FR 3.0 on *shiver* Windows? ;-)
I know, I know... There once was a Windows version of FR... Shall we try to build FR 3.0 on Windows? ;-) I can try it on Mac too, if you want... It just won't be "next week" ;-) Stefan -- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
stefan.paetow@diamond.ac.uk wrote:
I know, I know... There once was a Windows version of FR...
Nope. There was 1.1.7 (IIRC) compiled via cygwin.
Shall we try to build FR 3.0 on Windows? ;-)
Sure. It won't work. It's ~80% ported to Mingw. It needs a Posix pthread library, and a few other fixes. But it's surprisingly close.
I can try it on Mac too, if you want... It just won't be "next week" ;-)
I run it on my Mac(s) every day. Sometimes on Linux. Alan DeKok.
On 16 Jul 2013, at 21:16, <stefan.paetow@diamond.ac.uk> wrote:
I know, I know... There once was a Windows version of FR...
There was freeradius.net, but they never ported version 2.0.
Shall we try to build FR 3.0 on Windows? ;-)
You mean in mingw? There is basic support but it may be incomplete, of have becoming in complete since this was last attempted.
I can try it on Mac too, if you want... It just won't be "next week" ;-)
The main developers use Macs. It has been *well* tested on OSX. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
Shall we try to build FR 3.0 on Windows? ;-) You mean in mingw? There is basic support but it may be incomplete, of have becoming in complete since this was last attempted.
That, or... *shiver* Visual Studio. ;-)
I can try it on Mac too, if you want... It just won't be "next week" ;-) The main developers use Macs. It has been *well* tested on OSX.
Joy! In that case... ;-) Stefan -- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
On 07/16/2013 04:16 PM, stefan.paetow@diamond.ac.uk wrote:
I know, I know... There once was a Windows version of FR...
Shall we try to build FR 3.0 on Windows? ;-)
Perhaps the real question is why. These days the concept of having to build software for a particular OS just because that's the installed OS has largely disappeared. We now live in a world of virtual machines. If you happen to have a windows box but want to run FreeRADIUS on it then the path of least resistance is to simply spin up a Linux VM on your Windows box and run FreeRADIUS in the Linux VM where it will run in it's own familiar environment quite happily blissfully unaware it's being hosted on Windows. John
On 17/07/13 14:15, John Dennis wrote:
On 07/16/2013 04:16 PM, stefan.paetow@diamond.ac.uk wrote:
I know, I know... There once was a Windows version of FR...
Shall we try to build FR 3.0 on Windows? ;-)
Perhaps the real question is why. These days the concept of having to build software for a particular OS just because that's the installed OS has largely disappeared. We now live in a world of virtual machines. If you happen to have a windows box but want to run FreeRADIUS on it then the path of least resistance is to simply spin up a Linux VM on your Windows box and run FreeRADIUS in the Linux VM where it will run in it's own familiar environment quite happily blissfully unaware it's being hosted on Windows.
I agree with this position, but I know of people in the .ac.uk community who have a *strong* resistance to this model, and they essentially cannot be reasoned with on the topic. So there are definitely sites who would run FreeRADIUS if it ran on windows, but not via a VM appliance. Maybe not many, but they exist. There might also be one tangible advantage - a version of FreeRADIUS running on windows could use the Lsa APIs to authenticate MSCHAP rather than Samba/ntlm_auth, which could be advantageous in some configurations. Samba is hardly trouble-free in this role...
I agree with this position, but I know of people in the .ac.uk community who have a *strong* resistance to this model, and they essentially cannot be reasoned with on the topic.
I have to agree... you will find that in many Windows shops, running Apache for Windows etc is no problem generally provided it has an advantage over IIS. FreeRADIUS for Windows may actually let people be more flexible where IAS/NPS is concerned. That said, it's just a pet idea... especially since there is (was) Freeradius.net, and I'm always open to seeing good *nix tools/servers porting to Windows.
There might also be one tangible advantage - a version of FreeRADIUS running on windows could use the Lsa APIs to authenticate MSCHAP rather than Samba/ntlm_auth, which could be advantageous in some configurations. Samba is hardly trouble-free in this role...
