Summary: High-performance and highly configurable free RADIUS server

Name: freeradius

Version: 2.1.12

Release: 3%{?dist}

License: GPLv2+ and LGPLv2+

Group: System Environment/Daemons

URL: http://www.freeradius.org/

Source0: ftp://ftp.freeradius.org/pub/radius/freeradius-server-%{version}.tar.bz2

Source100: radiusd.service

Source102: freeradius-logrotate

Source103: freeradius-pam-conf

Source104: %{name}-tmpfiles.conf

Patch1: freeradius-cert-config.patch

Obsoletes: freeradius-devel

Obsoletes: freeradius-libs

%define docdir %{_docdir}/freeradius-%{version}

%define initddir %{?_initddir:%{_initddir}}%{!?_initddir:%{_initrddir}}

BuildRequires: autoconf

BuildRequires: gdbm-devel

BuildRequires: libtool

BuildRequires: libtool-ltdl-devel

BuildRequires: openssl-devel

BuildRequires: pam-devel

BuildRequires: zlib-devel

BuildRequires: net-snmp-devel

BuildRequires: net-snmp-utils

BuildRequires: readline-devel

BuildRequires: libpcap-devel

BuildRequires: systemd-units

Requires(pre): shadow-utils glibc-common

Requires(post): systemd-sysv

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

%description

The FreeRADIUS Server Project is a high performance and highly configurable

GPL'd free RADIUS server. The server is similar in some respects to

Livingston's 2.0 server.  While FreeRADIUS started as a variant of the

Cistron RADIUS server, they don't share a lot in common any more. It now has

many more features than Cistron or Livingston, and is much more configurable.

FreeRADIUS is an Internet authentication daemon, which implements the RADIUS

protocol, as defined in RFC 2865 (and others). It allows Network Access

Servers (NAS boxes) to perform authentication for dial-up users. There are

also RADIUS clients available for Web servers, firewalls, Unix logins, and

more.  Using RADIUS allows authentication and authorization for a network to

be centralized, and minimizes the amount of re-configuration which has to be

done when adding or deleting new users.

%package utils

Group: System Environment/Daemons

Summary: FreeRADIUS utilities

Requires: %{name} = %{version}-%{release}

Requires: libpcap >= 0.9.4

%description utils

The FreeRADIUS server has a number of features found in other servers,

and additional features not found in any other server. Rather than

doing a feature by feature comparison, we will simply list the features

of the server, and let you decide if they satisfy your needs.

Support for RFC and VSA Attributes Additional server configuration

attributes Selecting a particular configuration Authentication methods

%package ldap

Summary: LDAP support for freeradius

Group: System Environment/Daemons

Requires: %{name} = %{version}-%{release}

BuildRequires: openldap-devel

%description ldap

This plugin provides the LDAP support for the FreeRADIUS server project.

%package krb5

Summary: Kerberos 5 support for freeradius

Group: System Environment/Daemons

Requires: %{name} = %{version}-%{release}

BuildRequires: krb5-devel

%description krb5

This plugin provides the Kerberos 5 support for the FreeRADIUS server project.

%package perl

Summary: Perl support for freeradius

Group: System Environment/Daemons

Requires: %{name} = %{version}-%{release}

Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))

%{?fedora:BuildRequires: perl-devel}

%if 0%{?rhel} <= 5

BuildRequires: perl

%endif

%if 0%{?rhel} >= 6

BuildRequires: perl-devel

%endif

BuildRequires: perl(ExtUtils::Embed)

%description perl

This plugin provides the Perl support for the FreeRADIUS server project.

%package python

Summary: Python support for freeradius

Group: System Environment/Daemons

Requires: %{name} = %{version}-%{release}

BuildRequires: python-devel

%description python

This plugin provides the Python support for the FreeRADIUS server project.

%package mysql

Summary: MySQL support for freeradius

Group: System Environment/Daemons

Requires: %{name} = %{version}-%{release}

BuildRequires: mysql-devel

%description mysql

This plugin provides the MySQL support for the FreeRADIUS server project.

