May 2025 - Freeradius-Devel - lists.freeradius.org

Re: Building a Windows-native server executable
by Peta WILSON 20 May '25

20 May '25

Hi. My employer has been using FreeRADIUS for Windows since the dawn of time. It seems we haven't done our homework! You are more than welcome to reach out to us. We'll point you in the right direction. Regards, Peta. > --------------------------------------------------------------- > > From: Freeradius-Devel <freeradius-devel(a)lists.freeradius.org> on behalf of Yuri Lifanov via Freeradius-Devel <freeradius-devel(a)lists.freeradius.org> > Sent: Wednesday, 21 May 2025 12:07 AM > To: Alan DeKok <aland(a)deployingradius.com>; FreeRadius developers mailing list <freeradius-devel(a)lists.freeradius.org> > Cc: Yuri Lifanov <Yuri.Lifanov(a)onespan.com> > Subject: Re: Building a Windows-native server executable > > Ok, thanks for the quick response. I didn't know about the ports of pthread and libdl - thanks for the tip. > > I'll try to get some time for this and will be back in touch if it does happen. > > Thanks again for your input, I appreciate it.

3 2

Building a Windows-native server executable
by Yuri Lifanov 20 May '25

20 May '25

Hi, I was, naively, thinking of trying to port the current FreeRADIUS server to run on Windows natively for a work use case where Docker, VMs and WLS aren't an option. I suspect this is a massive amount of work, but wanted to get a confirmation. Aside from the build system and the dependencies, what do you think would be the first major challenge? Best, Yuri

2 2

Re: PAP: adding support for OpenLDAP and 389ds PBKDF2 passwords
by Gerald Vogt 09 May '25

09 May '25

Hi, I have noticed that our radius server doesn't recognize PBKDF2 passwords from our freeipa/389ds ldap server. Picking up from this message last year https://lists.freeradius.org/pipermail/freeradius-devel/2024-June/014382.ht… and seeing that pr #5329 https://github.com/FreeRADIUS/freeradius-server/pull/5329 was closed as stale, I have looked into it and put together something myself: https://github.com/gvde/freeradius-server/compare/master...pbkdf-389ds It's currently against the master branch and I basically only used the pap module tests to verify it's working. It took me a while to understand the control flow. I went a slightly different path then outlined in #5329 but I think it's closer to the other types. All pap module tests succeed thus I guess it's correct. Tested with Password.PBKDF2 (which I have implemented for additional support) as well as Password.With-Header. We are running 3.2 at the moment thus I would also have to backport it to 3.2, but as it took a couple of hours to get a working and useful development environment set up, I don't want to waste any more time on it if there isn't any interest... Cheers, Gerald

2 7