<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Hello all again!<br><br>I have a problem which I and a friend here have been trying to solve for some days now.<br>It happens in both version 2.1.0 and 2.1.7 and has something to do with OpenSSL.<br>We have downloaded the source for both versions and installed OpenSSL, libssl-dev and libpq-dev which everyone on the "google-net" talks about.<br>We have modified "rules" and "control" in ~/FreeRadius-Server/debian/ so it should have support for OpenSSL, I will include the changes here:<br><br><b><u>Rules(instead of having "without" we changed to "with" for openssl, peap, tls & ttls)<br></u></b>ifeq ($(openssl), no)<br> confflags += --with-openssl --with-rlm_eap_peap --with-rlm_eap_tls --with-rlm_eap_ttls --without-rlm_otp<br><br><b><u>Control(Did not have to change or add anything but want to add these lines so you can see if there is any faulty lines here)<br></u></b>Build-Depends: debhelper (>= 5), dpatch (>= 2), dpkg-dev (>= 1.13.19), autotools-dev, libtool (>= 1.5), libltdl3-dev, libpam0g-dev, libmysqlclient15-dev | libmysqlclient-dev, libgdbm-dev, libldap2-dev, libsasl2-dev, libiodbc2-dev, libkrb5-dev, libperl-dev, libpcap-dev, python-dev, snmp, libsnmp9-dev | libsnmp-dev, libpq-dev, libssl-dev<br><br>After we have run in terminal "./configure" ; "make" & "sudo make install" and afterwards try to run radius with "radiusd -X" (same as freeradius -X if youre using freeradius installed through "Synaptic Package Manager").<br><br>So is there anything we have missed? We have been reading about that Freeradius do not include support for OpenSSL since the problem with license but we have also read that if you want to get OpenSSL support anyway you should do like we have done. Is there anyway to get around this problem or is everyone facing same problem as we do with these versions of FreeRadius? We have also read about another one using version 2.1.6 with same problem so i guess it is common for all versions from at least 2.1.0 and upwards?<br><br>Best Regards/ Peter Carlstedt<br><br><br>> From: freeradius-users-request@lists.freeradius.org<br>> Subject: Freeradius-Users Digest, Vol 55, Issue 32<br>> To: freeradius-users@lists.freeradius.org<br>> Date: Mon, 9 Nov 2009 15:30:11 +0100<br>> <br>> Send Freeradius-Users mailing list submissions to<br>> freeradius-users@lists.freeradius.org<br>> <br>> To subscribe or unsubscribe via the World Wide Web, visit<br>> http://lists.freeradius.org/mailman/listinfo/freeradius-users<br>> or, via email, send a message with subject or body 'help' to<br>> freeradius-users-request@lists.freeradius.org<br>> <br>> You can reach the person managing the list at<br>> freeradius-users-owner@lists.freeradius.org<br>> <br>> When replying, please edit your Subject line so it is more specific<br>> than "Re: Contents of Freeradius-Users digest..."<br>> <br>> <br>> Today's Topics:<br>> <br>> 1. Re: WLAN - Freeradius - OpenLDAP - VLANs<br>> (Jos? Johnny RANDRIAMAMPIONONA)<br>> 2. Cannot upgade to 2.1.7 (kachin Agarwal)<br>> 3. Re: Cannot upgade to 2.1.7 (Alan Buxey)<br>> 4. Re: WLAN - Freeradius - OpenLDAP - VLANs (nf-vale)<br>> 5. Problem with server atribute in NAS table with mysql<br>> (Ana Gallardo)<br>> 6. Re: Problem with server atribute in NAS table with mysql<br>> (Alan Buxey)<br>> 7. Re: WLAN - Freeradius - OpenLDAP - VLANs (_Stefan_H)<br>> <br>> <br>> ----------------------------------------------------------------------<br>> <br>> Message: 1<br>> Date: Mon, 9 Nov 2009 12:25:13 +0000<br>> From: Jos? Johnny RANDRIAMAMPIONONA <vasiana09@gmail.com><br>> Subject: Re: WLAN - Freeradius - OpenLDAP - VLANs<br>> To: FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Message-ID:<br>> <d379502d0911090425p7e48137brc0d7a21e4aa3a279@mail.gmail.com><br>> Content-Type: text/plain; charset="iso-8859-1"<br>> <br>> Freeradius work well with openldap but only with cleartext password (PAP).