aboutsummaryrefslogtreecommitdiff
path: root/net/radius
diff options
context:
space:
mode:
authorKris Kennaway <kris@FreeBSD.org>2002-12-09 01:54:18 +0000
committerKris Kennaway <kris@FreeBSD.org>2002-12-09 01:54:18 +0000
commit6782ba5dbfaa505af7820b9c7345d5d4cd0188e3 (patch)
treedc862447d711611770f8259d87df3497b54bd712 /net/radius
parentb2b80428b6b1d556e8913eccde26b8ac6e0a1fa6 (diff)
These ports have been forbidden for 10 months for security reasons.
Removal was announced on Oct 12.
Notes
Notes: svn path=/head/; revision=71457
Diffstat (limited to 'net/radius')
-rw-r--r--net/radius/Makefile40
-rw-r--r--net/radius/distinfo1
-rw-r--r--net/radius/files/patch-aa131
-rw-r--r--net/radius/files/patch-ab39
-rw-r--r--net/radius/files/patch-ac44
-rw-r--r--net/radius/files/patch-ad67
-rw-r--r--net/radius/files/patch-funcs.c14
-rw-r--r--net/radius/pkg-comment1
-rw-r--r--net/radius/pkg-descr3
-rw-r--r--net/radius/pkg-plist17
10 files changed, 0 insertions, 357 deletions
diff --git a/net/radius/Makefile b/net/radius/Makefile
deleted file mode 100644
index dab41df5c5ba..000000000000
--- a/net/radius/Makefile
+++ /dev/null
@@ -1,40 +0,0 @@
-# New ports collection makefile for: radius
-# Date created: 4. July 1996
-# Whom: torstenb@FreeBSD.org
-#
-# $FreeBSD$
-#
-
-PORTNAME= radius-basic
-PORTVERSION= 3.6B2
-CATEGORIES= net
-DISTNAME= radius.${PORTVERSION}.basic
-
-MAINTAINER= ports@FreeBSD.org
-
-# restrictive copyright in several files, e.g., "src/sendserver.c"
-RESTRICTED= redistribution in binary only
-NO_CDROM= not allowed to charge fee for redistribution
-
-FORBIDDEN= "Remotely exploitable buffer overflow"
-
-NO_WRKSUBDIR= yes
-INSTALL_TARGET= install-all
-MAKE-FLAGS+= -DPREFIX=${PREFIX}
-MAN5= authfile.5 clients.5 dictionary.5 engine.config.5 \
- radius.fsm.5 users.5 vendors.5
-MAN8= builddbm.8 dnscheck.8 radcheck.8 radiusd.8 radpwtst.8
-
-pre-install:
- @${MKDIR} ${PREFIX}/lib/radius/db ${PREFIX}/lib/radius/acct
-
-.include <bsd.port.pre.mk>
-
-.if !exists(${DISTDIR}/${DISTNAME}${EXTRACT_SUFX})
-IGNORE="Goto radius\' website: \
- \"http://www.interlinknetworks.com/downloads/\#freeware\" \
- to get more info on downloading the tarball, then place \
- ${DISTNAME}${EXTRACT_SUFX} into ${DISTDIR} and run make again"
-.endif
-
-.include <bsd.port.post.mk>
diff --git a/net/radius/distinfo b/net/radius/distinfo
deleted file mode 100644
index 4fd3d00152d8..000000000000
--- a/net/radius/distinfo
+++ /dev/null
@@ -1 +0,0 @@
-MD5 (radius.3.6B2.basic.tar.gz) = 39a2e5962103ef4a56ae8c2a2590177e
diff --git a/net/radius/files/patch-aa b/net/radius/files/patch-aa
deleted file mode 100644
index 4d54d6fd77e6..000000000000
--- a/net/radius/files/patch-aa
+++ /dev/null
@@ -1,131 +0,0 @@
---- Makefile~ Mon Jul 13 17:19:54 1998
-+++ Makefile Thu Sep 17 18:27:41 1998
-@@ -51,11 +51,11 @@
- # Where the configuration files live.
