August 2005 - Freeradius-Users - lists.freeradius.org

Re: FreeRadius EAP-TLS quesiton
by Hamid Salim 10 Aug '05

10 Aug '05

Kris, Thanks for your help. Do you think that (1) and (2) in my previous message could be the reason that freeradius will not authenticate the client? thanks again. freeradius-users-request(a)lists.freeradius.org wrote: >Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > >To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users >or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > >You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of Freeradius-Users digest..." > > >Today's Topics: > > 1. FreeRadius EAP-TLS quesitons (Hamid Salim) > 2. Re: problem with using rlm_sql for accounting only (John Donagher) > 3. Re: problem with using rlm_sql for accounting only (John Donagher) > 4. Re: FreeRadius EAP-TLS quesitons (Kris Benson) > 5. sql.conf (update query) (Michel B?langer) > 6. Re: problem with using rlm_sql for accounting only (Alan DeKok) > 7. Hi. Windows RADIUS server died. (Derrick MacPherson) > 8. Re: Hi. Windows RADIUS server died. (Alan DeKok) > 9. Re: Hi. Windows RADIUS server died. (Derrick MacPherson) > 10. Re: how to return multiple attributes from ldap? (kevin) > > >---------------------------------------------------------------------- > >Message: 1 >Date: Tue, 9 Aug 2005 13:54:52 -0400 (EDT) >From: Hamid Salim <salim.h(a)neu.edu> >Subject: FreeRadius EAP-TLS quesitons >To: freeradius-users(a)lists.freeradius.org >Message-ID: <4476601.1123610092946.JavaMail.salim.h(a)neu.edu> >Content-Type: text/plain; charset=UTF-8 > >Hello, >Two part question: >1. Is it critical to have certificates, dh and random files in >etc/raddb/certs directory for eap-tls to work. >2. Is it ok to generate random file as date > random > >thanks a lot. >Hamid. > > >------------------------------ > >Message: 2 >Date: Tue, 09 Aug 2005 13:55:45 -0400 >From: John Donagher <john(a)webmeta.com> >Subject: Re: problem with using rlm_sql for accounting only >To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> >Message-ID: <1123610145.31591.0.camel(a)localhost.localdomain> >Content-Type: text/plain > >On Tue, 2005-08-09 at 00:01 +0200, Nicolas Baradakis wrote: >> John Donagher wrote: >> >> > If the SQL server is inaccessible (i.e. down, or locked), freeradius >> > rejects all radius requests. In my case, since the SQL database is being >> > used only for accounting, this is not desired behavior. >> >> The link below explains how to control the flow of modules in FreeRADIUS. >> http://www.freeradius.org/radiusd/doc/configurable_failover >> >> There is an example which looks like what you want to do for accounting. >> > >Thanks, that was exactly what I was looking for! > >John > > > > >------------------------------ > >Message: 3 >Date: Tue, 09 Aug 2005 14:01:11 -0400 >From: John Donagher <john(a)webmeta.com> >Subject: Re: problem with using rlm_sql for accounting only >To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> >Message-ID: <1123610471.31591.7.camel(a)localhost.localdomain> >Content-Type: text/plain > >On Mon, 2005-08-08 at 18:09 -0400, Alan DeKok wrote: >> John Donagher <john(a)webmeta.com> wrote: >> > If the SQL server is inaccessible (i.e. down, or locked), freeradius >> > rejects all radius requests. In my case, since the SQL database is being >> > used only for accounting, this is not desired behavior. >> >> See the log messages. >> >> What's probably happening is that all of the threads are blocked, >> waiting for SQl to respond. Therefore, there are no threads ready to >> service authentication requests, and they get discarded. >> >> The solution is to fix the SQL server so it doesn't go down. If >> it's a critical part of your infrastructure, I'm a little unsure as to >> why it would go down, or lock FreeRADIUS out for many seconds at a >> time. > >Indeed.. under normal circumstances it wouldn't go down. My issue is >that the SQL server is not a critical part of our infrastructure and I >don't want it to be (at this point anyway). I'm using it for accounting >trend reporting only.. in any event, Nicolas' suggestion was right on >and works like a charm. > >Thanks >John > > > > >------------------------------ > >Message: 4 >Date: Tue, 09 Aug 2005 11:18:10 -0700 >From: "Kris Benson" <kbenson(a)sd57.bc.ca> >Subject: Re: FreeRadius EAP-TLS quesitons >To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> >Cc: freeradius-users(a)lists.freeradius.org >Message-ID: > <fc.000f89ac0157986a3b9aca00c03bc7e0.1579876(a)mail.sd57.bc.ca> >Content-Type: text/plain; charset=ISO-8859-1 > >FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> on >August 9, 2005 at 10:54 -0800 wrote: >>Hello, >>Two part question: >>1. Is it critical to have certificates, dh and random files in >>etc/raddb/certs directory for eap-tls to work. >>2. Is it ok to generate random file as date > random > >1. Yes, sort of. You can put it in a different directory if you change >the eap.conf entries. > >2. No. This is the correct way: > >To generate the dh file you can use a function that comes with openssl > >openssl dhparam -check -text -5 512 -out dh > >This will generate a 512 Diffie-Hellman key named dh. >Move this file to /etc/mycerts/ > >mv dh /etc/mycerts/. > >To generate a random file you will need a short C program using openssl >libraries. Paste this text into a file named 'random.c': >----8< cut--- >#include <stdio.h> >#include <openssl/rand.h> > >main (void) { >unsigned char buf[100]; >if (!RAND_bytes(buf, 100)) { >// the usual md5(time+pid) >} >printf("Random : %s\n", buf); >} >----8< cut--- > >Compile it like this: gcc random.c -o random -lcrypto > >I will generate 32-bit LSB executable named random, try it with ./random. > >Move this file to /etc/mycerts/: >mv random /etc/mycerts/. > >-kb >-- >Kris Benson, CCP, I.S.P. >Technical Analyst, District Projects >School District #57 (Prince George) > > > >------------------------------ > >Message: 5 >Date: Tue, 09 Aug 2005 15:34:28 -0400 >From: Michel B?langer <michel.belanger(a)mediom.qc.ca> >Subject: sql.conf (update query) >To: freeradius-users(a)lists.freeradius.org >Message-ID: <42F90544.8020804(a)mediom.qc.ca> >Content-Type: text/plain; charset=ISO-8859-1; format=flowed > >Hi, >I try to add an additional query in the query update in sql.conf. This >is possible to make it ? > >Here what I have test: > >accounting_update_query = "UPDATE ${acct_table1} \ > SET FramedIPAddress = '%{Framed-IP-Address}', \ > AcctSessionTime = '%{Acct-Session-Time}', \ > AcctInputOctets = '%{Acct-Input-Octets}', \ > AcctOutputOctets = '%{Acct-Output-Octets}' \ > WHERE AcctSessionId = '%{Acct-Session-Id}' \ > AND UserName = '%{SQL-User-Name}' \ > AND NASIPAddress= '%{NAS-IP-Address}'; INSERT into radtempo >(AcctInputOctets, AcctOutputOctets, AcctSessionId) values('%{Ac >ct-Input-Octets}', '%{Acct-Output-Octets}', '%{Acct-Session-Id}')" > >rlm_sql_mysql: MYSQL check_error: 1064 received >rlm_sql (sql): Couldn't update SQL accounting ALIVE record - You have an >error in your SQL syntax; check the manual that corresponds to your >MySQL server version for the right syntax to use near '; INSERT into >radtempo (AcctInputOctets, AcctOutputOctets, AcctSessionId) values' at >line 1 >-- >------------------------------------------------------------ > >Michel Bélanger > > > > >------------------------------ > >Message: 6 >Date: Tue, 09 Aug 2005 16:00:34 -0400 >From: "Alan DeKok" <aland(a)ox.org> >Subject: Re: problem with using rlm_sql for accounting only >To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> >Message-ID: <20050809200034.64BA316CCA(a)mail.nitros9.org> > >John Donagher <john(a)webmeta.com> wrote: >> Indeed.. under normal circumstances it wouldn't go down. My issue is >> that the SQL server is not a critical part of our infrastructure and I >> don't want it to be (at this point anyway). I'm using it for accounting >> trend reporting only.. in any event, Nicolas' suggestion was right on >> and works like a charm. > > In the CVS head you can use the rlm_sql_log module, which dumps the >queries to a file. The file can then be post-processed. This removes >all run-time dependency on SQL, which is a better solution. > > Alan DeKok. > > >------------------------------ > >Message: 7 >Date: Tue, 09 Aug 2005 13:47:29 -0700 >From: Derrick MacPherson <dmacpherson(a)mainframe.ca> >Subject: Hi. Windows RADIUS server died. >To: freeradius-users(a)lists.freeradius.org >Message-ID: <1123620449.10739.94.camel(a)Mandarin-04.mainframe.ca> >Content-Type: text/plain > >I just got asked to try and get a freeradius server running ASAP. I got >it installed on a freebsd 5.4 box that I had just finished getting squid >running on, not implemented yet still testing. > >I see freeradius can use ntlm_auth as well, though I'm not clear on it's >syntax. I have squid using the same authentication criteria as the >radius server was using, that was based upon being in certain group. Can >freeradius support this as well? My syntax in squid: > >ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership >-of=S-1-5-21-1058564242-1277044956-825688854-1337 Domain Group (2) > >Can someone save me with a quick example or am I off to read and google? > > > >------------------------------ > >Message: 8 >Date: Tue, 09 Aug 2005 17:22:17 -0400 >From: "Alan DeKok" <aland(a)ox.org> >Subject: Re: Hi. Windows RADIUS server died. >To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> >Message-ID: <20050809212218.06DD216CCA(a)mail.nitros9.org> > >Derrick MacPherson <dmacpherson(a)mainframe.ca> wrote: >> I see freeradius can use ntlm_auth as well, though I'm not clear on it's >> syntax. > > See radiusd.conf for an example, and the ntlm_auth docs for it's >command-line arguments. > >> I have squid using the same authentication criteria as the radius >> server was using, that was based upon being in certain group. Can >> freeradius support this as well? > > Sure, because FreeRADIUS doesn't care about command-line arguments >to ntlm_auth. Add ass many arguments to ntlm_auth as you want. > >> ntlm_auth --helper-protocol=squid-2.5-ntlmssp > > This *isn't* supported. You have to pass the username & password on >the command line, as in the examples. And if you're doing MSCHAP, you >MUST also pass the "request nt key" option, too. > >> --require-membership -of=S-1-5-21-1058564242-1277044956-825688854-1337 Domain Group (2) > > This is just noise to FreeRADIUS, which doesn't look at it, and >doesn't care. If ntlm_auth returns success, so does FreeRADIUS. If >it returns fail, so does FreeRADIUS. > > Alan DeKok. > > > >------------------------------ > >Message: 9 >Date: Tue, 09 Aug 2005 14:38:38 -0700 >From: Derrick MacPherson <dmacpherson(a)mainframe.ca> >Subject: Re: Hi. Windows RADIUS server died. >To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> >Message-ID: <1123623518.10739.111.camel(a)Mandarin-04.mainframe.ca> >Content-Type: text/plain > >On Tue, 2005-08-09 at 17:22 -0400, Alan DeKok wrote: >> See radiusd.conf for an example, and the ntlm_auth docs for it's >> command-line arguments. > >thank you, reading them now. > >Is there a way to test if the authentication is passing or failing? > > > >------------------------------ > >Message: 10 >Date: Tue, 09 Aug 2005 15:10:17 -0700 >From: kevin <kevinsmbox(a)earthlink.net> >Subject: Re: how to return multiple attributes from ldap? >To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> >Message-ID: <42F929C9.7070102(a)earthlink.net> >Content-Type: text/plain; charset="iso-8859-1" > >But, I am still interested in the way returning multiple attributes >without changing ldap data. >I thought there must be a way. > >kevin > >Dusty Doris wrote: > >>On Tue, 9 Aug 2005, kevin wrote: >> >> >> >>>What? So, should I change the ldap attribute values with "+=" ??? >>>Any other way? >>> >>> >>> >> >>Yep, it works. >> >>I did a test, with this DN only one filter-id was returned. >> >>dn: uid=dustytest,ou=users,ou=radius,dc=test,dc=com >>objectClass: radiusprofile >>userPassword:: ZHVzdHl0ZXN0 >>radiusGroupName: dial >>radiusGroupName: adsl >>uid: dustytest >>radiusFilterId: filter1 >>radiusFilterId: filter2 >> >>Received response ID 210, code 2, length = 59 >> Framed-Routing = None >> Framed-IP-Netmask = 255.255.255.0 >> Framed-Protocol = PPP >> Service-Type = Framed-User >> Filter-Id = "filter1" >> >> >>With this dn, both were returned (note there were no quotes in it - that >>didn't work) >> >>dn: uid=dustytest,ou=users,ou=radius,dc=test,dc=com >>objectClass: radiusprofile >>userPassword:: ZHVzdHl0ZXN0 >>radiusGroupName: dial >>radiusGroupName: adsl >>uid: dustytest >>radiusFilterId: += filter1 >>radiusFilterId: += filter2 >> >>Received response ID 214, code 2, length = 68 >> Framed-Routing = None >> Framed-IP-Netmask = 255.255.255.0 >> Framed-Protocol = PPP >> Service-Type = Framed-User >> Filter-Id = "filter1" >> Filter-Id = "filter2" >> >>- >>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >> >> >> > >

2 1

freeradius with auth Mac addresses
by robin rapa 10 Aug '05

10 Aug '05

I'm new at this and I was wondering if anyone can help me out configuring free radius for mac address authentication I have linux fedora 3 and one lan wifi. I need to install a server freeradius for mac address authentication (only, without certificates). I have a LAN with servers windows and with servers linux with dinamic IP.It's a LAN ethernet (switches Cisco 10/100/1000). I have windows clients with wifi and I need autentificación for mac (only). You can help me to configure the server Thank you I add in clients.conf client 192.168.0.6 { secret = passecret shortname = ap nastype = other } and in users 000F20-93DD75 Auth-TYPE := Local, User-Password == "passecret" in the linux server : radiusd -Xy Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. rad_recv: Access-Request packet from host 192.168.0.6:1024, id=17, length=150 User-Name = "00-0f-20-93-dd-75" NAS-IP-Address = 192.168.0.6 Called-Station-Id = "00-10-40-01-7f-01" NAS-Identifier = "ap" NAS-Port-Type = Wireless-Other Framed-MTU = 1400 Calling-Station-Id = "00-0f-20-93-dd-75" Service-Type = Authenticate-Only User-Password = "passecret" Message-Authenticator = 0x5f3efecba64473e28b2d9b48d8f0a30c Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "00-0f-20-93-dd-75", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 modcall[authenticate]: module "unix" returns notfound for request 0 modcall: group authenticate returns notfound for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... rad_recv: Access-Request packet from host 192.168.0.6:1024, id=17, length=150 Sending Access-Reject of id 17 to 192.168.0.6:1024 --- Walking the entire request list --- Waking up in 5 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 17 with timestamp 42f1e190 Nothing to do. Sleeping until we see a request. _________________________________________________________________ Un amor, una aventura, compañía para un viaje. Regístrate gratis en MSN Amor & Amistad. http://match.msn.es/match/mt.cfm?pg=channel&tcid=162349

3 2

Re: freeradius on LynxOS
by Iandc Davies 10 Aug '05

10 Aug '05

> Looks like you dont have anyof the supported SQL's nor Kerberos installed. Thats's what it says from what I can see at a quick glance. Unfortunately I've got to rely on what/how our IT guys set up the machine as I don't have root access. > Does it compile at all? Nope, The first file it tries to compile fails complaining that I should use sys/socket.h, but there is no sys directory available at the moment. Ian Davies IMS-SIPAC Software Development Engineer

1 0

RE: ip ranges in clients.conf
by Shepherd, Dave 10 Aug '05

10 Aug '05

Tariq, Like you say, you can use: Client 172.0.0.0/8 { Secret = secret Shortname = 172-network } HTH Dave Shepherd > -----Original Message----- > From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius- > users-bounces(a)lists.freeradius.org] On Behalf Of Tariq Rashid > Sent: 10 August 2005 11:08 > To: 'FreeRadius users mailing list' > Subject: ip ranges in clients.conf > > > is it possible specify IP ranges in the clients.conf? or multiple IPs for > each client{} section? > > for example: > > client 1.2.3.0/23 { > secret = shared_secret > shortname = abc.def.ghi.jkl > nastype = other > } > > or > > client 1.2.3.1 { > secret = shared_secret > shortname = abc.def.ghi.jkl > nastype = other > identical_clients = 1.2.3.2, 1.2.3.3, 10.11,12.13 > } > > at the moment i'm using a script to generate large sections of the > clients.conf. > > tariq > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html