%package postgresql

Summary: Postgresql support for freeradius

Group: System Environment/Daemons

Requires: %{name} = %{version}-%{release}

BuildRequires: postgresql-devel

%description postgresql

This plugin provides the postgresql support for the FreeRADIUS server project.

%package unixODBC

Summary: Unix ODBC support for freeradius

Group: System Environment/Daemons

Requires: %{name} = %{version}-%{release}

BuildRequires: unixODBC-devel

%description unixODBC

This plugin provides the unixODBC support for the FreeRADIUS server project.

%prep

%setup -q -n freeradius-server-%{version}

%patch1 -p1 -b .cert-config

# Some source files mistakenly have execute permissions set

find $RPM_BUILD_DIR/freeradius-server-%{version} \( -name '*.c' -o -name '*.h' \) -a -perm /0111 -exec chmod a-x {} +

%build

%ifarch s390 s390x

export CFLAGS="$RPM_OPT_FLAGS -fPIC"

%else

export CFLAGS="$RPM_OPT_FLAGS -fpic"

%endif

%configure \

        --libdir=%{_libdir}/freeradius \

        --with-system-libtool \

        --disable-ltdl-install \

        --with-gnu-ld \

        --with-threads \

        --with-thread-pool \

        --with-docdir=%{docdir} \

        --with-rlm-sql_postgresql-include-dir=/usr/include/pgsql \

        --with-rlm-sql-postgresql-lib-dir=%{_libdir} \

        --with-rlm-sql_mysql-include-dir=/usr/include/mysql \

        --with-mysql-lib-dir=%{_libdir}/mysql \

        --with-unixodbc-lib-dir=%{_libdir} \

        --with-rlm-dbm-lib-dir=%{_libdir} \

        --with-rlm-krb5-include-dir=/usr/kerberos/include \

        --with-modules="rlm_wimax" \

        --without-rlm_eap_ikev2 \

        --without-rlm_sql_iodbc \

        --without-rlm_sql_firebird \

        --without-rlm_sql_db2 \

        --without-rlm_sql_oracle

%if "%{_lib}" == "lib64"

perl -pi -e 's:sys_lib_search_path_spec=.*:sys_lib_search_path_spec="/lib64 /usr/lib64 /usr/local/lib64":' libtool

%endif

make LINK_MODE=-pie

%install

mkdir -p $RPM_BUILD_ROOT/%{_localstatedir}/lib/radiusd

# fix for bad libtool bug - can not rebuild dependent libs and bins

#FIXME export LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%{_libdir}

make install R=$RPM_BUILD_ROOT

# modify default configuration

RADDB=$RPM_BUILD_ROOT%{_sysconfdir}/raddb

perl -i -pe 's/^#user =.*$/user = radiusd/'   $RADDB/radiusd.conf

perl -i -pe 's/^#group =.*$/group = radiusd/' $RADDB/radiusd.conf

# logs

mkdir -p $RPM_BUILD_ROOT/var/log/radius/radacct

touch $RPM_BUILD_ROOT/var/log/radius/{radutmp,radius.log}

install -D -m 755 %{SOURCE100} $RPM_BUILD_ROOT/%{_unitdir}/radiusd.service

install -D -m 644 %{SOURCE102} $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/radiusd

install -D -m 644 %{SOURCE103} $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/radiusd

