I'm no longer going to maintain freeradius2. Please use freeradius3 instead. Signed-off-by: Daniel Golle <daniel@makrotopia.org>lilik-openwrt-22.03
@ -1,14 +0,0 @@ | |||||
# FreeRADIUS avanced configuration | |||||
choice | |||||
prompt "SSL library" | |||||
default FREERADIUS_OPENSSL | |||||
depends on PACKAGE_freeradius2-common | |||||
config FREERADIUS_NOSSL | |||||
bool "No SSL support" | |||||
config FREERADIUS_OPENSSL | |||||
bool "OpenSSL" | |||||
endchoice |
@ -1,636 +0,0 @@ | |||||
# | |||||
# Copyright (C) 2008-2015 OpenWrt.org | |||||
# | |||||
# This is free software, licensed under the GNU General Public License v2. | |||||
# See /LICENSE for more information. | |||||
# | |||||
include $(TOPDIR)/rules.mk | |||||
PKG_NAME:=freeradius2 | |||||
PKG_VERSION:=2.2.9 | |||||
PKG_RELEASE:=1 | |||||
PKG_SOURCE:=freeradius-server-$(PKG_VERSION).tar.bz2 | |||||
PKG_SOURCE_URL:=\ | |||||
ftp://ftp.freeradius.org/pub/freeradius/ \ | |||||
ftp://ftp.freeradius.org/pub/freeradius/old/ | |||||
PKG_MD5SUM:=d1398327ba4e23c75da06d8a0e01096b | |||||
PKG_MAINTAINER:=Daniel Golle <daniel@makrotopia.org> | |||||
PKG_LICENSE:=GPL-2.0 | |||||
PKG_LICENSE_FILES:=COPYRIGHT LICENSE | |||||
PKG_BUILD_DIR:=$(BUILD_DIR)/freeradius-server-$(PKG_VERSION) | |||||
PKG_FIXUP:=autoreconf | |||||
PKG_CHECK_FORMAT_SECURITY:=0 | |||||
PKG_CONFIG_DEPENDS := \ | |||||
FREERADIUS_OPENSSL \ | |||||
FREERADIUS_NOSSL | |||||
PKG_CHECK_FORMAT_SECURITY:=0 | |||||
include $(INCLUDE_DIR)/package.mk | |||||
define Package/freeradius2/config | |||||
source "$(SOURCE)/Config.in" | |||||
endef | |||||
define Package/freeradius2/Default | |||||
SECTION:=net | |||||
CATEGORY:=Network | |||||
URL:=http://freeradius.org/ | |||||
SUBMENU:=FreeRADIUS (version 2) | |||||
endef | |||||
define Package/freeradius2 | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=+libltdl +libreadline +freeradius2-common | |||||
TITLE:=A flexible RADIUS server (version 2) | |||||
endef | |||||
define Package/freeradius2/conffiles | |||||
/etc/freeradius2/clients.conf | |||||
/etc/freeradius2/radiusd.conf | |||||
/etc/freeradius2/sites/default | |||||
endef | |||||
define Package/freeradius2-democerts | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Demo certificates to test the server | |||||
endef | |||||
define Package/freeradius2-common | |||||
$(call Package/freeradius2/Default) | |||||
TITLE:=common files | |||||
DEPENDS:=+libpthread +FREERADIUS_OPENSSL:libopenssl +zlib | |||||
endef | |||||
define Package/freeradius2-mod-chap | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=CHAP module | |||||
endef | |||||
define Package/freeradius2-mod-chap/conffiles | |||||
/etc/freeradius2/modules/chap | |||||
endef | |||||
define Package/freeradius2-mod-detail | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Detailed accounting module | |||||
endef | |||||
define Package/freeradius2-mod-detail/conffiles | |||||
/etc/freeradius2/modules/detail | |||||
endef | |||||
define Package/freeradius2-mod-eap | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Base EAP module | |||||
endef | |||||
define Package/freeradius2-mod-eap/conffiles | |||||
/etc/freeradius2/eap.conf | |||||
endef | |||||
define Package/freeradius2-mod-eap-gtc | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-eap | |||||
TITLE:=EAP/GTC module | |||||
endef | |||||
define Package/freeradius2-mod-eap-md5 | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-eap | |||||
TITLE:=EAP/MD5 module | |||||
endef | |||||
define Package/freeradius2-mod-eap-mschapv2 | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-eap +freeradius2-mod-mschap | |||||
TITLE:=EAP/MS-CHAPv2 module | |||||
endef | |||||
define Package/freeradius2-mod-eap-peap | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-eap @FREERADIUS_OPENSSL | |||||
TITLE:=EAP/PEAP module | |||||
endef | |||||
define Package/freeradius2-mod-eap-tls | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-eap @FREERADIUS_OPENSSL | |||||
TITLE:=EAP/TLS module | |||||
endef | |||||
define Package/freeradius2-mod-eap-ttls | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-eap-tls | |||||
TITLE:=EAP/TTLS module | |||||
endef | |||||
define Package/freeradius2-mod-exec | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=EXEC module | |||||
endef | |||||
define Package/freeradius2-mod-exec/conffiles | |||||
/etc/freeradius2/modules/exec | |||||
endef | |||||
define Package/freeradius2-mod-expiration | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Expiration module | |||||
endef | |||||
define Package/freeradius2-mod-expiration/conffiles | |||||
/etc/freeradius2/modules/expiration | |||||
endef | |||||
define Package/freeradius2-mod-always | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Always module | |||||
endef | |||||
define Package/freeradius2-mod-always/conffiles | |||||
/etc/freeradius2/modules/always | |||||
endef | |||||
define Package/freeradius2-mod-expr | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=EXPR module | |||||
endef | |||||
define Package/freeradius2-mod-expr/conffiles | |||||
/etc/freeradius2/modules/expr | |||||
endef | |||||
define Package/freeradius2-mod-attr-filter | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=ATTR filter module | |||||
endef | |||||
define Package/freeradius2-mod-attr-filter/conffiles | |||||
/etc/freeradius2/modules/attr_filter | |||||
/etc/freeradius2/attrs | |||||
/etc/freeradius2/attrs.access_reject | |||||
/etc/freeradius2/attrs.accounting_response | |||||