1 0

freeradius on LynxOS
by Iandc Davies 10 Aug '05

10 Aug '05

All, Have just moved department within work and have been told that I am to work with freeradius as a digest authentication tool for SIP URIs. I've already bought the RADIUS O'Reilly book and am slowly going through it. (It seems a bit out of date though ?) We are going to use 2 different platforms running Linux RedHat 9-3 and LynxOS 4. Just wondered if any of you users have managed to get it running on a Lynx OS . I've managed to get the latest (Version-1.0.4) compiled on Linux, but when I run the configure script on Lynx it seems that many of the header files can't be found by it. Applying make confirms this as it says it can't find sys/socket.h. Is there a tweek that configure needs ? I'm trying to get our IT admin guys to set the box up with a full set of /usr/include's but it'll take a bit of time. If there is a lot of work to get freeradius working on Lynx then that will affect my timescales as I've got to get this done ASAP before October'ish. Not sure if this message should be on the users or developers mailing list, but since I'm a newbie I'll start with this one. (Configure outputs for Linux and Lynx can be seen below) Outputs include any xterm warnings and Failures also at the bottom of the dump. Cheers in advance. Lynx Output loading cache ./config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc ) works... yes checking whether the C compiler (gcc ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for AIX... no checking whether gcc needs -traditional... (cached) no checking whether we are using SUNPro C... (cached) no checking for ranlib... (cached) ranlib checking whether byte ordering is bigendian... (cached) no checking for gmake... (cached) no checking for make... (cached) /bin/make checking for lt_dlinit in -lltdl... (cached) no checking for Cygwin environment... (cached) no checking for mingw32 environment... (cached) no checking host system type... i386-unknown-lynxos checking build system type... i386-unknown-lynxos checking for ld used by GCC... (cached) /usr/i386-elf-lynxos/bin/ld checking if the linker (/usr/i386-elf-lynxos/bin/ld) is GNU ld... (cached) yes checking for /usr/i386-elf-lynxos/bin/ld option to reload object files... (cached) -r checking for BSD-compatible nm... (cached) /bin/nm -B checking whether ln -s works... (cached) yes checking how to recognise dependant libraries... (cached) unknown checking for object suffix... (cached) o checking for executable suffix... (cached) no checking command to parse /bin/nm -B output... (cached) ok checking for dlfcn.h... (cached) yes checking for ranlib... (cached) ranlib checking for strip... (cached) strip checking for objdir... .libs checking for gcc option to produce PIC... (cached) -fPIC checking if gcc PIC flag -fPIC works... (cached) yes checking if gcc static flag -static works... (cached) yes checking if gcc supports -c -o file.o... (cached) yes checking if gcc supports -c -o file.lo... (cached) yes checking if gcc supports -fno-rtti -fno-exceptions... yes checking whether the linker (/usr/i386-elf-lynxos/bin/ld) supports shared libraries... yes checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking dynamic linker characteristics... no checking if libtool supports shared libraries... no checking whether to build shared libraries... no checking whether to build static libraries... yes checking for shl_load... (cached) no checking for shl_load in -ldld... (cached) no checking for dlopen... (cached) no checking for dlopen in -ldl... (cached) no checking for dlopen in -lsvld... (cached) no checking for dld_link in -ldld... (cached) no creating libtool checking logdir... ${localstatedir}/log/radius checking radacctdir... ${logdir}/radacct checking raddbdir... ${sysconfdir}/raddb checking for perl... (cached) /usr/local/bin/perl checking for snmpget... no checking for snmpwalk... no checking for rusers... (cached) /usr/bin/rusers checking for working aclocal... missing checking for working autoconf... found checking for working autoheader... found checking for locate... no checking for dirname... (cached) /bin/dirname checking for grep... (cached) /bin/grep checking for pthread.h... (cached) no checking for pthread_create in -lpthread... (cached) no checking for pthread_create in -lc_r... (cached) no checking for getsockname in -lsocket... (cached) yes checking for inet_aton in -lresolv... (cached) no checking for inet_ntoa in -lnsl... (cached) yes checking for dirent.h that defines DIR... (cached) yes checking for opendir in -ldir... (cached) no checking for ANSI C header files... (cached) yes checking whether time.h and sys/time.h may both be included... (cached) yes checking for sys/wait.h that is POSIX.1 compatible... (cached) yes checking for unistd.h... (cached) yes checking for crypt.h... (cached) no checking for errno.h... (cached) yes checking for resource.h... (cached) no checking for getopt.h... (cached) no checking for malloc.h... (cached) yes checking for utmp.h... (cached) yes checking for utmpx.h... (cached) no checking for signal.h... (cached) yes checking for sys/select.h... (cached) yes checking for syslog.h... (cached) yes checking for inttypes.h... (cached) yes checking for stdint.h... (cached) yes checking for stdio.h... (cached) yes checking for netdb.h... (cached) yes checking for semaphore.h... (cached) yes checking for arpa/inet.h... (cached) yes checking for netinet/in.h... (cached) no checking for sys/types.h... (cached) yes checking for sys/socket.h... (cached) no checking for sys/time.h... (cached) no checking for sys/wait.h... (cached) yes checking for sys/security.h... (cached) no checking for fcntl.h... (cached) yes checking for sys/fcntl.h... (cached) no checking for prot.h... (cached) no checking for sia.h... (cached) no checking for siad.h... (cached) no checking for regex.h... (cached) no checking for openssl/ssl.h... no checking for off_t... (cached) yes checking for pid_t... (cached) yes checking for size_t... (cached) yes checking for uid_t in sys/types.h... (cached) yes checking for socklen_t... (cached) no checking for uint8_t... (cached) yes checking for uint16_t... (cached) yes checking for uint32_t... (cached) yes checking for getopt_long... (cached) no checking for lockf... (cached) yes checking for strsignal... (cached) no checking for sigaction... (cached) yes checking for sigprocmask... (cached) yes checking for pthread_sigmask... (cached) no checking for snprintf... (cached) yes checking for vsnprintf... (cached) no checking for setsid... (cached) yes checking for strncasecmp... (cached) yes checking for strcasecmp... (cached) yes checking for localtime_r... (cached) yes checking for ctime_r... (cached) yes checking for gmtime_r... (cached) yes checking for strsep... (cached) yes checking for inet_aton... (cached) yes checking for inet_pton... (cached) yes checking for inet_ntop... (cached) yes checking for gethostname... (cached) yes checking for setlinebuf... (cached) yes checking for setvbuf... (cached) yes checking for getusershell... (cached) no checking for initgroups... (cached) yes checking whether crypt must be declared... (cached) yes checking whether strncasecmp must be declared... (cached) no checking whether strcasecmp must be declared... (cached) no checking whether inet_aton must be declared... (cached) no checking whether gethostname must be declared... (cached) no checking whether setlinebuf must be declared... (cached) no checking whether getusershell must be declared... (cached) yes checking whether endusershell must be declared... (cached) yes checking return type of signal handlers... (cached) void checking for ipi_addr in struct in_pktinfo... no checking for working const... (cached) yes checking type of OS... LynxOS checking for developer gcc flags... no. checking for crypt in -lcrypt... (cached) no checking for crypt... (cached) no checking for setkey in -lcipher... (cached) no checking for asn1.h,snmp.h,snmp_impl.h... no checking gethostbyaddr_r() syntax... BSD-style checking gethostbyname_r() syntax... BSD-style checking ctime_r() syntax... POSIX-style top_builddir=/home_sip1/daviesic/LYNXOS/freeradius-1.0.4 updating cache ./config.cache creating ./config.status creating ./Make.inc creating ./src/include/build-radpaths-h creating ./src/main/Makefile creating ./src/main/checkrad.pl creating ./src/main/radlast creating ./src/main/radtest creating ./scripts/rc.radiusd creating ./scripts/radwatch creating ./scripts/check-radiusd-config creating ./scripts/radiusd.cron.daily creating ./scripts/radiusd.cron.monthly creating ./scripts/cryptpasswd creating ./raddb/dictionary creating ./raddb/radiusd.conf creating src/include/autoconf.h configuring in libltdl running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=.././config.cache --srcdir=. loading cache .././config.cache checking for a BSD compatible install... (cached) /bin/install -c checking whether build environment is sane... yes checking for mawk... (cached) gawk checking whether make sets ${MAKE}... (cached) yes checking whether to enable maintainer-specific portions of Makefiles... no checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for style of include used by make... GNU checking dependency style of gcc... (cached) none checking for working const... (cached) yes checking for inline... (cached) inline checking for Cygwin environment... (cached) no checking for mingw32 environment... (cached) no checking how to run the C preprocessor... (cached) gcc -E checking host system type... i386-unknown-lynxos checking build system type... i386-unknown-lynxos checking for ld used by GCC... (cached) /usr/i386-elf-lynxos/bin/ld checking if the linker (/usr/i386-elf-lynxos/bin/ld) is GNU ld... (cached) yes checking for /usr/i386-elf-lynxos/bin/ld option to reload object files... (cached) -r checking for BSD-compatible nm... (cached) /bin/nm -B checking whether ln -s works... (cached) yes checking how to recognise dependant libraries... (cached) unknown checking for object suffix... (cached) o checking for executable suffix... (cached) no checking command to parse /bin/nm -B output... (cached) ok checking for dlfcn.h... (cached) yes checking for ranlib... (cached) ranlib checking for strip... (cached) strip checking for objdir... .libs checking for gcc option to produce PIC... (cached) -fPIC checking if gcc PIC flag -fPIC works... (cached) yes checking if gcc static flag -static works... (cached) yes checking if gcc supports -c -o file.o... (cached) yes checking if gcc supports -c -o file.lo... (cached) yes checking if gcc supports -fno-rtti -fno-exceptions... yes checking whether the linker (/usr/i386-elf-lynxos/bin/ld) supports shared libraries... yes checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking dynamic linker characteristics... no checking if libtool supports shared libraries... no checking whether to build shared libraries... no checking whether to build static libraries... yes creating libtool checking for ANSI C header files... (cached) yes checking for dirent.h that defines DIR... (cached) yes checking for opendir in -ldir... (cached) no checking whether gcc supports assert without backlinking... checking which extension is used for shared libraries... (cached) checking which variable specifies run-time library path... (cached) checking for the default library search path... (cached) /lib /usr/lib checking for objdir... (cached) .libs checking whether libtool supports -dlopen/-dlpreopen... (cached) yes checking for dlopen in -ldl... (cached) no checking for dlopen... (cached) no checking for dlopen in -lsvld... (cached) no checking for shl_load... (cached) no checking for shl_load in -ldld... (cached) no checking for dld_link in -ldld... (cached) no checking for _ prefix in compiled symbols... (cached) no checking whether deplibs are loaded by dlopen... (cached) unknown checking for argz.h... (cached) no checking for error_t... no checking for argz_append... (cached) no checking for argz_create_sep... (cached) no checking for argz_insert... (cached) no checking for argz_next... (cached) no checking for argz_stringify... (cached) no checking for errno.h... (cached) yes checking for malloc.h... (cached) yes checking for memory.h... (cached) yes checking for stdlib.h... (cached) yes checking for stdio.h... (cached) yes checking for ctype.h... (cached) yes checking for unistd.h... (cached) yes checking for dl.h... (cached) no checking for sys/dl.h... (cached) no checking for dld.h... (cached) no checking for string.h... (cached) yes checking for strchr... (cached) yes checking for strrchr... (cached) yes checking for memcpy... (cached) yes checking for memmove... (cached) yes checking for strcmp... (cached) yes updating cache .././config.cache creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_attr_rewrite running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for regex.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_counter running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for gdbm.h... no checking for gdbm_open in -lgdbm... no checking for gdbm_fdesc... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_dbm running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for ndbm.h... no checking for gdbm/ndbm.h... no checking for gdbm-ndbm.h... no checking for dbm in default lib... no checking for dbm_open in -lndbm... no checking for dbm_open in -lgdbm... no checking for dbm_open in -lgdbm_compat... no creating ./config.status creating Makefile configuring in src/modules/rlm_eap running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes override protection 400 for install-sh? creating ./config.status creating Makefile configuring in ./types/rlm_eap_md5 running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for malloc.h... (cached) yes creating ./config.status creating Makefile configuring in ./types/rlm_eap_mschapv2 running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for malloc.h... (cached) yes creating ./config.status creating Makefile configuring in ./types/rlm_eap_peap running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... no checking for DH_new in -lcrypto... no checking for SSL_new in -lssl... no checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) no checking for openssl/engine.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_sim running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... no checking for DH_new in -lcrypto... no checking for SSL_new in -lssl... no checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) no checking for openssl/engine.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_tls running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... no checking for DH_new in -lcrypto... no checking for SSL_new in -lssl... no checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) no checking for openssl/engine.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_ttls running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... no checking for DH_new in -lcrypto... no checking for SSL_new in -lssl... no checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) no checking for openssl/engine.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_ippool running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for gdbm.h... no checking for gdbm_open in -lgdbm... no checking for gdbm_fdesc... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_krb5 running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for krb5.h... no checking for krb5_encrypt_data in -lk5crypto... no checking for DH_new in -lcrypto... no checking for set_com_err_hook in -lcom_err... no checking for krb5_init_context in -lkrb5... no creating ./config.status creating Makefile configuring in src/modules/rlm_ldap running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for inet_aton in -lresolv... (cached) no checking for lber.h... no checking for ldap.h... no checking for sasl_encode in -lsasl... no checking for DH_new in -lcrypto... no checking for SSL_new in -lssl... no checking for ber_init in -llber... no creating ./config.status creating Makefile configuring in src/modules/rlm_pam running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for dlopen in -ldl... (cached) no checking for pam_start in -lpam... (cached) no checking for security/pam_appl.h... (cached) no checking for pam/pam_appl.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_radutmp running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for sys/mman.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_sql running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes override protection 400 for install-sh? creating ./config.status creating ./Makefile creating ./drivers/Makefile configuring in ./drivers/rlm_sql_iodbc running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for isql.h... no creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_mysql running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for mysql_config... (cached) no checking for compress in -lz... (cached) yes checking for mysql/mysql.h... no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./drivers/rlm_sql_postgresql running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for libpq-fe.h... no checking for PQconnectdb in -lpq... no creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_oracle running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for oci.h... no creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_unixodbc running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for sql.h... no creating ./config.status creating Makefile configuring in src/modules/rlm_unix running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for system password file... /etc/passwd checking for system shadow password file... no /etc/shadow file. checking for crypt... (cached) no checking for crypt in -lcrypt... (cached) no checking for crypt.h... (cached) no checking for shadow.h... (cached) no checking for getspnam... (cached) no checking for getusershell... (cached) no checking for getspnam in -lshadow... (cached) no checking for fgetpwent... (cached) yes checking for fgetspent... (cached) no checking for fgetgrent... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_x99_token running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for inttypes.h... (cached) yes creating ./config.status creating Makefile configuring in src/modules/rlm_checkval running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for regex.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged WARNINGS ON SCREEN bash-2.02$ ./configure > ~/log.fr configure: warning: snmpget not found - Simultaneous-Use and checkrad.pl may not work configure: warning: snmpwalk not found - Simultaneous-Use and checkrad.pl may not work configure: warning: ****** BSD-style gethostbyaddr might NOT be thread-safe! ****** configure: warning: ****** BSD-style gethostbyname might NOT be thread-safe! ****** configure: warning: silently not building rlm_counter. configure: warning: FAILURE: rlm_counter requires: libgdbm. configure: warning: FAILURE: rlm_dbm requires: (ndbm.h or gdbm/ndbm.h or gdbm-ndbm.h) (libndbm or libgdbm or libgdbm_compat). configure: warning: silently not building rlm_dbm. configure: warning: silently not building rlm_eap_peap. configure: warning: FAILURE: rlm_eap_peap requires: (openssl/ssl.h) libcrypto libssl. configure: warning: silently not building rlm_eap_sim. configure: warning: FAILURE: rlm_eap_sim requires: (openssl/ssl.h) libcrypto libssl. configure: warning: silently not building rlm_eap_tls. configure: warning: FAILURE: rlm_eap_tls requires: (openssl/ssl.h) libcrypto libssl. configure: warning: silently not building rlm_eap_ttls. configure: warning: FAILURE: rlm_eap_ttls requires: (openssl/ssl.h) libcrypto libssl. configure: warning: silently not building rlm_ippool. configure: warning: FAILURE: rlm_ippool requires: libgdbm. configure: warning: neither krb5 'k5crypto' nor 'crypto' libraries are found! configure: warning: the comm_err library isn't found! configure: warning: silently not building rlm_krb5. configure: warning: FAILURE: rlm_krb5 requires: krb5. configure: warning: silently not building rlm_ldap. configure: warning: FAILURE: rlm_ldap requires: liblber. configure: warning: silently not building rlm_pam. configure: warning: FAILURE: rlm_pam requires: libpam. yes configure: warning: iodbc headers not found. Use --with-iodbc-include-dir=<path>. configure: warning: sql submodule 'iodbc' disabled configure: warning: mysql headers not found. Use --with-mysql-include-dir=<path>. configure: warning: sql submodule 'mysql' disabled configure: warning: silently not building rlm_sql_postgresql. configure: warning: FAILURE: rlm_sql_postgresql requires: libpq-fe.h libpq. configure: warning: oracle headers not found. Use --with-oracle-home-dir=<path>. configure: warning: sql submodule 'oracle' disabled configure: warning: unixODBC headers not found. Use --with-unixodbc-include-dir=<path>. configure: warning: sql submodule 'unixodbc' disabled ./configure: ,: command not found bash-2.02$ Linux Output loading cache ./config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc ) works... yes checking whether the C compiler (gcc ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for AIX... no checking whether gcc needs -traditional... (cached) no checking whether we are using SUNPro C... (cached) no checking for ranlib... (cached) ranlib checking whether byte ordering is bigendian... (cached) no checking for gmake... (cached) yes checking for gmake... (cached) /usr/bin/gmake checking for lt_dlinit in -lltdl... (cached) yes checking for Cygwin environment... (cached) no checking for mingw32 environment... (cached) no checking host system type... i686-pc-linux-gnu checking build system type... i686-pc-linux-gnu checking for ld used by GCC... (cached) /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... (cached) yes checking for /usr/bin/ld option to reload object files... (cached) -r checking for BSD-compatible nm... (cached) /usr/bin/nm -B checking whether ln -s works... (cached) yes checking how to recognise dependant libraries... (cached) pass_all checking for object suffix... (cached) o checking for executable suffix... (cached) no checking command to parse /usr/bin/nm -B output... (cached) ok checking for dlfcn.h... (cached) yes checking for ranlib... (cached) ranlib checking for strip... (cached) strip checking for objdir... .libs checking for gcc option to produce PIC... (cached) -fPIC checking if gcc PIC flag -fPIC works... (cached) yes checking if gcc static flag -static works... (cached) yes checking if gcc supports -c -o file.o... (cached) yes checking if gcc supports -c -o file.lo... (cached) yes checking if gcc supports -fno-rtti -fno-exceptions... yes checking whether the linker (/usr/bin/ld) supports shared libraries... yes checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking dynamic linker characteristics... GNU/Linux ld.so checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking for shl_load... (cached) no checking for shl_load in -ldld... (cached) no checking for dlopen... (cached) no checking for dlopen in -ldl... (cached) yes checking whether a program can dlopen itself... (cached) yes checking whether a statically linked program can dlopen itself... (cached) no checking whether -lc should be explicitly linked in... (cached) no creating libtool checking logdir... ${localstatedir}/log/radius checking radacctdir... ${logdir}/radacct checking raddbdir... ${sysconfdir}/raddb checking for perl... (cached) /usr/bin/perl checking for snmpget... (cached) /usr/bin/snmpget checking for snmpwalk... (cached) /usr/bin/snmpwalk checking for rusers... (cached) /usr/bin/rusers checking for working aclocal... found checking for working autoconf... found checking for working autoheader... found checking for locate... (cached) /usr/bin/locate checking for dirname... (cached) /usr/bin/dirname checking for grep... (cached) /bin/grep checking for pthread.h... (cached) yes checking for pthread_create in -lpthread... (cached) yes checking for library containing sem_init... (cached) none required checking for getsockname in -lsocket... (cached) no checking for inet_aton in -lresolv... (cached) yes checking for inet_ntoa in -lnsl... (cached) yes checking for dirent.h that defines DIR... (cached) yes checking for opendir in -ldir... (cached) no checking for ANSI C header files... (cached) yes checking whether time.h and sys/time.h may both be included... (cached) yes checking for sys/wait.h that is POSIX.1 compatible... (cached) yes checking for unistd.h... (cached) yes checking for crypt.h... (cached) yes checking for errno.h... (cached) yes checking for resource.h... (cached) no checking for getopt.h... (cached) yes checking for malloc.h... (cached) yes checking for utmp.h... (cached) yes checking for utmpx.h... (cached) yes checking for signal.h... (cached) yes checking for sys/select.h... (cached) yes checking for syslog.h... (cached) yes checking for inttypes.h... (cached) yes checking for stdint.h... (cached) yes checking for stdio.h... (cached) yes checking for netdb.h... (cached) yes checking for semaphore.h... (cached) yes checking for arpa/inet.h... (cached) yes checking for netinet/in.h... (cached) yes checking for sys/types.h... (cached) yes checking for sys/socket.h... (cached) yes checking for sys/time.h... (cached) yes checking for sys/wait.h... (cached) yes checking for sys/security.h... (cached) no checking for fcntl.h... (cached) yes checking for sys/fcntl.h... (cached) yes checking for prot.h... (cached) no checking for sia.h... (cached) no checking for siad.h... (cached) no checking for regex.h... (cached) yes checking for openssl/ssl.h... yes checking for openssl/err.h... (cached) yes checking for openssl/crypto.h... (cached) yes checking for openssl/rand.h... (cached) yes checking for openssl/engine.h... (cached) yes checking for OpenSSL version >= 0.9.7... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking for off_t... (cached) yes checking for pid_t... (cached) yes checking for size_t... (cached) yes checking for uid_t in sys/types.h... (cached) yes checking for socklen_t... (cached) yes checking for uint8_t... (cached) yes checking for uint16_t... (cached) yes checking for uint32_t... (cached) yes checking for getopt_long... (cached) yes checking for lockf... (cached) yes checking for strsignal... (cached) yes checking for sigaction... (cached) yes checking for sigprocmask... (cached) yes checking for pthread_sigmask... (cached) yes checking for snprintf... (cached) yes checking for vsnprintf... (cached) yes checking for setsid... (cached) yes checking for strncasecmp... (cached) yes checking for strcasecmp... (cached) yes checking for localtime_r... (cached) yes checking for ctime_r... (cached) yes checking for gmtime_r... (cached) yes checking for strsep... (cached) yes checking for inet_aton... (cached) yes checking for inet_pton... (cached) yes checking for inet_ntop... (cached) yes checking for gethostname... (cached) yes checking for setlinebuf... (cached) yes checking for setvbuf... (cached) yes checking for getusershell... (cached) yes checking for initgroups... (cached) yes checking whether crypt must be declared... (cached) no checking whether strncasecmp must be declared... (cached) no checking whether strcasecmp must be declared... (cached) no checking whether inet_aton must be declared... (cached) no checking whether gethostname must be declared... (cached) no checking whether setlinebuf must be declared... (cached) no checking whether getusershell must be declared... (cached) no checking whether endusershell must be declared... (cached) no checking return type of signal handlers... (cached) void checking for ut_xtime in struct utmpx... no checking for ipi_addr in struct in_pktinfo... yes checking for working const... (cached) yes checking type of OS... Linux checking for developer gcc flags... no. checking for crypt in -lcrypt... (cached) yes checking for setkey in -lcipher... (cached) no checking for asn1.h,snmp.h,snmp_impl.h... no checking gethostbyaddr_r() syntax... GNU-style checking gethostbyname_r() syntax... GNU-style checking ctime_r() syntax... POSIX-style top_builddir=/home/daviesic/freeradius-1.0.4 updating cache ./config.cache creating ./config.status creating ./Make.inc creating ./src/include/build-radpaths-h creating ./src/main/Makefile creating ./src/main/checkrad.pl creating ./src/main/radlast creating ./src/main/radtest creating ./scripts/rc.radiusd creating ./scripts/radwatch creating ./scripts/check-radiusd-config creating ./scripts/radiusd.cron.daily creating ./scripts/radiusd.cron.monthly creating ./scripts/cryptpasswd creating ./raddb/dictionary creating ./raddb/radiusd.conf creating src/include/autoconf.h src/include/autoconf.h is unchanged configuring in libltdl running /bin/sh ./configure --enable-ltdl-install --cache-file=.././config.cache --srcdir=. loading cache .././config.cache checking for a BSD compatible install... (cached) /usr/bin/install -c checking whether build environment is sane... yes checking for mawk... (cached) gawk checking whether make sets ${MAKE}... (cached) yes checking whether to enable maintainer-specific portions of Makefiles... no checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for style of include used by make... GNU checking dependency style of gcc... (cached) none checking for working const... (cached) yes checking for inline... (cached) inline checking for Cygwin environment... (cached) no checking for mingw32 environment... (cached) no checking how to run the C preprocessor... (cached) gcc -E checking host system type... i686-pc-linux-gnu checking build system type... i686-pc-linux-gnu checking for ld used by GCC... (cached) /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... (cached) yes checking for /usr/bin/ld option to reload object files... (cached) -r checking for BSD-compatible nm... (cached) /usr/bin/nm -B checking whether ln -s works... (cached) yes checking how to recognise dependant libraries... (cached) pass_all checking for object suffix... (cached) o checking for executable suffix... (cached) no checking command to parse /usr/bin/nm -B output... (cached) ok checking for dlfcn.h... (cached) yes checking for ranlib... (cached) ranlib checking for strip... (cached) strip checking for objdir... .libs checking for gcc option to produce PIC... (cached) -fPIC checking if gcc PIC flag -fPIC works... (cached) yes checking if gcc static flag -static works... (cached) yes checking if gcc supports -c -o file.o... (cached) yes checking if gcc supports -c -o file.lo... (cached) yes checking if gcc supports -fno-rtti -fno-exceptions... yes checking whether the linker (/usr/bin/ld) supports shared libraries... yes checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking dynamic linker characteristics... GNU/Linux ld.so checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking whether -lc should be explicitly linked in... (cached) no creating libtool checking for ANSI C header files... (cached) yes checking for dirent.h that defines DIR... (cached) yes checking for opendir in -ldir... (cached) no checking whether gcc supports assert without backlinking... checking which extension is used for shared libraries... (cached) .so checking which variable specifies run-time library path... (cached) LD_LIBRARY_PATH checking for the default library search path... (cached) /lib /usr/lib checking for objdir... (cached) .libs checking whether libtool supports -dlopen/-dlpreopen... (cached) yes checking for dlopen in -ldl... (cached) yes checking for shl_load... (cached) no checking for shl_load in -ldld... (cached) no checking for dld_link in -ldld... (cached) no checking for dlerror... (cached) yes checking for _ prefix in compiled symbols... (cached) no checking whether deplibs are loaded by dlopen... (cached) yes checking for argz.h... (cached) yes checking for error_t... yes checking for argz_append... (cached) yes checking for argz_create_sep... (cached) yes checking for argz_insert... (cached) yes checking for argz_next... (cached) yes checking for argz_stringify... (cached) yes checking for errno.h... (cached) yes checking for malloc.h... (cached) yes checking for memory.h... (cached) yes checking for stdlib.h... (cached) yes checking for stdio.h... (cached) yes checking for ctype.h... (cached) yes checking for unistd.h... (cached) yes checking for dl.h... (cached) no checking for sys/dl.h... (cached) no checking for dld.h... (cached) no checking for string.h... (cached) yes checking for strchr... (cached) yes checking for strrchr... (cached) yes checking for memcpy... (cached) yes checking for memmove... (cached) yes checking for strcmp... (cached) yes updating cache .././config.cache creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_attr_rewrite running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for regex.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_counter running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for gdbm.h... yes checking for gdbm_open in -lgdbm... yes checking to see GDBM_SYNC status... needs it. checking for gdbm_fdesc... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_dbm running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for ndbm.h... no checking for gdbm/ndbm.h... yes checking for dbm in default lib... no checking for dbm_open in -lndbm... no checking for dbm_open in -lgdbm... yes creating ./config.status creating Makefile configuring in src/modules/rlm_eap running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes creating ./config.status creating Makefile configuring in ./types/rlm_eap_md5 running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for malloc.h... (cached) yes creating ./config.status creating Makefile configuring in ./types/rlm_eap_mschapv2 running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for malloc.h... (cached) yes creating ./config.status creating Makefile configuring in ./types/rlm_eap_peap running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) yes checking for openssl/engine.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_sim running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) yes checking for openssl/engine.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_tls running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) yes checking for openssl/engine.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_ttls running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) yes checking for openssl/engine.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_ippool running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for gdbm.h... yes checking for gdbm_open in -lgdbm... yes checking to see GDBM_SYNC status... needs it. checking for gdbm_fdesc... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_krb5 running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for krb5.h... no checking for krb5_encrypt_data in -lk5crypto... no checking for DH_new in -lcrypto... yes checking for set_com_err_hook in -lcom_err... yes checking for krb5_init_context in -lkrb5... no creating ./config.status creating Makefile configuring in src/modules/rlm_ldap running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for inet_aton in -lresolv... (cached) yes checking for lber.h... yes checking for ldap.h... yes checking for sasl_encode in -lsasl... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking for ber_init in -llber... yes checking for ldap_init in -lldap_r... yes checking for ldap_start_tls_s in -lldap_r... yes checking for ldap_initialize in -lldap_r... yes checking for ldap_int_tls_config in -lldap_r... yes creating ./config.status creating Makefile configuring in src/modules/rlm_pam running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for dlopen in -ldl... (cached) yes checking for pam_start in -lpam... (cached) yes checking for security/pam_appl.h... (cached) yes checking for pam/pam_appl.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_radutmp running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for sys/mman.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_sql running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes creating ./config.status creating ./Makefile creating ./drivers/Makefile configuring in ./drivers/rlm_sql_iodbc running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for isql.h... no creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_mysql running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for mysql_config... (cached) no checking for compress in -lz... (cached) yes checking for mysql/mysql.h... no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./drivers/rlm_sql_postgresql running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for libpq-fe.h... no checking for PQconnectdb in -lpq... no creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_oracle running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for oci.h... no creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_unixodbc running /bin/sh ./configure --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for sql.h... no creating ./config.status creating Makefile configuring in src/modules/rlm_unix running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for system password file... /etc/passwd checking for system shadow password file... /etc/shadow checking for crypt... (cached) no checking for crypt in -lcrypt... (cached) yes checking for crypt.h... (cached) yes checking for shadow.h... (cached) yes checking for getspnam... (cached) yes checking for getusershell... (cached) yes checking for getspnam in -lshadow... (cached) no checking for fgetpwent... (cached) yes checking for fgetspent... (cached) yes checking for fgetgrent... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_x99_token running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for inttypes.h... (cached) yes creating ./config.status creating Makefile configuring in src/modules/rlm_checkval running /bin/sh ./configure --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for regex.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged WARNINGS ON SCREEN -bash-2.05b$ ./configure > ~/log.fr.linux configure: warning: silently not building rlm_krb5. configure: warning: FAILURE: rlm_krb5 requires: krb5. configure: warning: iodbc headers not found. Use --with-iodbc-include-dir=<path>. configure: warning: sql submodule 'iodbc' disabled configure: warning: mysql headers not found. Use --with-mysql-include-dir=<path>. configure: warning: sql submodule 'mysql' disabled configure: warning: silently not building rlm_sql_postgresql. configure: warning: FAILURE: rlm_sql_postgresql requires: libpq-fe.h libpq. configure: warning: oracle headers not found. Use --with-oracle-home-dir=<path>. configure: warning: sql submodule 'oracle' disabled configure: warning: unixODBC headers not found. Use --with-unixodbc-include-dir=<path>. configure: warning: sql submodule 'unixodbc' disabled -bash-2.05b$ Ian Davies IMS-SIPAC Software Development Engineer

