Package: freeradius-2.1.11-2.fc16 Tag: None Status: complete Built by: sharkcz

Fri Jul 1 06:26:54 UTC 2011

Package: freeradius-2.1.11-2.fc16
Tag: None
Status: complete
Built by: sharkcz
ID: 69800
Started: Thu, 30 Jun 2011 23:11:59 EDT
Finished: Thu, 30 Jun 2011 23:26:20 EDT
Changelog:
* Thu Jun 23 2011 John Dennis <jdennis at redhat.com> - 2.1.11-2
- reload the server (i.e. HUP) after logrotate

* Wed Jun 22 2011 John Dennis <jdennis at redhat.com> - 2.1.11-1
- Upgrade to latest upstream release: 2.1.11
- Remove the following two patches as upstream has incorporated them:
    freeradius-radtest-ipv6.patch
    freeradius-lt-dladvise.patch
- Upstream changelog for 2.1.11:
  Feature improvements
  * Added doc/rfc/rfc6158.txt: RADIUS Design Guidelines.
    All vendors need to read it and follow its directions.
  * Microsoft SoH support for PEAP from Phil Mayers.
    See doc/SoH.txt
  * Certificate "bootstrap" script now checks for certificate expiry.
    See comments in raddb/eap.conf, and then "make_cert_command".
  * Support for dynamic expansion of EAP-GTC challenges.
    Patch from Alexander Clouter.
  * OCSP support from Alex Bergmann.  See raddb/eap.conf, "ocsp"
    section.
  * Updated dictionary.huawei, dictionary.3gpp, dictionary.3gpp3.
  * Added dictionary.eltex, dictionary.motorola, and dictionary.ukerna.
  * Experimental redis support from Gabriel Blanchard.
    See raddb/modules/redis and raddb/modules/rediswho
  * Add "key" to rlm_fastusers.  Closes bug #126.
  * Added scripts/radtee from original software at
    http://horde.net/~jwm/software/misc/comparison-tee
  * Updated radmin "man" page for new commands.
  * radsniff now prints the hex decoding of the packet (-x -x -x)
  * mschap module now reloads its configuration on HUP
  * Added experimental "replicate" module.  See raddb/modules/replicate
  * Policy "foo" can now refer to module "foo".  This lets you
    over-ride the behavior of a module.
  * Policy "foo.authorize" can now over-ride the behavior of module
    "foo", "authorize" method.
  * Produce errors in more situations when the configuration files
    have invalid syntax.

