- Freeradius-Users - lists.freeradius.org

request for a simple set of instructions for EAP-SIM
by Michael Martinez 04 Feb '16

04 Feb '16

I've looked around online, but a lot of documentation is outdated and other docs don't do a good job, so would someone provide a simple set of instructions for getting EAP-SIM to work, including: which flags (if any) freeradius-3.0.11 should be compiled with; what config files need to be edited, why and how; what need to be done on the wireless device, if anything; and how to test and basic gotchas that might be encountered. Would be greatly appreciated and would eliminate a lot of the confusion that arises when trying to find this information in scattered places online. Thanks! Michael Martinez http://www.michael--martinez.com/computers/ -- ---

4 11

[freeRADIUS 2.2.9 : fail building the rlm_sql_oracle module : make: *** No rule to make target `../../../../../Make.inc'. Stop
by Vincent MARCEL 03 Feb '16

03 Feb '16

Hi, I need to build the rlm_sql_oracle module for my freeRADIUS server v2.2.6. I have downloaded freeradius v2.2.9 tarball here : http://freeradius.org/download.html and followed instructions here : http://wiki.freeradius.org/modules/Rlm_sql_oracle Below is the result : [radiusrec@radiusa1r1 rlm_sql_oracle]$ autoconf [radiusrec@radiusa1r1 rlm_sql_oracle]$ ./configure --with-oracle-include-dir --with-oracle-lib-dir=/OPT/oracle/product/11.2.0.4.8/lib checking for oci.h... checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed yes yes configure: creating ./config.status config.status: creating Makefile [radiusrec@radiusa1r1 rlm_sql_oracle]$ make Makefile:1: ../../../../../Make.inc: No such file or directory make: *** No rule to make target `../../../../../Make.inc'. Stop. After searching by myself, I can't find any way to go further. Please someone may help me to build rlm_sql_oracle-<fr_version>.so ? Best regards, Vincent MARCEL.

2 1

segfault calling rc_auth()
by dev 03 Feb '16

03 Feb '16

I have an ldap password plugin which calls rc_auth() to authenticate the user/pass combination with a freeradius server. I've used a plugin template from openLDAP and the code from radexample.c (1.1.6 on ubuntu 14.04) for the radius bits. I'm getting segfaults in libc sometimes in kernel.log and not sure what's causing the problem: traps: slapd[5181] general protection ip:7fa35a699c7f sp:7fa353664f90 error:0 in libc-2.19.so[7fa35a602000+1bb000] I have the code on pastebin to help clarify: line 126 (http://pastebin.com/NNzeetz5) Does this seem like an issue in the 1.1.6 freeradiusclient library somehow, or am I doing something boneheaded? Not sure at this point where to start looking for the problem. dmesg only shows the segfault entry and /var/log/freeradius/radius.log says "ldap_search() failed: LDAP connection lost.". The output in debug mode for the ldap server simply terminates as the segfault takes out slapd. Thanks for any help!

3 6

Check LDAP password with SHA512
by Will W. 03 Feb '16

03 Feb '16

Hello All, Trying to get freeradius 3.0.10 setup with LDAP using SHA512 and I am trying to get my head around the new layout. Has anyone had luck getting this working? Thanks Will