mkdir -p %{buildroot}%{_sysconfdir}/tmpfiles.d

mkdir -p %{buildroot}%{_localstatedir}/run/

install -d -m 0710 %{buildroot}%{_localstatedir}/run/radiusd/

install -m 0644 %{SOURCE104} %{buildroot}%{_sysconfdir}/tmpfiles.d/radiusd.conf

# remove unneeded stuff

rm -rf doc/00-OLD

rm -f $RPM_BUILD_ROOT/usr/sbin/rc.radiusd

rm -rf $RPM_BUILD_ROOT/%{_libdir}/freeradius/*.a

rm -rf $RPM_BUILD_ROOT/%{_libdir}/freeradius/*.la

rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/sql/mssql

rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/sql/oracle

rm -rf $RPM_BUILD_ROOT/%{_datadir}/dialup_admin/sql/oracle

rm -rf $RPM_BUILD_ROOT/%{_datadir}/dialup_admin/lib/sql/oracle

rm -rf $RPM_BUILD_ROOT/%{_datadir}/dialup_admin/lib/sql/drivers/oracle

# remove header files, we don't ship a devel package and the

# headers have multilib conflicts

rm -rf $RPM_BUILD_ROOT/%{_includedir}

# remove unsupported config files

rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/experimental.conf

# install doc files omitted by standard install

for f in COPYRIGHT CREDITS INSTALL README; do

    cp $f $RPM_BUILD_ROOT/%{docdir}

done

cp LICENSE $RPM_BUILD_ROOT/%{docdir}/LICENSE.gpl

cp src/lib/LICENSE $RPM_BUILD_ROOT/%{docdir}/LICENSE.lgpl

cp src/LICENSE.openssl $RPM_BUILD_ROOT/%{docdir}/LICENSE.openssl

# add Red Hat specific documentation

cat >> $RPM_BUILD_ROOT/%{docdir}/REDHAT << EOF

Red Hat, RHEL, Fedora, and CentOS specific information can be found on the

FreeRADIUS Wiki in the Red Hat FAQ.

http://wiki.freeradius.org/Red_Hat_FAQ

Please reference that document.

EOF

# Make sure our user/group is present prior to any package or subpackage installation

%pre

getent group  radiusd >/dev/null || /usr/sbin/groupadd -r -g 95 radiusd > /dev/null 2>&1

getent passwd radiusd >/dev/null || /usr/sbin/useradd  -r -g radiusd -u 95 -c "radiusd user" -s /sbin/nologin radiusd > /dev/null 2>&1

exit 0

%post

if [ $1 -eq 1 ]; then           # install

  # Initial installation

  /bin/systemctl daemon-reload >/dev/null 2>&1 || :

  if [ ! -e /etc/raddb/certs/server.pem ]; then

    /sbin/runuser -g radiusd -c 'umask 007; /etc/raddb/certs/bootstrap' > /dev/null 2>&1

  fi

fi

exit 0

%preun

if [ $1 -eq 0 ] ; then

    # Package removal, not upgrade

    /bin/systemctl --no-reload disable radiusd.service > /dev/null 2>&1 || :

    /bin/systemctl stop radiusd.service > /dev/null 2>&1 || :

fi

%postun

/bin/systemctl daemon-reload >/dev/null 2>&1 || :

if [ $1 -ge 1 ] ; then

    # Package upgrade, not uninstall

    /bin/systemctl try-restart radiusd.service >/dev/null 2>&1 || :

elif [ $1 -eq 0 ]; then           # uninstall

  getent passwd radiusd >/dev/null && /usr/sbin/userdel  radiusd > /dev/null 2>&1

  getent group  radiusd >/dev/null && /usr/sbin/groupdel radiusd > /dev/null 2>&1

fi

exit 0

%triggerun -- freeradius < 2.1.11-5

# Save the current service runlevel info

# User must manually run systemd-sysv-convert --apply radiusd

# to migrate them to systemd targets

/usr/bin/systemd-sysv-convert --save radiusd >/dev/null 2>&1 ||:

# Run these because the SysV package being removed won't do them

/sbin/chkconfig --del radiusd >/dev/null 2>&1 || :

/bin/systemctl try-restart radiusd.service >/dev/null 2>&1 || :

%files

%defattr(-,root,root)

%doc %{docdir}/

%config(noreplace) %{_sysconfdir}/pam.d/radiusd

%config(noreplace) %{_sysconfdir}/logrotate.d/radiusd

%{_unitdir}/radiusd.service

%config %{_sysconfdir}/tmpfiles.d/radiusd.conf

%dir %attr(710,radiusd,radiusd) %{_localstatedir}/run/radiusd

%dir %attr(755,radiusd,radiusd) %{_localstatedir}/lib/radiusd

# configs

%dir %attr(755,root,radiusd) /etc/raddb

%defattr(-,root,radiusd)

