1 freeradius (1.1.0~pre0~cvs20051215-0) unstable; urgency=low
3 * New upstream release, from branch_1_1 in the CVS.
4 * See doc/ChangeLog for feature improvements.
6 -- Nicolas Baradakis <nbk@sitadelle.com> Thu, 15 Dec 2005 20:23:03 +0100
8 freeradius (1.0.5-0) unstable; urgency=low
10 * New Upstream release, from release_1_0 branch
11 - Remove 04_bonus_control_code_in_clients_conf_5
12 - Remove 05_unbreak_quoted_sql_results
13 * Fix my _name_ in the dpatches
14 * Remove patch to CVS ID header from 05_unbreak_quoted_sql_values
15 so as not to break things when comitting to FreeRADIUS CVS
16 * Take linking fix from FreeRADIUS bugzilla #75 to allow
17 rlm_eap_tls to be linked to by rlm_eap_ttls and rlm_eap_peap
18 even though we don't build them in the Debian archive.
19 (Thanks to Luca Landi for the patch)
20 - Created 06_libtool14_vs_rlm_eap_tls
21 * Fix ownership of files in /var/log/freeradius/ more efficiently
22 (Caught by Guido Trotter)
25 -- Paul Hampson <Paul.Hampson@anu.edu.au> Wed, 7 Sep 2005 01:08:07 +1000
27 freeradius (1.0.4-2) unstable; urgency=low
29 * Fix my email address in the dpatches
30 * Remove extraneous ^g from man/man5/clients.conf.5
31 - Created 04_bonus_control_code_in_clients_conf_5
32 * Correct handing of parameterless call of init script, and
33 general init script neatening
34 (Thanks to Derrick Karpo)
36 * Correctly leave out the .in files in the examples
37 * Correctly use debhelper after splitting binary make target
38 into binary-arch and binary-indep.
39 (Thanks to Kurt Roeckx for actually hitting the bug)
41 * Steal fix from CVS release_1_0 tree for rlm_sql quoted values.
42 (Thanks to Nicolas Baradakis for the fix)
43 - Upstream bugzilla #242, src/modules/rlm_sql/sql.c 1.79.2.2
44 - Created 05_unbreak_quoted_sql_values
46 -- Paul Hampson <Paul.Hampson@anu.edu.au> Mon, 27 Jun 2005 03:13:48 +1000
48 freeradius (1.0.4-1) unstable; urgency=low
49 * ReDeianise upstream tarball:
50 - Deleted RFCs: 2243 2289 2433 2548 2618 2619 2620 2621 2716 2759 2809 2865
51 2866 2867 2868 2869 2882 2924 3162 3575 3576 3579 3580
52 draft-kamath-pppext-eap-mschapv2-00
53 * Convert to dpatch, dpatch-2-style interface.
54 - New build-dependancy on dpatch (>= 2)
55 - Created 01_NET-SNMP_build_support
56 - Created 02_EAP-SIM_doesnt_need_openssl
57 - Created 03_X99_is_not_stable
58 * Assemble the freeradius-dialupadmin in the binary-indep make target
59 Closes: #313173 (Thanks to Santiago Vila for spotting this)
60 * Include the example scripts in /usr/share/doc/freeradius/examples/scripts
61 except those three which are installed into the binary by the Makefile.
62 Closes: #314253 (Thanks to Michael Langer for spotting this)
63 * Suggest libdate-manip-perl for freeradius-dialupadmin
64 Closes: #306007 (Thanks to Feng Sian)
66 -- Paul Hampson <Paul.Hampson@anu.edu.au> Wed, 22 Jun 2005 16:03:27 +1000
68 freeradius (1.0.4-0) unstable; urgency=medium
70 * New upstream release, fixing build problems.
71 * Prefer libpq-dev over postgresql-dev as a build-dependancy.
72 - This requires us to use pgconfig to find the headers.
74 -- Paul Hampson <Paul.Hampson@anu.edu.au> Thu, 16 Jun 2005 13:56:33 +1000
76 freeradius (1.0.3-0) unstable; urgency=high
78 * New upstream release
79 * Urgency high for some denial-of-service fixes:
80 - SQL injection attacks and DoS (core dump) via buffer overflow.