- RADDB = ./raddb
- # Some installation stuff.
--DAEMON_INSDIR = /usr/private/etc
--BIN_INSDIR = /usr/private/etc
--MAN_INSDIR = /usr/local/man
--RADDB_INSDIR = /usr/private/etc/raddb.new
--RADACCT_INSDIR = /usr/private/etc/radacct
-+DAEMON_INSDIR = ${PREFIX}/sbin
-+BIN_INSDIR = ${PREFIX}/bin
-+MAN_INSDIR = ${PREFIX}/man
-+RADDB_INSDIR = ${PREFIX}/lib/radius/db
-+RADACCT_INSDIR = ${PREFIX}/lib/radius/acct
- # The server does not need to be owned by root, unless some shadow password
- # scheme needs it. You might create a user id "radius" for just this purpose.
- # The O G and M macros are for AIX, OSF/1 and HP-UX, see below.
-@@ -67,8 +67,8 @@
-
- # Define COMPRESS to hold the pathname of your favourite compress program if
- # you need to override the default value of /usr/ucb/compress:
--#COMPRESS = -DRAD_COMPRESS=\"/usr/local/bin/gzip\"
--#COMPRESS_ARGS = -DCOMPRESS_ARGS=\"-9\"
-+COMPRESS = -DRAD_COMPRESS=\"/usr/bin/gzip\"
-+COMPRESS_ARGS = -DCOMPRESS_ARGS=\"-9\"
-
- # Define SRV to hold any combination of server names you'd like to override:
- #SRV3 = -DDEFAULT_TACACS_SERVER=\"vms.dns.name\"
-@@ -122,17 +122,22 @@
- # radiusd -- the default
- #
- #--------------------------------------------------------------------------
-+.if !defined(MAKE_EBONES)
- DEFS = -DHAVE_SETVBUF -DNOSHADOW $(MERIT) $(STUFF)
- RADLIBS =
- INCS =
-+.endif
-
- #
- # mkerb
- #
- #--------------------------------------------------------------------------
--#DEFS = -DHAVE_SETVBUF -DM_KERB -DNOSHADOW $(MERIT) $(STUFF)
--#RADLIBS = /usr/kerberos/lib/libkrb.a /usr/kerberos/lib/libdes.a
--#INCS = -I/usr/kerberos/include
-+.if defined(MAKE_EBONES)
-+DEFS = -DHAVE_SETVBUF -DM_KERB -DKRB_INSTANCE=\"$(KRB_INSTANCE)\" \
-+ -DNOSHADOW $(MERIT) $(STUFF)
-+RADLIBS = -lkrb -ldes
-+INCS = -I/usr/include
-+.endif
-
- #
- # akerb
-@@ -228,12 +233,12 @@
- #
- #--------------------------------------------------------------------------
-
--CC = cc
--CFLAGS = -g $(DEFS) $(INCS)
--LDFLAGS =
--LIBS =
--RANLIB = ranlib
--INSTALL = /bin/install
-+#CC = cc
-+#CFLAGS = -g $(DEFS) $(INCS)
-+#LDFLAGS =
-+#LIBS =
-+#RANLIB = ranlib
-+#INSTALL = /bin/install
-
- #
- # Solaris 2.x [[NB: if BIND/named not SMCC, try CFLAGS = ... -DBSD=1 ...]]
