head 1.10; access; symbols pkgsrc-2023Q4:1.10.0.18 pkgsrc-2023Q4-base:1.10 pkgsrc-2023Q3:1.10.0.16 pkgsrc-2023Q3-base:1.10 pkgsrc-2023Q2:1.10.0.14 pkgsrc-2023Q2-base:1.10 pkgsrc-2023Q1:1.10.0.12 pkgsrc-2023Q1-base:1.10 pkgsrc-2022Q4:1.10.0.10 pkgsrc-2022Q4-base:1.10 pkgsrc-2022Q3:1.10.0.8 pkgsrc-2022Q3-base:1.10 pkgsrc-2022Q2:1.10.0.6 pkgsrc-2022Q2-base:1.10 pkgsrc-2022Q1:1.10.0.4 pkgsrc-2022Q1-base:1.10 pkgsrc-2021Q4:1.10.0.2 pkgsrc-2021Q4-base:1.10 pkgsrc-2021Q3:1.8.0.48 pkgsrc-2021Q3-base:1.8 pkgsrc-2021Q2:1.8.0.46 pkgsrc-2021Q2-base:1.8 pkgsrc-2021Q1:1.8.0.44 pkgsrc-2021Q1-base:1.8 pkgsrc-2020Q4:1.8.0.42 pkgsrc-2020Q4-base:1.8 pkgsrc-2020Q3:1.8.0.40 pkgsrc-2020Q3-base:1.8 pkgsrc-2020Q2:1.8.0.36 pkgsrc-2020Q2-base:1.8 pkgsrc-2020Q1:1.8.0.16 pkgsrc-2020Q1-base:1.8 pkgsrc-2019Q4:1.8.0.38 pkgsrc-2019Q4-base:1.8 pkgsrc-2019Q3:1.8.0.34 pkgsrc-2019Q3-base:1.8 pkgsrc-2019Q2:1.8.0.32 pkgsrc-2019Q2-base:1.8 pkgsrc-2019Q1:1.8.0.30 pkgsrc-2019Q1-base:1.8 pkgsrc-2018Q4:1.8.0.28 pkgsrc-2018Q4-base:1.8 pkgsrc-2018Q3:1.8.0.26 pkgsrc-2018Q3-base:1.8 pkgsrc-2018Q2:1.8.0.24 pkgsrc-2018Q2-base:1.8 pkgsrc-2018Q1:1.8.0.22 pkgsrc-2018Q1-base:1.8 pkgsrc-2017Q4:1.8.0.20 pkgsrc-2017Q4-base:1.8 pkgsrc-2017Q3:1.8.0.18 pkgsrc-2017Q3-base:1.8 pkgsrc-2017Q2:1.8.0.14 pkgsrc-2017Q2-base:1.8 pkgsrc-2017Q1:1.8.0.12 pkgsrc-2017Q1-base:1.8 pkgsrc-2016Q4:1.8.0.10 pkgsrc-2016Q4-base:1.8 pkgsrc-2016Q3:1.8.0.8 pkgsrc-2016Q3-base:1.8 pkgsrc-2016Q2:1.8.0.6 pkgsrc-2016Q2-base:1.8 pkgsrc-2016Q1:1.8.0.4 pkgsrc-2016Q1-base:1.8 pkgsrc-2015Q4:1.8.0.2 pkgsrc-2015Q4-base:1.8 pkgsrc-2015Q3:1.7.0.6 pkgsrc-2015Q3-base:1.7 pkgsrc-2015Q2:1.7.0.4 pkgsrc-2015Q2-base:1.7 pkgsrc-2015Q1:1.7.0.2 pkgsrc-2015Q1-base:1.7 pkgsrc-2014Q4:1.6.0.16 pkgsrc-2014Q4-base:1.6 pkgsrc-2014Q3:1.6.0.14 pkgsrc-2014Q3-base:1.6 pkgsrc-2014Q2:1.6.0.12 pkgsrc-2014Q2-base:1.6 pkgsrc-2014Q1:1.6.0.10 pkgsrc-2014Q1-base:1.6 pkgsrc-2013Q4:1.6.0.8 pkgsrc-2013Q4-base:1.6 pkgsrc-2013Q3:1.6.0.6 pkgsrc-2013Q3-base:1.6 pkgsrc-2013Q2:1.6.0.4 pkgsrc-2013Q2-base:1.6 pkgsrc-2013Q1:1.6.0.2 pkgsrc-2013Q1-base:1.6 pkgsrc-2012Q4:1.5.0.48 pkgsrc-2012Q4-base:1.5 pkgsrc-2012Q3:1.5.0.46 pkgsrc-2012Q3-base:1.5 pkgsrc-2012Q2:1.5.0.44 pkgsrc-2012Q2-base:1.5 pkgsrc-2012Q1:1.5.0.42 pkgsrc-2012Q1-base:1.5 pkgsrc-2011Q4:1.5.0.40 pkgsrc-2011Q4-base:1.5 pkgsrc-2011Q3:1.5.0.38 pkgsrc-2011Q3-base:1.5 pkgsrc-2011Q2:1.5.0.36 pkgsrc-2011Q2-base:1.5 pkgsrc-2011Q1:1.5.0.34 pkgsrc-2011Q1-base:1.5 pkgsrc-2010Q4:1.5.0.32 pkgsrc-2010Q4-base:1.5 pkgsrc-2010Q3:1.5.0.30 pkgsrc-2010Q3-base:1.5 pkgsrc-2010Q2:1.5.0.28 pkgsrc-2010Q2-base:1.5 pkgsrc-2010Q1:1.5.0.26 pkgsrc-2010Q1-base:1.5 pkgsrc-2009Q4:1.5.0.24 pkgsrc-2009Q4-base:1.5 pkgsrc-2009Q3:1.5.0.22 pkgsrc-2009Q3-base:1.5 pkgsrc-2009Q2:1.5.0.20 pkgsrc-2009Q2-base:1.5 pkgsrc-2009Q1:1.5.0.18 pkgsrc-2009Q1-base:1.5 pkgsrc-2008Q4:1.5.0.16 pkgsrc-2008Q4-base:1.5 pkgsrc-2008Q3:1.5.0.14 pkgsrc-2008Q3-base:1.5 cube-native-xorg:1.5.0.12 cube-native-xorg-base:1.5 pkgsrc-2008Q2:1.5.0.10 pkgsrc-2008Q2-base:1.5 cwrapper:1.5.0.8 pkgsrc-2008Q1:1.5.0.6 pkgsrc-2008Q1-base:1.5 pkgsrc-2007Q4:1.5.0.4 pkgsrc-2007Q4-base:1.5 