Installing to pfsense

Franz flamana at gmail.com
Thu Mar 31 00:37:59 CEST 2011


Ok,
So Installed freeradius2 from ports on another system, and which is working,
then I did pkg_create -Rjb freeradius-2.1.10_2 and got all needed files,
transported all to the pfsense machine, did a pkg_add and all installed ok,
however when enabling sql I still see error:

Could not link driver rlm_sql_mysql: file not found
Make sure it (and all its dependent libraries!) are in the search path of
your system's ld.
/usr/local/etc/raddb/sql.conf[22]: Instantiation failed for module "sql"
/usr/local/etc/raddb/sites-enabled/inner-tunnel[131]: Failed to load module
"sql".
/usr/local/etc/raddb/sites-enabled/inner-tunnel[47]: Errors parsing
authorize section.

and when I check all fles are in here:
/usr/local/lib/freeradius-2.1.10
     rlm_sql_mysql-2.1.10.la
     rlm_sql_mysql.so
     rlm_sql_mysql.la
     rlm_sql_mysql.a
     rlm_sql_mysql-2.1.10.so

under radiusd.conf the shared lib points to:

libdir = /usr/local/lib/freeradius-2.1.10

Any clue as to why it does not see the files?

Thanks



On Wed, Mar 30, 2011 at 9:12 AM, Franz <flamana at gmail.com> wrote:

> Hi,
> Thanks David and Alan for this great advise, I will try it and post back.
>
> Thanks!
>
> On Wed, Mar 30, 2011 at 8:56 AM, David Wood <david at wood2.org.uk> wrote:
>
>> Hi Franz,
>>
>> In message <AANLkTikH+a1YJDGU5N-TyF-8Xo8_tdE23EqO2V7k+YJX at mail.gmail.com>,
>> Franz <flamana at gmail.com> writes
>>
>>  I have currently installed freeradius 2.1.10 and Mysql 5..5.10 on a
>>> pfsense
>>> box which is freebsd. I want this to work with mysql however I was
>>> wondering
>>> how to install freeradius with mysql support as I am unable to do it via
>>> ports or try any commands or flags with ./configure via tarball. Only
>>> pkg_add is available, can I recompile or install from scratch to get
>>> freeradius to bind to mysql?
>>>
>>
>> Alan has already given you the answer - you need a development
>> environment. pfSense does not contain compilers and other development tools
>> to keep the image size down.
>>
>> Another reason why pfSense does not contain development tools is because
>> it is arguably inappropriate to build software on a firewall. Maybe you are
>> using pfSense for some other task, though if you are using it as a firewall,
>> I would argue strongly that your RADIUS server should be running on another
>> machine inside your firewall.
>>
>>
>> You can't reconfigure a binary package - the configuration is burned in
>> when it is created, usually by the default options. It is nonsense to try to
>> pass configuration flags to pkg_add.
>>
>> The default options are always set for minimum external dependencies - if
>> you want features like SQL or LDAP support, you have to set the relevant
>> options yourself and rebuild the package. FreeBSD does not adopt the
>> approach of some Linux distributions, where the additional modules are
>> distributed in separate binary packages.
>>
>>
>> You will need to set the appropriate options for the net/freeradius2 port
>> and build a package using that port on a FreeBSD box of the appropriate
>> release and major version - ideally the minor version should also match,
>> though that doesn't usually matter. You can then pkg_add that package on the
>> pfSense machine.
>>
>>
>> pfSense 2.0 RC is based on FreeBSD 8.1 - amd64 for the 64 bit version and
>> i386 for the 32 bit version.
>>
>> pfSense 1.2.3 is based on FreeBSD 7.2 i386.
>>
>>
>> A virtual machine can be useful for building packages if you don't have
>> access to a FreeBSD machine.
>>
>>
>> When I maintained the FreeBSD FreeRADIUS ports, I was asked to create a
>> net/freeradius-mysql slave port for someone working on pfSense. This is
>> FreeRADIUS 1.x and should probably die. It isn't realistic to create slave
>> ports for all the dependencies that people might require - port bloat is
>> frowned on.
>>
>>
>>
>> With best wishes,
>>
>>
>>
>>
>> David
>> --
>> David Wood
>> david at wood2.org.uk
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110330/28f74f8f/attachment.html>


More information about the Freeradius-Users mailing list