diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000000000000000000000000000000000000..7e1ef7361c0c425300666c33c07b395359100e58
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+*.bz2 filter=lfs diff=lfs merge=lfs -text
diff --git a/.lfsconfig b/.lfsconfig
new file mode 100644
index 0000000000000000000000000000000000000000..8f3f2fc73b0086779ec15bbf18cfd28b6783bb96
--- /dev/null
+++ b/.lfsconfig
@@ -0,0 +1,2 @@
+[lfs]
+	url = https://artlfs.openeuler.openatom.cn/src-openEuler/freeradius
diff --git a/freeradius-server-3.2.5.tar.gz b/freeradius-server-3.2.5.tar.gz
deleted file mode 100644
index 691c910ee478c3f37127a1f41e2f18e8badafab3..0000000000000000000000000000000000000000
Binary files a/freeradius-server-3.2.5.tar.gz and /dev/null differ
diff --git a/freeradius-server-3.2.7.tar.bz2 b/freeradius-server-3.2.7.tar.bz2
new file mode 100644
index 0000000000000000000000000000000000000000..8c550382e859c2c9e2972f7146d7fcfec8f72338
--- /dev/null
+++ b/freeradius-server-3.2.7.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8a865766c5c0a1637d7a515cf913c4630771e55345a19d88b4b2c372877dae83
+size 3517595
diff --git a/freeradius.spec b/freeradius.spec
index e71ea711718f3c6e212d4976de405fccbe5125dc..b2bd4e2950bee9a53353fc9e6035c04dfcab668a 100644
--- a/freeradius.spec
+++ b/freeradius.spec
@@ -2,26 +2,27 @@
 %define openssl_version %(rpm -q --queryformat '%%{EPOCH}:%%{VERSION}' openssl)
 
 Name:           freeradius
-Version:        3.2.5
-Release:        2
+Version:        3.2.7
+Release:        1
 Summary:        Remote Authentication Dial-In User Service
 
 License:        GPL-2.0-or-later AND LGPL-2.0-or-later
 URL:            https://www.freeradius.org/
-Source0:        https://freeradius.org/ftp/pub/radius/freeradius-server-%{version}.tar.gz
+Source0:        https://freeradius.org/ftp/pub/radius/freeradius-server-%{version}.tar.bz2
 Source1:        radiusd.service
 Source2:        freeradius-logrotate
 Source3:        freeradius-pam-conf
 Source4:        freeradius-tmpfiles.conf
+Source5:        freeradius.sysusers
 
 BuildRequires:  autoconf gdbm-devel openssl openssl-devel pam-devel zlib-devel net-snmp-devel
 BuildRequires:  net-snmp-utils readline-devel libpcap-devel systemd-units libtalloc-devel
 BuildRequires:  unixODBC-devel json-c-devel libcurl-devel gcc chrpath
 
 Requires:       openssl >= %{openssl_version}
-Requires(pre):  shadow-utils glibc-common
 Requires(post): systemd-sysv
 %{?systemd_requires}
+%{?sysusers_requires_compat}
 
 Provides:       %{name}-unixODBC = %{version}-%{release} %{name}-rest = %{version}-%{release}
 Obsoletes:      %{name}-unixODBC < %{version}-%{release} %{name}-rest < %{version}-%{release}
@@ -157,6 +158,7 @@ install -d %{buildroot}%{_localstatedir}/run/
 install -d -m 0710 %{buildroot}%{_localstatedir}/run/radiusd/
 install -d -m 0700 %{buildroot}%{_localstatedir}/run/radiusd/tmp
 install -m 0644 %{SOURCE4} %{buildroot}%{_tmpfilesdir}/radiusd.conf
+install -p -D -m 0644 %{SOURCE5} %{buildroot}%{_sysusersdir}/freeradius.conf
 
 install -d $RPM_BUILD_ROOT%{_datadir}/snmp/mibs/
 install -m 644 mibs/*RADIUS*.mib $RPM_BUILD_ROOT%{_datadir}/snmp/mibs/
@@ -184,9 +186,7 @@ echo "%{_bindir}/%{name}" > $RPM_BUILD_ROOT/etc/ld.so.conf.d/%{name}-%{_arch}.co
 echo "%{_libdir}/%{name}" >> $RPM_BUILD_ROOT/etc/ld.so.conf.d/%{name}-%{_arch}.conf
 
 %pre
-getent group  radiusd >/dev/null || /usr/sbin/groupadd -r -g 95 radiusd > /dev/null 2>&1
-getent passwd radiusd >/dev/null || /usr/sbin/useradd  -r -g radiusd -u 95 -c "radiusd user" \
-    -d %{_localstatedir}/lib/radiusd -s /sbin/nologin radiusd > /dev/null 2>&1
+%sysusers_create_compat %{S:5}
 