7 49

Freeradius Multiple MYSQL User
by Adem Darguner 03 Feb '16

03 Feb '16

Hi Everyone, We have Freeradius and MYSQL databases. I want to make OTP server with Freeradius. I create Mutliuser in the MYSQL radcheck is below. I create different passwords for the same user. I send requests FreeRADIUS with MYSQL but cannot Access-Accept. How can I run for a single user, but multiple password.? For Example: Mutli user "test_1" mysql> select * from radcheck; +--------+-----------+-----------+----+----------+------------+ | id | username | attribute | op | value | unixtime | +--------+-----------+-----------+----+----------+------------+ | 1 | mahmut | Password | := | 53159248 | 1454429830 | | 2 | erdem | Password | := | 712388 | 1454429830 | | 3 | test_1 | Password | := | 679374 | 1454429830 | | 4 | test_1 | Password | := | 955897 | 1454429830 | | 5 | test_1 | Password | := | 740793 | 1454429830 | | 6 | test_1 | Password | := | 571155 | 1454429830 | | 7 | test_1 | Password | := | 924218 | 1454429830 | | 8 | test_1 | Password | := | 496653 | 1454429830 | | 9 | test_1 | Password | := | 886088 | 1454429830 | | 10 | test_1 | Password | := | 195173 | 1454429830 | | 11 | test_1 | Password | := | 410097 | 1454429830 | | 12 | test_1 | Password | := | 778656 | 1454429830 | Thank you Regards. -- Adem DARGÜNER Network Engineer

3 2

Issue with authorisation on Dlink switch
by Viacheslav Gubin 02 Feb '16

02 Feb '16

Got stuck with a strange behaviour : Listening on auth address 10.10.9.5 port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Listening on proxy address * port 36922 Listening on proxy address :: port 52073 Ready to process requests (0) Received Access-Request Id 188 from 10.10.9.10:1044 to 10.10.9.5:1812 length 86 (0) User-Name = "admin" (0) User-Password = "c\375'\364D\212\021\257.?\327\017\336\177W\212" (0) NAS-IP-Address = 10.10.9.10 (0) NAS-Identifier = "Test" (0) NAS-Port-Type = Virtual (0) Service-Type = Framed-User (0) Framed-Protocol = PPP (0) # Executing section authorize from file /etc/raddb/sites-enabled/default (0) authorize { (0) policy filter_username { (0) if (!&User-Name) { (0) if (!&User-Name) -> FALSE (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@.*@/ ) { (0) if (&User-Name =~ /@.*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> FALSE (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (0) if (&User-Name =~ /\.$/) { (0) if (&User-Name =~ /\.$/) -> FALSE (0) if (&User-Name =~ /(a)\./) { (0) if (&User-Name =~ /(a)\./) -> FALSE (0) } # policy filter_username = notfound (0) [preprocess] = ok (0) [chap] = noop (0) [mschap] = noop (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: No '@' in User-Name = "admin", looking up realm NULL (0) suffix: No such realm "NULL" (0) [suffix] = noop (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) files: users: Matched entry DEFAULT at line 181 (0) [files] = ok (0) [expiration] = noop (0) [logintime] = noop (0) pap: WARNING: No "known good" password found for the user. Not setting Auth-Type (0) pap: WARNING: Authentication will fail unless a "known good" password is available (0) [pap] = noop (0) } # authorize = ok (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [admin/c?'