FreeRADIUS is the premiere open source RADIUS server. Based on current
statistics, there are over 50,000 deployments of the software. These
deployments include small sites with 10 users, large-scale enterprises with
tens of thousands of users, and carrier-class deployments with over 10 million
users. In total, the sites that we know are using FreeRADIUS support nearly
100 million users. The only other servers that come close in terms of market
share and/or number of sites are ACS and IAS.
The server scales easily from embedded systems with small amounts of memory to
systems with millions of users. It is fast, flexible, configurable, and
supports more authentication protocols than most commercial servers. It
includes support for SQL, LDAP, RADIUS Proxying, failover, load balancing, and
nearly 100 vendor dictionary files. It can perform authentications via the
PAP, CHAP, MS-CHAP, EAP-MD5, EAP-GTC, EAP-TLS, EAP-TTLS, PEAPv0, LEAP,
EAP-SIM, and Digest authentication protocols. It has reached a stable 1.1
version, with incremental improvements added in each release.
The server is released under the GNU General Public License (GPL), which means
that it is free to download and install.
WWW: http://www.freeradius.org/
===> The following configuration options are available for freeradius-1.1.8_5:
KERBEROS=off: With Kerberos support
HEIMDAL=off: With Heimdal Kerberos support
LDAP=off: With LDAP database support
MYSQL=off: With MySQL database support
PGSQL=off: With PostgreSQL database support
UNIXODBC=off: With unixODBC database support
FIREBIRD=off: With Firebird database support (EXPERIMENTAL)
SNMP=off: With SNMP support
EDIR=off: With Novell eDirectory support
NOPERL=off: Do not require perl (use only if necessary)
EXPERIMENTAL=off: Build experimental modules
===> Use 'make config' to modify these settings
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
- Run under an unprivileged user (freeradius)
- Utilise bsd.port.options.mk
- Remove Makefile hack for python
- Change the ownership of files & directories to new user
PR: ports/157400
Submitted by: Sevan Janiyan <venture37@geeklan.co.uk>
Approved by: Ryan Steinmetz <rpsfa@rit.edu> (maintainer)
Change snmp dependency to net-snmp version 5.x because net-snmp4 will be
removed soon
PR: ports/150559 (based on)
Submitted by: garga@
Approved by: maintainer
- If radiusd_flags did not contain -d all arguments would be incorrectly added
to required_dirs and cause the script to block.
- If radiusd_flags contains -s the daemon never forks so deal with this by
adding & to command_args.
PR: ports/144969, ports/144970
Submitted by: Ryan Steinmetz <rpsfa@rit.edu> (maintainer)
-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.
It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.
With help: marcus and kwm
Pointyhat-exp: a few times by pav
Tested by: pgollucci, "Romain Tartière" <romain@blogreen.org>, and
a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by: marcus
Approved by: portmgr
- Remove more 4.x cruft (obsolete comment in Makefile, obsolete patch,
simplification in WITH_NOPERL handling in Makefile).
- Use MASTER_SITE_SUBDIR rather than an explicit /old reference in
MASTER_SITES.
- Tidy pkg-plist, including the use of @stopdaemon and some mild reordering
so that it is more logical.
- Avoid spurious -L/usr/lib in the radiusd build step when using base OpenSSL.
- Use ${PTHREAD_LIBS} rather than -pthread.
- Remove the -p flag to cp when copying files into /usr/local/etc/raddb (this
may help stop FreeRADIUS stomping over explicitly set ownership and
permissions in this directory). [1]
- Generalise CONFLICTS.
- Support WITH_DEVELOPER (though it has to be used as a knob - I see no reason
to add this to the OPTIONS).
- Bump PORTREVISION.
[1] May address a concern of sem@ (maintainer had discussion by private mail)
PR: ports/117160
Submitted by: David Wood <david AT wood2.org.uk> (maintainer)
- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
supports them. This is determined by running ``configure --help'' in
do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
subdirectory detection.
PR: ports/111470
Approved by: portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by: pointyhat exp run
- Update to 1.1.6
- Set correct permissions to ${PREFIX}/etc/raddb on install
- Modify CONFLICTS to take account of the likelihood that FreeRADIUS 2
will be released reasonably soon
- Move to handling NOPORTDOCS using the new --without-docdir option to
configure
- Fix handling of (NO)PORTDOCS in pkg-plist
- Remove unnecessary patches and simplify makefile
PR: ports/111521
Submitted by: David Wood<david@wood2.org.uk> (maintainer)
- Create default config files from *.sample and remove them if they did not
changed. (Requested by Alan DeKok of the FreeRADIUS Project.)
- Add US mirror to MASTER_SITES.
- Fix CFLAGS.
- Tidy CONFIGURE_ARGS.
- Remove EXAMPLESDIR references. It's using nowhere.
- Pet portlint(1).
PR: ports/108196
Submitted by: David Wood (maintainer)
Remove whitespace from line endings in pkg-plist files.
Those spaces used to hinder searching for the corresponding files
with portsearch -f '/FILENAME$' for obvious reasons.
Although currently portsearch removes those spaces itself remove
them anyway.
Inspired by: ports/94078
Approved by: portmgr (during freeze: krion, then kris advised to wait; at
present: erwin)
- Update to 1.1.1
This release contains a number of improvements over previous
releases. We recommend that everyone using earlier versions of the
server upgrade to obtain the bug fixes and feates that this
version supplies. It's new features include:
o Updated dictionaries (as always),
o Digest authentication updates,
o Net-SNMP compatibility fixes,
o Bug fixes for multiple platforms (64-bit architectures, *BSD),
o Security fixes for EAP-MSCHAPv2,
o Miscellaneous other fixes
PR: ports/95033
Submitted by: Ivan Lago <ivan.lago@ifom-ieo-campus.it>
Fix a small typo in MASTER_SITES
Fix some problems in the new rc.d script:
PROVIDE requires a trailing colon
There is no radiusd_start_precmd defined, so don't call it
Style issue, the - expansion is better than :- (see Porter's Handbook)
The FreeBSD KEYWORD is no longer needed
Bump PORTREVISION so that packages and users get the new rc.d script
- Add patch to fix build on 4.x [1]
- Implement a modern feature of USE_RC_SUBR and remove redundant commands.
PR: ports/92815 [1]
Submitted by: Dan Lukes <dan@obluda.cz>
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
- Fix build when freeradius is already installed and WITH_PGSQL is selected
PR: ports/80883
Submitted by: Andrey V. Semyonov <wilfre@tcom.ru>
Approved by: maintainer
1. Install sample SQL database schemas
2. Install config files as .sample to not clobber on upgrade
3. Add kerberos support
PR: ports/79945
Submitted by: maintainer
Contributed by: Andrey V. Elsukov [1]
Denis Shaposhnikov [2]
George C. Kaplan [3]
Split the postgresql ports into a server and a client part.
All ports depending on postgresql shall use the USE_PGSQL=yes knob
defined in Mk/bsd.ports.mk. Bumping portrevisions where needed.
PR: 75344
Approved by: portmgr@ (kris), ade & sean (mentors)
[patch] update net/freeradius to 1.0.0
Update net/freeradius to 1.0.0 from 0.9.3 and take maintainership.
PR: ports/70603
Submitted by: Andrew Thompson <andy@fud.org.nz>
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
Fix things so this port does not install its own local copy of libltdl,
depending instead on devel/libltdl
Submitted by: Oliver Eikemeier <eikemeier@fillmore-labs.com>
