Fix one serious bug in the RADIUS server's Kerberos interface, one
minor nit in the build, and add one feature:
- Properly validate the Kerberos ticket we obtained against an actual
service so we know it wasn't forged.
- Make sure the test programs are built knowing where the database is.
- If the make variable KRB_INSTANCE is defined, it names the instance of
each user to be used in validating their Kerberos password. (If this
instance doesn't exist, the validation will fail.) This can be used
for both access control and to keep separate one's login password from
the less secure RADIUS mechanism (since exposure of the instance does
not expose the null instance).
better crash diagnosis. May it never get tested, ha ha ha.
Eliminate the lite2 and smp releases of the src-sys collection.
Add the new mail-archive collection.
Run cvsup with the "-1" flag to disable automatic retries. Let cron
take care of that.
State in DESCR that version 15.1 or later of CVSup is required.
Suggested by: neil.long@materials.oxford.ac.uk (Neil J Long)
Add etc/rc.d/arpwatch.sh
Don't mention arp.dat as an "installed" file - we may want
this after pkg_delete.
Install SNMP headers into ${PREFIX}/include/snmp
Compile libsnmp.a with "-DPIC -fpic" to allow dynamic linking without RRS
Text Relocation errors.
PR: ports/3880
In-Conjunction-With: Satoshi's patch to bsd.port.mk
(note: unlike the last change in perl5 versions, I have only upgraded p5-* ports, not other ports that rely upon perl5.)
tac_plus provides Cisco systems routers and access servers
with authentication, authorisation and accounting services.
A configuration file controls the details of authentication,
authorisation and accounting.
PR: 2869
Submitted by: Igor Vinokurov<igor@zynaps.ru>
Note: Although there is no terms and conditions on redistribution found,
the author says there is no restriction. (This is stated in more
recent alpha version.) The only concern is the U.S. Export restriction,
but Cisco has been granted with the right to export their software,
according to the author. And also I haven't been able to find any
implementation that may violate the export control in the source code,
either. So, I import this without any RESTRICTED or NO_CDROM defined.