%attr(644,root,radiusd) %config(noreplace) /etc/raddb/dictionary

%config(noreplace) /etc/raddb/acct_users

%config(noreplace) /etc/raddb/attrs

%config(noreplace) /etc/raddb/attrs.access_challenge

%config(noreplace) /etc/raddb/attrs.access_reject

%config(noreplace) /etc/raddb/attrs.accounting_response

%config(noreplace) /etc/raddb/attrs.pre-proxy

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/clients.conf

%config(noreplace) /etc/raddb/hints

%config(noreplace) /etc/raddb/huntgroups

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sqlippool.conf

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/preproxy_users

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/proxy.conf

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/radiusd.conf

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql.conf

%dir %attr(750,root,radiusd) /etc/raddb/sql

#%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql/oracle/*

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/users

%dir %attr(770,root,radiusd) /etc/raddb/certs

%config(noreplace) /etc/raddb/certs/Makefile

%config(noreplace) /etc/raddb/certs/README

%config(noreplace) /etc/raddb/certs/xpextensions

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/certs/*.cnf

%attr(750,root,radiusd) /etc/raddb/certs/bootstrap

%dir %attr(750,root,radiusd) /etc/raddb/sites-available

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-available/*

%dir %attr(750,root,radiusd) /etc/raddb/sites-enabled

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-enabled/*

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/eap.conf

%config(noreplace) %attr(640,root,radiusd) /etc/raddb/example.pl

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.conf

%config(noreplace) /etc/raddb/policy.txt

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/templates.conf

%dir %attr(750,root,radiusd) /etc/raddb/modules

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/acct_unique

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/always

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/attr_filter

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/attr_rewrite

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/chap

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/checkval

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/counter

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/cui

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/detail

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/detail.example.com

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/detail.log

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/digest

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/dynamic_clients

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/echo

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/etc_group

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/exec

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/expiration

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/expr

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/files

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/inner-eap

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/ippool

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/logintime

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/linelog

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/mac2ip

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/mac2vlan

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/mschap

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/ntlm_auth

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/opendirectory

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/otp

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/pam

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/pap

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/perl

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/passwd

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/policy

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/preprocess

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/radutmp

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/realm

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/redis

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/rediswho

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/replicate

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/smbpasswd

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/smsotp

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/soh

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/sql_log

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/sqlcounter_expire_on_login

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/sradutmp

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/unix

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/wimax

# binaries

%defattr(-,root,root)

