commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2020-08-29 20:35:55
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new.3399 (New)
Package is "freeradius-server"
Sat Aug 29 20:35:55 2020 rev:83 rq:829736 version:3.0.21
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2020-03-26 23:30:57.314724801 +0100
+++
/work/SRC/openSUSE:Factory/.freeradius-server.new.3399/freeradius-server.changes
2020-08-29 20:36:07.497308119 +0200
@@ -1,0 +2,6 @@
+Wed Aug 26 11:32:15 UTC 2020 - Adam Majer
+
+- freeradius-server-radiusd-logrotate.patch: fix permissions in
+ logrotate global section (bsc#1170505, bsc#1174905)
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.8x6pDJ/_old 2020-08-29 20:36:09.293308876 +0200
+++ /var/tmp/diff_new_pack.8x6pDJ/_new 2020-08-29 20:36:09.297308878 +0200
@@ -55,7 +55,7 @@
Summary:RADIUS Server
License:GPL-2.0-only AND LGPL-2.1-only
Group: Productivity/Networking/Radius/Servers
-Url:http://www.freeradius.org/
+URL:http://www.freeradius.org/
Source:
ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2
Source99:
ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2.sig
# keyring downloaded via link @ ftp://ftp.freeradius.org/pub/freeradius/README
++ freeradius-server-radiusd-logrotate.patch ++
--- /var/tmp/diff_new_pack.8x6pDJ/_old 2020-08-29 20:36:09.345308897 +0200
+++ /var/tmp/diff_new_pack.8x6pDJ/_new 2020-08-29 20:36:09.349308900 +0200
@@ -1,8 +1,14 @@
-Index: freeradius-server-3.0.14/suse/radiusd-logrotate
+Index: freeradius-server-3.0.21/suse/radiusd-logrotate
===
freeradius-server-3.0.14.orig/suse/radiusd-logrotate
-+++ freeradius-server-3.0.14/suse/radiusd-logrotate
-@@ -16,13 +16,18 @@ notifempty
+--- freeradius-server-3.0.21.orig/suse/radiusd-logrotate
freeradius-server-3.0.21/suse/radiusd-logrotate
+@@ -11,19 +11,23 @@ missingok
+ compress
+ delaycompress
+ notifempty
+-su radiusd radiusd
+
+ #
# The main server log
#
/var/log/radius/radius.log {
@@ -21,7 +27,7 @@
nocreate
size=+1024k
}
-@@ -31,6 +36,7 @@ notifempty
+@@ -32,6 +36,7 @@ su radiusd radiusd
# SQL log files
#
/var/log/radius/sqllog.sql {
@@ -29,7 +35,7 @@
nocreate
size=+2048k
}
-@@ -43,6 +49,7 @@ notifempty
+@@ -44,6 +49,7 @@ su radiusd radiusd
# second technique, you will need another cron job that removes old
# detail files. You do not need to comment out the below for method #2.
/var/log/radius/radacct/*/detail {
commit freeradius-server for openSUSE:Factory
Hello community, here is the log from the commit of package freeradius-server for openSUSE:Factory checked in at 2020-03-26 23:30:55 Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old) and /work/SRC/openSUSE:Factory/.freeradius-server.new.3160 (New) Package is "freeradius-server" Thu Mar 26 23:30:55 2020 rev:82 rq:788266 version:3.0.21 Changes: --- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes 2020-03-24 22:39:04.849285901 +0100 +++ /work/SRC/openSUSE:Factory/.freeradius-server.new.3160/freeradius-server.changes 2020-03-26 23:30:57.314724801 +0100 @@ -4,2 +4 @@ -- update to 3.0.21 - +- update to 3.0.21 (jsc#SLE-11896) @@ -69 +68 @@ -- update to 3.0.20 +- update to 3.0.20 (bsc#1146848) @@ -75 +74 @@ - * Fix side-channel leak in EAP-PWD (bsc#1166858, CVE-2019-20510) + * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456) Other differences: --
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2020-03-24 22:37:30
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new.3160 (New)
Package is "freeradius-server"
Tue Mar 24 22:37:30 2020 rev:81 rq:787864 version:3.0.21
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2020-03-11 18:56:42.839711572 +0100
+++
/work/SRC/openSUSE:Factory/.freeradius-server.new.3160/freeradius-server.changes
2020-03-24 22:39:04.849285901 +0100
@@ -1,0 +2,155 @@
+Tue Mar 24 15:31:22 UTC 2020 - Adam Majer
+
+- update to 3.0.21
+
+
+Feature Improvements
+
+ * New stored procedure for allocating IPs with PostgreSQL
+Rates of 1500 IPs per second are now possible
+See raddb/mods-config/sql/ippool/postgresql/procedure.sql
+ * Add SQL IP pool support for Microsoft SQL Server
+See raddb/mods-config/sql/ippool/mssql/
+ * Added RCNTEC dictionary. Closes #3168.
+ * Added Pica8 dictionary. Closes #3179.
+ * Add TLS-Client-Cert-Valid-Since attribute holding not
+Before date Patch from Boris Lytochkin. Fixes #3157.
+ * Generate attributes containing unknown OIDs See raddb/sites-available/tls
+ * Update the WiMAX dictionary.
+ * Added ability to rlm_python(Python2) show a stacktrace
+from errors. #2979.
+ * Add WiFi Alliance Policy OIDs.
+See raddb/certs/xpextensions
+ * radmin now shows coa stats, too.
+ * Sample schema extensions for summarizing data in SQL
+See mods-config/sql/main/*/process-radacct.sql
+ * Update dictionary.aerohive, dictionary.fortinet,
+dictionary.arista and dictionary.erx.
+ * Added VAS Experts dictionary.
+ * Many updates to RPM and jenkins builds from Matthew Newton.
+ * Added %C (time now in seconds) and %c (microsecond component of now)
+back-ported from the "master" branch.
+ * Add reload capability to systemd unit file in Debian and RedHat.
+ * Increase timestamp precision in postauth to maximum supported by each
+database and simplify (and make more consistent between drivers)
+the timestamps in SQL queries by using expansions.
+ * Option to set dictionary path in raduat script.
+
+Bug Fixes
+
+ * Various fixes found by PVS-Studio.
+ * Set permissions of certificates in bootstrap shell script Fixes #3132.
+ * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
+ * Skip processing proxy reply if there are no home servers available.
+ * Update SQLite IPPool queries. Fixes #3177
+ * rlm_sql_unixodbc fixes. Fixes #2822.
+ * Fixes when building with LibreSSL.
+ * Fix the rlm_python3 build. Note that this module is experimental. #3183.
+ * The rlm_python should append the 'python_path' paths in 'sys.path'.
+It fixes the expected behavior to use the existing Python modules
+Fixes #3180.
+ * Fix rlm_python to print the script errors properly.
+ * Bound total query time for PostgreSQL. Fixes #3253.
+ * Many fixes to Oracle sqlippool. It now does 500 IPs per second
+without any tuning. Fixes #3270.
+ * Reference sqlippool by it's correct name. Fixes #3272.
+ * Revert 3.0.20 patch which caused crashes on duplicate clients.
+ * Update WiMAX-MSK attribute. Fixes #3280.
+ * Fix crash when trying to access non-existant regex capture group.
+ * Use timestamps (request or server) rather than SQL NOW()
+in accounting queries so that these are stable when replayed
+from a file buffer.
+
+- freeradius-python3_patches.patch: upstreamed
+
+---
+Tue Mar 17 13:42:37 UTC 2020 - Adam Majer
+
+- update to 3.0.20
+
+Feature Improvements
+ * Added Force10 dictionary.
+ * Update dictionary.hp with new attributes. #2690.
+ * Update dictionary.aruba with new attributes. #2696.
+ * Fix side-channel leak in EAP-PWD (bsc#1166858, CVE-2019-20510)
+ * Relax OpenSSL version checks, now that their API is both public, and
stable.
+ * Note that tls_min_version/tls_max_version also support "1.3"
+Since there is no standard yet for EAP with TLS 1.3, it will not work.
+ * Added tripplite dictionary from #2760.
+ * Switch to the async interface for rlm_sql_postgresql so that
+we can enforce query_timeout.
+ * Added new LDAP option 'allow_dangling_group_ref'.
+ * Updated documentation and functionality for EAP session caching
+See "cache" section of mods-available/eap.
+ * Tighten systemd unit file security. Fixes #2637.
+ * Disable TLS 1.0 and TLS 1.1 support in the default configuration
+We STRONGLY recommend doing this for all installations.
+ * Add expansions for *outgoing* Radsec connections
+"%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
+TLS-Cert-* attributes. Fixes #2839.
+ * Add %{listen:tls} which
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2020-03-11 18:55:26
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new.3160 (New)
Package is "freeradius-server"
Wed Mar 11 18:55:26 2020 rev:80 rq:783861 version:3.0.19
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2019-12-23 22:49:16.166108087 +0100
+++
/work/SRC/openSUSE:Factory/.freeradius-server.new.3160/freeradius-server.changes
2020-03-11 18:56:42.839711572 +0100
@@ -1,0 +2,5 @@
+Wed Mar 11 13:18:37 UTC 2020 - Adam Majer
+
+- Enable memcached driver on SLE15
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.wrOdBI/_old 2020-03-11 18:56:43.447711843 +0100
+++ /var/tmp/diff_new_pack.wrOdBI/_new 2020-03-11 18:56:43.451711845 +0100
@@ -1,7 +1,7 @@
#
# spec file for package freeradius-server
#
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -40,7 +40,7 @@
%bcond_withfreetds
%endif
-%if 0%{?is_opensuse}
+%if 0%{?suse_version} > 1330 || 0%{?is_opensuse}
%bcond_without memcached
%else
%bcond_withmemcached
commit freeradius-server for openSUSE:Factory
Hello community, here is the log from the commit of package freeradius-server for openSUSE:Factory checked in at 2019-12-23 22:47:48 Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old) and /work/SRC/openSUSE:Factory/.freeradius-server.new.6675 (New) Package is "freeradius-server" Mon Dec 23 22:47:48 2019 rev:79 rq:759001 version:3.0.19 Changes: --- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes 2019-06-03 18:58:24.204361355 +0200 +++ /work/SRC/openSUSE:Factory/.freeradius-server.new.6675/freeradius-server.changes 2019-12-23 22:49:16.166108087 +0100 @@ -1,0 +2,6 @@ +Mon Dec 23 15:06:54 UTC 2019 - Johannes Engel + +- Add missing BuildRequire on samba-core-devel required for windbind + support in rlm_mschap. + +--- Other differences: -- ++ freeradius-server.spec ++ --- /var/tmp/diff_new_pack.Ql76HO/_old 2019-12-23 22:49:16.754108303 +0100 +++ /var/tmp/diff_new_pack.Ql76HO/_new 2019-12-23 22:49:16.754108303 +0100 @@ -127,6 +127,7 @@ #bsc#1055679 - freeradius-server does not provide winbind/AD auth BuildRequires: libwbclient-devel +BuildRequires: samba-core-devel %description Remote Authentication Dial-In User Service (RADIUS) is a networking
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2019-06-03 18:58:17
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new.5148 (New)
Package is "freeradius-server"
Mon Jun 3 18:58:17 2019 rev:78 rq:707189 version:3.0.19
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2019-05-28 09:43:15.945844271 +0200
+++
/work/SRC/openSUSE:Factory/.freeradius-server.new.5148/freeradius-server.changes
2019-06-03 18:58:24.204361355 +0200
@@ -163,0 +164,5 @@
+Wed Jul 4 14:54:50 UTC 2018 - adam.ma...@suse.de
+
+- install license as %license instead of documentation
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.Mhxxua/_old 2019-06-03 18:58:25.248360967 +0200
+++ /var/tmp/diff_new_pack.Mhxxua/_new 2019-06-03 18:58:25.248360967 +0200
@@ -387,11 +387,13 @@
%files doc
%defattr(-,root,root)
%doc doc/*
+%license LICENSE COPYRIGHT
%files
%defattr(-,root,root)
# doc
-%doc COPYRIGHT CREDITS LICENSE doc/ChangeLog
+%doc CREDITS doc/ChangeLog
+%license LICENSE COPYRIGHT
# SUSE
%config %{_sysconfdir}/pam.d/radiusd
%config %{_sysconfdir}/logrotate.d/radiusd
@@ -702,6 +704,7 @@
%files libs
%defattr(-,root,root)
+%license LICENSE COPYRIGHT
# RADIUS shared libs
%attr(755,root,root) %dir %{_libdir}/freeradius
%attr(755,root,root) %{_libdir}/freeradius/lib*.so*
commit freeradius-server for openSUSE:Factory
Hello community, here is the log from the commit of package freeradius-server for openSUSE:Factory checked in at 2019-05-28 09:43:13 Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old) and /work/SRC/openSUSE:Factory/.freeradius-server.new.5148 (New) Package is "freeradius-server" Tue May 28 09:43:13 2019 rev:77 rq:705679 version:3.0.19 Changes: --- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes 2019-04-11 12:20:36.093026178 +0200 +++ /work/SRC/openSUSE:Factory/.freeradius-server.new.5148/freeradius-server.changes 2019-05-28 09:43:15.945844271 +0200 @@ -4 +4 @@ -- update to 3.0.19 +- update to 3.0.19 (jira#SLE-5890) @@ -18,0 +19 @@ +(CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664) Other differences: --
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2019-04-11 12:20:16
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new.27019 (New)
Package is "freeradius-server"
Thu Apr 11 12:20:16 2019 rev:76 rq:693123 version:3.0.19
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2019-02-28 21:43:54.949511971 +0100
+++
/work/SRC/openSUSE:Factory/.freeradius-server.new.27019/freeradius-server.changes
2019-04-11 12:20:36.093026178 +0200
@@ -1,0 +2,34 @@
+Wed Apr 10 17:01:55 UTC 2019 - Michael Ströder
+
+- update to 3.0.19
+
+Feature improvements
+ * Update dictionary.cisco
+ * Update sqlippool to allow for stored procedures with
+PostgreSQL. This increases performance substantially.
+Patch from Nathan Ward. Fixes #2540.
+ * Re-added "show client config" command to radmin.
+ * Cleaned up mods-available/sql example so that it is
+easier to understand.
+ * Added pfSense dictionary. Closes #2581
+ * Update dictionary.h3c Closes #2592
+ * Update elasticsearch/logstash config for v6.7.0.
+ * EAP-PWD security fixes from Mathy Vanhoef. See
+http://freeradius.org/security/
+
+Bug fixes
+ * Update dynamic_client module and server core so that
+the functionality works. This has been broken since
+at least v2.
+ * Fix crash in sqlippool due to escaping changes.
+Patch from Nathan Ward. Fixes #2532, #2533.
+ * Fix systemd notify, watchdog and unit files.
+Fixes #2541, #2499.
+ * Fix erroneous length check in EAP-FAST.
+ * Update documentation to remove old "ignore_null"
+configuration. Fixes #2578.
+ * Fix default POD port. Should be 3799. Fixes #2591
+ * Correctly encode vendor-specific "encrypted" attributes.