pkgsrc-2007Q3:1.5.0.2 pkgsrc-2007Q3-base:1.5 pkgsrc-2007Q2:1.4.0.14 pkgsrc-2007Q2-base:1.4 pkgsrc-2007Q1:1.4.0.12 pkgsrc-2007Q1-base:1.4 pkgsrc-2006Q4:1.4.0.10 pkgsrc-2006Q4-base:1.4 pkgsrc-2006Q3:1.4.0.8 pkgsrc-2006Q3-base:1.4 pkgsrc-2006Q2:1.4.0.6 pkgsrc-2006Q2-base:1.4 pkgsrc-2006Q1:1.4.0.4 pkgsrc-2006Q1-base:1.4 pkgsrc-2005Q4:1.4.0.2 pkgsrc-2005Q4-base:1.4 pkgsrc-2005Q3:1.3.0.6 pkgsrc-2005Q3-base:1.3 pkgsrc-2005Q2:1.3.0.4 pkgsrc-2005Q2-base:1.3 pkgsrc-2005Q1:1.3.0.2 pkgsrc-2005Q1-base:1.3 pkgsrc-2004Q4:1.2.0.18 pkgsrc-2004Q4-base:1.2 pkgsrc-2004Q3:1.2.0.16 pkgsrc-2004Q3-base:1.2 pkgsrc-2004Q2:1.2.0.14 pkgsrc-2004Q2-base:1.2 pkgsrc-2004Q1:1.2.0.12 pkgsrc-2004Q1-base:1.2 pkgsrc-2003Q4:1.2.0.10 pkgsrc-2003Q4-base:1.2 netbsd-1-6-1:1.2.0.6 netbsd-1-6-1-base:1.2 netbsd-1-6:1.2.0.8 netbsd-1-6-RELEASE-base:1.2 pkgviews:1.2.0.4 pkgviews-base:1.2 buildlink2:1.2.0.2 buildlink2-base:1.2 netbsd-1-5-PATCH003:1.2 netbsd-1-5-PATCH001:1.2; locks; strict; comment @# @; 1.10 date 2021.10.26.11.06.59; author nia; state Exp; branches; next 1.9; commitid G83yJyZF8er6kjeD; 1.9 date 2021.10.07.14.42.51; author nia; state Exp; branches; next 1.8; commitid EMvsIaZgYm1t8TbD; 1.8 date 2015.11.04.00.35.39; author agc; state Exp; branches; next 1.7; commitid K5R8pkzReRJy0IHy; 1.7 date 2015.02.13.22.36.00; author he; state Exp; branches; next 1.6; commitid faah2SQfE7lUKT9y; 1.6 date 2013.01.11.00.03.30; author joerg; state Exp; branches; next 1.5; 1.5 date 2007.09.23.16.25.01; author obache; state Exp; branches; next 1.4; 1.4 date 2005.12.18.19.23.04; author joerg; state Exp; branches; next 1.3; 1.3 date 2005.02.24.12.14.04; author agc; state Exp; branches; next 1.2; 1.2 date 2001.04.21.11.23.34; author wiz; state Exp; branches; next 1.1; 1.1 date 2001.04.17.11.53.48; author agc; state Exp; branches; next ; desc @@ 1.10 log @ net: Replace RMD160 checksums with BLAKE2s checksums All checksums have been double-checked against existing RMD160 and SHA512 hashes Not committed (merge conflicts...): net/radsecproxy/distinfo The following distfiles could not be fetched (fetched conditionally?): ./net/citrix_ica/distinfo citrix_ica-10.6.115659/en.linuxx86.tar.gz ./net/djbdns/distinfo dnscache-1.05-multiple-ip.patch ./net/djbdns/distinfo djbdns-1.05-test28.diff.xz ./net/djbdns/distinfo djbdns-1.05-ignoreip2.patch ./net/djbdns/distinfo djbdns-1.05-multiip.diff ./net/djbdns/distinfo djbdns-cachestats.patch @ text @$NetBSD: distinfo,v 1.9 2021/10/07 14:42:51 nia Exp $ BLAKE2s (tacacs-F4.0.4.28.tar.gz) = 55b31ba1342eb2a09ca3aa27b59312ddedc172ea8a9ce4160e0a30d7b14c5d96 SHA512 (tacacs-F4.0.4.28.tar.gz) = aec97bf1c2ea4171ba1aeabeb6ac7405ca693439c15a9f09868b77932a1ed72036043c05d8bfcfc938c43549318e41fd1ab4f3251ce2536278318d6a318c53cb Size (tacacs-F4.0.4.28.tar.gz) = 530049 bytes @ 1.9 log @net: Remove SHA1 hashes for distfiles @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.8 2015/11/04 00:35:39 agc Exp $ d3 1 a3 1 RMD160 (tacacs-F4.0.4.28.tar.gz) = 1336eee599a47068b657c333da66517f5620a144 @ 1.8 log @Add SHA512 digests for distfiles for net category Problems found