Attachment #163335 for bug #204683

View | Details | Raw Unified | Return to bug 204683
Collapse All | Expand All




# $FreeBSD$

PORTNAME=	tac_plus
PORTVERSION=	F4.0.4.28
CATEGORIES=	net security
MASTER_SITES=	ftp://ftp.shrubbery.net/pub/${PORTNAME}/
DISTNAME=	tacacs-${PORTVERSION}

MAINTAINER=	marcus@FreeBSD.org
COMMENT=	Cisco remote authentication/authorization/accounting server

GNU_CONFIGURE=	yes
USES=		bison perl5 libtool

Lines 1-2 Link Here

(-)b/net/tac_plus4/distinfo (-2 / +2 lines)
1	SHA256 (tacacs+-F4.0.4.27a.tar.gz) = 512e1c30389b102d4af25d7e9bc3bdcd9d39d70e5e7d8a98c8f785733df8d9a1	1	SHA256 (tacacs-F4.0.4.28.tar.gz) = 147f2dc98d26d2f93f0aba76c988ced196ffe1c001dc2e91f788a1a2c747219e
2	SIZE (tacacs+-F4.0.4.27a.tar.gz) = 504395	2	SIZE (tacacs-F4.0.4.28.tar.gz) = 530049




--- Makefile.in.orig	2012-04-16 22:56:21 UTC
+++ Makefile.in
@@ -162,7 +162,7 @@ am__tac_plus_SOURCES_DIST = acct.c authe
 	config.c default_fn.c default_v0_fn.c do_acct.c do_author.c \
 	dump.c enable.c encrypt.c expire.c hash.c maxsessint.c parse.c \
 	programs.c pw.c pwlib.c report.c sendauth.c sendpass.c \

 @TACSKEY_TRUE@am__objects_1 = skey_fn.$(OBJEXT)
 @TACACECLNT_TRUE@am__objects_2 = aceclnt_fn.$(OBJEXT)
 am_tac_plus_OBJECTS = acct.$(OBJEXT) authen.$(OBJEXT) author.$(OBJEXT) \
@@ -173,7 +173,7 @@ am_tac_plus_OBJECTS = acct.$(OBJEXT) aut
 	parse.$(OBJEXT) programs.$(OBJEXT) pw.$(OBJEXT) \
 	pwlib.$(OBJEXT) report.$(OBJEXT) sendauth.$(OBJEXT) \
 	sendpass.$(OBJEXT) tac_plus.$(OBJEXT) utils.$(OBJEXT) \

 tac_plus_OBJECTS = $(am_tac_plus_OBJECTS)
 am__DEPENDENCIES_1 =
 tac_plus_DEPENDENCIES = $(am__DEPENDENCIES_1)
@@ -770,6 +770,7 @@ distclean-compile:
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sendauth.Po@am__quote@
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sendpass.Po@am__quote@
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/skey_fn.Po@am__quote@

 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tac_plus.Po@am__quote@
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tac_pwd.Po@am__quote@
 @AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/utils.Po@am__quote@
@@ -1256,8 +1257,7 @@ info: info-am
 
 info-am:
 

Lines 1-6 Link Here

(-)b/net/tac_plus4/files/patch-choose_authen.c (-3 / +3 lines)
1	--- choose_authen.c.orig 2012-04-17 01:42:55.000000000 +0400	1	--- choose_authen.c.orig 2012-04-16 21:42:55 UTC
2	+++ choose_authen.c 2013-04-13 13:55:20.000000000 +0400	2	+++ choose_authen.c
3	@@ -130,12 +130,29 @@	3	@@ -130,12 +130,29 @@ choose_login(struct authen_data *data, s
4	#else /* SKEY */	4	#else /* SKEY */
5	report(LOG_ERR,	5	report(LOG_ERR,
6	"%s %s: user %s s/key support has not been compiled in",	6	"%s %s: user %s s/key support has not been compiled in",

Lines 1-5 Link Here

(-)b/net/tac_plus4/files/patch-opie_fn.c (-2 / +2 lines)
1	--- opie_fn.c.orig Sun Dec 8 15:26:20 2002	1	--- opie_fn.c.orig 2002-12-08 11:26:20 UTC
2	+++ opie_fn.c Sun Dec 8 15:27:01 2002	2	+++ opie_fn.c
3	@@ -0,0 +1,239 @@	3	@@ -0,0 +1,239 @@
4	+/*	4	+/*
5	+ Copyright (c) 1995-2000 by Cisco systems, Inc.	5	+ Copyright (c) 1995-2000 by Cisco systems, Inc.

Lines 1-5 Link Here

(-)b/net/tac_plus4/files/patch-parse.h (-2 / +2 lines)
1	--- parse.h.orig 2012-04-10 22:34:40.000000000 +0400	1	--- parse.h.orig 2012-04-10 18:34:40 UTC
2	+++ parse.h 2013-04-13 14:02:27.000000000 +0400	2	+++ parse.h
3	@@ -74,6 +74,7 @@	3	@@ -74,6 +74,7 @@
4	#ifdef MSCHAP	4	#ifdef MSCHAP
5	#define S_mschap 42	5	#define S_mschap 42

Lines 1-6 Link Here

(-)b/net/tac_plus4/files/patch-skey_fn.c (-3 / +3 lines)
1	--- skey_fn.c.orig 2012-06-06 22:34:55.000000000 +0400	1	--- skey_fn.c.orig 2012-06-06 18:34:55 UTC
2	+++ skey_fn.c 2013-04-13 14:08:31.000000000 +0400	2	+++ skey_fn.c
3	@@ -164,7 +164,7 @@	3	@@ -164,7 +164,7 @@ skey_fn(struct authen_data *data)
4	return(1);	4	return(1);
5	}	5	}
6		6

Lines 1-6 Link Here

(-)b/net/tac_plus4/files/patch-tac_plus.h (-3 / +3 lines)
1	--- tac_plus.h.orig 2013-04-13 13:45:20.000000000 +0400	1	--- tac_plus.h.orig 2012-04-10 19:38:45 UTC
2	+++ tac_plus.h 2013-04-13 13:50:14.000000000 +0400	2	+++ tac_plus.h
3	@@ -452,6 +452,7 @@	3	@@ -452,6 +452,7 @@ int enable_fn(struct authen_data *data);
4	int sendauth_fn(struct authen_data *data);	4	int sendauth_fn(struct authen_data *data);
5	int sendpass_fn(struct authen_data *data);	5	int sendpass_fn(struct authen_data *data);
6	int skey_fn(struct authen_data *data);	6	int skey_fn(struct authen_data *data);

Lines 1-6 Link Here

(-)b/net/tac_plus4/files/patch-users_guide.in (-4 / +4 lines)
1	--- users_guide.in.orig 2011-05-28 02:11:57.000000000 +0400	1	--- users_guide.in.orig 2011-05-27 22:11:57 UTC
2	+++ users_guide.in 2013-04-13 14:16:37.000000000 +0400	2	+++ users_guide.in
3	@@ -164,7 +164,10 @@	3	@@ -164,7 +164,10 @@ for S/KEY in the Makefile. I got my S/K
4	crimelab.com but now it appears the only source is ftp.bellcore.com. I	4	crimelab.com but now it appears the only source is ftp.bellcore.com. I
5	suggest you try a web search for s/key source code.	5	suggest you try a web search for s/key source code.
6		6
Lines 12-18 Link Here
12		12
13	Should you need them, there are routines for accessing password files	13	Should you need them, there are routines for accessing password files
14	(getpwnam,setpwent,endpwent,setpwfile) in pw.c.	14	(getpwnam,setpwent,endpwent,setpwfile) in pw.c.
15	@@ -414,7 +417,16 @@	15	@@ -414,7 +417,16 @@ be authenticated via s/key, as follows:
16	login = skey	16	login = skey
17	}	17	}
18		18

Lines 23-29 Link Here

(-)b/net/tac_plus4/files/tac_plus.in (-1 / +1 lines)
23	name=tac_plus	23	name=tac_plus
24	rcvar=tac_plus_enable	24	rcvar=tac_plus_enable
25		25
26	command="%%PREFIX%%/bin/tac_plus"	26	command="%%PREFIX%%/sbin/tac_plus"
27	pidfile="/var/run/${name}.pid"	27	pidfile="/var/run/${name}.pid"
28	tac_plus_enable=${tac_plus_enable:-"NO"}	28	tac_plus_enable=${tac_plus_enable:-"NO"}
29	tac_plus_flags=${tac_plus_flags:-}	29	tac_plus_flags=${tac_plus_flags:-}




A TACACS+ server that allows authorization and authentication via net
on remote access servers: Authenticate users, authorize commands and log
accounting information.