/etc/freeradius2/attrs.pre-proxy | |||||
endef | |||||
define Package/freeradius2-mod-attr-rewrite | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=ATTR rewrite module | |||||
endef | |||||
define Package/freeradius2-mod-attr-rewrite/conffiles | |||||
/etc/freeradius2/modules/attr_rewrite | |||||
endef | |||||
define Package/freeradius2-mod-files | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Module using local files for authorization | |||||
endef | |||||
define Package/freeradius2-mod-files/conffiles | |||||
/etc/freeradius2/acct_users | |||||
/etc/freeradius2/preproxy_users | |||||
/etc/freeradius2/users | |||||
/etc/freeradius2/modules/files | |||||
endef | |||||
define Package/freeradius2-mod-passwd | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Rlm passwd module | |||||
endef | |||||
define Package/freeradius2-mod-passwd/conffiles | |||||
/etc/freeradius2/modules/passwd | |||||
endef | |||||
define Package/freeradius2-mod-ldap | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 +libopenldap | |||||
TITLE:=LDAP module | |||||
endef | |||||
define Package/freeradius2-mod-ldap/conffiles | |||||
/etc/freeradius2/ldap.attrmap | |||||
/etc/freeradius2/modules/ldap | |||||
endef | |||||
define Package/freeradius2-mod-logintime | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Logintime module | |||||
endef | |||||
define Package/freeradius2-mod-logintime/conffiles | |||||
/etc/freeradius2/modules/logintime | |||||
endef | |||||
define Package/freeradius2-mod-mschap | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=MS-CHAP and MS-CHAPv2 module | |||||
endef | |||||
define Package/freeradius2-mod-mschap/conffiles | |||||
/etc/freeradius2/modules/mschap | |||||
endef | |||||
define Package/freeradius2-mod-pap | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=PAP module | |||||
endef | |||||
define Package/freeradius2-mod-pap/conffiles | |||||
/etc/freeradius2/modules/pap | |||||
endef | |||||
define Package/freeradius2-mod-preprocess | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Request pre-processing module | |||||
endef | |||||
define Package/freeradius2-mod-preprocess/conffiles | |||||
/etc/freeradius2/hints | |||||
/etc/freeradius2/huntgroups | |||||
/etc/freeradius2/modules/preprocess | |||||
endef | |||||
define Package/freeradius2-mod-realm | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Realms handling module | |||||
endef | |||||
define Package/freeradius2-mod-realm/conffiles | |||||
/etc/freeradius2/proxy.conf | |||||
/etc/freeradius2/modules/realm | |||||
endef | |||||
define Package/freeradius2-mod-sql | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Base SQL module | |||||
endef | |||||
define Package/freeradius2-mod-sql/conffiles | |||||
/etc/freeradius2/sql.conf | |||||
endef | |||||
define Package/freeradius2-mod-sql-mysql | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-sql +libmysqlclient-r | |||||
TITLE:=MySQL module | |||||
endef | |||||
define Package/freeradius2-mod-sql-pgsql | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-sql +libpq | |||||
TITLE:=PostgreSQL module | |||||
endef | |||||
define Package/freeradius2-mod-sql-sqlite | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-sql +libsqlite3 | |||||
TITLE:=SQLite module | |||||
endef | |||||
define Package/freeradius2-mod-sqlcounter | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2-mod-sql | |||||
TITLE:=Generic SQL Counter module | |||||
endef | |||||
define Package/freeradius2-mod-radutmp | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=Radius UTMP module | |||||
endef | |||||
define Package/freeradius2-mod-radutmp/conffiles | |||||
/etc/freeradius2/modules/radutmp | |||||
/etc/freeradius2/modules/sradutmp | |||||
endef | |||||
define Package/freeradius2-utils | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=+freeradius2-common | |||||
TITLE:=Misc. client utilities | |||||
endef | |||||
define Package/freeradius2-mod-sqllog | |||||
$(call Package/freeradius2/Default) | |||||
DEPENDS:=freeradius2 | |||||
TITLE:=SQL Logging module | |||||
endef | |||||
CONFIGURE_ARGS+= \ | |||||
--libdir=/usr/lib/freeradius2 \ | |||||
--libexecdir=/usr/lib/freeradius2 \ | |||||
--enable-shared \ | |||||
--disable-static \ | |||||
--disable-developer \ | |||||
--with-threads \ | |||||
$(if $(CONFIG_FREERADIUS_OPENSSL),--with,--without)-openssl \ | |||||
$(if $(CONFIG_FREERADIUS_OPENSSL),--with-openssl-includes="$(STAGING_DIR)/usr/include",) \ | |||||
$(if $(CONFIG_FREERADIUS_OPENSSL),--with-openssl-libraries="$(STAGING_DIR)/usr/lib",) \ | |||||
$(if $(CONFIG_FREERADIUS_OPENSSL),--disable-openssl-version-check,) \ | |||||
--with-system-libtool \ | |||||
--with-system-libltdl \ | |||||
--enable-strict-dependencies \ | |||||
--with-raddbdir=/etc/freeradius2 \ | |||||
--with-radacctdir=/var/db/radacct \ | |||||
--with-logdir=/var/log \ | |||||
--without-edir \ | |||||
--without-snmp \ | |||||
--without-rlm_checkval \ | |||||
--without-rlm_dbm \ | |||||
--without-rlm_counter \ | |||||
--with-rlm_expr \ | |||||
--with-rlm_eap \ | |||||
--without-rlm_eap_sim \ | |||||
--without-rlm_example \ | |||||
--without-rlm_ippool \ | |||||
--without-rlm_krb5 \ | |||||
--without-rlm_otp \ | |||||
--without-rlm_smsotp \ | |||||
--without-rlm_pam \ | |||||
--without-rlm_perl \ | |||||
--without-rlm_python \ | |||||
--without-rlm_smb \ | |||||
--with-rlm_sql \ | |||||
--with-rlm_sqlcounter \ | |||||
--without-rlm_sqlhpwippool \ | |||||
--without-rlm_sqlippool \ | |||||
--without-rlm_sql_db2 \ | |||||
