Commit Graph

8 Commits

Author SHA1 Message Date
Hauke Mehrtens 7bb34ef7fc freeradius3: fix CVE-2017-9148
This takes the fix for CVE-2017-9148 from Debian.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-10-08 21:05:12 +02:00
Etienne Champetier 4006865ae8 treewide: run "make check FIXUP=1"
fix Makefile chmod (644)
replace MD5SUM with HASH
add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git

(PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-08-29 21:41:14 -07:00
Daniel Golle 92b2a187bb Merge pull request #4099 from dangowrt/freeradius3-ldap
freeradius3: build and package support for LDAP
2017-06-05 16:51:38 +02:00
Toke Høiland-Jørgensen 3922206a34 freeradius3: Bump package release
Forgot to bump the package release in commit 424f4e2c.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-04-26 16:35:56 +02:00
Toke Høiland-Jørgensen 424f4e2c63 freeradius3: A couple of small fixes
- Moves /etc/freeradius3/sites-{enabled,available}/inner-tunnel to be part of
  the freeradius3-mod-eap package. This prevents conflicts between
  freeradius3-mod-eap-peap and freeradius3-mod-eap-ttls which both included the
  file before. This fixes LEDE bug FS#678.

- Change the demo cert validity to be 1 year instead of 60 days. Should keep the
  cert valid for the duration of the LEDE release cycle (with some slack). This
  fixes #4239.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-04-26 16:32:16 +02:00
Daniel Golle c275909c38 freeradius3: build and package support for LDAP
The lack of LDAP support was one of the things which prevented users
from migrating from freeradius2 to freeradius3.
Enable LDAP in freeradius3 so we can finally burry freeradius2.

Reported-by: Martin Mueller <mm@sig21.net>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-03-03 10:34:55 +01:00
Toke Høiland-Jørgensen 6be33929b8 freeradius2/3: Fixes to init script. (#3022)
This fixes two issues with the freeradius package init scripts:

- The package installs libraries in /usr/lib/freeradius{2,3}, but the
  musl dynamic linker won't find them there unless LD_LIBRARY_PATH is
  set to include this directory. This adds an appropriate env statement
  to the procd init setup.

- procd expects services to stay in the foreground, or it will be unable
  to properly shut them down again. This adds the -f flag to radiusd to
  achieve that.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2016-08-05 17:49:33 +02:00
Lucile Quirion 0871991d8d freeradius3: add package
freeradius-server version 2.x has been marked End-Of-Life.
This commit adds freeradius-server version 3.0.11 in a new package.

This commit also introduces the option "freeradius3-default"
which activate all modules needed to run radiusd with its default
configuration.

- rlm_digest (HTTP Digest Authentication) has been added
- rlm_unix (System Authentication) has been added
- rlm_attr_rewrite has been deleted

Note that SQL and LDAP support has been disabled.

Signed-off-by: Lucile Quirion <lucile.quirion@savoirfairelinux.com>
2016-07-12 11:37:05 -04:00