Hi,
This is my first post here, so be gentle.
After I started a discussion over in the user's list about an updated freeradius package for CentOS 5, I decided to try my hand at submitting a spec file for freeradius-2.1.3. It's based on the latest package from Fedora 10.
The spec is included in-line, below. The src rpm is here (I will eventually be removing it):
http://www.m3freak.com/freeradius-2.1.3-1.el5.gl.src.rpm
Summary: High-performance and highly configurable free RADIUS server Name: freeradius Version: 2.1.3 Release: 1%{?dist} License: GPLv2+ and LGPLv2+ Group: System Environment/Daemons URL: http://www.freeradius.org/
Source0: ftp://ftp.freeradius.org/pub/radius/%{name}-server-%{version}.tar.bz2 Source100: freeradius-radiusd-init Source102: freeradius-logrotate Source103: freeradius-pam-conf
Patch0: freeradius-radiusd-conf.patch
Obsoletes: freeradius-dialupadmin freeradius-dialupadmin-ldap freeradius-dialupadmin-mysql freeradius-dialupadmin-postgresql
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: autoconf BuildRequires: gdbm-devel BuildRequires: libtool BuildRequires: libtool-ltdl-devel BuildRequires: openssl-devel BuildRequires: pam-devel BuildRequires: zlib-devel BuildRequires: net-snmp-devel BuildRequires: net-snmp-utils BuildRequires: readline-devel BuildRequires: libpcap-devel
Requires(pre): shadow-utils Requires(post): /sbin/ldconfig /sbin/chkconfig Requires(postun): /sbin/ldconfig Requires(preun): /sbin/chkconfig
%description The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many more features than Cistron or Livingston, and is much more configurable.
FreeRADIUS is an Internet authentication daemon, which implements the RADIUS protocol, as defined in RFC 2865 (and others). It allows Network Access Servers (NAS boxes) to perform authentication for dial-up users. There are also RADIUS clients available for Web servers, firewalls, Unix logins, and more. Using RADIUS allows authentication and authorization for a network to be centralized, and minimizes the amount of re-configuration which has to be done when adding or deleting new users.
%package libs Group: System Environment/Daemons Summary: FreeRADIUS shared libraries
%description libs The FreeRADIUS shared library
%package utils Group: System Environment/Daemons Summary: FreeRADIUS utilities Requires: %{name}-libs = %{version}-%{release}
%description utils The FreeRADIUS server has a number of features found in other servers, and additional features not found in any other server. Rather than doing a feature by feature comparison, we will simply list the features of the server, and let you decide if they satisfy your needs.
Support for RFC and VSA Attributes Additional server configuration attributes Selecting a particular configuration Authentication methods
%package devel Group: Development/Libraries Summary: FreeRADIUS Development Files Requires: %{name}-libs = %{version}-%{release}
%description devel These are the static libraries for the FreeRADIUS package.
%package ldap Summary: LDAP support for freeradius Group: System Environment/Daemons Requires: %{name}-libs = %{version}-%{release} BuildRequires: openldap-devel
%description ldap This plugin provides the LDAP support for the FreeRADIUS server project.
%package krb5 Summary: Kerberos 5 support for freeradius Group: System Environment/Daemons Requires: %{name}-libs = %{version}-%{release} BuildRequires: krb5-devel
%description krb5 This plugin provides the Kerberos 5 support for the FreeRADIUS server project.
%package perl Summary: Perl support for freeradius Group: System Environment/Daemons Requires: %{name}-libs = %{version}-%{release} Requires: perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version)) %if 0%{?fedora} BuildRequires: perl-devel %else BuildRequires: perl %endif BuildRequires: perl(ExtUtils::Embed)
%description perl This plugin provides the Perl support for the FreeRADIUS server project.
%package python Summary: Python support for freeradius Group: System Environment/Daemons Requires: %{name}-libs = %{version}-%{release} BuildRequires: python-devel
%description python This plugin provides the Python support for the FreeRADIUS server project.
%package mysql Summary: MySQL support for freeradius Group: System Environment/Daemons Requires: %{name}-libs = %{version}-%{release} BuildRequires: mysql-devel
%description mysql This plugin provides the MySQL support for the FreeRADIUS server project.
%package postgresql Summary: postgresql support for freeradius Group: System Environment/Daemons Requires: %{name}-libs = %{version}-%{release} BuildRequires: postgresql-devel
%description postgresql This plugin provides the postgresql support for the FreeRADIUS server project.
%package unixODBC Summary: unixODBC support for freeradius Group: System Environment/Daemons Requires: %{name}-libs = %{version}-%{release} BuildRequires: unixODBC-devel
%description unixODBC This plugin provides the unixODBC support for the FreeRADIUS server project.
%prep %setup -q -n %{name}-server-%{version} %patch0 -p1 -b .conf
%build %ifarch s390 s390x export CFLAGS="$RPM_OPT_FLAGS -fPIC" %else export CFLAGS="$RPM_OPT_FLAGS -fpic" %endif
%configure \ --libdir=%{_libdir}/freeradius \ --with-system-libtool \ --disable-ltdl-install \ --with-gnu-ld \ --with-threads \ --with-thread-pool \ --with-docdir=%{_docdir}/freeradius-%{version} \ --with-rlm-sql_postgresql-include-dir=/usr/include/pgsql \ --with-rlm-sql-postgresql-lib-dir=%{_libdir} \ --with-rlm-sql_mysql-include-dir=/usr/include/mysql \ --with-mysql-lib-dir=%{_libdir}/mysql \ --with-unixodbc-lib-dir=%{_libdir} \ --with-rlm-dbm-lib-dir=%{_libdir} \ --with-rlm-krb5-include-dir=/usr/kerberos/include \ --without-rlm_eap_ikev2 \ --without-rlm_sql_iodbc \ --without-rlm_sql_firebird \ --without-rlm_sql_db2 \ --without-rlm_sql_oracle
%if "%{_lib}" == "lib64" perl -pi -e 's:sys_lib_search_path_spec=.*:sys_lib_search_path_spec="/lib64 /usr/lib64 /usr/local/lib64":' libtool %endif
make
%install rm -rf $RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT/var/run/radiusd mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/{logrotate.d,pam.d,rc.d/init.d} mkdir -p $RPM_BUILD_ROOT/var/lib/radiusd # fix for bad libtool bug - can not rebuild dependent libs and bins #FIXME export LD_LIBRARY_PATH=$RPM_BUILD_ROOT/%{_libdir} make install R=$RPM_BUILD_ROOT # modify default configuration RADDB=$RPM_BUILD_ROOT%{_sysconfdir}/raddb perl -i -pe 's/^#user =.*$/user = radiusd/' $RADDB/radiusd.conf perl -i -pe 's/^#group =.*$/group = radiusd/' $RADDB/radiusd.conf #ldconfig -n $RPM_BUILD_ROOT/usr/lib/freeradius # logs mkdir -p $RPM_BUILD_ROOT/var/log/radius/radacct touch $RPM_BUILD_ROOT/var/log/radius/{radutmp,radius.log}
install -m 755 %{SOURCE100} $RPM_BUILD_ROOT/%{_initrddir}/radiusd install -m 644 %{SOURCE102} $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/radiusd install -m 644 %{SOURCE103} $RPM_BUILD_ROOT/%{_sysconfdir}/pam.d/radiusd