--without-rlm_sql_firebird \ | |||||
--without-rlm_sql_freetds \ | |||||
--without-rlm_sql_iodbc \ | |||||
--without-rlm_sql_oracle \ | |||||
--without-rlm_sql_sybase \ | |||||
--without-rlm_sql_unixodbc \ | |||||
--without-rlm_sql_log \ | |||||
--without-rlm_unix \ | |||||
--without-rlm_eap_tnc \ | |||||
--without-rlm_eap_ikev2 \ | |||||
--without-rlm_opendirectory \ | |||||
--without-rlm_wimax \ | |||||
--without-rlm_ruby \ | |||||
--without-rlm_caching \ | |||||
--without-rlm_redis \ | |||||
--without-rlm_rediswho \ | |||||
--without-rlm_soh \ | |||||
--without-rlm_sim \ | |||||
--without-rlm_replicate \ | |||||
--without-rlm_protocol_filter \ | |||||
--without-rlm_policy \ | |||||
--without-rlm_linelog \ | |||||
--without-rlm_jradius \ | |||||
--without-rlm_fastusers \ | |||||
--without-rlm_eap_leap \ | |||||
--without-rlm_dynamic_clients \ | |||||
--without-rlm_digest \ | |||||
--without-rlm_cram \ | |||||
--without-rlm_copy_packet \ | |||||
--without-rlm_acct_unique \ | |||||
--without-rlm_acctlog | |||||
PKG_DICTIONARIES:= \ | |||||
freeradius freeradius.internal \ | |||||
rfc2865 rfc2866 rfc2867 rfc2868 rfc2869 rfc3162 rfc3576 rfc3580 \ | |||||
rfc4372 rfc4675 rfc4679 \ | |||||
microsoft \ | |||||
wispr \ | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-ldap),) | |||||
CONFIGURE_ARGS+= \ | |||||
--with-rlm_ldap-include-dir="$(STAGING_DIR)/usr/include" \ | |||||
--with-rlm_ldap-lib-dir="$(STAGING_DIR)/usr/lib" | |||||
CONFIGURE_LIBS+= -lcrypto -lssl | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_ldap | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-sql-mysql),) | |||||
CONFIGURE_ARGS+= \ | |||||
--with-mysql-include-dir="$(STAGING_DIR)/usr/include" \ | |||||
--with-mysql-lib-dir="$(STAGING_DIR)/usr/lib/mysql" | |||||
CONFIGURE_LIBS+= -lz | |||||
CONFIGURE_VARS+= ac_cv_lib_mysqlclient_r_mysql_init=yes | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_sql_mysql | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-sql-pgsql),) | |||||
CONFIGURE_ARGS+= \ | |||||
--with-rlm_sql_postgresql-include-dir="$(STAGING_DIR)/usr/include" \ | |||||
--with-rlm_sql_postgresql-lib-dir="$(STAGING_DIR)/usr/lib" | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_sql_postgresql | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-sqllog),) | |||||
CONFIGURE_ARGS+= \ | |||||
--with-rlm_sql_log \ | |||||
--with-experimental-modules \ | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_sql_log | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-sql-sqlite),) | |||||
CONFIGURE_ARGS+= \ | |||||
--with-rlm_sql_sqlite \ | |||||
--with-experimental-modules \ | |||||
--with-sqlite-include-dir="$(STAGING_DIR)/usr/include" \ | |||||
--with-sqlite-lib-dir="$(STAGING_DIR)/usr/lib" | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_sql_sqlite | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-eap-peap),) | |||||
CONFIGURE_ARGS+= \ | |||||
--with-rlm_eap_peap \ | |||||
--with-rlm_eap_peap-include-dir="$(STAGING_DIR)/usr/include" \ | |||||
--with-rlm_eap_peap-lib-dir="$(STAGING_DIR)/usr/lib" | |||||
CONFIGURE_LIBS+= -lcrypto -lssl | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_eap_peap | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-eap-tls),) | |||||
CONFIGURE_ARGS+= \ | |||||
--with-rlm_eap_tls \ | |||||
--with-rlm_eap_tls-include-dir="$(STAGING_DIR)/usr/include" \ | |||||
--with-rlm_eap_tls-lib-dir="$(STAGING_DIR)/usr/lib" | |||||
CONFIGURE_LIBS+= -lcrypto -lssl | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_eap_tls | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-eap-ttls),) | |||||
CONFIGURE_ARGS+= \ | |||||
--with-rlm_eap_ttls \ | |||||
--with-rlm_eap_ttls-include-dir="$(STAGING_DIR)/usr/include" \ | |||||
--with-rlm_eap_ttls-lib-dir="$(STAGING_DIR)/usr/lib" | |||||
CONFIGURE_LIBS+= -lcrypto -lssl | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_eap_ttls | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-attr-rewrite),) | |||||
CONFIGURE_ARGS+= --with-rlm_attr-rewrite | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_attr-rewrite | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-radutmp),) | |||||
CONFIGURE_ARGS+= --with-rlm_radutmp | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_radutmp | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-logintime),) | |||||
CONFIGURE_ARGS+= --with-rlm_logintime | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_logintime | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-expiration),) | |||||
CONFIGURE_ARGS+= --with-rlm_expiration | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_expiration | |||||
endif | |||||
ifneq ($(SDK)$(CONFIG_PACKAGE_freeradius2-mod-always),) | |||||
CONFIGURE_ARGS+= --with-rlm_always | |||||
else | |||||
CONFIGURE_ARGS+= --without-rlm_always | |||||
endif | |||||
CONFIGURE_VARS+= \ | |||||
LDFLAGS="$$$$LDFLAGS" \ | |||||
LIBS="$(CONFIGURE_LIBS)" \ | |||||
MYSQL_CONFIG="no" \ | |||||
ac_cv_lib_readline=no \ | |||||
define Build/Compile | |||||
$(MAKE) -C $(PKG_BUILD_DIR) \ | |||||
R="$(PKG_INSTALL_DIR)" \ | |||||
INSTALLSTRIP="" \ | |||||
all certs install | |||||
endef | |||||
define Package/freeradius2-common/install | |||||
$(INSTALL_DIR) $(1)/etc/freeradius2 | |||||
chmod 771 $(1)/etc/freeradius2 | |||||
$(CP) $(PKG_INSTALL_DIR)/etc/freeradius2/dictionary $(1)/etc/freeradius2/ ; \ | |||||
$(INSTALL_DIR) $(1)/usr/lib/freeradius2 | |||||
$(CP) $(PKG_INSTALL_DIR)/usr/lib/freeradius2/libfreeradius-radius{,-*}.so $(1)/usr/lib/freeradius2 | |||||
