Install configuration in /etc/freeradius/3.0
Configurations between major versions are expected to break. Upstream
recommends to install configuration in versioned subdirectories:
https://github.com/FreeRADIUS/freeradius-server/issues/1821
closes #839931
Michael Stapelberg
7 years ago
0 | # In freeradius 3.0.12+dfsg-2, all config files moved: | |
1 | # 1. to the freeradius-config package | |
2 | # 2. to /etc/freeradius/3.0/ | |
3 | rm_conffile /etc/freeradius/dictionary 3.0.12+dfsg-2~ freeradius-common | |
4 | rm_conffile /etc/freeradius/radiusd.conf 3.0.12+dfsg-2~ freeradius-common |
2 | 2 | |
3 | 3 | # There are example python scripts in the config, but it's the freeradius |
4 | 4 | # package that includes dependencies on the python libraries. |
5 | freeradius-config: python-script-but-no-python-dep etc/freeradius/mods-config/python/*.py | |
5 | freeradius-config: python-script-but-no-python-dep etc/freeradius/3.0/mods-config/python/*.py |
8 | 8 | dpkg-statoverride --add --update freerad freerad 2751 /etc/freeradius |
9 | 9 | fi |
10 | 10 | |
11 | if ! dpkg-statoverride --list | grep -qw /etc/freeradius/radiusd.conf$; then | |
12 | dpkg-statoverride --add --update root freerad 0640 /etc/freeradius/radiusd.conf | |
11 | if ! dpkg-statoverride --list | grep -qw /etc/freeradius/3.0/radiusd.conf$; then | |
12 | dpkg-statoverride --add --update root freerad 0640 /etc/freeradius/3.0/radiusd.conf | |
13 | 13 | fi |
14 | 14 | |
15 | 15 | # Relax permissions on local dictionary - allows radclient to run and should |
16 | 16 | # not contain secrets. At any rate, only do it on fresh install |
17 | if ! dpkg-statoverride --list | grep -qw /etc/freeradius/dictionary$; then | |
18 | dpkg-statoverride --add --update root freerad 0644 /etc/freeradius/dictionary | |
17 | if ! dpkg-statoverride --list | grep -qw /etc/freeradius/3.0/dictionary$; then | |
18 | dpkg-statoverride --add --update root freerad 0644 /etc/freeradius/3.0/dictionary | |
19 | 19 | fi |
20 | 20 | |
21 | 21 | # Create snakeoil certificates on initial install |
31 | 31 | fi |
32 | 32 | |
33 | 33 | if grep -q -r 'dh_file = \${certdir}/dh' /etc/freeradius && \ |
34 | test ! -f /etc/freeradius/certs/dh; then | |
35 | RANDFILE=/dev/urandom openssl dhparam -out /etc/freeradius/certs/dh 1024 | |
34 | test ! -f /etc/freeradius/3.0/certs/dh; then | |
35 | RANDFILE=/dev/urandom openssl dhparam -out /etc/freeradius/3.0/certs/dh 1024 | |
36 | 36 | fi |
37 | 37 | fi |
38 | 38 | |
41 | 41 | # want to remove them... |
42 | 42 | if [ -z "$2" ] || dpkg --compare-versions "$2" lt 2.0.4+dfsg-4; then |
43 | 43 | for site in default inner-tunnel; do |
44 | if [ ! -e /etc/freeradius/sites-enabled/$site ]; then | |
45 | ln -s ../sites-available/$site /etc/freeradius/sites-enabled/$site | |
44 | if [ ! -h /etc/freeradius/3.0/sites-enabled/$site ]; then | |
45 | ln -s ../sites-available/$site /etc/freeradius/3.0/sites-enabled/$site | |
46 | 46 | fi |
47 | 47 | done |
48 | 48 | fi |
49 | 49 | |
50 | if [ -z "$2" ] || dpkg --compare-versions "$2" lt 3.0.11+dfsg-1; then | |
50 | if [ -z "$2" ] || dpkg --compare-versions "$2" lt 3.0.11+dfsg-2; then | |
51 | 51 | for module in always attr_filter cache_eap chap detail detail.log \ |
52 | 52 | digest dynamic_clients eap echo exec expiration expr files \ |
