- Freeradius-Users - lists.freeradius.org

Re: unable to compile with openssl libraries
by Stephen Gran 04 Dec '06

04 Dec '06

On Mon, Dec 04, 2006 at 02:21:53PM +1100, Peter Param said: > The following hasn't worked for me either: > > ./configure --with-openssl-includes=/usr/local/ssl/include/ > --with-openssl-libraries=/usr/local/ssl/lib/ On Mon, Dec 04, 2006 at 02:36:52PM +1100, Peter Param said: > no good. when I configure with: > > ./configure --with-openssl-includes=/usr/local/ssl > --with-openssl-libraries=/usr/local/ssl You said you now had the Debian packages installed. Why aren't you just using the path to them? They are /usr/include/openssl and /usr/lib, respectively. -- -------------------------------------------------------------------------- | Stephen Gran | Minicomputer: A computer that can be | | steve(a)lobefin.net | afforded on the budget of a middle- | | http://www.lobefin.net/~steve | level manager. | --------------------------------------------------------------------------

1 0

unsubscribe
by Müller, Holger 04 Dec '06

04 Dec '06

-- CONET Solutions GmbH Holger Müller Theodor-Heuss-Allee 19, 53773 Hennef Tel.: +49 2242-939-482, Fax: +49 2242-939-393 Internet: http://www.conet.de

1 0

FreeRadius and LDAP
by Sundaram Divya-QDIVYA1 04 Dec '06

04 Dec '06

Hi all, I'm trying to configure the server to use LDAP for authentication And am finding the documentation to be less than straightforward. We don't use openldap or eDirectory - which is what the docs are Derived from. The information for FreeRADIUS and LDAP seems to suggest that I need to provide access to the LDAP server's password to the service account that the FreeRADIUS Server uses. What I need to understand is how to integrate FreeRADIUS with an LDAP Server without exposing the (crypted) password hashes. Any pointers on what I need to do for that? I'd be happy to provide updated documentation once I have gotten it working. I'd appreciate any insights. Divya Sundaram ----------------------------- CONDITUR IN PETRA Let us realize that the privilege to work is a gift, that power to work is a blessing, that love of work is success. --David O. McKay ==============================================================

3 2

Re: unable to compile with openssl libraries
by Peter Param 04 Dec '06

04 Dec '06

I've tried that but I get the following errors: debian:~/freeradius-1.1.3# dpkg-buildpackage -b -uc dpkg-buildpackage: source package is freeradius dpkg-buildpackage: source version is 1.1.3-0 dpkg-buildpackage: source changed by Nicolas Baradakis <nicolas.baradakis(a)cegetel.net> dpkg-buildpackage: host architecture i386 dpkg-buildpackage: source version without epoch 1.1.3-0 dpkg-checkbuilddeps: Unmet build dependencies: debhelper (>= 4.2.32) dpatch (>= 2) autotools-dev libtool (>= 1.5) libltdl3-dev libpam0g-dev libmysqlclient15-dev | libmysqlclient14-dev | libmysqlclient-dev libgdbm-dev libldap2-dev libsasl2-dev libiodbc2-dev libkrb5-dev snmp libsnmp9-dev | libsnmp5-dev | libsnmp4.2-dev libpq-dev | postgresql-dev libssl-dev dpkg-buildpackage: Build dependencies/conflicts unsatisfied; aborting. dpkg-buildpackage: (Use -d flag to override.) cheers Peter >>> aland(a)deployingradius.com 12/04/06 1:27 PM >>> Peter Param wrote: > Debian licensing prohibits the installation of openssl as part of its > packaging and hence why i downloaded the individual tarballs to work > around this issue. See the Wiki. There are instructions for building the server on Debian. You do NOT have to play with configure, command-line options, or anything else like that. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been virus scanned and although no viruses were detected by the system, St Vincents & Mater Health Sydney accepts no liability for any consequential damage resulting from email containing any computer viruses. **********************************************************************

2 1

Re: unable to compile with openssl libraries
by Peter Param 04 Dec '06

04 Dec '06

no good. when I configure with: ./configure --with-openssl-includes=/usr/local/ssl --with-openssl-libraries=/usr/local/ssl cheers Peter >>> Stephen Gran <steve(a)lobefin.net> 12/04/06 1:42 PM >>> On Mon, Dec 04, 2006 at 01:22:56PM +1100, Peter Param said: > what configure flags should I pass to allow for rlm_eap ...i thought > the defaults should work? You need to pass at least --with-openssl-libraries, I see now. That is probably a bug in the Debian packaging as well. I'll take a look at that shortly. -- -------------------------------------------------------------------------- | Stephen Gran | <aav> coffee on an empty stomach is | | steve(a)lobefin.net | pretty nasy <knghtbrd> aav: time to run | | http://www.lobefin.net/~steve | to the vending machine for cheetos | | | <aav> cheetos? :) | -------------------------------------------------------------------------- ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been virus scanned and although no viruses were detected by the system, St Vincents & Mater Health Sydney accepts no liability for any consequential damage resulting from email containing any computer viruses. **********************************************************************