$(CP) $(PKG_INSTALL_DIR)/usr/lib/freeradius2/libfreeradius-eap{,-*}.so $(1)/usr/lib/freeradius2 | |||||
$(INSTALL_DIR) $(1)/usr/share/freeradius2 | |||||
$(CP) $(PKG_INSTALL_DIR)/usr/share/freeradius/dictionary $(1)/usr/share/freeradius2/ | |||||
$(SED) "s,^\(\$$$$INCLUDE\),#\1,g" $(1)/usr/share/freeradius2/dictionary | |||||
for f in $(PKG_DICTIONARIES); do \ | |||||
$(CP) $(PKG_INSTALL_DIR)/usr/share/freeradius/dictionary.$$$${f} $(1)/usr/share/freeradius2/ ; \ | |||||
$(SED) "s,^#\(\$$$$INCLUDE dictionary\.$$$${f}\),\1,g" $(1)/usr/share/freeradius2/dictionary ; \ | |||||
done | |||||
endef | |||||
define Package/freeradius2/install | |||||
$(INSTALL_DIR) $(1)/etc/freeradius2/modules | |||||
$(INSTALL_DIR) $(1)/etc/freeradius2/sites | |||||
for f in clients.conf radiusd.conf policy.conf; do \ | |||||
$(CP) $(PKG_INSTALL_DIR)/etc/freeradius2/$$$${f} $(1)/etc/freeradius2/ ; \ | |||||
done | |||||
$(CP) $(PKG_INSTALL_DIR)/etc/freeradius2/sites-available/default $(1)/etc/freeradius2/sites/default | |||||
$(INSTALL_DIR) $(1)/usr/sbin | |||||
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/radiusd $(1)/usr/sbin/ | |||||
$(INSTALL_DIR) $(1)/etc/init.d | |||||
$(INSTALL_BIN) ./files/radiusd.init $(1)/etc/init.d/radiusd | |||||
endef | |||||
define Package/freeradius2-democerts/install | |||||
$(INSTALL_DIR) $(1)/etc/freeradius2/certs | |||||
$(CP) \ | |||||
$(PKG_BUILD_DIR)/raddb/certs/ca.pem \ | |||||
$(PKG_BUILD_DIR)/raddb/certs/dh \ | |||||
$(PKG_BUILD_DIR)/raddb/certs/random \ | |||||
$(PKG_BUILD_DIR)/raddb/certs/server.pem \ | |||||
$(1)/etc/freeradius2/certs/ | |||||
endef | |||||
define Package/freeradius2-utils/install | |||||
$(INSTALL_DIR) $(1)/usr/bin | |||||
for f in radclient radeapclient radwho; do \ | |||||
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/$$$${f} $(1)/usr/bin/ ; \ | |||||
done | |||||
endef | |||||
define BuildPlugin | |||||
define Package/$(1)/install | |||||
[ -z "$(2)" ] || $(INSTALL_DIR) $$(1)/usr/lib/freeradius2 | |||||
for m in $(2); do \ | |||||
$(CP) $(PKG_INSTALL_DIR)/usr/lib/freeradius2/$$$$$$$${m}{,-*}.so $$(1)/usr/lib/freeradius2 ; \ | |||||
done | |||||
[ -z "$(3)" ] || $(INSTALL_DIR) $$(1)/etc/freeradius2 | |||||
[ -z "$(4)" ] || $(INSTALL_DIR) $$(1)/etc/freeradius2/$(4) | |||||
for f in $(3); do \ | |||||
$(CP) $(PKG_INSTALL_DIR)/etc/freeradius2/$$$$$$$${f} $$(1)/etc/freeradius2/$$$$$$$${f} ; \ | |||||
done | |||||
endef | |||||
$$(eval $$(call BuildPackage,$(1))) | |||||
endef | |||||
$(eval $(call BuildPackage,freeradius2)) | |||||
$(eval $(call BuildPackage,freeradius2-common)) | |||||
$(eval $(call BuildPackage,freeradius2-democerts)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-chap,rlm_chap,modules/chap,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-detail,rlm_detail,modules/detail,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-eap,rlm_eap,eap.conf)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-eap-gtc,rlm_eap_gtc,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-eap-md5,rlm_eap_md5,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-eap-mschapv2,rlm_eap_mschapv2,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-eap-peap,rlm_eap_peap,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-eap-tls,rlm_eap_tls,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-eap-ttls,rlm_eap_ttls,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-exec,rlm_exec,modules/exec modules/echo ,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-attr-rewrite,rlm_attr_rewrite,modules/attr_rewrite,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-files,rlm_files,acct_users preproxy_users users modules/files,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-passwd,rlm_passwd,modules/passwd,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-ldap,rlm_ldap,ldap.attrmap modules/ldap,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-mschap,rlm_mschap,modules/mschap,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-pap,rlm_pap,modules/pap,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-preprocess,rlm_preprocess,hints huntgroups modules/preprocess,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-realm,rlm_realm,proxy.conf modules/realm modules/inner-eap,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-sql,rlm_sql,sql.conf,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-sql-mysql,rlm_sql_mysql,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-sql-pgsql,rlm_sql_postgresql,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-sql-sqlite,rlm_sql_sqlite,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-sqlcounter,rlm_sqlcounter,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-sqllog,rlm_sql_log,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-radutmp,rlm_radutmp,modules/radutmp modules/sradutmp,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-logintime,rlm_logintime,modules/logintime,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-expr,rlm_expr,modules/expr,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-attr-filter,rlm_attr_filter,modules/attr_filter attrs attrs.access_reject attrs.accounting_response attrs.pre-proxy,modules,,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-expiration,rlm_expiration,modules/expiration,modules,)) | |||||
$(eval $(call BuildPlugin,freeradius2-mod-always,rlm_always,modules/always,modules,)) | |||||
$(eval $(call BuildPackage,freeradius2-utils)) |
@ -1,29 +0,0 @@ | |||||
#!/bin/sh /etc/rc.common | |||||
# | |||||
# Copyright (C) 2006-2015 OpenWrt.org | |||||
# | |||||
USE_PROCD=1 | |||||
