From 86c9abff1fd6c4d62f349ae988f4e75849b609e1 Mon Sep 17 00:00:00 2001 From: Michael Date: Wed, 16 Jun 2021 15:16:41 +0200 Subject: [PATCH] net/freeradius: remove LEAP (#2433) --- net/freeradius/Makefile | 2 +- net/freeradius/pkg-descr | 4 ++++ .../OPNsense/Freeradius/mods-enabled-eap | 15 --------------- 3 files changed, 5 insertions(+), 16 deletions(-) diff --git a/net/freeradius/Makefile b/net/freeradius/Makefile index dd739fa1d..158d41481 100644 --- a/net/freeradius/Makefile +++ b/net/freeradius/Makefile @@ -1,5 +1,5 @@ PLUGIN_NAME= freeradius -PLUGIN_VERSION= 1.9.12 +PLUGIN_VERSION= 1.9.13 PLUGIN_COMMENT= RADIUS Authentication, Authorization and Accounting Server PLUGIN_DEPENDS= freeradius3 PLUGIN_MAINTAINER= m.muenz@gmail.com diff --git a/net/freeradius/pkg-descr b/net/freeradius/pkg-descr index 5c5c726ac..6d212d028 100644 --- a/net/freeradius/pkg-descr +++ b/net/freeradius/pkg-descr @@ -15,6 +15,10 @@ The server is fast, feature-rich, modular, and scalable. Plugin Changelog ================ +1.9.13 + +* Remove LEAP section from configuration + 1.9.12 * Fix leading space in freeradius logformat (contributed by nan0) diff --git a/net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-eap b/net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-eap index 8093143e8..e4eb1f9db 100644 --- a/net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-eap +++ b/net/freeradius/src/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-eap @@ -99,21 +99,6 @@ eap { # virtual_server = "inner-tunnel" # } - # Cisco LEAP - # - # We do not recommend using LEAP in new deployments. See: - # http://www.securiteam.com/tools/5TP012ACKE.html - # - # Cisco LEAP uses the MS-CHAP algorithm (but not - # the MS-CHAP attributes) to perform it's authentication. - # - # As a result, LEAP *requires* access to the plain-text - # User-Password, or the NT-Password attributes. - # 'System' authentication is impossible with LEAP. - # - leap { - } - # Generic Token Card. # # Currently, this is only permitted inside of EAP-TTLS,