aboutsummaryrefslogtreecommitdiffstats
path: root/net/freeradius3/Makefile
diff options
context:
space:
mode:
Diffstat (limited to 'net/freeradius3/Makefile')
-rw-r--r--net/freeradius3/Makefile451
1 files changed, 451 insertions, 0 deletions
diff --git a/net/freeradius3/Makefile b/net/freeradius3/Makefile
new file mode 100644
index 000000000000..a7b1090a2e80
--- /dev/null
+++ b/net/freeradius3/Makefile
@@ -0,0 +1,451 @@
+# Created by: Ryan Steinmetz <zi@FreeBSD.org>
+# $FreeBSD$
+
+PORTNAME= freeradius
+DISTVERSION= 3.0.0
+CATEGORIES= net
+MASTER_SITES= ftp://ftp.freeradius.org/pub/freeradius/%SUBDIR%/ \
+ ftp://ftp.ntua.gr/pub/net/radius/freeradius/%SUBDIR%/ \
+ ftp://ftp.uk.freeradius.org/pub/radius/%SUBDIR%/ \
+ http://ftp.cc.uoc.gr/mirrors/ftp.freeradius.org/%SUBDIR%/ \
+ http://freeradius.portal-to-web.de/%SUBDIR%/ \
+ http://mirrors.rit.edu/zi/
+MASTER_SITE_SUBDIR= . old
+DISTNAME= freeradius-server-${DISTVERSION}
+
+MAINTAINER= zi@FreeBSD.org
+COMMENT= A free RADIUS server implementation
+
+LICENSE= GPLv2
+
+LIB_DEPENDS= gdbm:${PORTSDIR}/databases/gdbm \
+ talloc:${PORTSDIR}/devel/talloc
+
+LOGDIR?= /var/log
+KRB5_CONFIG?= /usr/bin/krb5-config --libs
+
+CONFLICTS= gnu-radius-[0-9].* openradius-[0-9].* radiusd-cistron-[0-9].* \
+ freeradius-mysql-[0-9].* freeradius-[0124-9].*
+
+USE_RC_SUBR= radiusd
+
+USES= gmake
+HAS_CONFIGURE= yes
+USE_AUTOTOOLS= libltdl libtool autoconf
+USE_BZIP2= yes
+USE_OPENSSL= yes
+MAKE_ARGS+= LDFLAGS="-L${LOCALBASE}/lib ${PTHREAD_LIBS}"
+CFLAGS+= -I${LOCALBASE}/include -L${LOCALBASE}/lib
+MAKE_JOBS_SAFE= yes
+
+PLIST_SUB= PORTVERSION=${DISTVERSION} LIBVER=0${PORTVERSION:C/\./0/g}
+
+OPTIONS_DEFINE= USER KERBEROS HEIMDAL HEIMDAL_PORT LDAP MYSQL \
+ PGSQL UNIXODBC FIREBIRD REDIS PYTHON RUBY DHCP \
+ EXPERIMENTAL UDPFROMTO DEVELOPER EDIR PERL REST \
+ FREETDS IDN
+OPTIONS_DEFAULT=USER PERL
+
+DHCP_DESC= With DHCP support (EXPERIMENTAL)
+USER_DESC= Run as user freeradius, group freeradius
+HEIMDAL_DESC= With Heimdal Kerberos support
+HEIMDAL_PORT_DESC= With Heimdal Kerberos from ports
+UNIXODBC_DESC= With unixODBC database support
+FIREBIRD_DESC= With Firebird database support (EXPERIMENTAL)
+EXPERIMENTAL_DESC= Build experimental modules
+UDPFROMTO_DESC= Compile in UDPFROMTO support
+DEVELOPER_DESC= Enable developer options
+EDIR_DESC= Enable eDirectory support (implies LDAP)
+REST_DESC= Enable RESTful API support
+
+NO_STAGE= yes
+
+.include <bsd.port.options.mk>
+
+# Default requirements for rc script
+_REQUIRE= NETWORKING SERVERS
+
+.if ${PORT_OPTIONS:MUSER}
+SUB_LIST+= RUN_AS_USER="yes"
+.else
+SUB_LIST+= RUN_AS_USER="no"
+.endif
+
+# User and group to use if USER option is chosen
+RADIUS_USER= freeradius
+RADIUS_GROUP= freeradius
+
+USERS= ${RADIUS_USER}