+Fixes #2600
+
+---
Old:
freeradius-server-3.0.18.tar.bz2
freeradius-server-3.0.18.tar.bz2.sig
New:
freeradius-server-3.0.19.tar.bz2
freeradius-server-3.0.19.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.oh46gx/_old 2019-04-11 12:20:37.249026672 +0200
+++ /var/tmp/diff_new_pack.oh46gx/_new 2019-04-11 12:20:37.253026673 +0200
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.18
+Version:3.0.19
Release:0
%if 0%{?suse_version} > 1140
@@ -334,6 +334,7 @@
rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool/oracle
rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/oracle
rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/main/oracle
+rm -rf %{buildroot}%{_sysconfdir}/raddb/mods-config/sql/postgresql
%if ! %{with json}
rm %{buildroot}%{_sysconfdir}/raddb/mods-available/rest
%endif
@@ -441,6 +442,8 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/python/radiusd.py
%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql
+%dir %attr(750,root,radiusd)
%{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/ippool/postgresql/procedure.sql
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/counter
++ freeradius-server-3.0.18.tar.bz2 -> freeradius-server-3.0.19.tar.bz2
++
4942 lines of diff (skipped)
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2019-02-28 21:43:53
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new.28833 (New)
Package is "freeradius-server"
Thu Feb 28 21:43:53 2019 rev:75 rq:679792 version:3.0.18
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2018-06-27 10:23:01.176540643 +0200
+++
/work/SRC/openSUSE:Factory/.freeradius-server.new.28833/freeradius-server.changes
2019-02-28 21:43:54.949511971 +0100
@@ -1,0 +2,127 @@
+Wed Feb 27 11:37:53 UTC 2019 - adam.ma...@suse.de
+
+- reformat changelog mostly by wrapping lines
+- add missing bug numbers for security fixes
+
+---
+Tue Feb 26 21:17:00 UTC 2019 - Michael Ströder
+
+- update to 3.0.18
+
+* cleanup_delay can now be 30 seconds. This helps with proxies that have
packet loss.
+* Do-Not-Respond policies can now be set in the "post-auth" section.
+* Encode / Decode ADSL Forum DHCP options.
+* Fix module ordering issues. e.g. when "sqlippool" needs "sql".
+ See the "instantiate" section of radiusd.conf.
+* Add Big Switch dictionary. Fixes #2252.
+* Add sql_session_start policy (raddb/policy.d/accounting)
+ This minimizes race conditions when using Simultaneous-Use (#2257).
+* For rlm_perl, all variables are now tainted by default.
+ See raddb/mods-available/perl, and the "perl_flags" configuration item.
+ This change should only affect people who are using variables in
+ insecure ways.
+* Allow "sqlcounter" module to be listed in "post-auth".
+* Add support for IPv6 attributes in SQL. Fixes #2280
+* The server is better at handling fail-over for outbound RadSec and
+ TCP connections. Fixes #2284.
+* The server is now more aggressive about retrying failed outbound
+ RadSec and TCP connections. Fixes #2284.
+* Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state"
list.
+* Add expansion for Radsec connections. "%{listen:TLS-...}" for
+ TLS-Client-Cert-* and TLS-Cert-* attributes.
+* Add notes on running "ldapsearch" using the parameters from the LDAP module.
+* "ipaddr" attributes can now be cast to "integer" type attributes
+ in an "update" section.
+* Move main thread queue to using atomic queues. This should help
+ with contention in high load scenarios.
+* Add "recv_buff" setting to listeners. For more details,
+ see sites-available/default.
+* The sqlippool module can now use attributes other than "Pool-Name"
+ to assign IP pools. The "Pool-Name" attribute is still the default.
+* The "unpack" expansion can now unpack substrings.
+ See mods-available/unpack for documentation and examples.
+* The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
+ Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
+* Allow for -LDAP-UserDN. See mods-available/ldap for more
information.
+* Add sanitizing of control list for moonshot. Fixes #2318.
+* Update rlm_sql_mysql to be compatible with MySQL 8
+ Fixes https://bugs.launchpad.net/bugs/1795310.
+* Allow logging of only Access-Accept or Access-Reject messages
+ See radiusd.conf, "auth_accept" and "auth_reject".
+* Removed Connect-Rate comparison. It was unused and broken.
+* Add dictionary.infinera.
+* Use OpenSSL HMAC functions instead of local ones.
+* Some SQL modules can now use "auto_escape" to escape unsafe strings
+ See mods-config/sql/main/mysql/queries.conf.
+* Add wispr2date conversion in mods-available/date.
+* Implement dictionary-based handling in rlm_python.
+ Fixes #2334 See mods-available/python for details.
+* Add support for SKIP LOCKED in sqlippool. This can improve performance
+ by an order of magnitude or more.
+ See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
+* Allow PSK and certificates at the same time Except for TLS 1.3
+ which does not support that.
+* Update docker scripts. Fixes #2306 Patch from Matthew Newton.
+* Add crypt xlat.
+* MySQL connections can now skip verifying the server certificate.
+ Fixes #2481. See mods-available/sql.
+* Add better mechanism to detect MariaDB (Old MySQL).
+* Add RFC 7532 "bang path" support for realms Fixes #2492.
+* Update dictionary.ukerna documentation. Fixes #2493.
+* Add support for systemd service and watchdogs Fixes #2499.
+* Check for openss/rand.h, and allow building without OpenSSL engine.
+ Patch from Eneas U de Queiroz Fixes #2517.
+* The default PosgtreSQL queries now use "ON CONFLICT" to better
+ deal with issues. This requires PostgreSQL 9.5 or later.
+ Please use a recent version of PostgreSQL, or edit the default
+ queries to remove "ON CONFLICT".
+
+BUG FIXES
+* The session-state list is no longer cleaned in the inner-tunnel.
+ This lets the
commit freeradius-server for openSUSE:Factory
Hello community, here is the log from the commit of package freeradius-server for openSUSE:Factory checked in at 2018-06-27 10:22:42 Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old) and /work/SRC/openSUSE:Factory/.freeradius-server.new (New) Package is "freeradius-server" Wed Jun 27 10:22:42 2018 rev:74 rq:619197 version:3.0.17 Changes: --- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes 2018-04-20 17:31:03.987065419 +0200 +++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes 2018-06-27 10:23:01.176540643 +0200 @@ -1,0 +2,5 @@ +Tue Jun 26 18:24:21 UTC 2018 - mich...@stroeder.com + +- also fix ownership of /var/log/radius in systemd unit + +--- Other differences: -- ++ radiusd.service ++ --- /var/tmp/diff_new_pack.VNoyGB/_old 2018-06-27 10:23:02.564490030 +0200 +++ /var/tmp/diff_new_pack.VNoyGB/_new 2018-06-27 10:23:02.568489884 +0200 @@ -5,7 +5,7 @@ [Service] Type=forking PIDFile=/run/radiusd/radiusd.pid -ExecStartPre=-/bin/chown -R radiusd.radiusd /run/radiusd +ExecStartPre=-/bin/chown -R radiusd.radiusd /run/radiusd /var/log/radius ExecStartPre=/usr/sbin/radiusd -C ExecStart=/usr/sbin/radiusd -d /etc/raddb ExecReload=/usr/sbin/radiusd -C
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2018-04-20 17:29:23
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Fri Apr 20 17:29:23 2018 rev:73 rq:597709 version:3.0.17
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2018-01-22 16:18:20.994407244 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2018-04-20 17:31:03.987065419 +0200
@@ -1,0 +2,42 @@
+Tue Apr 17 22:00:15 UTC 2018 - mich...@stroeder.com
+
+- update to 3.0.17
+
+Feature Improvements
+* Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
+* "stats home server" now supports "src IPADDR", to specify home server also
by source IP. Fixes #2169.
+* Add Dockerfiles for a selection of common systems.
+* Increase number of permitted file descriptors, for systems with many home
servers.
+* Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs Patch from Isaac Boukris.
Fixes #2205.
+* Update main READMEs. Patches from Matthew Newton.
+* Added dictionary.mimosa.
+
+Bug Fixes
+* Don't call post-proxy twice when proxying to a virtual server. Matthew
Newton, #2161.
+* Use "raw" string value for shared secrets and dynamic clients It now parses
strings with backslashes and "special characters" correctly. Fixes #2168.
+* Fix RuntimeDirectory for RedHat, from Alan Buxey.
+* Relax checks in 'if' parser from Isaac Bourkis.
+* Minor cleanups for %{debug_attr:} from Isaac Boukris.
+* Be more aggressive about cleaning up cached certificate attributes, due to
deficiencies in OpenSSL. Reported by Nicolas Reich.
+* Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
+* Fix double free in rlm_sql. Fixes #2180.
+* rlm_detail now writes empty Access-Accept packets.
+* rlm_python can now create tagged attributes.
+* Don't crash on duplicate realm + authhost / accthost Bug found by Richard
Palmer.
+* Allow partial certificate chain to trusted CA. Fixes #2162.
+* Treat SSL_read() returning zero as error. Fixes #2164.
+* detail writer now checks if the file was renamed or deleted.
+* Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
+* RedHat Systemd updates. Fixes #2184.
+* Use correct API for State variable in rlm_securid.
+* Remove broken radclient option "-i".
+* Fix "users" file (and hints, etc). So that it does not get confused about
entry ordering with multiple $INCLUDEs.
+* Fix rlm_sql to expand the un-escaped string, not the raw string.
+* Link default and inner-tunnel only if they exist. Fixes #2206.
+* Don't use both IP_PKTINFO and IP_SENDSRCADDR.
+* Always install signal handler for SIGINT (needed by Docker).
+* Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs which are
not self-signed will now be checked.
+* sqlippool now returns "fail" if it fails IP allocation.
+* Fix rlm_yubikey to look for correct attribute in replay attack check.
+
+---
Old:
freeradius-server-3.0.16.tar.bz2
freeradius-server-3.0.16.tar.bz2.sig
New:
freeradius-server-3.0.17.tar.bz2
freeradius-server-3.0.17.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.5UqhBA/_old 2018-04-20 17:31:05.163022777 +0200
+++ /var/tmp/diff_new_pack.5UqhBA/_new 2018-04-20 17:31:05.163022777 +0200
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.16
+Version:3.0.17
Release:0
%if 0%{?suse_version} > 1140
++ freeradius-server-3.0.16.tar.bz2 -> freeradius-server-3.0.17.tar.bz2
++
4467 lines of diff (skipped)
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2018-01-22 16:17:13
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Mon Jan 22 16:17:13 2018 rev:72 rq:564437 version:3.0.16
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2017-09-20 17:12:12.821586275 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2018-01-22 16:18:20.994407244 +0100
@@ -1,0 +2,89 @@
+Thu Jan 11 23:15:49 UTC 2018 - mich...@stroeder.com
+
+- update to 3.0.16
+
+Feature improvements
+* rlm_python now supports multiple lists. From #2031.
+* Add trust router re-keying. From #2007.
+* Add support for Samba / AD LDAP schema.
+ See doc/schemas/ldap/samba/README.txt and
+ doc/schemas/ldap/samba/
+* Add "tls_min_version" and "tls_max_version" to EAP module
+ for Debian OpenSSL issues.
+* Better documentation for client certificates in PEAP and TTLS:
+ it usually doesn't work. Fixes #2068.
+* Distinguish login failure from AD unavailable. Fixes #2069.
+* Update RH spec files. Fixes #2070.
+* Run Post-Proxy-Type if all home servers are dead.
+ Fixes #2072.
+* Print offending IP addresses when EAP sessions come from
+ two upstream home servers, and rate-limit the messages.
+* Minor packaging updates.
+* Better documentation for rlm_rest.
+* EAP-FAST now has it's own "cipher_list", so that it is
+ easier to configure.
+* EAP-FAST now forcibly disables TLS1.2, until such time
+ as we implement the new keying mechanism from TLS1.2.
+* Add documentation for allow_expired_crl.
+* Update Debian logrotation. #2093 and #2101.
+* DHCP relay can now drop responses. #2095.
+* rlm_sqlippool can now assign Delegated-IPv6-Prefix.
+ It also now can assign any IPv4 or IPv6 address.
+ Based on patches from maximumG. #2094.
+ See raddb/mods-available/sqlippool for changes.
+* radeapclient can now use EAP-SIM-Ki to dynamically
+ create the necessary triplets.
+* Explain why many LDAP connections are closed.
+ Fixes #1969.
+* Debian build / package issues fixed by Matthew Newton.
+* dictionary.patton updates from Brice Schaffner. Fixes #2137.
+* Added scripts to build "inner-server.pem", and updated
+ mods-config/inner-eap and certs/README to match.
+* Added provisions for using an external CA. See raddb/certs/
+* Include dhcpclient binary in freeradius-dhcp debian packge.
+
+Bug fixes
+* Bind the lifetime of program name and python path to the module
+ FR-AD-002 (redone)
+* Pass correct statement length into sqlite3_prepare[_v2]
+ FR-AD-003 (redone)
+* Allow 100-Continue responses with additional headers in rlm_rest.
+* fix corner case where detail files were not being locked
+ correctly.
+* Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
+ Fixes #1947
+* Clean up exfile code. Which should help to avoid issues
+ with reading / writing 100's of detail files.
+* Fix build for winbind. Patch from Alex Clouter.
+* Fix checkrad for Mikrotik. Patch from Muchael Ducharme.
+* Fix home server stats lookup. Patch from Phil Mayers.
+* Add libjson-c3 as an optional dependency.
+* Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
+ against NSS, which breaks the server. Fixes #2040.
+* rlm_python fixes. Fixes #2041
+* Typos in "man" pages. Fixes #2045
+* Expand "next" in %{%{...}:-%{...}}. Fixes #2048
+* Don't add TLS attributes twice. Fixes #2050.
+* Fix memory allocation in rlm_rest. Fixes #2051.
+* Update trustrouter for new API. Fixes #2059.
+* Fix SQLite issues on FreeBSD. Fixes #2060
+* Don't do debug logging of bad passwords. Fixes #2064.
+* More graceful handling of "die" in rlm_perl. Fixes #2073.
+* Fix occasional crash when using
+ cisco_accounting_username_bug = yes
+* EAP-FAST fixes from Isaac Boukris.
+ #2078, #2076, and #2082, #2126.
+* DHCP fixes, relay, #2092, add run-time check, #2028
+* Decode multiple RADIUS packets at a time in highly loaded
+ RadSec connections. Patch from Jan Tomasek. #2106.
+* TunnelPassword is not "single value" in LDAP schema.
+ Fixes #2061.
+* sql log now opens the expanded filename, not the input one.
+ This was a regression introduced in 3.0.15.
+* Remove unnecessary UNIQUE constrain in Oracle schemas.
+* Fix SSL thread and locking issues when modules also use SSL.
+ Fixes #2125 and #2129.
+* Re-add dhcpclient "raw packet" changes. Patches from
+ Nicolas Chaigne and Matthew Newton. Fixes #2155.
