radiusd-livingston for Debian
-----------------------------

This is the Livingston/Lucent radiusd 2.1 with the following additions
and changes:

 * Logging goes to /var/log/radiusd-livingston rather than
   /usr/adm/radacct. Configuration files in /etc/radiusd-livingston
   rather than /etc/raddb. (Debian Standards compliance)

 * Addition of an "Anonymous-Caller" attribute, which when set to "no"
   rejects incoming calls that present no caller-id.

 * It's compiled to use Berkeley DB 2.x, not 1.8x, for its database
   files, using the DB1 compatibility interface.

 * Fixed a bug in the default UDP port setting for radacct-proxy.

 * For backwards compatibility, the server's init.d script will cause
   it to use 1645/udp and 1646/udp for RADIUS authentication and
   accounting respectively. This can be changed by editing the ARGS=
   line in /etc/init.d/radiusd-livingston

 * Cleaned up some compiler warnings.

 * Incorporated the following patches from 
   http://www.vergenet.net/linux/radius/

   radius-2.1-overflow.patch
        Security fix for buffer overflow problem. This fixes the problem
        reported by ISS on the 5th of July 2001.

   radius-2.1.digest.patch
        Security fix for buffer overflow in message digest problem. This
        patch fixes VU#589523 published by CERT the 4th of March 2002.
        Note that this implementation of radius is not vulnerable to
        VU#936683.

Notes:

 * If you use the system passwords for authentication, the passwd/shadow
   any passwords in the MD5 format will not work. Only crypt() passwords
   work. Patches to fix this are welcome.

 * You can't use system passwords for CHAP authentication.

 -- Paul Martin <pm@debian.org>, Thu, 22 Aug 2002 14:32:29 +0100
