Installing FreeRADIUS from source on macOS
Hi, has anyone successfully installed FreeRADIUS 3.x and it’s dependencies from source on macOS Mojave (or previous versions)? More specifically, I’m primarily interested in using FR for authenticating against Open Directory. I’d prefer not to use Homebrew to install because I already use Macports (unfortunately there isn’t a 3.x build available yet). The wiki instructions: https://wiki.freeradius.org/building/macOS are very straight forward but don't include some of the configure flags ('--with-talloc-lib-dir --with-talloc-include-dir= --with-openssl-lib-dir= --with-openssl-include-dir’) included in the Homebrew formula: https://github.com/Homebrew/homebrew-core/blob/master/Formula/freeradius-ser... Also, Apple's Makefile of FreeRADIUS 2.2 included in the Server App has a few other configure flags ('--disable-static --enable-shared --enable-ltdl-install=yes --without-rlm_perl --without-rlm_sql_mysql') as well as some CC and LD flags which I’m thinking could still be relevant: https://opensource.apple.com/source/freeradius/freeradius-42/Makefile.auto.h...). It would appear OD support is an ’experimental’ feature in FR 3.x so I believe '--with-experimental-modules’ is needed at the very least. -- Palvelin.fi Hostmaster postmaster@palvelin.fi
--On 11. Oktober 2018 um 11:22:28 +0300 Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
has anyone successfully installed FreeRADIUS 3.x and it’s dependencies from source on macOS Mojave (or previous versions)? More specifically, I’m primarily interested in using FR for authenticating against Open Directory.
I’d prefer not to use Homebrew to install because I already use Macports (unfortunately there isn’t a 3.x build available yet).
The wiki instructions: https://wiki.freeradius.org/building/macOS are very straight forward but don't include some of the configure flags ('--with-talloc-lib-dir --with-talloc-include-dir= --with-openssl-lib-dir= --with-openssl-include-dir’) included in the Homebrew formula: https://github.com/Homebrew/homebrew-core/blob/master/Formula/freeradius- server.rb
Also, Apple's Makefile of FreeRADIUS 2.2 included in the Server App has a few other configure flags ('--disable-static --enable-shared --enable-ltdl-install=yes --without-rlm_perl --without-rlm_sql_mysql') as well as some CC and LD flags which I’m thinking could still be relevant: https://opensource.apple.com/source/freeradius/freeradius-42/Makefile.aut o.html).
It would appear OD support is an ’experimental’ feature in FR 3.x so I believe '--with-experimental-modules’ is needed at the very least.
Apple has recently published this guide that also covers FR 3 with OD: <https://developer.apple.com/support/macos-server/macOS-Server-Service-Migration-Guide.pdf> I haven't tried it myself. -- .:.Sebastian Hagedorn - Weyertal 121 (Gebäude 133), Zimmer 2.02.:. .:.Regionales Rechenzentrum (RRZK).:. .:.Universität zu Köln / Cologne University - ✆ +49-221-470-89578.:.
On 11 Oct 2018, at 11:37, Sebastian Hagedorn <Hagedorn@uni-koeln.de> wrote:
--On 11. Oktober 2018 um 11:22:28 +0300 Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
has anyone successfully installed FreeRADIUS 3.x and it’s dependencies from source on macOS Mojave (or previous versions)? More specifically, I’m primarily interested in using FR for authenticating against Open Directory.
I’d prefer not to use Homebrew to install because I already use Macports (unfortunately there isn’t a 3.x build available yet).
The wiki instructions: https://wiki.freeradius.org/building/macOS are very straight forward but don't include some of the configure flags ('--with-talloc-lib-dir --with-talloc-include-dir= --with-openssl-lib-dir= --with-openssl-include-dir’) included in the Homebrew formula: https://github.com/Homebrew/homebrew-core/blob/master/Formula/freeradius- server.rb
Also, Apple's Makefile of FreeRADIUS 2.2 included in the Server App has a few other configure flags ('--disable-static --enable-shared --enable-ltdl-install=yes --without-rlm_perl --without-rlm_sql_mysql') as well as some CC and LD flags which I’m thinking could still be relevant: https://opensource.apple.com/source/freeradius/freeradius-42/Makefile.aut o.html).