+
+---
Old:
freeradius-server-3.0.15.tar.bz2
freeradius-server-3.0.15.tar.bz2.sig
New:
freeradius-server-3.0.16.tar.bz2
freeradius-server-3.0.16.tar.bz2.sig
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2017-09-20 17:12:10
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Wed Sep 20 17:12:10 2017 rev:71 rq:527291 version:3.0.15
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2017-08-28 15:18:32.981053486 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2017-09-20 17:12:12.821586275 +0200
@@ -1,0 +2,5 @@
+Tue Sep 19 11:18:53 UTC 2017 - adam.ma...@suse.de
+
+- Fix permissions of radiusd.service (bnc#1053654)
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.FRnI2B/_old 2017-09-20 17:12:13.525487188 +0200
+++ /var/tmp/diff_new_pack.FRnI2B/_new 2017-09-20 17:12:13.525487188 +0200
@@ -300,7 +300,7 @@
%if %{with systemd}
mkdir -p %{buildroot}%{_tmpfilesdir}
install -m 0644 %{SOURCE2} %{buildroot}%{_tmpfilesdir}/%{unitname}.conf
-install -D -m 755 %{SOURCE1} %{buildroot}%{_unitdir}/%{unitname}.service
+install -D -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/%{unitname}.service
# name the rc script according to the systemd unit
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcradiusd
%else
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2017-08-28 15:17:19
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Mon Aug 28 15:17:19 2017 rev:70 rq:518837 version:3.0.15
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2017-07-19 12:22:08.638750224 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2017-08-28 15:18:32.981053486 +0200
@@ -1,0 +2,6 @@
+Fri Aug 25 11:32:56 UTC 2017 - vark...@suse.com
+
+- bsc#1055679 - freeradius-server does not provide winbind/AD auth
+ Added libwbclient-devel as buildrequires
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.ExtTlz/_old 2017-08-28 15:18:34.308866897 +0200
+++ /var/tmp/diff_new_pack.ExtTlz/_new 2017-08-28 15:18:34.344861839 +0200
@@ -125,6 +125,9 @@
%{?systemd_requires}
%endif
+#bsc#1055679 - freeradius-server does not provide winbind/AD auth
+BuildRequires: libwbclient-devel
+
%description
Remote Authentication Dial-In User Service (RADIUS) is a networking
protocol that provides centralized Authentication, Authorization, and
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2017-07-19 11:22:21
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Wed Jul 19 11:22:21 2017 rev:69 rq:511084 version:3.0.15
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2017-05-31 12:20:22.731007992 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2017-07-19 12:22:08.638750224 +0200
@@ -1,0 +2,16 @@
+Mon Jul 17 13:46:41 UTC 2017 - mich...@stroeder.com
+
+- update to 3.0.15 with security fixes for
+ issues found via fuzzing by Guido Vranken
+ https://freeradius.org/security/fuzzer-2017.html
+ * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
+ * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding
option 63
+ * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
+ * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with
'concat' attributes
+ * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
+ * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in
fr_dhcp_decode_suboptions()
+ * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
+ * FR-AD-002 (v3) String lifetime issues in rlm_python
+ * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare
+
+---
Old:
freeradius-server-3.0.14.tar.bz2
freeradius-server-3.0.14.tar.bz2.sig
New:
freeradius-server-3.0.15.tar.bz2
freeradius-server-3.0.15.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.aArnY1/_old 2017-07-19 12:22:09.21619 +0200
+++ /var/tmp/diff_new_pack.aArnY1/_new 2017-07-19 12:22:09.270661054 +0200
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.14
+Version:3.0.15
Release:0
%if 0%{?suse_version} > 1140
++ freeradius-server-3.0.14.tar.bz2 -> freeradius-server-3.0.15.tar.bz2
++
1947 lines of diff (skipped)
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2017-05-31 12:19:49
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Wed May 31 12:19:49 2017 rev:68 rq:499629 version:3.0.14
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2017-03-20 17:09:16.460314018 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2017-05-31 12:20:22.731007992 +0200
@@ -1,0 +2,48 @@
+Mon May 29 12:40:52 UTC 2017 - adam.ma...@suse.de
+
+- update to 3.0.14 (still FATE#322416)
+
+ Feature improvements
+ * Enforce TLS client certificate expiration on session resumption,
+and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
+ * Updated dictionary.cisco.vpn3000, dictionary.patton
+ * Added dictionary.dellemc
+ * Lowered the log output for failed PEAP sessions.
+ * ALlow utc in rlm_date.
+ * The internal OpenSSL session cache has been disabled.
+Please see mods-available/eap
+ * Update detail reader documentation.
+ * Make outgoing RadSec connections non-blocking.
+ * Add SQL backing to Moonshot-*-TargetedId generation.
+
+ Bug Fixes
+ * radtest uses Cleartext-Password for EAP, not User-Password.
+ * Update documentation for mods-enabled/ linking.
+ * Enhanced checks for moonshot salt.
+ * Allow session resumption for RadSec connections.
+ * Update "huntgroups" file to note that port ranges are not supported
+ * Fix OpenSSL permissions issues on default key files.
+ * Certificates are not required when PSK is used.
+ * Allow SubjectAltName as first extension in cert.
+ * Fixed talloc issue with TLS session resumption.
+ * " := 0x01" now produces useful error messages.
+ * Handle connection error in rlm_ldap_cacheable_groupobj.
+ * Fix endian issues in DHCP.
+ * Multiple minor fixes for Coverity complaints.
+ * Handle unexpected regex.
+ * Fix minor issues in dictionaries.
+ * Fix typos and grammar. Patches from Alan Buxey.
+ * Fix erroneous VP creation in rlm_preproces.
+ * Fix MIB. Patch from Jeff Gehlbach.
+ * Trust router updates from Alejandro Perez.
+ * Allow build with LibreSSL.
+ * Use correct packet for channel bindings.
+ * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
+a test license. Please see the git commit history for more info.
+ * Fix incorrect length check in EAP-PWD. This may be exploitable.
+ * Stop rotating session database files (radutmp, radwtmp) since
+these are not logfiles.
+
+- freeradius-server-radiusd-logrotate.patch: updated
+
+---
Old:
freeradius-server-3.0.13.tar.bz2
freeradius-server-3.0.13.tar.bz2.sig
New:
freeradius-server-3.0.14.tar.bz2
freeradius-server-3.0.14.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.hKoiPX/_old 2017-05-31 12:20:23.514897334 +0200
+++ /var/tmp/diff_new_pack.hKoiPX/_new 2017-05-31 12:20:23.518896770 +0200
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.13
+Version:3.0.14
Release:0
%if 0%{?suse_version} > 1140
@@ -431,6 +431,8 @@
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/files
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/files/*
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/preprocess
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/sql/moonshot-targeted-ids/*
+%dir %attr(750,root,radiusd) /etc/raddb/mods-config/sql/moonshot-targeted-ids
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/preprocess/*
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-config/python/radiusd.py
@@ -515,6 +517,7 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/logintime
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/mac2ip
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/mac2vlan
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/moonshot-targeted-ids
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/mschap
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/ntlm_auth
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/mods-available/opendirectory
commit freeradius-server for openSUSE:Factory
Hello community, here is the log from the commit of package freeradius-server for openSUSE:Factory checked in at 2017-03-20 17:09:16 Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old) and /work/SRC/openSUSE:Factory/.freeradius-server.new (New) Package is "freeradius-server" Mon Mar 20 17:09:16 2017 rev:67 rq:48 version:3.0.13 Changes: --- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes 2017-03-12 20:04:03.649240610 +0100 +++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes 2017-03-20 17:09:16.460314018 +0100 @@ -6 +6 @@ -- update to 3.0.13 +- update to 3.0.13 (still FATE#322416) Other differences: --
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2017-03-12 20:04:03
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Sun Mar 12 20:04:03 2017 rev:66 rq:477789 version:3.0.13
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2017-03-02 19:27:15.269231544 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2017-03-12 20:04:03.649240610 +0100
@@ -1,0 +2,82 @@
+Mon Mar 6 23:07:21 UTC 2017 - mich...@stroeder.com
+
+- removed obsolete freeradius-server-fix-cert-bootstrap.patch
+ because recent /etc/raddb/certs/bootstrap simply works
+- update to 3.0.13
+
+ Feature improvements
+ * Add dictionary.rfc7930. Note that we do not implement
+the RFC.
+ * Added 'cipher_server_preference' to mods-available/eap
+Patch from #1797.
+ * OpenSSL 1.1.0 compatibility fixes.
+ * rlm_perl: radiusd::xlat to evaluate xlat string
+within perl script
+ * Allow authentication retry in winbind. Patch from
+Herwin Weststrate. See raddb/mods-available/mschap.
+ * Added "recv-coa" method to rlm_rest. It behaves the
+same as "authorize".
+ * Document Trust Router tr_port option. Patch from
+Stefan Paetow.
+ * Update elasticsearch/logstash examples so that they work
+with elastic stack v5. Patch from Matthew Newton.
+ * Print information about packets, replies, and contents
+in the detail file reader.
+ * Update abfab-tr policy. Pull request #1893
+from Stefan Paetow.
+ * Reject packets which contain User-Password and
+EAP-Message.
+ * Add example for filtering Access-Challenge.
+See sites-enabled/default.
+ * Pull symlink fixes from v4.0.x. Fixes #1859.
+ * Add systemd reload. Not everything is reloaded, but
+some is. Fixes #1662.
+ * Better documentation for listen "ipaddr". Fixes #1921
+ * Add dictionary.cnergee, updated dictionary.nomadix.
+ * radclient no longer needs -x to print statistics with -s.
+
+ Bug fixes
+ * Minor typos. Fixes #1763
+ * Fix typo in RPM build. Closes #1767.
+ * rlm_mschap check for password expiry only
+if password was correct. Fixes #1762.
+ * Update debian build.
+ * update rlm_counter "man" page. Fixes #1775.
+ * Remove erroneous assert. Fixes #1778.
+ * fix mschap password change test. Fixes #1792.
+ * Cleanup config file on data remove. Fixes #1795.
+ * passwd module returns "notfound" if not found.
+ * Check for old OpenSSL, and don't build rlm_eap_fast
+if it necessary. Fixes #1803
+ * Cleanup memory better after ldap version query.
+Patch from Aleksey Katargin.
+ * Rename lt_* functions to avoid linker issues with
+libtool. Fixes #1277
+ * Many miscellaneous fixes and typos.
+ * Allow long strings in %{%{foo} bar:-%{baz} blah".
+Fixes #1866
+ * Fix filtering operators, along with more documentation and
+more tests for them.
+ * Fix OpenSSL fixes. Fixes #1876.
+ * Finish SQL select queries even when SELECT returns no rows.
+Fixes #1879.
+ * Set Module-Failure-Message for more EAP errors.
+ * Correct typo in dictionary.rfc5580. Fixes #1882
+ * Remove obselete systemd syslog.target.
+ * Client-Port-Balance load-balancing now uses client port.
+ * Radrelay examples fixed from Alex Clouter.
+ * Update systemd target. Pull request #1896.
+ * Trim starting whitespace in xlat strings.
+ * Get MySQL result lengths using normal API.
+ * suid down after fchown(). Fixes #1914.
+ * Fix cases of comparing pointer to NUL character. Fixes #1915.
+ * OpenSSL v1.1 fixes. Pull request #1921.
+ * Better Handle v4/v6 host names. Pull request #1919.
+ * Remove "Auth-Type = System" from docs and examples.
+ * Don't crash on malformed %{home_server}. Fixes #1922
+ * fix erroneous use of talloc destructor in rlm_eap
+ * Issue trigger modules.sql.fail. Fixes #1923
+ * Document python_path gotcha's. Fixes #1845
+ * dlopen() the specific version of Python. Fixes #1592
+
+---
Old:
freeradius-server-3.0.12.tar.bz2
freeradius-server-3.0.12.tar.bz2.sig
freeradius-server-fix-cert-bootstrap.patch
New:
freeradius-server-3.0.13.tar.bz2
freeradius-server-3.0.13.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.h3HUYa/_old 2017-03-12 20:04:04.589107617 +0100
+++ /var/tmp/diff_new_pack.h3HUYa/_new 2017-03-12 20:04:04.593107051 +0100
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name:
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2017-03-02 19:27:14
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Thu Mar 2 19:27:14 2017 rev:65 rq:459264 version:3.0.12
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2017-02-09 11:16:20.708889097 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2017-03-02 19:27:15.269231544 +0100
@@ -1,0 +2,6 @@
+Mon Feb 20 15:27:28 CET 2017 - ku...@suse.de
+
+- Don't require insserv if we use systemd
+- Remove require for unused fillup
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.AShu9e/_old 2017-03-02 19:27:16.109112745 +0100
+++ /var/tmp/diff_new_pack.AShu9e/_new 2017-03-02 19:27:16.109112745 +0100
@@ -105,8 +105,9 @@
%else
BuildRequires: libapr1-devel
%endif
-Requires: %fillup_prereq
+%if !%{with systemd}
Requires: %insserv_prereq
+%endif
Requires: %{name}-libs = %{version}
Requires: coreutils
Requires: pwdutils
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2017-02-09 11:16:19
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2017-01-11 12:03:13.286140063 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2017-02-09 11:16:20.708889097 +0100
@@ -1,0 +2,20 @@
+Mon Jan 30 15:46:54 UTC 2017 - adam.ma...@suse.de
+
+- Merge changes from SLE to openSUSE (FATE#322416):
+ * freeradius-server-radclient-init-error-buffer.patch - make sure
+we initialize error buffer. bsc#911886: radclient error free()
+invalid pointer
+ * freeradius-server-opensslversion.patch: remove OpenSSL version
+check and assume we know what we are doing. (bnc#1013311)
+ * merge .changes file, mostly.
+- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
+ security fixes do not necessarily bump version numbers as
+ does upstream OpenSSL (bnc#1021375)
+- do not generate certificates in %post. End-user needs to do this
+ manually.
+- keep FreeTDS disabled on SLE12 - we never shipped it enabled
+- require OpenSSL 1.0+
+- use pkgconfig(systemd) instead of plain systemd as BuildRequires
+- don't list manual pages as %doc
+
+---
@@ -8,0 +29,6 @@
+Fri Nov 18 14:48:59 UTC 2016 - adam.ma...@suse.de
+
+- Add upstream keyring
+- 2 new modules: rlm_sql_freetds and rlm_eap_fast
+
+---
@@ -11,3 +37,78 @@
-- update to 3.0.12
- * for a detailed list of changes look at:
-/usr/share/doc/packages/freeradius-server/ChangeLog
+- update to 3.0.12 - still fate#320481
+ The focus of this release is stability.
+ * Feature improvements
++ Add support for =~ and !~ in update sections. See "man unlang"
++ Add dictionary.checkpoint.
++ Simultaneous-Use prints out more information.
++ Print WARNING in debug mode when packets may be truncated.
++ Added expansions %{home_server:state} and
+ %{home_server_pool:state}, which show the state of the
+ server / pool.
++ Mark rlm_sql_freetds as stable.
++ Make rlm_perl less fragile. Patch from Herwin Weststrate.
++ Allow extended attributes to have "encrypt=2"
++ Update dictionary.aruba.
++ Add support for EAP-FAST. This is an isolated feature which
+ does not affect anything else.
++ Update OpenSSL vulnerability list. Use a version of OpenSSL
+ released after September 20, 2016.
++ EAP certificate verification is now done when "verify" is
+ enabled and "ocsp" is disabled.
++ New dhcpclient and rlm_rad_counter man pages.
++ Minor abfab and moonshot additions.
++ Pass CFLAGS through from environment in RPM builds. Allows
+ more custom builds.
++ Build with Heimdal in addtion to libkrb5.
+ * Bug Fixes
++ Use correct typedef for older versions of sqlite.
++ Update mssql schema to add priority
++ don't complain on /dev/urandom in ldap
++ fix == operator in update sections
++ Don't create DHCP strings with many trailing zeros.
++ Allow MS-CHAP change passwords instead of complaining on
+ large buffer.
++ Allow assignment or equality operator on SQL.
++ Update aclocal tests for FreeBSD 10.
++ Remove occasional hang in rlm_linelog.
++ Copy VSAs to inner tunnel for TTLS and PEAP. Fixes #1544
++ A few minor bugfixes caught in v3.1.x cleanup, and
+ back-ported to v3.0.x.
++ do_not_respond again works in post-proxy
++ Allow realm "~^.*$" {} and User-Name with no realm.