Hmmmm... I have to agree that Samba can be rather tempestuous (although, connecting a CentOS server running Samba 3.x to a domain was surprisingly painless!) Stefan -- This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail. Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message. Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom
That said, it's just a pet idea... especially since there is (was) Freeradius.net, and I'm always open to seeing good *nix tools/servers porting to Windows.
In case someone is remotely interested in FR for Windows, this is what I see when I type in: radiusd -v radiusd.exe: FreeRADIUS Version 2.2.0, for host i686-pc-mingw32, built on Mar 17 2013 at 02:22:49 Build options: OpenSSL 1.0.1c | OpenLDAP 2.4.32 | Heimdal 1.5.2 | MySQL 5.5.28 | unixODBC 2.3.1 | IKEv2 0.2.1 | Hiredis 0.10.1 | IPv6 Copyright (C) 1999-2011 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT.
Sergio NNX wrote:
In case someone is remotely interested in FR for Windows, this is what I see when I type in: radiusd -v
radiusd.exe: FreeRADIUS Version 2.2.0, for host i686-pc-mingw32, built on Mar 17 2013 at 02:22:49
That's a little surprising. I had spent some time ensuring it built under Mingw. But it shouldn't work like that... Windows has this nice idea that sockets aren't file descriptors. So the normal Unix code doesn't work. See: https://github.com/msysgit/git/tree/master/compat There's a whole host of wrapper functions which are needed. Alan DeKok.
Hi,
radiusd.exe: FreeRADIUS Version 2.2.0, for host i686-pc-mingw32, built on Mar 17 2013 at 02:22:49
That's a little surprising. I had spent some time ensuring it built under Mingw. But it shouldn't work like that...
Windows has this nice idea that sockets aren't file descriptors. So the normal Unix code doesn't work. See:
https://github.com/msysgit/git/tree/master/compat
There's a whole host of wrapper functions which are needed.
Which sort of begs the question... where does this Windows port come from? Is it available from somewhere for download or is it something Sergio sits on on his private home server and has no intentions of publicising? Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
On 18 Jul 2013, at 08:45, Stefan Winter <stefan.winter@restena.lu> wrote:
Hi,
radiusd.exe: FreeRADIUS Version 2.2.0, for host i686-pc-mingw32, built on Mar 17 2013 at 02:22:49
That's a little surprising. I had spent some time ensuring it built under Mingw. But it shouldn't work like that...
Windows has this nice idea that sockets aren't file descriptors. So the normal Unix code doesn't work. See:
https://github.com/msysgit/git/tree/master/compat
There's a whole host of wrapper functions which are needed.
Which sort of begs the question... where does this Windows port come from? Is it available from somewhere for download or is it something Sergio sits on on his private home server and has no intentions of publicising?
The binaries are available on source forge.
Greetings,
Stefan Winter
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg
Tel: +352 424409 1 Fax: +352 422473
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
On 18 Jul 2013, at 08:45, Stefan Winter <stefan.winter@restena.lu> wrote:
Hi,
radiusd.exe: FreeRADIUS Version 2.2.0, for host i686-pc-mingw32, built on Mar 17 2013 at 02:22:49
That's a little surprising. I had spent some time ensuring it built under Mingw. But it shouldn't work like that...
Windows has this nice idea that sockets aren't file descriptors. So the normal Unix code doesn't work. See:
https://github.com/msysgit/git/tree/master/compat
There's a whole host of wrapper functions which are needed.
Which sort of begs the question... where does this Windows port come from? Is it available from somewhere for download or is it something Sergio sits on on his private home server and has no intentions of publicising?
The binaries are available on source forge.
