FreeRADIUS is the most widely deployed RADIUS server in the world. It is the
basis for multiple commercial offerings. It supplies the AAA needs of many
Fortune-500 companies and Tier 1 ISPs. It is also widely used in the academic
community, including eduroam. The server is fast, feature-rich, modular, and
scalable.
===> The following configuration options are available for freeradius3-3.2.10:
DEVELOPER=off: Enable developer options
DOCS=on: Build and/or install documentation
EDIR=off: Enable eDirectory support (implies LDAP)
EXAMPLES=on: Build and/or install examples
EXPERIMENTAL=off: Build experimental modules
FIREBIRD=off: With Firebird database support (EXPERIMENTAL)
FREETDS=off: FreeTDS library support
IDN=off: International Domain Names support
JSON=off: With JSON support
LDAP=off: LDAP protocol support
MYSQL=off: MySQL database support
PCRE=off: Use Perl Compatible Regular Expressions
PERL=on: Perl scripting language support
PGSQL=off: PostgreSQL database support
PYTHON=off: Python bindings or support
REDIS=off: Redis key-value store database support
REST=off: Enable RESTful API support
RUBY=off: Ruby bindings or support
SQLITE3=off: SQLite 3 database support
UDPFROMTO=on: Compile in UDPFROMTO support
UNBOUND=off: With unbound DNS support
UNIXODBC=off: With unixODBC database support
USER=on: Run as user freeradius, group freeradius
WINBIND=off: Enable native winbind support in rlm_mschap
====> Kerberos support: you have to select exactly one of them
NOKRB=off: Without Kerberos support
HEIMDAL=on: With Heimdal Kerberos support
HEIMDAL_PORT=off: With Heimdal Kerberos from ports
MITKRB_PORT=off: With MIT Kerberos from ports
===> Use 'make config' to modify these settings
*/*: Update ports so they use SAMBA_*_PORT variables in LIB_DEPENDS
* Update ports that work with Samba and depend on either of talloc,
tdb and tevent so they use SAMBA_*_PORT variables in LIB_DEPENDS.
* Bump PORTREVISION.
* While here, update WINBIND_CONFIGURE_ON in net/freeradius3/Makefile
so it uses SAMBA_INCLUDEDIR and SAMBA_LIBDIR.
Reviewed by: 0mp, kiwi
Differential Revision: https://reviews.freebsd.org/D48859
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
net/freeradius3: unbreak build after 18c6e1827669 (+)
Changes in framework need adjustment for declared options.
*_USE=ruby now became as *_USES=ruby
Also removed obsoleted 'Created by Ryan Steinmetz <zi@FreeBSD.org>'.
Approved by: portmgr blanket
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Straup Cope <ascope@cpan.org>
* Aaron Zauner <az_mail@gmx.at>
* Adam Jette <jettea46@yahoo.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Alex Bakhtin <Alex.Bakhtin@gmail.com>
* Alex Deiter <Alex.Deiter@Gmail.COM>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
(Only the first 15 lines of the commit message are shown above )
Fix CONFLICTS entries of multiple ports
There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.
This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.
Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port
(Only the first 15 lines of the commit message are shown above )
net/freeradius3: Update MASTER_SITES
As ftp is indirectly becoming deprecated and less "common" switch to
http(s) and fallback to ftp. Use GitHub as primary site to offload
upstream main site, fallback if that fails to main site and try
https protocol before falling back to ftp. While at it remove
unofficial mirrors.
PR: 260302
Reported by: Shawn Webb
Approved by: arrowd (mentor), zi (maintainer timeout, 3 weeks)
Differential Revision: https://reviews.freebsd.org/D33691
Update `databases/gdbm' to version 1.18.1, an important bugfix release
which restores compatibility with old databases (version 1.8) and some
later versions which were built without mmap(2) support. Due to shlib
version change, bump port revisions of the consumer ports.
PR: 233059
Exp-run by: antoine
Approved by: maintainer (johans, numerous timeouts)
Switch default version of samba to 4.7
Samba 4.6 will be discontinued in a few weeks
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D16904
Mark ports broken on mips64 that are already broken on powerpc64. In
most cases, the failure mode is the same. Also, mark them broken on
mips when necessary.
While here, pet portlint.
Approved by: portmgr (tier-2 blanket)
Convert Python ports to FLAVORS.
Ports using USE_PYTHON=distutils are now flavored. They will
automatically get flavors (py27, py34, py35, py36) depending on what
versions they support.