++ Fix leak when creating unknown attributes
++ Fix Debian / logrotate.
++ Make OpenSSL error functions thread-safe.
++ Fix crash with rlm_sql and updating SQL-User-Name.
++ Debian build updates.
++ Allow regular expression comparisons in radclient.
++ Fix memory leak on unknown attributes in detail file reader.
++ Update example paths in "man" pages when installing them
++ Build fixes for rlm_mschap. Fixes #1489.
++ BSD build fixes. Patch from issue #1583.
++ Be more careful about /lib/ when building. Fixes #1585.
++ Correct ifdef placement error. Fixes #1572.
++ Allow for more files in internal "exfile" API So it will be
+ possible to open more than 64 "detail" files at the same
+ time.
++ Remove support for statically built EAP modules. Fixes #1591.
++ Many fixes to rlm_python from Guillaume Pannatier.
++ Use correct week adjustment in SQLcounter. Fixes #1608
++ Minor fixes to allow compilation without DHCP, VMPS, or TCP.
++ Fix checks
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2016-10-02 00:09:59
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2016-09-08 17:38:55.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2016-10-02 00:10:00.0 +0200
@@ -1,0 +2,7 @@
+Thu Sep 29 20:14:34 UTC 2016 - mich...@stroeder.com
+
+- update to 3.0.12
+ * for a detailed list of changes look at:
+/usr/share/doc/packages/freeradius-server/ChangeLog
+
+---
Old:
freeradius-server-3.0.11.tar.bz2
freeradius-server-3.0.11.tar.bz2.sig
New:
freeradius-server-3.0.12.tar.bz2
freeradius-server-3.0.12.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.f9T1MX/_old 2016-10-02 00:10:02.0 +0200
+++ /var/tmp/diff_new_pack.f9T1MX/_new 2016-10-02 00:10:02.0 +0200
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.11
+Version:3.0.12
Release:0
%if 0%{?suse_version} > 1140
@@ -552,6 +552,7 @@
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/attr_filter
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/cache_eap
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/chap
+%config(missingok) %{_sysconfdir}/raddb/mods-enabled/date
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/detail
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/detail.log
%config(missingok) %{_sysconfdir}/raddb/mods-enabled/dhcp
@@ -588,6 +589,7 @@
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/dhcp
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/eap
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/filter
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/policy.d/moonshot-targeted-ids
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/policy.d/operator-name
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/policy.d/abfab-tr
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/debug
@@ -630,6 +632,7 @@
%{_libdir}/freeradius/rlm_digest.so
%{_libdir}/freeradius/rlm_dynamic_clients.so
%{_libdir}/freeradius/rlm_eap.so
+%{_libdir}/freeradius/rlm_eap_fast.so
%{_libdir}/freeradius/rlm_eap_gtc.so
%{_libdir}/freeradius/rlm_eap_leap.so
%{_libdir}/freeradius/rlm_eap_md5.so
@@ -663,6 +666,7 @@
%{_libdir}/freeradius/rlm_sql.so
%{_libdir}/freeradius/rlm_sqlcounter.so
%{_libdir}/freeradius/rlm_sqlippool.so
+%{_libdir}/freeradius/rlm_sql_freetds.so
%{_libdir}/freeradius/rlm_sql_null.so
%{_libdir}/freeradius/rlm_test.so
%{_libdir}/freeradius/rlm_unix.so
++ freeradius-server-3.0.11.tar.bz2 -> freeradius-server-3.0.12.tar.bz2
++
21942 lines of diff (skipped)
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2016-09-08 17:38:54
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2016-01-28 17:24:17.0 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2016-09-08 17:38:55.0 +0200
@@ -1,0 +2,8 @@
+Fri Sep 2 12:16:56 UTC 2016 - adam.ma...@suse.de
+
+- use %{with} macro for conditional inclusions instead of hardcoding
+ version numbers
+- improved package descriptions
+- fixed builds on SLE12 and SLE11SP4
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.RjtyFY/_old 2016-09-08 17:38:56.0 +0200
+++ /var/tmp/diff_new_pack.RjtyFY/_new 2016-09-08 17:38:56.0 +0200
@@ -1,7 +1,7 @@
#
# spec file for package freeradius-server
#
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -22,7 +22,26 @@
Name: freeradius-server
Version:3.0.11
Release:0
-Summary:Very Highly Configurable Radius Server
+
+%if 0%{?suse_version} > 1140
+%bcond_without systemd
+%bcond_without freetds
+%bcond_without libjson
+%define runpath /run
+%else
+%bcond_withsystemd
+%bcond_withfreetds
+%bcond_withlibjson
+%define runpath /var/run
+%endif
+
+%if 0%{?is_opensuse}
+%bcond_without memcached
+%else
+%bcond_withmemcached
+%endif
+
+Summary:RADIUS Server
License:GPL-2.0 and LGPL-2.1
Group: Productivity/Networking/Radius/Servers
Url:http://www.freeradius.org/
@@ -38,7 +57,12 @@
BuildRequires: apache2-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
+%if 0%{?suse_version} > 0 && 0%{?suse_version} <= 1110
+BuildRequires: libdb-5_1-devel
+%endif
+%if %{with freetds}
BuildRequires: freetds-devel
+%endif
BuildRequires: gcc-c++
BuildRequires: gdbm-devel
BuildRequires: gettext-devel
@@ -47,8 +71,12 @@
BuildRequires: libcom_err-devel
BuildRequires: libcurl-devel
BuildRequires: libidn-devel
+%if %{with json}
BuildRequires: libjson-devel
+%endif
+%if %{with memcached}
BuildRequires: libmemcached-devel
+%endif
BuildRequires: libmysqlclient-devel
BuildRequires: libpcap-devel
BuildRequires: libtalloc-devel
@@ -63,7 +91,11 @@
BuildRequires: python-devel
BuildRequires: sqlite3-devel
BuildRequires: unixODBC-devel
+%if 0%{?suse_version} > 1110
BuildRequires: pkgconfig(apr-1)
+%else
+BuildRequires: libapr1-devel
+%endif
Requires: %fillup_prereq
Requires: %insserv_prereq
Requires: %{name}-libs = %{version}
@@ -79,21 +111,25 @@
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%{?libperl_requires}
Conflicts: radiusd-livingston radiusd-cistron icradius
-%if 0%{?suse_version} > 1140
+%if %{with systemd}
BuildRequires: systemd
%{?systemd_requires}
%endif
%description
-The FreeRADIUS server has a number of features found in other servers
-and additional features not found in any other server.
+Remote Authentication Dial-In User Service (RADIUS) is a networking
+protocol that provides centralized Authentication, Authorization, and
+Accounting (AAA or Triple A) management for users who connect and
+use a network service.
+
+FreeRADIUS is a modular, high performance free RADIUS implementation.
%package libs
Summary:FreeRADIUS shared library
Group: Productivity/Networking/Radius/Servers
%description libs
-The FreeRADIUS shared library
+The FreeRADIUS shared libraries
%package utils
Summary:FreeRADIUS Clients
@@ -101,16 +137,15 @@
Requires: %{name}-libs = %{version}
%description utils
-The FreeRADIUS server has a number of features found in other servers
-and additional features not found in any other server.
+Collection of FreeRADIUS utilities
%package devel
-Summary:FreeRADIUS Development Files (static libs)
+Summary:FreeRADIUS Development Files
Group: Development/Libraries/C and C++
Requires: %{name}-libs = %{version}
%description devel
-These are the static libraries for the FreeRADIUS package.
+FreeRADIUS development header files
%package doc
Summary:FreeRADIUS Documentation
@@ -118,7 +153,7 @@
Requires: %{name}
%description doc
-This package
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2016-01-28 17:23:25
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2015-10-06 13:27:59.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2016-01-28 17:24:17.0 +0100
@@ -1,0 +2,8 @@
+Mon Jan 25 18:48:55 UTC 2016 - mich...@stroeder.com
+
+- removed installation of experimental module rlm_sqlhpwippool.so
+- update to 3.0.11
+ * for a detailed list of changes look at:
+/usr/share/doc/packages/freeradius-server/ChangeLog
+
+---
Old:
freeradius-server-3.0.10.tar.bz2
freeradius-server-3.0.10.tar.bz2.sig
New:
freeradius-server-3.0.11.tar.bz2
freeradius-server-3.0.11.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.CRLcan/_old 2016-01-28 17:24:19.0 +0100
+++ /var/tmp/diff_new_pack.CRLcan/_new 2016-01-28 17:24:19.0 +0100
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.10
+Version:3.0.11
Release:0
Summary:Very Highly Configurable Radius Server
License:GPL-2.0 and LGPL-2.1
@@ -618,7 +618,6 @@
%{_libdir}/freeradius/rlm_unpack.so
%{_libdir}/freeradius/rlm_cache_memcached.so
%{_libdir}/freeradius/rlm_cache_rbtree.so
-%{_libdir}/freeradius/rlm_sqlhpwippool.so
%files utils
%defattr(-,root,root)
++ freeradius-server-3.0.10.tar.bz2 -> freeradius-server-3.0.11.tar.bz2
++
11460 lines of diff (skipped)
++ freeradius-server-rlm_sql_unixodbc-configure.patch ++
--- /var/tmp/diff_new_pack.CRLcan/_old 2016-01-28 17:24:22.0 +0100
+++ /var/tmp/diff_new_pack.CRLcan/_new 2016-01-28 17:24:22.0 +0100
@@ -1,5 +1,5 @@
freeradius-server-3.0.9-orig/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/configure
2015-07-08 22:43:41.921011659 +0200
-+++
freeradius-server-3.0.9/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/configure
2015-07-08 22:45:58.874299508 +0200
+---
freeradius-server-3.0.11.orig/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/configure
2016-01-25 19:27:03.0 +0100
freeradius-server-3.0.11/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/configure
2016-01-25 20:42:24.835741109 +0100
@@ -1843,7 +1843,7 @@
fi
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2015-10-06 13:27:54
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is "freeradius-server"
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2015-08-10 09:16:04.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2015-10-06 13:27:59.0 +0200
@@ -1,0 +2,7 @@
+Mon Oct 5 19:50:27 UTC 2015 - mich...@stroeder.com
+
+- update to 3.0.10
+ * for a detailed list of changes look at:
+/usr/share/doc/packages/freeradius-server/ChangeLog
+
+---
Old:
freeradius-server-3.0.9.tar.bz2
freeradius-server-3.0.9.tar.bz2.sig
New:
freeradius-server-3.0.10.tar.bz2
freeradius-server-3.0.10.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.nFphnp/_old 2015-10-06 13:28:00.0 +0200
+++ /var/tmp/diff_new_pack.nFphnp/_new 2015-10-06 13:28:00.0 +0200
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.9
+Version:3.0.10
Release:0
Summary:Very Highly Configurable Radius Server
License:GPL-2.0 and LGPL-2.1
++ freeradius-server-3.0.9.tar.bz2 -> freeradius-server-3.0.10.tar.bz2
++
35819 lines of diff (skipped)
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2015-08-10 09:16:03
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2015-07-16 17:15:25.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2015-08-10 09:16:04.0 +0200
@@ -1,0 +2,7 @@
+Fri Aug 7 10:56:29 UTC 2015 - jk...@suse.de
+
+- Fix boo#912714: freeradius can't use ntlm_auth
+ * Create winbind group
+ * Add radiusd to winbind group
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.mRfy8a/_old 2015-08-10 09:16:05.0 +0200
+++ /var/tmp/diff_new_pack.mRfy8a/_new 2015-08-10 09:16:05.0 +0200
@@ -284,6 +284,14 @@
%{_sbindir}/groupadd -r radiusd 2 /dev/null || :
%{_sbindir}/useradd -r -g radiusd -s /bin/false -c Radius daemon -d \
%{_localstatedir}/lib/radiusd radiusd 2 /dev/null || :
+
+# boo#912714: add radiusd to winbind group for ntlm_auth
+# add winbind group and fail silently if it already exists
+%{_bindir}/getent group winbind \
+ || %{_sbindir}/groupadd -r winbind
+# add radiusd to winbind group
+%{_bindir}/gpasswd -a radiusd winbind
+
%if 0%{?suse_version} 1140
%service_add_pre %{unitname}.service
%endif
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2015-07-16 17:15:24
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2015-04-25 11:25:51.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2015-07-16 17:15:25.0 +0200
@@ -1,0 +2,10 @@
+Wed Jul 8 20:05:24 UTC 2015 - mich...@stroeder.com
+
+- update to 3.0.9
+ * for a detailed list of changes look at:
+/usr/share/doc/packages/freeradius-server/ChangeLog
+- freeradius-server-rlm_sql_unixodbc-configure.patch removes
+ hard-coded directory in configure script of rlm_sql_unixodbc
+- install new module rlm_sqlhpwippool.so
+
+---
Old:
freeradius-server-3.0.8.tar.bz2
freeradius-server-3.0.8.tar.bz2.sig
New:
freeradius-server-3.0.9.tar.bz2
freeradius-server-3.0.9.tar.bz2.sig
freeradius-server-rlm_sql_unixodbc-configure.patch
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.UmK6p9/_old 2015-07-16 17:15:26.0 +0200
+++ /var/tmp/diff_new_pack.UmK6p9/_new 2015-07-16 17:15:26.0 +0200
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.8
+Version:3.0.9
Release:0
Summary:Very Highly Configurable Radius Server
License:GPL-2.0 and LGPL-2.1
@@ -34,6 +34,7 @@
Patch2: freeradius-server-radiusd-logrotate.patch
Patch3: freeradius-server-rcradiusd.patch
Patch4: freeradius-server-fix-cert-bootstrap.patch
+Patch5: freeradius-server-rlm_sql_unixodbc-configure.patch
BuildRequires: apache2-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
@@ -190,6 +191,7 @@
%patch2 -p1
%patch3 -p1
%patch4 -p1
+%patch5 -p1
%build
modified=$(sed -n '/^/n;s/ - .*$//;p;q' %{_sourcedir}/%{name}.changes)
@@ -608,6 +610,7 @@
%{_libdir}/freeradius/rlm_unpack.so
%{_libdir}/freeradius/rlm_cache_memcached.so
%{_libdir}/freeradius/rlm_cache_rbtree.so
+%{_libdir}/freeradius/rlm_sqlhpwippool.so
%files utils
%defattr(-,root,root)
++ freeradius-server-3.0.8.tar.bz2 - freeradius-server-3.0.9.tar.bz2 ++
44391 lines of diff (skipped)
++ freeradius-server-rlm_sql_unixodbc-configure.patch ++
---
freeradius-server-3.0.9-orig/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/configure
2015-07-08 22:43:41.921011659 +0200
+++
freeradius-server-3.0.9/src/modules/rlm_sql/drivers/rlm_sql_unixodbc/configure
2015-07-08 22:45:58.874299508 +0200
@@ -1843,7 +1843,7 @@
fi
- smart_try_dir=$unixodbc_lib_dir /usr/local/unixodbc/lib
+ smart_try_dir=$unixodbc_lib_dir
ac_ext=c
ac_cpp='$CPP $CPPFLAGS'
ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext 5'
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2015-04-25 09:53:16
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2015-01-15 15:59:03.0 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2015-04-25 11:25:51.0 +0200
@@ -1,0 +2,23 @@
+Thu Apr 23 14:22:17 UTC 2015 - vci...@suse.com
+
+- minor adjustments/cleanup of spec and changes
+
+---
+Wed Apr 22 20:31:44 UTC 2015 - mich...@stroeder.com
+
+- update to 3.0.8
+ * for a detailed list of changes look at:
+/usr/share/doc/packages/freeradius-server/ChangeLog
+- new set of consolidated patch files:
+ deleted:
+ * freeradius-server-2.1.1-logrotate_su.patch
+ * freeradius-server-2.1.6-rcradiusd.patch
+ * freeradius-server-initscript-pidfile.patch
+ * freeradius-server-radius-reload-logrotate.patch
+ * freeradius-server-var_run.patch
+ added:
+ * freeradius-server-radiusd-logrotate.patch
+ * freeradius-server-rcradiusd.patch
+ * freeradius-server-tmpfiles.patch
+
+---
Old:
freeradius-server-2.1.1-logrotate_su.patch
freeradius-server-2.1.6-rcradiusd.patch
freeradius-server-3.0.6.tar.bz2
freeradius-server-3.0.6.tar.bz2.sig
freeradius-server-initscript-pidfile.patch
freeradius-server-radius-reload-logrotate.patch
freeradius-server-var_run.patch
New:
freeradius-server-3.0.8.tar.bz2
freeradius-server-3.0.8.tar.bz2.sig
freeradius-server-radiusd-logrotate.patch
freeradius-server-rcradiusd.patch
freeradius-server-tmpfiles.patch
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.bDwUBN/_old 2015-04-25 11:25:52.0 +0200
+++ /var/tmp/diff_new_pack.bDwUBN/_new 2015-04-25 11:25:52.0 +0200
@@ -1,7 +1,7 @@
#
# spec file for package freeradius-server
#
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +20,7 @@
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Name: freeradius-server
-Version:3.0.6
+Version:3.0.8
Release:0
Summary:Very Highly Configurable Radius Server
License:GPL-2.0 and LGPL-2.1
@@ -30,13 +30,10 @@
Source99:
ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2.sig
Source1:radiusd.service
Source2:freeradius-tmpfiles.conf
-Patch2: freeradius-server-2.1.6-rcradiusd.patch
-Patch7: freeradius-server-fix-cert-bootstrap.patch
-Patch8: freeradius-server-initscript-pidfile.patch
-Patch9: freeradius-server-radius-reload-logrotate.patch
-# PATCH-FIX-SUSE use 'su' logrotate option (bnc#677335)
-Patch12:freeradius-server-2.1.1-logrotate_su.patch
-Patch13:freeradius-server-var_run.patch
+Patch1: freeradius-server-tmpfiles.patch
+Patch2: freeradius-server-radiusd-logrotate.patch
+Patch3: freeradius-server-rcradiusd.patch
+Patch4: freeradius-server-fix-cert-bootstrap.patch
BuildRequires: apache2-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
@@ -189,12 +186,10 @@
%prep
%setup -q
-%patch2
-%patch7 -p1
-%patch8 -p1
-%patch9 -p1
-%patch12 -p1
-%patch13 -p1
+%patch1 -p1
+%patch2 -p1
+%patch3 -p1
+%patch4 -p1
%build
modified=$(sed -n '/^/n;s/ - .*$//;p;q' %{_sourcedir}/%{name}.changes)
@@ -415,6 +410,7 @@
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/abfab-tls
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/abfab-tr-idp
%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/channel_bindings
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/challenge
# sites-enabled
# symlink: %{_sysconfdir}/raddb/sites-enabled/xxx - ../sites-available/xxx
@@ -603,6 +599,7 @@
%{_libdir}/freeradius/rlm_sqlcounter.so
%{_libdir}/freeradius/rlm_sqlippool.so
%{_libdir}/freeradius/rlm_sql_null.so
+%{_libdir}/freeradius/rlm_test.so
%{_libdir}/freeradius/rlm_unix.so
%{_libdir}/freeradius/rlm_utf8.so
%{_libdir}/freeradius/rlm_wimax.so
++ freeradius-server-3.0.6.tar.bz2 -
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2015-01-15 15:58:50
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2014-12-23 11:49:10.0 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2015-01-15 15:59:03.0 +0100
@@ -1,0 +2,29 @@
+Wed Jan 14 13:10:11 UTC 2015 - tchva...@suse.com
+
+- Do not disable as-needed build
+- Remove the with_sysconfig switch and just stick with versions
+
+---
+Tue Jan 13 09:42:05 UTC 2015 - vci...@suse.com
+
+- update to 3.0.6
+ - fixes a segmentation fault in PEAP module (bnc#912588)
+ Feature improvements:
+ * radmin / raddebug conditional errors are printed to the output, instead of
being discarded.
