Building FreeRADIUS2 on Solaris10
Are there any instructions for building FreeRADIUS2 on Solaris10? (or any prebuilt packages anywhere?) I must comment the state of FreeRADIUS documentation is atrocious, it has taken me days to get our RADIUS implementation up and running due to the amount of outdated or lack of documentation (instead of what could have been hours). The wiki mayaswell not exist as 90% of it is relating to v1 of FreeRADIUS which is no longer maintained, and the configuration of v2 is completely different. Regards Steve -- Steven Carr Systems Development Officer SLS/ITS/Systems - (0191) 515 3953
Steven Carr wrote:
Are there any instructions for building FreeRADIUS2 on Solaris10?
There's an INSTALL file that is included with the software. It contains installation instructions. They work on Linux, *BSD, Solaris, and probably AIX.
(or any prebuilt packages anywhere?)
Sunfreeware doesn't have any.
I must comment the state of FreeRADIUS documentation is atrocious, it has taken me days to get our RADIUS implementation up and running due to the amount of outdated or lack of documentation (instead of what could have been hours).
Perhaps you could try explaining *what* is so atrocious. That might give us an opportunity to fix it. Instead, you've just said "you guys suck", which isn't helpful. And what's so hard about installing it? $ ./configure $ make $ make install $ radiusd -X That's it. After that, if you have OpenSSL installed, the following authentication protocols will work: PAP, CHAP, MS-CHAP, MS-CHAPv2, EAP-MD5, EAP-PEAP, EAP-TTLS (PAP, CHAP, MS-CHAP) If it takes you days to figure something out, perhaps it would be faster to ask questions on this list. Ask *DETAILED* questions. Like "I'm trying to do X, and I expect Y to happen, but instead Z happens".
The wiki mayaswell not exist as 90% of it is relating to v1 of FreeRADIUS which is no longer maintained, and the configuration of v2 is completely different.
Um... no. The *organization* has changed, but the configuration is 95% identical. Alan DeKok.
On 7/7/09 09:53, Alan DeKok wrote:
Perhaps you could try explaining *what* is so atrocious. That might give us an opportunity to fix it. Instead, you've just said "you guys suck", which isn't helpful.
Yes I will admit I am a "newbie" to FreeRADIUS, it is a steep learning curve, RADIUS itself is abit of a dark art, but your documentation does not make this any easier to understand. The documentation doesn't have any real consistency to it, some parts are indepth while others are sparse or just show the default configuration file. The config files may have comments in them that describe what each configuration item does, but there is no overview configuration, a workflow on how all of the configuration files fit together would be good. Under the HOWTO section [http://wiki.freeradius.org/HOWTO] most of the ones on the wiki itself refer to v1 and the offsite ones either no longer exist or are for v1.
And what's so hard about installing it?
$ ./configure $ make $ make install $ radiusd -X
The Build instructions [http://wiki.freeradius.org/Build] for Solaris10 are still for v1 and indicate that extra packages/modifications are needed, but there is no indication if these requirements are still current for v2. This is my reason for asking if there are any instructions, I'd rather know up front if I'm going to run into any potential issues compiling the software.
Um... no. The *organization* has changed, but the configuration is 95% identical.
There are lots of small changes which have been made in the FreeRADIUS code with regards to variables which have not been updated in the documentation, an important one being with the LDAP configuration %{Ldap-UserDn} is no longer valid and %{control:Ldap-UserDn} should be used instead. [http://wiki.freeradius.org/Rlm_ldap] still refers to the old variable, although the latest source code does have this corrected in the radiusd.conf file, the version which I am testing with on Debian (2.0.4) did not and so it broke, looking at the wiki showed the same information as was already present in my config file, it was only by searching deeper that I found this configuration to be incorrect. Steve -- Steven Carr Systems Development Officer SLS/ITS/Systems - (0191) 515 3953
Steven Carr wrote:
The documentation doesn't have any real consistency to it, some parts are indepth while others are sparse or just show the default configuration file. The config files may have comments in them that describe what each configuration item does, but there is no overview configuration, a workflow on how all of the configuration files fit together would be good.
doc/aaa.txt is a start. Also raddb/sites-available/README
Under the HOWTO section [http://wiki.freeradius.org/HOWTO] most of the ones on the wiki itself refer to v1 and the offsite ones either no longer exist or are for v1.
We had people complaining recently that most of the content on the Wiki was for v2, and that documentation for v1 was hard to find. I think the confusion is that there are *very* few differences between the two versions. The documentation for one applies 95% to the other.
The Build instructions [http://wiki.freeradius.org/Build] for Solaris10 are still for v1 and indicate that extra packages/modifications are needed, but there is no indication if these requirements are still current for v2.
The comments for Solaris are (a) fixing Solaris so that it can compile programs, and (b) setting LD_LIBRARY_PATH to point to any locally installed libraries (ldap, mysql, etc.) These are *not* FreeRADIUS issues. That Wiki page also says that the configure/make/make install process works for Solaris.
There are lots of small changes which have been made in the FreeRADIUS code with regards to variables which have not been updated in the documentation, an important one being with the LDAP configuration %{Ldap-UserDn} is no longer valid and %{control:Ldap-UserDn} should be used instead. [http://wiki.freeradius.org/Rlm_ldap] still refers to the old variable, although the latest source code does have this corrected in the radiusd.conf file, the version which I am testing with on Debian (2.0.4) did not and so it broke, looking at the wiki showed the same information as was already present in my config file, it was only by searching deeper that I found this configuration to be incorrect.
Well... the most recent version has the most up to date documentation. If you want a Wiki account to update the howto's, it's easy enough to get you one. Alan DeKok.
participants (2)
-
Alan DeKok -
Steven Carr