July 2006 - Freeradius-Users - lists.freeradius.org

noob with some questions
by P. K. 04 Aug '06

04 Aug '06

Hi All, I've been setting up my College's first FreeRadius server and I've been having a hard time wrapping my brain around the config with the documentation that is available. If you'll bear with me here through this super long post, I'll go into more depth. What I'm trying to do: I want to configure FreeRadius to Authorize a user against an LDAP directory based on IF that user has the following values: *edupersonprimaryaffiliation: *STAFF AND *psadminarea*: BUSINESS - SMEAL COLLEGE _OR_ *edupersonprimaryaffiliation: *Faculty AND *psadminarea*: BUSINESS - SMEAL COLLEGE If the user's values don't match either of these two condition, they are rejected. If they match either, then they are authenticated agains a kerberos server. I've got the basic configuration working in that FreeRadius will go out to the LDAP directory (right now it just seems to check if the attribute exists but does not make a judgement on it) and then it will go out to the Kerberos server and Authenticate. I want to now add the conditions I stated above but I'm a bit lost this point. At first I thought that this was something the CheckValue module should handle, then I thought maybe it should just be a part of the filter in the LDAP module, then I thought about maybe the values need to be in the dictionary files. At this point, it became apparent that I simply don't understand how FreeRadius handles itself. It is not apparent to me how or where FreeRadius makes its decisions on conditional values. This is where I hope some of you can help. I really like FreeRadius in that it is obviously a quality product, but as it is with the documentation and my lack of Radius experience, I just can't seem to get at the last piece of this puzzle. Right now, I have the following settings (with debug output further down) radiusd.conf, LDAP module: ldap { server = "ldap.psu.edu" # identity = "cn=admin,o=My Org,c=UA" # password = mypass basedn = "dc=psu,dc=edu" filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" # base_filter = "(objectclass=radiusprofile)" # set this to 'yes' to use TLS encrypted connections # to the LDAP database by using the StartTLS extended # operation. # The StartTLS operation is supposed to be used with normal # ldap connections instead of using ldaps (port 689) connections start_tls = no # tls_cacertfile = /path/to/cacert.pem # tls_cacertdir = /path/to/ca/dir/ # tls_certfile = /path/to/radius.crt # tls_keyfile = /path/to/radius.key # tls_randfile = /path/to/rnd # tls_require_cert = "demand" # default_profile = "cn=radprofile,ou=dialup,o=My Org,c=UA" # profile_attribute = "radiusProfileDn" access_attr = "psadminarea" # Mapping of RADIUS dictionary attributes to LDAP # directory attributes. dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 # # NOTICE: The password_header directive is NOT case insensitive # # password_header = "{clear}" # # Set: # password_attribute = nspmPassword # # to get the user's password from a Novell eDirectory # backend. This will work *only if* freeRADIUS is # configured to build with --with-edir option. # # # The server can usually figure this out on its own, and pull # the correct User-Password or NT-Password from the database. # # Note that NT-Passwords MUST be stored as a 32-digit hex # string, and MUST start off with "0x", such as: # # 0x000102030405060708090a0b0c0d0e0f # # Without the leading "0x", NT-Passwords will not work. # This goes for NT-Passwords stored in SQL, too. # # password_attribute = userPassword # # Un-comment the following to disable Novell eDirectory account # policy check and intruder detection. This will work *only if* # FreeRADIUS is configured to build with --with-edir option. # # edir_account_policy_check=no # # groupname_attribute = cn # groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" # groupmembership_attribute = radiusGroupName timeout = 4 timelimit = 3 net_timeout = 1 # compare_check_items = yes # do_xlat = yes # access_attr_used_for_allow = yes # # By default, if the packet contains a User-Password, # and no other module is configured to handle the # authentication, the LDAP module sets itself to do # LDAP bind for authentication. # # You can disable this behavior by setting the following # configuration entry to "no". # # allowed values: {no, yes} # set_auth_type = yes } In the file dictionary: ATTRIBUTE Is_Smeal_Member 3998 string ATTRIBUTE Is_Smeal_Fac_Staff_Member 3999 stringModule: Loaded preprocess preprocess: huntgroups = "/etc/freeradius/huntgroups" preprocess: hints = "/etc/freeradius/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded LDAP ldap: server = "ldap.psu.edu" ldap: port = 389 ldap: net_timeout = 1 ldap: timeout = 4 ldap: timelimit = 3 ldap: identity = "" ldap: tls_mode = no ldap: start_tls = no ldap: tls_cacertfile = "(null)" ldap: tls_cacertdir = "(null)" ldap: tls_certfile = "(null)" ldap: tls_keyfile = "(null)" ldap: tls_randfile = "(null)" ldap: tls_require_cert = "allow" ldap: password = "" ldap: basedn = "dc=psu,dc=edu" ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" ldap: base_filter = "(objectclass=radiusprofile)" ldap: default_profile = "(null)" ldap: profile_attribute = "(null)" ldap: password_header = "(null)" ldap: password_attribute = "(null)" ldap: access_attr = "psadminarea" ldap: groupname_attribute = "cn" ldap: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" ldap: groupmembership_attribute = "(null)" ldap: dictionary_mapping = "/etc/freeradius/ldap.attrmap" ldap: ldap_debug = 0 ldap: ldap_connections_number = 5 ldap: compare_check_items = no ldap: access_attr_used_for_allow = yes ldap: do_xlat = yes ldap: edir_account_policy_check = yes ldap: set_auth_type = yes rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap rlm_ldap: reading ldap<->radius mappings from file /etc/freeradius/ldap.attrmap rlm_ldap: LDAP psadminarea mapped to RADIUS Is_Smeal_Member rlm_ldap: LDAP edupersonprimaryaffiliation mapped to RADIUS Is_Smeal_Fac_Staff_Member rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port conns: 0x811b320 Module: Instantiated ldap (ldap) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded files files: usersfile = "/etc/freeradius/users" files: acctusersfile = "/etc/freeradius/acct_users" files: preproxy_usersfile = "/etc/freeradius/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded detail detail: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded radutmp radutmp: filename = "/var/log/freeradius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Initializing the thread pool... thread: start_servers = 5 thread: max_servers = 32 thread: min_spare_servers = 3 thread: max_spare_servers = 10 thread: max_requests_per_server = 0 thread: cleanup_delay = 5 Thread spawned new child 1. Total threads in pool: 1 Thread spawned new child 2. Total threads in pool: 2 Thread spawned new child 3. Total threads in pool: 3 Thread spawned new child 4. Total threads in pool: 4 Thread spawned new child 5. Total threads in pool: 5 Thread pool initialized Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. Thread 1 waiting to be assigned a request Thread 2 waiting to be assigned a request Thread 3 waiting to be assigned a request Thread 4 waiting to be assigned a request Thread 5 waiting to be assigned a request rad_recv: Access-Request packet from host 127.0.0.1:32778, id=180, length=58 --- Walking the entire request list --- Waking up in 31 seconds... Threads: total/active/spare threads = 5/0/5 Thread 1 got semaphore Thread 1 handling request 0, (1 handled so far) User-Name = "pbk105" User-Password = "xxxxxxxxxxxxx" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "pbk105", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for pbk105 radius_xlat: '(uid=pbk105)' radius_xlat: 'dc=psu,dc=edu' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to ldap.psu.edu:389, authentication 0 rlm_ldap: bind as / to ldap.psu.edu:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in dc=psu,dc=edu, with filter (uid=pbk105) rlm_ldap: checking if remote access for pbk105 is allowed by psadminarea rlm_ldap: looking for check items in directory... rlm_ldap: Adding edupersonprimaryaffiliation as Is_Smeal_Fac_Staff_Member, value STAFF & op=21 rlm_ldap: Adding psadminarea as Is_Smeal_Member, value BUSINESS & op=21 rlm_ldap: looking for reply items in directory... rlm_ldap: user pbk105 authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type ldap auth: type "LDAP" Processing the authenticate section of radiusd.conf modcall: entering group LDAP for request 0 rlm_krb5: verify_krb_v5_tgt: host key not found : No such file or directory modcall[authenticate]: module "krb5" returns ok for request 0 modcall: leaving group LDAP (returns ok) for request 0 Sending Access-Accept of id 180 to 127.0.0.1 port 32778 Finished request 0 Going to the next request Thread 1 waiting to be assigned a request --- Walking the entire request list --- Cleaning up request 0 ID 180 with timestamp 44ce2b92 In the ldap.attr file: checkitem Is_Smeal_Member psadminarea checkitem Is_Smeal_Fac_Staff_Member edupersonprimaryaffiliation Debug Output: -- Paul Kuchinski Network Administrator Smeal College of Business Administration Penn State University email: pbk105(a)psu.edu phone: (814)865-0366 fax: (814)865-1845