+GROUPS= ${RADIUS_GROUP}
+
+.if ${PORT_OPTIONS:MHEIMDAL} && empty(PORT_OPTIONS:MKERBEROS)
+${UNIQUENAME}_SET+= KERBEROS
+.endif
+
+.if ${PORT_OPTIONS:MKERBEROS}
+.if ${PORT_OPTIONS:MHEIMDAL}
+.if ${PORT_OPTIONS:MHEIMDAL_PORT}
+LIB_DEPENDS+= krb5:${PORTSDIR}/security/heimdal
+.endif
+CONFIGURE_ARGS+=--enable-heimdal-krb5
+.else
+LIB_DEPENDS+= krb5:${PORTSDIR}/security/krb5
+.endif
+CONFIGURE_ARGS+=--with-rlm_krb5
+.if ${PORT_OPTIONS:MHEIMDAL} && empty(PORT_OPTIONS:MHEIMDAL_PORT)
+CONFIGURE_ARGS+=--with-rlm-krb5-lib-dir=/usr/lib
+CONFIGURE_ARGS+=--with-rlm-krb5-include-dir=/usr/include
+CONFIGURE_ENV+= KRB5LIBS="$$(${KRB5_CONFIG})"
+.else
+CONFIGURE_ARGS+=--with-rlm-krb5-lib-dir=${LOCALBASE}/lib
+CONFIGURE_ARGS+=--with-rlm-krb5-include-dir=${LOCALBASE}/include
+.endif
+PLIST_SUB+= KRB5=""
+.else
+CONFIGURE_ARGS+=--without-rlm_krb5
+PLIST_SUB+= KRB5="@comment "
+.endif
+
+.if ${PORT_OPTIONS:MEDIR}
+CONFIGURE_ARGS+=--with-edir
+.if empty(PORT_OPTIONS:MLDAP)
+PORT_OPTIONS+= LDAP
+.endif
+.else
+CONFIGURE_ARGS+=--without-edir
+.endif
+
+.if ${PORT_OPTIONS:MLDAP}
+USE_OPENLDAP= YES
+CONFIGURE_ARGS+=--with-rlm_ldap
+PLIST_SUB+= LDAP=""
+_REQUIRE+= slapd
+.else
+CONFIGURE_ARGS+=--without-rlm_ldap
+PLIST_SUB+= LDAP="@comment "
+.endif
+
+.if ${PORT_OPTIONS:MMYSQL}
+USE_MYSQL= YES
+CONFIGURE_ARGS+=--with-rlm_sql_mysql
+PLIST_SUB+= MYSQL=""
+_REQUIRE+= mysql
+.else
+CONFIGURE_ARGS+=--without-rlm_sql_mysql
+PLIST_SUB+= MYSQL="@comment "
+.endif
+
+.if ${PORT_OPTIONS:MPGSQL}
+USE_PGSQL= YES
+CONFIGURE_ARGS+=--with-rlm_sql_postgresql
+PLIST_SUB+= PGSQL=""
+_REQUIRE+= postgresql
+.else
+CONFIGURE_ARGS+=--without-rlm_sql_postgresql
+PLIST_SUB+= PGSQL="@comment "
+.endif
+
+.if ${PORT_OPTIONS:MUNIXODBC}
+CONFIGURE_ARGS+=--with-rlm_sql_unixodbc
+PLIST_SUB+= UNIXODBC=""
+LIB_DEPENDS+= odbc:${PORTSDIR}/databases/unixODBC
+.else
+CONFIGURE_ARGS+=--without-rlm_sql_unixodbc
+PLIST_SUB+= UNIXODBC="@comment "
+.endif
+
+.if ${PORT_OPTIONS:MFIREBIRD}
+USE_FIREBIRD= YES
+CONFIGURE_ARGS+=--with-rlm_sql_firebird
+PLIST_SUB+= FIREBIRD=""
+.else
+CONFIGURE_ARGS+=--without-rlm_sql_firebird
+PLIST_SUB+= FIREBIRD="@comment "
+.endif
+
+# Firebird module is still experimental
+.if ${PORT_OPTIONS:MFIREBIRD} && empty(PORT_OPTIONS:MEXPERIMENTAL)
+EXPM= yes
+.endif
+
+.if ${PORT_OPTIONS:MPERL}
+USES+= perl5
+CONFIGURE_ARGS+=--with-rlm_perl
+PLIST_SUB+= RLMPERL=""
+.else
+CONFIGURE_ARGS+=--without-perl --without-rlm_perl
+PLIST_SUB+= RLMPERL="@comment "
+.endif
+
+.if ${PORT_OPTIONS:MPYTHON}
+USE_PYTHON= yes
+CONFIGURE_ARGS+=--with-rlm_python \
+ --with-rlm-python-lib-dir=${PYTHON_LIBDIR} \
+ --with-rlm-python-include-dir=${PYTHON_INCLUDEDIR}
+PLIST_SUB+= RLMPYTHON=""
+.else
+CONFIGURE_ARGS+=--without-rlm_python
+PLIST_SUB+= RLMPYTHON="@comment "
+.endif
+
+.if ${PORT_OPTIONS:MRUBY}
+USE_RUBY= yes
+CONFIGURE_ARGS+=--with-rlm_ruby
+PLIST_SUB+= RLMRUBY=""
+.else
+CONFIGURE_ARGS+=--without-rlm_ruby --with-ruby=no
+PLIST_SUB+= RLMRUBY="@comment "
+.endif
+
+# rlm_ruby module is still experimental
+.if ${PORT_OPTIONS:MRUBY} && empty(PORT_OPTIONS:MEXPERIMENTAL)
+EXPM= yes
+.endif
+
+.if ${PORT_OPTIONS:MDHCP}
+IGNORE= currently fails to build properly with DHCP support
+CONFIGURE_ARGS+=--with-dhcp
+.else
+CONFIGURE_ARGS+=--without-dhcp --without-rlm_dhcp --without-proto_dhcp
+.endif
+
+# DHCP is still experimental
+.if ${PORT_OPTIONS:MDHCP} && empty(PORT_OPTIONS:MEXPERIMENTAL)
+EXPM= yes
+.endif
+
+# No SMB option yet; rlm_smb is still unbuildable
+.if ${PORT_OPTIONS:MSMB}
+LIB_DEPENDS= smbclient:${PORTSDIR}/net/samba-libsmbclient
+CONFIGURE_ARGS+=--with-rlm_smb
+CONFIGURE_ARGS+=--with-rlm-smb-lib-dir=${LOCALBASE}/lib
+CONFIGURE_ARGS+=--with-rlm-smb-include-dir=${LOCALBASE}/include
+PLIST_SUB+= SMB=""
+.else
+CONFIGURE_ARGS+=--without-rlm_smb
+PLIST_SUB+= SMB="@comment "
+.endif
+
+# SMB module is still experimental
+.if ${PORT_OPTIONS:MSMB} && empty(PORT_OPTIONS:MEXPERIMENTAL)
+EXPM= yes
+.endif
+
+.if ${PORT_OPTIONS:MREDIS}
+LIB_DEPENDS+= hiredis:${PORTSDIR}/databases/hiredis
+CONFIGURE_ARGS+=--with-rlm_redis --with-rlm_rediswho
+PLIST_SUB+= RLMREDIS=""
+.else
+CONFIGURE_ARGS+=--without-rlm_redis --without-rlm_rediswho
+PLIST_SUB+= RLMREDIS="@comment "
+.endif
+
+# redis module is still experimental
+.if ${PORT_OPTIONS:MREDIS} && empty(PORT_OPTIONS:MEXPERIMENTAL)
+EXPM= yes
+.endif
+
+.if ${PORT_OPTIONS:MREST}
+IGNORE= requires devel/json-c to be updated to 0.11 to build with RESTful support
+LIB_DEPENDS+= json:${PORTSDIR}/devel/json-c \
+ curl:${PORTSDIR}/ftp/curl
+CONFIGURE_ARGS+=--with-rlm_rest \
+ --with-libcurl=${LOCALBASE} \
+ --with-jsonc-lib-dir=${LOCALBASE}/lib \
+ --with-jsonc-include-dir=${LOCALBASE}/include
+PLIST_SUB+= RLMREST=""
+.else
+CONFIGURE_ARGS+=--without-rlm_rest
+PLIST_SUB+= RLMREST="@comment "
+.endif
+
+# rest module is still experimental
+.if ${PORT_OPTIONS:MREST} && empty(PORT_OPTIONS:MEXPERIMENTAL)
+EXPM= yes
+.endif
+
+.if ${PORT_OPTIONS:MFREETDS}
+LIB_DEPENDS+= tds:${PORTSDIR}/databases/freetds
+CONFIGURE_ARGS+=--with-rlm_freetds
+PLIST_SUB+= RLMFREETDS=""
+.else
+CONFIGURE_ARGS+=--without-rlm_freetds
+PLIST_SUB+= RLMFREETDS="@comment "
+.endif
+
+# freetds module is still experimental
+.if ${PORT_OPTIONS:MFREETDS} && empty(PORT_OPTIONS:MEXPERIMENTAL)
+EXPM= yes
+.endif
+
+.if ${PORT_OPTIONS:MIDN}
+LIB_DEPENDS+= idn:${PORTSDIR}/dns/libidn
+CONFIGURE_ARGS+=--with-rlm_idn
+PLIST_SUB+= RLMIDN=""
+.else
+CONFIGURE_ARGS+=--without-rlm_idn
+PLIST_SUB+= RLMIDN="@comment "
+.endif
+
+# freetds module is still experimental