53 | 53 | linelog logintime mschap ntlm_auth pap passwd preprocess \ |
54 | 54 | radutmp realm replicate soh sradutmp unix unpack utf8; do |
55 | if [ ! -e /etc/freeradius/mods-enabled/$module ]; then | |
56 | ln -s ../mods-available/$module /etc/freeradius/mods-enabled/$module | |
55 | if [ ! -h /etc/freeradius/3.0/mods-enabled/$module ]; then | |
56 | ln -s ../mods-available/$module /etc/freeradius/3.0/mods-enabled/$module | |
57 | 57 | fi |
58 | 58 | done |
59 | 59 | fi |
5 | 5 | remove) |
6 | 6 | ;; |
7 | 7 | purge) |
8 | if dpkg-statoverride --list | grep -qw /etc/freeradius/dictionary$; then | |
9 | dpkg-statoverride --remove /etc/freeradius/dictionary | |
10 | fi | |
11 | ||
12 | if dpkg-statoverride --list | grep -qw /etc/freeradius/radiusd.conf$; then | |
13 | dpkg-statoverride --remove /etc/freeradius/radiusd.conf | |
14 | fi | |
15 | ||
16 | if dpkg-statoverride --list | grep -qw /etc/freeradius$; then | |
17 | dpkg-statoverride --remove /etc/freeradius | |
18 | fi | |
8 | for file in /etc/freeradius/3.0/dictionary \ | |
9 | /etc/freeradius/3.0/radiusd.conf \ | |
10 | /etc/freeradius/3.0 \ | |
11 | /etc/freeradius/dictionary \ | |
12 | /etc/freeradius/radiusd.conf \ | |
13 | /etc/freeradius; do | |
14 | if dpkg-statoverride --list | grep -qw "${file}$"; then | |
15 | dpkg-statoverride --remove "$file" | |
16 | fi | |
17 | done | |
19 | 18 | |
20 | 19 | # Remove dangling links from sites-enabled. |
21 | for link in /etc/freeradius/sites-enabled/*; do | |
20 | for link in /etc/freeradius/sites-enabled/* \ | |
21 | /etc/freeradius/3.0/sites-enabled/*; do | |
22 | 22 | if [ -L "$link" ] && [ ! -e "$link" ]; then |
23 | 23 | rm -f "$link" |
24 | 24 | fi |
25 | 25 | done |
26 | 26 | |
27 | 27 | # Remove dangling links from mods-enabled. |
28 | for link in /etc/freeradius/mods-enabled/*; do | |
28 | for link in /etc/freeradius/mods-enabled/* \ | |
29 | /etc/freeradius/3.0/mods-enabled/*; do | |
29 | 30 | if [ -L "$link" ] && [ ! -e "$link" ]; then |
30 | 31 | rm -f "$link" |
31 | 32 | fi |
32 | 33 | done |
33 | 34 | |
34 | if [ -L /etc/freeradius/certs/server.pem ]; then | |
35 | rm -f /etc/freeradius/certs/server.pem | |
36 | fi | |
37 | if [ -L /etc/freeradius/certs/server.key ]; then | |
38 | rm -f /etc/freeradius/certs/server.key | |
39 | fi | |
40 | if [ -L /etc/freeradius/certs/ca.pem ]; then | |
41 | rm -f /etc/freeradius/certs/ca.pem | |
42 | fi | |
43 | if [ -L /etc/freeradius/certs/random ]; then | |
44 | rm -f /etc/freeradius/certs/random | |
45 | fi | |
46 | rm -f /etc/freeradius/certs/dh | |
35 | for file in /etc/freeradius/3.0/certs/server.pem \ | |
36 | /etc/freeradius/3.0/certs/server.key \ | |
37 | /etc/freeradius/3.0/certs/ca.pem \ | |
38 | /etc/freeradius/3.0/certs/random \ | |
39 | /etc/freeradius/3.0/certs/dh \ | |
40 | /etc/freeradius/certs/server.pem \ | |
41 | /etc/freeradius/certs/server.key \ | |
42 | /etc/freeradius/certs/ca.pem \ | |
43 | /etc/freeradius/certs/random \ | |
44 | /etc/freeradius/certs/dh; do | |
45 | rm -f "$file" | |
46 | done | |
47 | 47 | |
48 | 48 | # rmdir fails when called on a directory which does not exist |
49 | 49 | if [ -d /etc/freeradius ]; then |
0 | #!/bin/sh | |
1 | # vim:ts=2:sw=2:et | |
2 | ||
3 | set -e | |
4 | ||
5 | case "$1" in | |
6 | upgrade) | |
