On Fri, Mar 14, 2008 at 10:34:27PM +0100, Josip Rodin wrote:
> Package: freeradius
> Version: 1.1.3-3
> 
> It's currently impossible to get the RADIUS client software from the
> FreeRADIUS distribution without getting the server, which opens a network
> port, which is obviously bad for security when you just wanted a client,
> and if you disable the server you have to maintain a heap of needless
> software on the system and a conffile change, yadda yadda yadda.
> It's just wrong (against the spirit of the packaging system and the practice
> of every other client-server software package in Debian).
> 
> The following binaries should be in a package called freeradius-client or
> something like that:
> 
> /usr/bin/radclient
> /usr/bin/radeapclient
> /usr/bin/radtest
> 
> They are all generic RADIUS client software that doesn't depend on
> a FreeRADIUS server in particular, and they don't depend on a RADIUS server
> on localhost either.

I think I see the reason why they were kept inside the same package:

        libradius-1.1.7.so => /usr/lib/freeradius/libradius-1.1.7.so 
(0x00002b2b3ea9d000)

Ugh. This would usually go into a libradius-1.1.7 package, but because
this is a just a shared object file (rather than a proper shared library),
you can put it into something like freeradius-common, and keep a strict
dependency on it.

Also, radclient needs the dictionary files, so /etc/freeradius/dictionary
and /usr/share/freeradius/dictionary* should go in the common package too.

-- 
     2. That which causes joy or happiness.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to