Debian 12 libldap\GnuTLS when using NetworkRadius packages
When installing freeRADIUS from NetworkRadius to Debian 12, I get this warning: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! libldap is using GnuTLS, while FreeRADIUS is using OpenSSL !! There may be random issues with TLS connections due to this conflict. !! The server may also crash. !! See https://wiki.freeradius.org/modules/Rlm_ldap for more information. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Any suggestions where to get \ how to build libldap for debian linked to OpenSSL ?
On Feb 15, 2025, at 12:11 PM, Alexey D. Filimonov <alexey@filimonic.net> wrote:
When installing freeRADIUS from NetworkRadius to Debian 12, I get this warning:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! libldap is using GnuTLS, while FreeRADIUS is using OpenSSL !! There may be random issues with TLS connections due to this conflict. !! The server may also crash. !! See https://wiki.freeradius.org/modules/Rlm_ldap for more information. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Any suggestions where to get \ how to build libldap for debian linked to OpenSSL ?
https://ltb-project.org/download.html The underlying issue is that GnuTLS and OpenSSL are not compatible. An application has to be linked to only one at a time, and can't link to both. Since GnuTLS is lacking may features which OpenSSL has, FreeRADIUS can't switch to using GnuTLS. It might be possible (perhaps) to hack it so that it builds with GnuTLS, and simply discards any features which aren't supported. But that would be a lot of work. It could also make FreeRADIUS incompatible with many EAP implementations. The much simpler approach is to just switch to a version of libldap which uses OpenSSL. Alan DeKok.
Thank you, Alan. On 2025-02-15 20:19, Alan DeKok wrote:
On Feb 15, 2025, at 12:11 PM, Alexey D. Filimonov <alexey@filimonic.net> wrote:
When installing freeRADIUS from NetworkRadius to Debian 12, I get this warning:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !! libldap is using GnuTLS, while FreeRADIUS is using OpenSSL !! There may be random issues with TLS connections due to this conflict. !! The server may also crash. !! See https://wiki.freeradius.org/modules/Rlm_ldap for more information. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Any suggestions where to get \ how to build libldap for debian linked to OpenSSL ? https://ltb-project.org/download.html
The underlying issue is that GnuTLS and OpenSSL are not compatible. An application has to be linked to only one at a time, and can't link to both.
Since GnuTLS is lacking may features which OpenSSL has, FreeRADIUS can't switch to using GnuTLS. It might be possible (perhaps) to hack it so that it builds with GnuTLS, and simply discards any features which aren't supported. But that would be a lot of work. It could also make FreeRADIUS incompatible with many EAP implementations.
The much simpler approach is to just switch to a version of libldap which uses OpenSSL.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sat, Feb 15, 2025 at 12:19:27PM -0500, Alan DeKok wrote:
On Feb 15, 2025, at 12:11 PM, Alexey D. Filimonov <alexey@filimonic.net> wrote:
When installing freeRADIUS from NetworkRadius to Debian 12, I get this warning:
...
Any suggestions where to get \ how to build libldap for debian linked to OpenSSL ?
Which is now already done for Debian trixie/testing, as proposed in: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1089629#25
The underlying issue is that GnuTLS and OpenSSL are not compatible. An application has to be linked to only one at a time, and can't link to both. ... The much simpler approach is to just switch to a version of libldap which uses OpenSSL.
Greetings Hermann -- Administration/Zentrale Dienste, Interdiziplinaeres Zentrum fuer wissenschaftliches Rechnen der Universitaet Heidelberg IWR; INF 205; 69120 Heidelberg; Tel: (06221)54-14405 Fax: -14427 Email: Hermann.Lauer@iwr.uni-heidelberg.de
participants (3)
-
Alan DeKok -
Alexey D. Filimonov -
Hermann.Lauer＠uni-heidelberg.de