Bug 136254

Update to FreeRADIUS 2.1.6.

There was no version 2.1.5; internally, 2.1.4 declared itself to
be 2.1.5 so that version was skipped.


FreeBSD notes
=============

The Makefile has been refactored to use bsd.port.options.mk now
that it is available for use. The extensive diff against Makefile
is mostly re-ordering existing lines.

The dependencies on Perl and Python have been made optional via
the PERL and PYTHON OPTIONs. The main and rlm_perl configure.in
files are patched in files/patch-perl to add a --without-perl
option so that the dependency on Perl can be properly
disabled. This deals with the request in ports/131595 that these
dependencies become optional; only now that bsd.port.options.mk
is available can this be done without kludges.

[Possibly incompatible change] The NOPERL knob, which was never a
complete solution, has been retired. Those who used to compile
the port -DWITH_NOPERL should disable the PERL option before
building this version.

A RUBY OPTION has been introduced for the experimental rlm_ruby.

[Possibly incompatible change] DHCP support now has its own
DHCP OPTION and is not included in EXPERIMENTAL.

unixODBC support has been added (mirroring the change in PR
ports/133746 for net/freeradius).



I do not believe that the two possibly incompatible changes
necessarily need mentioning in UPDATING. The first deletes a knob
that was deprecated in all versions of net/freeradius2. The
second gives each of the two functions previously assigned to the
EXPERIMENTAL OPTION their own OPTION. In most if not all cases,
the change in OPTIONS= will mean an automatic 'make config'
before the port is built.

The new OPTIONs do not change the default features, so the
feature set of the package is unchanged. rlm_perl and rlm_python
remain on by default, following the upstream defaults.


Release notes
=============

Feature Improvements

* radclient exits with 0 on successful (accept / ack), and 1
  otherwise (no response / reject)
* Added support for %{sql:UPDATE ..}, and insert/delete. Patch
  from Arran Cudbard-Bell
* Added sample "do not respond" policy. See raddb/policy.conf and
  raddb/sites-available/do_not_respond
* Cleanups to Suse spec file from Norbert Wegener
* New VSAs for Juniper from Bjorn Mork
* Include more RFC dictionaries in the default install
* More documentation for the WiMAX module
* Added "chase_referrals" and "rebind" configuration to
  rlm_ldap. This helps with Active Directory. See
  raddb/modules/ldap
* Don't load pre/post-proxy if proxying is disabled.
* Added %{md5:...}, which returns MD5 hash in hex.
* Added configurable "retry_interval" and "poll_interval" for
  "detail" listeners.
* Added "delete_mppe_keys" configuration option to
  rlm_wimax. Apparently some WiMAX clients misbehave when they
  see those keys.
* Added experimental rlm_ruby from
  http://github.com/Antti/freeradius-server/tree/master
* Add Tunnel attributes to ldap.attrmap
* Enable virtual servers to be reloaded on HUP. For now, only the
  "authorize", "authenticate", etc. processing sections are
  reloaded. Clients and "listen" sections are NOT reloaded.
* Updated "radwatch" script to be more robust. See scripts/radwatch
* Added certificate compatibility notes in raddb/certs/README,
  for compatibility with different operating
  systems. (i.e. Windows)


Bug Fixes

* Minor changes to allow building without VQP.
* Minor fixes from John Center
* Fixed raddebug example
* Don't crash when deleting attributes via unlang
* Be friendlier to very fast clients
* Updated the "detail" listener so that it only polls once, and
  not many times in a row, leaking memory each time...
* Update comparison for Packet-Src-IP-Address (etc.) so that the
  operators other than '==' work.
* Did autoconf magic to work around weird libtool bug
* Make rlm_perl keep tags for tagged attributes in more situations
* Update UID checking for radmin
* Added "include_length" field for TTLS. It's needed for RFC
  compliance, but not (apparently) for interoperability.


INSTRUCTIONS
============

files/patch-version and files/patch-bootstrap have been been
deleted.

files/patch-perl and files/patch-bootstrap have been added.


Please note: portlint seems not to understand bsd.port.options.mk
and throws up a whole bunch of new FATAL errors that are bogus.

Fix: Patch attached with submission follows: