1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
|
#
# The list of files to install.
#
LOCAL_FILES := clients.conf dictionary templates.conf experimental.conf \
proxy.conf radiusd.conf trigger.conf README.rst panic.gdb
DEFAULT_SITES := default inner-tunnel
LOCAL_SITES := $(addprefix raddb/sites-enabled/,$(DEFAULT_SITES))
DEFAULT_MODULES := always attr_filter chap date \
detail detail.log digest dynamic_clients eap \
echo exec expiration expr files linelog logintime \
mschap ntlm_auth pap passwd preprocess radutmp realm \
replicate soh sradutmp totp unix unpack utf8
ifneq "$(OPENSSL_LIBS)" ""
DEFAULT_MODULE += dpsk
endif
LOCAL_MODULES := $(addprefix raddb/mods-enabled/,$(DEFAULT_MODULES))
LOCAL_CERT_FILES := Makefile README.md xpextensions \
ca.cnf server.cnf inner-server.cnf \
client.cnf realms/README.md bootstrap
#
# We don't create the installed certs if we're building a package,
# OR if OpenSSL is not available.
#
ifeq "$(PACKAGE)" ""
ifneq "$(OPENSSL_LIBS)" ""
LOCAL_CERT_PRODUCTS := $(addprefix $(R)$(raddbdir)/certs/,ca.key ca.pem \
client.key client.pem server.key server.pem)
endif
endif
LEGACY_LINKS := $(addprefix $(R)$(raddbdir)/,users huntgroups hints)
RADDB_DIRS := certs certs/realms mods-available mods-enabled policy.d \
sites-available sites-enabled \
$(patsubst raddb/%,%,$(shell find raddb/mods-config -type d -print))
# Installed directories
INSTALL_RADDB_DIRS := $(R)$(raddbdir)/ $(addprefix $(R)$(raddbdir)/, $(RADDB_DIRS))
# Grab files from the various subdirectories
INSTALL_FILES := $(wildcard raddb/sites-available/* raddb/mods-available/*) \
$(addprefix raddb/,$(LOCAL_FILES)) \
$(addprefix raddb/certs/,$(LOCAL_CERT_FILES)) \
$(shell find raddb/mods-config -type f -print) \
$(shell find raddb/policy.d -type f -print)
# Re-write local files to installed files, filtering out editor backups
INSTALL_RADDB := $(patsubst raddb/%,$(R)$(raddbdir)/%,\
$(filter-out %~,$(INSTALL_FILES)))
all: build.raddb
build.raddb: $(LOCAL_SITES) $(LOCAL_MODULES)
clean: clean.raddb
install: install.raddb
# Local build rules
raddb/sites-enabled raddb/mods-enabled:
@echo INSTALL $@
@$(INSTALL) -d -m 750 $@
# Set up the default modules for running in-source builds
raddb/mods-enabled/%: raddb/mods-available/% | raddb/mods-enabled
@echo "LN-S $@"
@cd $(dir $@) && ln -sf ../mods-available/$(notdir $@)
# Set up the default sites for running in-source builds
raddb/sites-enabled/%: raddb/sites-available/% | raddb/sites-enabled
@echo "LN-S $@"
@cd $(dir $@) && ln -sf ../sites-available/$(notdir $@)
# Installation rules for directories. Note permissions are 750!
$(INSTALL_RADDB_DIRS):
@echo INSTALL $(patsubst $(R)$(raddbdir)%,raddb%,$@)
@$(INSTALL) -d -m 750 $@
# The installed files have ORDER dependencies. This means that they
# will be installed if the target doesn't exist. And they won't be
# installed if the target already exists, even if it is out of date.
#
# This dependency lets us install the server on top of an existing
# system, hopefully without breaking anything.
ifeq "$(wildcard $(R)$(raddbdir)/mods-available/)" ""
INSTALL_RADDB += $(patsubst raddb/%,$(R)$(raddbdir)/%,\
$(filter-out %~,$(LOCAL_MODULES)))
# Installation rules for mods-enabled. Note ORDER dependencies
$(R)$(raddbdir)/mods-enabled/%: | $(R)$(raddbdir)/mods-available/%
@cd $(dir $@) && ln -sf ../mods-available/$(notdir $@)
endif
ifeq "$(wildcard $(R)$(raddbdir)/sites-available/)" ""
INSTALL_RADDB += $(patsubst raddb/%,$(R)$(raddbdir)/%,\
$(filter-out %~,$(LOCAL_SITES)))
# Installation rules for sites-enabled. Note ORDER dependencies
$(R)$(raddbdir)/sites-enabled/%: | $(R)$(raddbdir)/sites-available/%
@cd $(dir $@) && ln -sf ../sites-available/$(notdir $@)
endif
# Installation rules for plain modules.
$(R)$(raddbdir)/%: | raddb/%
@echo INSTALL $(patsubst $(R)$(raddbdir)/%,raddb/%,$@)
@$(INSTALL) -m 640 $(patsubst $(R)$(raddbdir)/%,raddb/%,$@) $@
# Create symbolic links for legacy files
$(R)$(raddbdir)/huntgroups: $(R)$(modconfdir)/preprocess/huntgroups
@[ -e $@ ] || echo LN-S $(patsubst $(R)$(raddbdir)/%,raddb/%,$@)
@[ -e $@ ] || ln -s $(patsubst $(R)$(raddbdir)/%,./%,$<) $@
$(R)$(raddbdir)/hints: $(R)$(modconfdir)/preprocess/hints
@[ -e $@ ] || echo LN-S $(patsubst $(R)$(raddbdir)/%,raddb/%,$@)
@[ -e $@ ] || ln -s $(patsubst $(R)$(raddbdir)/%,./%,$<) $@
$(R)$(raddbdir)/users: $(R)$(modconfdir)/files/authorize
@[ -e $@ ] || echo LN-S $(patsubst $(R)$(raddbdir)/%,raddb/%,$@)
@[ -e $@ ] || ln -s $(patsubst $(R)$(raddbdir)/%,./%,$<) $@
ifneq "$(LOCAL_CERT_PRODUCTS)" ""
$(LOCAL_CERT_PRODUCTS):
@echo BOOTSTRAP raddb/certs/
@$(MAKE) -C $(R)$(raddbdir)/certs/
# Bootstrap is special
$(R)$(raddbdir)/certs/bootstrap: | raddb/certs/bootstrap $(LOCAL_CERT_PRODUCTS)
@echo INSTALL $(patsubst $(R)$(raddbdir)/%,raddb/%,$@)
@$(INSTALL) -m 750 $(patsubst $(R)$(raddbdir)/%,raddb/%,$@) $@
else
$(R)$(raddbdir)/certs/bootstrap:
@echo INSTALL $(patsubst $(R)$(raddbdir)/%,raddb/%,$@)
@$(INSTALL) -m 750 $(patsubst $(R)$(raddbdir)/%,raddb/%,$@) $@
endif
# List directories before the file targets.
# It's not clear why GNU Make doesn't deal well with this.
install.raddb: | $(INSTALL_RADDB_DIRS) $(INSTALL_RADDB) $(LEGACY_LINKS)
clean.raddb:
@rm -f *~ $(addprefix raddb/sites-enabled/,$(DEFAULT_SITES)) \
$(addprefix raddb/mods-enabled/,$(DEFAULT_MODULES))
#
# A handy target to find out which triggers are where.
# Should only be run by SNMP developers.
#
triggers:
@grep exec_trigger `find src -name "*.c" -print` | grep '"' | sed -e 's/.*,//' -e 's/ *"//' -e 's/");.*//'
|