7 | # Delete any symlinks/files which were created in postinst previously. | |
8 | # These are not covered by conffile handling, so they would otherwise not | |
9 | # be cleaned up. | |
10 | for file in /etc/freeradius/certs/ca.pem \ | |
11 | /etc/freeradius/certs/server.key \ | |
12 | /etc/freeradius/certs/server.pem \ | |
13 | /etc/freeradius/sites-enabled/default \ | |
14 | /etc/freeradius/sites-enabled/inner-tunnel | |
15 | do | |
16 | if [ -h "$file" ] | |
17 | then | |
18 | rm -f "$file" | |
19 | fi | |
20 | done | |
21 | ;; | |
22 | esac | |
23 | ||
24 | #DEBHELPER# | |
25 | ||
26 | exit 0 |
9 | 9 | /etc/init.d/freeradius force-reload |
10 | 10 | fi |
11 | 11 | |
12 | if [ -z "$2" ] || dpkg --compare-versions "$2" lt 3.0.11+dfsg-1; then | |
12 | if [ -z "$2" ] || dpkg --compare-versions "$2" lt 3.0.11+dfsg-2; then | |
13 | 13 | for module in dhcp; do |
14 | if [ ! -e /etc/freeradius/mods-enabled/$module ]; then | |
15 | ln -s ../mods-available/$module /etc/freeradius/mods-enabled/$module | |
14 | if [ ! -h /etc/freeradius/3.0/mods-enabled/$module ]; then | |
15 | ln -s ../mods-available/$module /etc/freeradius/3.0/mods-enabled/$module | |
16 | 16 | fi |
17 | 17 | done |
18 | 18 | fi |
6 | 6 | ;; |
7 | 7 | purge) |
8 | 8 | # Remove dangling links from mods-enabled. |
9 | for link in /etc/freeradius/mods-enabled/dhcp; do | |
9 | for link in /etc/freeradius/3.0/mods-enabled/dhcp; do | |
10 | 10 | if [ -L "$link" ] && [ ! -e "$link" ]; then |
11 | 11 | rm -f "$link" |
12 | 12 | fi |
3 | 3 | |
4 | 4 | case "$1" in |
5 | 5 | remove) |
6 | for file in `find /etc/freeradius/mods-config/sql/main/mysql/ -print` | |
6 | for file in `find /etc/freeradius/3.0/mods-config/sql/main/mysql/ -print` | |
7 | 7 | do |
8 | 8 | if dpkg-statoverride --list | grep -qw $file$; then |
9 | 9 | dpkg-statoverride --remove $file |
10 | 10 | fi |
11 | 11 | done |
12 | 12 | |
13 | for dir in /etc/freeradius/mods-config/sql \ | |
14 | /etc/freeradius/mods-config/sql/mysql | |
13 | for dir in /etc/freeradius/3.0/mods-config/sql \ | |
14 | /etc/freeradius/3.0/mods-config/sql/mysql | |
15 | 15 | do |
16 | 16 | if dpkg-statoverride --list | grep -qw $dir$; then |
17 | 17 | dpkg-statoverride --remove $dir |
3 | 3 | |
4 | 4 | case "$1" in |
5 | 5 | remove) |
6 | for file in `find /etc/freeradius/mods-config/sql/main/postgresql/ -print` | |
6 | for file in `find /etc/freeradius/3.0/mods-config/sql/main/postgresql/ -print` | |
7 | 7 | do |
8 | 8 | if dpkg-statoverride --list | grep -qw $file$; then |
9 | 9 | dpkg-statoverride --remove $file |
10 | 10 | fi |
11 | 11 | done |
12 | 12 | |
13 | for dir in /etc/freeradius/mods-config/sql/main \ | |
14 | /etc/freeradius/mods-config/sql/main/postgresql | |
13 | for dir in /etc/freeradius/3.0/mods-config/sql/main \ | |
14 | /etc/freeradius/3.0/mods-config/sql/main/postgresql | |
15 | 15 | do |
16 | 16 | if dpkg-statoverride --list | grep -qw $dir$; then |
17 | 17 | dpkg-statoverride --remove $dir |
0 | 0 | freeradius (3.0.11+dfsg-1) experimental; urgency=medium |
1 | 1 | |
2 | 2 | Please see upstream’s “Upgrading to Version 3.0” guide which is available |
3 | locally in /etc/freeradius/README.rst or online at | |
3 | locally in /etc/freeradius/3.0/README.rst or online at | |
4 | 4 | https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/README.rst |