/usr/sbin/checkrad

/usr/sbin/raddebug

/usr/sbin/radiusd

/usr/sbin/radwatch

/usr/sbin/radmin

# man-pages

%doc %{_mandir}/man5/acct_users.5.gz

%doc %{_mandir}/man5/clients.conf.5.gz

%doc %{_mandir}/man5/dictionary.5.gz

%doc %{_mandir}/man5/radiusd.conf.5.gz

%doc %{_mandir}/man5/radrelay.conf.5.gz

%doc %{_mandir}/man5/rlm_acct_unique.5.gz

%doc %{_mandir}/man5/rlm_always.5.gz

%doc %{_mandir}/man5/rlm_attr_filter.5.gz

%doc %{_mandir}/man5/rlm_attr_rewrite.5.gz

%doc %{_mandir}/man5/rlm_chap.5.gz

%doc %{_mandir}/man5/rlm_counter.5.gz

%doc %{_mandir}/man5/rlm_detail.5.gz

%doc %{_mandir}/man5/rlm_digest.5.gz

%doc %{_mandir}/man5/rlm_expr.5.gz

%doc %{_mandir}/man5/rlm_files.5.gz

%doc %{_mandir}/man5/rlm_mschap.5.gz

%doc %{_mandir}/man5/rlm_pap.5.gz

%doc %{_mandir}/man5/rlm_passwd.5.gz

%doc %{_mandir}/man5/rlm_policy.5.gz

%doc %{_mandir}/man5/rlm_realm.5.gz

%doc %{_mandir}/man5/rlm_sql.5.gz

%doc %{_mandir}/man5/rlm_sql_log.5.gz

%doc %{_mandir}/man5/rlm_unix.5.gz

%doc %{_mandir}/man5/unlang.5.gz

%doc %{_mandir}/man5/users.5.gz

%doc %{_mandir}/man8/raddebug.8.gz

%doc %{_mandir}/man8/radiusd.8.gz

%doc %{_mandir}/man8/radmin.8.gz

%doc %{_mandir}/man8/radrelay.8.gz

%doc %{_mandir}/man8/radwatch.8.gz

# dictionaries

%dir %attr(755,root,root) /usr/share/freeradius

/usr/share/freeradius/*

# logs

%dir %attr(700,radiusd,radiusd) /var/log/radius/

%dir %attr(700,radiusd,radiusd) /var/log/radius/radacct/

%ghost %attr(644,radiusd,radiusd) /var/log/radius/radutmp

%ghost %attr(600,radiusd,radiusd) /var/log/radius/radius.log

# RADIUS shared libs

%attr(755,root,root) %{_libdir}/freeradius/lib*.so*

# RADIUS Loadable Modules

%dir %attr(755,root,root) %{_libdir}/freeradius

#%attr(755,root,root) %{_libdir}/freeradius/rlm_*.so*

#%{_libdir}/freeradius/rlm_acctlog*.so

%{_libdir}/freeradius/rlm_acct_unique.so

%{_libdir}/freeradius/rlm_acct_unique-%{version}.so

%{_libdir}/freeradius/rlm_acctlog.so

%{_libdir}/freeradius/rlm_acctlog-%{version}.so

%{_libdir}/freeradius/rlm_always.so

%{_libdir}/freeradius/rlm_always-%{version}.so

%{_libdir}/freeradius/rlm_attr_filter.so

%{_libdir}/freeradius/rlm_attr_filter-%{version}.so

%{_libdir}/freeradius/rlm_attr_rewrite.so

%{_libdir}/freeradius/rlm_attr_rewrite-%{version}.so

%{_libdir}/freeradius/rlm_chap.so

%{_libdir}/freeradius/rlm_chap-%{version}.so

%{_libdir}/freeradius/rlm_checkval.so

%{_libdir}/freeradius/rlm_checkval-%{version}.so

%{_libdir}/freeradius/rlm_copy_packet.so

%{_libdir}/freeradius/rlm_copy_packet-%{version}.so

%{_libdir}/freeradius/rlm_counter.so

%{_libdir}/freeradius/rlm_counter-%{version}.so

%{_libdir}/freeradius/rlm_dbm.so

%{_libdir}/freeradius/rlm_dbm-%{version}.so

%{_libdir}/freeradius/rlm_detail.so

%{_libdir}/freeradius/rlm_detail-%{version}.so

%{_libdir}/freeradius/rlm_digest.so

%{_libdir}/freeradius/rlm_digest-%{version}.so

%{_libdir}/freeradius/rlm_dynamic_clients.so

%{_libdir}/freeradius/rlm_dynamic_clients-%{version}.so

%{_libdir}/freeradius/rlm_eap.so

%{_libdir}/freeradius/rlm_eap-%{version}.so

%{_libdir}/freeradius/rlm_eap_gtc.so

%{_libdir}/freeradius/rlm_eap_gtc-%{version}.so

%{_libdir}/freeradius/rlm_eap_leap.so

%{_libdir}/freeradius/rlm_eap_leap-%{version}.so

%{_libdir}/freeradius/rlm_eap_md5.so

%{_libdir}/freeradius/rlm_eap_md5-%{version}.so

%{_libdir}/freeradius/rlm_eap_mschapv2.so

%{_libdir}/freeradius/rlm_eap_mschapv2-%{version}.so