? D???.?????W?] (from client switch port 0) (0) WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/raddb/sites-enabled/default (0) Post-Auth-Type REJECT { (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> admin (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 188 from 10.10.9.5:1812 to 10.10.9.10:1044 length 20 Waking up in 3.9 seconds. Waking up in 8.9 seconds. (0) Cleaning up request packet ID 188 with timestamp +48 Ready to process requests (1) Received Access-Request Id 205 from 10.10.9.10:1045 to 10.10.9.5:1812 length 86 (1) User-Name = "admin" (1) User-Password = "\365yo\274\206Oz\203\024/\350\256p\317\312\353" (1) NAS-IP-Address = 10.10.9.10 (1) NAS-Identifier = "test" (1) NAS-Port-Type = Virtual (1) Service-Type = Framed-User (1) Framed-Protocol = PPP (1) # Executing section authorize from file /etc/raddb/sites-enabled/default (1) authorize { (1) policy filter_username { (1) if (!&User-Name) { (1) if (!&User-Name) -> FALSE (1) if (&User-Name =~ / /) { (1) if (&User-Name =~ / /) -> FALSE (1) if (&User-Name =~ /@.*@/ ) { (1) if (&User-Name =~ /@.*@/ ) -> FALSE (1) if (&User-Name =~ /\.\./ ) { (1) if (&User-Name =~ /\.\./ ) -> FALSE (1) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (1) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (1) if (&User-Name =~ /\.$/) { (1) if (&User-Name =~ /\.$/) -> FALSE (1) if (&User-Name =~ /(a)\./) { (1) if (&User-Name =~ /(a)\./) -> FALSE (1) } # policy filter_username = notfound (1) [preprocess] = ok (1) [chap] = noop (1) [mschap] = noop (1) [digest] = noop (1) suffix: Checking for suffix after "@" (1) suffix: No '@' in User-Name = "admin", looking up realm NULL (1) suffix: No such realm "NULL" (1) [suffix] = noop (1) eap: No EAP-Message, not doing EAP (1) [eap] = noop (1) files: users: Matched entry DEFAULT at line 181 (1) [files] = ok (1) [expiration] = noop (1) [logintime] = noop (1) pap: WARNING: No "known good" password found for the user. Not setting Auth-Type (1) pap: WARNING: Authentication will fail unless a "known good" password is available (1) [pap] = noop (1) } # authorize = ok (1) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (1) Failed to authenticate the user (1) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [admin/?yo?? Oz??/??p???] (from client switch port 0) (1) WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! (1) Using Post-Auth-Type Reject (1) # Executing group from file /etc/raddb/sites-enabled/default (1) Post-Auth-Type REJECT { (1) attr_filter.access_reject: EXPAND %{User-Name} (1) attr_filter.access_reject: --> admin (1) attr_filter.access_reject: Matched entry DEFAULT at line 11 (1) [attr_filter.access_reject] = updated (1) [eap] = noop (1) policy remove_reply_message_if_eap { (1) if (&reply:EAP-Message && &reply:Reply-Message) { (1) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (1) else { (1) [noop] = noop (1) } # else = noop (1) } # policy remove_reply_message_if_eap = noop (1) } # Post-Auth-Type REJECT = updated (1) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (1) Sending delayed response (1) Sent Access-Reject Id 205 from 10.10.9.5:1812 to 10.10.9.10:1045 length 20 Waking up in 3.9 seconds. Waking up in 8.9 seconds. (1) Cleaning up request packet ID 205 with timestamp +114 Ready to process requests. Just a few lines make me confused: (1) pap: WARNING: No "known good" password found for the user. Not setting Auth-Type (1) pap: WARNING: Authentication will fail unless a "known good" password is available Here is some lines from config users: user Cleartext-Password := "1234" Dlink-User-Level = 3 1) WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! the secret is 100% correct on both sides..... is is really simple 123..... Got very confused.. I have tried to play around the whole day but could not sort the issue out :(