83 -- Alan DeKok <aland@ox.org> Fri, 3 Jun 2005 11:29:34 -0700
85 freeradius (1.0.2-4) unstable; urgency=high
87 * Security fix stolen from CVS release_1_0 branch:
88 - Always use sql_escape_func when calling radius_xlat
89 - Add a test in sql_escape_func() to check buffer bound when
90 input character needs escaping.
91 - Urgency high as these are (theoretical) security issues.
92 Closes: #307720 (Thanks to Primoz Bratanic and Nicolas Baradakis)
94 -- Paul Hampson <Paul.Hampson@anu.edu.au> Mon, 23 May 2005 18:53:51 +1000
96 freeradius (1.0.2-3) unstable; urgency=medium
98 * Fixes stolen from CVS release_1_0 branch:
99 - Fix missed SIGCHLD when waiting for external programs
100 when threaded. (Medium urgency as this can easily livelock
101 FreeRADIUS, which is an authentication server.)
103 -- Paul Hampson <Paul.Hampson@anu.edu.au> Mon, 18 Apr 2005 23:46:41 +1000
105 freeradius (1.0.2-2) unstable; urgency=medium
107 * Get rid of extraneous '%' at the start of every reference to
108 /etc/freeradius-dialupadmin in freeradius-dialupadmin's configuration.
110 * Fixes stolen from CVS release_1_0 branch:
111 - Fix checkrad call for NAS ports > 9999999. (sprintf integer overrun,
112 reason for urgency medium.)
113 - Fix inverted test causing crash with pthreads and crypt
114 Closes: #300219 (Thanks Manuel Menal)
116 -- Paul Hampson <Paul.Hampson@anu.edu.au> Wed, 6 Apr 2005 12:33:05 +1000
118 freeradius (1.0.2-1) unstable; urgency=low
120 * ReDebianise upstream tarball:
121 - Deleted RFCs: 2243 2289 2433 2548 2618 2619 2620 2621 2716 2759 2809 2865
122 2866 2867 2868 2869 2882 2924 3162 3575 3576 3579 3580
123 * Allow rlm_eap_sim to build without OpenSSL
124 * Make init script return 1 if reloading kills the server
125 (Thanks to Nicolas Baradakis)
127 * Enable Novell eDirectory integration
128 * Enable udpfromto code so that replies come from the same address as
129 the request arrived at
130 * Build-depend on libmysqlclient12-dev as libmysqlclient10 has problems
131 accessing 4.0 series mySQL servers, and libmysqlclient12 can access
132 4.1 series mySQL servers.
134 -- Paul Hampson <Paul.Hampson@anu.edu.au> Fri, 4 Mar 2005 09:30:40 +1100
136 freeradius (1.0.2-0) unstable; urgency=low
138 * New upstream release
139 * Update for Debian Policy 3.6.1.1
140 - Change test if invoke-rc.d as per Policy 9.3.3.2
141 * freeradius-dialupadmin Suggests php4-mysql | php4-pgsql
143 * Added a two-second pause to restart in init.d script
145 * FreeRADIUS module packages now depend on the same source
146 version of the main FreeRADIUS package.
148 * FreeRADIUS-dialupadmin's default paths in admin.conf are
151 * FreeRADIUS-dialupadmin's help.php3 can now find README.
154 -- Paul Hampson <Paul.Hampson@anu.edu.au> Wed, 29 Dec 2004 20:12:52 +1100
156 freeradius (1.0.1-2) unstable; urgency=high
158 * freeradius-dialupadmin Suggests php4-mysql | php4-pgsql
160 * Added a two-second pause to restart in init.d script
162 * FreeRADIUS module packages now depend on the same source
163 version of the main FreeRADIUS package.
165 * FreeRADIUS-dialupadmin's default paths in admin.conf are
168 * FreeRADIUS-dialupadmin's help.php3 can now find README.
170 * Fixes stolen from 1.0.2 CVS:
171 - Bug fix to make udpfromto code work
172 - radrelay shouldn't dump core if it can't read a VP from the
174 - Only initialize the random pool once.
175 - In rlm_sql, don't escape characters twice.
176 - In rlm_ldap, only claim Auth-Type if a plain text password is present.