-@@ -316,14 +321,17 @@
- #
- #--------------------------------------------------------------------------
-
--#CC = cc
--#CFLAGS = -O $(DEFS) $(INCS)
--#LDFLAGS =
--#LIBS = -lcrypt -lcompat
--#UTILS = $(RADCHECK) $(RADPWTST) $(RADPASS) $(DNSCHECK)
--#RANLIB = ranlib
--#INSTALL = /usr/bin/install
--
-+CC = cc
-+CFLAGS += -DRADIUS_DIR=\"${RADDB_INSDIR}\" -DDEFAULT_DIR2=\"${RADDB_INSDIR}\" \
-+ -DRADACCT_DIR=\"${PREFIX}/lib/radius/acct\" \
-+ -DRADIUS_COMPRESS=\"/usr/bin/gzip\" \
-+ $(DEFS) $(INCS)
-+LDFLAGS =
-+LIBS = -lcrypt -lcompat
-+UTILS = $(RADCHECK) $(RADPWTST) $(RADPASS) $(DNSCHECK)
-+RANLIB = ranlib
-+INSTALL = /usr/bin/install -c
-+
- #
- # AIX 3.2.5 (if using xlc(1) add -D_ALL_SOURCE to CFLAGS below)
- # May need '-qchars=signed' added to CFLAGS below to fix bug in wait status.
-@@ -684,21 +692,21 @@
- /bin/mkdir -p $(RADDB_INSDIR) ;\
- fi
- $(INSTALL) $(M) 660 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/authfile \
-- $(RADDB_INSDIR)/authfile
-+ $(RADDB_INSDIR)/authfile.sample
- $(INSTALL) $(M) 660 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/clients \
-- $(RADDB_INSDIR)/clients
-+ $(RADDB_INSDIR)/clients.sample
- $(INSTALL) $(M) 755 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/conversion.pl \
-- $(RADDB_INSDIR)/conversion.pl
-+ $(RADDB_INSDIR)/conversion.pl.sample
- $(INSTALL) $(M) 644 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/dictionary \
-- $(RADDB_INSDIR)/dictionary
-+ $(RADDB_INSDIR)/dictionary.sample
- $(INSTALL) $(M) 644 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/engine.config \
-- $(RADDB_INSDIR)/engine.config
-+ $(RADDB_INSDIR)/engine.config.sample
- $(INSTALL) $(M) 660 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/users \
-- $(RADDB_INSDIR)/users
-+ $(RADDB_INSDIR)/users.sample
- $(INSTALL) $(M) 644 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/vendors \
-- $(RADDB_INSDIR)/vendors
-+ $(RADDB_INSDIR)/vendors.sample
- $(INSTALL) $(M) 644 $(O) $(RADOWN) $(G) $(RADGRP) $(RADDB)/xas.fsm \
-- $(RADDB_INSDIR)/xas.fsm
-+ $(RADDB_INSDIR)/xas.fsm.sample
- -if [ ! -d $(RADACCT_INSDIR) ] ;\
- then \
- /bin/mkdir -p $(RADACCT_INSDIR) ;\
diff --git a/net/radius/files/patch-ab b/net/radius/files/patch-ab
deleted file mode 100644
index f466a5bc7003..000000000000
--- a/net/radius/files/patch-ab
+++ /dev/null
@@ -1,39 +0,0 @@
---- src/radiusd.c.orig Mon Jul 27 15:52:37 1998
-+++ src/radiusd.c Sun Dec 10 17:04:17 2000
-@@ -793,6 +793,19 @@
- sigaction (SIGIOT, &action, NULL); /* Perhaps also known as SIGABRT ! */
- sigaction (SIGFPE, &action, NULL);
-
-+ /* the max number of open files should never be used as an argument
-+ * for select(). On systems that support more than 256 open files
-+ * select() is not able to handle that many fd's.
-+ * In this case the max. number of fd's for select should not be
-+ * set to the maximum number of descriptors.
-+ * Since I'm too lazy to correct the code I set dtablesize to
-+ * FD_SETSIZE. This is the only portable way to use select() on
-+ * all descriptors. See also "Advanced Programming in the Unix
-+ * Environment" (from W. Richard Stevens) and the BSD 4.4 manpage for
-+ * select(2).