START=50 | |||||
NAME=radiusd | |||||
PROG=/usr/sbin/radiusd | |||||
DEFAULT=/etc/default/radiusd | |||||
start_service() | |||||
{ | |||||
[ -f $DEFAULT ] && . $DEFAULT | |||||
mkdir -p /var/log | |||||
mkdir -p /var/run | |||||
mkdir -p /var/db/radacct | |||||
mkdir -p /tmp/radiusd | |||||
procd_open_instance | |||||
procd_set_param command $PROG -f | |||||
procd_set_param env LD_LIBRARY_PATH=/usr/lib/freeradius2 | |||||
[ -n "$IPADDR" ] && procd_append_param command -i $IPADDR | |||||
[ -n "$OPTIONS" ] && procd_append_param command $OPTIONS | |||||
procd_set_param respawn | |||||
procd_close_instance | |||||
} |
@ -1,12 +0,0 @@ | |||||
Index: freeradius-server-2.2.7/Make.inc.in | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/Make.inc.in | |||||
+++ freeradius-server-2.2.7/Make.inc.in | |||||
@@ -5,6 +5,7 @@ | |||||
# | |||||
# Location of files. | |||||
+SHELL = @SHELL@ | |||||
prefix = @prefix@ | |||||
exec_prefix = @exec_prefix@ | |||||
sysconfdir = @sysconfdir@ |
@ -1,613 +0,0 @@ | |||||
Index: freeradius-server-2.2.7/raddb/dictionary.in | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/dictionary.in | |||||
+++ freeradius-server-2.2.7/raddb/dictionary.in | |||||
@@ -11,7 +11,7 @@ | |||||
# | |||||
# The filename given here should be an absolute path. | |||||
# | |||||
-$INCLUDE @prefix@/share/freeradius/dictionary | |||||
+$INCLUDE @prefix@/share/freeradius2/dictionary | |||||
# | |||||
# Place additional attributes or $INCLUDEs here. They will | |||||
Index: freeradius-server-2.2.7/raddb/eap.conf | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/eap.conf | |||||
+++ freeradius-server-2.2.7/raddb/eap.conf | |||||
@@ -27,7 +27,7 @@ | |||||
# then that EAP type takes precedence over the | |||||
# default type configured here. | |||||
# | |||||
- default_eap_type = md5 | |||||
+ default_eap_type = peap | |||||
# A list is maintained to correlate EAP-Response | |||||
# packets with EAP-Request packets. After a | |||||
@@ -72,8 +72,8 @@ | |||||
# for wireless connections. It is insecure, and does | |||||
# not provide for dynamic WEP keys. | |||||
# | |||||
- md5 { | |||||
- } | |||||
+# md5 { | |||||
+# } | |||||
# Cisco LEAP | |||||
# | |||||
@@ -87,8 +87,8 @@ | |||||
# User-Password, or the NT-Password attributes. | |||||
# 'System' authentication is impossible with LEAP. | |||||
# | |||||
- leap { | |||||
- } | |||||
+# leap { | |||||
+# } | |||||
# Generic Token Card. | |||||
# | |||||
@@ -101,7 +101,7 @@ | |||||
# the users password will go over the wire in plain-text, | |||||
# for anyone to see. | |||||
# | |||||
- gtc { | |||||
+# gtc { | |||||
# The default challenge, which many clients | |||||
# ignore.. | |||||
#challenge = "Password: " | |||||
@@ -118,8 +118,8 @@ | |||||
# configured for the request, and do the | |||||
# authentication itself. | |||||
# | |||||
- auth_type = PAP | |||||
- } | |||||
+# auth_type = PAP | |||||
+# } | |||||
## EAP-TLS | |||||
# | |||||
@@ -215,7 +215,7 @@ | |||||
# In these cases, fragment size should be | |||||
# 1024 or less. | |||||
# | |||||
- # fragment_size = 1024 | |||||
+ fragment_size = 1024 | |||||
# include_length is a flag which is | |||||
# by default set to yes If set to | |||||
@@ -225,7 +225,7 @@ | |||||
# message is included ONLY in the | |||||
# First packet of a fragment series. | |||||
# | |||||
- # include_length = yes | |||||
+ include_length = yes | |||||
# Check the Certificate Revocation List | |||||
# | |||||
@@ -297,7 +297,7 @@ | |||||
# for the server to print out an error message, | |||||
# and refuse to start. | |||||
# | |||||
- make_cert_command = "${certdir}/bootstrap" | |||||
+ # make_cert_command = "${certdir}/bootstrap" | |||||
# | |||||
# Elliptical cryptography configuration | |||||
@@ -332,7 +332,7 @@ | |||||
# You probably also want "use_tunneled_reply = yes" | |||||
# when using fast session resumption. | |||||
# | |||||
- cache { | |||||
+ # cache { | |||||
# | |||||
# Enable it. The default is "no". | |||||
# Deleting the entire "cache" subsection | |||||
@@ -348,14 +348,14 @@ | |||||
# enable resumption for just one user | |||||
# by setting the above attribute to "yes". | |||||
# | |||||
- enable = no | |||||
+ # enable = no | |||||
# | |||||
# Lifetime of the cached entries, in hours. | |||||
# The sessions will be deleted after this | |||||
# time. | |||||
# | |||||
- lifetime = 24 # hours | |||||
+ # lifetime = 24 # hours | |||||
# | |||||
# The maximum number of entries in the | |||||
@@ -364,8 +364,8 @@ | |||||
# This could be set to the number of users | |||||
# who are logged in... which can be a LOT. | |||||
# | |||||
- max_entries = 255 | |||||
- } | |||||
+ # max_entries = 255 | |||||
+ # } | |||||
# | |||||
# As of version 2.1.10, client certificates can be | |||||
@@ -503,7 +503,7 @@ | |||||
# | |||||
# in the control items for a request. | |||||
# | |||||
- ttls { | |||||
+# ttls { | |||||
# The tunneled EAP session needs a default | |||||
# EAP type which is separate from the one for | |||||
# the non-tunneled EAP module. Inside of the | |||||
@@ -511,7 +511,7 @@ | |||||
# If the request does not contain an EAP | |||||
# conversation, then this configuration entry | |||||
# is ignored. | |||||
- default_eap_type = md5 | |||||
+# default_eap_type = mschapv2 | |||||
# The tunneled authentication request does | |||||
# not usually contain useful attributes | |||||
@@ -527,7 +527,7 @@ | |||||
# is copied to the tunneled request. | |||||
# | |||||
# allowed values: {no, yes} | |||||
- copy_request_to_tunnel = no | |||||
