pfSense

Handle multiple notices in the same second RELENG_2_2

Backport of https://github.com/pfsense/pfsense/pull/1823

Fix handling of the description in the shaper code.

Properly declare an error when a too-short voucher is submitted.

The "enableallowallwan" script should also allow bogons, or it makes running test firewalls with RFC5735/6890 test network style WANs a pain.

Add support for LDAP RFC2307 style group membership. Implements #4923

To activate, check the box for RFC2307 in the LDAP server settings and fill in the group object class (typically posixGroup).

Provide an LDAP server timeout field. Default to 25 seconds. Part of ticket #3383

Previous default was ~1m20sec.

Don't lowercase the whole group name

Fix GUI auth from RADIUS to grab group names from the Class attribute. Implements #935

The RADIUS server must populate the Class attribute with a string, semicolon-separated, of user groups. Similar to LDAP, local groups must exist with matching names, and privileges are determined by the local matching groups.

only read file if it exists, and only foreach if an array.

Allow to create empty bogons on nanoBSD

If for some reason the bogons file/s do not exist then this code creates
empty ones before making any use of them in the rule set.
On nanoBSD this can fail if the file system is mount RO.
Protect against this possibility by use conf_mount_rw and conf_mount_ro