3 2

freeradius 3, log start/stop users to a syslog
by Fabrizio Fiore Donati 02 Feb '16

02 Feb '16

Hi all, we're migrating freeradius 2 to freeradius3. I need to log to an external syslog when a user go online and offline. In version 2 we use the acclog module, but i can't find in 3. Is it possible to do ? Thanks acctlog { acctlog_update = "" acctlog_start = "Connect: [%{User-Name}] (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} ip %{Framed-IP-Address})" acctlog_stop = "Disconnect: [%{User-Name}] (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} ip %{Framed-IP-Address})" acctlog_on = "NAS %C (%{NAS-IP-Address}) just came online" acctlog_off = "NAS %C (%{NAS-IP-Address}) just went offline" } *--Fabrizio Fiore Donati*

2 2

unlang mapping different users to different authentication source
by James Chen 02 Feb '16

02 Feb '16

Hi! Experts Sorry for wide distributing, we want to use unlang to mapping different users to different authentication module. For example, mapping all users from SSID gold to LDAP module and mapping all users from SSID silver to SQL module. Below is our simple test unlang configuration: if ("%{request:Aruba-Essid-Name}" == "microshield-test" ) { ldap } else { sql } But from the "radius -X” debug message we found the freeREDIUS will still go through both LDAP and SQL module: # Executing section authorize from file /etc/raddb/sites-enabled/default +group authorize { ++? if ("%{request:Aruba-Essid-Name}" == "microshield-test" ) expand: %{request:Aruba-Essid-Name} -> ? Evaluating ("%{request:Aruba-Essid-Name}" == "microshield-test" ) -> FALSE ++? if ("%{request:Aruba-Essid-Name}" == "microshield-test" ) -> FALSE ++else else { [sql] expand: %{User-Name} -> test [sql] sql_set_user escaped user --> 'test' rlm_sql (sql): Reserving sql socket id: 3 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '娴?璇?ㄦ?风' ORDER BY id [sql] User found in group 娴?璇?ㄦ?风 [sql] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '娴?璇?ㄦ?风' ORDER BY id rlm_sql (sql): Released sql socket id: 3 +++[sql] = ok ++} # else else = ok ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop [suffix] No '@' in User-Name = "test", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop [eap] No EAP-Message, not doing EAP ++[eap] = noop ++[files] = noop [sql] expand: %{User-Name} -> test [sql] sql_set_user escaped user --> 'test' rlm_sql (sql): Reserving sql socket id: 2 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test' ORDER BY priority [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '娴?璇?ㄦ?风' ORDER BY id [sql] User found in group 娴?璇?ㄦ?风 [sql] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '娴?璇?ㄦ?风' ORDER BY id rlm_sql (sql): Released sql socket id: 2 ++[sql] = ok [ldap] performing user authorization for test [ldap] expand: (sAMAccountName=%{User-Name}) -> (sAMAccountName=test) [ldap] expand: dc=ms,dc=local -> dc=ms,dc=local [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] attempting LDAP reconnection [ldap] (re)connect to 192.168.254.102:389, authentication 0 [ldap] bind as cn=Administrator,cn=Users,dc=ms,dc=local/1qaz!QAZ to 192.168.254.102:389 [ldap] waiting for bind result ... [ldap] Bind was successful [ldap] performing search in dc=ms,dc=local, with filter (sAMAccountName=test) [ldap] looking for check items in directory... [ldap] looking for reply items in directory... [ldap] Setting Auth-Type = LDAP [ldap] ldap_release_conn: Release Id: 0 ++[ldap] = ok ++[expiration] = noop ++[logintime] = noop [pap] WARNING: Auth-Type already set. Not setting to PAP ++[pap] = noop rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair ++[monthlytrafficcounter] = noop rlm_sqlcounter: Entering module authorize code WARNING: Please replace '%k' with '${key}' sqlcounter_expand: 'SELECT SUM(acctsessiontime - GREATEST((1454256000 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username='%{User-Name}' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1454256000'' [monthlycounter] expand: SELECT SUM(acctsessiontime - GREATEST((1454256000 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username='%{User-Name}' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1454256000' -> SELECT SUM(acctsessiontime - GREATEST((1454256000 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username='test' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1454256000' WARNING: Please replace '%S' with '${sqlmod-inst}' sqlcounter_expand: '%{sql:SELECT SUM(acctsessiontime - GREATEST((1454256000 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username='test' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1454256000'}' [monthlycounter] sql_xlat [monthlycounter] expand: %{User-Name} -> test [monthlycounter] sql_set_user escaped user --> 'test' [monthlycounter] expand: SELECT SUM(acctsessiontime - GREATEST((1454256000 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username='test' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1454256000' -> SELECT SUM(acctsessiontime - GREATEST((1454256000 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username='test' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1454256000' rlm_sql (sql): Reserving sql socket id: 1 [monthlycounter] row[0] returned NULL rlm_sql (sql): Released sql socket id: 1 [monthlycounter] expand: %{sql:SELECT SUM(acctsessiontime - GREATEST((1454256000 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username='test' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1454256000'} -> rlm_sqlcounter: No integer found in string "" ++[monthlycounter] = noop +} # group authorize = ok Found Auth-Type = LDAP # Executing group from file /etc/raddb/sites-enabled/default +group LDAP { [ldap] login attempt by "test" with password "123456" [ldap] user DN: CN=test,CN=Users,DC=ms,DC=local [ldap] (re)connect to 192.168.254.102:389, authentication 1 [ldap] bind as CN=test,CN=Users,DC=ms,DC=local/123456 to 192.168.254.102:389 [ldap] waiting for bind result ... [ldap] Bind was successful [ldap] user test authenticated succesfully ++[ldap] = ok +} # group LDAP = ok # Executing section post-auth from file /etc/raddb/sites-enabled/default +group post-auth { ++? if (control:Auth-Type == 'LDAP') ? Evaluating (control:Auth-Type == 'LDAP') -> TRUE ++? if (control:Auth-Type == 'LDAP') -> TRUE ++if (control:Auth-Type == 'LDAP') { +++update reply { expand: We are using %{control:Auth-Type} authentication -> We are using LDAP authentication +++} # update reply = noop ++} # if (control:Auth-Type == 'LDAP') = noop +} # group post-auth = noop Sending Access-Accept of id 73 to 127.0.0.1 port 51620 Reply-Message = "We are using LDAP authentication" Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 73 with timestamp +4 Ready to process requests. Is this the expected behavior? We want to use only one module depend on request attribute, is this achievable? Thanks for your help! BR! Chen Jiang Microshield Technology Co., Ltd 北京市海淀区西三环北路50号豪柏大厦C2座18-19层 100048 (86)10-88518768 (86)18612696123