with existing digests: Package haproxy distfile haproxy-1.5.14.tar.gz 159f5beb8fdc6b8059ae51b53dc935d91c0fb51f [recorded] da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated] Problems found locating distfiles: Package bsddip: missing distfile bsddip-1.02.tar.Z Package citrix_ica: missing distfile citrix_ica-10.6.115659/en.linuxx86.tar.gz Package djbdns: missing distfile djbdns-1.05-test25.diff.bz2 Package djbdns: missing distfile djbdns-cachestats.patch Package djbdns: missing distfile 0002-dnscache-cache-soa-records.patch Package gated: missing distfile gated-3-5-11.tar.gz Package owncloudclient: missing distfile owncloudclient-2.0.2.tar.xz Package poink: missing distfile poink-1.6.tar.gz Package ra-rtsp-proxy: missing distfile rtspd-src-1.0.0.0.tar.gz Package ucspi-ssl: missing distfile ucspi-ssl-0.70-ucspitls-0.1.patch Package waste: missing distfile waste-source.tar.gz Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.7 2015/02/13 22:36:00 he Exp $ a2 1 SHA1 (tacacs-F4.0.4.28.tar.gz) = 7ceb93ed743096dd9755dccf7405f9b1d70188a3 @ 1.7 log @Update to version 4.0.4.28, and switch to shrubbery.net version which appears to be maintained and where contributions are being integrated. Particularly, this fixes a SEGV crash on LP64 (amd64). Upstream changes since 4.0.4a in reverse chronological order: F4.0.4.28 - Fix buffer length argument to ntop() - Muhammad Muquit - Fix two missing free()s - Fix segfault from incorrect pointer returned from value(). Reported here: http://www.shrubbery.net/pipermail/tac_plus/2014-January/001384.html - update autoconf bits for autoconf 2.69 - put tac_plus daemon in sbin, where it ought to be - fix hdr->datalength handling in dump_nas_pak() - add -m option to specify the client listen queue max and increase the default to 64 if the O/S does not define SOMAXCONN - fix config.h include syntax - David M. Syzdek - added -U and -Q flags to allow runtime setuid/setgid change - from from Robert Drake with some alteration - Make implicit time_t conversions explicit in expire.c - from David M. Syzdek - initialize newsockfd in main() - from David M. Syzdek - recent changes in autoconf are causing the + of the package name to become -, so just drop it from the tarball name. F4.0.4.27 - add "port" to clarify log messages of default_fn.c - use program name (filename) instead of hard-coded "tac_plus" for name given to PAM - change socket binding to allow an IPv6 address with the -B argument - bind v4 and v6 sockets if system claims its has addresses for the AFs - fix command authorization debug message logic for match/no match - reported by Dereck Chan F4.0.4.26 - add optional securid support via aceclient library - Matt Addison - use localtime instead of gmtime for log messages so that the timezone is inheritted. - allow file authentication for PAP authorization F4.0.4.25 - add -m (md5) option to tac_pwd. XXX could use better salt generation - use random() in tac_pwd if available and generate 4 bytes of salt for md5. - sprintf -> snprintf - Robert Swiecki - more pkt size checking in acct.c, authen.c, author.c - Robert Swiecki - free(pak) in start_session() not in account(), for consistency F4.0.4.24 - allow PAM for pap authentication - Jeroen Nijhof - replace home-grown vprintf in report() with vsnprintf - Robert Swiecki - dont use report in signal handler, since report uses syslog which uses malloc - Robert Swiecki - use volatile sig_atomic_t 'reinitialize' variable - Robert Swiecki - use snprintf in get_authen_continue() and send_authen_error() and check return - Robert Swiecki - make snprintf buffers of get_authen_continue() and send_authen_error() at least NI_MAXHOST bytes - Robert Swiecki F4.0.4.23 - fix build on netbsd - update PAM includes for OSX - YiJia Zhang F4.0.4.22 - check of regexec() return value inverted - from Ignas Kazlauskas F4.0.4.21 - do_auth.py - better Nexus support, better AV replacement, and only send roles to Nexus - from Daniel Schmidt - fix bug in checking the return value of regexec() for login and enable ACLs. - do_auth.py - better Nexus support, better AV replacement, and only F4.0.4.20 - remove stupid error message about running as root - Drop the private regex library in favor of libc's. A system w/o a regex is one I dont care about. - finally remove config parsing for 'default authorization = permit' - apply ACLs to pap, chap, arap and ms-chap authentication too - change accounting log time format to match syslog - do_auth.py fix from Daniel Schmidt - import fdes from David G. Koontz (1991) for ARAP/MSCHAP_DES - move MSCHAP define to autoconf; --enable-mschap - use the fdes code for ARAP_DES and MSCHAP_DES. NOTE: I have no way to test this. lmk if it does not work. - increase NAC address array size. affects the format of the tacacs wholog file (TACPLUS_WHOLOGFILE); existing file should be removed. - add comments to tac_plus.conf.5 about cipher algorithms in password_spec - do_auth.py - Fixed reression, Support for replacing av pairs - from Daniel Schmidt F4.0.4.19 - offer $ip to before/after authorization scripts - wtmp and accounting files do not need to be mutually exclusive - add authorization script example - from Daniel Schmidt - add partial support for single-connection mode - convert select()s to poll()s F4.0.4.18 - Fix missing printf argument in debug output - Add "enable = nopassword" to users, groups and hosts. F4.0.4.17 - Move REARMSIGNAL definition to autoconf - Move REAPCHILD definition to autoconf and check if SIG_IGN works - Move SIGCHLD handling to apply to all daemon personalities - partly from John Payne F4.0.4.16 - Few innocuous changes from or inspired by FreeBSD ports - Deal with max-session finger format difference in a way that does not require knowing which IOS is being fingered. - The header encryption field is really a flags field which includes a single-session option (which we'd like to support) - Check return of write() for interrupts when writing arguments to external scripts. - -G was not remaining in foreground - From Nathan Schrenk - Do not attempt to remove the pidfile if the pidfilebuf was truncated or we could not open the file. - Add 'accounting