# remove unneeded stuff rm -rf doc/00-OLD rm -f $RPM_BUILD_ROOT/usr/sbin/rc.radiusd rm -rf $RPM_BUILD_ROOT/%{_libdir}/freeradius/*.a rm -rf $RPM_BUILD_ROOT/%{_libdir}/freeradius/*.la rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/sql/mssql rm -rf $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/sql/oracle rm -rf $RPM_BUILD_ROOT/%{_datadir}/dialup_admin/sql/oracle rm -rf $RPM_BUILD_ROOT/%{_datadir}/dialup_admin/lib/sql/oracle rm -rf $RPM_BUILD_ROOT/%{_datadir}/dialup_admin/lib/sql/drivers/oracle
# create links in /etc/raddb/sites-enabled to /etc/raddb/sites-available ln -s ../sites-available/control-socket $RADDB/sites-enabled/control-socket
# remove unsupported config files rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/raddb/experimental.conf
%clean rm -rf $RPM_BUILD_ROOT
%pre getent group radiusd >/dev/null || /usr/sbin/groupadd -r -g 95 radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd -u 95 -c "radiusd user" -s /sbin/nologin radiusd > /dev/null 2>&1 exit 0
%post /sbin/ldconfig if [ $1 = 1 ]; then /sbin/chkconfig --add radiusd fi
%preun if [ $1 = 0 ]; then /sbin/service radiusd stop > /dev/null 2>&1 /sbin/chkconfig --del radiusd fi
%postun if [ $1 -ge 1 ]; then /sbin/service radiusd condrestart >/dev/null 2>&1 || : fi /sbin/ldconfig
%files %defattr(-,root,root) %doc %{_docdir}/freeradius-%{version}/ %config(noreplace) %{_sysconfdir}/pam.d/radiusd %config(noreplace) %{_sysconfdir}/logrotate.d/radiusd %config(noreplace) %{_initrddir}/radiusd %dir %attr(755,radiusd,radiusd) /var/lib/radiusd # configs %dir %attr(750,root,radiusd) /etc/raddb %defattr(-,root,radiusd) %config(noreplace) /etc/raddb/dictionary %config(noreplace) /etc/raddb/acct_users %config(noreplace) /etc/raddb/attrs %config(noreplace) /etc/raddb/attrs.access_reject %config(noreplace) /etc/raddb/attrs.accounting_response %config(noreplace) /etc/raddb/attrs.pre-proxy %attr(640,root,radiusd) %config(noreplace) /etc/raddb/clients.conf %config(noreplace) /etc/raddb/hints %config(noreplace) /etc/raddb/huntgroups %attr(640,root,radiusd) %config(noreplace) /etc/raddb/sqlippool.conf %attr(640,root,radiusd) %config(noreplace) /etc/raddb/preproxy_users %attr(640,root,radiusd) %config(noreplace) /etc/raddb/proxy.conf %attr(640,root,radiusd) %config(noreplace) /etc/raddb/radiusd.conf %attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql.conf %dir %attr(640,root,radiusd) /etc/raddb/sql #%attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql/oracle/* %attr(640,root,radiusd) %config(noreplace) /etc/raddb/users %attr(640,root,radiusd) %config(noreplace) /etc/raddb/otp.conf %dir %attr(770,root,radiusd) /etc/raddb/certs /etc/raddb/certs/Makefile /etc/raddb/certs/README /etc/raddb/certs/xpextensions %attr(640,root,radiusd) %config(noreplace) /etc/raddb/certs/*.cnf %attr(750,root,radiusd) /etc/raddb/certs/bootstrap %dir %attr(640,root,radiusd) /etc/raddb/sites-available %attr(640,root,radiusd) /etc/raddb/sites-available/* %dir %attr(640,root,radiusd) /etc/raddb/sites-enabled %attr(640,root,radiusd) %config(noreplace) /etc/raddb/sites-enabled/* %attr(640,root,radiusd) %config(noreplace) /etc/raddb/eap.conf %attr(640,root,radiusd) /etc/raddb/example.pl %attr(640,root,radiusd) %config(noreplace) /etc/raddb/policy.conf /etc/raddb/policy.txt %attr(640,root,radiusd) %config(noreplace) /etc/raddb/templates.conf %dir %attr(640,root,radiusd) /etc/raddb/modules %attr(640,root,radiusd) % config(noreplace) /etc/raddb/modules/acct_unique %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/always %attr(640,root,radiusd) % config(noreplace) /etc/raddb/modules/attr_filter %attr(640,root,radiusd) % config(noreplace) /etc/raddb/modules/attr_rewrite %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/chap %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/checkval %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/counter %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/detail %attr(640,root,radiusd) % config(noreplace) /etc/raddb/modules/detail.example.com %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/detail.log %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/digest %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/echo %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/etc_group %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/exec %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/expiration %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/expr %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/files %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/inner-eap %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/ippool %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/logintime %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/linelog %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/mac2ip %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/mac2vlan %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/mschap %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/pam %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/pap %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/perl %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/passwd %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/policy %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/preprocess %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/radutmp %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/realm %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/smbpasswd %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/sql_log %attr(640,root,radiusd) % config(noreplace) /etc/raddb/modules/sqlcounter_expire_on_login %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/sradutmp %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/unix %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/wimax %dir %attr(700,radiusd,radiusd) /var/run/radiusd/ # binaries %defattr(-,root,root) /usr/sbin/checkrad /usr/sbin/radiusd /usr/sbin/radwatch /usr/sbin/radmin # man-pages %doc %{_mandir}/man1/* %doc %{_mandir}/man5/* %doc %{_mandir}/man8/* # dictionaries %dir %attr(755,root,root) /usr/share/freeradius /usr/share/freeradius/* # logs %dir %attr(700,radiusd,radiusd) /var/log/radius/ %dir %attr(700,radiusd,radiusd) /var/log/radius/radacct/ %attr(644,radiusd,radiusd) /var/log/radius/radutmp %config(noreplace) %attr(600,radiusd,radiusd) /var/log/radius/radius.log # RADIUS Loadable Modules %dir %attr(755,root,root) %{_libdir}/freeradius #%attr(755,root,root) %{_libdir}/freeradius/rlm_*.so* #%{_libdir}/freeradius/rlm_acctlog*.so %{_libdir}/freeradius/rlm_acct_unique.so %{_libdir}/freeradius/rlm_acct_unique-%{version}.so %{_libdir}/freeradius/rlm_acctlog.so %{_libdir}/freeradius/rlm_acctlog-%{version}.so %{_libdir}/freeradius/rlm_always.so %{_libdir}/freeradius/rlm_always-%{version}.so %{_libdir}/freeradius/rlm_attr_filter.so %{_libdir}/freeradius/rlm_attr_filter-%{version}.so %{_libdir}/freeradius/rlm_attr_rewrite.so %{_libdir}/freeradius/rlm_attr_rewrite-%{version}.so %{_libdir}/freeradius/rlm_chap.so %{_libdir}/freeradius/rlm_chap-%{version}.so %{_libdir}/freeradius/rlm_checkval.so %{_libdir}/freeradius/rlm_checkval-%{version}.so %{_libdir}/freeradius/rlm_copy_packet.so %{_libdir}/freeradius/rlm_copy_packet-%{version}.so %{_libdir}/freeradius/rlm_counter.so %{_libdir}/freeradius/rlm_counter-%{version}.so %{_libdir}/freeradius/rlm_dbm.so %{_libdir}/freeradius/rlm_dbm-%{version}.so %{_libdir}/freeradius/rlm_detail.so %{_libdir}/freeradius/rlm_detail-%{version}.so %{_libdir}/freeradius/rlm_digest.so %{_libdir}/freeradius/rlm_digest-%{version}.so %{_libdir}/freeradius/rlm_dynamic_clients.so %{_libdir}/freeradius/rlm_dynamic_clients-%{version}.so %{_libdir}/freeradius/rlm_eap.so %{_libdir}/freeradius/rlm_eap-%{version}.so %{_libdir}/freeradius/rlm_eap_gtc.so %{_libdir}/freeradius/rlm_eap_gtc-%{version}.so %{_libdir}/freeradius/rlm_eap_leap.so %{_libdir}/freeradius/rlm_eap_leap-%{version}.so %{_libdir}/freeradius/rlm_eap_md5.so %{_libdir}/freeradius/rlm_eap_md5-%{version}.so %{_libdir}/freeradius/rlm_eap_mschapv2.so %{_libdir}/freeradius/rlm_eap_mschapv2-%{version}.so %{_libdir}/freeradius/rlm_eap_peap.so %{_libdir}/freeradius/rlm_eap_peap-%{version}.so %{_libdir}/freeradius/rlm_eap_sim.so %{_libdir}/freeradius/rlm_eap_sim-%{version}.so %{_libdir}/freeradius/rlm_eap_tls.so %{_libdir}/freeradius/rlm_eap_tls-%{version}.so %{_libdir}/freeradius/rlm_eap_ttls.so %{_libdir}/freeradius/rlm_eap_ttls-%{version}.so %{_libdir}/freeradius/rlm_exec.so %{_libdir}/freeradius/rlm_exec-%{version}.so %{_libdir}/freeradius/rlm_expiration.so %{_libdir}/freeradius/rlm_expiration-%{version}.so %{_libdir}/freeradius/rlm_expr.so %{_libdir}/freeradius/rlm_expr-%{version}.so %{_libdir}/freeradius/rlm_fastusers.so %{_libdir}/freeradius/rlm_fastusers-%{version}.so %{_libdir}/freeradius/rlm_files.so %{_libdir}/freeradius/rlm_files-%{version}.so %{_libdir}/freeradius/rlm_ippool.so %{_libdir}/freeradius/rlm_ippool-%{version}.so %{_libdir}/freeradius/rlm_linelog.so %{_libdir}/freeradius/rlm_linelog-%{version}.so %{_libdir}/freeradius/rlm_logintime.so %{_libdir}/freeradius/rlm_logintime-%{version}.so %{_libdir}/freeradius/rlm_mschap.so %{_libdir}/freeradius/rlm_mschap-%{version}.so %{_libdir}/freeradius/rlm_otp.so %{_libdir}/freeradius/rlm_otp-%{version}.so %{_libdir}/freeradius/rlm_pam.so %{_libdir}/freeradius/rlm_pam-%{version}.so %{_libdir}/freeradius/rlm_pap.so %{_libdir}/freeradius/rlm_pap-%{version}.so %{_libdir}/freeradius/rlm_passwd.so %{_libdir}/freeradius/rlm_passwd-%{version}.so %{_libdir}/freeradius/rlm_policy.so %{_libdir}/freeradius/rlm_policy-%{version}.so %{_libdir}/freeradius/rlm_preprocess.so %{_libdir}/freeradius/rlm_preprocess-%{version}.so %{_libdir}/freeradius/rlm_radutmp.so %{_libdir}/freeradius/rlm_radutmp-%{version}.so %{_libdir}/freeradius/rlm_realm.so %{_libdir}/freeradius/rlm_realm-%{version}.so %{_libdir}/freeradius/rlm_sql.so %{_libdir}/freeradius/rlm_sql-%{version}.so %{_libdir}/freeradius/rlm_sql_log.so %{_libdir}/freeradius/rlm_sql_log-%{version}.so %{_libdir}/freeradius/rlm_sqlcounter.so %{_libdir}/freeradius/rlm_sqlcounter-%{version}.so %{_libdir}/freeradius/rlm_sqlippool.so %{_libdir}/freeradius/rlm_sqlippool-%{version}.so %{_libdir}/freeradius/rlm_unix.so %{_libdir}/freeradius/rlm_unix-%{version}.so
%files utils %defattr(-,root,root) /usr/bin/*
%files libs # RADIU shared libs %defattr(-,root,root) %attr(755,root,root) %{_libdir}/freeradius/lib*.so*
%files devel %defattr(-,root,root) #%attr(644,root,root) %{_libdir}/freeradius/*.a #%attr(644,root,root) %{_libdir}/freeradius/*.la %dir %attr(755,radiusd,radiusd) /usr/include/freeradius %attr(644,root,root) /usr/include/freeradius/*.h
%files krb5 %defattr(-,root,root) %{_libdir}/freeradius/rlm_krb5.so %{_libdir}/freeradius/rlm_krb5-%{version}.so %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/krb5
%files perl %defattr(-,root,root) %{_libdir}/freeradius/rlm_perl.so %{_libdir}/freeradius/rlm_perl-%{version}.so
%files python %defattr(-,root,root) %{_libdir}/freeradius/rlm_python.so %{_libdir}/freeradius/rlm_python-%{version}.so
%files mysql %defattr(-,root,root) %dir %attr(640,root,radiusd) /etc/raddb/sql/mysql %attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql/mysql/* %{_libdir}/freeradius/rlm_sql_mysql.so %{_libdir}/freeradius/rlm_sql_mysql-%{version}.so
%files postgresql %defattr(-,root,root) %dir %attr(640,root,radiusd) /etc/raddb/sql/postgresql %attr(640,root,radiusd) %config(noreplace) /etc/raddb/sql/postgresql/* %{_libdir}/freeradius/rlm_sql_postgresql.so %{_libdir}/freeradius/rlm_sql_postgresql-%{version}.so
%files ldap %defattr(-,root,root) %attr(640,root,radiusd) %config(noreplace) /etc/raddb/ldap.attrmap %{_libdir}/freeradius/rlm_ldap.so %{_libdir}/freeradius/rlm_ldap-%{version}.so %attr(640,root,radiusd) %config(noreplace) /etc/raddb/modules/ldap
%files unixODBC %defattr(-,root,root) %{_libdir}/freeradius/rlm_sql_unixodbc.so %{_libdir}/freeradius/rlm_sql_unixodbc-%{version}.so
%changelog * Wed Mar 25 2009 Kanwar Ranbir Sandhu ranbirsandhu@globalive.com - 2.1.3-1.1 - initial CentOS 5 release
* Thu Dec 4 2008 John Dennis jdennis@redhat.com - 2.1.3-1 - upgrade to latest upstream release, upstream summary follows: The focus of this release is stability. Feature Improvements: * Allow running with "user=radiusd" and binding to secure sockets. * Start sending Status-Server "are you alive" messages earlier, which helps with proxying multiple realms to a home server. * Removed thread pool code from rlm_perl. It's not necessary. * Added example Perl configuration to raddb/modules/perl * Force OpenSSL to support certificates with SHA256. This seems to be necessary for WiMAX certs. Bug fixes: * Fix Debian patch to allow it to build. * Fix potential NULL dereference in debugging mode on certain platforms for TTLS and PEAP inner tunnels. * Fix uninitialized memory in handling of vendor definitions * Fix parsing of quoted (but non-string) attributes in the "users" file. * Initialize uknown NAS IP to 255.255.255.255, rather than 0.0.0.0 * use SUN_LEN in control socket, to avoid truncation on some platforms. * Correct internal handling of "debug condition" to prevent it from being over-written. * Check return code of regcomp in "unlang", so that invalid regular expressions are caught rather than mishandled. * Make rlm_sql use <ltdl.h>. Addresses bug #610. * Document list "type = status" better. Closes bug #580. * Set "default days" for certificates, because OpenSSL won't do it. This closes bug #615. * Reference correct list in example raddb/modules/ldap. Closes #596. * Increase default schema size for Acct-Session-Id to 64. Closes #540. * Fix use of temporary files in dialup-admin. Closes #605 and addresses CVE-2008-4474. * Addressed a number of minor issues found by Coverity. * Added DHCP option 150 to the dictionary. Closes #618.
