aboutsummaryrefslogtreecommitdiff
path: root/net/freeradius3
Commit message (Collapse)AuthorAge
* freeradius3: add modulesAndy Syam2023-12-02
| | | | | | | | | | | | | | | | | | | | | | | freeradius3-mod-yubikey freeradius3-mod-wimax freeradius3-mod-utf8 freeradius3-mod-unpack freeradius3-mod-sql-map freeradius3-mod-sometimes freeradius3-mod-soh freeradius3-mod-replicate freeradius3-mod-rediswho freeradius3-mod-redis freeradius3-mod-pam freeradius3-mod-linelog freeradius3-mod-krb5 freeradius3-mod-ippool freeradius3-mod-eap-fast freeradius3-mod-dynamic-clients freeradius3-mod-date freeradius3-mod-counter Signed-off-by: Andy Syam <privasisource@gmail.com>
* freeradius3: Fix build when pcre is presentJeffery To2023-11-15
| | | | | | | | | | | | | | | | | If pcre is built before freeradius, then freeradius' configure will detect pcre and freeradius will be built with pcre functionality enabled. This causes a "missing dependencies" error at the end of package build. This passes --without-pcre to configure to disable this autodetection. This also removes the dependency on libpcre2 as freeradius v3 does not have support for pcre2. Fixes: 19ec30255f13 ("freeradius3: switch to pcre2") Fixes: https://github.com/openwrt/packages/issues/22574 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* freeradius3: switch to pcre2Martin Strobel2023-10-30
| | | | | | | | | use libpcre2 as dependency for freeradius3-common because PCRE is EOL with no further updates Compile & run tested on mediatek mt76 ubnt-ui6-lr-v1 with musl Signed-off-by: Martin Strobel <arctus@crza.de>
* freeradius3: Update to 3.0.26Jianhui Zhao2023-05-29
| | | | Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* treewide: Run refresh on all packagesIlya Lipnitskiy2021-02-20
| | | | | | | | | The crude loop I wrote to come up with this changeset: find -L package/feeds/packages/ -name patches | \ sed 's/patches$/refresh/' | sort | xargs make Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
* freeradius3: add missing libbsd dependency to glibcRosen Penev2020-12-31
| | | | | | Fixes packages generation. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* freeradius3: move "release_" from PKG_VERSIONAlexey Dobrovolsky2020-10-14
| | | | | | | The substring "release_" does not reflect the version number. In addition, package names will be shorter. Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
* freeradius3: add meta-package for default modulesAlexey Dobrovolsky2020-10-03
| | | | | | | | | This meta-package contains only dependencies for modules needed in FreeRADIUS default configuration. This commit adds missing description and install sections. Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
* freeradius3: fix hostname invocation in radtestAlexey Dobrovolsky2020-09-05
| | | | | | | | | | | | | | | Canonical radtest start results in an error: $ radtest bob hello localhost 0 testing123 /usr/bin/radtest: line 1: hostname: not found (0) Error parsing "stdin": Failed to get value hostname command is not present in OpenWrt. Instead, hostname can be obtained from file /proc/sys/kernel/hostname. added: 004-get-hostname-from-proc-in-radtest.patch Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
* freeradius3: enable radtest utilityAlexey Dobrovolsky2020-09-04
| | | | | | | | | | | radtest utility is used in many manuals to check the operation of radius server. At the moment all parameters must be specified at startup, for example: $ radtest bob hello localhost 0 testing123 0 localhost Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
* freeradius3: fix compilation without deprecated OpenSSL APIsRosen Penev2020-08-04
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* freeradius3: add missing conffiles to MakefileAlexey Dobrovolsky2020-08-01
| | | | | | | | | | | | | | | | | | | | | Config files /etc/freeradius3/policy.d/accounting /etc/freeradius3/policy.d/filter /etc/freeradius3/proxy.conf /etc/freeradius3/sites-available/default and link /etc/freeradius3/sites-enabled/default are in the freeradius3 package and are mentioned in the main config file /etc/freeradius3/radiusd.conf Thus, they must be explicitly specified in the Makefile. File /etc/freeradius3/sites/default is not included in the package, is not created during installation, is not mentioned in the main config file and should therefore be excluded from the Makefile. Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