+.if ${PORT_OPTIONS:MIDN} && empty(PORT_OPTIONS:MEXPERIMENTAL)
+EXPM= yes
+.endif
+
+.if ${PORT_OPTIONS:MEXPERIMENTAL} || defined(EXPM)
+CONFIGURE_ARGS+=--with-experimental-modules
+PLIST_SUB+= EXPM=""
+.else
+CONFIGURE_ARGS+=--without-experimental-modules
+PLIST_SUB+= EXPM="@comment "
+.endif
+
+.if ${PORT_OPTIONS:MDEVELOPER}
+CONFIGURE_ARGS+=--enable-developer
+# Turn off compiler optimisations
+CFLAGS!= ${ECHO} ${CFLAGS} | ${SED} -Ee 's:-O[0-9]?[[:space:]]*::g'
+.else
+CONFIGURE_ARGS+=--quiet
+.endif
+
+# Compile in UDPFROMTO support
+.if ${PORT_OPTIONS:MUDPFROMTO}
+CONFIGURE_ARGS+=--with-udpfromto
+.endif
+
+.include <bsd.port.pre.mk>
+
+# if we're installing, place sample configs into ${EXAMPLESDIR}
+.if make(install)
+MAKE_ENV+= raddbdir="${EXAMPLESDIR}/raddb"
+.endif
+
+.if ${ARCH} == "sparc64" && ${OSVERSION} < 700000
+BROKEN= Does not build on sparc64-6
+.endif
+
+FREERADIUS_LIBDIR= lib/freeradius-${PORTVERSION}
+PLIST_SUB+= LIBDIR="${FREERADIUS_LIBDIR}"
+USE_LDCONFIG= ${PREFIX}/${FREERADIUS_LIBDIR}
+
+.if empty(PORT_OPTIONS:MDOCS)
+CONFIGURE_ARGS+=--without-docdir
+PLIST_SUB+= PORTDOCS="@comment "
+SUB_LIST+= PORTDOCS="@comment "
+.else
+CONFIGURE_ARGS+=--with-docdir=${DOCSDIR}
+PLIST_SUB+= PORTDOCS=""
+SUB_LIST+= PORTDOCS=""
+.endif
+
+# This conditionality avoids -L/usr/lib in the radiusd build step when
+# building with base system OpenSSL
+.if ${OPENSSLLIB} != "/usr/lib"
+CONFIGURE_ARGS+=--with-openssl-libraries=${OPENSSLLIB}
+.endif
+CONFIGURE_ARGS+=--with-system-libtool --with-system-libltdl \
+ --disable-ltdl-install --with-logdir=${LOGDIR} \
+ --with-openssl-includes=${OPENSSLINC} \
+ --prefix=${PREFIX} --libdir=${PREFIX}/${FREERADIUS_LIBDIR} \
+ --localstatedir=/var \
+ --without-rlm_eap_ikev2 \
+ --without-rlm_eap_tnc \
+ --without-rlm_eap2 \
+ --without-rlm_opendirectory \
+ --without-rlm_sql_db2 \
+ --without-rlm_sql_iodbc \
+ --without-rlm_sql_sqlite \
+ --without-rlm_sql_sybase \
+ --without-rlm_yubikey \
+ --without-rlm_sql_oracle \
+ --without-rlm_securid \
+ --with-vmps
+
+.if ${ARCH} == amd64
+CONFIGURE_ARGS+=--with-pic
+.endif
+
+SUB_LIST+= RADIUS_USER="${RADIUS_USER}" \
+ RADIUS_GROUP="${RADIUS_GROUP}" \
+ RADDB_WORK="${WRKSRC}/raddb" \
+ RADDB="${PREFIX}/etc/raddb" \
+ LOGDIR="${LOGDIR}" \
+ LIBDIR="${PREFIX}/${FREERADIUS_LIBDIR}"
+SUB_FILES+= pkg-install pkg-message
+
+MAN1= radclient.1 radeapclient.1 radlast.1 radtest.1 radwho.1 \
+ radzap.1 smbencrypt.1
+MAN5= clients.conf.5 dictionary.5 radiusd.conf.5 radrelay.conf.5 \
+ rlm_always.5 rlm_attr_filter.5 rlm_chap.5 rlm_counter.5 \
+ rlm_detail.5 rlm_digest.5 rlm_expr.5 rlm_files.5 rlm_mschap.5 \
+ rlm_pap.5 rlm_passwd.5 rlm_realm.5 rlm_sql.5 \
+ rlm_unix.5 unlang.5 users.5 checkrad.5 rlm_idn.5