+ * raddebug will exit if condition set with -c was invalid.
+ * radmin auto-reconnects if the connection to the server has gone away.
+ * rlm_cache now has submodule support. See raddb/mods-available/cache
+ * New memcached driver for rlm_cache. See raddb/mods-available/cache
+ * Add support for Attribute-Name[*] in conditions. See man unlang for
details.
+ * Add Attribute-Name[n] which gets the last instance of an attribute e.g.
Module-Failure-Message[n].
+ * Allow for redundant string expansions. See the instantiate section of
radiusd.conf.
+ * When checking IP addresses in conditions, make the right side be parsed as
an IP prefix.
+ * Support JIT compilation of compiled regular expressions when built with
libpcre.
+ * Support named capture groups with %{regex:name} when built with
libpcre.
+ * Increase regular expression capture groups from 8 to 32.
+ * Emit error markers for badly formed regular expressions.
+ * Allow 'm' flag to enable multiline mode in regular expressions.
+ * Support limited implicit attribute conversion in update sections.
+ * Support casting between IPv6 and IPv4 where the IPv6 address has the v4/v6
mapping prefix (:::).
+
+---
Old:
freeradius-server-3.0.5.tar.bz2
New:
freeradius-server-3.0.6.tar.bz2
freeradius-server-3.0.6.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.UfBaAl/_old 2015-01-15 15:59:04.0 +0100
+++ /var/tmp/diff_new_pack.UfBaAl/_new 2015-01-15 15:59:04.0 +0100
@@ -1,7 +1,7 @@
#
# spec file for package freeradius-server
#
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -16,21 +16,18 @@
#
-%global with_sysvinit 0
%define unitname radiusd
%define apxs2 apxs2-prefork
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
-%if 0%{?suse_version} 1310
-%global with_sysvinit 1
-%endif
Name: freeradius-server
-Version:3.0.5
+Version:3.0.6
Release:0
Summary:Very Highly Configurable Radius Server
License:GPL-2.0 and LGPL-2.1
Group: Productivity/Networking/Radius/Servers
Url:http://www.freeradius.org/
Source:
ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2
+Source99:
ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2.sig
Source1:radiusd.service
Source2:freeradius-tmpfiles.conf
Patch2: freeradius-server-2.1.6-rcradiusd.patch
@@ -53,6 +50,7 @@
BuildRequires: libcurl-devel
BuildRequires: libidn-devel
BuildRequires: libjson-devel
+BuildRequires: libmemcached-devel
BuildRequires: libmysqlclient-devel
BuildRequires: libpcap-devel
BuildRequires: libtalloc-devel
@@ -183,7 +181,7 @@
%package sqlite
Summary:SQLite support for freeradius
Group: System Environment/Daemons
-BuildRequires: sqlite-devel
+BuildRequires: sqlite3-devel
Requires: %{name} = %{version}
%description sqlite
@@ -203,13 +201,7 @@
DATE=\$(date -d ${modified} +%%b %%e %%Y)\
TIME=\$(date -d ${modified} +%%R)\
find . -type f -regex .*\.c\|.*\.cpp\|.*\.h -exec sed -i
s/__DATE__/${DATE}/g;s/__TIME__/${TIME}/g {} +
-# This package failed when testing with -Wl,-as-needed being default.
-# So we disable it here, if you want to retest, just delete this comment and
the line below.
-export SUSE_ASNEEDED=0
-export CFLAGS=%{optflags}
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2014-12-23 11:50:40
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2014-08-04 15:14:43.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2014-12-23 11:49:10.0 +0100
@@ -1,0 +2,63 @@
+Mon Dec 22 09:09:16 UTC 2014 - dims...@opensuse.org
+
+- Drop .keyring and .sig file: freeradius-server still uses MD5
+ signatures, which are no longer validated/accepted by GPG 2.1.
+
+---
+Wed Dec 3 14:22:03 UTC 2014 - vci...@suse.com
+
+- update to 3.0.5
+ Some of the new features:
+ * Allow LDAP to specify arbitrary attributes for dynamic
+clients.
+ * Allow one level of backslashes (finally). See radiusd.conf,
+correct_escapes setting.
+ * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2
+in EAP methods.
+ * Allow multiple new connections to be spawned simultaneously
+in the connection pool, to cope with spikes in traffic.
+ * Use kqueue on systems which support it. This allows for
+better scaling when using many sockets.
+ * Home server response_window can now take fractions of a
+second. See proxy.conf.
+ * radmin now supports show module status, as thee counterpart
+to set module status
+ * ipaddr will now use v6 if no v4 address is present. You should
+use ipv4addr or ipv6addr to force v4/v6 addresses.
+ * client sections will allow ipaddr = 192.192.0/24. The old
+netmask is still accepted, but the new format is preferred.
+ * Allow custom HTTP headers to be set for rlm_rest requests using
+control:REST-HTTP-Header (attributes consumed after use).
+ * Extend format of %{rest:} expansion to allow HTTP method and POST
+data to be specified
+and urlquoting.
+ * Add support for aliases in rlm_ldap.
+ * Add support for connection pool sharing to all modules that use
+the connection pool (pool = instance).
+ * tls sections now have a psk_query configuration item, for dynamic
+queries to discover a key from a PSK identity.
+ * Preliminary support for EAP channel bindings.
+ * Foundational work for dynamic home servers. They do not yet work,
+but this is now only a matter of updating the realm module in
+a future release.
+ * Support attr[*] syntax to copy all instances of an attribute when
+used with the += operator in an update section. May be qualified with
+a tag.
+ * The logintime and expiration modules can now be listed in the
+post-auth section. This makes some configurations simpler.
+ * rlm_sqlippool is now IPV6 capable. Set ipv6 = yes to get
+Framed-IPv6-Prefix returned. The SQL queries have NOT been updated.
+Please submit patches.
+ and numerous; bugfixes
+- remove gpg-offline
+- create /run/radiusd after install
+- drop freeradius-server-opensslversion.patch (upstream)
+
+---
+Mon Dec 1 10:52:28 UTC 2014 - meiss...@suse.com
+
+- freeradius-server-opensslversion.patch: do not check the minor
+ version of openssl, minor versions are supposed to be compatible.
+ bnc#906682
+
+---
Old:
freeradius-server-3.0.3.tar.bz2
freeradius-server-3.0.3.tar.bz2.sig
freeradius-server.keyring
New:
freeradius-server-3.0.5.tar.bz2
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.DkuloF/_old 2014-12-23 11:49:11.0 +0100
+++ /var/tmp/diff_new_pack.DkuloF/_new 2014-12-23 11:49:11.0 +0100
@@ -24,7 +24,7 @@
%global with_sysvinit 1
%endif
Name: freeradius-server
-Version:3.0.3
+Version:3.0.5
Release:0
Summary:Very Highly Configurable Radius Server
License:GPL-2.0 and LGPL-2.1
@@ -33,8 +33,6 @@
Source:
ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2
Source1:radiusd.service
Source2:freeradius-tmpfiles.conf
-Source10:
ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2.sig
-Source11: %{name}.keyring
Patch2: freeradius-server-2.1.6-rcradiusd.patch
Patch7: freeradius-server-fix-cert-bootstrap.patch
Patch8: freeradius-server-initscript-pidfile.patch
@@ -50,7 +48,6 @@
BuildRequires: gdbm-devel
BuildRequires: gettext-devel
BuildRequires: glibc-devel
-BuildRequires: gpg-offline
BuildRequires:
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2014-08-04 15:14:42
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2014-05-21 16:19:13.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2014-08-04 15:14:43.0 +0200
@@ -1,0 +2,20 @@
+Sun Aug 3 18:31:49 UTC 2014 - sfal...@opensuse.org
+
+- added patch to changelog to fix factory-auto failure (Req #242825)
+ added:
+freeradius-server-var_run.patch
+
+---
+Mon Jul 28 12:28:44 UTC 2014 - vci...@suse.com
+
+- fixed SUSE spelling in a filename (bnc#889034)
+ * don't install suse/README.SuSE
+- remove old tarball and signature file
+
+---
+Tue Jul 22 12:17:52 UTC 2014 - vci...@suse.com
+
+- spec run through spec-cleaner
+- don't install files to /var/run
+
+---
Old:
freeradius-server-3.0.1.tar.bz2
freeradius-server-3.0.1.tar.bz2.sig
New:
freeradius-server-var_run.patch
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.mDAFf9/_old 2014-08-04 15:14:44.0 +0200
+++ /var/tmp/diff_new_pack.mDAFf9/_new 2014-08-04 15:14:44.0 +0200
@@ -17,12 +17,13 @@
%global with_sysvinit 0
+%define unitname radiusd
+%define apxs2 apxs2-prefork
+%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
%if 0%{?suse_version} 1310
%global with_sysvinit 1
%endif
-
Name: freeradius-server
-%define unitname radiusd
Version:3.0.3
Release:0
Summary:Very Highly Configurable Radius Server
@@ -40,6 +41,7 @@
Patch9: freeradius-server-radius-reload-logrotate.patch
# PATCH-FIX-SUSE use 'su' logrotate option (bnc#677335)
Patch12:freeradius-server-2.1.1-logrotate_su.patch
+Patch13:freeradius-server-var_run.patch
BuildRequires: apache2-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
@@ -69,43 +71,29 @@
BuildRequires: sqlite3-devel
BuildRequires: unixODBC-devel
BuildRequires: pkgconfig(apr-1)
-%if 0%{?suse_version} 1140
-BuildRequires: systemd
-%{?systemd_requires}
-%endif
-
-PreReq: %fillup_prereq
-PreReq: %insserv_prereq
-PreReq: coreutils
-PreReq: openssl
-PreReq: perl
-PreReq: pwdutils
-%define apxs2 apxs2-prefork
-%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
+Requires: %fillup_prereq
+Requires: %insserv_prereq
Requires: %{name}-libs = %{version}
+Requires: coreutils
+Requires: pwdutils
Requires: python
-%{?libperl_requires}
+Requires(pre): openssl
+Requires(pre): perl
Recommends: logrotate
Provides: freeradius = %{version}
Provides: radiusd
Obsoletes: freeradius %{version}
BuildRoot: %{_tmppath}/%{name}-%{version}-build
+%{?libperl_requires}
Conflicts: radiusd-livingston radiusd-cistron icradius
+%if 0%{?suse_version} 1140
+BuildRequires: systemd
+%{?systemd_requires}
+%endif
%description
The FreeRADIUS server has a number of features found in other servers
-and additional features not found in any other server. The server's
-features are:
-
-* Support for RFC and VSA attributes
-
-* Additional server configuration attributes
-
-* Selection of a particular configuration
-
-* Authentication methods
-
-* Accounting methods
+and additional features not found in any other server.
%package libs
Summary:FreeRADIUS shared library
@@ -121,18 +109,7 @@
%description utils
The FreeRADIUS server has a number of features found in other servers
-and additional features not found in any other server. The server's
-features are:
-
-* Support for RFC and VSA attributes
-
-* Additional server configuration attributes
-
-* Selection of a particular configuration
-
-* Authentication methods
-
-* Accounting methods
+and additional features not found in any other server.
