- Freeradius-Users - lists.freeradius.org

freeradius and certs
by unforgiver 23 Jun '06

23 Jun '06

Hi if i understand well i need 9 cert files: root.pem, root.p12, root.der cert-clt.pem, cert-clt.p12, cert-clt.der cert-srv.pem, cert-srv.p12, cert-srv.der i have demo certs but they expired. How can i create these 9 certs? i try with CA.all and i had multiple errors. is there another way? -- View this message in context: http://www.nabble.com/freeradius-and-certs-t1834817.html#a5007516 Sent from the FreeRadius - User forum at Nabble.com.

2 1

Re: error: Installed (but unpackaged) files(s) found: on REDHAT Enterprise 4.0 (RHEL4) and FreeRadius 1.1.2
by tadej.bregar＠guest.arnes.si 23 Jun '06

23 Jun '06

Hello, I'm struggling to build a RPM package on RHEL 4 also (based on freeradius.spec file), I have tried adding sed line as suggested in on of the previous posts and also suggested %doc lines, but with no success. How do i have to modify freeradius.spec file to build it successfully? Has anyone (besides Alberto Cruz) also managed to build RPM on RHEL 4? Thanky for any info, Tadej Bregar UPDATE: Yesterday I forgot to attach contents of freeradius.spec: ################################ Summary: High-performance and highly configurable RADIUS server URL: http://www.freeradius.org/ Name: freeradius Version: 1.1.2 Release: 0 License: GPL Group: Networking/Daemons Packager: FreeRADIUS.org Source0: %{name}-%{version}.tar.gz Prereq: /sbin/chkconfig BuildPreReq: libtool # FIXME: snmpwalk, snmpget and rusers POSSIBLY needed by checkrad Provides: radiusd Conflicts: cistron-radius BuildRoot: %{_tmppath}/%{name}-root %description The FreeRADIUS Server Project is a high-performance and highly configurable GPL'd RADIUS server. It is somewhat similar to the Livingston 2.0 RADIUS server, but has many more features, and is much more configurable. %prep %setup %build CFLAGS="$RPM_OPT_FLAGS" \ %configure --prefix=%{_prefix} \ --localstatedir=%{_localstatedir} \ --sysconfdir=%{_sysconfdir} \ --mandir=%{_mandir} \ --disable-ltdl-install \ --with-ltdl-lib=/usr/lib \ --with-ltdl-include=/usr/include \ --with-large-files --with-udpfromto --with-edir \ --with-rlm-sql_postgresql-include-dir=/usr/include/pgsql \ --with-rlm-krb5-include-dir=/usr/kerberos/include \ --with-rlm-krb5-lib-dir=/usr/kerberos/lib make %install [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT/etc/{logrotate.d,pam.d,rc.d/init.d} make install R=$RPM_BUILD_ROOT RADDB=$RPM_BUILD_ROOT/etc/raddb # set radiusd as default user/group perl -i -pe 's/^#user =.*$/user = radiusd/' $RADDB/radiusd.conf perl -i -pe 's/^#group =.*$/group = radiusd/' $RADDB/radiusd.conf # shadow password file MUST be defined on Linux perl -i -pe 's/# shadow =/shadow =/' $RADDB/radiusd.conf # remove unneeded stuff rm -f $RPM_BUILD_ROOT%{_mandir}/man8/builddbm.8 rm -f $RPM_BUILD_ROOT%{_prefix}/sbin/rc.radiusd cd redhat install -m 755 rc.radiusd-redhat $RPM_BUILD_ROOT/etc/rc.d/init.d/radiusd install -m 644 radiusd-logrotate $RPM_BUILD_ROOT/etc/logrotate.d/radiusd install -m 644 radiusd-pam $RPM_BUILD_ROOT/etc/pam.d/radius cd .. %pre /usr/sbin/useradd -c "radiusd user" -r -s /bin/false -u 95 -d / radiusd 2>/dev/null || : %preun if [ "$1" = "0" ]; then /sbin/service radiusd stop > /dev/null 2>&1 /sbin/chkconfig --del radiusd fi %post /sbin/ldconfig /sbin/chkconfig --add radiusd # Done here to avoid messing up existing installations for i in radius/radutmp radius/radwtmp radius/radius.log # radius/radwatch.log radius/checkrad.log do touch /var/log/$i chown radiusd:radiusd /var/log/$i chmod 600 /var/log/$i done %postun if [ "$1" -ge "1" ]; then /sbin/service radiusd condrestart >/dev/null 2>&1 fi if [ $1 = 0 ]; then /usr/sbin/userdel radiusd > /dev/null 2>&1 || : fi /sbin/ldconfig %clean [ "$RPM_BUILD_ROOT" != "/" ] && rm -rf $RPM_BUILD_ROOT %files %defattr(-,root,root) # start of modification Tadej Bregar sed -i "s at doc/freeradius at doc/freeradius-%{version}@" doc/Makefile doc/examples/Makefile doc/rfc/Makefile %doc doc/ChangeLog doc/README* todo/ COPYRIGHT INSTALL %doc doc/Acct-Type doc/Autz-Type doc/CYGWIN doc/ChangeLog doc/DIFFS doc/MACOSX %doc doc/OS2 doc/Post-Auth-Type doc/RADIUS-LDAP-eDirectory doc/RADIUS-SQL.schema %doc doc/README doc/Session-Type doc/Simultaneous-Use doc/aaa.txt doc/ascend %doc doc/bay doc/bugs doc/cisco doc/coding-methods.txt doc/configurable_failover %doc doc/duplicate-users doc/ldap_howto.txt doc/load-balance.txt doc/misc-nas %doc doc/module_interface doc/mssql doc/performance-testing doc/processing_users_file %doc doc/proxy doc/radrelay doc/release-method.txt doc/rfc/ %doc doc/rlm* doc/supervise-radiusd.txt %doc doc/tuning_guide doc/variables.txt todo/ COPYRIGHT INSTALLa %doc doc/* # end of modification Tadej Bregar %config /etc/pam.d/radius %config /etc/logrotate.d/radiusd %config /etc/rc.d/init.d/radiusd %config (noreplace) /etc/raddb/* %{_bindir}/* %{_datadir}/%{name} %{_libdir}/* %{_mandir}/*/* %{_sbindir}/* %attr(0700,radiusd,radiusd) %dir /var/log/radius %attr(0700,radiusd,radiusd) %dir /var/log/radius/radacct %attr(0700,radiusd,radiusd) %dir /var/run/radiusd %changelog * Thu Dec 15 2004 Alan DeKok - update for 1.1.0 * Mon May 31 2004 Paul Hampson - update for 1.0.0 release * Fri May 23 2003 Marko Myllynen - update for 0.9 * Wed Sep 4 2002 Marko Myllynen - fix libtool issues for good * Thu Aug 22 2002 Marko Myllynen - update for 0.7/0.8 * Tue Jun 18 2002 Marko Myllynen - run as radiusd user instead of root - added some options for configure * Thu Jun 6 2002 Marko Myllynen - set noreplace for non-dictionary files in /etc/raddb * Sun May 26 2002 Frank Cusack <frank(a)google.com> - move /var dirs from %%post to %%files * Thu Feb 14 2002 Marko Myllynen - use dir name macros in all configure options - libtool is required only when building the package - misc clean ups * Wed Feb 13 2002 Marko Myllynen - use %%{_mandir} instead of /usr/man - rename %%postin as %%post - clean up name/version * Fri Jan 18 2002 Frank Cusack <frank(a)google.com> - remove (noreplace) for /etc/raddb/* (due to rpm bugs) * Fri Sep 07 2001 Ivan F. Martinez <ivanfm(a)ecodigit.com.br> - changes to make compatible with default config file shipped - adjusts log files are on /var/log/radius instead of /var/log - /etc/raddb changed to config(noreplace) to don't override - user configs * Fri Sep 22 2000 Bruno Lopes F. Cabral <bruno(a)openline.com.br> - spec file clear accordling to the libltdl fix and minor updates * Wed Sep 12 2000 Bruno Lopes F. Cabral <bruno(a)openline.com.br> - Updated to snapshot-12-Sep-00 * Fri Jun 16 2000 Bruno Lopes F. Cabral <bruno(a)openline.com.br> - Initial release ################################