+# copy_request_to_tunnel = yes | |||||
# The reply attributes sent to the NAS are | |||||
# usually based on the name of the user | |||||
@@ -540,7 +540,7 @@ | |||||
# the tunneled request. | |||||
# | |||||
# allowed values: {no, yes} | |||||
- use_tunneled_reply = no | |||||
+# use_tunneled_reply = no | |||||
# | |||||
# The inner tunneled request can be sent | |||||
@@ -552,13 +552,13 @@ | |||||
# the virtual server that processed the | |||||
# outer requests. | |||||
# | |||||
- virtual_server = "inner-tunnel" | |||||
+# virtual_server = "inner-tunnel" | |||||
# This has the same meaning as the | |||||
# same field in the "tls" module, above. | |||||
# The default value here is "yes". | |||||
# include_length = yes | |||||
- } | |||||
+# } | |||||
################################################## | |||||
# | |||||
@@ -627,14 +627,14 @@ | |||||
# the PEAP module also has these configuration | |||||
# items, which are the same as for TTLS. | |||||
- copy_request_to_tunnel = no | |||||
- use_tunneled_reply = no | |||||
+ copy_request_to_tunnel = yes | |||||
+ use_tunneled_reply = yes | |||||
# When the tunneled session is proxied, the | |||||
# home server may not understand EAP-MSCHAP-V2. | |||||
# Set this entry to "no" to proxy the tunneled | |||||
# EAP-MSCHAP-V2 as normal MSCHAPv2. | |||||
- # proxy_tunneled_request_as_eap = yes | |||||
+ proxy_tunneled_request_as_eap = no | |||||
# | |||||
# The inner tunneled request can be sent | |||||
@@ -646,7 +646,8 @@ | |||||
# the virtual server that processed the | |||||
# outer requests. | |||||
# | |||||
- virtual_server = "inner-tunnel" | |||||
+ # virtual_server = "inner-tunnel" | |||||
+ EAP-TLS-Require-Client-Cert = no | |||||
# This option enables support for MS-SoH | |||||
# see doc/SoH.txt for more info. | |||||
Index: freeradius-server-2.2.7/raddb/modules/counter | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/modules/counter | |||||
+++ freeradius-server-2.2.7/raddb/modules/counter | |||||
@@ -69,7 +69,7 @@ | |||||
# 'check-name' attribute. | |||||
# | |||||
counter daily { | |||||
- filename = ${db_dir}/db.daily | |||||
+ filename = ${radacctdir}/db.daily | |||||
key = User-Name | |||||
count-attribute = Acct-Session-Time | |||||
reset = daily | |||||
Index: freeradius-server-2.2.7/raddb/modules/pap | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/modules/pap | |||||
+++ freeradius-server-2.2.7/raddb/modules/pap | |||||
@@ -18,5 +18,5 @@ | |||||
# | |||||
# http://www.openldap.org/faq/data/cache/347.html | |||||
pap { | |||||
- auto_header = no | |||||
+ auto_header = yes | |||||
} | |||||
Index: freeradius-server-2.2.7/raddb/modules/radutmp | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/modules/radutmp | |||||
+++ freeradius-server-2.2.7/raddb/modules/radutmp | |||||
@@ -12,7 +12,7 @@ radutmp { | |||||
# Where the file is stored. It's not a log file, | |||||
# so it doesn't need rotating. | |||||
# | |||||
- filename = ${logdir}/radutmp | |||||
+ filename = ${radacctdir}/radutmp | |||||
# The field in the packet to key on for the | |||||
# 'user' name, If you have other fields which you want | |||||
Index: freeradius-server-2.2.7/raddb/modules/sradutmp | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/modules/sradutmp | |||||
+++ freeradius-server-2.2.7/raddb/modules/sradutmp | |||||
@@ -10,7 +10,7 @@ | |||||
# then name "sradutmp" to identify it later in the "accounting" | |||||
# section. | |||||
radutmp sradutmp { | |||||
- filename = ${logdir}/sradutmp | |||||
+ filename = ${radacctdir}/sradutmp | |||||
perm = 0644 | |||||
callerid = "no" | |||||
} | |||||
Index: freeradius-server-2.2.7/raddb/radiusd.conf.in | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/radiusd.conf.in | |||||
+++ freeradius-server-2.2.7/raddb/radiusd.conf.in | |||||
@@ -66,7 +66,7 @@ name = radiusd | |||||
# Location of config and logfiles. | |||||
confdir = ${raddbdir} | |||||
-run_dir = ${localstatedir}/run/${name} | |||||
+run_dir = ${localstatedir}/run | |||||
# Should likely be ${localstatedir}/lib/radiusd | |||||
db_dir = ${raddbdir} | |||||
@@ -323,7 +323,7 @@ listen { | |||||
# If your system does not support this feature, you will | |||||
# get an error if you try to use it. | |||||
# | |||||
-# interface = eth0 | |||||
+ interface = br-lan | |||||
# Per-socket lists of clients. This is a very useful feature. | |||||
# | |||||
@@ -350,7 +350,7 @@ listen { | |||||
# ipv6addr = :: | |||||
port = 0 | |||||
type = acct | |||||
-# interface = eth0 | |||||
+ interface = br-lan | |||||
# clients = per_socket_clients | |||||
} | |||||
@@ -576,8 +576,8 @@ security { | |||||
# | |||||
# allowed values: {no, yes} | |||||
# | |||||
-proxy_requests = yes | |||||
-$INCLUDE proxy.conf | |||||
+proxy_requests = no | |||||
+#$INCLUDE proxy.conf | |||||
# CLIENTS CONFIGURATION | |||||
@@ -774,7 +774,7 @@ instantiate { | |||||
# The entire command line (and output) must fit into 253 bytes. | |||||
# | |||||
# e.g. Framed-Pool = `%{exec:/bin/echo foo}` | |||||
- exec | |||||
+# exec | |||||
# | |||||
# The expression module doesn't do authorization, | |||||
@@ -791,15 +791,15 @@ instantiate { | |||||
# other xlat functions such as md5, sha1 and lc. | |||||
# | |||||
# We do not recommend removing it's listing here. | |||||
- expr | |||||
+# expr | |||||
# | |||||
# We add the counter module here so that it registers | |||||
# the check-name attribute before any module which sets | |||||
# it | |||||
# daily | |||||
- expiration | |||||