5 12

EAP-TTLS MD5 hashed Passwords in MySQL Database for WPA-802.1x auth
by Christian Poessinger 02 Aug '06

02 Aug '06

Hello, I'm trying to setup a System to authenticate WLAN users via EAP-TTLS with md5 crypted passwords, stored in a sql database. I'm using MySQL as the Backend and it works great when the passwords are stored in cleartext or UNIX crypt. When i convert the password from crypt to md5 and change pap encryption_scheme to md5 it doen't work anymore. As I have to use the SQL attribute field with 'Crypt-Password' in it, it seems that it wants to use crypt passwords and not md5. I tried to change it to 'md5-password' but well ... that wasn't the answer. Here is the error: --------- modcall: entering group PAP for request 4 rlm_pap: login attempt by "foo" with password bar rlm_pap: Crypt-Password attribute but encryption scheme is not set to CRYPT modcall[authenticate]: module "pap" returns fail for request 4 modcall: leaving group PAP (returns fail) for request 4 auth: Failed to validate the user. TTLS: Got tunneled reply RADIUS code 3 TTLS: Got tunneled Access-Reject --------- Anyone has an Idea how to use the MD5 hashed Passwords in the Database with EAP-TTLS for authentication? I appended my radius configuration. Thanks. ----------- CONFIG ------------ eap { default_eap_type = ttls timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no leap { } tls { private_key_file = /etc/ssl/rad.pem certificate_file = /etc/ssl/rad.pem CA_file = /etc/ssl/ca.pem dh_file = /etc/ssl/rad.dh random_file = /dev/urandom fragment_size = 1024 include_length = yes check_crl = yes } ttls { default_eap_type = md5 copy_request_to_tunnel = no use_tunneled_reply = no } peap { default_eap_type = mschapv2 } mschapv2 { } } modules { pap { encryption_scheme = md5 } } authorize { preprocess suffix eap files sql } authenticate { Auth-Type PAP { pap } eap } users-file DEFAULT Auth-Type = PAP Fall-Through = 0 -------- END OF CONFIG -------------

3 10

Freeradius in Fedora (Folder Redhat)
by Everton Skywalker 01 Aug '06

01 Aug '06

Hello everybody, I had been installed freeradius in Fedora using the tutorial of freeradius home page. I would like to know if necessary use the files in the directory redhat? If it is necessary, what I need to do? The no instruction files in that folder. I using EAP/PEAP. I am trying to configure freeradius to authenticate 802.11g users. Thank you for any information, Everton --------------------------------- Novidade no Yahoo! Mail: receba alertas de novas mensagens no seu celular. Registre seu aparelho agora!

