bug #34424, security patch

5 files changed, 141 insertions, 2 deletions

diff --git a/net-dialup/freeradius/ChangeLog b/net-dialup/freeradius/ChangeLog
index 7f9b43709e3f..4ab339fe6a4f 100644
--- a/net-dialup/freeradius/ChangeLog
+++ b/net-dialup/freeradius/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-dialup/freeradius
 # Copyright 2002-2004 Gentoo Technologies, Inc.; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-dialup/freeradius/ChangeLog,v 1.11 2004/03/06 12:52:35 lanius Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-dialup/freeradius/ChangeLog,v 1.12 2004/04/03 13:20:53 lanius Exp $
+
+*freeradius-0.9.3-r1 (03 Apr 2004)
+
+  03 Apr 2004; Heinrich Wendel <lanius@gentoo.org> freeradius-0.9.3-r1.ebuild,
+  files/freeradius-0.9.3-rlm_smb.patch:
+  bug #34424, security patch
 
   06 Mar 2004; Heinrich Wendel <lanius@gentoo.org> freeradius-0.8.1.ebuild,
   freeradius-0.9.0.ebuild, freeradius-0.9.3.ebuild:
diff --git a/net-dialup/freeradius/Manifest b/net-dialup/freeradius/Manifest
index 429e6eb78097..76b2c7aebd00 100644
--- a/net-dialup/freeradius/Manifest
+++ b/net-dialup/freeradius/Manifest
@@ -1,6 +1,9 @@
 MD5 cd8f10470a146b086d29d5752007ceb0 freeradius-0.9.3.ebuild 2850
-MD5 bb45ca962f84f15034a33a7c08752031 ChangeLog 1566
+MD5 020bfd04489e12f8148792723c4c5ea7 freeradius-0.9.3-r1.ebuild 2845
+MD5 a8f5745d31a665d250d966040a27f6a8 ChangeLog 1751
 MD5 ec2f84816306825d125d0c01bd86758d metadata.xml 163
+MD5 ee618f223ec67a53ad3a6cfd399ea8eb files/digest-freeradius-0.9.3-r1 69
+MD5 c495367670218aeb76ff094055cd75e9 files/freeradius-0.9.3-rlm_smb.patch 690
 MD5 ee618f223ec67a53ad3a6cfd399ea8eb files/digest-freeradius-0.9.3 69
 MD5 fc6693f3df5a0694610110287a28568a files/0.9/radius.conf 129
 MD5 386aaf4470ecc4b4e0c43dec2bc02ba7 files/0.9/radius.init 807
diff --git a/net-dialup/freeradius/files/digest-freeradius-0.9.3-r1 b/net-dialup/freeradius/files/digest-freeradius-0.9.3-r1
new file mode 100644
index 000000000000..064e256609d0
--- /dev/null
+++ b/net-dialup/freeradius/files/digest-freeradius-0.9.3-r1
@@ -0,0 +1 @@
+MD5 36f33d9dd305a2c9f1089c30a9fff0b8 freeradius-0.9.3.tar.gz 1819922
diff --git a/net-dialup/freeradius/files/freeradius-0.9.3-rlm_smb.patch b/net-dialup/freeradius/files/freeradius-0.9.3-rlm_smb.patch
new file mode 100644
index 000000000000..af47199406a0
--- /dev/null
+++ b/net-dialup/freeradius/files/freeradius-0.9.3-rlm_smb.patch
@@ -0,0 +1,16 @@
+===================================================================
+RCS file: /web/pages/us.freeradius.org/cvs/radiusd/src/modules/rlm_smb/smblib.c,v
+retrieving revision 1.3
+retrieving revision 1.4
+diff -u -p -r1.3 -r1.4
+--- radiusd/src/modules/rlm_smb/smblib.c	2002/08/06 16:50:33	1.3
++++ radiusd/src/modules/rlm_smb/smblib.c	2003/11/25 16:03:17	1.4
+@@ -316,7 +316,7 @@ int SMB_Logon_Server(SMB_Handle_Type Con
+ 
+ { struct RFCNB_Pkt *pkt;
+   int param_len, i, pkt_len, pass_len,a;
+-  char *p, pword[128];
++  char *p, pword[256];
+ 
+   /* First we need a packet etc ... but we need to know what protocol has  */
+   /* been negotiated to figure out if we can do it and what SMB format to  */