- logintime | |||||
+# expiration | |||||
+# logintime | |||||
# subsections here can be thought of as "virtual" modules. | |||||
# | |||||
@@ -823,7 +823,7 @@ instantiate { | |||||
# to multiple times. | |||||
# | |||||
###################################################################### | |||||
-$INCLUDE policy.conf | |||||
+#$INCLUDE policy.conf | |||||
###################################################################### | |||||
# | |||||
@@ -833,9 +833,9 @@ $INCLUDE policy.conf | |||||
# match the regular expression: /[a-zA-Z0-9_.]+/ | |||||
# | |||||
# It allows you to define new virtual servers simply by placing | |||||
-# a file into the raddb/sites-enabled/ directory. | |||||
+# a file into the /etc/freeradius2/sites/ directory. | |||||
# | |||||
-$INCLUDE sites-enabled/ | |||||
+$INCLUDE sites/ | |||||
###################################################################### | |||||
# | |||||
@@ -843,7 +843,7 @@ $INCLUDE sites-enabled/ | |||||
# "authenticate {}", "accounting {}", have been moved to the | |||||
# the file: | |||||
# | |||||
-# raddb/sites-available/default | |||||
+# /etc/freeradius2/sites/default | |||||
# | |||||
# This is the "default" virtual server that has the same | |||||
# configuration as in version 1.0.x and 1.1.x. The default | |||||
Index: freeradius-server-2.2.7/raddb/sites-available/default | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/sites-available/default | |||||
+++ freeradius-server-2.2.7/raddb/sites-available/default | |||||
@@ -85,7 +85,7 @@ authorize { | |||||
# | |||||
# It takes care of processing the 'raddb/hints' and the | |||||
# 'raddb/huntgroups' files. | |||||
- preprocess | |||||
+# preprocess | |||||
# | |||||
# If you want to have a log of authentication requests, | |||||
@@ -96,7 +96,7 @@ authorize { | |||||
# | |||||
# The chap module will set 'Auth-Type := CHAP' if we are | |||||
# handling a CHAP request and Auth-Type has not already been set | |||||
- chap | |||||
+# chap | |||||
# | |||||
# If the users are logging in with an MS-CHAP-Challenge | |||||
@@ -104,13 +104,13 @@ authorize { | |||||
# the MS-CHAP-Challenge attribute, and add 'Auth-Type := MS-CHAP' | |||||
# to the request, which will cause the server to then use | |||||
# the mschap module for authentication. | |||||
- mschap | |||||
+# mschap | |||||
# | |||||
# If you have a Cisco SIP server authenticating against | |||||
# FreeRADIUS, uncomment the following line, and the 'digest' | |||||
# line in the 'authenticate' section. | |||||
- digest | |||||
+# digest | |||||
# | |||||
# The WiMAX specification says that the Calling-Station-Id | |||||
@@ -133,7 +133,7 @@ authorize { | |||||
# Otherwise, when the first style of realm doesn't match, | |||||
# the other styles won't be checked. | |||||
# | |||||
- suffix | |||||
+# suffix | |||||
# ntdomain | |||||
# | |||||
@@ -197,8 +197,8 @@ authorize { | |||||
# Use the checkval module | |||||
# checkval | |||||
- expiration | |||||
- logintime | |||||
+# expiration | |||||
+# logintime | |||||
# | |||||
# If no other module has claimed responsibility for | |||||
@@ -279,7 +279,7 @@ authenticate { | |||||
# If you have a Cisco SIP server authenticating against | |||||
# FreeRADIUS, uncomment the following line, and the 'digest' | |||||
# line in the 'authorize' section. | |||||
- digest | |||||
+# digest | |||||
# | |||||
# Pluggable Authentication Modules. | |||||
@@ -296,7 +296,7 @@ authenticate { | |||||
# be used for authentication ONLY for compatibility with legacy | |||||
# FreeRADIUS configurations. | |||||
# | |||||
- unix | |||||
+# unix | |||||
# Uncomment it if you want to use ldap for authentication | |||||
# | |||||
@@ -332,8 +332,8 @@ authenticate { | |||||
# | |||||
# Pre-accounting. Decide which accounting type to use. | |||||
# | |||||
-preacct { | |||||
- preprocess | |||||
+#preacct { | |||||
+# preprocess | |||||
# | |||||
# Session start times are *implied* in RADIUS. | |||||
@@ -356,7 +356,7 @@ preacct { | |||||
# | |||||
# Ensure that we have a semi-unique identifier for every | |||||
# request, and many NAS boxes are broken. | |||||
- acct_unique | |||||
+# acct_unique | |||||
# | |||||
# Look for IPASS-style 'realm/', and if not found, look for | |||||
@@ -366,13 +366,13 @@ preacct { | |||||
# Accounting requests are generally proxied to the same | |||||
# home server as authentication requests. | |||||
# IPASS | |||||
- suffix | |||||
+# suffix | |||||
# ntdomain | |||||
# | |||||
# Read the 'acct_users' file | |||||
- files | |||||
-} | |||||
+# files | |||||
+#} | |||||
# | |||||
# Accounting. Log the accounting data. | |||||
@@ -382,7 +382,7 @@ accounting { | |||||
# Create a 'detail'ed log of the packets. | |||||
# Note that accounting requests which are proxied | |||||
# are also logged in the detail file. | |||||
- detail | |||||
+# detail | |||||
# daily | |||||
# Update the wtmp file | |||||
@@ -434,7 +434,7 @@ accounting { | |||||
exec | |||||
# Filter attributes from the accounting response. | |||||
- attr_filter.accounting_response | |||||
+ #attr_filter.accounting_response | |||||
# | |||||
# See "Autz-Type Status-Server" for how this works. | |||||
@@ -460,7 +460,7 @@ session { | |||||
# Post-Authentication | |||||
# Once we KNOW that the user has been authenticated, there are | |||||
# additional steps we can take. | |||||
-post-auth { | |||||
+#post-auth { | |||||
# Get an address from the IP Pool. | |||||
# main_pool | |||||
@@ -490,7 +490,7 @@ post-auth { | |||||