It would appear OD support is an ’experimental’ feature in FR 3.x so I believe '--with-experimental-modules’ is needed at the very least.
Apple has recently published this guide that also covers FR 3 with OD:
<https://developer.apple.com/support/macos-server/macOS-Server-Service-Migration-Guide.pdf>
Awesome, thanks for pointing this out Sebastian! I’ll take a better look at it but looks very promising. -- Palvelin.fi Hostmaster postmaster@palvelin.fi
Magic! thanks for the doc. Usually use homebrew ffor stuff but good info to know A On Thu, 11 Oct 2018 at 09:42, Palvelin Postmaster via Freeradius-Users < freeradius-users@lists.freeradius.org> wrote:
On 11 Oct 2018, at 11:37, Sebastian Hagedorn <Hagedorn@uni-koeln.de> wrote:
--On 11. Oktober 2018 um 11:22:28 +0300 Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
has anyone successfully installed FreeRADIUS 3.x and it’s dependencies from source on macOS Mojave (or previous versions)? More specifically, I’m primarily interested in using FR for authenticating against Open Directory.
I’d prefer not to use Homebrew to install because I already use Macports (unfortunately there isn’t a 3.x build available yet).
The wiki instructions: https://wiki.freeradius.org/building/macOS are very straight forward but don't include some of the configure flags ('--with-talloc-lib-dir --with-talloc-include-dir= --with-openssl-lib-dir= --with-openssl-include-dir’) included in the Homebrew formula:
https://github.com/Homebrew/homebrew-core/blob/master/Formula/freeradius-
server.rb
Also, Apple's Makefile of FreeRADIUS 2.2 included in the Server App has a few other configure flags ('--disable-static --enable-shared --enable-ltdl-install=yes --without-rlm_perl --without-rlm_sql_mysql') as well as some CC and LD flags which I’m thinking could still be relevant:
https://opensource.apple.com/source/freeradius/freeradius-42/Makefile.aut
o.html).
It would appear OD support is an ’experimental’ feature in FR 3.x so I believe '--with-experimental-modules’ is needed at the very least.
Apple has recently published this guide that also covers FR 3 with OD:
< https://developer.apple.com/support/macos-server/macOS-Server-Service-Migrat...
Awesome, thanks for pointing this out Sebastian! I’ll take a better look at it but looks very promising.
-- Palvelin.fi Hostmaster postmaster@palvelin.fi
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Oct 11, 2018, at 4:37 AM, Sebastian Hagedorn <Hagedorn@uni-koeln.de> wrote:
Apple has recently published this guide that also covers FR 3 with OD:
<https://developer.apple.com/support/macos-server/macOS-Server-Service-Migration-Guide.pdf>
It looks to be reasonable. I've added a link to it from the "opendirectory" module configuration. Alan DeKok.
On 11 Oct 2018, at 16:03, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 11, 2018, at 4:37 AM, Sebastian Hagedorn <Hagedorn@uni-koeln.de> wrote:
Apple has recently published this guide that also covers FR 3 with OD:
<https://developer.apple.com/support/macos-server/macOS-Server-Service-Migration-Guide.pdf>
It looks to be reasonable. I've added a link to it from the "opendirectory" module configuration.
Having read this, I have some concerns, Quote 1 from the RADIUS section: "Converting to the open source version allows continued authentication for all current users with password type RECOVERABLE. New users won’t be able to use FreeRADIUS." Quote 2: "Adding a user to freeRadius: Add new users of the radius service through the Server.app. This will require that the user’s password be stored in a less secure manner." These quotes are both confusing and conflicting. On one hand it bluntly states "new users" won’t be able to use FreeRADIUS. New how? Added after upgrading to macOS Mojave? On the other hand it also instructs adding new users via OD. Additionally, it discusses storing passwords ”in a less secure manner” which, I’m guessing, refers to using Crypt or Shadow password types instead of OD type. This would be, of course, less desirable, but based on my initial research it looks like it’s also impossible because macOS Mojave’s OD service doesn’t allow selection of password type anymore. Can anyone offer any insights? -- Palvelin.fi Hostmaster postmaster@palvelin.fi
On Oct 12, 2018, at 2:26 AM, Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
These quotes are both confusing and conflicting. On one hand it bluntly states "new users" won’t be able to use FreeRADIUS. New how? Added after upgrading to macOS Mojave? On the other hand it also instructs adding new users via OD.
