/queries.conf
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/main/sqlite/schema.sql
@@ -865,4 +905,11 @@
%{_libdir}/freeradius/rlm_ldap.so
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/ldap
+%files ldap-schemas
+%defattr(-,root,root)
+%dir %{_sysconfdir}/openldap
+%dir %{_sysconfdir}/openldap/schema
+%config %{_sysconfdir}/openldap/schema/freeradius*.schema
+%config %{_sysconfdir}/openldap/schema/freeradius*.ldif
+
%changelog
++++++ freeradius-server-3.0.21.tar.bz2 -> freeradius-server-3.0.23.tar.bz2
++++++
++++ 51238 lines of diff (skipped)
++++++ freeradius-server-fix-perl-shbang.patch ++++++
diff -Nur freeradius-server-3.0.23/doc/rfc/genref.pl new/doc/rfc/genref.pl
--- freeradius-server-3.0.23/doc/rfc/genref.pl 2021-06-10 16:49:17.000000000
+0200
+++ new/doc/rfc/genref.pl 2021-06-27 17:40:13.946667745 +0200
@@ -1,4 +1,4 @@
-#!/usr/bin/env perl
+#!/usr/bin/perl
foreach $file (@ARGV) {
open FILE, "<$file" || die "Error opening $file: $!\n";
diff -Nur freeradius-server-3.0.23/doc/rfc/per-rfc.pl new/doc/rfc/per-rfc.pl
--- freeradius-server-3.0.23/doc/rfc/per-rfc.pl 2021-06-10 16:49:17.000000000
+0200
+++ new/doc/rfc/per-rfc.pl 2021-06-27 17:40:32.390794075 +0200
@@ -1,4 +1,4 @@
-#!/usr/bin/env perl
+#!/usr/bin/perl
#
# Read in the references, and put into an associative array
diff -Nur freeradius-server-3.0.23/doc/rfc/rewrite.pl new/doc/rfc/rewrite.pl
--- freeradius-server-3.0.23/doc/rfc/rewrite.pl 2021-06-10 16:49:17.000000000
+0200
+++ new/doc/rfc/rewrite.pl 2021-06-27 17:40:41.162865842 +0200
@@ -1,4 +1,4 @@
-#!/usr/bin/env perl
+#!/usr/bin/perl
#
# Read in the references, and put into an associative array