* Wed Dec 3 2008 John Dennis jdennis@redhat.com - 2.1.1-8 - add --with-system-libtool to configure as a workaround for undefined reference to lt__PROGRAM__LTX_preloaded_symbols
* Mon Dec 1 2008 John Dennis jdennis@redhat.com - 2.1.1-7 - add obsoletes tag for dialupadmin subpackages which were removed
* Mon Dec 1 2008 John Dennis jdennis@redhat.com - 2.1.1-6 - add readline-devel BuildRequires
* Fri Nov 21 2008 John Dennis jdennis@redhat.com - 2.1.1-3 - make spec file buildable on RHEL5.2 by making perl-devel a fedora only dependency. - remove diaupadmin packages, it's not well supported and there are problems with it.
* Fri Sep 26 2008 John Dennis jdennis@redhat.com - 2.1.1-1 - Resolves: bug #464119 bootstrap code could not create initial certs in /etc/raddb/certs because permissions were 750, radiusd running as euid radiusd could not write there, permissions now 770
* Thu Sep 25 2008 John Dennis jdennis@redhat.com - 2.1.1-1 - upgrade to new upstream 2.1.1 release
* Wed Jul 30 2008 John Dennis jdennis@redhat.com - 2.0.5-2 - Resolves: bug #453761: FreeRADIUS %%post should not include chown -R specify file attributes for /etc/raddb/ldap.attrmap fix consistent use of tabs/spaces (rpmlint warning)
* Mon Jun 9 2008 John Dennis jdennis@redhat.com - 2.0.5-1 - upgrade to latest upstream, see Changelog for details, upstream now has more complete fix for bug #447545, local patch removed
* Wed May 28 2008 John Dennis jdennis@redhat.com - 2.0.4-1 - upgrade to latest upstream, see Changelog for details - resolves: bug #447545: freeradius missing /etc/raddb/sites-available/inner-tunnel
* Fri May 16 2008 jdennis@redhat.com - 2.0.3-3 - # Temporary fix for bug #446864, turn off optimization
* Fri Apr 18 2008 John Dennis jdennis@redhat.com - 2.0.3-2 - remove support for radrelay, it's different now - turn off default inclusion of SQL config files in radiusd.conf since SQL is an optional RPM install - remove mssql config files
* Thu Apr 17 2008 John Dennis jdennis@redhat.com - 2.0.3-1 - Upgrade to current upstream 2.0.3 release - Many thanks to Enrico Scholz for his spec file suggestions incorporated here - Resolve: bug #438665: Contains files owned by buildsystem - Add dialupadmin-mysql, dialupadmin-postgresql, dialupadmin-ldap subpackages to further partition external dependencies. - Clean up some unnecessary requires dependencies - Add versioned requires between subpackages
* Tue Mar 18 2008 Tom "spot" Callaway tcallawa@redhat.com - 2.0.2-2 - add Requires for versioned perl (libperl.so)
* Thu Feb 28 2008 jdennis@redhat.com - 2.0.2-1 - upgrade to new 2.0 release - split into subpackages for more fine grained installation
* Tue Feb 19 2008 Fedora Release Engineering rel-eng@fedoraproject.org - 1.1.7-4.4.ipa - Autorebuild for GCC 4.3
* Thu Dec 06 2007 Release Engineering <rel-eng at fedoraproject dot org> - 1.1.7-3.4.ipa - Rebuild for deps
* Sat Nov 10 2007 jdennis@redhat.com - 1.1.7-3.3.ipa - add support in rlm_ldap for reading clients from ldap - fix TLS parameter controling if a cert which fails to validate will be accepted (i.e. self-signed), rlm_ldap config parameter=tls_require_cert ldap LDAP_OPT_X_TLS_REQUIRE_CERT parameter was being passed to ldap_set_option() when it should have been ldap_int_tls_config()
* Sat Nov 3 2007 jdennis@redhat.com - 1.1.7-3.2.ipa - add support in rlm_ldap for SASL/GSSAPI binds to the LDAP server
* Mon Sep 17 2007 Thomas Woerner twoerner@redhat.com 1.1.7-3.1 - made init script fully lsb conform
* Mon Sep 17 2007 Thomas Woerner twoerner@redhat.com 1.1.7-3 - fixed initscript problem (rhbz#292521)
* Tue Aug 28 2007 Thomas Woerner twoerner@redhat.com 1.1.7-2 - fixed initscript for LSB (rhbz#243671, rhbz#243928) - fixed license tag
* Tue Aug 7 2007 Thomas Woerner twoerner@redhat.com 1.1.7-1 - new versin 1.1.7 - install snmp MIB files - dropped LDAP_DEPRECATED flag, it is upstream - marked config files for sub packages as config (rhbz#240400) - moved db files to /var/lib/raddb (rhbz#199082)
* Fri Jun 15 2007 Thomas Woerner twoerner@redhat.com 1.1.6-2 - radiusd expects /etc/raddb to not be world readable or writable /etc/raddb now belongs to radiusd, post script sets permissions
* Fri Jun 15 2007 Thomas Woerner twoerner@redhat.com 1.1.6-1 - new version 1.1.6
* Fri Mar 9 2007 Thomas Woerner twoerner@redhat.com 1.1.5-1 - new version 1.1.5 - no /etc/raddb/otppasswd.sample anymore - build is pie by default, dropped pie patch - fixed build requirement for perl (perl-devel)
* Fri Feb 23 2007 Karsten Hopp karsten@redhat.com 1.1.3-3 - remove trailing dot from summary - fix buildroot - fix post/postun/preun requirements - use rpm macros
* Fri Dec 8 2006 Thomas Woerner twoerner@redhat.com 1.1.3-2.1 - rebuild for new postgresql library version
* Thu Nov 30 2006 Thomas Woerner twoerner@redhat.com 1.1.3-2 - fixed ldap code to not use internals, added LDAP_DEPRECATED compile time flag (#210912)
* Tue Aug 15 2006 Thomas Woerner twoerner@redhat.com 1.1.3-1 - new version 1.1.3 with lots of upstream bug fixes, some security fixes (#205654)
* Tue Aug 15 2006 Thomas Woerner twoerner@redhat.com 1.1.2-2 - commented out include for sql.conf in radiusd.conf (#202561)
* Wed Jul 12 2006 Jesse Keating jkeating@redhat.com - 1.1.2-1.1 - rebuild
* Thu Jun 1 2006 Thomas Woerner twoerner@redhat.com 1.1.2-1 - new version 1.1.2
* Wed May 31 2006 Thomas Woerner twoerner@redhat.com 1.1.1-1 - new version 1.1.1 - fixed incorrect rlm_sql globbing (#189095) Thanks to Yanko Kaneti for the fix. - fixed chown syntax in post script (#182777) - dropped gcc34, libdir and realloc-return patch - spec file cleanup with additional libtool build fixes
* Fri Feb 10 2006 Jesse Keating jkeating@redhat.com - 1.0.5-1.2 - bump again for double-long bug on ppc(64)
* Tue Feb 07 2006 Jesse Keating jkeating@redhat.com - 1.0.5-1.1 - rebuilt for new gcc4.1 snapshot and glibc changes
* Tue Dec 13 2005 Thomas Woerner twoerner@redhat.com 1.0.5-1 - new version 1.0.5
* Fri Dec 09 2005 Jesse Keating jkeating@redhat.com - rebuilt
* Sat Nov 12 2005 Tom Lane tgl@redhat.com - 1.0.4-5 - Rebuild due to mysql update.