1 0

Re: unable to compile with openssl libraries
by Peter Param 04 Dec '06

04 Dec '06

The following hasn't worked for me either: ./configure --with-openssl-includes=/usr/local/ssl/include/ --with-openssl-libraries=/usr/local/ssl/lib/ cheers Peter >>> Stephen Gran <steve(a)lobefin.net> 12/04/06 1:42 PM >>> On Mon, Dec 04, 2006 at 01:22:56PM +1100, Peter Param said: > what configure flags should I pass to allow for rlm_eap ...i thought > the defaults should work? You need to pass at least --with-openssl-libraries, I see now. That is probably a bug in the Debian packaging as well. I'll take a look at that shortly. -- -------------------------------------------------------------------------- | Stephen Gran | <aav> coffee on an empty stomach is | | steve(a)lobefin.net | pretty nasy <knghtbrd> aav: time to run | | http://www.lobefin.net/~steve | to the vending machine for cheetos | | | <aav> cheetos? :) | -------------------------------------------------------------------------- ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been virus scanned and although no viruses were detected by the system, St Vincents & Mater Health Sydney accepts no liability for any consequential damage resulting from email containing any computer viruses. **********************************************************************

1 0

Re: unable to compile with openssl libraries
by Stephen Gran 04 Dec '06

04 Dec '06

On Mon, Dec 04, 2006 at 01:22:56PM +1100, Peter Param said: > what configure flags should I pass to allow for rlm_eap ...i thought > the defaults should work? You need to pass at least --with-openssl-libraries, I see now. That is probably a bug in the Debian packaging as well. I'll take a look at that shortly. -- -------------------------------------------------------------------------- | Stephen Gran | <aav> coffee on an empty stomach is | | steve(a)lobefin.net | pretty nasy <knghtbrd> aav: time to run | | http://www.lobefin.net/~steve | to the vending machine for cheetos | | | <aav> cheetos? :) | --------------------------------------------------------------------------

1 0

Re: unable to compile with openssl libraries
by Peter Param 04 Dec '06

04 Dec '06

Debian licensing prohibits the installation of openssl as part of its packaging and hence why i downloaded the individual tarballs to work around this issue. >>> steve(a)lobefin.net 12/04/06 11:12 AM >>> On Mon, Dec 04, 2006 at 10:50:42AM +1100, Peter Param said: > Hi all, > > I'm using Linux debian 2.6.8-2-386 and I am unable to compile with > openssl libraries even tho openssl has been installed (separately). > > configure: WARNING: silently not building rlm_eap_peap. > configure: WARNING: FAILURE: rlm_eap_peap requires: OpenSSL. > > I downloaded the source for freeradius (1.1.3) and used ./configure > --with-openssl-includes=/usr/local/ssl/include/openssl/ > --with-openssl-libraries=/lib/ This looks wrong, at first glance. Did you actually install the headers under /usr/local/ssl/include/openssl/ and install the libraries under /lib ? And why not use the readily accessable Debian openssl packages, that have security support? > I'm able to compile but get the following runtime error: > > rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared > object file: No such file or directory Well, it probably wasn't built, so that's not a huge surprise. -- -------------------------------------------------------------------------- | Stephen Gran | Today is the tomorrow you worried about | | steve(a)lobefin.net | yesterday. | | http://www.lobefin.net/~steve | | -------------------------------------------------------------------------- ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been virus scanned and although no viruses were detected by the system, St Vincents & Mater Health Sydney accepts no liability for any consequential damage resulting from email containing any computer viruses. **********************************************************************

2 1

Re: unable to compile with openssl libraries
by Peter Param 04 Dec '06

04 Dec '06

what configure flags should I pass to allow for rlm_eap ...i thought the defaults should work? >>> Stephen Gran <steve(a)lobefin.net> 12/04/06 1:17 PM >>> On Mon, Dec 04, 2006 at 12:13:59PM +1100, Peter Param said: > is this from the orginal 1.1.3 freeradius tarball or do you mean I > should apt-get freeradius as well? That's what I was working from. They are slightly skewed. On Mon, Dec 04, 2006 at 12:16:59PM +1100, Peter Param said: > oops my mail client truncated the text! Attached is the output of > configure. > configure: WARNING: skipping test for openssl/ssl.h It sounds like you didn't pass the right configure flags. -- -------------------------------------------------------------------------- | Stephen Gran | Rascal, am I? Take THAT! -- Errol | | steve(a)lobefin.net | Flynn | | http://www.lobefin.net/~steve | | -------------------------------------------------------------------------- ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been virus scanned and although no viruses were detected by the system, St Vincents & Mater Health Sydney accepts no liability for any consequential damage resulting from email containing any computer viruses. **********************************************************************

1 0

Re: unable to compile with openssl libraries
by Stephen Gran 04 Dec '06

04 Dec '06

On Mon, Dec 04, 2006 at 12:13:59PM +1100, Peter Param said: > is this from the orginal 1.1.3 freeradius tarball or do you mean I > should apt-get freeradius as well? That's what I was working from. They are slightly skewed. On Mon, Dec 04, 2006 at 12:16:59PM +1100, Peter Param said: > oops my mail client truncated the text! Attached is the output of > configure. > configure: WARNING: skipping test for openssl/ssl.h It sounds like you didn't pass the right configure flags. -- -------------------------------------------------------------------------- | Stephen Gran | Rascal, am I? Take THAT! -- Errol | | steve(a)lobefin.net | Flynn | | http://www.lobefin.net/~steve | | --------------------------------------------------------------------------

1 0