syslog;' configuration knob - mostly from Mark Ellzey Thomas - Notes about PAM - from Aaron Scarisbrick - Allow PAM debug message with tac_plus password debugging option - from Aaron Scarisbrick - Allow \'s within quoted words in tac_plus.conf - from Jesse Zbikowski - Allow 'file' for host and user enable - part from Jeff Gehlbach via Daniel Schmidt - Fix possible buffer overflow for arap - noted by Oren Nechushtan F4.0.4.15 - Check data lengths in debugging functions - reported by Antonin Vitecek - Fix syslog facility selection - from Timo Vanoni & Josef Voggesser - Add -G/foreground option - Deal with missing socklen_t F4.0.4.14 - Add notes about PAM to the user guide and tac_plus.conf(5) - Log login failures with the username, NAS address and NAS tty - requested by Andi Bauer - ACLs were not applied through the default authentication (ie: user=DEFAULT) path - reported by Robert Lister F4.0.4.13 - Rename convert.pl to tac_convert and install it - install users_guide F4.0.4.12 - Fix typo in usage message - from Georg Schwarz - Various tac_plus.conf.5 fixes - from Georg Schwarz - escape the escape backslash of the ACL examples - from Georg Schwarz - Fix a LP64 bug where VALUE (union v) consisting of pointer was intialized like an int - reported by brad dreisbach F4.0.4.11 - Fix OS X and build problems and do not prototype errno - from Georg Schwarz F4.0.4.10 - Fix PAM for linux, which does not offer PAM_AUTHOK for pam_set_item() and requires a pam_conv function even with PAM_SILENT - reported and tested by Stefan Oettl F4.0.4.9 - clean-up bogus nopasswd_str protoypes that gcc4 did not like F4.0.4.8 - if -B is used, add the bind address in the PID filename - from Ian Dickinson - "acl" is an AV pair for service exec. Within service attribute parsing, do not parse "acl" as the acl (or connection ACL) keyword. This is a hack; the parser is rather lame - noted by Bryce Kahle - fix md4 for LP64 - do not accept skey keywords unless compiled with skey support - fix skey enable password type - bit from Ed Ravin - skey prompt ("challenge") is "S/Key challenge", not "Password" - make "daemon" the default syslog facility and add a syslog config statement - add support for user authentication via PAM F4.0.4.7 - make configure option --with-skey work - raise a few logs from INFO to NOTICE, to allow syslogd filtering of some rather noisey logs - add ACL checking for authorization, for the case where tacacs is only used for authorization. F4.0.4.6 - fix a few compiler warnings - add -e and -h options to tac_pwd - include crypt.h if it exists (solaris) - make configure options --with-{user,group}id work F4.0.4.5 - use C99 stdint.h for int types - linux's libwrap needs libnsl - variable index in md5.c conflicts with index() F4.0.4.4 - added more autoconf stuff - fix-up tac_plus.8 manpage - still need to do autoconf-time option replacement - fix-up tac_plus.conf manpage - incomplete - fix-up tac_plus help message - whitespace and formatting nits - port host clause (minus type keyword) from devrim seral's tac_plus v9 (http://www.gazi.edu.tr/tacacs/) at user