There is also a USE_PYTHON=flavors for ports that do not use distutils
but need FLAVORS to be set. A USE_PYTHON=noflavors can be set if
using distutils but flavors are not wanted.
A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been
added to cope with Python ports that did not have the Python
PKGNAMEPREFIX but are flavored.
USES=python now also exports a PY_FLAVOR variable that contains the
(Only the first 15 lines of the commit message are shown above )
net/freeradius3: Disable OpenSSL version checking
FreeRadius developers include a feature enabled by default which checks
your OpenSSL version and refuses to run if certain CVEs are detected.
This is an interesting idea but it means it's possible to upgrade
FreeRadius on a production server and suddently it won't run, especially
if FreeBSD's base OpenSSL doesn't report a version number that can
convince the software it is free from the specified CVEs.
Currently FreeRadius refuses to run on FreeBSD 10.3-RELEASE because it
thinks base system OpenSSL is not patched for CVE-2016-6304, but that
was in fact patched by FreeBSD-10.3-RELEASE-p9.
This feature is only useful if you are using vanilla upstream versions
of OpenSSL which we are not.
Approved by: portmgr (with hat)
MFH: 2017Q3
- Remove inclusion of bsd.default-versions.mk from ftp/curl/Makefile so
bsd.default-versions.mk can rely on ARCH being defined.
- In bsd.port.mk move inclusion of bsd.default-versions.mk from the
pre-makefile section to the options section so the variables can be used
earlier. Also put the bit of code sitting between the options section and
the pre-makefile section into the options section.
- Remove last few cases where ports set WITH_OPENSSL_PORT. This variable is
handled in bsd.default-versions.mk and some ports were setting it after
including bsd.port.options.mk. After FreeBSD 9 EoL all but a few ports,
and then only when setting non-default options, work without setting that
variable.
PR: 215996
Exp-run by: antoine
Approved by: portmgr (antoine)
Remove UNIQUENAME and LATEST_LINK.
UNIQUENAME was never unique, it was only used by USE_LDCONFIG and now,
we won't have conflicts there.
Use PKGBASE instead of LATEST_LINK in PKGLATESTFILE, the *only* consumer
is pkg-devel, and it works just fine without LATEST_LINK as pkg-devel
has the correct PKGNAME anyway.
Now that UNIQUENAME is gone, OPTIONSFILE is too. (it's been called
OPTIONS_FILE now.)
Reviewed by: antoine, bapt
Exp-run by: antoine
Sponsored by: Absolight
Differential Revision: https://reviews.freebsd.org/D3336
- Use libkrb5support.so to track security/krb5 dependency, libkrb5.so is present
on base and can confuses ports system not installing security/krb5. No bump on
PORTREVISION since it's disabled by default
Remove OSVERSION checks that do not make sense any more.
For example (${OSVERSION} >= 900000 && ${OSVERSION} < 900021) is always true,
as is (${OSVERSION} > 900002 || ${OSVERSION} < 900000 && ${OSVERSION} > 800107).
Regarding patches, when an EXTRA_PATCHES is no longer needed, I remove it, when
it is always needed, I renamed it, in one case, I merged two patches.
Differential Revision: https://reviews.freebsd.org/D2209
dns/libidn:
- Add USES=libtool and bump dependent ports
- Add INSTALL_TARGET=install-strip
- Always install libidn-components.png because it is used by libidn.info
- Add -lintl to Libs.private instead of Libs in libidn.pc
- Do not fail to start if there is a mismatch between libssl compile/runtime
versions. We will still print the error, but it will not be fatal. This is to
workaround an issue with pkg where pkg will only reinstall dependant ports if
the .so version changes.
- Bump PORTREVISION
PR: 192661
Submitted by: mat@
net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD
databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip
databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample
(Only the first 15 lines of the commit message are shown above )
Support LIBS like LDFLAGS.
- Add LIBS="${LIBS}" to MAKE_ENV and CONFIGURE_ENV.
- Add an option helper for LIBS.
- Adjust all ports that already use LIBS. Also remove references to
PTHREAD_CFLAGS and PTHREAD_LIBS while here.
- Some ports did not support having a LIBS environment variable and
required additional patches.
Somewhat simplified a linker command line looks like:
${CC} ${src_LDFLAGS} ${LDFLAGS} ${src_LIBS} ${LIBS}
where src_LDFLAGS and src_LIBS are controlled by upstream and LDFLAGS and
LIBS can be controlled by us. If possible -L and -l flags need to be
(Only the first 15 lines of the commit message are shown above )