5 | 5 | |
6 | 6 | -- Michael Stapelberg <stapelberg@debian.org> Thu, 15 Sep 2016 20:21:09 +0200 |
10 | 10 | scripts/rc.radiusd |
11 | 11 | scripts/rc.radiusd.in |
12 | 12 | scripts/sql/users2mysql.pl |
13 | debian/tmp/etc/freeradius/certs | |
13 | debian/tmp/etc/freeradius/3.0/certs |
27 | 27 | # old files shipped by this package previously, but dropped upstream |
28 | 28 | rm_conffile /etc/freeradius/otp.conf 2.1.8+dfsg-1~ freeradius |
29 | 29 | rm_conffile /etc/freeradius/snmp.conf 2.1.8+dfsg-1~ freeradius |
30 | ||
31 | # In freeradius 3.0.12+dfsg-2, all config files moved: | |
32 | # 1. to the freeradius-config package | |
33 | # 2. to /etc/freeradius/3.0/ | |
34 | rm_conffile /etc/freeradius/acct_users 3.0.12+dfsg-2~ freeradius | |
35 | rm_conffile /etc/freeradius/attrs 3.0.12+dfsg-2~ freeradius | |
36 | rm_conffile /etc/freeradius/attrs.access_challenge 3.0.12+dfsg-2~ freeradius | |
37 | rm_conffile /etc/freeradius/attrs.access_reject 3.0.12+dfsg-2~ freeradius | |
38 | rm_conffile /etc/freeradius/attrs.accounting_response 3.0.12+dfsg-2~ freeradius | |
39 | rm_conffile /etc/freeradius/attrs.pre-proxy 3.0.12+dfsg-2~ freeradius | |
40 | rm_conffile /etc/freeradius/clients.conf 3.0.12+dfsg-2~ freeradius | |
41 | rm_conffile /etc/freeradius/eap.conf 3.0.12+dfsg-2~ freeradius | |
42 | rm_conffile /etc/freeradius/experimental.conf 3.0.12+dfsg-2~ freeradius | |
43 | rm_conffile /etc/freeradius/hints 3.0.12+dfsg-2~ freeradius | |
44 | rm_conffile /etc/freeradius/huntgroups 3.0.12+dfsg-2~ freeradius | |
45 | rm_conffile /etc/freeradius/ldap.attrmap 3.0.12+dfsg-2~ freeradius | |
46 | rm_conffile /etc/freeradius/modules/acct_unique 3.0.12+dfsg-2~ freeradius | |
47 | rm_conffile /etc/freeradius/modules/always 3.0.12+dfsg-2~ freeradius | |
48 | rm_conffile /etc/freeradius/modules/attr_filter 3.0.12+dfsg-2~ freeradius | |
49 | rm_conffile /etc/freeradius/modules/attr_rewrite 3.0.12+dfsg-2~ freeradius | |
50 | rm_conffile /etc/freeradius/modules/cache 3.0.12+dfsg-2~ freeradius | |
51 | rm_conffile /etc/freeradius/modules/chap 3.0.12+dfsg-2~ freeradius | |
52 | rm_conffile /etc/freeradius/modules/checkval 3.0.12+dfsg-2~ freeradius | |
53 | rm_conffile /etc/freeradius/modules/counter 3.0.12+dfsg-2~ freeradius | |
54 | rm_conffile /etc/freeradius/modules/cui 3.0.12+dfsg-2~ freeradius | |
55 | rm_conffile /etc/freeradius/modules/detail 3.0.12+dfsg-2~ freeradius | |
56 | rm_conffile /etc/freeradius/modules/detail.example.com 3.0.12+dfsg-2~ freeradius | |
57 | rm_conffile /etc/freeradius/modules/detail.log 3.0.12+dfsg-2~ freeradius | |
58 | rm_conffile /etc/freeradius/modules/dhcp_sqlippool 3.0.12+dfsg-2~ freeradius | |
59 | rm_conffile /etc/freeradius/modules/digest 3.0.12+dfsg-2~ freeradius | |
60 | rm_conffile /etc/freeradius/modules/dynamic_clients 3.0.12+dfsg-2~ freeradius | |
61 | rm_conffile /etc/freeradius/modules/echo 3.0.12+dfsg-2~ freeradius | |
62 | rm_conffile /etc/freeradius/modules/etc_group 3.0.12+dfsg-2~ freeradius | |
63 | rm_conffile /etc/freeradius/modules/exec 3.0.12+dfsg-2~ freeradius | |
64 | rm_conffile /etc/freeradius/modules/expiration 3.0.12+dfsg-2~ freeradius | |
65 | rm_conffile /etc/freeradius/modules/expr 3.0.12+dfsg-2~ freeradius | |
66 | rm_conffile /etc/freeradius/modules/files 3.0.12+dfsg-2~ freeradius | |