2 1

ippool error
by Giuseppina Venezia 01 Aug '06

01 Aug '06

Hi, I have this error, when i client log in: Fri Jul 28 12:49:55 2006 : Debug: Processing the post-auth section of radiusd.conf Fri Jul 28 12:49:55 2006 : Debug: modcall: entering group post-auth for request 0 Fri Jul 28 12:49:55 2006 : Debug: modsingle[post-auth]: calling professori (rlm_ippool) for request 0 Fri Jul 28 12:49:55 2006 : Debug: rlm_ippool: Could not find Pool-Name attribute. Fri Jul 28 12:49:55 2006 : Debug: modsingle[post-auth]: returned from professori (rlm_ippool) for request 0 Fri Jul 28 12:49:55 2006 : Debug: modcall[post-auth]: module "professori" returns noop for request 0 Fri Jul 28 12:49:55 2006 : Debug: modsingle[post-auth]: calling studenti (rlm_ippool) for request 0 Fri Jul 28 12:49:55 2006 : Debug: rlm_ippool: Could not find Pool-Name attribute. Fri Jul 28 12:49:55 2006 : Debug: modsingle[post-auth]: returned from studenti (rlm_ippool) for request 0 Fri Jul 28 12:49:55 2006 : Debug: modcall[post-auth]: module "studenti" returns noop for request 0 Fri Jul 28 12:49:55 2006 : Debug: modcall: leaving group post-auth (returns noop) for request 0 CONFIG: radius.conf ippool professori { range-start = 192.168.182.2 range-stop = 192.168.182.50 netmask = 255.255.255.0 cache-size = 800 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex } ippool studenti { range-start = 192.168.182.129 range-stop = 192.168.182.254 netmask = 255.255.255.0 cache-size = 800 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex } post-auth { professori studenti ............ } users DEFAULT Service-Type == Framed-User, Huntgroup-Name == "professori", User-Profile:="employeeType=professor", Pool-Name := "professori" Fall-Through = Yes DEFAULT Service-Type == Framed-User, Huntgroup-Name == "studenti", User-Profile:="employeeType=student", Pool-Name := "studentii" Fall-Through = Yes huntgroups professori NAS-IP-Address == 192.168.182.1 studenti NAS-IP-Address == 192.168.182.1 -------------------- Thanks in advance, Giusy

4 15

Preprocessing Acct Message
by Khoa Nguyen 31 Jul '06

31 Jul '06

Hi, I have freeradius 1.1.2 and postgres 7.4.11.In Acct message, one of the VSA is "MSI-Diff-Charge-Container" (our own attribute), whose value is a long hex string: "02060004...". I would like to parse this value and insert the parsed values into the database. What is the best way to achieve this? Thanks, Khoa

1 0

SNMP traps
by darshak＠elitecore.com 31 Jul '06

31 Jul '06

Hi all. I want to know how free radius supports SNMP trap events. Can any1 get me the info. Thanxs Darshak

3 3

RedHat RPM's
by King, Michael 31 Jul '06

31 Jul '06

I'm just confirming, As per the FAQ, there are no (Official) Redhat RPM's at the moment. The best way to install on Red Hat Enterprise Linux ES release 4 (Nahant) is to install from source? I'm setting up a new server (and redhat is a new distro for me) and I'd like to start off on the right foot. Michael King

2 1

freeradius-1.1.2 install question on Solaris 10 (SPARC)
by Rafiqul Ahsan 31 Jul '06