Greetings,
Stefan Winter
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg
Tel: +352 424409 1 Fax: +352 422473
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Hi, >> Which sort of begs the question... where does this Windows port come >> from? Is it available from somewhere for download or is it something >> Sergio sits on on his private home server and has no intentions of >> publicising? > > The binaries are available on source forge. And it's built from vanilla sources? Stefan > > > >> Greetings, >> >> Stefan Winter >> >> -- >> Stefan WINTER >> Ingenieur de Recherche >> Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et >> de la Recherche >> 6, rue Richard Coudenhove-Kalergi >> L-1359 Luxembourg >> >> Tel: +352 424409 1 >> Fax: +352 422473 >> >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html > -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
On 18 Jul 2013, at 09:40, Stefan Winter <stefan.winter@restena.lu> wrote: > Hi, > >>> Which sort of begs the question... where does this Windows port come >>> from? Is it available from somewhere for download or is it something >>> Sergio sits on on his private home server and has no intentions of >>> publicising? >> >> The binaries are available on source forge. > > And it's built from vanilla sources? Almost certainly not... There's a repo on source forge but it's empty... git clone http://git.code.sf.net/p/freeradius/code freeradius-code > > Stefan > >> >> >> >>> Greetings, >>> >>> Stefan Winter >>> >>> -- >>> Stefan WINTER >>> Ingenieur de Recherche >>> Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et >>> de la Recherche >>> 6, rue Richard Coudenhove-Kalergi >>> L-1359 Luxembourg >>> >>> Tel: +352 424409 1 >>> Fax: +352 422473 >>> >>> - >>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html >> > > > -- > Stefan WINTER > Ingenieur de Recherche > Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et > de la Recherche > 6, rue Richard Coudenhove-Kalergi > L-1359 Luxembourg > > Tel: +352 424409 1 > Fax: +352 422473 > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
Hi,
The binaries are available on source forge.
And it's built from vanilla sources?
Almost certainly not... There's a repo on source forge but it's empty...
git clone http://git.code.sf.net/p/freeradius/code freeradius-code
That again begs a question: GPL compliance? Distributing the binaries without the source that built them is most certainly not okay. And you'll have no idea if that binary sends your passwords cc to PRISM. Oh, wonderful: the sourceforce user "sfreschi", admin of this project, has as his real name "matear.eu". When I tried to go there, Firefox stopped my by saying "Reported Attack Page". I sure wouldn't want to use that binary. Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
On 18 Jul 2013, at 10:04, Stefan Winter <stefan.winter@restena.lu> wrote:
Hi,
The binaries are available on source forge.
And it's built from vanilla sources?
Almost certainly not... There's a repo on source forge but it's empty...
git clone http://git.code.sf.net/p/freeradius/code freeradius-code
That again begs a question: GPL compliance? Distributing the binaries without the source that built them is most certainly not okay.
And you'll have no idea if that binary sends your passwords cc to PRISM.
Oh, wonderful: the sourceforce user "sfreschi", admin of this project, has as his real name "matear.eu".
When I tried to go there, Firefox stopped my by saying "Reported Attack Page".
and if we look at the source for the page we get... <meta name="author" content="Sergio FRESCHI" /> Who is almost certainly an IT contractor living in London who just threw the site together to legitimise his contracting company, seeing as the postcode listed on the website is in a residential area of West Kensington. Do you think Sergio Freschi and Sergio NNX <sfhacker@hotmail.com> may be the same person? Oops. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
Stefan Winter wrote:
That again begs a question: GPL compliance? Distributing the binaries without the source that built them is most certainly not okay.
It's not OK.
I sure wouldn't want to use that binary.
Yup. It should be down shortly. I've reported it to sourceforge. Alan DeKok.
Hi,
That again begs a question: GPL compliance? Distributing the binaries without the source that built them is most certainly not okay.
It's not OK.
I sure wouldn't want to use that binary.
Yup.
It should be down shortly. I've reported it to sourceforge.