* freeradius3: Fix to init script.Eiji MATSUMOTO2020-05-05
| | | | | | | | | | | | To use eap tls, 'tmpdir' must be created before server starts. This 'tmpdir' is used to store and verify client certificate, and therefore radiusd do 'chmod go-rwx'. If 'tmpdir' does NOT exists, server failed to start and default 'tmpdir' is '/tmp/radiusd'. So init script MUST create default 'tmpdir' like other directories. Signed-off-by: Eiji MATSUMOTO <toudaiman@gmail.com>
* freeradius3: Update to 3.0.21Robby K2020-04-28
| | | | | | Latest stable release. Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: Removed patches/004-fix-target-python-header-detection.patch as ↵Robby K2020-04-28
| | | | | | | | | | it is no longer needed for the freeradius3-mod-python3 package to compile and updated the Makefile to reflect this due to the following change/commit in freeradius: https://github.com/FreeRADIUS/freeradius-server/commit/307678b268cf8898a65632147ecc40d37ea3f9d3 This is in preparation for the 3.0.21 update. Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: Refreshed patches/002-disable-session-cache-CVE-2017-9148.patch ↵Robby K2020-04-28
| | | | | | in preparation for the 3.0.21 update. Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: Fix the ordering in the Makefile.Robby K2020-04-28
| | | | Signed-off-by: Robby K <robbyke@gmail.com>
* Merge pull request #11918 from dvtirol/freeradius-restHannu Nyman2020-04-25
|\ | | | | Support building freeradius3-mod-rest
| * freeradius3: Support building freeradius3-mod-restTobias Girstmair2020-04-23
| | | | | | | | Signed-off-by: Tobias Girstmair <tobias.girstmair@tirol.gv.at>
* | treewide: Remove Python variants for non-Python packagesJeffery To2020-04-19
|/ | | | | | | | | | | This removes Python-related build variants, and adds PYTHON3_PKG_BUILD:=0 and minor build adjustments (where appropriate), for non-Python packages. There should be no changes to build output. This also updates some include paths for python3-package.mk and/or python3-host.mk to be relative to the package Makefile. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* freeradius3: Remove Python 2 module packageJeffery To2020-04-01
| | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* freeradius3: Enable the rlm_python and rlm_python3 modules.Robby K2020-02-07
| | | | Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: Fix proxy.conf file conflict.Robby K2020-02-07
| | | | | | | It was provided by both the freeradius3 and freeradius3-mod-realm packages. Now provided by the freeradius3 package only. Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: Update to 3.0.20Robby K2020-01-26
| | | | | | | | | | Latest stable release, contains security fixes for EAP-PWD (side-channel leak), logrotate settings (CVE-2019-10143) and a DoS issue due to multithreaded BN_CTX access (CVE-2019-17185). Also refreshed patches/002-disable-session-cache-CVE-2017-9148.patch due to the following changes/commits in freeradius: https://github.com/FreeRADIUS/freeradius-server/commit/bf1a1eda2387745bbe538998f3d2e6514f981bfd https://github.com/FreeRADIUS/freeradius-server/commit/a3c46544b38ab46218c385d0ee197538fad5b3da Signed-off-by: Robby K <robbyke@gmail.com>
* treewide: add PKG_CPE_ID for better cvescanner coverageJan Pavlinec2019-09-17
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* freeradius3: Fix conffiles for mod-sql-* packagesAudric Schiltknecht2019-05-10
| | | | Signed-off-by: Audric Schiltknecht <audric.schiltknecht@viagenie.ca>
* freeradius3: Update to 3.0.19Robby K2019-04-16
| | | | | | Latest stable release, contains security fixes for EAP-PWD. Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: Workaround the fifo error introduced by the update to 3.0.18Robby K2019-04-16
| | | | Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: Fix the libpcre dependency in Makefile.Robby K2019-04-16
| | | | Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: update to 3.0.18David Yang2019-04-02
| | | | Signed-off-by: David Yang <mmyangfl@gmail.com>
