net/freeradius: remove LEAP (#2433)

net/freeradius/Makefile

@@ -1,5 +1,5 @@
 PLUGIN_NAME=		freeradius
-PLUGIN_VERSION=		1.9.12
+PLUGIN_VERSION=		1.9.13
 PLUGIN_COMMENT=		RADIUS Authentication, Authorization and Accounting Server
 PLUGIN_DEPENDS=		freeradius3
 PLUGIN_MAINTAINER=	m.muenz@gmail.com

net/freeradius/pkg-descr

@@ -15,6 +15,10 @@ The server is fast, feature-rich, modular, and scalable.
 Plugin Changelog
 ================
 
+1.9.13
+
+* Remove LEAP section from configuration
+
 1.9.12
 
 * Fix leading space in freeradius logformat (contributed by nan0)

net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-eap

@@ -99,21 +99,6 @@ eap {
 #               virtual_server = "inner-tunnel"
 #       }
 
-        # Cisco LEAP
-        #
-        #  We do not recommend using LEAP in new deployments.  See:
-        #  http://www.securiteam.com/tools/5TP012ACKE.html
-        #
-        #  Cisco LEAP uses the MS-CHAP algorithm (but not
-        #  the MS-CHAP attributes) to perform it's authentication.
-        #
-        #  As a result, LEAP *requires* access to the plain-text
-        #  User-Password, or the NT-Password attributes.
-        #  'System' authentication is impossible with LEAP.
-        #
-        leap {
-        }
-
         #  Generic Token Card.
         #
         #  Currently, this is only permitted inside of EAP-TTLS,