Still up: http://sourceforge.net/projects/freeradius/files/ Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
Hi,
Still up:
oh. even more amusing, there is now a SOURCE tarball present.... oh! goodie! whats the windows changes? well, download the source....but wait! it looks oh so similar. get the version from there. get the tar.gz from freeradius.org - its the SAME file! its not the source for a windows capabable version. SF]$ ls -lrt total 8384 users 4289865 Jul 24 19:36 freeradius-server-2.2.0-src.tar.gz users 4289865 Jul 25 19:14 freeradius-server-2.2.0.tar.gz SF]$ md5sum freeradius-server-2.2.0-src.tar.gz 2e45d3c0d22ab14c560c7c3029893a8a freeradius-server-2.2.0-src.tar.gz SF]$ md5sum freeradius-server-2.2.0.tar.gz 2e45d3c0d22ab14c560c7c3029893a8a freeradius-server-2.2.0.tar.gz SF]$ diff freeradius-server-2.2.0.tar.gz freeradius-server-2.2.0-src.tar.gz alan
On 25 Jul 2013, at 19:17, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
Still up:
oh. even more amusing, there is now a SOURCE tarball present.... oh! goodie! whats the windows changes? well, download the source....but wait! it looks oh so similar.
get the version from there. get the tar.gz from freeradius.org - its the SAME file! its not the source for a windows capabable version.
SF]$ ls -lrt total 8384 users 4289865 Jul 24 19:36 freeradius-server-2.2.0-src.tar.gz users 4289865 Jul 25 19:14 freeradius-server-2.2.0.tar.gz
SF]$ md5sum freeradius-server-2.2.0-src.tar.gz 2e45d3c0d22ab14c560c7c3029893a8a freeradius-server-2.2.0-src.tar.gz SF]$ md5sum freeradius-server-2.2.0.tar.gz 2e45d3c0d22ab14c560c7c3029893a8a freeradius-server-2.2.0.tar.gz
SF]$ diff freeradius-server-2.2.0.tar.gz freeradius-server-2.2.0-src.tar.gz
Oh dear, I wonder how many passwords he's harvested already :/. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
On 26 Jul 2013, at 00:02, Alan DeKok <aland@deployingradius.com> wrote:
A.L.M.Buxey@lboro.ac.uk wrote:
oh. even more amusing, there is now a SOURCE tarball present.... oh! goodie! whats the windows changes? well, download the source....but wait! it looks oh so similar.
I'll take care of it.
I love how mentioning it's existence tripled it's traffic. http://sourceforge.net/projects/freeradius/files/freeradius-2.2.0/stats/time... Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
You should be able to build the stock source on Linux, using the mingw cross compiler. That will get you a mingw binary. But its a miracle if it works. It will have all kinds of issues, like close() doesn't work on sockets. You need closesocket(), etc. Sent from my iPhone On 2013-07-18, at 9:45 AM, Stefan Winter <stefan.winter@restena.lu> wrote:
Hi,
radiusd.exe: FreeRADIUS Version 2.2.0, for host i686-pc-mingw32, built on Mar 17 2013 at 02:22:49
That's a little surprising. I had spent some time ensuring it built under Mingw. But it shouldn't work like that...
Windows has this nice idea that sockets aren't file descriptors. So the normal Unix code doesn't work. See:
https://github.com/msysgit/git/tree/master/compat
There's a whole host of wrapper functions which are needed.
Which sort of begs the question... where does this Windows port come from? Is it available from somewhere for download or is it something Sergio sits on on his private home server and has no intentions of publicising?
Greetings,
Stefan Winter
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg
Tel: +352 424409 1 Fax: +352 422473
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
Hi,
In case someone is remotely interested in FR for Windows, this is what I see when I type in: radiusd -v
radiusd.exe: FreeRADIUS Version 2.2.0, for host i686-pc-mingw32, built on Mar 17 2013 at 02:22:49
yes yes yes but where did you get this from , is it available to others and have the required code changes/fixes been pushed upstream for the community? ..and finally, why? ;-) alan
Phil Mayers wrote:
There might also be one tangible advantage - a version of FreeRADIUS running on windows could use the Lsa APIs to authenticate MSCHAP rather than Samba/ntlm_auth, which could be advantageous in some configurations. Samba is hardly trouble-free in this role...
That's really the main reason. I've looked into it. It's not that hard. It's just not a priority right now. Alan DeKok.
participants (8)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Arran Cudbard-Bell -
John Dennis -
Phil Mayers -
Sergio NNX -
Stefan Winter -
stefan.paetow＠diamond.ac.uk