2 1

EAP md5
by Juan Daniel Moreno 10 Aug '05

10 Aug '05

Hi everyone, I'm having a problem with freeradius 1.0.4 configuration. I configured it to work with PAP, CHAP, MS-CHAPv1, and MS-CHAPv2. Now I would like to work with EAP-MD5 but I have always the same response: rad_recv: Access-Request packet from host 192.168.2.63:1108<http://192.168.2.63:1108>, id=65, length=88 Waking up in 31 seconds... Thread 1 got semaphore Thread 1 handling request 5, (2 handled so far) User-Name = "juan" EAP-Message = 0x025700180410b8c3ecb73fe2a82ab50152301561f65f0008 State = 0x36f19352ad8e53da9ad68e321a2a1a81 Message-Authenticator = 0x676a955991b9dcdee684a339aa8420c2 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 5 modcall[authorize]: module "preprocess" returns ok for request 5 modcall[authorize]: module "chap" returns noop for request 5 modcall[authorize]: module "mschap" returns noop for request 5 rlm_realm: No '@' in User-Name = "juan", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 5 rlm_eap: EAP packet type response id 87 length 24 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 5 users: Matched entry juan at line 93 modcall[authorize]: module "files" returns ok for request 5 modcall: group authorize returns updated for request 5 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 5 rlm_eap: Request found, released from the list rlm_eap: EAP/md5 rlm_eap: processing type md5 rlm_eap: Freeing handler modcall[authenticate]: module "eap" returns reject for request 5 modcall: group authenticate returns reject for request 5 auth: Failed to validate the user. Delaying request 5 for 1 seconds Finished request 5 Going to the next request Thread 1 waiting to be assigned a request --- Walking the entire request list --- Sending Access-Reject of id 65 to 192.168.2.63:1108<http://192.168.2.63:1108> EAP-Message = 0x04570004 Message-Authenticator = 0x00000000000000000000000000000000 Reply-Message = "Hello, %u" I really don't know what to do. I'm almost sure it's the radiusd.conf or eap.con files. Can anybody help me?? Thank you!!

1 0

ip ranges in clients.conf
by Tariq Rashid 10 Aug '05

10 Aug '05

is it possible specify IP ranges in the clients.conf? or multiple IPs for each client{} section? for example: client 1.2.3.0/23 { secret = shared_secret shortname = abc.def.ghi.jkl nastype = other } or client 1.2.3.1 { secret = shared_secret shortname = abc.def.ghi.jkl nastype = other identical_clients = 1.2.3.2, 1.2.3.3, 10.11,12.13 } at the moment i'm using a script to generate large sections of the clients.conf. tariq

1 0

rlm_sqlcounter noresetcounter
by N White 10 Aug '05

10 Aug '05

I'm having trouble setting up the noresetcounter(Max-All-Session). I'm running freeradius 1.0.4(Debian). I have compiled and added the rlm_sqlcounter.so files to the proper folder in Debian, and freeradius -X shows the module starting up(I have renamed it "hotspotcounter"). If you would like to see the full output of either the request or startup let me know. I'd really like to tackle this thing, so any help/pointers are appreciated. freeradius -X |grep sqlcounter Config: including file: /etc/freeradius/sqlcounter.conf sqlcounter: counter-name = "Max-All-Session-Time" sqlcounter: check-name = "Max-All-Session" sqlcounter: key = "User-Name" sqlcounter: sqlmod-inst = "sql" sqlcounter: query = "SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='%{%k}'" sqlcounter: reset = "never" rlm_sqlcounter: Counter attribute Max-All-Session-Time is number 1671 rlm_sqlcounter: Check attribute Max-All-Session is number 1672 rlm_sqlcounter: Current Time: 1123455447 [2005-08-07 15:57:27], Next reset 0 [2005-08-07 15:00:00] rlm_sqlcounter: Current Time: 1123455447 [2005-08-07 15:57:27], Prev reset 0 [2005-08-07 15:00:00] Module: Instantiated sqlcounter (hotspotcounter) I keep getting this result on debug(NTRadping and Chillispot): rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair Here is what is in radcheck database(00-0B-6A-65-95-B8 is the username): 699 00-0B-6A-65-95-B8 User-Password := password 700 00-0B-6A-65-95-B8 Max-All-Session := 1800 Here is sqlcounter.conf: sqlcounter hotspotcounter { counter-name = Max-All-Session-Time check-name = Max-All-Session sqlmod-inst = sql key = User-Name reset = never query = "SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='%{%k}'" } Here is radius.conf: modules { $INCLUDE ${confdir}/sql.conf $INCLUDE ${confdir}/sqlcounter.conf } authorize{ sql hotspotcounter } Thanks! -- --------------------------- | Nick White | | nwtech(a)tele-net.net | ---------------------------

1 1

Jose Divino de Lima, please tell me how to connect SER and freeradius!
by zhu lizhong 09 Aug '05