177 - Locking fixes in threading code
178 - Fix building on gcc-4.0 by not trying to access static auth_port from
181 -- Paul Hampson <Paul.Hampson@anu.edu.au> Wed, 29 Dec 2004 20:19:42 +1100
183 freeradius (1.0.1-1) unstable; urgency=high
185 * ReDebianise upstream tarball:
186 - Deleted RFCs: 2243 2289 2433 2548 2618 2619 2620 2621 2716 2759 2809 2865
187 2866 2867 2868 2869 2882 2924 3162 3575 3576 3579 3580
188 - Remove CVS directories.
189 * Urgency high for security fix from 1.0.1-0 (CAN-2004-0938,
192 -- Paul Hampson <Paul.Hampson@anu.edu.au> Thu, 23 Sep 2004 22:28:11 +1000
194 freeradius (1.0.1-0) unstable; urgency=high
196 * New upstream release
197 * Urgency high for some denial-of-service fixes:
198 - Fix two remote crashes and a remote memory leak in
199 radius packet decoding.
201 -- Paul Hampson <Paul.Hampson@anu.edu.au> Thu, 2 Sep 2004 17:12:23 +1000
203 freeradius (1.0.0-1) unstable; urgency=low
205 * ReDebianise upstream tarball:
206 - Deleted RFCs: 2243 2289 2433 2548 2618 2619 2620 2621 2716 2759 2809 2865
207 2866 2867 2868 2869 2882 2924 3162 3575 3576 3579 3580
208 * Support building with libsnmp5's UCD-SNMP compatiblity mode.
209 - libsnmp{4.2,5} still depend on OpenSSL, so SNMP's still disabled.
210 * Update for Debian Policy 3.6.11
211 - Change test for invoke-rc.d as per Policy 9.3.3.2
212 * Disable rlm_eap types PEAP, TLS and TTLS as they depend on OpenSSL.
213 * Disable rlm_sql driver PostgreSQL as it depends on OpenSSL.
214 * Disable rlm_x99_token as it depends on OpenSSL.
215 * Finally, -v is documented in radius(8).
217 * Reword a sentence in radwatch(8) by removing the personal pronoun.
220 -- Paul Hampson <Paul.Hampson@anu.edu.au> Tue, 17 Aug 2004 17:42:40 +1000
222 freeradius (1.0.0-0) unstable; urgency=low
224 * New upstream release
225 * Added H323 billing stuff to the examples
226 * Created Dialup-Admin package for the PHP-based web
227 FreeRADIUS database (SQL/LDAP) frontend.
229 -- Paul Hampson <Paul.Hampson@anu.edu.au> Sat, 17 Jul 2004 16:21:38 +1000
231 freeradius (0.9.3-1) unstable; urgency=low
233 * New upstream release, incorporates security fix from 0.9.2-4.
234 * Correct build-dependancy on debhelper.
236 * Split iodbc SQL driver into its own package.
238 -- Paul Hampson <Paul.Hampson@anu.edu.au> Tue, 24 Feb 2004 23:56:26 +1100
240 freeradius (0.9.2-4) unstable; urgency=high
242 * Patch from upstream head:
243 - Fix a remote DoS and possible exploit due to mis-handling
244 of tagged attributes, and Tunnel-Password attribute.
246 -- Paul Hampson <Paul.Hampson@anu.edu.au> Fri, 21 Nov 2003 09:52:51 +1100
248 freeradius (0.9.2-3) unstable; urgency=low
250 * Removed redundant code to delete contents of a directory
251 on purge which ends up being removed anyway.
252 * Provide a default pam.d configuration.
253 * Fix the usage of dh_installinit to not make the package uninstallable.
254 * Change package removal to not abort if we cannot stop the server.
255 * Debian-archive-fit version of freeradius.
258 -- Paul Hampson <Paul.Hampson@anu.edu.au> Tue, 11 Nov 2003 02:12:55 +1100
260 freeradius (0.9.2-2) unstable; urgency=low
262 * Use dh_installinit rather than doing it by hand
263 This involves renaming the initfile in the source tarball
264 * Only add user freerad to the group shadow on first installation
265 * Only chmod /etc/freeradius to group-readable, not group-read/write
266 * Removed the freerad user when the freerad group is removed
267 * Removed spurious build-dependancy on autoconf2.13 and libtool(1.4)
268 * Build-conflict against libssl-dev
269 * Restore Kerberos and LDAP as they will build without OpenSSL
270 * Make myself the maintainer
271 * Update to Policy 3.6.1.0
274 -- Paul Hampson <Paul.Hampson@anu.edu.au> Sun, 9 Nov 2003 00:07:52 +1100
276 freeradius (0.9.2-1) unstable; urgency=low
278 * Deleted RFCs: 2243 2289 2433 2548 2618 2616 2620 2621
279 2719 2759 2809 2865 2866 2867 2868 2869 2882 2924 3162
280 from source tarball due to non-DFSG-free copyright.