* Wed Nov 9 2005 Tomas Mraz tmraz@redhat.com - 1.0.4-4 - rebuilt with new openssl - fixed ignored return value of realloc
* Fri Sep 30 2005 Tomas Mraz tmraz@redhat.com - 1.0.4-3 - use include instead of pam_stack in pam config
* Wed Jul 20 2005 Thomas Woerner twoerner@redhat.com 1.0.4-2 - added missing build requires for libtool-ltdl-devel (#160877) - modified file list to get a report for missing plugins
* Tue Jun 28 2005 Thomas Woerner twoerner@redhat.com 1.0.4-1 - new version 1.0.4 - droppend radrelay patch (fixed upstream)
* Thu Apr 14 2005 Warren Togami wtogami@redhat.com 1.0.2-2 - rebuild against new postgresql-libs
* Mon Apr 4 2005 Thomas Woerner twoerner@redhat.com 1.0.2-1 - new version 1.0.2
* Fri Nov 19 2004 Thomas Woerner twoerner@redhat.com 1.0.1-3 - rebuild for MySQL 4 - switched over to installed libtool
* Fri Nov 5 2004 Thomas Woerner twoerner@redhat.com 1.0.1-2 - Fixed install problem of radeapclient (#138069)
* Wed Oct 6 2004 Thomas Woerner twoerner@redhat.com 1.0.1-1 - new version 1.0.1 - applied radrelay CVS patch from Kevin Bonner
* Wed Aug 25 2004 Warren Togami wtogami@redhat.com 1.0.0-3 - BuildRequires pam-devel and libtool - Fix errant text in description - Other minor cleanups
* Wed Aug 25 2004 Thomas Woerner twoerner@redhat.com 1.0.0-2.1 - renamed /etc/pam.d/radius to /etc/pam.d/radiusd to match default configuration (#130613)
* Wed Aug 25 2004 Thomas Woerner twoerner@redhat.com 1.0.0-2 - fixed BuildRequires for openssl-devel (#130606)
* Mon Aug 16 2004 Thomas Woerner twoerner@redhat.com 1.0.0-1 - 1.0.0 final
* Mon Jul 5 2004 Thomas Woerner twoerner@redhat.com 1.0.0-0.pre3.2 - added buildrequires for zlib-devel (#127162) - fixed libdir patch to prefer own libeap instead of installed one (#127168) - fixed samba account maps in LDAP for samba v3 (#127173)
* Thu Jul 1 2004 Thomas Woerner twoerner@redhat.com 1.0.0-0.pre3.1 - third "pre" release of version 1.0.0 - rlm_ldap is using SASLv2 (#126507)
* Tue Jun 15 2004 Elliot Lee sopwith@redhat.com - rebuilt
* Thu Jun 3 2004 Thomas Woerner twoerner@redhat.com 0.9.3-4.1 - fixed BuildRequires for gdbm-devel
* Tue Mar 30 2004 Harald Hoyer harald@redhat.com - 0.9.3-4 - gcc34 compilation fixes
* Tue Mar 02 2004 Elliot Lee sopwith@redhat.com - rebuilt
* Tue Feb 24 2004 Thomas Woerner twoerner@redhat.com 0.9.3-3.2 - added sql scripts for rlm_sql to documentation (#116435)
* Fri Feb 13 2004 Elliot Lee sopwith@redhat.com - rebuilt
* Thu Feb 5 2004 Thomas Woerner twoerner@redhat.com 0.9.3-2.1 - using -fPIC instead of -fpic for s390 ans s390x
* Thu Feb 5 2004 Thomas Woerner twoerner@redhat.com 0.9.3-2 - radiusd is pie, now
* Tue Nov 25 2003 Thomas Woerner twoerner@redhat.com 0.9.3-1 - new version 0.9.3 (bugfix release)
* Fri Nov 7 2003 Thomas Woerner twoerner@redhat.com 0.9.2-1 - new version 0.9.2
* Mon Sep 29 2003 Thomas Woerner twoerner@redhat.com 0.9.1-1 - new version 0.9.1
* Mon Sep 22 2003 Nalin Dahyabhai nalin@redhat.com 0.9.0-2.2 - modify default PAM configuration to remove the directory part of the module name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on multilib systems will always load the right module for the architecture - modify default PAM configuration to use pam_stack
* Mon Sep 1 2003 Thomas Woerner twoerner@redhat.com 0.9.0-2.1 - com_err.h moved to /usr/include/et
* Tue Jul 22 2003 Thomas Woerner twoerner@redhat.com 0.9.0-1 - 0.9.0 final
* Wed Jul 16 2003 Thomas Woerner twoerner@redhat.com 0.9.0-0.9.0 - new version 0.9.0 pre3
* Thu May 22 2003 Thomas Woerner twoerner@redhat.com 0.8.1-6 - included directory /var/log/radius/radacct for logrotate
* Wed May 21 2003 Thomas Woerner twoerner@redhat.com 0.8.1-5 - moved log and run dir to files section, cleaned up post
* Wed May 21 2003 Thomas Woerner twoerner@redhat.com 0.8.1-4 - added missing run dir in post
* Tue May 20 2003 Thomas Woerner twoerner@redhat.com 0.8.1-3 - fixed module load patch
* Fri May 16 2003 Thomas Woerner twoerner@redhat.com - removed la files, removed devel package - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql, freeradius-unixODBC - fixed requires and buildrequires - create logging dir in post if it does not exist - fixed module load without la files
* Thu Apr 17 2003 Thomas Woerner twoerner@redhat.com - Initial build.