67 | rm_conffile /etc/freeradius/modules/inner-eap 3.0.12+dfsg-2~ freeradius | |
68 | rm_conffile /etc/freeradius/modules/ippool 3.0.12+dfsg-2~ freeradius | |
69 | rm_conffile /etc/freeradius/modules/krb5 3.0.12+dfsg-2~ freeradius | |
70 | rm_conffile /etc/freeradius/modules/ldap 3.0.12+dfsg-2~ freeradius | |
71 | rm_conffile /etc/freeradius/modules/linelog 3.0.12+dfsg-2~ freeradius | |
72 | rm_conffile /etc/freeradius/modules/logintime 3.0.12+dfsg-2~ freeradius | |
73 | rm_conffile /etc/freeradius/modules/mac2ip 3.0.12+dfsg-2~ freeradius | |
74 | rm_conffile /etc/freeradius/modules/mac2vlan 3.0.12+dfsg-2~ freeradius | |
75 | rm_conffile /etc/freeradius/modules/mschap 3.0.12+dfsg-2~ freeradius | |
76 | rm_conffile /etc/freeradius/modules/ntlm_auth 3.0.12+dfsg-2~ freeradius | |
77 | rm_conffile /etc/freeradius/modules/opendirectory 3.0.12+dfsg-2~ freeradius | |
78 | rm_conffile /etc/freeradius/modules/otp 3.0.12+dfsg-2~ freeradius | |
79 | rm_conffile /etc/freeradius/modules/pam 3.0.12+dfsg-2~ freeradius | |
80 | rm_conffile /etc/freeradius/modules/pap 3.0.12+dfsg-2~ freeradius | |
81 | rm_conffile /etc/freeradius/modules/passwd 3.0.12+dfsg-2~ freeradius | |
82 | rm_conffile /etc/freeradius/modules/perl 3.0.12+dfsg-2~ freeradius | |
83 | rm_conffile /etc/freeradius/modules/policy 3.0.12+dfsg-2~ freeradius | |
84 | rm_conffile /etc/freeradius/modules/preprocess 3.0.12+dfsg-2~ freeradius | |
85 | rm_conffile /etc/freeradius/modules/radrelay 3.0.12+dfsg-2~ freeradius | |
86 | rm_conffile /etc/freeradius/modules/radutmp 3.0.12+dfsg-2~ freeradius | |
87 | rm_conffile /etc/freeradius/modules/realm 3.0.12+dfsg-2~ freeradius | |
88 | rm_conffile /etc/freeradius/modules/redis 3.0.12+dfsg-2~ freeradius | |
89 | rm_conffile /etc/freeradius/modules/rediswho 3.0.12+dfsg-2~ freeradius | |
90 | rm_conffile /etc/freeradius/modules/replicate 3.0.12+dfsg-2~ freeradius | |
91 | rm_conffile /etc/freeradius/modules/smbpasswd 3.0.12+dfsg-2~ freeradius | |
92 | rm_conffile /etc/freeradius/modules/smsotp 3.0.12+dfsg-2~ freeradius | |
93 | rm_conffile /etc/freeradius/modules/soh 3.0.12+dfsg-2~ freeradius | |
94 | rm_conffile /etc/freeradius/modules/sql_log 3.0.12+dfsg-2~ freeradius | |
95 | rm_conffile /etc/freeradius/modules/sqlcounter_expire_on_login 3.0.12+dfsg-2~ freeradius | |
96 | rm_conffile /etc/freeradius/modules/sradutmp 3.0.12+dfsg-2~ freeradius | |
97 | rm_conffile /etc/freeradius/modules/unix 3.0.12+dfsg-2~ freeradius | |
98 | rm_conffile /etc/freeradius/modules/wimax 3.0.12+dfsg-2~ freeradius | |
99 | rm_conffile /etc/freeradius/policy.conf 3.0.12+dfsg-2~ freeradius | |
100 | rm_conffile /etc/freeradius/policy.txt 3.0.12+dfsg-2~ freeradius | |
101 | rm_conffile /etc/freeradius/preproxy_users 3.0.12+dfsg-2~ freeradius | |
102 | rm_conffile /etc/freeradius/proxy.conf 3.0.12+dfsg-2~ freeradius | |
103 | rm_conffile /etc/freeradius/sites-available/README 3.0.12+dfsg-2~ freeradius | |
104 | rm_conffile /etc/freeradius/sites-available/buffered-sql 3.0.12+dfsg-2~ freeradius | |
105 | rm_conffile /etc/freeradius/sites-available/coa 3.0.12+dfsg-2~ freeradius | |
106 | rm_conffile /etc/freeradius/sites-available/control-socket 3.0.12+dfsg-2~ freeradius | |
107 | rm_conffile /etc/freeradius/sites-available/copy-acct-to-home-server 3.0.12+dfsg-2~ freeradius | |
