commit freeradius-server for openSUSE:Factory
![](https://seccdn.libravatar.org/avatar/e2145bc5cf53dda95c308a3c75e8fef3.jpg?s=120&d=mm&r=g)
Hello community, here is the log from the commit of package freeradius-server for openSUSE:Factory checked in at 2014-12-23 11:50:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/freeradius-server (Old) and /work/SRC/openSUSE:Factory/.freeradius-server.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "freeradius-server" Changes: -------- --- /work/SRC/openSUSE:Factory/freeradius-server/freeradius-server.changes 2014-08-04 15:14:43.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.freeradius-server.new/freeradius-server.changes 2014-12-23 11:49:10.000000000 +0100 @@ -1,0 +2,63 @@ +Mon Dec 22 09:09:16 UTC 2014 - dimstar@opensuse.org + +- Drop .keyring and .sig file: freeradius-server still uses MD5 + signatures, which are no longer validated/accepted by GPG 2.1. + +------------------------------------------------------------------- +Wed Dec 3 14:22:03 UTC 2014 - vcizek@suse.com + +- update to 3.0.5 + Some of the new features: + * Allow LDAP to specify arbitrary attributes for dynamic + clients. + * Allow one level of backslashes (finally). See radiusd.conf, + "correct_escapes" setting. + * When supported by OpenSSL, allow TLS 1.1 and TLS 1.2 + in EAP methods. + * Allow multiple new connections to be spawned simultaneously + in the connection pool, to cope with spikes in traffic. + * Use kqueue on systems which support it. This allows for + better scaling when using many sockets. + * Home server "response_window" can now take fractions of a + second. See proxy.conf. + * radmin now supports "show module status", as thee counterpart + to "set module status" + * "ipaddr" will now use v6 if no v4 address is present. You should + use "ipv4addr" or "ipv6addr" to force v4/v6 addresses. + * "client" sections will allow "ipaddr = 192.192.0/24". The old + "netmask" is still accepted, but the new format is preferred. + * Allow custom HTTP headers to be set for rlm_rest requests using + control:REST-HTTP-Header (attributes consumed after use). + * Extend format of %{rest:} expansion to allow HTTP method and POST + data to be specified + and urlquoting. + * Add support for aliases in rlm_ldap. + * Add support for connection pool sharing to all modules that use + the connection pool (pool = <instance>). + * "tls" sections now have a "psk_query" configuration item, for dynamic + queries to discover a key from a PSK identity. + * Preliminary support for EAP channel bindings. + * Foundational work for dynamic home servers. They do not yet work, + but this is now only a matter of updating the "realm" module in + a future release. + * Support &attr[*] syntax to copy all instances of an attribute when + used with the += operator in an update section. May be qualified with + a tag. + * The logintime and expiration modules can now be listed in the + post-auth section. This makes some configurations simpler. + * rlm_sqlippool is now IPV6 capable. Set "ipv6 = yes" to get + Framed-IPv6-Prefix returned. The SQL queries have NOT been updated. + Please submit patches. + and numerous; bugfixes +- remove gpg-offline +- create /run/radiusd after install +- drop freeradius-server-opensslversion.patch (upstream) + +------------------------------------------------------------------- +Mon Dec 1 10:52:28 UTC 2014 - meissner@suse.com + +- freeradius-server-opensslversion.patch: do not check the minor + version of openssl, minor versions are supposed to be compatible. + bnc#906682 + +------------------------------------------------------------------- Old: ---- freeradius-server-3.0.3.tar.bz2 freeradius-server-3.0.3.tar.bz2.sig freeradius-server.keyring New: ---- freeradius-server-3.0.5.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ freeradius-server.spec ++++++ --- /var/tmp/diff_new_pack.DkuloF/_old 2014-12-23 11:49:11.000000000 +0100 +++ /var/tmp/diff_new_pack.DkuloF/_new 2014-12-23 11:49:11.000000000 +0100 @@ -24,7 +24,7 @@ %global with_sysvinit 1 %endif Name: freeradius-server -Version: 3.0.3 +Version: 3.0.5 Release: 0 Summary: Very Highly Configurable Radius Server License: GPL-2.0 and LGPL-2.1 @@ -33,8 +33,6 @@ Source: ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2 Source1: radiusd.service Source2: freeradius-tmpfiles.conf -Source10: ftp://ftp.freeradius.org/pub/freeradius/%{name}-%{version}.tar.bz2.sig -Source11: %{name}.keyring Patch2: freeradius-server-2.1.6-rcradiusd.patch Patch7: freeradius-server-fix-cert-bootstrap.patch Patch8: freeradius-server-initscript-pidfile.patch @@ -50,7 +48,6 @@ BuildRequires: gdbm-devel BuildRequires: gettext-devel BuildRequires: glibc-devel -BuildRequires: gpg-offline BuildRequires: krb5-devel BuildRequires: libcom_err-devel BuildRequires: libcurl-devel @@ -193,7 +190,6 @@ This plugin provides the SQLite support for the FreeRADIUS server project. %prep -%gpg_verify %{SOURCE10} %setup -q %patch2 %patch7 -p1 @@ -317,6 +313,7 @@ %if 0%{?suse_version} > 1140 %service_add_post %{unitname}.service +systemd-tmpfiles --create %{_tmpfilesdir}/%{unitname}.conf %endif %preun @@ -388,6 +385,10 @@ %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/files/* %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/preprocess %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/preprocess/* +%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/python +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/python/radiusd.py +%dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-config/sql/ippool-dhcp/mysql/schema.sql %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql %dir %attr(750,root,radiusd) %{_sysconfdir}/raddb/mods-config/sql/counter @@ -424,6 +425,9 @@ %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/copy-acct-to-home-server %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/buffered-sql %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/tls +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/abfab-tls +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/abfab-tr-idp +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/sites-available/channel_bindings # sites-enabled # symlink: %{_sysconfdir}/raddb/sites-enabled/xxx -> ../sites-available/xxx @@ -492,6 +496,8 @@ %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/yubikey %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/unbound %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/unpack +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/abfab_psk_sql +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/mods-available/couchbase # mods-enabled # symlink: %{_sysconfdir}/raddb/mods-enabled/xxx -> ../mods-available/xxx @@ -537,6 +543,8 @@ %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/eap %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/filter %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/operator-name +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/abfab-tr +%attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/policy.d/debug %config(noreplace) %{_sysconfdir}/raddb/users %attr(640,root,radiusd) %config(noreplace) %{_sysconfdir}/raddb/templates.conf ++++++ freeradius-server-3.0.3.tar.bz2 -> freeradius-server-3.0.5.tar.bz2 ++++++ ++++ 137575 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org
participants (1)
-
root@hilbert.suse.de