  Bug fixes
  * Ignore pre/post-proxy sections if proxying is disabled
  * Add configure checks for pcap_fopen*.
  * Fix call to otp_write in rlm_otp
  * Fix issue with Access-Challenge checking from 2.1.10, when the
    debug flag was set after server startup.  Closes #116 and #117.
  * Fix typo in zombie period start time.
  * Fix leak in src/main/valuepair.c.  Patch from James Ballantine.
  * Allow radtest to use spaces in shared secret.
    Patch from Cedric Carree.
  * Remove extra calls to HMAC_CTX_init() in rlm_wimax, fixing leak.
    Patch from James Ballantine.
  * Remove MN-FA key generation.  The NAS does this, not AAA.
    Patch from Ben Weichman.
  * Include dictionary.mikrotik by default.  Closes bug #121.
  * Add group membership query to MS-SQL examples.  Closes bug #120.
  * Don't cast NAS-Port to integer in Postgresql queries.
    Closes bug #112.
  * Fixes for libtool and autoconf from Sam Hartman.
  * radsniff should read the dictionaries in more situations.
  * Use fnmatch to check for detail file reader==writer.
    Closes bug #128.
  * Check for short writes (i.e. disk full) in rlm_detail.
    Closes bug #130.  Patches and testing from John Morrissey.
  * Fix typo in src/lib/token.c.  Closes bug #124
  * Allow workstation trust accounts to use MS-CHAP.
    Closes bug #123.
  * Assigning foo=`/bin/echo hello` now produces a syntax error
    if it is done outside of an "update" section.
  * Fix "too many open file descriptors" problem when using
    "verify client" in eap.conf.
  * Many fixes to dialup_admin for PHP5, by Stefan Winter.
  * Allow preprocess module to have "hints = " and "huntgroups =",
    which allows them to be empty or non-existent.
  * Renamed "php3" files to "php" in dialup_admin/
  * Produce error when sub-TLVs are used in a dictionary.  They are
    supported only in the "master" branch, and not in 2.1.x.
  * Minor fix in dictionary.redback.  Closes bug #138.
  * Fixed MySQL "NULL" issues in ippool.conf.  Closes bug #129.
  * Fix to Access-Challenge warning from Ken-ichirou Matsuzawa.
    Closes bug #118.
  * DHCP fixes to send unicast packets in more situations.
  * Fix to udpfromto, to enable it to work on IPv6 networks.
  * Fixes to the Oracle accounting_onoff_query.
  * When using both IPv4 and IPv6 home servers, ensure that we use the
    correct local socket for proxying.  Closes bug #143.
  * Suppress messages when thread pool is nearly full, all threads
    are busy, and we can't create new threads.
  * IPv6 is now enabled for udpfromto.  Closes bug #141
  * Make sqlippool query buffer the same size as sql module.
    Closes bug #139.
  * Make Coa / Disconnect proxying work again.
  * Configure scripts for rlm_caching from Nathaniel McCallum
  * src/lib/dhcp.c and src/include/libradius.h are LGPL, not GPL.
  * Updated password routines to use time-insensitive comparisons.
    This prevents timing attacks (though none are known).
  * Allow sqlite module to do normal SELECT queries.
  * rlm_wimax now has a configure script
  * Moved Ascend, USR, and Motorola "illegal" dictionaries to separate
    files.  See share/dictionary for explanations.
  * Check for duplicate module definitions in the modules{} section,
    and refuse to start if duplicates are found.
  * Check for duplicate virtual servers, and refuse to start if
    duplicates are found.
  * Don't use udpfromto if source is INADDR_ANY.  Closes bug #148.
  * Check pre-conditions before running radmin "inject file".
  * Don't over-ride "no match" with "match" for regexes.
    Closes bug #152.
  * Make retry and error message configurable in mschap.
    See raddb/modules/mschap
  * Allow EAP-MSCHAPv2 to send error message to client.  This change
    allows some clients to prompt the user for a new password.
    See raddb/eap.conf, mschapv2 section, "send_error".
  * Load the default virtual server before any others.
    This matches what users expect, and reduces confusion.
  * Fix configure checks for udpfromto.  Fixes Debian bug #606866
  * Definitive fix for bug #35, where the server could crash under
    certain loads.  Changes src/lib/packet.c to use RB trees.
  * Updated "configure" checks to allow IPv6 udpfromto on Linux.
  * SQL module now returns NOOP if the accounting start/interim/stop
    queries don't do anything.
  * Allow %{outer.control: ... } in string expansions
  * home_server coa config now matches raddb/proxy.conf
  * Never send a reply to a DHCP Release.

* Thu Jun 16 2011 Marcela MaÅ¡lÃ¡ÅˆovÃ¡ <mmaslano at redhat.com> - 2.1.10-8
- Perl mass rebuild


SRPMS:
  freeradius-2.1.11-2.fc16.src.rpm

Closed tasks:
-------------

Task 420492 on devel1.s390.bos.redhat.com
Task Type: build (None, freeradius-2.1.11-2.fc16.src.rpm)

Task 420494 on devel1.s390.bos.redhat.com
Task Type: buildArch (freeradius-2.1.11-2.fc16.src.rpm, s390)
logs:
  http://s390.koji.fedoraproject.org/koji/getfile?taskID=420494&name=build.log
  http://s390.koji.fedoraproject.org/koji/getfile?taskID=420494&name=mock_output.log
  http://s390.koji.fedoraproject.org/koji/getfile?taskID=420494&name=root.log
  http://s390.koji.fedoraproject.org/koji/getfile?taskID=420494&name=state.log
rpms:
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-debuginfo-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-krb5-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-ldap-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-mysql-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-perl-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-postgresql-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-python-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-unixODBC-2.1.11-2.fc16.s390.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390/freeradius-utils-2.1.11-2.fc16.s390.rpm

Task 420495 on fedora3.s390.bos.redhat.com
Task Type: buildArch (freeradius-2.1.11-2.fc16.src.rpm, s390x)
logs:
  http://s390.koji.fedoraproject.org/koji/getfile?taskID=420495&name=build.log
  http://s390.koji.fedoraproject.org/koji/getfile?taskID=420495&name=mock_output.log
  http://s390.koji.fedoraproject.org/koji/getfile?taskID=420495&name=root.log
  http://s390.koji.fedoraproject.org/koji/getfile?taskID=420495&name=state.log
rpms:
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-debuginfo-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-krb5-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-ldap-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-mysql-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-perl-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-postgresql-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-python-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-unixODBC-2.1.11-2.fc16.s390x.rpm
 http://s390pkgs.fedoraproject.org/packages/freeradius/2.1.11/2.fc16/s390x/freeradius-utils-2.1.11-2.fc16.s390x.rpm


Task Info: http://s390.koji.fedoraproject.org/koji/taskinfo?taskID=420492
Build Info: http://s390.koji.fedoraproject.org/koji/buildinfo?buildID=69800