108 | rm_conffile /etc/freeradius/sites-available/decoupled-accounting 3.0.12+dfsg-2~ freeradius | |
109 | rm_conffile /etc/freeradius/sites-available/default 3.0.12+dfsg-2~ freeradius | |
110 | rm_conffile /etc/freeradius/sites-available/dhcp 3.0.12+dfsg-2~ freeradius | |
111 | rm_conffile /etc/freeradius/sites-available/dhcp.relay 3.0.12+dfsg-2~ freeradius | |
112 | rm_conffile /etc/freeradius/sites-available/dynamic-clients 3.0.12+dfsg-2~ freeradius | |
113 | rm_conffile /etc/freeradius/sites-available/example 3.0.12+dfsg-2~ freeradius | |
114 | rm_conffile /etc/freeradius/sites-available/inner-tunnel 3.0.12+dfsg-2~ freeradius | |
115 | rm_conffile /etc/freeradius/sites-available/originate-coa 3.0.12+dfsg-2~ freeradius | |
116 | rm_conffile /etc/freeradius/sites-available/proxy-inner-tunnel 3.0.12+dfsg-2~ freeradius | |
117 | rm_conffile /etc/freeradius/sites-available/robust-proxy-accounting 3.0.12+dfsg-2~ freeradius | |
118 | rm_conffile /etc/freeradius/sites-available/soh 3.0.12+dfsg-2~ freeradius | |
119 | rm_conffile /etc/freeradius/sites-available/status 3.0.12+dfsg-2~ freeradius | |
120 | rm_conffile /etc/freeradius/sites-available/virtual.example.com 3.0.12+dfsg-2~ freeradius | |
121 | rm_conffile /etc/freeradius/sites-available/vmps 3.0.12+dfsg-2~ freeradius | |
122 | rm_conffile /etc/freeradius/sql.conf 3.0.12+dfsg-2~ freeradius | |
123 | rm_conffile /etc/freeradius/sqlippool.conf 3.0.12+dfsg-2~ freeradius | |
124 | rm_conffile /etc/freeradius/templates.conf 3.0.12+dfsg-2~ freeradius | |
125 | rm_conffile /etc/freeradius/users 3.0.12+dfsg-2~ freeradius |
25 | 25 | [ ! -f "/var/log/freeradius/${file}" ] && install -o freerad -g freerad -m 644 /dev/null /var/log/freeradius/${file} |
26 | 26 | done |
27 | 27 | |
28 | for file in /etc/freeradius/mods-config/files/pre-proxy \ | |
29 | /etc/freeradius/mods-config/files/accounting \ | |
30 | /etc/freeradius/mods-config/preprocess/huntgroups \ | |
31 | /etc/freeradius/mods-config/preprocess/hints \ | |
32 | /etc/freeradius/experimental.conf \ | |
33 | /etc/freeradius/proxy.conf \ | |
34 | /etc/freeradius/clients.conf | |
28 | for file in /etc/freeradius/3.0/mods-config/files/pre-proxy \ | |
29 | /etc/freeradius/3.0/mods-config/files/accounting \ | |
30 | /etc/freeradius/3.0/mods-config/preprocess/huntgroups \ | |
31 | /etc/freeradius/3.0/mods-config/preprocess/hints \ | |
32 | /etc/freeradius/3.0/experimental.conf \ | |
33 | /etc/freeradius/3.0/proxy.conf \ | |
34 | /etc/freeradius/3.0/clients.conf \ | |
35 | /etc/freeradius/mods-config/files/pre-proxy \ | |
36 | /etc/freeradius/mods-config/files/accounting \ | |
37 | /etc/freeradius/mods-config/preprocess/huntgroups \ | |
38 | /etc/freeradius/mods-config/preprocess/hints \ | |
39 | /etc/freeradius/experimental.conf \ | |
40 | /etc/freeradius/proxy.conf \ | |
41 | /etc/freeradius/clients.conf | |
35 | 42 | do |
36 | 43 | if ! dpkg-statoverride --list | grep -qw $file$; then |
37 | 44 | dpkg-statoverride --add --update root freerad 0640 $file |
38 | 45 | fi |
39 | 46 | done |
40 | 47 | |
41 | for dir in /etc/freeradius/certs \ | |
42 | /etc/freeradius/sites-available \ | |
43 | /etc/freeradius/sites-enabled \ | |
44 | /etc/freeradius/mods-config/attr_filter \ | |