Regards,
Ranbir
Kanwar Ranbir Sandhu wrote:
Hi,
This is my first post here, so be gentle.
After I started a discussion over in the user's list about an updated freeradius package for CentOS 5, I decided to try my hand at submitting a spec file for freeradius-2.1.3. It's based on the latest package from Fedora 10.
The spec is included in-line, below. The src rpm is here (I will eventually be removing it):
Hi Ranbir,
[So now we have both Karanbir and Ranbir :-) ]
First-level sanity check...
Tried rebuilds of your SRPM on both i386 and x86_64. Both built OK after satisfying all the build requirements. On install get a lot of warning errors about the group radiusd not existing. See below. Can't really test functionality as I don't need freeradius, but that's what the testing repo is for.
Phil
--------------------------------------------------------------------
Running Transaction Installing : freeradius-libs [ 1/11] Installing : freeradius-krb5 [ 2/11] warning: group radiusd does not exist - using root Installing : freeradius-devel [ 3/11] warning: user radiusd does not exist - using root warning: group radiusd does not exist - using root Installing : freeradius-postgresql [ 4/11] warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root warning: group radiusd does not exist - using root Installing : freeradius-unixODBC [ 5/11] Installing : freeradius-python [ 6/11] Installing : freeradius [ 7/11] Installing : freeradius-perl [ 8/11] Installing : freeradius-ldap [ 9/11] Installing : freeradius-mysql [10/11] Installing : freeradius-utils [11/11]
Installed: freeradius.x86_64 0:2.1.3-1.el5 freeradius-devel.x86_64 0:2.1.3-1.el5 freeradius-krb5.x86_64 0:2.1.3-1.el5 freeradius-ldap.x86_64 0:2.1.3-1.el5 freeradius-libs.x86_64 0:2.1.3-1.el5 freeradius-mysql.x86_64 0:2.1.3-1.el5 freeradius-perl.x86_64 0:2.1.3-1.el5 freeradius-postgresql.x86_64 0:2.1.3-1.el5 freeradius-python.x86_64 0:2.1.3-1.el5 freeradius-unixODBC.x86_64 0:2.1.3-1.el5 freeradius-utils.x86_64 0:2.1.3-1.el5 Complete!
On Thu, 26 Mar 2009 08:54:10 -0400, Phil Schaffner
[So now we have both Karanbir and Ranbir :-) ]
Ya. :) I thought it was pretty funny, too.
First-level sanity check...
Tried rebuilds of your SRPM on both i386 and x86_64. Both built OK after satisfying all the build requirements. On install get a lot of warning errors about the group radiusd not existing. See below. Can't really test functionality as I don't need freeradius, but that's what the testing repo is for.
I don't see why that would be since this bit of code is supposed to handle the group check:
%pre getent group radiusd >/dev/null || /usr/sbin/groupadd -r -g 95 radiusd getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd -u 95 -c "radiusd user" -s /sbin/nologin radiusd > /dev/null 2>&1 exit 0
I don't see any issues with it. Am I missing something?
BTW, the spec is just about untouched from the Fedora 10 version I got it from.
Regards,
Ranbir
On Thu, 2009-03-26 at 08:54 -0400, Phil Schaffner wrote:
Tried rebuilds of your SRPM on both i386 and x86_64. Both built OK after satisfying all the build requirements. On install get a lot of warning errors about the group radiusd not existing. See below. Can't really test functionality as I don't need freeradius, but that's what the testing repo is for.
Okay, so I think I know why it happened, but I don't know how to fix it.
As I said yesterday, the freeradius RPM does a check for the radiusd user/group. If it's found, great, but if it isn't, the user and group are created.
Based on your log of the install, the freeradius package wasn't the first one to be installed - freeradius-libs was. The SPEC doesn't include the "radiusd" user/group check during the install of the other freeradius pacakges, but some of them do expect the user to be present.
So, the warnings were spit out because radiusd was indeed not found. That user wasn't actually created until the freeradius package was installed a little later in the install process.
I'm not sure how this would be handled if the install was via yum. Would freeradius be installed first, thus avoiding the errors?
Is there a way to indicate which package should be installed first? Is it even worth it?
Regards,
Ranbir
Kanwar Ranbir Sandhu wrote:
I'm not sure how this would be handled if the install was via yum. Would freeradius be installed first, thus avoiding the errors?
Is there a way to indicate which package should be installed first? Is it even worth it?
Yes, you can influence the order. I expect you have
Requires: freeradius
for freeradius-libs in the .spec. If you replace that by
PreReq: freeradius
the freeradius RPM will get installed before freeradius-libs. You probably want to push this change upstream by creating a Bugzilla entry for Fedora ;)
Hope that helps, Niels
On Mar 30, 2009, at 8:17 AM, Niels de Vos wrote:
Kanwar Ranbir Sandhu wrote:
I'm not sure how this would be handled if the install was via yum. Would freeradius be installed first, thus avoiding the errors?
Is there a way to indicate which package should be installed first? Is it even worth it?
Yes, you can influence the order. I expect you have
Requires: freeradius
for freeradius-libs in the .spec. If you replace that by
PreReq: freeradius
the freeradius RPM will get installed before freeradius-libs. You probably want to push this change upstream by creating a Bugzilla entry for Fedora ;)
This is not true for years. All requires are used for ordering, prereq and requires are handled identically.
All that adding prereq does is not ignore a dependency in a loop.
If you have a loop, then you need to fix the loop, not pretend that PreReq: does anything useful.
73 de Jeff
Jeff Johnson wrote:
On Mar 30, 2009, at 8:17 AM, Niels de Vos wrote:
Kanwar Ranbir Sandhu wrote:
I'm not sure how this would be handled if the install was via yum. Would freeradius be installed first, thus avoiding the errors?
Is there a way to indicate which package should be installed first? Is it even worth it?
Yes, you can influence the order. I expect you have
Requires: freeradius
for freeradius-libs in the .spec. If you replace that by
PreReq: freeradius
the freeradius RPM will get installed before freeradius-libs. You probably want to push this change upstream by creating a Bugzilla entry for Fedora ;)
This is not true for years. All requires are used for ordering, prereq and requires are handled identically.
Oh, sorry. My knowledge might be outdated... Still need to use Fedora Core 4 for development and here it still works.
All that adding prereq does is not ignore a dependency in a loop.
If you have a loop, then you need to fix the loop, not pretend that PreReq: does anything useful.
Well, this mail wasn't about a loop. It's about ordering of packages where <package>-libs depends on a %pre-scriptlet of <package>.
Can you tell us the correct solutions for this problem?
Thanks, Niels
On Mar 30, 2009, at 8:40 AM, Niels de Vos wrote:
Jeff Johnson wrote:
On Mar 30, 2009, at 8:17 AM, Niels de Vos wrote:
Kanwar Ranbir Sandhu wrote:
I'm not sure how this would be handled if the install was via yum. Would freeradius be installed first, thus avoiding the errors?
Is there a way to indicate which package should be installed first? Is it even worth it?