<br>> Best regards!<br>> <br>> 2009/11/9 _Stefan_H <stefanh007@networld.at><br>> <br>> ><br>> > First I know my english is not the best, but i hope you will understand it.<br>> ><br>> > In the course of a project i have to make an authentification against a<br>> > freeradius server for the WLAN Users.<br>> > On the Server(OpenSUSE11.1) is a LDAP Directory and i want that the WLAN<br>> > Users have to authentificate with their accounts. After the successful<br>> > authentification they will be put into an other VLAN, that they can use<br>> > their homedirectories.<br>> ><br>> > I would like to know how I should do it, because i inform me about the<br>> > Authentification Types(EAP-TLS,TTLS,PEAP) and know I am totally confused<br>> > which i have to configure at the freeradius Server.<br>> ><br>> > I think that PEAP would be the easiest, but I really don't know which can<br>> > be<br>> > used whth a dynamic VLAN.<br>> ><br>> > http://old.nabble.com/file/p26230857/1.jpeg<br>> ><br>> > The AP is an Linksys WRT-54-GS<br>> > and the Switch is an CISCO-2950<br>> ><br>> ><br>> ><br>> > --<br>> > View this message in context:<br>> > http://old.nabble.com/WLAN----Freeradius----OpenLDAP----VLANs-tp26230857p26230857.html<br>> > Sent from the FreeRadius - User mailing list archive at Nabble.com.<br>> ><br>> > -<br>> > List info/subscribe/unsubscribe? See<br>> > http://www.freeradius.org/list/users.html<br>> ><br>> <br>> <br>> <br>> -- <br>> JJohnny RANDRIAMAMPIONONA<br>> Phone: +212663682554, +212533158575<br>> National School of Applied Sciences<br>> ZIP 1818 TANGIER 90000<br>> ---------Morocco ---------------<br>> -------------- next part --------------<br>> An HTML attachment was scrubbed...<br>> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20091109/8589c60f/attachment.html><br>> <br>> ------------------------------<br>> <br>> Message: 2<br>> Date: Mon, 9 Nov 2009 18:00:41 +0530 (IST)<br>> From: kachin Agarwal <kach_gr8@yahoo.co.in><br>> Subject: Cannot upgade to 2.1.7<br>> To: freeradius-users@lists.freeradius.org<br>> Message-ID: <318375.47862.qm@web94201.mail.in2.yahoo.com><br>> Content-Type: text/plain; charset="utf-8"<br>> <br>> Hi,<br>> I m trying to upgrade the freeradius server to 2.1.7. <br>> But when i build i get the following error :<br>> <br>> configure: error: set --without-rlm_counter to disable it explicitly.<br>> configure: error: ./configure failed for src/modules/rlm_counter<br>> make: *** [*/*/*/*/*/*/*/radius/freeradius-server-2.1.7/src/main/radiusd] Error 1<br>> <br>> How can i rectify this???<br>> <br>> Thanx & Regards,<br>> Kachin<br>> <br>> <br>> <br>> <br>> Add whatever you love to the Yahoo! India homepage. Try now! http://in.yahoo.com/trynew<br>> -------------- next part --------------<br>> An HTML attachment was scrubbed...<br>> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20091109/6e36a5c7/attachment.html><br>> <br>> ------------------------------<br>> <br>> Message: 3<br>> Date: Mon, 9 Nov 2009 12:50:45 +0000<br>> From: Alan Buxey <A.L.M.Buxey@lboro.ac.uk><br>> Subject: Re: Cannot upgade to 2.1.7<br>> To: FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Message-ID: <20091109125045.GB29997@lboro.ac.uk><br>> Content-Type: text/plain; charset=us-ascii<br>> <br>> Hi,<br>> > Hi,<br>> > I m trying to upgrade the freeradius server to 2.1.7. <br>> > But when i build i get the following error :<br>> > <br>> > configure: error: set --without-rlm_counter to disable it explicitly.<br>> > configure: error: ./configure failed for src/modules/rlm_counter<br>> > make: *** [*/*/*/*/*/*/*/radius/freeradius-server-2.1.7/src/main/radiusd] Error 1<br>> > <br>> > How can i rectify this???<br>> <br>> do you want the counter module? if not, simply do as it says...add<br>> <br>> --without-rlm_counter after the ./configure eg plain version<br>> <br>> ./configure --without-rlm_counter<br>> <br>> <br>> alan<br>> <br>> <br>> ------------------------------<br>> <br>> Message: 4<br>> Date: Mon, 9 Nov 2009 13:36:55 +0000<br>> From: "nf-vale" <nf-vale@critical-links.com><br>> Subject: Re: WLAN - Freeradius - OpenLDAP - VLANs<br>> To: freeradius-users@lists.freeradius.org<br>> Message-ID: <200911091336.56041.nf-vale@critical-links.com><br>> Content-Type: Text/Plain; charset="iso-8859-15"<br>> <br>> On Monday 09 November 2009 12:25:13 Jos? Johnny RANDRIAMAMPIONONA wrote:<br>> > Freeradius work well with openldap but only with cleartext password (PAP).<br>> > Best regards!<br>> <br>> Don't give wrong answers if you're not sure of what you're talking.<br>> <br>> > <br>> > 2009/11/9 _Stefan_H <stefanh007@networld.at><br>> > <br>> > > First I know my english is not the best, but i hope you will understand<br>> > > it.<br>> > ><br>> > > In the course of a project i have to make an authentification against a<br>> > > freeradius server for the WLAN Users.<br>> > > On the Server(OpenSUSE11.1) is a LDAP Directory and i want that the WLAN<br>> > > Users have to authentificate with their accounts. After the successful<br>> > > authentification they will be put into an other VLAN, that they can use<br>> > > their homedirectories.<br>> > ><br>> > > I would like to know how I should do it, because i inform me about the<br>> > > Authentification Types(EAP-TLS,TTLS,PEAP) and know I am totally confused<br>> > > which i have to configure at the freeradius Server.<br>> <br>> See http://deployingradius.com/documents/protocols/compatibility.html for <br>> compatibilty issues.<br>> <br>> <br>> You can authenticate users using PEAP against LDAP just as long as the user's <br>> entries in the LDAP DB have NT / LM password hashes. For instance, if using <br>> OpenLDAP, you need to include the samba.schema in the supported schemas list <br>> and then add sambaNTPassword and sambaLMPassword to each one of the user's <br>> entries in the DB.<br>> <br>> Ex:<br>> <br>> "<br>> dn: uid=xxx,ou=people,dc=local,dc=loc<br>> objectClass: inetOrgPerson<br>> objectClass: sambaSamAccount<br>> uidNumber: 1<br>> uid: xxx<br>> userPassword:: e01ENX1mMmhLRytkajNnSSs2aEtmL3ltSnV3PT0=<br>> sambaLMPassword: AB849716E6B337C43B639FCD27BDA434<br>> sambaNTPassword: 9574805413661ADC5E8FA7B943026723<br>> ...<br>> "<br>> <br>> You can hash the user's password using the smbencrypt utility.<br>> <br>> > ><br>> > > I think that PEAP would be the easiest, but I really don't know which can<br>> > > be<br>> > > used whth a dynamic VLAN.<br>> > ><br>> > > http://old.nabble.com/file/p26230857/1.jpeg<br>> > ><br>> > > The AP is an Linksys WRT-54-GS<br>> > > and the Switch is an CISCO-2950<br>> > ><br>> > ><br>> > ><br>> > > --<br>> > > View this message in context:<br>> > > http://old.nabble.com/WLAN----Freeradius----OpenLDAP----VLANs-tp26230857p<br>> > >26230857.html Sent from the FreeRadius - User mailing list archive at<br>> > > Nabble.com.<br>> > ><br>> > > -<br>> > > List info/subscribe/unsubscribe? See<br>> > > http://www.freeradius.org/list/users.html<br>> > <br>> <br>> <br>> <br>> ------------------------------<br>> <br>> Message: 5<br>> Date: Mon, 9 Nov 2009 14:42:51 +0100<br>> From: Ana Gallardo <ana.gallardo.77@gmail.com><br>> Subject: Problem with server atribute in NAS table with mysql<br>> To: FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Message-ID:<br>> <74556fcf0911090542q1d863b4am44e7467ecb18f297@mail.gmail.com><br>> Content-Type: text/plain; charset="iso-8859-1"<br>> <br>> Hello, I'm using Freeradius 2.0.4-3 an Debian.<br>> <br>> My clients are in a MySQL database (nas table).