 %post
 /sbin/ldconfig
@@ -219,6 +219,7 @@ exit 0
 %config(noreplace) %{_sysconfdir}/logrotate.d/radiusd
 %{_unitdir}/radiusd.service
 %{_tmpfilesdir}/radiusd.conf
+%{_sysusersdir}/freeradius.conf
 %dir %attr(710,radiusd,radiusd) %{_localstatedir}/run/radiusd
 %dir %attr(700,radiusd,radiusd) %{_localstatedir}/run/radiusd/tmp
 %dir %attr(755,radiusd,radiusd) %{_localstatedir}/lib/radiusd
@@ -300,7 +301,7 @@ exit 0
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/ldap_google
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{mac2ip,mac2vlan,mschap,ntlm_auth}
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{opendirectory,otp,pam,pap,passwd}
-%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{preprocess,python3,python,radutmp,realm}
+%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{preprocess,proxy_rate_limit,python3,python,radutmp,realm}
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{redis,rediswho,replicate,smbpasswd}
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{smsotp,soh,sometimes,sql,sqlcounter}
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/{sqlippool,sradutmp,unix,unpack}
@@ -314,7 +315,7 @@ exit 0
 %dir %attr(750,root,radiusd) /etc/raddb/mods-enabled
 %config(missingok) /etc/raddb/mods-enabled/{always,attr_filter,cache_eap,chap,date,detail,detail.log}
 %config(missingok) /etc/raddb/mods-enabled/{dhcp,digest,dynamic_clients,eap,echo,exec,expiration,expr}
-%config(missingok) /etc/raddb/mods-enabled/{files,linelog,logintime,mschap,ntlm_auth,pap,passwd,preprocess}
+%config(missingok) /etc/raddb/mods-enabled/{files,linelog,logintime,mschap,ntlm_auth,pap,passwd,preprocess,proxy_rate_limit}
 %config(missingok) /etc/raddb/mods-enabled/{radutmp,realm,replicate,soh,sradutmp,unix,unpack,utf8,totp}
 
 # /etc/raddb/policy.d dir
@@ -348,7 +349,7 @@ exit 0
 %{_libdir}/freeradius/{rlm_eap_peap.so,rlm_eap_pwd.so,rlm_eap_sim.so,rlm_eap_tls.so,rlm_eap_ttls.so}
 %{_libdir}/freeradius/{rlm_exec.so,rlm_expiration.so,rlm_expr.so,rlm_files.so,rlm_ippool.so,rlm_linelog.so}
 %{_libdir}/freeradius/{rlm_logintime.so,rlm_mschap.so,rlm_otp.so,rlm_pam.so,rlm_pap.so,rlm_passwd.so}
-%{_libdir}/freeradius/{rlm_preprocess.so,rlm_radutmp.so,rlm_realm.so,rlm_replicate.so,rlm_soh.so}
+%{_libdir}/freeradius/{rlm_preprocess.so,rlm_proxy_rate_limit.so,rlm_radutmp.so,rlm_realm.so,rlm_replicate.so,rlm_soh.so}
 %{_libdir}/freeradius/{rlm_sometimes.so,rlm_sql.so,rlm_sqlcounter.so,rlm_sqlippool.so,rlm_sql_null.so}
 %{_libdir}/freeradius/{rlm_unix.so,rlm_unpack.so,rlm_utf8.so,rlm_wimax.so,rlm_yubikey.so}
 %{_libdir}/freeradius/rlm_dpsk.so
@@ -499,6 +500,9 @@ exit 0
 %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/ldap
 
 %changelog
+* Mon Jun 09 2025 Funda Wang <fundawang@yeah.net> - 3.2.7-1
+- update to 3.2.7
+
 * Thu Jan 16 2025 Funda Wang <fundawang@yeah.net> - 3.2.5-2
 - drop useless perl(:MODULE_COMPAT) requirement
 
diff --git a/freeradius.sysusers b/freeradius.sysusers
new file mode 100644
index 0000000000000000000000000000000000000000..af912e0493dd718e9b5a70f7c4ce2cc5cc23fa91
--- /dev/null
+++ b/freeradius.sysusers
@@ -0,0 +1,3 @@
+#Type Name     ID  GECOS           Home directory        Shell
+u     radiusd  95  "radiusd user"  /var/lib/radiusd      /sbin/nologin
+g     radiusd  95  -               -                     -