-+ */
-+ dtablesize = FD_SETSIZE;
-+#ifdef BOGUS_CODE
- #ifdef _SC_OPEN_MAX
- if ((dtablesize = sysconf (_SC_OPEN_MAX)) == -1)
- {
-@@ -802,6 +815,7 @@
- #else /* Assume BSD */
- dtablesize = getdtablesize ();
- #endif /* _SC_OPEN_MAX */
-+#endif /* BOGUS_CODE */
-
- for (j = dtablesize; j >= 3; j--)
- {
-@@ -4467,7 +4481,7 @@
- while ((event = authreq->event_q) != (EVENT_ENT *) NULL)
- {
- authreq->event_q = event->next;
-- free_event_final (event);
-+ free_event (event);
- }
-
- while ((event = authreq->freed_events) != (EVENT_ENT *) NULL)
diff --git a/net/radius/files/patch-ac b/net/radius/files/patch-ac
deleted file mode 100644
index e8412b89e176..000000000000
--- a/net/radius/files/patch-ac
+++ /dev/null
@@ -1,44 +0,0 @@
---- src/krb_conf.h~ Tue May 12 21:37:13 1998
-+++ src/krb_conf.h Thu Sep 17 18:33:35 1998
-@@ -20,7 +20,7 @@
- #ifndef KRB_CONF_DEFS
- #define KRB_CONF_DEFS
-
--#include <mit-copyright.h>
-+/* #include <mit-copyright.h> */
-
- /* Byte ordering */
- extern int krbONE;
---- src/krb_get_in_tkt.c.orig Tue May 12 21:37:16 1998
-+++ src/krb_get_in_tkt.c Thu Sep 17 18:33:35 1998
-@@ -13,7 +13,7 @@
-
- #endif /* lint */
-
--#include <mit-copyright.h>
-+/* #include <mit-copyright.h> */
- #include <krb.h>
- #include <des.h>
-
---- src/mit_stringtokey.c.orig Tue May 12 21:37:17 1998
-+++ src/mit_stringtokey.c Thu Sep 17 18:33:35 1998
-@@ -29,7 +29,7 @@
-
- #endif /* lint */
-
--#include <mit-copyright.h>
-+/* #include <mit-copyright.h> */
- #include <stdio.h>
- #include <memory.h>
- #include <des.h>
---- src/prot.h.orig Tue May 12 21:37:13 1998
-+++ src/prot.h Thu Sep 17 18:33:35 1998
-@@ -11,7 +11,7 @@
- * Include file with authentication protocol information.
- */
-
--#include <mit-copyright.h>
-+/* #include <mit-copyright.h> */
-
- #include "krb_conf.h"
-
diff --git a/net/radius/files/patch-ad b/net/radius/files/patch-ad
deleted file mode 100644
index d6fe8e6628e9..000000000000
--- a/net/radius/files/patch-ad
+++ /dev/null
@@ -1,67 +0,0 @@
---- src/rad.kerberos.c~ Fri Jun 26 00:40:50 1998
-+++ src/rad.kerberos.c Thu Sep 17 18:50:28 1998
-@@ -80,8 +80,8 @@
-
- #include <krb.h>
-
--static int krb_pass PROTO((AUTH_REQ *, int, char *,
-- int (*) (AUTH_REQ *, int, char *)));
-+static int krb_pass (AUTH_REQ *, int, char *,
-+ int (*) (AUTH_REQ *, int, char *));
-
- extern int debug_flag;
-
-@@ -225,8 +225,14 @@
- krbval = INTK_BADPW; /* Fail if type is bad somehow */
-
- /* get the ticket */
-- krbval = krb_get_in_tkt (userid, "", realm, "krbtgt", realm,
-+ krbval = krb_get_in_tkt (userid, KRB_INSTANCE, realm, "krbtgt", realm,
- DEFAULT_TKT_LIFE, passwd_to_key, NULL, passwd);
-+ /*
-+ * XXX
-+ * This can be spoofed fairly easily... Should attempt to authenticate
-+ * to some service on this machine (e.g., radius.thishost@REALM)
-+ * in order to ensure that the ticket we just got is really valid.
