libpam-radius-auth and libnss-mapuser packages that we use have diverged from their upstream packages significantly.

The main thing is that we need to allow users to authenticate and log in with RADIUS credentials even if they don't have local accounts in the system — that's how all network devices behave and how network operators expect VyOS to behave.

The changes required for that to work still aren't in upstream packages. And until they are, having upstream versions installed in a VyOS image is going to break the expected behavior.

Right now we pin those dependencies to specific versions but that solution isn't 100% reliable. The only reliable solution is to change the names of those packages to vyos-libpam-radius-auth and vyos-libnss-mapuser.

When those changes are integrated in upstream packages, we can simply drop those dependencies and drop our forks completely.