Yes, you can influence the order. I expect you have
Requires: freeradius
for freeradius-libs in the .spec. If you replace that by
PreReq: freeradius
the freeradius RPM will get installed before freeradius-libs. You probably want to push this change upstream by creating a Bugzilla entry for Fedora ;)
This is not true for years. All requires are used for ordering, prereq and requires are handled identically.
Oh, sorry. My knowledge might be outdated... Still need to use Fedora Core 4 for development and here it still works.
That isn't true for FC4 either. Its been almost a decade since requires and prereq are handled identically.
All that adding prereq does is not ignore a dependency in a loop.
If you have a loop, then you need to fix the loop, not pretend that PreReq: does anything useful.
Well, this mail wasn't about a loop. It's about ordering of packages where <package>-libs depends on a %pre-scriptlet of <package>.
If there is *ANY* effect on ordering by switching to PreReq:, its *ALL* about a loop.
Can you tell us the correct solutions for this problem?
Not without verifying first that no loops are involved.
Add -vv to an install or upgrade, confirm that there are no loops involved (you will see LOOP: ... messages)
Otherwise, adding an additional dependency (use Requires: or PreReq: to taste, they are synonyms) will change package install (but not erase, that's a different problem) ordering.
73 de Jeff
Jeff Johnson wrote:
On Mar 30, 2009, at 8:40 AM, Niels de Vos wrote:
Jeff Johnson wrote:
On Mar 30, 2009, at 8:17 AM, Niels de Vos wrote:
Kanwar Ranbir Sandhu wrote:
I'm not sure how this would be handled if the install was via yum. Would freeradius be installed first, thus avoiding the errors?
Is there a way to indicate which package should be installed first? Is it even worth it?
Yes, you can influence the order. I expect you have
Requires: freeradius
for freeradius-libs in the .spec. If you replace that by
PreReq: freeradius
the freeradius RPM will get installed before freeradius-libs. You probably want to push this change upstream by creating a Bugzilla entry for Fedora ;)
This is not true for years. All requires are used for ordering, prereq and requires are handled identically.
Oh, sorry. My knowledge might be outdated... Still need to use Fedora Core 4 for development and here it still works.
That isn't true for FC4 either. Its been almost a decade since requires and prereq are handled identically.
I'm not convinced on this point :-/ Pretty sure there is a difference when installing only two RPMs with changed Requires/PreReq. However I checked with rpm, not yum?! (yes, without loops)
[this might get too much off-topic - we can leave it open like this]
All that adding prereq does is not ignore a dependency in a loop.
If you have a loop, then you need to fix the loop, not pretend that PreReq: does anything useful.
Well, this mail wasn't about a loop. It's about ordering of packages where <package>-libs depends on a %pre-scriptlet of <package>.
If there is *ANY* effect on ordering by switching to PreReq:, its *ALL* about a loop.
Can you tell us the correct solutions for this problem?
Not without verifying first that no loops are involved.
Add -vv to an install or upgrade, confirm that there are no loops involved (you will see LOOP: ... messages)
Otherwise, adding an additional dependency (use Requires: or PreReq: to taste, they are synonyms) will change package install (but not erase, that's a different problem) ordering.
Ok. Thanks for explaining :) Niels
On Mar 30, 2009, at 9:05 AM, Niels de Vos wrote:
That isn't true for FC4 either. Its been almost a decade since requires and prereq are handled identically.
I'm not convinced on this point :-/ Pretty sure there is a difference when installing only two RPMs with changed Requires/PreReq. However I checked with rpm, not yum?! (yes, without loops)
So shop a different answer if you wish. I'm just the guy who wrote the code in RPM and who tries to explain how to fix packaging problems. If you don't like or believe my answers, by all means, shop elsewhere.
[this might get too much off-topic - we can leave it open like this]
All that adding prereq does is not ignore a dependency in a loop.
If you have a loop, then you need to fix the loop, not pretend that PreReq: does anything useful.
Well, this mail wasn't about a loop. It's about ordering of packages where <package>-libs depends on a %pre-scriptlet of <package>.
If there is *ANY* effect on ordering by switching to PreReq:, its *ALL* about a loop.
Can you tell us the correct solutions for this problem?
Not without verifying first that no loops are involved.
Add -vv to an install or upgrade, confirm that there are no loops involved (you will see LOOP: ... messages)
Otherwise, adding an additional dependency (use Requires: or PreReq: to taste, they are synonyms) will change package install (but not erase, that's a different problem) ordering.
Ok. Thanks for explaining :)
Hint: there is almost certainly a dependency loop because you are trying to use an executable in a %pre script in the *-libs package that has not yet been installed.
So the library package needs to be installed before the executable you are trying to use in a %pre script.
That basically means that you cannot do what you are attempting in the *-libs %pre script.
Which then turns the question into How do I do <mumble> if I can't use a %pre script in a *-libs package?
hth
73 de Jeff
Jeff Johnson wrote:
On Mar 30, 2009, at 9:05 AM, Niels de Vos wrote:
That isn't true for FC4 either. Its been almost a decade since requires and prereq are handled identically.
I'm not convinced on this point :-/ Pretty sure there is a difference when installing only two RPMs with changed Requires/PreReq. However I checked with rpm, not yum?! (yes, without loops)
So shop a different answer if you wish. I'm just the guy who wrote the code in RPM and who tries to explain how to fix packaging problems. If you don't like or believe my answers, by all means, shop elsewhere.
Please don't get me wrong, I'm grateful for you advise and explanations.
It's just that I've checked behavior of Requires/PreReq a long time ago with FC4 and am surprised to see that my assumptions are (completely) wrong...
Otherwise, adding an additional dependency (use Requires: or PreReq: to taste, they are synonyms) will change package install (but not erase, that's a different problem) ordering.
Ok. Thanks for explaining :)
Hint: there is almost certainly a dependency loop because you are trying to use an executable in a %pre script in the *-libs package that has not yet been installed.
So the library package needs to be installed before the executable you are trying to use in a %pre script.
The original question as about creating a user/group as owner of some files in the libs-package. The creation was done by %pre in the base-package. Installing the -libs works, but gives errors about the missing user/group.
A missing binary or library is obviously not the case here.
That basically means that you cannot do what you are attempting in the *-libs %pre script.
Which then turns the question into How do I do <mumble> if I can't use a %pre script in a *-libs package?
My conclusion: Put the creation of users/groups in the <package>-libs, <package> will be installed after <package>-libs.
Thanks, Niels (who is still a bit confused)
On Mar 30, 2009, at 9:39 AM, Niels de Vos wrote:
Jeff Johnson wrote:
On Mar 30, 2009, at 9:05 AM, Niels de Vos wrote:
That isn't true for FC4 either. Its been almost a decade since requires and prereq are handled identically.
I'm not convinced on this point :-/ Pretty sure there is a difference when installing only two RPMs with changed Requires/PreReq. However I checked with rpm, not yum?! (yes, without loops)
So shop a different answer if you wish. I'm just the guy who wrote the code in RPM and who tries to explain how to fix packaging problems. If you don't like or believe my answers, by all means, shop elsewhere.
Please don't get me wrong, I'm grateful for you advise and explanations.
