Comiling for use with Oracle
Just curious what the minimum modules required to use Freeradius to
authenticate (not sure if that is the correct terminology) from and
Oracle DB. Keep in mind that I am only planning on querying the DB and
not updating or inserting information for accounting purposes. However,
I wouldn't rule out using a text file (radutmp, I think) for accounting
purposes, though.
I have been trying to compile it using the following:
# ORACLE_HOME=/cygdrive/d/oracle/ora92; export ORACLE_HOME
# cd freeradius-1.1.4
# ./configure
Which generates an error:
rlm_perl.c: In function `rlm_perl_get_handles':
rlm_perl.c:226: warning: cast to pointer from integer of different size
rlm_perl.c: At top level:
rlm_perl.c:614: error: external linkage required for symbol
'XS_radiusd_radlog' because of 'dllexport' attribute.
I have also used:
# ./configure --without-rlm_perl
Which appear to compile successfully, but I get a lot of errors about
missing modules and/or libraries.
# ./radiusd.exe -X
...
radiusd: entering modules setup
Module: Library search path is /usr/local/lib
radiusd.conf[10] Failed to link to module 'rlm_sql': No such file or
directory
radiusd.conf[1850] Unknown module "sql".
radiusd.conf[1779] Failed to parse authorize section.
I know I have a library linking issue, but I read the <a
href="http://wiki.freeradius.org/index.php/FAQ#It_says_.22Could_not_link_..._file_not_found.22.2C_what_do_I_do.3F";>FAQs
</a> and attempted to resolve them using the methods mentioned. I get no
errors during the configure for sql modules (other than mysql, but I'm
not trying to compile support for that anyway). Since I'm using the
Oracle libs to create the Oracle modules, I don't *think* I should
disable shared libraries. ... Or should I?
I've also tried setting:
LD_LIBRARY_PATH=${LD_LIBRARY_PATH}:/cygdrive/d/oracle/ora92/oci/lib:/cygdrive/d/oracle/ora92/lib
Without good results. I also do not have ld.conf nor ldconfig on the
system (Cygwin), but I have read elsewhere that neither of them should
be required.
I realize that this is not necessarily an issue with Freeradius.
Although I am having trouble compiling from source, I can install the
.NET version and run without issue. From my understanding, both are
basically the same, just .NET has had changes made to deal with the
different path structure in Cygwin.
I saw a lot of old posts (<2003) that dealt with similar issues, but on
much older versions (Oracle 8 and Freeradius .1 - .3).
Help, insight, thoughts are all appreciated. Attached below is my
somewhat hacked up conf files. Sorry for the long post.
Thanks,
Brian
RADIUSD.CONF
------------
prefix = /usr/local
exec_prefix = ${prefix}
sysconfdir = ${prefix}/etc
localstatedir = ${prefix}/var
sbindir = ${exec_prefix}/sbin
logdir = ${localstatedir}/log/radius
raddbdir = ${sysconfdir}/raddb
radacctdir = ${logdir}/radacct
certsdir = ${sysconfdir}/raddb/certs/FreeRADIUS.net/DemoCerts
confdir = ${raddbdir}
run_dir = ${localstatedir}/run/radiusd
log_file = ${logdir}/radius.log
libdir = ${exec_prefix}/lib
pidfile = ${run_dir}/radiusd.pid
max_request_time = 30
delete_blocked_requests = no
cleanup_delay = 5
max_requests = 1024
bind_address = *
port = 0
hostname_lookups = no
allow_core_dumps = no
regular_expressions = no
extended_expressions = no
log_stripped_names = no
log_auth = no
log_auth_badpass = no
log_auth_goodpass = no
usercollide = no
lower_user = no
lower_pass = no
nospace_user = no
nospace_pass = no
checkrad = ${sbindir}/checkrad
security {
max_attributes = 200
reject_delay = 1
status_server = no
}
proxy_requests = yes
$INCLUDE ${confdir}/proxy.conf
$INCLUDE ${confdir}/clients.conf
snmp = no
$INCLUDE ${confdir}/snmp.conf
thread pool {
start_servers = 5
max_servers = 32
min_spare_servers = 3
max_spare_servers = 10
max_requests_per_server = 0
}
modules {
files {
}
detail {
detailfile =
${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d
detailperm = 0600
}
$INCLUDE ${confdir}/oraclesql.conf
radutmp {
filename = ${logdir}/radutmp
username = %{User-Name}
case_sensitive = yes
check_with_nas = yes
perm = 0600
callerid = "no"
}
radutmp sradutmp {
filename = ${logdir}/sradutmp
perm = 0644
callerid = "no"
}
attr_filter {
attrsfile = ${confdir}/attrs
}
counter daily {
filename = ${raddbdir}/db.daily
key = User-Name
count-attribute = Acct-Session-Time
reset = daily
counter-name = Daily-Session-Time
check-name = Max-Daily-Session
allowed-servicetype = Framed-User
cache-size = 5000
}
always fail {
rcode = fail
}
always reject {
rcode = reject
}
always ok {
rcode = ok
simulcount = 0
mpp = no
}
digest {
}
}
instantiate {
}
authorize {
sql
}
authenticate {
}
preacct {
}
accounting {
sql
}
session {
}
post-auth {
}
pre-proxy {
}
post-proxy {
}
CLIENTS.CONF:
-------------
client 127.0.0.1 {
secret = testing123
shortname = localhost
}
client 10.10.58.106 {
secret = My_Secret
shortname = Some_Server
}
ORACLESQL.CONF
--------------
sql {
driver = "rlm_sql_oracle"
server = "localhost"
login = "my_account"
password = "my_password"
radius_db = "(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP) \
(HOST=localhost)(PORT=1521))(CONNECT_DATA=(SID=L9D1)))"
acct_table1 = "radacct"
acct_table2 = "radacct"
authcheck_table = "itagency"
authreply_table = "radreply"
deletestalesessions = yes
sqltrace = no
sqltracefile = ${logdir}/sqltrace.sql
num_sql_socks = 5
connect_failure_retry_delay = 60
sql_user_name = "%{User-Name}"
authorize_check_query = "select 1 as ID, barcode AS username, \
'Password' as attribute, pin as value, '==' as op from \
itagency where barcode = '%{SQL-User-Name}' and \
blockstatus is null"
authorize_reply_query = "SELECT id,UserName,Attribute,Value,op \
FROM ${authreply_table} WHERE Username = \
'%{SQL-User-Name}' ORDER BY id"
}
This archive was generated by a fusion of
Pipermail (Mailman edition) and
MHonArc.