%{_libdir}/freeradius/rlm_eap_peap.so

%{_libdir}/freeradius/rlm_eap_peap-%{version}.so

%{_libdir}/freeradius/rlm_eap_sim.so

%{_libdir}/freeradius/rlm_eap_sim-%{version}.so

%{_libdir}/freeradius/rlm_eap_tls.so

%{_libdir}/freeradius/rlm_eap_tls-%{version}.so

%{_libdir}/freeradius/rlm_eap_ttls.so

%{_libdir}/freeradius/rlm_eap_ttls-%{version}.so

%{_libdir}/freeradius/rlm_exec.so

%{_libdir}/freeradius/rlm_exec-%{version}.so

%{_libdir}/freeradius/rlm_expiration.so

%{_libdir}/freeradius/rlm_expiration-%{version}.so

%{_libdir}/freeradius/rlm_expr.so

%{_libdir}/freeradius/rlm_expr-%{version}.so

%{_libdir}/freeradius/rlm_fastusers.so

%{_libdir}/freeradius/rlm_fastusers-%{version}.so

%{_libdir}/freeradius/rlm_files.so

%{_libdir}/freeradius/rlm_files-%{version}.so

%{_libdir}/freeradius/rlm_ippool.so

%{_libdir}/freeradius/rlm_ippool-%{version}.so

%{_libdir}/freeradius/rlm_linelog.so

%{_libdir}/freeradius/rlm_linelog-%{version}.so

%{_libdir}/freeradius/rlm_logintime.so

%{_libdir}/freeradius/rlm_logintime-%{version}.so

%{_libdir}/freeradius/rlm_mschap.so

%{_libdir}/freeradius/rlm_mschap-%{version}.so

%{_libdir}/freeradius/rlm_otp.so

%{_libdir}/freeradius/rlm_otp-%{version}.so

%{_libdir}/freeradius/rlm_pam.so

%{_libdir}/freeradius/rlm_pam-%{version}.so

%{_libdir}/freeradius/rlm_pap.so

%{_libdir}/freeradius/rlm_pap-%{version}.so

%{_libdir}/freeradius/rlm_passwd.so

%{_libdir}/freeradius/rlm_passwd-%{version}.so

%{_libdir}/freeradius/rlm_policy.so

%{_libdir}/freeradius/rlm_policy-%{version}.so

%{_libdir}/freeradius/rlm_preprocess.so

%{_libdir}/freeradius/rlm_preprocess-%{version}.so

%{_libdir}/freeradius/rlm_radutmp.so

%{_libdir}/freeradius/rlm_radutmp-%{version}.so

%{_libdir}/freeradius/rlm_realm.so

%{_libdir}/freeradius/rlm_realm-%{version}.so

%{_libdir}/freeradius/rlm_replicate.so

%{_libdir}/freeradius/rlm_replicate-%{version}.so

%{_libdir}/freeradius/rlm_soh.so

%{_libdir}/freeradius/rlm_soh-%{version}.so

%{_libdir}/freeradius/rlm_sql.so

%{_libdir}/freeradius/rlm_sql-%{version}.so

%{_libdir}/freeradius/rlm_sql_log.so

%{_libdir}/freeradius/rlm_sql_log-%{version}.so

%{_libdir}/freeradius/rlm_sqlcounter.so

%{_libdir}/freeradius/rlm_sqlcounter-%{version}.so

%{_libdir}/freeradius/rlm_sqlippool.so

%{_libdir}/freeradius/rlm_sqlippool-%{version}.so

%{_libdir}/freeradius/rlm_unix.so

%{_libdir}/freeradius/rlm_unix-%{version}.so

%{_libdir}/freeradius/rlm_wimax.so

%{_libdir}/freeradius/rlm_wimax-%{version}.so

%files utils

/usr/bin/*

# man-pages

%doc %{_mandir}/man1/radclient.1.gz

%doc %{_mandir}/man1/radeapclient.1.gz

%doc %{_mandir}/man1/radlast.1.gz

%doc %{_mandir}/man1/radtest.1.gz

%doc %{_mandir}/man1/radwho.1.gz

%doc %{_mandir}/man1/radzap.1.gz

%doc %{_mandir}/man1/smbencrypt.1.gz

%doc %{_mandir}/man5/checkrad.5.gz

%doc %{_mandir}/man8/radconf2xml.8.gz

%doc %{_mandir}/man8/radcrypt.8.gz

%doc %{_mandir}/man8/radsniff.8.gz

%doc %{_mandir}/man8/radsqlrelay.8.gz

%doc %{_mandir}/man8/rlm_dbm_cat.8.gz

%doc %{_mandir}/man8/rlm_dbm_parse.8.gz

%doc %{_mandir}/man8/rlm_ippool_tool.8.gz

%files krb5

%{_libdir}/freeradius/rlm_krb5.so

%{_libdir}/freeradius/rlm_krb5-%{version}.so

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/krb5

%files perl

%{_libdir}/freeradius/rlm_perl.so

%{_libdir}/freeradius/rlm_perl-%{version}.so

%files python

%{_libdir}/freeradius/rlm_python.so

%{_libdir}/freeradius/rlm_python-%{version}.so

%files mysql