-+ */
- switch (krbval)
- {
- case INTK_OK:
-@@ -294,6 +300,37 @@
- krbval, userid, realm);
- break;
- }
-+#ifdef M_KERB
-+ /*
-+ * Ticket verification code based loosely on Berkeley klogin.c 8.3
-+ */
-+ if (krbreturn != EV_ACK) {
-+ dest_tkt();
-+ memset(passwd, 0, sizeof passwd);
-+ } else {
-+ struct sockaddr_in sin;
-+ char host[MAXHOSTNAMELEN], *p;
-+ AUTH_DAT authdata;
-+ KTEXT_ST ticket;
-+
-+ krb_get_local_addr(&sin);
-+ gethostname(host, sizeof host);
-+ if ((p = strchr(host, '.')) != 0)
-+ *p = '\0';
-+ krbval = krb_mk_req(&ticket, "radius", host, realm, 33);
-+ if (krbval == KSUCCESS) {
-+ krbval = krb_rd_req(&ticket, "radius", host,
-+ sin.sin_addr.s_addr, &authdata,
-+ "");
-+ }
-+ if (krbval != KSUCCESS) {
-+ logit(LOG_DAEMON, LOG_ERR,
-+ "Kerberos error verifying ticket for %s: %s",
-+ func, krb_err_txt[krbval]);
-+ krbreturn = EV_NAK;
-+ }
-+ }
-+#endif /* M_KERB */
-
- dest_tkt (); /* destroy the ticket */
- memset (passwd, 0, sizeof (passwd));
diff --git a/net/radius/files/patch-funcs.c b/net/radius/files/patch-funcs.c
deleted file mode 100644
index 1e230c83bef7..000000000000
--- a/net/radius/files/patch-funcs.c
+++ /dev/null
@@ -1,14 +0,0 @@
---- src/funcs.c.orig Sun Aug 26 03:03:53 2001
-+++ src/funcs.c Sun Aug 26 03:14:07 2001
-@@ -8333,9 +8333,9 @@
- return 1;
- }
-
--/*The following two lines do not compile on Solaris or Linux or BSDI. */
--#if !(defined(sys5) || defined(linux) || defined (BSDI))
- close (fileno(fp));
-+/*The following two lines do not compile on Solaris or Linux or BSDI. */
-+#if !(defined(sys5) || defined(linux) || defined (BSDI) || defined (__FreeBSD__))
- fileno(fp) = STDERR_FILENO;
- #endif /* sys5 */
-
diff --git a/net/radius/pkg-comment b/net/radius/pkg-comment
deleted file mode 100644
index f8f1541c398c..000000000000
--- a/net/radius/pkg-comment
+++ /dev/null
@@ -1 +0,0 @@
-A remote authentication server
diff --git a/net/radius/pkg-descr b/net/radius/pkg-descr
deleted file mode 100644
index 16bb3e68e43d..000000000000
--- a/net/radius/pkg-descr
+++ /dev/null
@@ -1,3 +0,0 @@
-radiusd is a server that handles access-requests for user authentication
-from radius clients. These clients may be terminal servers, Network
-Access Servers or other RADIUS servers.
diff --git a/net/radius/pkg-plist b/net/radius/pkg-plist
deleted file mode 100644
index e95bd907a68f..000000000000
--- a/net/radius/pkg-plist
+++ /dev/null
@@ -1,17 +0,0 @@
-bin/dnscheck
-bin/radcheck
-bin/radpass
-bin/radpwtst
-@exec mkdir -p %D/lib/radius/acct
-lib/radius/db/authfile.sample
-lib/radius/db/clients.sample
-lib/radius/db/conversion.pl.sample
-lib/radius/db/dictionary.sample
-lib/radius/db/engine.config.sample
-lib/radius/db/users.sample
-lib/radius/db/vendors.sample
-lib/radius/db/xas.fsm.sample
-sbin/radiusd
-@dirrm lib/radius/db
-@dirrm lib/radius/acct
-@dirrm lib/radius