3 2

%Z variable or otherwise
by Louis Munro 02 Feb '16

02 Feb '16

Hello, There used to be a %Z variable which held the whole request in FR 2 and older. I understand that it’s gone in FR 3. Is there a way to get the same behaviour in 3.xx with another variable or some other unlang way? I used to send it to a database (with the sql post-auth query) indexed by username / calling station-id so I could look up the exact request after the fact and see all attributes sent by the NAS. ‘%Z’ allowed me to insert it in the database without having to know in advance what attributes would be sent. Thank you for your help, -- Louis Munro lmunro(a)inverse.ca :: www.inverse.ca +1.514.447.4918 x125 :: +1 (866) 353-6153 x125 Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org)

2 2

Make file error on Solaris
by Marco 02 Feb '16

02 Feb '16

Hi, i trying to install the Freeradius Server v3.0.11 on the Solaris 5.10 sparc i have installed latest gnu release of the grep and awk tools, i've also listed their paths on the first position of the PATH to set these as default tools Starting from a fresh installation, these are the steps: # ./configure --prefix=<install-dir> (this seems completed with minor warnings) # gmake CC jlibtool.c HEADER src/include/attributes.h /bin/sh: ATTRIBUTE: not found Usage: grep [OPTION]... PATTERN [FILE]... Try 'grep --help' for more information. /bin/sh: VALUE: not found Usage: grep [OPTION]... PATTERN [FILE]... Try 'grep --help' for more information. HEADER src/include/features.h /bin/sh: s,#[\\t ]*ifdef[\\t ]*" $2 "$,#if "$3 ",g;s,#[\\t ]*ifndef[\\t ]*" $2 "$,#if !"$3 ",g;s,defined(" $2 ")," $3 ",g;"}: not found gmake: *** [src/include/autoconf.sed] Error 1 Usage: grep [OPTION]... PATTERN [FILE]... Try 'grep --help' for more information. it seems related to the processing of the file src/include/all.mk i can't go ahead.... I have a very similar problem with the v3.0.10, while no problems with v2.2.0 & v2.2.9 in the same machine (All works fine on Linux) any advice? Thanks Marco

3 8