45 | /etc/freeradius/policy.d | |
48 | for dir in /etc/freeradius/3.0/certs \ | |
49 | /etc/freeradius/3.0/sites-available \ | |
50 | /etc/freeradius/3.0/sites-enabled \ | |
51 | /etc/freeradius/3.0/mods-config/attr_filter \ | |
52 | /etc/freeradius/3.0/policy.d \ | |
53 | /etc/freeradius/certs \ | |
54 | /etc/freeradius/sites-available \ | |
55 | /etc/freeradius/sites-enabled \ | |
56 | /etc/freeradius/mods-config/attr_filter \ | |
57 | /etc/freeradius/policy.d | |
46 | 58 | do |
47 | 59 | if ! dpkg-statoverride --list | grep -qw $dir$; then |
48 | 60 | dpkg-statoverride --add --update freerad freerad 2751 $dir |
59 | 71 | # want to remove them... |
60 | 72 | if [ -z "$2" ] || dpkg --compare-versions "$2" lt 2.0.4+dfsg-4; then |
61 | 73 | for site in default inner-tunnel; do |
62 | if [ ! -e /etc/freeradius/sites-enabled/$site ]; then | |
63 | ln -s ../sites-available/$site /etc/freeradius/sites-enabled/$site | |
74 | if [ ! -h /etc/freeradius/3.0/sites-enabled/$site ]; then | |
75 | ln -s ../sites-available/$site /etc/freeradius/3.0/sites-enabled/$site | |
64 | 76 | fi |
65 | 77 | done |
66 | 78 | fi |
94 | 106 | |
95 | 107 | #DEBHELPER# |
96 | 108 | |
109 | case "$1" in | |
110 | configure) | |
111 | # After removing conffiles (in the DEBHELPER part above), delete all | |
112 | # directories underneath /etc/freeradius which are now empty. | |
113 | find /etc/freeradius -type d -empty -delete | |
114 | ;; | |
115 | esac | |
116 | ||
97 | 117 | exit 0 |
7 | 7 | purge) |
8 | 8 | update-rc.d -f freeradius remove >/dev/null |
9 | 9 | |
10 | # Remove dangling links from sites-enabled. | |
11 | for link in /etc/freeradius/sites-enabled/*; do | |
12 | if [ -L "$link" ] && [ ! -e "$link" ]; then | |
13 | rm -f "$link" | |
14 | fi | |
15 | done | |
16 | ||
17 | if [ -L /etc/freeradius/certs/server.pem ]; then | |
18 | rm -f /etc/freeradius/certs/server.pem | |
19 | fi | |
20 | if [ -L /etc/freeradius/certs/server.key ]; then | |
21 | rm -f /etc/freeradius/certs/server.key | |
22 | fi | |
23 | if [ -L /etc/freeradius/certs/ca.pem ]; then | |
24 | rm -f /etc/freeradius/certs/ca.pem | |
25 | fi | |
26 | if [ -L /etc/freeradius/certs/random ]; then | |
27 | rm -f /etc/freeradius/certs/random | |
28 | fi | |
29 | rm -f /etc/freeradius/certs/dh | |
30 | ||
31 | 10 | rm -f /var/log/freeradius/radius.log* /var/log/freeradius/radwtmp* |
32 | 11 | ;; |
33 | 12 | esac |
3 | 3 | |
4 | 4 | case "$1" in |
5 | 5 | upgrade) |
6 | if dpkg --compare-versions "$2" lt "2.0.0"; then | |
7 | test -d /etc/freeradius/certs/demoCA && rmdir --ignore-fail-on-non-empty /etc/freeradius/certs/demoCA/ | |
6 | if dpkg --compare-versions "$2" lt "3.0.12+dfsg-1"; then | |
7 | # Delete all symbolic links which older freeradius packages created in | |
8 | # their maintscripts. | |
9 | find -H /etc/freeradius/sites-enabled/ -type l -delete | |
10 | find -H /etc/freeradius/certs/ -type l -delete | |
11 | rm -f /etc/freeradius/certs/dh | |
8 | 12 | fi |
9 | 13 | |
10 | 14 | if dpkg --compare-versions "$2" lt "2.1.8"; then |
9 | 9 | /etc/init.d/freeradius stop |
10 | 10 | fi |
11 | 11 | |
12 | for file in /etc/freeradius/mods-config/files/pre-proxy \ | |
13 | /etc/freeradius/mods-config/preprocess/huntgroups \ | |
14 | /etc/freeradius/mods-config/preprocess/hints \ | |