<br>> <br>> +----+------------------+---------------+-------+---------+------------+---------+---------------+---------------------------+<br>> | id | nasname | shortname | type | ports | secret | server<br>> | community | description |<br>> +----+------------------+---------------+-------+---------+------------+---------+---------------+---------------------------+<br>> | 1 | XXX | NODO1 | other | NULL | secretN1 | nodes |<br>> nodo | Nodo Wifi |<br>> | 2 | YYY | NODO2 | other | NULL | secretN2 | nodes |<br>> nodo | Nodo Wifi |<br>> <br>> <br>> I want to process some clients through one virtual server (server nodes{}),<br>> so I have the name of the virtual server in the "server" column, but this<br>> doesn't work.<br>> <br>> When I receive a request from those clients, the default server proccess<br>> them.<br>> <br>> I test to change the column name to virtual_server with same result.<br>> <br>> I have to put the clients with value in "virtual_server" in clients.conf<br>> file and the clients without value in nas table from MySQL.<br>> <br>> I test to put them in server section:<br>> <br>> ##/etc/freeradius/sites-enabled/nodes<br>> <br>> server nodes{<br>> client nodo1{<br>> }<br>> ...<br>> }<br>> <br>> but this doesn't work. I have to put them out of server section, like this:<br>> <br>> ##/etc/freeradius/sites-enabled/nodes<br>> client nodo1{<br>> }<br>> <br>> server nodes{<br>> ...<br>> }<br>> <br>> and I think that this is the same that put them in clients files ??<br>> <br>> Thank you very much and sorry for my english.<br>> <br>> -- <br>> ____________________<br>> <br>> Ana Gallardo G?mez<br>> ____________________<br>> -------------- next part --------------<br>> An HTML attachment was scrubbed...<br>> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20091109/cfde27ab/attachment.html><br>> <br>> ------------------------------<br>> <br>> Message: 6<br>> Date: Mon, 9 Nov 2009 14:03:54 +0000<br>> From: Alan Buxey <A.L.M.Buxey@lboro.ac.uk><br>> Subject: Re: Problem with server atribute in NAS table with mysql<br>> To: FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Message-ID: <20091109140354.GA30095@lboro.ac.uk><br>> Content-Type: text/plain; charset=us-ascii<br>> <br>> Hi,<br>> <br>> > My clients are in a MySQL database (nas table).<br>> > <br>> > +----+------------------+---------------+-------+---------+------------+---------+---------------+---------------------------+<br>> > | id | nasname | shortname | type | ports | secret | server<br>> > | community | description |<br>> > +----+------------------+---------------+-------+---------+------------+---------+---------------+---------------------------+<br>> > | 1 | XXX | NODO1 | other | NULL | secretN1 | nodes |<br>> > nodo | Nodo Wifi |<br>> > | 2 | YYY | NODO2 | other | NULL | secretN2 | nodes |<br>> > nodo | Nodo Wifi |<br>> > <br>> > <br>> > I want to process some clients through one virtual server (server nodes{}),<br>> > so I have the name of the virtual server in the "server" column, but this<br>> > doesn't work.<br>> > <br>> > When I receive a request from those clients, the default server proccess<br>> > them.<br>> <br>> which means you havent updated the SQL qeuery to use that column.<br>> <br>> check your sql/mysql/dialup.conf file and edit the call to pull in the NAS<br>> from<br>> <br>> nas_query = "SELECT id, nasname, shortname, type, secret FROM ${nas_table}"<br>> <br>> to<br>> <br>> nas_query = "SELECT id, nasname, shortname, type, secret, server FROM ${nas_table}"<br>> <br>> then the server attribute will be pulled in and the 'nodes' virtual host will get used.<br>> <br>> alan<br>> <br>> <br>> ------------------------------<br>> <br>> Message: 7<br>> Date: Mon, 9 Nov 2009 06:30:04 -0800 (PST)<br>> From: _Stefan_H <stefanh007@networld.at><br>> Subject: Re: WLAN - Freeradius - OpenLDAP - VLANs<br>> To: freeradius-users@lists.freeradius.org<br>> Message-ID: <26267282.post@talk.nabble.com><br>> Content-Type: text/plain; charset=UTF-8<br>> <br>> <br>> Thanks for answering and I hope that I will have no problems in configuring<br>> the server .... but I think that won't happen.