2 1

Re: freeradius and certs
by Walter Reynolds 23 Jun '06

23 Jun '06

Knowing the errors might help, but here is a good web page with instructions: http://www.linuxjournal.com/article/8095 --------------------------- Date: Fri, 23 Jun 2006 00:40:20 -0700 (PDT) From: unforgiver <blood.pl(a)gmail.com> Subject: freeradius and certs To: freeradius-users(a)lists.freeradius.org Message-ID: <5007516.post(a)talk.nabble.com> Content-Type: text/plain; charset=us-ascii Hi if i understand well i need 9 cert files: root.pem, root.p12, root.der cert-clt.pem, cert-clt.p12, cert-clt.der cert-srv.pem, cert-srv.p12, cert-srv.der i have demo certs but they expired. How can i create these 9 certs? i try with CA.all and i had multiple errors. is there another way? -- View this message in context: http://www.nabble.com/freeradius-and-certs-t1834817.html#a5007516 Sent from the FreeRadius - User forum at Nabble.com. -- Walter Reynolds University of Michigan

1 0

ldap client side credential caching in freeradius-1.1.1
by bright spark 23 Jun '06

23 Jun '06

Hello Everybody, I would like to know whether freeradius supports ldap credential caching mechanism? According to the release notes, this support was added in dec'2000 and was removed in march'2003 because openldap latest version didnt support that. What happens if we use some other ldap servers or microsoft ADS? Is it possible to add this support in the latest release? Please reply me if you have any idea. Thanks, Jenni.

1 0

WIKI down
by Francois-Xavier GAILLARD 23 Jun '06

23 Jun '06

Hi list, when going on the wiki (http://wiki.freeradius.org,) identified as a registered user, there's a PHP error: Fatal error: Call to undefined function: getuser() in /srv/www/vhosts/wiki-freeradius/includes/Skin.php on line 546 Could anyone repair please ? :) Regards, Fox.

1 0

Debian & TLS support
by Scott Hughes 23 Jun '06

23 Jun '06

Hello, I think in my last reqest to the list I wasn't quite clear as to the information I was trying to find. I'll try again and sorry for any toes that were stepped on. When I install Freeradius (after installing OpenSSL) I get this message when starting Freeradius: rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory radiusd.conf[9]: eap: Module instantiation failed I have tried downloading and compiling the Freeradius source (Freeradius-1.1.2.tar.gz) and have the same error. I understand why this is (licensing issues) and I have searched this list AND the web for any information as to how to make Freeradius work with Debian using TLS. I found a lot of discussion about it, but nothing concrete for someone like myself who is not deeply familiar with Linux. Is there a HOWTO for example on how a person can do what I am trying to do? Do I need to move off of Debian and onto something else? Thanks in advance for any links and/or information that anyone can provide.

4 3

RE: error: Installed (but unpackaged) files(s) found: on REDHAT Enterprise 4.0 (RHEL4) and FreeRadius 1.1.2
by Sandworm 23 Jun '06