I suspect that adding users to OpenDirectory will be fine.
Additionally, it discusses storing passwords ”in a less secure manner” which, I’m guessing, refers to using Crypt or Shadow password types instead of OD type. This would be, of course, less desirable, but based on my initial research it looks like it’s also impossible because macOS Mojave’s OD service doesn’t allow selection of password type anymore.
That means PEAP won't work. But TTLS + PAP will work. Alan DeKok.
that should be okay with 3.0.17 rather than the documented 3.0.0 - would be interesting to know if there *are* any issues that have affected OSX since 3.0.0 (and with OpenSSL 1.1.1 rather than 1.1.0e ) alan
On 11 Oct 2018, at 11:37, Sebastian Hagedorn <Hagedorn@uni-koeln.de> wrote:
--On 11. Oktober 2018 um 11:22:28 +0300 Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
has anyone successfully installed FreeRADIUS 3.x and it’s dependencies from source on macOS Mojave (or previous versions)? More specifically, I’m primarily interested in using FR for authenticating against Open Directory.
I’d prefer not to use Homebrew to install because I already use Macports (unfortunately there isn’t a 3.x build available yet).
The wiki instructions: https://wiki.freeradius.org/building/macOS are very straight forward but don't include some of the configure flags ('--with-talloc-lib-dir --with-talloc-include-dir= --with-openssl-lib-dir= --with-openssl-include-dir’) included in the Homebrew formula: https://github.com/Homebrew/homebrew-core/blob/master/Formula/freeradius- server.rb
Also, Apple's Makefile of FreeRADIUS 2.2 included in the Server App has a few other configure flags ('--disable-static --enable-shared --enable-ltdl-install=yes --without-rlm_perl --without-rlm_sql_mysql') as well as some CC and LD flags which I’m thinking could still be relevant: https://opensource.apple.com/source/freeradius/freeradius-42/Makefile.aut o.html).
It would appear OD support is an ’experimental’ feature in FR 3.x so I believe '--with-experimental-modules’ is needed at the very least.
Apple has recently published this guide that also covers FR 3 with OD:
<https://developer.apple.com/support/macos-server/macOS-Server-Service-Migration-Guide.pdf>
I’m trying to follow these instructions with the exception of having openssl already installed via macports. I can successfully install talloc and freeradius like so: ./configure --prefix=/usr/local/talloc --without-gettext && make && sudo make install ./configure --prefix=/usr/local/freeradius --localstatedir=/var --with-talloc-lib-dir=/usr/local/talloc/lib/ --with-talloc-include-dir=/usr/local/talloc/include/ --with-openssl-lib-dir=/opt/local/lib --with-openssl-include-dir=/opt/local/include/ --enable-developer=yes && make && sudo make install However, executing radiusd -XC gives error: dyld: Library not loaded: /Users/admin/src/talloc-2.1.14/bin/default/libtalloc.inst.dylib Referenced from: /usr/local/freeradius/sbin/radiusd Looks like freeradius is linking against talloc library in the source code directory instead of /usr/local/talloc. I wonder why? -- Palvelin.fi Hostmaster postmaster@palvelin.fi
On Oct 13, 2018, at 6:10 AM, Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I’m trying to follow these instructions with the exception of having openssl already installed via macports. I can successfully install talloc and freeradius like so:
./configure --prefix=/usr/local/talloc --without-gettext && make && sudo make install
./configure --prefix=/usr/local/freeradius --localstatedir=/var --with-talloc-lib-dir=/usr/local/talloc/lib/ --with-talloc-include-dir=/usr/local/talloc/include/ --with-openssl-lib-dir=/opt/local/lib --with-openssl-include-dir=/opt/local/include/ --enable-developer=yes && make && sudo make install
However, executing radiusd -XC gives error:
dyld: Library not loaded: /Users/admin/src/talloc-2.1.14/bin/default/libtalloc.inst.dylib Referenced from: /usr/local/freeradius/sbin/radiusd
Looks like freeradius is linking against talloc library in the source code directory instead of /usr/local/talloc. I wonder why?