%dir %attr(750,root,radiusd) /etc/raddb/sql/mysql

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql/mysql/*

%dir %attr(750,root,radiusd) /etc/raddb/sql/ndb

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql/ndb/*

%{_libdir}/freeradius/rlm_sql_mysql.so

%{_libdir}/freeradius/rlm_sql_mysql-%{version}.so

%files postgresql

%dir %attr(750,root,radiusd) /etc/raddb/sql/postgresql

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql/postgresql/*

%{_libdir}/freeradius/rlm_sql_postgresql.so

%{_libdir}/freeradius/rlm_sql_postgresql-%{version}.so

%files ldap

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/ldap.attrmap

%{_libdir}/freeradius/rlm_ldap.so

%{_libdir}/freeradius/rlm_ldap-%{version}.so

%attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/ldap

%files unixODBC

%{_libdir}/freeradius/rlm_sql_unixodbc.so

%{_libdir}/freeradius/rlm_sql_unixodbc-%{version}.so

%changelog

* Sun Jan 15 2012 John Dennis <jdennis@redhat.com> - 2.1.12-3

- resolves: bug#781744

  systemd service file incorrectly listed pid file as

  /var/run/radiusd/radiusd which it should have been

  /var/run/radiusd/radiusd.pid

* Mon Oct 31 2011 John Dennis <jdennis@redhat.com> - 2.1.12-2

- rename /etc/tmpfiles.d/freeradius.conf to /etc/tmpfiles.d/radiusd.conf

  remove config(noreplace) because it must match files section and

  permissions differ between versions.

* Mon Oct  3 2011 John Dennis <jdennis@redhat.com> - 2.1.12-1

- Upgrade to latest upstream release: 2.1.12

- Upstream changelog for 2.1.12:

  Feature improvements

  * Updates to dictionary.erx, dictionary.siemens, dictionary.starent,

    dictionary.starent.vsa1, dictionary.zyxel, added dictionary.symbol

  * Added support for PCRE from Phil Mayers

  * Configurable file permission in rlm_linelog

  * Added "relaxed" option to rlm_attr_filter.  This copies attributes

    if at least one match occurred.

  * Added documentation on dynamic clients.

    See raddb/modules/dynamic_clients.

  * Added support for elliptical curve cryptography.

    See ecdh_curve in raddb/eap.conf.

  * Added support for 802.1X MIBs in checkrad

  * Added support for %{rand:...}, which generates a uniformly

    distributed number between 0 and the number you specify.

  * Created "man" pages for all installed commands, and documented

    options for all commands.  Patch from John Dennis.

  * Allow radsniff to decode encrypted VSAs and CoA packets.

    Patch from Bjorn Mork.

  * Always send Message-Authenticator in radtest. Patch from John Dennis.

    radclient continues to be more flexible.

  * Updated Oracle schema and queries

  * Added SecurID module.  See src/modules/rlm_securid/README

  Bug fixes

  * Fix memory leak in rlm_detail

  * Fix "failed to insert event"

  * Allow virtual servers to be reloaded on HUP.

    It no longer complains about duplicate virtual servers.

  * Fix %{string:...} expansion

  * Fix "server closed socket" loop in radmin

  * Set ownership of control socket when starting up

  * Always allow root to connect to control socket, even if

    "uid" is set.  They're root.  They can already do anything.

  * Save all attributes in Access-Accept when proxying inner-tunnel

    EAP-MSCHAPv2

  * Fixes for DHCP relaying.

  * Check certificate validity when using OCSP.

  * Updated Oracle "configure" script

  * Fixed typos in dictionary.alvarion

  * WARNING on potential proxy loop.