* freeradius3: Add support for SQLDavid Yang2019-04-02
| | | | Signed-off-by: David Yang <mmyangfl@gmail.com>
* freeradius3: allow build without openssl enginesEneas U de Queiroz2019-02-25
| | | | | | | | | | | This applies a patch from upstream that avoids a call to ENGINE_cleanup when the openssl library was built without engine support. A workaround for a missing header check was used to silence a warning about the implicit definition of RAND_load_file. A proper fix has been merged upstream as well. Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
* freeradius3: Enable the EAP-PWD module.Robby K2018-08-20
| | | | | | | | | | | | | This enables the EAP-PWD module, which allows for logging in with only a username and password, while still being secure (see the links below for the details of this EAP method, if interested). https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol#EAP_Password_(EAP-PWD) Also found this blog post which talks about EAP-PWD and its benefits: https://dustri.org/b/eap-pwd-wifi-security-done-right.html Signed-off-by: Robby K <robbyke@gmail.com>
* freeradius3: update to 3.0.17Eneas U de Queiroz2018-05-25
| | | | | | Latest stable release, support for openssl 1.1 Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
* freeradius3: fix CVE-2017-9148Hauke Mehrtens2017-10-08
| | | | | | This takes the fix for CVE-2017-9148 from Debian. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* treewide: run "make check FIXUP=1"Etienne Champetier2017-08-29
| | | | | | | | | | fix Makefile chmod (644) replace MD5SUM with HASH add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git (PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now) Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* Merge pull request #4099 from dangowrt/freeradius3-ldapDaniel Golle2017-06-05
|\ | | | | freeradius3: build and package support for LDAP
| * freeradius3: build and package support for LDAPDaniel Golle2017-03-03
| | | | | | | | | | | | | | | | | | The lack of LDAP support was one of the things which prevented users from migrating from freeradius2 to freeradius3. Enable LDAP in freeradius3 so we can finally burry freeradius2. Reported-by: Martin Mueller <mm@sig21.net> Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | freeradius3: Bump package releaseToke Høiland-Jørgensen2017-04-26
| | | | | | | | | | | | Forgot to bump the package release in commit 424f4e2c. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* | freeradius3: A couple of small fixesToke Høiland-Jørgensen2017-04-26
|/ | | | | | | | | | | | | - Moves /etc/freeradius3/sites-{enabled,available}/inner-tunnel to be part of the freeradius3-mod-eap package. This prevents conflicts between freeradius3-mod-eap-peap and freeradius3-mod-eap-ttls which both included the file before. This fixes LEDE bug FS#678. - Change the demo cert validity to be 1 year instead of 60 days. Should keep the cert valid for the duration of the LEDE release cycle (with some slack). This fixes #4239. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* freeradius2/3: Fixes to init script. (#3022)Toke Høiland-Jørgensen2016-08-05
| | | | | | | | | | | | | | This fixes two issues with the freeradius package init scripts: - The package installs libraries in /usr/lib/freeradius{2,3}, but the musl dynamic linker won't find them there unless LD_LIBRARY_PATH is set to include this directory. This adds an appropriate env statement to the procd init setup. - procd expects services to stay in the foreground, or it will be unable to properly shut them down again. This adds the -f flag to radiusd to achieve that. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
* freeradius3: add packageLucile Quirion2016-07-12
freeradius-server version 2.x has been marked End-Of-Life. This commit adds freeradius-server version 3.0.11 in a new package. This commit also introduces the option "freeradius3-default" which activate all modules needed to run radiusd with its default configuration. - rlm_digest (HTTP Digest Authentication) has been added - rlm_unix (System Authentication) has been added - rlm_attr_rewrite has been deleted Note that SQL and LDAP support has been disabled. Signed-off-by: Lucile Quirion <lucile.quirion@savoirfairelinux.com>