281 * Disabled PostgreSQL, x.99 token, EAP/TLS, Kerberos, LDAP
282 and SNMP agent support due to OpenSSL/GPL conflict.
284 -- Paul Hampson <Paul.Hampson@anu.edu.au> Thu, 6 Nov 2003 22:40:32 +1100
286 freeradius (0.9.2-0) unstable; urgency=low
288 * New upstream release
289 * Added logrotate script for /var/log/freeradius/radius.log
290 * Don't leave symlinks to config.{guess,sub} lying around to
293 -- Paul Hampson <Paul.Hampson@anu.edu.au> Wed, 15 Oct 2003 05:02:17 +1000
295 freeradius (0.9.1-0) unstable; urgency=low
297 * New upstream release.
298 * Renamed radiusd(8) to freeradius(8) to match binary
299 * Build-Depend on libtool1.4 | libtool (< 1.5) due to
300 new libtool 1.5 package.
301 * Merged multiple sed calls into a single sed call in debian/rules
302 * Installed SQL database examples into /usr/share/doc/freeradius/examples
303 * Modify initscript to only -HUP the parent process
305 -- Paul Hampson <Paul.Hampson@anu.edu.au> Fri, 5 Sep 2003 00:54:41 +1000
307 freeradius (0.9.0-1) unstable; urgency=low
309 * New Upstream release.
310 - Upstream dictionary files are in /usr/share/freeradius.
311 - Modified to 'configure{,.in}' to work with openssl 0.9.7 and 0.9.6
312 * Renamed pacakges to 'freeradius*' from 'radiusd-freeradius*'.
313 * Moved file hierarchy around to be neater:
314 - /etc/raddb -> /etc/freeradius
315 - /usr/share/doc/radiusd-freeradius -> /usr/share/doc/freeradius
316 - /var/log/radiusd-freeradius -> /var/log/freeradius
317 - /var/run/radiusd/radiusd.pid -> /var/run/freeradius/freeradius.pid
318 * Included RFCs in documentation.
319 * Enabled the daemon to run under user 'freerad:freerad' by default.
320 * Added support for DEB_BUILD_OPTIONS for policy 3.5.9 compliance.
321 * Installed SNMP mibs for Radius
323 -- Paul Hampson <Paul.Hampson@anu.edu.au> Sun, 20 Jul 2003 06:56:28 +1000
325 radiusd-freeradius (0.7+cvs20021113-1) unstable; urgency=low
327 * Explicitly excluding modules not in the "stable" list.
328 * Updated policy version number.
329 * Moved from non-US/main to main.
330 * Put pidfile in package's own directory.
331 * Package not as buggy and unstable modules are easily identifiable.
333 * Init script handles failure better. (closes: Bug#151264)
334 * New upstream release. (closes: Bug#140536)
335 * Uses available version of postgresql. (closes: Bug#139290)
336 * Removed "conflicts" with other radiusds.
337 * Added new build-dep on libtool.
338 * Changed section to "net" from "admin".
339 * New config.guess. (closes: Bug#168647)
340 * Run with freerad user and group. (closes: Bug#168272)
341 * Added libssl-dev as build-dep. (closes: #131832)
343 -- Chad Miller <cmiller@debian.org> Wed, 13 Nov 2002 17:01:19 -0500
345 radiusd-freeradius (0.5+cvs20020408-1) unstable; urgency=high
347 * New build-dep on libssl-dev, which is implied by another dep, but making
348 explicit for builders on Potato. (closes: Bug#131832)
349 * Built against new postgresql libraries, so automatic dep tracking has
350 the correct version, now. (closes: Bug#139290)
351 * Removed python example module.
352 * Explicitly disabled beta ippool module.
