Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFC: r228730

Add binding support to libradius(3).
Submitted by: Sergey Matveychuk <sem33@yandex-team.ru>

Approved by: kib(mentor)

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by: re (implicit)

Add simple embedded RADIUS server support to libradius, by extending existing
API, keeping backward compatibility.

First consumer for this functionality is going to become forthcoming MPD-5.4,
supporting CoA and DR of RFC 3576: Dynamic Authorization Extensions to RADIUS.

MFC after: 1 month

- Added rad_demangle() for demangling user-passwords (needed for
MS-CHAPv1 MPPE-keys).
- Added rad_demangle_mppe_key() for demangling mppe-keys (needed
for MPPE-keys).
- Added some typecasts for avoiding compiler warnings.
- Fix: better handle wrong usage of the lib (if the programmer
has not called rad_create_request() but rad_put_*(), then a
weird error message was returned).
- Added a new function for putting the Message-Authenticator.
- Verify the Message-Authenticator, if it was found inside a
response packet and silently drop the packet, if the validation
failed.
- Implicitly put the Message-Authenticator, if the EAP-Message
attribute was added.
- Added some missing defines.

Submitted by: Michael Bretterklieber
PR: 46555

Add IPv6 related attributes defined in RFC3162.

MFC after: 1 week

Add the following functions:

rad_request_authenticator()
Returns the Request-Authenticator relevant to the most recently received
RADIUS response.

rad_server_secret()
Returns the Shared Secret relevant to the most recently received
RADIUS response.

Neither of these functions should be necessary, however, the
MS-MPPE-Recv-Key and MS-MPPE-Send-Key Microsoft Vendor Specific
attributes are supplied in a mangled (encrypted) format, requiring
this information to demangle.

It's not clear whether these functions should be replaced with a
rad_demangle() function or whether these attributes are one-offs.

Sponsored by: Monzoon

Mention the other RAS_PORT_TYPEs from rfc2865

Suggested by: "lsz8425" <lsz8425@mail.cd.hn.cn>

Add support for RADIUS accounting. Note, this changes the format
of the /etc/radius.conf file. But the code contains hacks for
backward compatibility, so old files will continue to work.

I updated the man pages and made a couple of minor changes, but
everything else was submitted by Oleg.

PR: misc/14284
Submitted by: Oleg Semyonov <os@altavista.net>

Allow an alternate to rad_send_request() for programs that
don't wish to wait for the RADIUS server to respond.
Reviewed by: jdp

This commit was generated by cvs2svn to compensate for changes in r41118,
which included commits to RCS files with non-trunk default branches.

Initial import of RADIUS client library donated by Juniper Networks, Inc.