%package devel
Summary:FreeRADIUS Development Files (static libs)
@@ -153,8 +130,8 @@
%package ldap
Summary:LDAP support for freeradius
Group: System Environment/Daemons
-Requires: %{name} = %{version}
BuildRequires: openldap2-devel
+Requires: %{name} = %{version}
%description ldap
This plugin provides the LDAP support for the FreeRADIUS server project.
@@ -162,8 +139,8 @@
%package krb5
Summary:
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2014-05-21 16:19:10
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2014-03-04 13:22:43.0 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2014-05-21 16:19:13.0 +0200
@@ -1,0 +2,65 @@
+Fri May 16 13:31:41 UTC 2014 - vci...@suse.com
+
+- update to 3.0.3
+ Many bugfixes
+ Feature improvements
+ * Everything now builds with no warnings from the C compiler,
+ clang static analyzer, or cppcheck.
+ * rlm_ldap now supports defining the LDAP attribute name via
+ backticked expansion (i.e. shell command) in
+ RADIUS - LDAP mappings.
+ * rlm_ldap now supports older style generic attributes.
+ * dynamic expansions (e.g. %{expr:1 + 2} are now parsed
+ when the server starts. Syntax errors in the strings
+ are caught, and a descriptive error is printed.
+ * Static regular expressions (e.g. /a*b/) are now parsed
+ when the server starts. Syntax errors in the strings
+ are caught, and a descriptive error is printed.
+ * dynamic expansions are cached after being parsed. They are
+ no longer re-parsed at run-time for every request.
+ * regular expressions are now parsed and cached when the server
+ starts.
+ * Added the %{rest:} expansion to rlm_rest, which will send
+ a GET request to the URL passed as the format string.
+ Any body text will be written to the expansion buffer.
+ * rlm_rest now available as a debian package.
+ * When an 'if' condition statically evaluates to true/false,
+ unlang does more static optimization. For examples, see
+ src/tests/keywords/if-skip
+ * All modules are marked as safe for '-C', which lets the
+ dynamic expansion checks work in more situations.
+ * Added 'none' and 'custom' rlm_rest body types. 'custom'
+ allows sending of arbitrary expanded text and content-type
+ headers.
+ * Added config section to Perl. See mods-available/perl
+ * Added '%v' which expands to the server version - Patch
+ from Alan Buxey.
+ * more mis-matched casts are caught in if conditions,
+ and descriptive errors are printed.
+ * Support basic response validation in radclient. This allows
+ administrators to write local test cases for their
+ site-specific configurations.
+ * Removed radconf2xml and radmin show client config and
+ show home_server config.
+ * Forbid running with vulnerable versions of OpenSSL.
+ See allow_vulnerable_openssl in the security
+ subsection of radiusd.conf
+ * Catch underlying heartbleed problem, so that nothing bad
+ happens even when using a vulnerable version of OpenSSL.
+ * Add locking API for sql_null, linelog, and detail modules,
+ which should improve performance and work around issues
+ on platforms with bad file locking.
+ * Allow DHCP NAKs to be delayed, via setting
+ reply:FreeRADIUS-Response-Delay = 1
+ * Allow tag and array references anywhere attributes
+ are allowed in unlang.
+ * many enhancements to radsniff, including output
+ to collectd, ipv6 support and packet loss statistics.
+ * Many dictionary updates (ZTE, Brocade, Motorola).
+ * rlm_yubikey now automatically splits passwords from OTP
+ strings.
+ * The detail file reader is now threaded by default.
+ This should improve performance reading the files.
+- dropped freeradius-server-CVE-2014-2015.patch (upstream)
+
+---
Old:
freeradius-server-CVE-2014-2015.patch
New:
freeradius-server-3.0.3.tar.bz2
freeradius-server-3.0.3.tar.bz2.sig
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.A4NX3k/_old 2014-05-21 16:19:15.0 +0200
+++ /var/tmp/diff_new_pack.A4NX3k/_new 2014-05-21 16:19:15.0 +0200
@@ -23,7 +23,7 @@
Name: freeradius-server
%define unitname radiusd
-Version:3.0.1
+Version:3.0.3
Release:0
Summary:Very Highly Configurable Radius Server
License:GPL-2.0 and LGPL-2.1
@@ -40,7 +40,6 @@
Patch9: freeradius-server-radius-reload-logrotate.patch
# PATCH-FIX-SUSE use 'su' logrotate option (bnc#677335)
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2014-03-04 13:22:42
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2014-02-11 10:55:09.0 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2014-03-04 13:22:43.0 +0100
@@ -1,0 +2,12 @@
+Fri Feb 28 09:04:08 UTC 2014 - vci...@suse.com
+
+- fix for CVE-2014-2015 (bnc#864576)
+ * denial of service in rlm_pap hash processing
+ * added freeradius-server-CVE-2014-2015.patch
+
+---
+Wed Jan 29 13:53:30 UTC 2014 - vci...@suse.com
+
+- remove the old 3.0.0 sources
+
+---
New:
freeradius-server-CVE-2014-2015.patch
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.Jcxvdz/_old 2014-03-04 13:22:44.0 +0100
+++ /var/tmp/diff_new_pack.Jcxvdz/_new 2014-03-04 13:22:44.0 +0100
@@ -40,6 +40,7 @@
Patch9: freeradius-server-radius-reload-logrotate.patch
# PATCH-FIX-SUSE use 'su' logrotate option (bnc#677335)
Patch12:freeradius-server-2.1.1-logrotate_su.patch
+Patch13:freeradius-server-CVE-2014-2015.patch
BuildRequires: apache2-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
@@ -224,6 +225,7 @@
%patch8 -p1
%patch9 -p1
%patch12 -p1
+%patch13 -p1
%build
modified=$(sed -n '/^/n;s/ - .*$//;p;q' %{_sourcedir}/%{name}.changes)
++ freeradius-server-CVE-2014-2015.patch ++
From ff5147c9e5088c7cf5c0b6ec6bfdd3a9d2042a28 Mon Sep 17 00:00:00 2001
From: Arran Cudbard-Bell a.cudba...@freeradius.org
Date: Thu, 13 Feb 2014 13:49:54 +
Subject: [PATCH] Fix potential crash with SSHA and salts 44bytes
---
src/modules/rlm_pap/rlm_pap.c | 10 ++
1 file changed, 6 insertions(+), 4 deletions(-)
diff --git a/src/modules/rlm_pap/rlm_pap.c b/src/modules/rlm_pap/rlm_pap.c
index 689acf0..1bf6d4e 100644
--- a/src/modules/rlm_pap/rlm_pap.c
+++ b/src/modules/rlm_pap/rlm_pap.c
@@ -123,7 +123,7 @@ static int mod_instantiate(CONF_SECTION *conf, void
*instance)
static void normify(REQUEST *request, VALUE_PAIR *vp, size_t min_length)
{
- uint8_t buffer[64];
+ uint8_t buffer[256];
if (min_length = sizeof(buffer)) return; /* paranoia */
@@ -132,9 +132,10 @@ static void normify(REQUEST *request, VALUE_PAIR *vp,
size_t min_length)
*/
if (vp-length = (2 * min_length)) {
size_t decoded;
- decoded = fr_hex2bin(buffer, vp-vp_strvalue, vp-length 1);
+ decoded = fr_hex2bin(buffer, vp-vp_strvalue, sizeof(buffer));
if (decoded == (vp-length 1)) {
- RDEBUG2(Normalizing %s from hex encoding,
vp-da-name);
+ RDEBUG2(Normalizing %s from hex encoding, %zu bytes -
%zu bytes,
+ vp-da-name, vp-length, decoded);
pairmemcpy(vp, buffer, decoded);
return;
}
@@ -150,7 +151,8 @@ static void normify(REQUEST *request, VALUE_PAIR *vp,
size_t min_length)
sizeof(buffer));
if (decoded 0) return;
if (decoded = (ssize_t) min_length) {
- RDEBUG2(Normalizing %s from base64 encoding,
vp-da-name);
+ RDEBUG2(Normalizing %s from base64 encoding, %zu bytes
- %zu bytes,
+ vp-da-name, vp-length, decoded);
pairmemcpy(vp, buffer, decoded);
return;
}
--
1.8.5.5
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2014-02-11 10:55:08
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2013-10-22 14:51:19.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2014-02-11 10:55:09.0 +0100
@@ -1,0 +2,89 @@
+Sat Jan 25 14:44:31 UTC 2014 - mar...@gmx.de
+
+- update to 3.0.1
+Feature improvements
+* Add timeout to exec, and ntlm_auth_timeout to mschap.
+ So that run-away child processes are caught earlier.
+* Allow TLS clients to use proto = tls, in which case
+ TLS is required. The shared secret is then set to radsec.
+* More documentation in the tls virtual server.
+* Add date module for date formatting.
+ See raddb/mods-available/date.
+* Added unit test suite for internal server functionality
+* When loading update sections, check if the RHS is a literal
+ value. If so, syntax check it immediately.
+* Update LDAP module documentation and functionality.
+ The generic attribute can now update lists.
+* Updated dictionary.extreme.
+* Update sqlippool to do clears as a separate transaction,
+ and at most once per second. This should help MySQL.
+* Respect control:Response-Packet-Type for all types of
+ requests.
+* Add support for SSL encryption to the MySQL driver.
+* Allow arbitrary connection parameters to be used with the
+ PostgreSQL driver.
+* Changes to the OpenLDAP schema to fully expose functionality
+ of the new LDAP module.
+* Update debian packaging to include a freeradius-config
+ package. This package may be provided as a site local
+ package to avoid fighting with the preinstalled config
+ files.
+Bug fixes
+* Use correct field for ARP setting in DHCP.
+* Fix crash on debug condition (#454).
+* Fix a number of minor issues caught by the clang
+ analyzer.
+* Set WARNING messages to yellow instead of normal text.
+* Correct debug colorise logic. Patch from Phil Mayers.
+* Encode attributes of type ethernet. No one uses them,
+ but it makes sense.
+* Work around regex initialization issues.
+* Fix build when linking against OpenSSL.
+* Print IDs as positive numbers, which helps for large DHCP
+ XIDs.
+* Fix issue with sql_ippool.
+* sqlcounter now uses 64-bit counters, to deal with 4G overflow.
+* Fix issues with DHCP subsystem.
+* Don't build / install disabled modules, or their config
+ files.
+* Fix build for OSX Mavericks, which hid the header files
+ in a magical place.
+* Fix LEAP buffer issue. You should still avoid LEAP.
+* Mark unknown WiMAX attributes as being WiMAX.
+* Fix typo in packet decoder for fragmented extended attrs
+* RPM spec fixes.
+* Fix rlm_perl build issues when not using threads.
+* Enable %{Response-Packet-Type} again.
+* Update configuration file parser to handle bool
+ consistently.
+* Update declarations of global boolean variables to use
+ bool consistently. This fixes an issue where some
+ modules were instantiated in config check mode and
+ did not work correctly.
+* Make more messages debug instead of info, to avoid
+ polluting the logs with messages that can't be fixed.
+* Set operator in internal unlang code to suppress spurious
+ warning messages.
+* Fix debian packaging.
+* Added status to Debian init script.
+* Fix update outer.request to update the outer request.
+* Don't print TLS debugging messages when not in debug mode.
+* Correctly manage counters for limit sections of TCP / TLS
+ listen sockets.
+* Fix libldap debug output.
+* Fix rlm_ldap tls functionality.
+* Initialise OpenSSL globals early to avoid issues with the
+ PostgreSQL library.
+* Fix typo in sqlcounter expansion code. Fixes #463
+* Overwrite previous instances of SQL-User-Name when adding
+ it to the request.
+* Work around bugs in both MIT and heimdal versions of
+ krb5_copy_context(), which caused segfaults in
+ multithreaded mode.
+* Provide meaningful error messages if Heimdal krb5 is used.
+* Fix attribute supression in rlm_detail.
+* Exit with error code if child fails to complete server
+ initialisation after forking. This allows init scripts to
+ correctly report whether the server started ok.
+
+---
Old:
freeradius-server-3.0.0.tar.bz2
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2013-10-22 14:51:18
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2013-09-07 12:35:16.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2013-10-22 14:51:19.0 +0200
@@ -1,0 +2,29 @@
+Mon Oct 21 12:06:19 UTC 2013 - vci...@suse.com
+
+- don't build with experimental modules
+- fix packaging bugs:
+ * install init scripts only on = 11.4
+ * install systemd unit
+ * add %defattr for submodules
+
+---
+Tue Oct 15 15:15:24 UTC 2013 - vci...@suse.com
+
+- update to 3.0.0
+ * new feature release
+ * see /usr/share/doc/packages/freeradius-server/ChangeLog
+for complete list of changes in this release
+ * documentation for upgrading from 2.x is in /etc/raddb/README.rst
+- drop oracle support (wasn't built anyway)
+- dropped patches (obsolete):
+ * freeradius-server-2.1.6-codecleanup.patch
+ * freeradius-server-2.1.6-dialup_admin.patch
+ * freeradius-server-2.1.1-edirectory.patch
+- added systemd service unit
+ * radiusd.service
+- added systemd-tmpfile for /var/run/radiusd
+ * freeradius-tmpfiles.conf
+- added gpg-offline verification
+ * freeradius-server.keyring
+
+---
Old:
freeradius-server-2.1.1-edirectory.patch
freeradius-server-2.1.6-codecleanup.patch
freeradius-server-2.1.6-dialup_admin.patch
freeradius-server-2.2.0.tar.bz2
New:
freeradius-server-3.0.0.tar.bz2
freeradius-server-3.0.0.tar.bz2.sig
freeradius-server.keyring
freeradius-tmpfiles.conf
radiusd.service
Other differences:
--
++ freeradius-server.spec ++
778 lines (skipped)