That's weird. See the Make.inc file to see which talloc it's linking against. I build on OSX every day. I just install talloc via homebrew, and it just works. Alan DeKok.
On 13 Oct 2018, at 16:10, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 13, 2018, at 6:10 AM, Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I’m trying to follow these instructions with the exception of having openssl already installed via macports. I can successfully install talloc and freeradius like so:
./configure --prefix=/usr/local/talloc --without-gettext && make && sudo make install
./configure --prefix=/usr/local/freeradius --localstatedir=/var --with-talloc-lib-dir=/usr/local/talloc/lib/ --with-talloc-include-dir=/usr/local/talloc/include/ --with-openssl-lib-dir=/opt/local/lib --with-openssl-include-dir=/opt/local/include/ --enable-developer=yes && make && sudo make install
However, executing radiusd -XC gives error:
dyld: Library not loaded: /Users/admin/src/talloc-2.1.14/bin/default/libtalloc.inst.dylib Referenced from: /usr/local/freeradius/sbin/radiusd
Looks like freeradius is linking against talloc library in the source code directory instead of /usr/local/talloc. I wonder why?
That's weird. See the Make.inc file to see which talloc it's linking against.
I build on OSX every day. I just install talloc via homebrew, and it just works.
Everything in Freeradius’ Make.inc points to /usr/local/talloc and there’s no reference to /Users/admin/src in any FR source file. Maybe the problem is with talloc? Weirdly enough, the Homebrew configure options look more or less identical to mine with the exception of a different —prefix. -- Palvelin.fi Hostmaster postmaster@palvelin.fi
On 13 Oct 2018, at 17:35, Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
On 13 Oct 2018, at 16:10, Alan DeKok <aland@deployingradius.com> wrote:
On Oct 13, 2018, at 6:10 AM, Palvelin Postmaster via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I’m trying to follow these instructions with the exception of having openssl already installed via macports. I can successfully install talloc and freeradius like so:
./configure --prefix=/usr/local/talloc --without-gettext && make && sudo make install
./configure --prefix=/usr/local/freeradius --localstatedir=/var --with-talloc-lib-dir=/usr/local/talloc/lib/ --with-talloc-include-dir=/usr/local/talloc/include/ --with-openssl-lib-dir=/opt/local/lib --with-openssl-include-dir=/opt/local/include/ --enable-developer=yes && make && sudo make install
However, executing radiusd -XC gives error:
dyld: Library not loaded: /Users/admin/src/talloc-2.1.14/bin/default/libtalloc.inst.dylib Referenced from: /usr/local/freeradius/sbin/radiusd
Looks like freeradius is linking against talloc library in the source code directory instead of /usr/local/talloc. I wonder why?
That's weird. See the Make.inc file to see which talloc it's linking against.
I build on OSX every day. I just install talloc via homebrew, and it just works.
Everything in Freeradius’ Make.inc points to /usr/local/talloc and there’s no reference to /Users/admin/src in any FR source file.
Maybe the problem is with talloc? Weirdly enough, the Homebrew configure options look more or less identical to mine with the exception of a different —prefix.
Okay, looks like installing talloc libraries to a non-standard location was the key. https://developer.apple.com/library/archive/documentation/DeveloperTools/Con... -- Palvelin.fi Hostmaster postmaster@palvelin.fi
participants (5)
-
Alan Buxey -
Alan DeKok -
Alex Sharaz -
Palvelin Postmaster -
Sebastian Hagedorn