request - changed user-specific enable password handling such that it if one is specified for the user, the daemon does not check the host-specific or global enable password. - make TACPLUS_ACCTFILE, TACPLUS_PIDFILE, and TACPLUS_LOGFILE autoconf knobs filling in pathsl.h and appopriate bits in manpages - separated the frequently asked questions portion of the user_guide into the file FAQ - OR successive -d (debug) options - fix md5 for LP64 F4.0.4.3 - comment out the unnecessary lex and yacc tests from autoconf F4.0.4.2 - partial autoconf setup - much more to be done - compile option IGN_HUP (ignore HUP signal) is history - rename generated_password -> tac_pwd and add manpage - rename tac_plus.1 -> tac_plus.8 - add tac_plus.confg.5 - add -h option to display usage info F4.0.4.1 - {log,pid}file permissions fixes - partically from ian freislich - add bind address (-B) option - partically from ian freislich - fix pidfile removal on exit Changes from release F4.0.3 to F4.0.4 - merge F4.0.4 changes from disaster.com @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.6 2013/01/11 00:03:30 joerg Exp $ d5 1 @ 1.6 log @Fix void use. Add some missing prototypes and includes. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.5 2007/09/23 16:25:01 obache Exp $ d3 3 a5 13 SHA1 (tac_plus.F4.0.4.alpha.tar.Z) = 23ccb0b7db6909bd45dcf6762ef32917d3465dd6 RMD160 (tac_plus.F4.0.4.alpha.tar.Z) = 733fbac017cfd2efcd7b5e80e1747bdd0c6fd60e Size (tac_plus.F4.0.4.alpha.tar.Z) = 193771 bytes SHA1 (patch-aa) = daaf8f737441d17b1339bb1c6b7f865a95f706bc SHA1 (patch-ab) = f8e08d64045348ba034c277c790a55c16d4afac1 SHA1 (patch-ac) = 11ea986ede6d2a277747cd9abc3bdcade1bf1e7a SHA1 (patch-ad) = 9cfabd64567a29f825edc487ddeb2d173a3e883f SHA1 (patch-ae) = 67305db0c6dd64b33c00b8dc5dbb3c40fa50e094 SHA1 (patch-af) = 82c68318bb9290a9ebf7c31baa8d7983b24c6827 SHA1 (patch-dump.c) = 05a5989f26857f7724c1c81f9f76c8a56eb00d7a SHA1 (patch-maxsess.c) = 5f62897318d85ea416091b1a13c771cf7c693a51 SHA1 (patch-packet.c) = 1cda78ae1084332f012c7ed41f5210a4b57f4f3c SHA1 (patch-utils.c) = c1a190fba6b15bd10d0b0f4c62c3802e7c924d8f @ 1.5 log @Fixed build problem with gcc4 reported by Yakovetsky Vladimir in PR 36929. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.4 2005/12/18 19:23:04 joerg Exp $ d7 1 a7 1 SHA1 (patch-ab) = 52ccf27a6a904d6e9c6dd6044784c7c4e0126000 d12 4 @ 1.4 log @Fix errno. Define O_SYNC as O_FSYNC for DragonFly. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.3 2005/02/24 12:14:04 agc Exp $ d11 1 @ 1.3 log @Add RMD160 digests. @ text @d1 1 a1 1 $NetBSD: distinfo,v 1.2 2001/04/21 11:23:34 wiz Exp $ d7 1 a7 1 SHA1 (patch-ab) = 394c640e01d12f44e40741baa2ddbb60495e5e22 d9 2 @ 1.2 log @Move to sha1 checksum, and/or add distfile sizes. @ text @d1 1 a1 1 $NetBSD$ d4 1 @ 1.1 log @+ move the distfile digest/checksum value from files/md5 to distinfo + move the patch digest/checksum values from files/patch-sum to distinfo @ text @d1 1 a1 1 $NetBSD: md5,v 1.1.1.1 2000/10/15 17:26:42 rh Exp $ d3 2 a4 1 MD5 (tac_plus.F4.0.4.alpha.tar.Z) = 7acaa4a78c71c514cf67ca5a77e16c27 @