This one time, at band camp, Josip Rodin said:
> On Fri, Mar 14, 2008 at 10:34:27PM +0100, Josip Rodin wrote:
> > Package: freeradius
> > Version: 1.1.3-3
> > 
> > It's currently impossible to get the RADIUS client software from the
> > FreeRADIUS distribution without getting the server, which opens a network
> > port, which is obviously bad for security when you just wanted a client,
> > and if you disable the server you have to maintain a heap of needless
> > software on the system and a conffile change, yadda yadda yadda.
> > It's just wrong (against the spirit of the packaging system and the practice
> > of every other client-server software package in Debian).
> > 
> > The following binaries should be in a package called freeradius-client or
> > something like that:
> > 
> > /usr/bin/radclient
> > /usr/bin/radeapclient
> > /usr/bin/radtest
> > 
> > They are all generic RADIUS client software that doesn't depend on
> > a FreeRADIUS server in particular, and they don't depend on a RADIUS server
> > on localhost either.
> 
> I think I see the reason why they were kept inside the same package:
> 
>         libradius-1.1.7.so => /usr/lib/freeradius/libradius-1.1.7.so 
> (0x00002b2b3ea9d000)
> 
> Ugh. This would usually go into a libradius-1.1.7 package, but because
> this is a just a shared object file (rather than a proper shared library),
> you can put it into something like freeradius-common, and keep a strict
> dependency on it.

I was thinking of an arch all -common, an arch any -utils, a library
package, and a server package.  But yes, the dependencies need to be
strict.

> Also, radclient needs the dictionary files, so /etc/freeradius/dictionary
> and /usr/share/freeradius/dictionary* should go in the common package too.

This is being worked on for the 2.x packages now.  Amusingly, for built
libraries we now get:
libfreeradius-radius-2.0.3.la
libfreeradius-radius-2.0.3.so
libfreeradius-radius.a
libfreeradius-radius.la
libfreeradius-radius.so

Even better, really.  Ugh, indeed.
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        [EMAIL PROTECTED] |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------

Attachment: signature.asc
Description: Digital signature

Reply via email to