It's just that I've checked behavior of Requires/PreReq a long time ago with FC4 and am surprised to see that my assumptions are (completely) wrong...
NP. I'm just trying for solid analysis of packaging problems. You're not the only person who thinks that replacing Requires: with PreReq: does something meaningful.
(aside) There is most definitely an effect (because the dependency is not ignored in a loop) if PreReq: instead of Requires: is used. But its about *loops*, not some magical property of PreReq:.
And relying on how RPM breaks loops is too obscure and feeble for reliable packaging, because of nested dependency loops and erasure ordering and ...
Otherwise, adding an additional dependency (use Requires: or PreReq: to taste, they are synonyms) will change package install (but not erase, that's a different problem) ordering.
Ok. Thanks for explaining :)
Hint: there is almost certainly a dependency loop because you are trying to use an executable in a %pre script in the *-libs package that has not yet been installed.
So the library package needs to be installed before the executable you are trying to use in a %pre script.
The original question as about creating a user/group as owner of some files in the libs-package. The creation was done by %pre in the base-package. Installing the -libs works, but gives errors about the missing user/group.
A missing binary or library is obviously not the case here.
OK, there's hope that the packaging can be adjusted to fix the problem then. Note that I haven't looked at the root cause of the problem, have just been responding to the suggested replace with PreReq: as a solution.
That basically means that you cannot do what you are attempting in the *-libs %pre script.
Which then turns the question into How do I do <mumble> if I can't use a %pre script in a *-libs package?
My conclusion: Put the creation of users/groups in the <package>-libs, <package> will be installed after <package>-libs.
That will most definitely work if *-libs is always the 1st package of the set that needs the user/group added.
All other packages then need to depend on the 1st package which adds the user/group. Either PreReq: or Requires: should accomplish that.
No other adornment, like Requires(pre):, will be needed. You can add the (pre) context marker in the *-libs package if you wish; other packages should just use a Requires: (or PreReq: if you want, it simply does not matter).
73 de Jeff
On Wed, 2009-03-25 at 17:41 -0400, Kanwar Ranbir Sandhu wrote:
This is my first post here, so be gentle.
After I started a discussion over in the user's list about an updated freeradius package for CentOS 5, I decided to try my hand at submitting a spec file for freeradius-2.1.3. It's based on the latest package from Fedora 10.
The spec is included in-line, below. The src rpm is here (I will eventually be removing it):
So, is anyone else testing this? How long should I expect to wait for my pacakge to get into the centosplus repo?
Regards,
Ranbir
Kanwar Ranbir Sandhu wrote:
So, is anyone else testing this? How long should I expect to wait for my pacakge to get into the centosplus repo?
at the moment, till the 5.3 stuff settles ( about 3 - 4 days ) no more packages in any repo unless its something very urgent ( some of the pending updates for example ).
Immediately after that the package should be in the testing repo, I guess.
On Wed, 2009-03-25 at 17:41 -0400, Kanwar Ranbir Sandhu wrote:
After I started a discussion over in the user's list about an updated freeradius package for CentOS 5, I decided to try my hand at submitting a spec file for freeradius-2.1.3. It's based on the latest package from Fedora 10.
The spec is included in-line, below. The src rpm is here (I will eventually be removing it):
So, is anyone else testing this? How long should I expect to wait for my pacakge to get into the centosplus repo?
Regards,
Ranbir
On Mon, 30 Mar 2009 14:20:20 -0400, Kanwar Ranbir Sandhu m3freak@thesandhufamily.ca wrote:
So, is anyone else testing this? How long should I expect to wait for my pacakge to get into the centosplus repo?
Regards,
Ranbir
Yes, I am working on testing this also. It will be a couple days before I can test it in a live network where we depend on radius. I will report back with any issues that come up. Currently we use version 1.1.7, but I've been wanting to upgrade. Having an updated freeradius version in the extras repository would be very useful.
-dave
On Wed, 2009-03-25 at 17:41 -0400, Kanwar Ranbir Sandhu wrote:
This is my first post here, so be gentle.
And of course I screwed up my sieve config for Dovecot and wasn't getting any messages in the correct folders. Oh well...all fixed now, so I can finally catch up on this thread.
Regards,
Ranbir
On Wed, 2009-03-25 at 17:41 -0400, Kanwar Ranbir Sandhu wrote:
The spec is included in-line, below. The src rpm is here (I will eventually be removing it):
Update:
I still haven't figured out how to handle the "group does not exist" error. I'm considering not bothering with trying to fix it since it's not a real problem anyway. Good idea or bad?
%changelog
- Wed Mar 25 2009 Kanwar Ranbir Sandhu ranbirsandhu@globalive.com -
2.1.3-1.1
- initial CentOS 5 release
- Thu Dec 4 2008 John Dennis jdennis@redhat.com - 2.1.3-1
- upgrade to latest upstream release, upstream summary follows:
I'm not sure how to handle the versioning. Should I do what I've done above (add a .1), or leave the version at 2.1.3-1, and just note that it's the intial Centos 5 release based on the Fedora 10 SRPM (see below)?
- initial CentOS 5 release (rebuilt from Fedora 10 SRPM)
I don't know what the best option is.
Regards,
Ranbir
On Wed, 2009-04-29 at 16:54 -0400, Kanwar Ranbir Sandhu wrote:
Update:
I still haven't figured out how to handle the "group does not exist" error. I'm considering not bothering with trying to fix it since it's not a real problem anyway. Good idea or bad?
%changelog
- Wed Mar 25 2009 Kanwar Ranbir Sandhu ranbirsandhu@globalive.com -
2.1.3-1.1
- initial CentOS 5 release
- Thu Dec 4 2008 John Dennis jdennis@redhat.com - 2.1.3-1
- upgrade to latest upstream release, upstream summary follows:
I'm not sure how to handle the versioning. Should I do what I've done above (add a .1), or leave the version at 2.1.3-1, and just note that it's the intial Centos 5 release based on the Fedora 10 SRPM (see below)?
- initial CentOS 5 release (rebuilt from Fedora 10 SRPM)
I don't know what the best option is.
Any comments on my previous reply (above)? I'd really appreciate some advice - I want to get my package into centosplus.
Regards,
Ranbir
On Wed, 2009-03-25 at 17:41 -0400, Kanwar Ranbir Sandhu wrote:
After I started a discussion over in the user's list about an updated freeradius package for CentOS 5, I decided to try my hand at submitting a spec file for freeradius-2.1.3. It's based on the latest package from Fedora 10.
Well, it looks like Red Hat has realized the ancient version of freeradius in RHEL 5 is mostly useless for new installs. They're going to release freeradius 2.1.6 as "freeradius2" for RHEL 5. Details here:
http://lists.cistron.nl/pipermail/freeradius-users/2009-May/msg00500.html
Some more discussion about it:
http://lists.cistron.nl/pipermail/freeradius-users/2009-May/msg00377.html https://lists.freeradius.org/pipermail/freeradius-users/2009-June/msg00024.h...
This makes me happy. I won't have to maintain my own package!
Regards,
Ranbir
-
David Veasey -
Jeff Johnson -
Kanwar Ranbir Sandhu -
Karanbir Singh -
m3freak＠thesandhufamily.ca
-
Niels de Vos -
Phil Schaffner