Version 4 has improved features and bugfixes over the older 2.x versions.
version, which is still available, since this source is still marked ALPHA.

Improved features among others and bugfixes: Microsoft CHAP support.
To enable MSCHAP you need to optain a key from Microsoft, see the FAQ
section in the users guide. Therefore this isn't enabled by default.

Cisco, the original developers, have stopped tac_plus development around
F4.0.4. There are different versions based on Cisco tac_plus, this is the
version from Shrubbery Networks.

WWW: http://www.shrubbery.net/tac_plus
WWW: http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800946a3.shtml

Added Link Here

(-)b/net/tac_plus4/pkg-message (+5 lines)
1	To run tac_plus at startup, add the following line to rc.conf:
2
3	tac_plus_enable="YES"
4
5	Extra options can be foud in the startup script.

Lines 1-6 Link Here

(-)b/net/tac_plus4/pkg-plist (-2 / +2 lines)
1	bin/tac_plus
2	bin/tac_pwd	1	bin/tac_pwd
3	etc/tac_plus.conf.example	2	%%ETCDIR%%.conf.example
4	include/tacacs.h	3	include/tacacs.h
5	lib/libtacacs.a	4	lib/libtacacs.a
6	lib/libtacacs.so	5	lib/libtacacs.so
Lines 9-13 lib/libtacacs.so.1.0.0 Link Here
9	man/man5/tac_plus.conf.5.gz	8	man/man5/tac_plus.conf.5.gz
10	man/man8/tac_plus.8.gz	9	man/man8/tac_plus.8.gz
11	man/man8/tac_pwd.8.gz	10	man/man8/tac_pwd.8.gz
		11	sbin/tac_plus
12	%%PORTDOCS%%%%DOCSDIR%%/tac_convert	12	%%PORTDOCS%%%%DOCSDIR%%/tac_convert
13	%%PORTDOCS%%%%DOCSDIR%%/users_guide	13	%%PORTDOCS%%%%DOCSDIR%%/users_guide

Return to bug 204683

Lines 2-14 Link Here

(-)b/net/tac_plus4/Makefile (-4 / +4 lines)
2	# $FreeBSD$	2	# $FreeBSD$
3		3
4	PORTNAME= tac_plus	4	PORTNAME= tac_plus
5	PORTVERSION= F4.0.4.27a	5	PORTVERSION= F4.0.4.28
6	CATEGORIES= net security	6	CATEGORIES= net security
7	MASTER_SITES= ftp://ftp.shrubbery.net/pub/tac_plus/	7	MASTER_SITES= ftp://ftp.shrubbery.net/pub/${PORTNAME}/
8	DISTNAME= tacacs+-F4.0.4.27a	8	DISTNAME= tacacs-${PORTVERSION}
9		9
10	MAINTAINER= marcus@FreeBSD.org	10	MAINTAINER= marcus@FreeBSD.org
11	COMMENT= The Cisco remote authentication/authorization/accounting server	11	COMMENT= Cisco remote authentication/authorization/accounting server
12		12
13	GNU_CONFIGURE= yes	13	GNU_CONFIGURE= yes
14	USES= bison perl5 libtool	14	USES= bison perl5 libtool

