diff options
author | Kris Kennaway <kris@FreeBSD.org> | 2002-12-09 01:54:18 +0000 |
---|---|---|
committer | Kris Kennaway <kris@FreeBSD.org> | 2002-12-09 01:54:18 +0000 |
commit | 6782ba5dbfaa505af7820b9c7345d5d4cd0188e3 (patch) | |
tree | dc862447d711611770f8259d87df3497b54bd712 /net/radius | |
parent | b2b80428b6b1d556e8913eccde26b8ac6e0a1fa6 (diff) |
These ports have been forbidden for 10 months for security reasons.
Removal was announced on Oct 12.
Notes
Notes:
svn path=/head/; revision=71457
Diffstat (limited to 'net/radius')
-rw-r--r-- | net/radius/Makefile | 40 | ||||
-rw-r--r-- | net/radius/distinfo | 1 | ||||
-rw-r--r-- | net/radius/files/patch-aa | 131 | ||||
-rw-r--r-- | net/radius/files/patch-ab | 39 | ||||
-rw-r--r-- | net/radius/files/patch-ac | 44 | ||||
-rw-r--r-- | net/radius/files/patch-ad | 67 | ||||
-rw-r--r-- | net/radius/files/patch-funcs.c | 14 | ||||
-rw-r--r-- | net/radius/pkg-comment | 1 | ||||
-rw-r--r-- | net/radius/pkg-descr | 3 | ||||
-rw-r--r-- | net/radius/pkg-plist | 17 |
10 files changed, 0 insertions, 357 deletions
diff --git a/net/radius/Makefile b/net/radius/Makefile deleted file mode 100644 index dab41df5c5ba..000000000000 --- a/net/radius/Makefile +++ /dev/null @@ -1,40 +0,0 @@ -# New ports collection makefile for: radius -# Date created: 4. July 1996 -# Whom: torstenb@FreeBSD.org -# -# $FreeBSD$ -# - -PORTNAME= radius-basic -PORTVERSION= 3.6B2 -CATEGORIES= net -DISTNAME= radius.${PORTVERSION}.basic - -MAINTAINER= ports@FreeBSD.org - -# restrictive copyright in several files, e.g., "src/sendserver.c" -RESTRICTED= redistribution in binary only -NO_CDROM= not allowed to charge fee for redistribution - -FORBIDDEN= "Remotely exploitable buffer overflow" - -NO_WRKSUBDIR= yes -INSTALL_TARGET= install-all -MAKE-FLAGS+= -DPREFIX=${PREFIX} -MAN5= authfile.5 clients.5 dictionary.5 engine.config.5 \ - radius.fsm.5 users.5 vendors.5 -MAN8= builddbm.8 dnscheck.8 radcheck.8 radiusd.8 radpwtst.8 - -pre-install: - @${MKDIR} ${PREFIX}/lib/radius/db ${PREFIX}/lib/radius/acct - -.include <bsd.port.pre.mk> - -.if !exists(${DISTDIR}/${DISTNAME}${EXTRACT_SUFX}) -IGNORE="Goto radius\' website: \ - \"http://www.interlinknetworks.com/downloads/\#freeware\" \ - to get more info on downloading the tarball, then place \ - ${DISTNAME}${EXTRACT_SUFX} into ${DISTDIR} and run make again" -.endif - -.include <bsd.port.post.mk> diff --git a/net/radius/distinfo b/net/radius/distinfo deleted file mode 100644 index 4fd3d00152d8..000000000000 --- a/net/radius/distinfo +++ /dev/null @@ -1 +0,0 @@ -MD5 (radius.3.6B2.basic.tar.gz) = 39a2e5962103ef4a56ae8c2a2590177e diff --git a/net/radius/files/patch-aa b/net/radius/files/patch-aa deleted file mode 100644 index 4d54d6fd77e6..000000000000 --- a/net/radius/files/patch-aa +++ /dev/null @@ -1,131 +0,0 @@ ---- Makefile~ Mon Jul 13 17:19:54 1998 -+++ Makefile Thu Sep 17 18:27:41 1998 -@@ -51,11 +51,11 @@ - # Where the configuration files live. - RADDB = ./raddb - # Some installation stuff. --DAEMON_INSDIR = /usr/private/etc --BIN_INSDIR = /usr/private/etc --MAN_INSDIR = /usr/local/man --RADDB_INSDIR = /usr/private/etc/raddb.new --RADACCT_INSDIR = /usr/private/etc/radacct -+DAEMON_INSDIR = ${PREFIX}/sbin -+BIN_INSDIR = ${PREFIX}/bin -+MAN_INSDIR = ${PREFIX}/man -+RADDB_INSDIR = ${PREFIX}/lib/radius/db -+RADACCT_INSDIR = ${PREFIX}/lib/radius/acct - # The server does not need to be owned by root, unless some shadow password - # scheme needs it. You might create a user id "radius" for just this