  * Be more aggressive about clearing old requests from the

    internal queue

  * Don't open network sockets when using -C

* Wed Sep 21 2011 Tom Callaway <spot@fedoraproject.org> - 2.1.11-7

- restore defattr customization in the main package

* Fri Sep  9 2011 Tom Callaway <spot@fedoraproject.org> - 2.1.11-6

- add missing systemd scriptlets

* Thu Sep  8 2011 Tom Callaway <spot@fedoraproject.org> - 2.1.11-5

- convert to systemd

* Thu Jul 21 2011 Petr Sabata <contyk@redhat.com> - 2.1.11-4

- Perl mass rebuild

* Wed Jul 20 2011 Petr Sabata <contyk@redhat.com> - 2.1.11-3

- Perl mass rebuild

* Thu Jun 23 2011 John Dennis <jdennis@redhat.com> - 2.1.11-2

- reload the server (i.e. HUP) after logrotate

* Wed Jun 22 2011 John Dennis <jdennis@redhat.com> - 2.1.11-1

- Upgrade to latest upstream release: 2.1.11

- Remove the following two patches as upstream has incorporated them:

    freeradius-radtest-ipv6.patch

    freeradius-lt-dladvise.patch

- Upstream changelog for 2.1.11:

  Feature improvements

  * Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.

    All vendors need to read it and follow its directions.

  * Microsoft SoH support for PEAP from Phil Mayers.

    See doc/SoH.txt

  * Certificate "bootstrap" script now checks for certificate expiry.

    See comments in raddb/eap.conf, and then "make_cert_command".

  * Support for dynamic expansion of EAP-GTC challenges.

    Patch from Alexander Clouter.

  * OCSP support from Alex Bergmann.  See raddb/eap.conf, "ocsp"

    section.

  * Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.

  * Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.

  * Experimental redis support from Gabriel Blanchard.

    See raddb/modules/redis and raddb/modules/rediswho

  * Add "key" to rlm_fastusers.  Closes bug #126.

  * Added scripts/radtee from original software at

    http://horde.net/~jwm/software/misc/comparison-tee

  * Updated radmin "man" page for new commands.

  * radsniff now prints the hex decoding of the packet (-x -x -x)

  * mschap module now reloads its configuration on HUP

  * Added experimental "replicate" module.  See raddb/modules/replicate

  * Policy "foo" can now refer to module "foo".  This lets you

    over-ride the behavior of a module.

  * Policy "foo.authorize" can now over-ride the behavior of module

    "foo", "authorize" method.

  * Produce errors in more situations when the configuration files

    have invalid syntax.

  Bug fixes

  * Ignore pre/post-proxy sections if proxying is disabled

  * Add configure checks for pcap_fopen*.

  * Fix call to otp_write in rlm_otp

  * Fix issue with Access-Challenge checking from 2.1.10, when the

    debug flag was set after server startup.  Closes #116 and #117.

  * Fix typo in zombie period start time.

  * Fix leak in src/main/valuepair.c.  Patch from James Ballantine.

  * Allow radtest to use spaces in shared secret.

    Patch from Cedric Carree.

  * Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.

    Patch from James Ballantine.

  * Remove MN-FA key generation.  The NAS does this, not AAA.

    Patch from Ben Weichman.

  * Include dictionary.mikrotik by default.  Closes bug #121.

  * Add group membership query to MS-SQL examples.  Closes bug #120.

  * Don't cast NAS-Port to integer in Postgresql queries.

    Closes bug #112.

  * Fixes for libtool and autoconf from Sam Hartman.

  * radsniff should read the dictionaries in more situations.

  * Use fnmatch to check for detail file reader==writer.

    Closes bug #128.

  * Check for short writes (i.e. disk full) in rlm_detail.

    Closes bug #130.  Patches and testing from John Morrissey.

  * Fix typo in src/lib/token.c.  Closes bug #124

  * Allow workstation trust accounts to use MS-CHAP.

    Closes bug #123.

  * Assigning foo=`/bin/echo hello` now produces a syntax error

    if it is done outside of an "update" section.