Lines 1-6 Link Here

(-)b/net/tac_plus4/files/patch-Makefile.in (-6 / +6 lines)
1	--- Makefile.in.orig 2012-04-17 02:56:54.000000000 +0400	1	--- Makefile.in.orig 2012-04-16 22:56:21 UTC
2	+++ Makefile.in 2013-04-13 13:43:18.000000000 +0400	2	+++ Makefile.in
3	@@ -98,7 +98,7 @@	3	@@ -162,7 +162,7 @@ am__tac_plus_SOURCES_DIST = acct.c authe
4	config.c default_fn.c default_v0_fn.c do_acct.c do_author.c \	4	config.c default_fn.c default_v0_fn.c do_acct.c do_author.c \
5	dump.c enable.c encrypt.c expire.c hash.c maxsessint.c parse.c \	5	dump.c enable.c encrypt.c expire.c hash.c maxsessint.c parse.c \
6	programs.c pw.c pwlib.c report.c sendauth.c sendpass.c \	6	programs.c pw.c pwlib.c report.c sendauth.c sendpass.c \
Lines 9-15 Link Here
9	@TACSKEY_TRUE@am__objects_1 = skey_fn.$(OBJEXT)	9	@TACSKEY_TRUE@am__objects_1 = skey_fn.$(OBJEXT)
10	@TACACECLNT_TRUE@am__objects_2 = aceclnt_fn.$(OBJEXT)	10	@TACACECLNT_TRUE@am__objects_2 = aceclnt_fn.$(OBJEXT)
11	am_tac_plus_OBJECTS = acct.$(OBJEXT) authen.$(OBJEXT) author.$(OBJEXT) \	11	am_tac_plus_OBJECTS = acct.$(OBJEXT) authen.$(OBJEXT) author.$(OBJEXT) \
12	@@ -109,7 +109,7 @@	12	@@ -173,7 +173,7 @@ am_tac_plus_OBJECTS = acct.$(OBJEXT) aut
13	parse.$(OBJEXT) programs.$(OBJEXT) pw.$(OBJEXT) \	13	parse.$(OBJEXT) programs.$(OBJEXT) pw.$(OBJEXT) \
14	pwlib.$(OBJEXT) report.$(OBJEXT) sendauth.$(OBJEXT) \	14	pwlib.$(OBJEXT) report.$(OBJEXT) sendauth.$(OBJEXT) \
15	sendpass.$(OBJEXT) tac_plus.$(OBJEXT) utils.$(OBJEXT) \	15	sendpass.$(OBJEXT) tac_plus.$(OBJEXT) utils.$(OBJEXT) \
Lines 18-24 Link Here
18	tac_plus_OBJECTS = $(am_tac_plus_OBJECTS)	18	tac_plus_OBJECTS = $(am_tac_plus_OBJECTS)
19	am__DEPENDENCIES_1 =	19	am__DEPENDENCIES_1 =
20	tac_plus_DEPENDENCIES = $(am__DEPENDENCIES_1)	20	tac_plus_DEPENDENCIES = $(am__DEPENDENCIES_1)
21	@@ -592,6 +592,7 @@	21	@@ -770,6 +770,7 @@ distclean-compile:
22	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sendauth.Po@am__quote@	22	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sendauth.Po@am__quote@
23	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sendpass.Po@am__quote@	23	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/sendpass.Po@am__quote@
24	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/skey_fn.Po@am__quote@	24	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/skey_fn.Po@am__quote@
Lines 26-32 Link Here
26	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tac_plus.Po@am__quote@	26	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tac_plus.Po@am__quote@
27	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tac_pwd.Po@am__quote@	27	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/tac_pwd.Po@am__quote@
28	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/utils.Po@am__quote@	28	@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/utils.Po@am__quote@
29	@@ -1049,8 +1050,7 @@	29	@@ -1256,8 +1257,7 @@ info: info-am
30		30
31	info-am:	31	info-am:
32		32

Lines 1-12 Link Here

(-)b/net/tac_plus4/pkg-descr (-4 / +8 lines)
1	TACACS+ program that allow authorization and authentication via net on	1	A TACACS+ server that allows authorization and authentication via net
2	remote access servers. Authenticate users, authorize commands and log	2	on remote access servers: Authenticate users, authorize commands and log
3	accounting information.	3	accounting information.
4		4
5	This new version 4 has improved features and bugfixes over the older 2.x	5	Version 4 has improved features and bugfixes over the older 2.x versions.
6	version, which is still available, since this source is still marked ALPHA.
7		6
8	Improved features among others and bugfixes: Microsoft CHAP support.	7	Improved features among others and bugfixes: Microsoft CHAP support.
9	To enable MSCHAP you need to optain a key from Microsoft, see the FAQ	8	To enable MSCHAP you need to optain a key from Microsoft, see the FAQ
10	section in the users guide. Therefore this isn't enabled by default.	9	section in the users guide. Therefore this isn't enabled by default.
11		10
		11	Cisco, the original developers, have stopped tac_plus development around
		12	F4.0.4. There are different versions based on Cisco tac_plus, this is the
		13	version from Shrubbery Networks.
		14
		15	WWW: http://www.shrubbery.net/tac_plus
12	WWW: http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800946a3.shtml	16	WWW: http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800946a3.shtml