+MAN8= radiusd.8 radmin.8 raddebug.8 radrelay.8 radsqlrelay.8 \
+ rlm_ippool_tool.8 radconf2xml.8 radcrypt.8 radsniff.8
+
+SUB_LIST+= REQUIRE="${_REQUIRE}"
+
+post-patch:
+ @${REINPLACE_CMD} -Ee "s:tests/all.mk ::" ${WRKSRC}/src/all.mk
+ @${CP} ${WRKSRC}/m4/ax_with_prog.m4 ${WRKSRC}
+ @${REINPLACE_CMD} -Ee "s:^make:${GMAKE}:" \
+ ${WRKSRC}/raddb/certs/bootstrap
+# Patch raddb/certs/Makefile for the full path to the openssl binary (using
+# ports OpenSSL if installed)
+ @${REINPLACE_CMD} -E \
+ -e "s:^([[:space:]])+openssl:\1${OPENSSLBASE}/bin/openssl:g" \
+ ${WRKSRC}/raddb/certs/Makefile
+ @${REINPLACE_CMD} -Ee 's: ..R...sbindir./rc.radiusd : :' \
+ ${WRKSRC}/scripts/all.mk
+# Clean up after the last two operations (so as not to get unwanted files in
+# raddb)
+ @${FIND} -E ${WRKSRC}/raddb/certs \
+ -regex '.*/(bootstrap|Makefile)\.(orig|bak)$$' \
+ -delete
+# If we're using Heimdal from base, alter the LIBS variable
+.if ${PORT_OPTIONS:MHEIMDAL} && empty(PORT_OPTIONS:MHEIMDAL_PORT)
+ @${REINPLACE_CMD} -e 's|LIBS|KRB5LIBS|g' ${WRKSRC}/src/modules/rlm_krb5/configure
+ @${REINPLACE_CMD} -e 's|-lkrb5|$$(${KRB5_CONFIG})|g' \
+ ${WRKSRC}/src/modules/rlm_krb5/configure
+.endif
+# If DHCP is enabled, enable the DHCP dictionary
+.if ${PORT_OPTIONS:MDHCP}
+ @${REINPLACE_CMD} -Ee 's:^#(.+ dictionary\.dhcp)$$:\1:g' \
+ ${WRKSRC}/share/dictionary
+# Clean up (so as not to get an unwanted file in share)
+ @${FIND} -E ${WRKSRC}/share \
+ -regex '.*/dictionary\.(orig|bak)$$' \
+ -delete
+.else
+ @${RM} -fr ${WRKSRC}/src/modules/proto_dhcp/
+.endif
+.if empty(PORT_OPTIONS:MRUBY)
+ @${RM} -fr ${WRKSRC}/src/modules/rlm_ruby/
+.endif
+
+pre-configure:
+# Replace -pthread with ${PTHREAD_LIBS} in configure(.in) files
+ @${FIND} -E ${WRKSRC} -regex '.*/configure(\.in)?$$' -exec \
+ ${REINPLACE_CMD} -e "s:-pthread:${PTHREAD_LIBS}:g" {} \;
+
+pre-install:
+ @${SETENV} PKG_PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} \
+ PRE-INSTALL
+
+post-install:
+# If ${PREFIX}/etc/raddb isn't a directory (or a symlink), make a copy
+# of ${EXAMPLESDIR}/raddb as ${PREFIX}/etc/raddb, then bootstrap the
+# certificates
+ @if ! [ -d ${PREFIX}/etc/raddb -o -L ${PREFIX}/etc/raddb ]; then \
+ ${CP} -RP ${EXAMPLESDIR}/raddb ${PREFIX}/etc/raddb; \
+ ${ECHO_MSG} '===> Bootstrapping default certificates, please wait...'; \
+ ${PREFIX}/etc/raddb/certs/bootstrap >/dev/null 2>&1; \
+ fi
+# Set ${PREFIX}/etc/raddb and all the files and folders in it to g-w,o-rwx
+# (FreeRADIUS will probably complain if this is not done)
+ @${CHMOD} -R g-w,o-rwx ${PREFIX}/etc/raddb
+ @${SETENV} PKG_PREFIX=${PREFIX} ${SH} ${PKGINSTALL} ${PKGNAME} \
+ POST-INSTALL
+ @${CAT} ${PKGMESSAGE}
+
+.include <bsd.port.post.mk>
generated by cgit (git 2.34.1) at 2024-12-26 13:08:02 +0800