31 Jul '06

I am trying to install freeradius-1.1.2 on Solaris 10. I noticed that it requires to have open ssl installed on the system, and the Solaris 10 that I am working on has already installed open SSL as follows : /usr/local/ssl/lib # ls -al total 11884 drwxr-xr-x 4 root bin 512 Apr 21 09:01 . drwxr-xr-x 10 root root 512 Apr 21 09:01 .. drwxr-xr-x 2 root bin 512 Apr 21 09:01 engines -rw-r--r-- 1 root bin 2235224 Oct 15 2005 libcrypto.a lrwxrwxrwx 1 root root 18 Apr 21 09:01 libcrypto.so -> libcrypto.so.0.9.8 -r-xr-xr-x 1 root bin 1333832 Oct 15 2005 libcrypto.so.0.9.7 -r-xr-xr-x 1 root bin 1529352 Oct 15 2005 libcrypto.so.0.9.8 -rw-r--r-- 1 root bin 389692 Oct 15 2005 libssl.a lrwxrwxrwx 1 root root 15 Apr 21 09:01 libssl.so -> libssl.so.0.9.8 -r-xr-xr-x 1 root bin 234036 Oct 15 2005 libssl.so.0.9.7 -r-xr-xr-x 1 root bin 291900 Oct 15 2005 libssl.so.0.9.8 drwxr-xr-x 2 root bin 512 Apr 21 09:01 pkgconfig Also initiatially when I did ./configure - it was giving me error that the PATH was not set for gcc, cc etc. I set the path as follows : export PATH=$PATH:/usr/local/bin and then I attempetd to do make as follows : # make make[1]: Entering directory `/export/home/lab/freeradius-1.1.2' Making all in libltdl... make[2]: Entering directory `/export/home/lab/freeradius-1.1.2/libltdl' /bin/sh ./libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -c ltdl.c mkdir .libs gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -c ltdl.c -fPIC -DPIC -o .libs/ltdl.lo ltdl.c: In function `lt_dlopenext': ltdl.c:2926: warning: unused variable `file_found' gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -c ltdl.c -o ltdl.o>/dev/null 2>&1 mv -f .libs/ltdl.lo ltdl.lo /bin/sh ./libtool --mode=link gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -o libltdl.la-rpath /usr/local/lib -no-undefined -version-info 4:0:1 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread rm -fr .libs/libltdl.la .libs/libltdl.* .libs/libltdl.* /usr/ccs/bin/ld -G -z defs -h libltdl.so.3 -o .libs/libltdl.so.3.1.0 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lc (cd .libs && rm -f libltdl.so.3 && ln -s libltdl.so.3.1.0 libltdl.so.3) (cd .libs && rm -f libltdl.so && ln -s libltdl.so.3.1.0 libltdl.so) ar cru .libs/libltdl.a ltdl.o ./libtool: ar: not found make[2]: *** [libltdl.la] Error 1 make[2]: Leaving directory `/export/home/lab/freeradius-1.1.2/libltdl' make[1]: *** [common] Error 2 make[1]: Leaving directory `/export/home/lab/freeradius-1.1.2' make: *** [all] Error 2 I dont have any clue what that might be.. Can anybody help me figure out the problem ? Thanks Rafi -- Rafiqul Ahsan 630-717-1698(h) 2120 Periwinkle Ln 630-689-1457(h) Naperville, IL 60540 847-812-6176(c)

1 0

make install R=... and integrated libtool problem (and sollution)
by Damjan 31 Jul '06

31 Jul '06

I've tried to make an ArchLinux package of freeradius 1.1.2, but although the compile would go fine and compile all the modules, when I would do 'make install R=/tmp/pkg-fr' it would not install any of the *.so files for the modules in /usr/lib/freeradius. I've noticed in the output of make install that when libtool tries to relink the libraries it looks for libradius.so in /usr/lib/freeradius and not in /tmp/pkg-fr/usr/lib/freeradius/. The sollution for me was to use the system installed libtool (1.5.22 in ArchLinux) instead of the freeradius internal libtool (version 1.4.2) Maybe the freeradius source needs to update the included libtool? -- damjan | дамјан This is my jabber ID --> damjan(a)bagra.net.mk -- not my mail address, it's a Jabber ID --^ :)

2 1

making sqlcounter working
by ego seek 31 Jul '06

31 Jul '06

can anybody help me? i cannot make it runing

1 0