purpose. - # The O G and M macros are for AIX, OSF/1 and HP-UX, see below. -@@ -67,8 +67,8 @@ - - # Define COMPRESS to hold the pathname of your favourite compress program if - # you need to override the default value of /usr/ucb/compress: --#COMPRESS = -DRAD_COMPRESS=\"/usr/local/bin/gzip\" --#COMPRESS_ARGS = -DCOMPRESS_ARGS=\"-9\" -+COMPRESS = -DRAD_COMPRESS=\"/usr/bin/gzip\" -+COMPRESS_ARGS = -DCOMPRESS_ARGS=\"-9\" - - # Define SRV to hold any combination of server names you'd like to override: - #SRV3 = -DDEFAULT_TACACS_SERVER=\"vms.dns.name\" -@@ -122,17 +122,22 @@ - # radiusd -- the default - # - #-------------------------------------------------------------------------- -+.if !defined(MAKE_EBONES) - DEFS = -DHAVE_SETVBUF -DNOSHADOW $(MERIT) $(STUFF) - RADLIBS = - INCS = -+.endif - - # - # mkerb - # - #-------------------------------------------------------------------------- --#DEFS = -DHAVE_SETVBUF -DM_KERB -DNOSHADOW $(MERIT) $(STUFF) --#RADLIBS = /usr/kerberos/lib/libkrb.a /usr/kerberos/lib/libdes.a --#INCS = -I/usr/kerberos/include -+.if defined(MAKE_EBONES) -+DEFS = -DHAVE_SETVBUF -DM_KERB -DKRB_INSTANCE=\"$(KRB_INSTANCE)\" \ -+ -DNOSHADOW $(MERIT) $(STUFF) -+RADLIBS = -lkrb -ldes -+INCS = -I/usr/include -+.endif - - # - # akerb -@@ -228,12 +233,12 @@ - # - #-------------------------------------------------------------------------- - --CC = cc --CFLAGS = -g $(DEFS) $(INCS) --LDFLAGS = --LIBS = --RANLIB = ranlib --INSTALL = /bin/install -+#CC = cc -+#CFLAGS = -g $(DEFS) $(INCS) -+#LDFLAGS = -+#LIBS = -+#RANLIB = ranlib -+#INSTALL = /bin/install - - # - # Solaris 2.x [[NB: if BIND/named not SMCC, try CFLAGS = ... -DBSD=1 ...]] -@@ -316,14 +321,17 @@ - # - #-------------------------------------------------------------------------- - --#CC = cc --#CFLAGS = -O $(DEFS) $(INCS) --#LDFLAGS = --#LIBS = -lcrypt -lcompat --#UTILS = $(RADCHECK) $(RADPWTST) $(RADPASS) $(DNSCHECK) --#RANLIB = ranlib --#INSTALL = /usr/bin/install -- -+CC = cc -+CFLAGS += -DRADIUS_DIR=\"${RADDB_INSDIR}\" -DDEFAULT_DIR2=\"${RADDB_INSDIR}\" \ -+ -DRADACCT_DIR=\"${PREFIX}/lib/radius/acct\" \ -+ -DRADIUS_COMPRESS=\"/usr/bin/gzip\" \ -+ $(DEFS) $(INCS) -+LDFLAGS = -+LIBS = -lcrypt -lcompat -+UTILS = $(RADCHECK) $(RADPWTST) $(RADPASS) $(DNSCHECK) -+RANLIB = ranlib -+INSTALL = /usr/bin/install -c -+ - # - # AIX 3.2.5 (if using xlc(1) add -D_ALL_SOURCE to CFLAGS below) - # May need '-qchars=signed' added to CFLAGS below to fix bug in wait status. -@@ -684,21 +692,21 @@ - /bin/mkdir -p $(RADDB_INSDIR) ;\ - fi - $(INSTALL) $(M) 660 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/authfile \ -- $(RADDB_INSDIR)/authfile -+ $(RADDB_INSDIR)/authfile.sample - $(INSTALL) $(M) 660 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/clients \ -- $(RADDB_INSDIR)/clients -+ $(RADDB_INSDIR)/clients.sample - $(INSTALL) $(M) 755 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/conversion.pl \ -- $(RADDB_INSDIR)/conversion.pl -+ $(RADDB_INSDIR)/conversion.pl.sample - $(INSTALL) $(M) 644 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/dictionary \ -- $(RADDB_INSDIR)/dictionary -+ $(RADDB_INSDIR)/dictionary.sample - $(INSTALL) $(M) 644 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/engine.config \ -- $(RADDB_INSDIR)/engine.config -+ $(RADDB_INSDIR)/engine.config.sample - $(INSTALL) $(M) 660 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/users \ -- $(RADDB_INSDIR)/users -+ $(RADDB_INSDIR)/users.sample - $(INSTALL) $(M) 644 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/vendors \ -- $(RADDB_INSDIR)/vendors -+ $(RADDB_INSDIR)/vendors.sample - $(INSTALL) $(M) 644 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/xas.fsm \ -- $(RADDB_INSDIR)/xas.fsm -+ $(RADDB_INSDIR)/xas.fsm.sample - -if [ ! -d $(RADACCT_INSDIR) ] ;\ - then \ - /bin/mkdir -p $(RADACCT_INSDIR) ;\ diff --git a/net/radius/files/patch-ab b/net/radius/files/patch-ab deleted file mode 100644 index f466a5bc7003..000000000000 --- a/net/radius/files/patch-ab +++ /dev/null @@ -1,39 +0,0 @@ ---- src/radiusd.c.orig Mon Jul 27 15:52:37 1998 -+++ src/radiusd.c Sun Dec 10 17:04:17 2000 -@@ -793,6 +793,19 @@ - sigaction (SIGIOT, &action, NULL); /* Perhaps also known as SIGABRT ! */ - sigaction (SIGFPE, &action, NULL); - -+ /* the max number of open files should never be used as an argument -+ * for select(). On systems that support more than 256 open files -+ * select() is not able to handle that many fd's. -+ * In this case the max. number of fd's for select should not be -+ * set to the maximum number of descriptors. -+ * Since I'm too lazy to correct the code I set dtablesize to -+ * FD_SETSIZE. This is the only portable way to use select() on -+ * all descriptors. See also "Advanced Programming in the Unix -+ * Environment" (from W. Richard Stevens) and the BSD 4.4 manpage for -+ * select(2). -+ */ -+ dtablesize = FD_SETSIZE; -+#ifdef BOGUS_CODE - #ifdef _SC_OPEN_MAX - if ((dtablesize = sysconf (_SC_OPEN_MAX)) == -1) - { -@@ -802,6 +815,7 @@ - #else /* Assume BSD */ - dtablesize = getdtablesize (); - #endif /* _SC_OPEN_MAX */ -+#endif /* BOGUS_CODE */ - - for (j = dtablesize; j >= 3; j--) - { -@@ -4467,7 +4481,7 @@ - while ((event = authreq->event_q) != (EVENT_ENT *) NULL) - { - authreq->event_q = event->next; -- free_event_final (event); -+ free_event (event); - } - - while ((event = authreq->freed_events) != (EVENT_ENT *) NULL) diff --git a/net/radius/files/patch-ac b/net/radius/files/patch-ac deleted file mode 100644 index e8412b89e176..000000000000 --- a/net/radius/files/patch-ac +++ /dev/null @@ -1,44 +0,0 @@ ---- src/krb_conf.h~ Tue May 12 21:37:13 1998 -+++ src/krb_conf.h Thu Sep 17 18:33:35 1998 -@@ -20,7 +20,7 @@ - #ifndef KRB_CONF_DEFS - #define KRB_CONF_DEFS - --#include <mit-copyright.h> -+/* #include <mit-copyright.h> */ - - /* Byte ordering */ - extern int krbONE; ---- src/krb_get_in_tkt.c.orig Tue May 12 21:37:16 1998 -+++ src/krb_get_in_tkt.c Thu Sep 17 18:33:35 1998 -@@ -13,7 +13,7 @@ - - #endif /* lint */ - --#include <mit-copyright.h> -+/* #include <mit-copyright.h> */ - #include <krb.h> - #include <des.h> - ---- src/mit_stringtokey.c.orig Tue May 12 21:37:17 1998 -+++ src/mit_stringtokey.c Thu Sep 17 18:33:35 1998 -@@ -29,7 +29,7 @@ - - #endif /* lint */ - --#include <mit-copyright.h> -+/* #include <mit-copyright.h> */ - #include <stdio.h> - #include <memory.h> - #include <des.h> ---- src/prot.h.orig Tue May 12 21:37:13 1998 -+++ src/prot.h Thu Sep 17 18:33:35 1998 -@@ -11,7 +11,7 @@ - * Include file with authentication protocol information. - */ - --#include <mit-copyright.h> -+/* #include <mit-copyright.h> */ - - #include "krb_conf.h" - diff --git a/net/radius/files/patch-ad b/net/radius/files/patch-ad deleted file mode 100644 index d6fe8e6628e9..000000000000 --- a/net/radius/files/patch-ad +++ /dev/null @@ -1,67 +0,0 @@ ---- src/rad.kerberos.c~ Fri Jun 26 00:40:50 1998 -+++ src/rad.kerberos.c Thu Sep 17 18:50:28 1998 -@@ -80,8 +80,8 @@ - - #include <krb.h> - --static int krb_pass PROTO((AUTH_REQ *, int, char *, -- int (*) (AUTH_REQ *, int, char *))); -+static int krb_pass (AUTH_REQ *, int, char *, -+ int (*) (AUTH_REQ *, int, char *)); - - extern int debug_flag; - -@@ -225,8 +225,14 @@ - krbval = INTK_BADPW; /* Fail if type is bad somehow */ - - /* get the ticket */ -- krbval = krb_get_in_tkt (userid, "", realm, "krbtgt", realm, -+ krbval = krb_get_in_tkt (userid, KRB_INSTANCE, realm, "krbtgt", realm, - DEFAULT_TKT_LIFE, passwd_to_key, NULL, passwd); -+ /* -+ * XXX -+ * This can be spoofed fairly easily... Should attempt to authenticate -+ * to some service on this machine (e.g., radius.thishost@REALM) -+ * in order to ensure that the ticket we just got is really valid. -+ */ - switch (krbval) - { - case INTK_OK: -@@ -294,6 +300,37 @@ - krbval, userid, realm); - break; - } -+#ifdef M_KERB -+ /* -+ * Ticket verification code based loosely on Berkeley klogin.c 8.3 -+ */ -+ if (krbreturn != EV_ACK) { -+ dest_tkt(); -+ memset(passwd, 0, sizeof passwd); -+ } else { -+ struct sockaddr_in sin; -+ char host[MAXHOSTNAMELEN], *p; -+ AUTH_DAT authdata; -+ KTEXT_ST ticket; -+ -+ krb_get_local_addr(&sin); -+ gethostname(host, sizeof host); -+ if ((p = strchr(host, '.')) != 0) -+ *p = '\0'; -+ krbval = krb_mk_req(&ticket, "radius", host, realm, 33); -+ if (krbval == KSUCCESS) { -+ krbval = krb_rd_req(&ticket, "radius", host, -+ sin.sin_addr.s_addr, &authdata, -+ ""); -+ } -+ if (krbval != KSUCCESS) { -+ logit(LOG_DAEMON, LOG_ERR, -+ "Kerberos error verifying ticket for %s: %s", -+ func, krb_err_txt[krbval]); -+ krbreturn = EV_NAK; -+ } -+ } -+#endif /* M_KERB */ - - dest_tkt (); /* destroy the ticket */ - memset (passwd, 0, sizeof (passwd)); diff --git a/net/radius/files/patch-funcs.c b/net/radius/files/patch-funcs.c deleted file mode 100644 index 1e230c83bef7..000000000000 --- a/net/radius/files/patch-funcs.c +++ /dev/null @@ -1,14 +0,0 @@ ---- src/funcs.c.orig Sun Aug 26 03:03:53 2001 -+++ src/funcs.c Sun Aug 26 03:14:07 2001 -@@ -8333,9 +8333,9 @@ - return 1; - } - --/*The following two lines do not compile on Solaris or Linux or BSDI. */ --#if !(defined(sys5) || defined(linux) || defined (BSDI)) - close (fileno(fp)); -+/*The following two lines do not compile on Solaris or Linux or BSDI. */ -+#if !(defined(sys5) || defined(linux) || defined (BSDI) || defined (__FreeBSD__)) - fileno(fp) = STDERR_FILENO; - #endif /* sys5 */ - diff --git a/net/radius/pkg-comment b/net/radius/pkg-comment deleted file mode 100644 index f8f1541c398c..000000000000 --- a/net/radius/pkg-comment +++ /dev/null @@ -1 +0,0 @@ -A remote authentication server diff --git a/net/radius/pkg-descr b/net/radius/pkg-descr deleted file mode 100644 index 16bb3e68e43d..000000000000 --- a/net/radius/pkg-descr +++ /dev/null @@ -1,3 +0,0 @@ -radiusd is a server that handles access-requests for user authentication -from radius clients. These clients may be terminal servers, Network -Access Servers or other RADIUS servers. diff --git a/net/radius/pkg-plist b/net/radius/pkg-plist deleted file mode 100644 index e95bd907a68f..000000000000 --- a/net/radius/pkg-plist +++ /dev/null @@ -1,17 +0,0 @@ -bin/dnscheck -bin/radcheck -bin/radpass -bin/radpwtst -@exec mkdir -p %D/lib/radius/acct -lib/radius/db/authfile.sample -lib/radius/db/clients.sample -lib/radius/db/conversion.pl.sample -lib/radius/db/dictionary.sample -lib/radius/db/engine.config.sample -lib/radius/db/users.sample -lib/radius/db/vendors.sample -lib/radius/db/xas.fsm.sample -sbin/radiusd -@dirrm lib/radius/db -@dirrm lib/radius/acct -@dirrm lib/radius |