anchor.diff: -{ stdenv, fetchurl, autoreconfHook, talloc
  +{ stdenv, fetchurl, autoreconfHook, talloc, finger_bsd, perl
   , openssl
   , linkOpenssl? true
   , openldap
  
positive.code:   name = "freeradius-${version}";
    version = "3.0.11";
  
    buildInputs = [ autoreconfHook openssl talloc ]
      ++ optional withLdap [ openldap ]
      ++ optional withSqlite [ sqlite ]
      ++ optional withPcap [ libpcap ]
  
negative.code:      "--sysconfdir=/etc"
       "--localstatedir=/var"
    ] ++ optional (!linkOpenssl) "--with-openssl=no";
  
    postPatch = ''
      substituteInPlace src/main/checkrad.in --replace "/usr/bin/finger" "${finger_bsd}/bin/finger"
    '';
  
    installFlags = [
      "sysconfdir=\${out}/etc"
  