# ldap | |||||
# For Exec-Program and Exec-Program-Wait | |||||
- exec | |||||
+# exec | |||||
# | |||||
# Calculate the various WiMAX keys. In order for this to work, | |||||
@@ -574,18 +574,18 @@ post-auth { | |||||
# Add the ldap module name (or instance) if you have set | |||||
# 'edir_account_policy_check = yes' in the ldap module configuration | |||||
# | |||||
- Post-Auth-Type REJECT { | |||||
- # log failed authentications in SQL, too. | |||||
+# Post-Auth-Type REJECT { | |||||
+# # log failed authentications in SQL, too. | |||||
# sql | |||||
# Insert EAP-Failure message if the request was | |||||
# rejected by policy instead of because of an | |||||
# authentication failure | |||||
- eap | |||||
+# eap | |||||
- attr_filter.access_reject | |||||
- } | |||||
-} | |||||
+# attr_filter.access_reject | |||||
+# } | |||||
+#} | |||||
# | |||||
# When the server decides to proxy a request to a home server, | |||||
@@ -595,7 +595,7 @@ post-auth { | |||||
# | |||||
# Only a few modules currently have this method. | |||||
# | |||||
-pre-proxy { | |||||
+#pre-proxy { | |||||
# attr_rewrite | |||||
# Uncomment the following line if you want to change attributes | |||||
@@ -611,14 +611,14 @@ pre-proxy { | |||||
# server, un-comment the following line, and the | |||||
# 'detail pre_proxy_log' section, above. | |||||
# pre_proxy_log | |||||
-} | |||||
+#} | |||||
# | |||||
# When the server receives a reply to a request it proxied | |||||
# to a home server, the request may be massaged here, in the | |||||
# post-proxy stage. | |||||
# | |||||
-post-proxy { | |||||
+#post-proxy { | |||||
# If you want to have a log of replies from a home server, | |||||
# un-comment the following line, and the 'detail post_proxy_log' | |||||
@@ -642,7 +642,7 @@ post-proxy { | |||||
# hidden inside of the EAP packet, and the end server will | |||||
# reject the EAP request. | |||||
# | |||||
- eap | |||||
+# eap | |||||
# | |||||
# If the server tries to proxy a request and fails, then the | |||||
@@ -664,5 +664,5 @@ post-proxy { | |||||
# Post-Proxy-Type Fail { | |||||
# detail | |||||
# } | |||||
-} | |||||
+#} | |||||
Index: freeradius-server-2.2.7/raddb/users | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/raddb/users | |||||
+++ freeradius-server-2.2.7/raddb/users | |||||
@@ -169,22 +169,22 @@ | |||||
# by the terminal server in which case there may not be a "P" suffix. | |||||
# The terminal server sends "Framed-Protocol = PPP" for auto PPP. | |||||
# | |||||
-DEFAULT Framed-Protocol == PPP | |||||
- Framed-Protocol = PPP, | |||||
- Framed-Compression = Van-Jacobson-TCP-IP | |||||
+#DEFAULT Framed-Protocol == PPP | |||||
+# Framed-Protocol = PPP, | |||||
+# Framed-Compression = Van-Jacobson-TCP-IP | |||||
# | |||||
# Default for CSLIP: dynamic IP address, SLIP mode, VJ-compression. | |||||
# | |||||
-DEFAULT Hint == "CSLIP" | |||||
- Framed-Protocol = SLIP, | |||||
- Framed-Compression = Van-Jacobson-TCP-IP | |||||
+#DEFAULT Hint == "CSLIP" | |||||
+# Framed-Protocol = SLIP, | |||||
+# Framed-Compression = Van-Jacobson-TCP-IP | |||||
# | |||||
# Default for SLIP: dynamic IP address, SLIP mode. | |||||
# | |||||
-DEFAULT Hint == "SLIP" | |||||
- Framed-Protocol = SLIP | |||||
+#DEFAULT Hint == "SLIP" | |||||
+# Framed-Protocol = SLIP | |||||
# | |||||
# Last default: rlogin to our main server. |
@ -1,17 +0,0 @@ | |||||
Index: freeradius-server-2.2.7/src/modules/rules.mak | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/src/modules/rules.mak | |||||
+++ freeradius-server-2.2.7/src/modules/rules.mak | |||||
@@ -63,10 +63,10 @@ $(LT_OBJS): $(SERVER_HEADERS) | |||||
# | |||||
####################################################################### | |||||
%.lo: %.c | |||||
- $(LIBTOOL) --mode=compile --tag=CC $(CC) $(CFLAGS) $(RLM_CFLAGS) -c $< | |||||
+ $(LIBTOOL) --mode=compile --tag=CC $(CC) $(CFLAGS) $(CPPFLAGS) $(RLM_CFLAGS) -c $< | |||||
%.lo: %.cpp | |||||
- $(LIBTOOL) --mode=compile --tag=CXX $(CXX) $(CFLAGS) $(RLM_CFLAGS) -c $< | |||||
+ $(LIBTOOL) --mode=compile --tag=CXX $(CXX) $(CFLAGS) $(CPPFLAGS) $(RLM_CFLAGS) -c $< | |||||
ifneq ($(TARGET),) | |||||
####################################################################### |
@ -1,40 +0,0 @@ | |||||
Index: freeradius-server-2.2.7/configure.in | |||||
=================================================================== | |||||
--- freeradius-server-2.2.7.orig/configure.in | |||||
+++ freeradius-server-2.2.7/configure.in | |||||
@@ -820,35 +820,6 @@ if test "x$WITH_OPENSSL" = xyes; then | |||||
OPENSSL_INCLUDE="-DOPENSSL_NO_KRB5" | |||||
fi | |||||
- dnl # | |||||
- dnl # Now check that the header versions match the library | |||||
- dnl # | |||||
- AC_MSG_CHECKING([OpenSSL library and header version consistency]) | |||||
- AC_RUN_IFELSE( | |||||
- [AC_LANG_PROGRAM( | |||||
- [[ | |||||
- #include <stdio.h> | |||||
- #include <openssl/opensslv.h> | |||||
- #include <openssl/crypto.h> | |||||
- ]], | |||||
- [[ | |||||
- if (SSLeay() == OPENSSL_VERSION_NUMBER) { | |||||
- return 0; | |||||
- } else { | |||||
- printf("library: %lx header: %lx... ", (unsigned long) SSLeay(), (unsigned long) OPENSSL_VERSION_NUMBER); | |||||
- return 1; | |||||
- } | |||||
- ]] | |||||
- )], | |||||
- [ | |||||
- AC_MSG_RESULT(yes) | |||||
- ], | |||||
- [ | |||||
- AC_MSG_RESULT(no) | |||||
- AC_MSG_FAILURE([OpenSSL library version does not match header version]) | |||||
- ] | |||||
- ) | |||||
- | |||||
if test "x$OPENSSL_LIBS" = x; then | |||||
LIBS=$old_LIBS | |||||
LDFLAGS="$old_LDFLAGS" |