between /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.spec
and
/work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.spec
++ freeradius-server-2.1.1-logrotate_su.patch ++
--- /var/tmp/diff_new_pack.Q3nBiA/_old 2013-10-22 14:51:23.0 +0200
+++ /var/tmp/diff_new_pack.Q3nBiA/_new 2013-10-22 14:51:23.0 +0200
@@ -1,7 +1,7 @@
-Index: freeradius-server-2.1.12/suse/radiusd-logrotate
+Index: freeradius-server-3.0.0/suse/radiusd-logrotate
===
freeradius-server-2.1.12.orig/suse/radiusd-logrotate 2013-01-08
18:25:29.358157621 +0100
-+++ freeradius-server-2.1.12/suse/radiusd-logrotate2013-01-08
18:28:38.487684634 +0100
+--- freeradius-server-3.0.0.orig/suse/radiusd-logrotate2013-10-15
18:26:37.704603079 +0200
freeradius-server-3.0.0/suse/radiusd-logrotate 2013-10-15
18:27:37.232218844 +0200
@@ -6,6 +6,7 @@
# second technique, you will need another cron job that removes old
# detail files. You do not need to comment out the below for method #2.
@@ -18,13 +18,13 @@
compress
dateext
maxage 365
-@@ -25,10 +27,12 @@
+@@ -25,11 +27,12 @@
missingok
create
postrotate
- kill -HUP `cat /var/run/radiusd/radiusd.pid`
+ kill -HUP `cat /var/run/radiusd/radiusd.pid` || :
-+endscript
+ endscript
}
/var/log/radius/radwatch.log {
@@ -32,7 +32,7 @@
compress
dateext
maxage 365
-@@ -40,6 +44,7 @@
+@@ -41,6 +44,7 @@
}
/var/log/radius/radwtmp {
@@ -40,10 +40,10 @@
compress
dateext
maxage 365
-@@ -54,6 +59,7 @@
+@@ -55,6 +59,7 @@
}
- /var/log/radius/sqltrace.sql {
+ /var/log/radius/sqllog.sql {
+su radiusd radiusd
compress
dateext
++ freeradius-server-2.1.6-rcradiusd.patch ++
--- /var/tmp/diff_new_pack.Q3nBiA/_old 2013-10-22 14:51:23.0 +0200
+++ /var/tmp/diff_new_pack.Q3nBiA/_new 2013-10-22 14:51:23.0 +0200
@@ -1,30 +1,13 @@
-Index: suse/rcradius-relayd
-===
suse/rcradius-relayd.orig 2010-06-21 21:15:56.0 +0200
-+++ suse/rcradius-relayd 2010-06-21 21:16:03.0 +0200
-@@ -12,8 +12,8 @@
- #
- ### BEGIN INIT INFO
- # Provides: radius-relayd
--# Required-Start:$network $syslog $remotefs
--# Required-Stop:
-+# Required-Start:$network $syslog $remote_fs
-+# Required-Stop: $network $syslog $remote_fs
- # Default-Start: 3 5
- # Default-Stop: 0 1 2 6
- # Short-Description: RADIUS Relay Server
Index: suse/rcradiusd
===
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2013-09-07 12:35:15
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2013-03-15 10:35:25.0 +0100
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2013-09-07 12:35:16.0 +0200
@@ -1,0 +2,6 @@
+Thu Sep 5 17:22:43 CEST 2013 - m...@suse.de
+
+- add libperl_requires, as we link against libperl and thus
+ need a specific version of perl
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.qWwxZ6/_old 2013-09-07 12:35:17.0 +0200
+++ /var/tmp/diff_new_pack.qWwxZ6/_new 2013-09-07 12:35:17.0 +0200
@@ -68,6 +68,7 @@
%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
Requires: %{name}-libs = %{version}
Requires: python
+%{?libperl_requires}
Recommends: logrotate
Provides: freeradius = %{version}
Provides: radiusd
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2013-03-15 10:34:28
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server, Maintainer is vci...@suse.com
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2012-10-11 10:42:15.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2013-03-15 10:35:25.0 +0100
@@ -1,0 +2,5 @@
+Thu Mar 14 15:17:37 UTC 2013 - vci...@suse.com
+
+- fixed a bug in the logrotate script (bnc#797292)
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.jVVxHe/_old 2013-03-15 10:35:27.0 +0100
+++ /var/tmp/diff_new_pack.jVVxHe/_new 2013-03-15 10:35:27.0 +0100
@@ -1,7 +1,7 @@
#
# spec file for package freeradius-server
#
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -409,6 +409,7 @@
%{_datadir}/dialup_admin/sql/
%dir %{_datadir}/dialup_admin/conf/
%config(noreplace) %{_datadir}/dialup_admin/conf/*
+%dir %{apache2_sysconfdir}/conf.d
%config(noreplace) %{apache2_sysconfdir}/conf.d/radius.conf
%{_datadir}/dialup_admin/Changelog
%{_datadir}/dialup_admin/README
++ freeradius-server-2.1.1-logrotate_su.patch ++
--- /var/tmp/diff_new_pack.jVVxHe/_old 2013-03-15 10:35:27.0 +0100
+++ /var/tmp/diff_new_pack.jVVxHe/_new 2013-03-15 10:35:27.0 +0100
@@ -1,14 +1,50 @@
-Index: freeradius-server-2.1.1/suse/radiusd-logrotate
+Index: freeradius-server-2.1.12/suse/radiusd-logrotate
===
freeradius-server-2.1.1.orig/suse/radiusd-logrotate2008-09-25
10:41:26.0 +0200
-+++ freeradius-server-2.1.1/suse/radiusd-logrotate 2012-05-28
14:04:33.755496027 +0200
-@@ -5,6 +5,9 @@
- # (or similar) in radiusd.conf, without rotation. If you go with the
+--- freeradius-server-2.1.12.orig/suse/radiusd-logrotate 2013-01-08
18:25:29.358157621 +0100
freeradius-server-2.1.12/suse/radiusd-logrotate2013-01-08
18:28:38.487684634 +0100
+@@ -6,6 +6,7 @@
# second technique, you will need another cron job that removes old
# detail files. You do not need to comment out the below for method #2.
-+
-+su radiusd radiusd
-+
/var/log/radius/radacct/*/detail {
++su radiusd radiusd
compress
dateext
+ maxage 365
+@@ -16,6 +17,7 @@
+ }
+
+ /var/log/radius/radius.log {
++su radiusd radiusd
+ compress
+ dateext
+ maxage 365
+@@ -25,10 +27,12 @@
+ missingok
+ create
+ postrotate
+- kill -HUP `cat /var/run/radiusd/radiusd.pid`
++ kill -HUP `cat /var/run/radiusd/radiusd.pid` || :
++endscript
+ }
+
+ /var/log/radius/radwatch.log {
++su radiusd radiusd
+ compress
+ dateext
+ maxage 365
+@@ -40,6 +44,7 @@
+ }
+
+ /var/log/radius/radwtmp {
++su radiusd radiusd
+ compress
+ dateext
+ maxage 365
+@@ -54,6 +59,7 @@
+ }
+
+ /var/log/radius/sqltrace.sql {
++su radiusd radiusd
+ compress
+ dateext
+ maxage 365
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2012-10-11 10:40:07
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server, Maintainer is vci...@suse.com
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2012-09-13 00:02:06.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2012-10-11 10:42:15.0 +0200
@@ -1,0 +2,5 @@
+Mon Oct 1 11:34:31 UTC 2012 - vci...@suse.com
+
+- files in sites-available/ are now %config(noreplace) [bnc#781756]
+
+---
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.k09LXE/_old 2012-10-11 10:42:16.0 +0200
+++ /var/tmp/diff_new_pack.k09LXE/_new 2012-10-11 10:42:16.0 +0200
@@ -20,7 +20,7 @@
Version:2.2.0
Release:0
Summary:Very Highly Configurable Radius Server
-License:GPL-2.0 ; LGPL-2.1
+License:GPL-2.0 and LGPL-2.1
Group: Productivity/Networking/Radius/Servers
Url:http://www.freeradius.org/
Source: %{name}-%{version}.tar.bz2
@@ -348,7 +348,7 @@
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/certs/*.cnf
%attr(750,root,radiusd) %{_sysconfdir}/raddb/certs/bootstrap
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/sites-available
-%attr(640,root,radiusd) %{_sysconfdir}/raddb/sites-available/*
+%attr(640,root,radiusd) %config(noreplace)
%{_sysconfdir}/raddb/sites-available/*
%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/sites-enabled
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-enabled/*
%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/eap.conf
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit freeradius-server for openSUSE:Factory
Hello community, here is the log from the commit of package freeradius-server for openSUSE:Factory checked in at 2012-09-13 00:02:03 Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old) and /work/SRC/openSUSE:Factory/.freeradius-server.new (New) Package is freeradius-server, Maintainer is vci...@suse.com Changes: --- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes 2012-06-10 23:19:37.0 +0200 +++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes 2012-09-13 00:02:06.0 +0200 @@ -1,0 +2,11 @@ +Sat Sep 10 14:20:57 UTC 2012 - vci...@suse.com + +- update to 2.2.0 + - see /usr/share/doc/packages/freeradius-server/ChangeLog +for complete list of changes in this release + - fixes CVE-2012-3547 (bnc#777834) + - dropped freeradius-server-2.1.6-overflow.patch (upstream) + - dropped freeradius-server-sha1-default.patch (upstream) + - refreshed freeradius-server-fix-cert-bootstrap.patch + +--- Old: freeradius-server-2.1.12.tar.bz2 freeradius-server-2.1.6-overflow.patch freeradius-server-sha1-default.patch New: freeradius-server-2.2.0.tar.bz2 Other differences: -- ++ freeradius-server.spec ++ --- /var/tmp/diff_new_pack.9fSKa8/_old 2012-09-13 00:02:08.0 +0200 +++ /var/tmp/diff_new_pack.9fSKa8/_new 2012-09-13 00:02:08.0 +0200 @@ -17,7 +17,7 @@ Name: freeradius-server -Version:2.1.12 +Version:2.2.0 Release:0 Summary:Very Highly Configurable Radius Server License:GPL-2.0 ; LGPL-2.1 @@ -27,8 +27,6 @@ Patch1: freeradius-server-2.1.6-dialup_admin.patch Patch2: freeradius-server-2.1.6-rcradiusd.patch Patch3: freeradius-server-2.1.6-codecleanup.patch -Patch5: freeradius-server-2.1.6-overflow.patch -Patch6: freeradius-server-sha1-default.patch Patch7: freeradius-server-fix-cert-bootstrap.patch Patch8: freeradius-server-initscript-pidfile.patch Patch9: freeradius-server-radius-reload-logrotate.patch @@ -179,8 +177,6 @@ %patch1 %patch2 %patch3 -%patch5 -%patch6 -p1 %patch7 -p1 %patch8 -p1 %patch9 -p1 @@ -210,6 +206,7 @@ --with-experimental-modules \ --with-gnu-ld \ --with-system-libtool \ + --with-system-libltdl \ --with-udpfromto \ --without-rlm_eap_ikev2 \ --without-rlm_eap_tnc \ ++ freeradius-server-2.1.12.tar.bz2 - freeradius-server-2.2.0.tar.bz2 ++ 16642 lines of diff (skipped) ++ freeradius-server-fix-cert-bootstrap.patch ++ --- /var/tmp/diff_new_pack.9fSKa8/_old 2012-09-13 00:02:09.0 +0200 +++ /var/tmp/diff_new_pack.9fSKa8/_new 2012-09-13 00:02:09.0 +0200 @@ -1,13 +1,13 @@ -Index: freeradius-server-2.1.10/raddb/certs/Makefile +Index: freeradius-server-2.2.0/raddb/certs/Makefile === freeradius-server-2.1.10.orig/raddb/certs/Makefile -+++ freeradius-server-2.1.10/raddb/certs/Makefile +--- freeradius-server-2.2.0.orig/raddb/certs/Makefile 2012-09-10 13:51:34.0 +0200 freeradius-server-2.2.0/raddb/certs/Makefile 2012-09-10 15:46:54.505208498 +0200 @@ -51,7 +51,7 @@ dh: # Create a new self-signed CA certificate # ## --ca.key ca.pem: ca.cnf -+ca.key ca.pem: +-ca.key ca.pem: ca.cnf index.txt serial ++ca.key ca.pem: index.txt serial openssl req -new -x509 -keyout ca.key -out ca.pem \ -days $(CA_DEFAULT_DAYS) -config ./ca.cnf @@ -29,10 +29,10 @@ openssl req -new -out client.csr -keyout client.key -config ./client.cnf client.crt: client.csr ca.pem ca.key -Index: freeradius-server-2.1.10/raddb/certs/bootstrap +Index: freeradius-server-2.2.0/raddb/certs/bootstrap === freeradius-server-2.1.10.orig/raddb/certs/bootstrap -+++ freeradius-server-2.1.10/raddb/certs/bootstrap +--- freeradius-server-2.2.0.orig/raddb/certs/bootstrap 2012-09-10 13:51:34.0 +0200 freeradius-server-2.2.0/raddb/certs/bootstrap 2012-11-10 15:34:07.926849849 +0100 @@ -21,7 +21,9 @@ make -h /dev/null 21 # if [ $? = 0 ]; then @@ -44,7 +44,7 @@ fi # -@@ -79,3 +81,5 @@ fi +@@ -80,3 +82,5 @@ fi if [ ! -f client.crt ]; then openssl ca -batch -keyfile ca.key -cert ca.pem -in client.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf fi -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands,
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2012-06-10 23:19:32
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server, Maintainer is vci...@suse.com
Changes:
--- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes
2011-10-21 16:28:56.0 +0200
+++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes
2012-06-10 23:19:37.0 +0200
@@ -1,0 +2,10 @@
+Mon May 28 11:47:32 UTC 2012 - vci...@suse.com
+
+- Use the new 'su' logrotate option (bnc#677335)
+
+---
+Mon May 14 21:47:20 UTC 2012 - joop.boo...@opensuse.org
+
+- Enable the same CFLAGS as for other hardware
+
+---
New:
freeradius-server-2.1.1-logrotate_su.patch
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.6u49GC/_old 2012-06-10 23:19:38.0 +0200
+++ /var/tmp/diff_new_pack.6u49GC/_new 2012-06-10 23:19:38.0 +0200
@@ -1,7 +1,7 @@
#
# spec file for package freeradius-server
#
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -16,14 +16,13 @@
#
-
Name: freeradius-server
Version:2.1.12
-Release:1
-License:GPL-2.0 ; LGPL-2.1
+Release:0
Summary:Very Highly Configurable Radius Server
-Url:http://www.freeradius.org/
+License:GPL-2.0 ; LGPL-2.1
Group: Productivity/Networking/Radius/Servers
+Url:http://www.freeradius.org/
Source: %{name}-%{version}.tar.bz2
Patch1: freeradius-server-2.1.6-dialup_admin.patch
Patch2: freeradius-server-2.1.6-rcradiusd.patch
@@ -35,6 +34,8 @@
Patch9: freeradius-server-radius-reload-logrotate.patch
# PATCH-FIX-UPSTREAM edirectory ldap extensions (bnc#720620)
Patch11:freeradius-server-2.1.1-edirectory.patch
+# PATCH-FIX-SUSE use 'su' logrotate option (bnc#677335)
+Patch12:freeradius-server-2.1.1-logrotate_su.patch
BuildRequires: apache2-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
@@ -70,8 +71,8 @@
Requires: %{name}-libs = %{version}
Requires: python
Recommends: logrotate
-Provides: radiusd
Provides: freeradius = %{version}
+Provides: radiusd
Obsoletes: freeradius %{version}
BuildRoot: %{_tmppath}/%{name}-%{version}-build
Conflicts: radiusd-livingston radiusd-cistron icradius
@@ -114,7 +115,6 @@
%endif
%package libs
-License:GPL-2.0 ; LGPL-2.1
Summary:FreeRADIUS shared library
Group: Productivity/Networking/Radius/Servers
@@ -122,7 +122,6 @@
The FreeRADIUS shared library
%package utils
-License:GPL-2.0 ; LGPL-2.1
Summary:FreeRADIUS Clients
Group: Productivity/Networking/Radius/Clients
Requires: %{name}-libs = %{version}
@@ -143,12 +142,11 @@
* Accounting methods
%package dialupadmin
-License:GPL-2.0 ; LGPL-2.1
Summary:Web management for FreeRADIUS
Group: Productivity/Networking/Radius/Servers
Requires: http_daemon
Requires: mod_php_any
-Requires: perl-DateManip
+Requires: perl-Date-Manip
Requires: php
Requires: php-ldap
Requires: php-mysql
@@ -161,7 +159,6 @@
number of scripts to make the administrator's life a lot easier.
%package devel
-License:GPL-2.0 ; LGPL-2.1
Summary:FreeRADIUS Development Files (static libs)
Group: Development/Libraries/C and C++
Requires: %{name}-libs = %{version}
@@ -170,7 +167,6 @@
These are the static libraries for the FreeRADIUS package.