09 Aug '05

Hello, Lima and other guys: I have tried few weeks for connecting ser and freeradius. i use freeradius to generate call record, but when I compile SER, my ser.cfg always stopping mysql.so, there is no getconnection in mysql. if run -- radclient -f digest can not work properly. please help me fix it! thanks lot! zhu On 8/10/05, freeradius-users-request(a)lists.freeradius.org <freeradius-users-request(a)lists.freeradius.org> wrote: > Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. Re: Hi. Windows RADIUS server died. (Alan DeKok) > 2. Re: Hi. Windows RADIUS server died. (Derrick MacPherson) > 3. Re: Hi. Windows RADIUS server died. (Alan DeKok) > 4. Re: Hi. Windows RADIUS server died. (Derrick MacPherson) > 5. OK, further along. Can radtest test my ntlm_auth? > (Derrick MacPherson) > 6. Re: iptables rules from freeradius... (tbsky(a)annsky.us) > 7. Re: iptables rules from freeradius... (Alan DeKok) > 8. Re: FreeRadius EAP-TLS quesiton (Hamid Salim) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 09 Aug 2005 18:12:01 -0400 > From: "Alan DeKok" <aland(a)ox.org> > Subject: Re: Hi. Windows RADIUS server died. > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20050809221201.88F2716CCA(a)mail.nitros9.org> > > Derrick MacPherson <dmacpherson(a)mainframe.ca> wrote: > > Is there a way to test if the authentication is passing or failing? > > Debug mode? > > There's no real ms-chap command-line utility that I know of. > > Alan DeKok. > > > ------------------------------ > > Message: 2 > Date: Tue, 09 Aug 2005 15:29:35 -0700 > From: Derrick MacPherson <dmacpherson(a)mainframe.ca> > Subject: Re: Hi. Windows RADIUS server died. > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <1123626575.10739.120.camel(a)Mandarin-04.mainframe.ca> > Content-Type: text/plain > > > Debug mode? > > > > There's no real ms-chap command-line utility that I know of. > > not using ms-chap. > I'm not sure what I can use other than turning our firewall at it. Is > there any other way? > > > > ------------------------------ > > Message: 3 > Date: Tue, 09 Aug 2005 18:47:05 -0400 > From: "Alan DeKok" <aland(a)ox.org> > Subject: Re: Hi. Windows RADIUS server died. > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20050809224705.7356616CCA(a)mail.nitros9.org> > > Derrick MacPherson <dmacpherson(a)mainframe.ca> wrote: > > I'm not sure what I can use other than turning our firewall at it. Is > > there any other way? > > The radius client that comes with FreeRADIUS? > > Alan DeKok. > > > ------------------------------ > > Message: 4 > Date: Tue, 09 Aug 2005 15:52:45 -0700 > From: Derrick MacPherson <dmacpherson(a)mainframe.ca> > Subject: Re: Hi. Windows RADIUS server died. > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <1123627965.10739.126.camel(a)Mandarin-04.mainframe.ca> > Content-Type: text/plain > > On Tue, 2005-08-09 at 18:47 -0400, Alan DeKok wrote: > > The radius client that comes with FreeRADIUS? > > hehe. You mean it's that simple? Damn. > > Sorry didn't realise there was a client at all. > > > > > > ------------------------------ > > Message: 5 > Date: Tue, 09 Aug 2005 16:23:56 -0700 > From: Derrick MacPherson <dmacpherson(a)mainframe.ca> > Subject: OK, further along. Can radtest test my ntlm_auth? > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <1123629836.10739.135.camel(a)Mandarin-04.mainframe.ca> > Content-Type: text/plain > > I'm wondering if I can use radtest to authenticate to my w2k server? If > so whats the syntax? I've tested local and it works, I want to test the > ntlm_auth. The syntax that I am using for the ntlm_auth = should work, > it works from the cli. > > > > > > ------------------------------ > > Message: 6 > Date: Wed, 10 Aug 2005 09:00:52 +0800 (CST) > From: tbsky(a)annsky.us > Subject: Re: iptables rules from freeradius... > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Message-ID: > <46217.220.130.50.117.1123635652.squirrel(a)qmail.annsky.com> > Content-Type: text/plain;charset=big5 > > Hi: > sorry i did not describe my environment properly. > my radius server is also wireless gateway & firewall. > so the iptables rules is setting up at radius server, > not at the NAS . is this possible? > > Regards, > sky_li > > > tbsky(a)annsky.us wrote: > >> now i want to setup some iptables rules for authenticated users. > >> i wonder if this can be done via freeradius. > > > > The proper question is: Can the NAS do it? If not, then no > > configuration of FreeRADIUS will make the NAS do it. > > > >> can i find out the mac address or ip address information for > >> authenticated users? > > > > Look in the packets. > > > >> can i run iptables scripts when a user authenticated successfully ? > > > > Ask the NAS. > > > > Alan DeKok. > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > > > > > > ------------------------------ > > Message: 7 > Date: Tue, 09 Aug 2005 21:32:24 -0400 > From: "Alan DeKok" <aland(a)ox.org> > Subject: Re: iptables rules from freeradius... > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20050810013224.D5E5316CCA(a)mail.nitros9.org> > > tbsky(a)annsky.us wrote: > > my radius server is also wireless gateway & firewall. > > so the iptables rules is setting up at radius server, > > not at the NAS . is this possible? > > Yes. Run a shell script. See "Exec-Program" > > Alan DeKok. > > > ------------------------------ > > Message: 8 > Date: Tue, 9 Aug 2005 22:03:38 -0400 (EDT) > From: Hamid Salim <salim.h(a)neu.edu> > Subject: Re: FreeRadius EAP-TLS quesiton > To: freeradius-users(a)lists.freeradius.org > Message-ID: <7324206.1123639418438.JavaMail.salim.h(a)neu.edu> > Content-Type: text/plain; charset=UTF-8 > > Kris, > Thanks for your help. > > Do you think that (1) and (2) in my previous message could be the > reason that freeradius will not authenticate the client? > > thanks again. > > > freeradius-users-request(a)lists.freeradius.org wrote: > > > >Send Freeradius-Users mailing list submissions to > > freeradius-users(a)lists.freeradius.org > > > >To subscribe or unsubscribe via the World Wide Web, visit > > http://lists.freeradius.org/mailman/listinfo/freeradius-users > >or, via email, send a message with subject or body 'help' to > > freeradius-users-request(a)lists.freeradius.org > > > >You can reach the person managing the list at > > freeradius-users-owner(a)lists.freeradius.org > > > >When replying, please edit your Subject line so it is more specific > >than "Re: Contents of Freeradius-Users digest..." > > > > > >Today's Topics: > > > > 1. FreeRadius EAP-TLS quesitons (Hamid Salim) > > 2. Re: problem with using rlm_sql for accounting only (John Donagher) > > 3. Re: problem with using rlm_sql for accounting only (John Donagher) > > 4. Re: FreeRadius EAP-TLS quesitons (Kris Benson) > > 5. sql.conf (update query) (Michel B?langer) > > 6. Re: problem with using rlm_sql for accounting only (Alan DeKok) > > 7. Hi. Windows RADIUS server died. (Derrick MacPherson) > > 8. Re: Hi. Windows RADIUS server died. (Alan DeKok) > > 9. Re: Hi. Windows RADIUS server died. (Derrick MacPherson) > > 10. Re: how to return multiple attributes from ldap? (kevin) > > > > > >---------------------------------------------------------------------- > > > >Message: 1 > >Date: Tue, 9 Aug 2005 13:54:52 -0400 (EDT) > >From: Hamid Salim <salim.h(a)neu.edu> > >Subject: FreeRadius EAP-TLS quesitons > >To: freeradius-users(a)lists.freeradius.org > >Message-ID: <4476601.1123610092946.JavaMail.salim.h(a)neu.edu> > >Content-Type: text/plain; charset=UTF-8 > > > >Hello, > >Two part question: > >1. Is it critical to have certificates, dh and random files in > >etc/raddb/certs directory for eap-tls to work. > >2. Is it ok to generate random file as date > random > > > >thanks a lot. > >Hamid. > > > > > >------------------------------ > > > >Message: 2 > >Date: Tue, 09 Aug 2005 13:55:45 -0400 > >From: John Donagher <john(a)webmeta.com> > >Subject: Re: problem with using rlm_sql for accounting only > >To: FreeRadius users mailing list > > <freeradius-users(a)lists.freeradius.org> > >Message-ID: <1123610145.31591.0.camel(a)localhost.localdomain> > >Content-Type: text/plain > > > >On Tue, 2005-08-09 at 00:01 +0200, Nicolas Baradakis wrote: > >> John Donagher wrote: > >> > >> > If the SQL server is inaccessible (i.e. down, or locked), freeradius > >> > rejects all radius requests. In my case, since the SQL database is > being > >> > used only for accounting, this is not desired behavior. > >> > >> The link below explains how to control the flow of modules in > FreeRADIUS. > >> http://www.freeradius.org/radiusd/doc/configurable_failover > >> > >> There is an example which looks like what you want to do for > accounting. > >> > > > >Thanks, that was exactly what I was looking for! > > > >John > > > > > > > > > >------------------------------ > > > >Message: 3 > >Date: Tue, 09 Aug 2005 14:01:11 -0400 > >From: John Donagher <john(a)webmeta.com> > >Subject: Re: problem with using rlm_sql for accounting only > >To: FreeRadius users mailing list > > <freeradius-users(a)lists.freeradius.org> > >Message-ID: <1123610471.31591.7.camel(a)localhost.localdomain> > >Content-Type: text/plain > > > >On Mon, 2005-08-08 at 18:09 -0400, Alan DeKok wrote: > >> John Donagher <john(a)webmeta.com> wrote: > >> > If the SQL server is inaccessible (i.e. down, or locked), freeradius > >> > rejects all radius requests. In my case, since the SQL database is > being > >> > used only for accounting, this is not desired behavior. > >> > >> See the log messages. > >> > >> What's probably happening is that all of the threads are blocked, > >> waiting for SQl to respond. Therefore, there are no threads ready to > >> service authentication requests, and they get discarded. > >> > >> The solution is to fix the SQL server so it doesn't go down. If > >> it's a critical part of your infrastructure, I'm a little unsure as to > >> why it would go down, or lock FreeRADIUS out for many seconds at a > >> time. > > > >Indeed.. under normal circumstances it wouldn't go down. My issue is > >that the SQL server is not a critical part of