354 -- Chad Miller <cmiller@debian.org> Mon, 8 Apr 2002 11:48:30 -0400
356 radiusd-freeradius (0.4-1) unstable; urgency=high
359 * upstream: New EAP support.
360 * upstream: Fixed security bug in string translation.
362 -- Chad Miller <cmiller@debian.org> Thu, 13 Dec 2001 09:26:45 -0500
364 radiusd-freeradius (0.3-2) unstable; urgency=low
366 * Moved to using logrotate instead of cron for files.
367 * Fixed permissions of log files. (closes: Bug#116242,#116243)
368 * Close file descriptors of stdin, stdout, stderr, if not debugging.
370 * Made package "non-native". (An upload issue, not code.)
373 -- Chad Miller <cmiller@debian.org> Tue, 20 Nov 2001 10:50:20 -0500
375 radiusd-freeradius (0.3-1) unstable; urgency=low
379 -- Chad Miller <cmiller@debian.org> Tue, 9 Oct 2001 18:16:23 -0400
381 radiusd-freeradius (0.2+20010917-1) unstable; urgency=low
383 * Removed old mysql build-dep. (closes: Bug#112541)
385 -- Chad Miller <cmiller@debian.org> Mon, 17 Sep 2001 11:38:24 -0400
387 radiusd-freeradius (0.2+20010912-1) unstable; urgency=low
389 * Build-dep mysql changed package names.
390 * Added build-dep for libmysqlclient10-dev. (closes: Bug#111880)
391 * In acct_users, keep reply pairs.
392 * Integer values are printed as unsigned numbers, to comply with RFC2866.
393 * Fixed broken/reversed auth comparisons in SQL module.
394 * Sucked out CPPness from inside a printf, as printf is a macro in newer
395 compilers (gcc3.0, e.g.). (closes: Bug#100889)
396 * Sundry LDAP configuration, unresponsive thread, and proxying fixes.
397 * Added user 'freerad' into the 'shadow' group.
398 * Fixed UUCP-style of restricting time of log-in.
399 * Changed debugging messages to give more info about execution flow.
400 * Better counter module.
401 * Inserted CHAP support for SQL modules.
402 * Removed possible infinite loop.
404 -- Chad Miller <cmiller@debian.org> Wed, 12 Sep 2001 21:21:47 -0400
406 radiusd-freeradius (0.1+20010527-1) unstable; urgency=low
408 * Updated config.{guess,sub} to recent versions. (closes: Bug#98183)
409 * Updated build-dep to reflect supercession of libltdl0-dev by libltdl3-dev
412 -- Chad Miller <cmiller@debian.org> Sun, 27 May 2001 11:44:40 -0400
414 radiusd-freeradius (0.1+20010517-1) unstable; urgency=low
416 * Moved package to non-US to allow in Kerberos and PostgreSQL.
417 * Set Suggests of modules to main package.
418 * Better compile-time support of *BSD.
420 -- Chad Miller <cmiller@debian.org> Thu, 17 May 2001 14:46:51 -0400
422 radiusd-freeradius (0.1-1) unstable; urgency=low
424 * First beta release!
425 * Added generalized SQL support for ODBC, Oracle, MySQL, and Postgres.
426 * Added shasta, microsoft, and redback dictionaries.
427 * Fixed rc.d restart rule.
428 * Added a user to own the daemon and logfiles.
429 * SQL DB handles more forgiving of unreachable servers at startup.
430 * SQL Crypt-Password attribute support.
431 * Fixed cron log rotation.
432 * Put module libraries in own directory.
433 * Removed bogus build-dep. (closes: Bug#87277)
434 * Better permissions on /etc/raddb
435 * Use correct LDAP library.
436 * Fork ldap, postgresql, and mysql modules into different packages.
437 * Remove Kerberos, as it's restricted from export.
439 -- Chad Miller <cmiller@debian.org> Mon, 7 May 2001 16:37:46 -0400
441 radiusd-freeradius (0.0.20010109-1) unstable; urgency=low
443 * Changed priority, from standard to optional.
445 -- Chad Miller <cmiller@debian.org> Tue, 9 Jan 2001 14:01:38 -0500
447 radiusd-freeradius (0.0.20001227-1) unstable; urgency=low
449 * Initial revision. (closes: Bug#76476)
451 -- Chad Miller <cmiller@debian.org> Wed, 27 Dec 2000 11:58:56 -0500