%package doc
-License:GPL-2.0 ; LGPL-2.1
Summary:FreeRADIUS Documentation
Group: Productivity/Networking/Radius/Servers
Requires: %{name}
@@ -189,6 +185,7 @@
%patch8 -p1
%patch9 -p1
%patch11 -p0
+%patch12 -p1
%build
modified=$(sed -n '/^/n;s/ - .*$//;p;q' %{_sourcedir}/%{name}.changes)
@@ -199,7 +196,7 @@
# So we disable it here, if you want to retest, just delete this comment and
the line below.
export SUSE_ASNEEDED=0
export CFLAGS=%{optflags} -DLDAP_DEPRECATED -fstack-protector
-%ifarch x86_64 ppc ppc64 s390 s390x
+%ifarch x86_64 ppc ppc64 s390 s390x %arm
export CFLAGS=$CFLAGS -fPIC -DPIC
%endif
export
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory checked in at 2011-12-06 18:10:08
Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old)
and /work/SRC/openSUSE:Factory/.freeradius-server.new (New)
Package is freeradius-server, Maintainer is vci...@suse.com
Changes:
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.cSHJc2/_old 2011-12-06 18:15:13.0 +0100
+++ /var/tmp/diff_new_pack.cSHJc2/_new 2011-12-06 18:15:13.0 +0100
@@ -20,7 +20,7 @@
Name: freeradius-server
Version:2.1.12
Release:1
-License:GPLv2 ; LGPLv2.1
+License:GPL-2.0 ; LGPL-2.1
Summary:Very Highly Configurable Radius Server
Url:http://www.freeradius.org/
Group: Productivity/Networking/Radius/Servers
@@ -114,7 +114,7 @@
%endif
%package libs
-License:GPLv2 ; LGPLv2.1
+License:GPL-2.0 ; LGPL-2.1
Summary:FreeRADIUS shared library
Group: Productivity/Networking/Radius/Servers
@@ -122,7 +122,7 @@
The FreeRADIUS shared library
%package utils
-License:GPLv2 ; LGPLv2.1
+License:GPL-2.0 ; LGPL-2.1
Summary:FreeRADIUS Clients
Group: Productivity/Networking/Radius/Clients
Requires: %{name}-libs = %{version}
@@ -143,7 +143,7 @@
* Accounting methods
%package dialupadmin
-License:GPLv2 ; LGPLv2.1
+License:GPL-2.0 ; LGPL-2.1
Summary:Web management for FreeRADIUS
Group: Productivity/Networking/Radius/Servers
Requires: http_daemon
@@ -161,7 +161,7 @@
number of scripts to make the administrator's life a lot easier.
%package devel
-License:GPLv2 ; LGPLv2.1
+License:GPL-2.0 ; LGPL-2.1
Summary:FreeRADIUS Development Files (static libs)
Group: Development/Libraries/C and C++
Requires: %{name}-libs = %{version}
@@ -170,7 +170,7 @@
These are the static libraries for the FreeRADIUS package.
%package doc
-License:GPLv2 ; LGPLv2.1
+License:GPL-2.0 ; LGPL-2.1
Summary:FreeRADIUS Documentation
Group: Productivity/Networking/Radius/Servers
Requires: %{name}
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory
checked in at Tue Oct 4 18:10:03 CEST 2011.
--- openSUSE:Factory/freeradius-server/freeradius-server.changes
2011-09-23 01:58:15.0 +0200
+++ /mounts/work_src_done/STABLE/freeradius-server/freeradius-server.changes
2011-09-27 16:03:59.0 +0200
@@ -1,0 +2,5 @@
+Tue Sep 27 13:05:59 UTC 2011 - vci...@suse.com
+
+- fixed interaction with eDirectory (bnc#720620)
+
+---
calling whatdependson for head-i586
New:
freeradius-server-2.1.1-edirectory.patch
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.0mB7cX/_old 2011-10-04 18:09:59.0 +0200
+++ /var/tmp/diff_new_pack.0mB7cX/_new 2011-10-04 18:09:59.0 +0200
@@ -34,6 +34,8 @@
Patch8: freeradius-server-initscript-pidfile.patch
Patch9: freeradius-server-radius-reload-logrotate.patch
Patch10:freeradius-server-snprintf-overflow.patch
+# PATCH-FIX-UPSTREAM edirectory ldap extensions (bnc#720620)
+Patch11:freeradius-server-2.1.1-edirectory.patch
BuildRequires: apache2-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
@@ -94,7 +96,6 @@
%package oracle
-
Summary:FreeRADIUS Oracle database support
Group: Productivity/Networking/Radius/Servers
BuildRequires: oracle-instantclient-basic
@@ -189,6 +190,7 @@
%patch8 -p1
%patch9 -p1
%patch10 -p1
+%patch11 -p0
%build
modified=$(sed -n '/^/n;s/ - .*$//;p;q' %{_sourcedir}/%{name}.changes)
++ freeradius-server-2.1.1-edirectory.patch ++
Index: src/modules/rlm_ldap/edir_ldapext.c
===
--- src/modules/rlm_ldap/edir_ldapext.c.orig2011-06-20 16:57:14.0
+0200
+++ src/modules/rlm_ldap/edir_ldapext.c 2011-09-27 15:05:37.913323658 +0200
@@ -84,11 +84,11 @@
BerElement *requestBer = NULL;
char* utf8ObjPtr = NULL;
- int utf8ObjSize = 0;
+ ber_len_t utf8ObjSize = 0;
char* utf8PwdPtr = NULL;
- int utf8PwdSize = 0;
+ ber_len_t utf8PwdSize = 0;
char* utf8Pwd2Ptr = NULL;
- int utf8Pwd2Size = 0;
+ ber_len_t utf8Pwd2Size = 0;
utf8ObjSize = strlen(objectDN)+1;
@@ -142,7 +142,7 @@
/*
* Convert the BER we just built to a berval that we'll send with the
extended request.
*/
- if(ber_flatten(requestBer, requestBV) == LBER_ERROR)
+ if(ber_flatten(requestBer, requestBV) == -1)
{
err = NMAS_E_FRAG_FAILURE;
goto Cleanup;
@@ -172,16 +172,17 @@
* buffer was supplied, tries to decode the the return data and
length
*
* */
-int berDecodeLoginData(
+ber_int_t berDecodeLoginData(
struct berval *replyBV,
- int *serverVersion,
- size_t *retDataLen,
+ ber_int_t *serverVersion,
+ ber_len_t *retDataLen,
void *retData )
{
- int rc=0, err = 0;
+ int rc=0;
+ ber_int_t err = 0;
BerElement *replyBer = NULL;
char*retOctStr = NULL;
- size_t retOctStrLen = 0;
+ ber_len_t retOctStrLen = 0;
if((replyBer = ber_init(replyBV)) == NULL)
{
@@ -258,14 +259,14 @@
size_t *pwdSize, // in bytes
char *pwd )
{
- int err = 0;
+ ber_int_t err = 0;
struct berval *requestBV = NULL;
char *replyOID = NULL;
struct berval *replyBV = NULL;
- int serverVersion;
+ ber_int_t serverVersion;
char *pwdBuf;
- size_t pwdBufLen, bufferLen;
+ ber_len_t pwdBufLen, bufferLen;
#ifdef NOT_N_PLAT_NLM
int currentThreadGroupID;
@@ -390,29 +391,29 @@
* and BER encodes the data into the BER value
*
* */
-int berEncodeAuthData(
+static int berEncodeAuthData(
struct berval **requestBV,
char*objectDN,
char*pwd,
char*sequence,
char*NasIP,
char*state,
-int *auth_state)
+ber_int_t *auth_state)
{
int err = 0, rc=0;
BerElement *requestBer = NULL;
char* utf8ObjPtr = NULL;
-int utf8ObjSize = 0;
+ber_len_t utf8ObjSize = 0;
char* utf8PwdPtr = NULL;
-int utf8PwdSize = 0;
+ber_len_t utf8PwdSize = 0;
char* utf8NasIPPtr = NULL;
-int utf8NasIPSize = 0;
+ber_len_t utf8NasIPSize = 0;
char* utf8StatePtr = NULL;
-int utf8StateSize = 0;
+ber_len_t utf8StateSize = 0;
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory
checked in at Mon Jun 27 11:16:32 CEST 2011.
--- freeradius-server/freeradius-server.changes 2011-05-24 21:19:18.0
+0200
+++ /mounts/work_src_done/STABLE/freeradius-server/freeradius-server.changes
2011-06-24 13:29:47.0 +0200
@@ -1,0 +2,9 @@
+Fri Jun 24 09:18:52 UTC 2011 - pu...@novell.com
+
+- update to 2.1.11
+ - see /usr/share/doc/packages/freeradius-server/ChangeLog
+for complete list of changes in this release
+- add freeradius-server-snprintf-overflow.patch
+- use spec-cleaner
+
+---
calling whatdependson for head-i586
Old:
freeradius-server-2.1.10.tar.bz2
New:
freeradius-server-2.1.11.tar.bz2
freeradius-server-snprintf-overflow.patch
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.eXVOCL/_old 2011-06-27 11:14:09.0 +0200
+++ /var/tmp/diff_new_pack.eXVOCL/_new 2011-06-27 11:14:09.0 +0200
@@ -18,16 +18,12 @@
Name: freeradius-server
-Version:2.1.10
-Release:5
+Version:2.1.11
+Release:1
License:GPLv2 ; LGPLv2.1
-Group: Productivity/Networking/Radius/Servers
-Provides: radiusd
-Provides: freeradius = %{version}
-Obsoletes: freeradius %{version}
-Conflicts: radiusd-livingston radiusd-cistron icradius
-Url:http://www.freeradius.org/
Summary:Very Highly Configurable Radius Server
+Url:http://www.freeradius.org/
+Group: Productivity/Networking/Radius/Servers
Source: %{name}-%{version}.tar.bz2
Patch1: freeradius-server-2.1.6-dialup_admin.patch
Patch2: freeradius-server-2.1.6-rcradiusd.patch
@@ -37,15 +33,7 @@
Patch7: freeradius-server-fix-cert-bootstrap.patch
Patch8: freeradius-server-initscript-pidfile.patch
Patch9: freeradius-server-radius-reload-logrotate.patch
-PreReq: perl openssl pwdutils coreutils
-PreReq: %insserv_prereq %fillup_prereq
-BuildRoot: %{_tmppath}/%{name}-%{version}-build
-%define _oracle_support 0
-%define apxs2 apxs2-prefork
-%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
-Requires: %{name}-libs = %{version}
-Requires: python
-Recommends: logrotate
+Patch10:freeradius-server-snprintf-overflow.patch
BuildRequires: apache2-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel
@@ -54,7 +42,6 @@
BuildRequires: gettext-devel
BuildRequires: glibc-devel
BuildRequires: krb5-devel
-BuildRequires: libapr1-devel
BuildRequires: libcom_err-devel
BuildRequires: libmysqlclient-devel
BuildRequires: libpcap-devel
@@ -69,6 +56,24 @@
BuildRequires: python-devel
BuildRequires: sqlite3-devel
BuildRequires: unixODBC-devel
+BuildRequires: pkgconfig(apr-1)
+PreReq: %fillup_prereq
+PreReq: %insserv_prereq
+PreReq: coreutils
+PreReq: openssl
+PreReq: perl
+PreReq: pwdutils
+%define _oracle_support 0
+%define apxs2 apxs2-prefork
+%define apache2_sysconfdir %(%{_sbindir}/%{apxs2} -q SYSCONFDIR)
+Requires: %{name}-libs = %{version}
+Requires: python
+Recommends: logrotate
+Provides: radiusd
+Provides: freeradius = %{version}
+Obsoletes: freeradius %{version}
+BuildRoot: %{_tmppath}/%{name}-%{version}-build
+Conflicts: radiusd-livingston radiusd-cistron icradius
%description
The FreeRADIUS server has a number of features found in other servers
@@ -85,27 +90,18 @@
* Accounting methods
-
-
-Authors:
-
-Miquel van Smoorenburg miqu...@cistron.nl
-Alan DeKok al...@ox.org
-Mike Machado m...@innercite.com
-Alan Curry
-various other people
-
%if %_oracle_support == 1
%package oracle
-BuildRequires: oracle-instantclient-basic oracle-instantclient-devel
-Group: Productivity/Networking/Radius/Servers
Summary:FreeRADIUS Oracle database support
-Requires: oracle-instantclient-basic
-Requires: %{name}-libs = %{version}
+Group: Productivity/Networking/Radius/Servers
+BuildRequires: oracle-instantclient-basic
+BuildRequires: oracle-instantclient-devel
Requires: %{name} = %{version}
+Requires: %{name}-libs = %{version}
+Requires: oracle-instantclient-basic
%description oracle
The FreeRADIUS server has a number of features found in other servers,
@@ -119,26 +115,16 @@
%package libs
License:GPLv2 ; LGPLv2.1
-Group: Productivity/Networking/Radius/Servers
Summary:FreeRADIUS shared library
+Group: Productivity/Networking/Radius/Servers
%description libs
The FreeRADIUS shared library
-
-
-Authors:
-
-Miquel van Smoorenburg miqu...@cistron.nl
-
commit freeradius-server for openSUSE:Factory
Hello community,
here is the log from the commit of package freeradius-server for
openSUSE:Factory
checked in at Fri May 27 11:35:38 CEST 2011.
--- freeradius-server/freeradius-server.changes 2010-10-04 13:11:23.0
+0200
+++ /mounts/work_src_done/STABLE/freeradius-server/freeradius-server.changes
2011-05-24 21:19:18.0 +0200
@@ -1,0 +2,5 @@
+Tue May 24 19:18:44 UTC 2011 - crrodrig...@opensuse.org
+
+- Supress timestamps in binaries, breaks build-compare.
+
+---
calling whatdependson for head-i586
Other differences:
--
++ freeradius-server.spec ++
--- /var/tmp/diff_new_pack.FYnpcV/_old 2011-05-27 11:28:51.0 +0200
+++ /var/tmp/diff_new_pack.FYnpcV/_new 2011-05-27 11:28:51.0 +0200
@@ -1,7 +1,7 @@
#
-# spec file for package freeradius-server (Version 2.1.10)
+# spec file for package freeradius-server
#
-# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
Name: freeradius-server
Version:2.1.10
-Release:1
+Release:5
License:GPLv2 ; LGPLv2.1
Group: Productivity/Networking/Radius/Servers
Provides: radiusd
@@ -55,7 +55,7 @@
BuildRequires: glibc-devel
BuildRequires: krb5-devel
BuildRequires: libapr1-devel
-BuildRequires: libcom_err
+BuildRequires: libcom_err-devel
BuildRequires: libmysqlclient-devel
BuildRequires: libpcap-devel
BuildRequires: libtool
@@ -67,7 +67,6 @@
BuildRequires: perl
BuildRequires: postgresql-devel
BuildRequires: python-devel
-BuildRequires: sed
BuildRequires: sqlite3-devel
BuildRequires: unixODBC-devel
@@ -239,6 +238,10 @@
%patch9 -p1
%build
+modified=$(sed -n '/^/n;s/ - .*$//;p;q' %{_sourcedir}/%{name}.changes)
+DATE=\$(date -d ${modified} +%%b %%e %%Y)\
+TIME=\$(date -d ${modified} +%%R)\
+find . -type f -regex .*\.c\|.*\.cpp\|.*\.h -exec sed -i
s/__DATE__/${DATE}/g;s/__TIME__/${TIME}/g {} +
# This package failed when testing with -Wl,-as-needed being default.
# So we disable it here, if you want to retest, just delete this comment and
the line below.
export SUSE_ASNEEDED=0
Remember to have fun...
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