our infrastructure and I > >don't want it to be (at this point anyway). I'm using it for accounting > >trend reporting only.. in any event, Nicolas' suggestion was right on > >and works like a charm. > > > >Thanks > >John > > > > > > > > > >------------------------------ > > > >Message: 4 > >Date: Tue, 09 Aug 2005 11:18:10 -0700 > >From: "Kris Benson" <kbenson(a)sd57.bc.ca> > >Subject: Re: FreeRadius EAP-TLS quesitons > >To: "FreeRadius users mailing list" > > <freeradius-users(a)lists.freeradius.org> > >Cc: freeradius-users(a)lists.freeradius.org > >Message-ID: > > <fc.000f89ac0157986a3b9aca00c03bc7e0.1579876(a)mail.sd57.bc.ca> > >Content-Type: text/plain; charset=ISO-8859-1 > > > >FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> on > >August 9, 2005 at 10:54 -0800 wrote: > >>Hello, > >>Two part question: > >>1. Is it critical to have certificates, dh and random files in > >>etc/raddb/certs directory for eap-tls to work. > >>2. Is it ok to generate random file as date > random > > > >1. Yes, sort of. You can put it in a different directory if you change > >the eap.conf entries. > > > >2. No. This is the correct way: > > > >To generate the dh file you can use a function that comes with openssl > > > >openssl dhparam -check -text -5 512 -out dh > > > >This will generate a 512 Diffie-Hellman key named dh. > >Move this file to /etc/mycerts/ > > > >mv dh /etc/mycerts/. > > > >To generate a random file you will need a short C program using openssl > >libraries. Paste this text into a file named 'random.c': > >----8< cut--- > >#include <stdio.h> > >#include <openssl/rand.h> > > > >main (void) { > >unsigned char buf[100]; > >if (!RAND_bytes(buf, 100)) { > >// the usual md5(time+pid) > >} > >printf("Random : %s\n", buf); > >} > >----8< cut--- > > > >Compile it like this: gcc random.c -o random -lcrypto > > > >I will generate 32-bit LSB executable named random, try it with > ./random. > > > >Move this file to /etc/mycerts/: > >mv random /etc/mycerts/. > > > >-kb > >-- > >Kris Benson, CCP, I.S.P. > >Technical Analyst, District Projects > >School District #57 (Prince George) > > > > > > > >------------------------------ > > > >Message: 5 > >Date: Tue, 09 Aug 2005 15:34:28 -0400 > >From: Michel B?langer <michel.belanger(a)mediom.qc.ca> > >Subject: sql.conf (update query) > >To: freeradius-users(a)lists.freeradius.org > >Message-ID: <42F90544.8020804(a)mediom.qc.ca> > >Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > > >Hi, > >I try to add an additional query in the query update in sql.conf. This > >is possible to make it ? > > > >Here what I have test: > > > >accounting_update_query = "UPDATE ${acct_table1} \ > > SET FramedIPAddress = '%{Framed-IP-Address}', \ > > AcctSessionTime = '%{Acct-Session-Time}', \ > > AcctInputOctets = '%{Acct-Input-Octets}', \ > > AcctOutputOctets = '%{Acct-Output-Octets}' \ > > WHERE AcctSessionId = '%{Acct-Session-Id}' \ > > AND UserName = '%{SQL-User-Name}' \ > > AND NASIPAddress= '%{NAS-IP-Address}'; INSERT into radtempo > >(AcctInputOctets, AcctOutputOctets, AcctSessionId) values('%{Ac > >ct-Input-Octets}', '%{Acct-Output-Octets}', '%{Acct-Session-Id}')" > > > >rlm_sql_mysql: MYSQL check_error: 1064 received > >rlm_sql (sql): Couldn't update SQL accounting ALIVE record - You have > an > >error in your SQL syntax; check the manual that corresponds to your > >MySQL server version for the right syntax to use near '; INSERT into > >radtempo (AcctInputOctets, AcctOutputOctets, AcctSessionId) values' at > >line 1 > >-- > >------------------------------------------------------------ > > > >Michel Bélanger > > > > > > > > > >------------------------------ > > > >Message: 6 > >Date: Tue, 09 Aug 2005 16:00:34 -0400 > >From: "Alan DeKok" <aland(a)ox.org> > >Subject: Re: problem with using rlm_sql for accounting only > >To: FreeRadius users mailing list > > <freeradius-users(a)lists.freeradius.org> > >Message-ID: <20050809200034.64BA316CCA(a)mail.nitros9.org> > > > >John Donagher <john(a)webmeta.com> wrote: > >> Indeed.. under normal circumstances it wouldn't go down. My issue is > >> that the SQL server is not a critical part of our infrastructure and I > >> don't want it to be (at this point anyway). I'm using it for accounting > >> trend reporting only.. in any event, Nicolas' suggestion was right on > >> and works like a charm. > > > > In the CVS head you can use the rlm_sql_log module, which dumps the > >queries to a file. The file can then be post-processed. This removes > >all run-time dependency on SQL, which is a better solution. > > > > Alan DeKok. > > > > > >------------------------------ > > > >Message: 7 > >Date: Tue, 09 Aug 2005 13:47:29 -0700 > >From: Derrick MacPherson <dmacpherson(a)mainframe.ca> > >Subject: Hi. Windows RADIUS server died. > >To: freeradius-users(a)lists.freeradius.org > >Message-ID: <1123620449.10739.94.camel(a)Mandarin-04.mainframe.ca> > >Content-Type: text/plain > > > >I just got asked to try and get a freeradius server running ASAP. I got > >it installed on a freebsd 5.4 box that I had just finished getting squid > >running on, not implemented yet still testing. > > > >I see freeradius can use ntlm_auth as well, though I'm not clear on it's > >syntax. I have squid using the same authentication criteria as the > >radius server was using, that was based upon being in certain group. Can > >freeradius support this as well? My syntax in squid: > > > >ntlm_auth --helper-protocol=squid-2.5-ntlmssp --require-membership > >-of=S-1-5-21-1058564242-1277044956-825688854-1337 Domain Group (2) > > > >Can someone save me with a quick example or am I off to read and google? > > > > > > > >------------------------------ > > > >Message: 8 > >Date: Tue, 09 Aug 2005 17:22:17 -0400 > >From: "Alan DeKok" <aland(a)ox.org> > >Subject: Re: Hi. Windows RADIUS server died. > >To: FreeRadius users mailing list > > <freeradius-users(a)lists.freeradius.org> > >Message-ID: <20050809212218.06DD216CCA(a)mail.nitros9.org> > > > >Derrick MacPherson <dmacpherson(a)mainframe.ca> wrote: > >> I see freeradius can use ntlm_auth as well, though I'm not clear on > it's > >> syntax. > > > > See radiusd.conf for an example, and the ntlm_auth docs for it's > >command-line arguments. > > > >> I have squid using the same authentication criteria as the radius > >> server was using, that was based upon being in certain group. Can > >> freeradius support this as well? > > > > Sure, because FreeRADIUS doesn't care about command-line arguments > >to ntlm_auth. Add ass many arguments to ntlm_auth as you want. > > > >> ntlm_auth --helper-protocol=squid-2.5-ntlmssp > > > > This *isn't* supported. You have to pass the username & password on > >the command line, as in the examples. And if you're doing MSCHAP, you > >MUST also pass the "request nt key" option, too. > > > >> --require-membership > -of=S-1-5-21-1058564242-1277044956-825688854-1337 Domain Group (2) > > > > This is just noise to FreeRADIUS, which doesn't look at it, and > >doesn't care. If ntlm_auth returns success, so does FreeRADIUS. If > >it returns fail, so does FreeRADIUS. > > > > Alan DeKok. > > > > > > > >------------------------------ > > > >Message: 9 > >Date: Tue, 09 Aug 2005 14:38:38 -0700 > >From: Derrick MacPherson <dmacpherson(a)mainframe.ca> > >Subject: Re: Hi. Windows RADIUS server died. > >To: FreeRadius users mailing list > > <freeradius-users(a)lists.freeradius.org> > >Message-ID: <1123623518.10739.111.camel(a)Mandarin-04.mainframe.ca> > >Content-Type: text/plain > > > >On Tue, 2005-08-09 at 17:22 -0400, Alan DeKok wrote: > >> See radiusd.conf for an example, and the ntlm_auth docs for it's > >> command-line arguments. > > > >thank you, reading them now. > > > >Is there a way to test if the authentication is passing or failing? > > > > > > > >------------------------------ > > > >Message: 10 > >Date: Tue, 09 Aug 2005 15:10:17 -0700 > >From: kevin <kevinsmbox(a)earthlink.net> > >Subject: Re: how to return multiple attributes from ldap? > >To: FreeRadius users mailing list > > <freeradius-users(a)lists.freeradius.org> > >Message-ID: <42F929C9.7070102(a)earthlink.net> > >Content-Type: text/plain; charset="iso-8859-1" > > > >But, I am still interested in the way returning multiple attributes > >without changing ldap data. > >I thought there must be a way. > > > >kevin > > > >Dusty Doris wrote: > > > >>On Tue, 9 Aug 2005, kevin wrote: > >> > >> > >> > >>>What? So, should I change the ldap attribute values with "+=" ??? > >>>Any other way? > >>> > >>> > >>> > >> > >>Yep, it works. > >> > >>I did a test, with this DN only one filter-id was returned. > >> > >>dn: uid=dustytest,ou=users,ou=radius,dc=test,dc=com > >>objectClass: radiusprofile > >>userPassword:: ZHVzdHl0ZXN0 > >>radiusGroupName: dial > >>radiusGroupName: adsl > >>uid: dustytest > >>radiusFilterId: filter1 > >>radiusFilterId: filter2 > >> > >>Received response ID 210, code 2, length = 59 > >> Framed-Routing = None > >> Framed-IP-Netmask = 255.255.255.0 > >> Framed-Protocol = PPP > >> Service-Type = Framed-User > >> Filter-Id = "filter1" > >> > >> > >>With this dn, both were returned (note there were no quotes in it - that > >>didn't work) > >> > >>dn: uid=dustytest,ou=users,ou=radius,dc=test,dc=com > >>objectClass: radiusprofile > >>userPassword:: ZHVzdHl0ZXN0 > >>radiusGroupName: dial > >>radiusGroupName: adsl > >>uid: dustytest > >>radiusFilterId: += filter1 > >>radiusFilterId: += filter2 > >> > >>Received response ID 214, code 2, length = 68 > >> Framed-Routing = None > >> Framed-IP-Netmask = 255.255.255.0 > >> Framed-Protocol = PPP > >> Service-Type = Framed-User > >> Filter-Id = "filter1" > >> Filter-Id = "filter2" > >> > >>- > >>List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > >> > >> > >> > > > >

1 0

can I get the MD5 codes which is used to encode the origin passwd?
by Lee Bobby 09 Aug '05

09 Aug '05

hello,everyone, I am tring to write a NAS codes,and I need a MD5 codes to encode the origin passwd. I use PAP mode.And the passwd is encoded by authenticator and key using MD5.I need such codes in C language. Can anyone help me? regards

1 0