<br>> <br>> <br>> nf-vale wrote:<br>> > <br>> > On Monday 09 November 2009 12:25:13 Jos? Johnny RANDRIAMAMPIONONA wrote:<br>> >> Freeradius work well with openldap but only with cleartext password<br>> >> (PAP).<br>> >> Best regards!<br>> > <br>> > Don't give wrong answers if you're not sure of what you're talking.<br>> > <br>> >> <br>> >> 2009/11/9 _Stefan_H <stefanh007@networld.at><br>> >> <br>> >> > First I know my english is not the best, but i hope you will understand<br>> >> > it.<br>> >> ><br>> >> > In the course of a project i have to make an authentification against a<br>> >> > freeradius server for the WLAN Users.<br>> >> > On the Server(OpenSUSE11.1) is a LDAP Directory and i want that the<br>> >> WLAN<br>> >> > Users have to authentificate with their accounts. After the successful<br>> >> > authentification they will be put into an other VLAN, that they can use<br>> >> > their homedirectories.<br>> >> ><br>> >> > I would like to know how I should do it, because i inform me about the<br>> >> > Authentification Types(EAP-TLS,TTLS,PEAP) and know I am totally<br>> >> confused<br>> >> > which i have to configure at the freeradius Server.<br>> > <br>> > See http://deployingradius.com/documents/protocols/compatibility.html for <br>> > compatibilty issues.<br>> > <br>> > <br>> > You can authenticate users using PEAP against LDAP just as long as the<br>> > user's <br>> > entries in the LDAP DB have NT / LM password hashes. For instance, if<br>> > using <br>> > OpenLDAP, you need to include the samba.schema in the supported schemas<br>> > list <br>> > and then add sambaNTPassword and sambaLMPassword to each one of the user's <br>> > entries in the DB.<br>> > <br>> > Ex:<br>> > <br>> > "<br>> > dn: uid=xxx,ou=people,dc=local,dc=loc<br>> > objectClass: inetOrgPerson<br>> > objectClass: sambaSamAccount<br>> > uidNumber: 1<br>> > uid: xxx<br>> > userPassword:: e01ENX1mMmhLRytkajNnSSs2aEtmL3ltSnV3PT0=<br>> > sambaLMPassword: AB849716E6B337C43B639FCD27BDA434<br>> > sambaNTPassword: 9574805413661ADC5E8FA7B943026723<br>> > ...<br>> > "<br>> > <br>> > You can hash the user's password using the smbencrypt utility.<br>> > <br>> >> ><br>> >> > I think that PEAP would be the easiest, but I really don't know which<br>> >> can<br>> >> > be<br>> >> > used whth a dynamic VLAN.<br>> >> ><br>> >> > http://old.nabble.com/file/p26230857/1.jpeg<br>> >> ><br>> >> > The AP is an Linksys WRT-54-GS<br>> >> > and the Switch is an CISCO-2950<br>> >> ><br>> >> ><br>> >> ><br>> >> > --<br>> >> > View this message in context:<br>> >> ><br>> >> http://old.nabble.com/WLAN----Freeradius----OpenLDAP----VLANs-tp26230857p<br>> >> >26230857.html Sent from the FreeRadius - User mailing list archive at<br>> >> > Nabble.com.<br>> >> ><br>> >> > -<br>> >> > List info/subscribe/unsubscribe? See<br>> >> > http://www.freeradius.org/list/users.html<br>> >> <br>> > <br>> > -<br>> > List info/subscribe/unsubscribe? See<br>> > http://www.freeradius.org/list/users.html<br>> > <br>> > <br>> <br>> -- <br>> View this message in context: http://old.nabble.com/WLAN----Freeradius----OpenLDAP----VLANs-tp26230857p26267282.html<br>> Sent from the FreeRadius - User mailing list archive at Nabble.com.<br>> <br>> <br>> <br>> <br>> ------------------------------<br>> <br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br>> <br>> <br>> End of Freeradius-Users Digest, Vol 55, Issue 32<br>> ************************************************<br> <br /><hr />Windows Live: Make it easier for your friends to see <a href='http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_2:092009' target='_new'>what you’re up to on Facebook.</a></body>
</html>