diff --git a/net-dialup/freeradius/freeradius-0.9.3-r1.ebuild b/net-dialup/freeradius/freeradius-0.9.3-r1.ebuild
new file mode 100644
index 000000000000..e97c75a3424c
--- /dev/null
+++ b/net-dialup/freeradius/freeradius-0.9.3-r1.ebuild
@@ -0,0 +1,113 @@
+# Copyright 1999-2004 Gentoo Technologies, Inc.
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-dialup/freeradius/freeradius-0.9.3-r1.ebuild,v 1.1 2004/04/03 13:20:53 lanius Exp $
+
+IUSE="snmp mysql postgres ldap kerberos ssl pam"
+
+DESCRIPTION="highly configurable free RADIUS server"
+SRC_URI="ftp://ftp.freeradius.org/pub/radius/${P}.tar.gz"
+HOMEPAGE="http://www.freeradius.org/"
+KEYWORDS="x86"
+LICENSE="GPL-2"
+SLOT="0"
+
+DEPEND="virtual/glibc
+	sys-devel/libtool
+	>=sys-libs/db-3.2
+	sys-libs/gdbm
+	snmp? ( net-analyzer/ucd-snmp )
+	mysql? ( dev-db/mysql )
+	postgres? ( dev-db/postgresql )
+	pam? ( sys-libs/pam )
+	ssl? ( dev-libs/openssl )
+	ldap? ( net-nds/openldap )
+	kerberos? ( app-crypt/mit-krb5 )
+	frxp? ( dev-lang/python
+			dev-lang/perl )"
+
+src_unpack() {
+	unpack ${P}.tar.gz
+	cd ${S}
+
+	epatch ${FILESDIR}/${P}-rlm_smb.patch
+
+	export WANT_AUTOCONF=2.1
+	autoconf
+}
+
+src_compile() {
+	local myconf=""
+
+	if [ -z "`use snmp`" ]; then
+		myconf="--without-snmp"
+	fi
+	if [ "`use frascend`" ]; then
+		myconf="${myconf} --with-ascend-binary"
+	fi
+	if [ "`use frlargefiles`" ]; then
+		myconf="${myconf} --with-large-files"
+	fi
+	if [ "`use frnothreds`" ]; then
+		myconf="${myconf} --without-threads"
+	fi
+	if [ "`use frxp`" ]; then
+		myconf="${myconf} --with-experimental-modules"
+	fi
+
+	# kill modules we don't use
+	if [ -z "`use ssl`" ]; then
+		einfo "removing rlm_eap_tls and rlm_x99_token (no use ssl)"
+		rm -rf src/modules/rlm_eap/types/rlm_eap_tls src/modules/rlm_x99_token
+	fi
+	if [ -z "`use ldap`" ]; then
+		einfo "removing rlm_ldap (no use ldap)"
+		rm -rf src/modules/rlm_ldap
+	fi
+	if [ -z "`use kerberos`" ]; then
+		einfo "removing rlm_krb5 (no use kerberos)"
+		rm -rf src/modules/rlm_krb5
+	fi
+	if [ -z "`use pam`" ]; then
+		einfo "removing rlm_pam (no use pam)"
+		rm -rf src/modules/rlm_pam
+	fi
+
+	# experimental modules are
+	# rlm_checkval rlm_cram rlm_dictionary rlm_example rlm_passwd rlm_perl
+	# rlm_python rlm_smb rlm_sqlcounter
+
+	./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var \
+		--mandir=/usr/share/man --host=${CHOST} \
+		--with-gnu-ld --with-system-libtool --disable-ltdl-install \
+		${myconf} || die
+
+	make || die
+}
+
+src_install() {
+	dodir /etc/raddb
+
+	make R=${D} install || die
+
+	dodoc COPYRIGHT CREDITS INSTALL LICENSE README
+
+	rm ${D}/usr/sbin/rc.radiusd
+
+	dodir /etc/init.d
+	cp ${FILESDIR}/0.9/radius.init ${D}/etc/init.d/radiusd
+
+	dodir /etc/conf.d
+	cp ${FILESDIR}/0.9/radius.conf ${D}/etc/conf.d/radiusd
+
+	keepdir /var/run/radiusd
+	keepdir /var/log/radius
+	keepdir /var/log/radius/radacct
+}
+
+pkg_postinst() {
+	einfo "You need to add an user and a group radiusd or"
+	einfo "change the radiusd.conf file to use an existing"
+	einfo "user for running radiusd."
+	einfo "Make sure that all paths radiusd needs to write"
+	einfo "to have the proper owner!"
+}