15 | /etc/freeradius/mods-config/files/accounting \ | |
16 | /etc/freeradius/experimental.conf \ | |
17 | /etc/freeradius/proxy.conf \ | |
18 | /etc/freeradius/clients.conf | |
12 | for file in /etc/freeradius/3.0/mods-config/files/pre-proxy \ | |
13 | /etc/freeradius/3.0/mods-config/preprocess/huntgroups \ | |
14 | /etc/freeradius/3.0/mods-config/preprocess/hints \ | |
15 | /etc/freeradius/3.0/mods-config/files/accounting \ | |
16 | /etc/freeradius/3.0/experimental.conf \ | |
17 | /etc/freeradius/3.0/proxy.conf \ | |
18 | /etc/freeradius/3.0/clients.conf \ | |
19 | /etc/freeradius/mods-config/files/pre-proxy \ | |
20 | /etc/freeradius/mods-config/preprocess/huntgroups \ | |
21 | /etc/freeradius/mods-config/preprocess/hints \ | |
22 | /etc/freeradius/mods-config/files/accounting \ | |
23 | /etc/freeradius/experimental.conf \ | |
24 | /etc/freeradius/proxy.conf \ | |
25 | /etc/freeradius/clients.conf; | |
19 | 26 | do |
20 | 27 | if dpkg-statoverride --list | grep -qw $file$; then |
21 | 28 | dpkg-statoverride --remove $file |
22 | 29 | fi |
23 | 30 | done |
24 | 31 | |
25 | for dir in /etc/freeradius/certs \ | |
26 | /etc/freeradius/sites-available \ | |
27 | /etc/freeradius/sites-enabled \ | |
28 | /etc/freeradius/mods-available \ | |
29 | /etc/freeradius/mods-enabled \ | |
30 | /etc/freeradius/mods-config/attr_filter \ | |
31 | /etc/freeradius/mods-config \ | |
32 | /etc/freeradius/policy.d \ | |
33 | /var/run/freeradius \ | |
34 | /var/log/freeradius | |
32 | for dir in /etc/freeradius/3.0/certs \ | |
33 | /etc/freeradius/3.0/sites-available \ | |
34 | /etc/freeradius/3.0/sites-enabled \ | |
35 | /etc/freeradius/3.0/mods-available \ | |
36 | /etc/freeradius/3.0/mods-enabled \ | |
37 | /etc/freeradius/3.0/mods-config/attr_filter \ | |
38 | /etc/freeradius/3.0/mods-config \ | |
39 | /etc/freeradius/3.0/policy.d \ | |
40 | /etc/freeradius/certs \ | |
41 | /etc/freeradius/sites-available \ | |
42 | /etc/freeradius/sites-enabled \ | |
43 | /etc/freeradius/mods-available \ | |
44 | /etc/freeradius/mods-enabled \ | |
45 | /etc/freeradius/mods-config/attr_filter \ | |
46 | /etc/freeradius/mods-config \ | |
47 | /etc/freeradius/policy.d \ | |
48 | /var/run/freeradius \ | |
49 | /var/log/freeradius; | |
35 | 50 | do |
36 | 51 | if dpkg-statoverride --list | grep -qw $dir$; then |
37 | 52 | dpkg-statoverride --remove $dir |
34 | 34 | find debian/tmp/usr/lib/freeradius -name "*.a" -and \! -name "libfreeradius-*.a" -delete |
35 | 35 | # We create the mods-enabled links in freeradius-config.postinst so |
36 | 36 | # that they are not re-created when users upgrade to a newer version. |
37 | rm debian/tmp/etc/freeradius/mods-enabled/* | |
37 | rm debian/tmp/etc/freeradius/3.0/mods-enabled/* | |
38 | 38 | # Use --fail-missing so that new files e.g. in usr/lib/freeradius/rlm_* |
39 | 39 | # can be detected and added to debian/freeradius.install. We cannot use |
40 | 40 | # globbing because some files are split into more specific packages, |
67 | 67 | --exec-prefix=/usr \ |
68 | 68 | --libdir=/usr/lib/freeradius \ |
69 | 69 | --datadir=/usr/share \ |
70 | --with-raddbdir=/etc/freeradius \ | |
70 | --with-raddbdir=/etc/freeradius/3.0 \ | |
71 | 71 | --with-logdir=/var/log/freeradius \ |
72 | 72 | --with-large-files \ |
73 | 73 | --with-udpfromto \ |