23 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > -----Original Message----- > > How do i have to modify freeradius.spec file to build it successfully? > > Has anyone (besides Alberto Cruz) also managed to build RPM on RHEL 4? > > Thanky for any info, > Tadej Bregar Hi Yes, I've successfully built on RHEL4 ES (I'm using FR 1.1.1, though 1.1.2 shouldn't be different, I think). A diff of my spec file against the standard one in the tarball is shown below: $ diff -u /usr/src/redhat/SPECS/freeradius.spec freeradius.spec.orig - --- /usr/src/redhat/SPECS/freeradius.spec 2006-04-09 18:26:53.000000000 +1000 +++ freeradius.spec.orig 2006-02-13 02:54:56.000000000 +1100 @@ -23,8 +23,6 @@ %prep %setup - -sed -i "s@doc/freeradius@doc/freeradius-%{version}@" doc/Makefile doc/examples/Makefile doc/rfc/Makefile - - %build CFLAGS="$RPM_OPT_FLAGS" \ %configure --prefix=%{_prefix} \ @@ -101,14 +99,7 @@ %files %defattr(-,root,root) - -%doc doc/Acct-Type doc/Autz-Type doc/CYGWIN doc/ChangeLog doc/DIFFS doc/MACOSX - -%doc doc/OS2 doc/Post-Auth-Type doc/RADIUS-LDAP-eDirectory doc/RADIUS-SQL.schema - -%doc doc/README doc/Session-Type doc/Simultaneous-Use doc/aaa.txt doc/ascend - -%doc doc/bay doc/bugs doc/cisco doc/coding-methods.txt doc/configurable_failover - -%doc doc/duplicate-users doc/ldap_howto.txt doc/load-balance.txt doc/misc-nas - -%doc doc/module_interface doc/mssql doc/performance-testing doc/processing_users_file - -%doc doc/proxy doc/radrelay doc/release-method.txt doc/rfc/ doc/rlm* doc/supervise-radiusd.txt - -%doc doc/tuning_guide doc/variables.txt todo/ COPYRIGHT INSTALL +%doc doc/ChangeLog doc/README* todo/ COPYRIGHT INSTALL %config /etc/pam.d/radius %config /etc/logrotate.d/radiusd %config /etc/rc.d/init.d/radiusd Regards -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkSbXB8ACgkQmw4BJyaatJ2b8gCfaXuYxjruzPqHjXh8e6x5swy8sCsA oIDGkhRlJOc/VPBSLGei1pSaIxE5 =idM8 -----END PGP SIGNATURE-----

1 0

freeradius with AD
by Kartthik Raghunathan 23 Jun '06

23 Jun '06

Am trying to join the freeradius machine to active directory, so i can authenticate the users against active directory. When i try to bind am getting the below error message: net join ADS -U username%password ads_join_realm: Operations error ADS join did not work, falling back to RPC... Joined domain CORP. i dont see any issue with my domain password it work fine with kinit username(a)domain.com Also am running nis server on a linux box and freeradius server is part of this nis, when i binded it to the active directory which password will be given 1st preferrence. I think i may be out of this group box, but still its involved in freeradius operation. Thanks in advance. -- _______________________________________________ Search for businesses by name, location, or phone number. -Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

1 0

Is there a good guide to writing rlm modules
by David Goodenough 22 Jun '06

22 Jun '06

I am a newbie to Radius, and need to implement some function that is not easily done by any of the existing modules. So I want to write my own, and being a Java programmer I chose JRadius as well we FreeRadius. I wrote a module but it is not taking my acceptance of the user i the authorize step, but rather send a rejection to the post_auth step. Obviously I am missing something, so I thought that some documentation on writing modules would be good reading. Anyone know where I can find some? Thanks David

2 2

how to configure NAI realms routing table
by Dhaval Shah 22 Jun '06

22 Jun '06

Hi I have a question about how to use freeradius server as a proxy and configure a NAI realms based routing table to help incomming RADIUS packets to be forwarded to the correct next proxy towards the home AAA server. I also wanted to find out whether freeradius working as a proxy would modify the NAI it received in the User-Name attribute and prepare a new one (with this proxy's FQDN stripped out), do a lookup in the realms routing table, find the IP address of the FQDN of the next proxy and forward it to the next proxy. Any links to documentation on how to achieve this with freeradius would be appreciated. thanks Dhaval.

2 1