Hi, Just starting with freeradius. I'm confused about installation directories. I'm trying to install freeradius on debian stable. When I install using apt-get (installs 1.0.2 currently), I get freeradius installed in /etc/freeradius. When I install the same version using the tar.gz it gets installed in /usr/local/etc/raddb/ Why is that? The docs show me that /etc/freeradius is the new installation dir. If I want to use the tar.gz and compile myself, do I have to change the dir's by hand or is there an easier way to do this? I've looked into the debian directory in the tarball, but it doesn't learn me anything about this. Can someone point me to the right direction? Many tnx yves
YvesDM <ydmlog@gmail.com> wrote:
When I install using apt-get (installs 1.0.2 currently), I get freeradius installed in /etc/freeradius. When I install the same version using the tar.gz it gets installed in /usr/local/etc/raddb/
If you're building on debian, there is a "debian" directory in the tar.gz file. The files there should be used to build a local debian package.
Why is that?
FreeRADIUS builds on systems other than debian.
I've looked into the debian directory in the tarball, but it doesn't learn me anything about this.
There should be a README there, saying what to do, I guess. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
On 8/11/06, Alan DeKok <aland@deployingradius.com> wrote:
YvesDM <ydmlog@gmail.com> wrote:
When I install using apt-get (installs 1.0.2 currently), I get freeradius installed in /etc/freeradius. When I install the same version using the tar.gz it gets installed in /usr/local/etc/raddb/
If you're building on debian, there is a "debian" directory in the tar.gz file. The files there should be used to build a local debian package.
Like I answered to Stephen, I will need to do some research on how to do this.
I've looked into the debian directory in the tarball, but it doesn't learn
me anything about this.
There should be a README there, saying what to do, I guess.
Yes there is, it contains info about directory changes when building the deb package PS Alan, any idea yet when "the deploying radius book" will be available? Many tnx Yves
Can someone point me to the right direction?
There's a configure switch that allows you to specify the configuration directory. Stefan -- Stefan WINTER RESTENA Foundation - Réseau Téléinformatique de l'Education Nationale et de la Recherche R&D Engineer 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg email: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Hello, I'm using poptop to authenticate in freeradius. Freeradius is autenticating on a Active Directory using NTLM and it is working fine. (MS-CHAPv2 + MPPE 128bits ) But, I would like to fix ip address by username in my vpn connection. I know that "NAS-IP-Address" is the way, but where can I set this parameter? All my vpn users are located on Active Directory (Windows 2003 Std) Is it possible to send NAS-IP-Address parameter when I'm using NTML authenticantion? And... How can I do it? :) Thanks in advanced! Domingo Rodriguez
"Domingo Antonio" <domingo@netcomp.com.br> wrote:
Is it possible to send NAS-IP-Address parameter when I'm using NTML authenticantion?
No. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Hi,
But, I would like to fix ip address by username in my vpn connection. I know that "NAS-IP-Address" is the way, but where can I set this parameter?
No, that's not the way. You want to send the attribute Framed-IP-Address in your Access-Accept. Add for each user in the users file username Framed-IP-Address := 1.2.3.4 and make sure the files module is active in your configuration. Greetings, Stefan Winter -- Stefan WINTER Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche - Ingénieur de recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg
Stefan, Your tip is rigth!! ;) Also we need to add "Auth-Type := MS-CHAP" in /etc/raddb/users, like this: curso01 Auth-Type := MS-CHAP Framed-IP-Address = 192.168.27.10, Framed-IP-Netmask = 255.255.255.0 And the password authentication is delivered to ntlm ;) Thanks a lot! Domingo -----Mensagem original----- De: freeradius-users-bounces+domingo=netcomp.com.br@lists.freeradius.org [mailto:freeradius-users-bounces+domingo=netcomp.com.br@lists.freeradius.org ] Em nome de Stefan Winter Enviada em: sexta-feira, 11 de agosto de 2006 15:02 Para: FreeRadius users mailing list Assunto: Re: NTLM Authentication and send NAS-IP-Address param. Hi,
But, I would like to fix ip address by username in my vpn connection. I know that "NAS-IP-Address" is the way, but where can I set this parameter?
No, that's not the way. You want to send the attribute Framed-IP-Address in your Access-Accept. Add for each user in the users file username Framed-IP-Address := 1.2.3.4 and make sure the files module is active in your configuration. Greetings, Stefan Winter -- Stefan WINTER Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche - Ingénieur de recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Domingo Antonio" <domingo@netcomp.com.br> wrote:
Also we need to add "Auth-Type := MS-CHAP" in /etc/raddb/users, like this:
No, you don't. If you configure ntlm_auth in the mschap module, the default configuration of the server is to run the mschap module, and thus ntlm, when it receives MS-CHAP requests. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
On Fri, Aug 11, 2006 at 04:00:49PM +0200, YvesDM said:
Hi,
Just starting with freeradius. I'm confused about installation directories. I'm trying to install freeradius on debian stable. When I install using apt-get (installs 1.0.2 currently), I get freeradius installed in /etc/freeradius. When I install the same version using the tar.gz it gets installed in /usr/local/etc/raddb/ Why is that? The docs show me that /etc/freeradius is the new installation dir. If I want to use the tar.gz and compile myself, do I have to change the dir's by hand or is there an easier way to do this? I've looked into the debian directory in the tarball, but it doesn't learn me anything about this. Can someone point me to the right direction?
Take a look at the file debian/rules in the tarball. It is the Makefile for building debian packages from the tarball. Several options are passed to ./configure to make it install various directories in their various places. That should give you a start. -- -------------------------------------------------------------------------- | Stephen Gran | I'd be a poorer man if I'd never seen | | steve@lobefin.net | an eagle fly. -- John Denver [I saw | | http://www.lobefin.net/~steve | an eagle fly once. Fortunately, I had | | | my eagle fly swatter handy. Ed.] | --------------------------------------------------------------------------
On 8/11/06, Stephen Gran <steve@lobefin.net> wrote:
Take a look at the file debian/rules in the tarball. It is the Makefile for building debian packages from the tarball. Several options are passed to ./configure to make it install various directories in their various places. That should give you a start.
Tnx Stephen, though I never needed to built .deb's myself, so I will have to do some research on how to do this. Hints are always welcome of course. Many tnx. Yves
Le Fri, Aug 11, 2006 at 08:56:34PM +0200, YvesDM ecrivait:
On 8/11/06, Stephen Gran <steve@lobefin.net> wrote:
Take a look at the file debian/rules in the tarball. It is the Makefile for building debian packages from the tarball. Several options are passed to ./configure to make it install various directories in their various places. That should give you a start.
Tnx Stephen, though I never needed to built .deb's myself, so I will have to do some research on how to do this. Hints are always welcome of course.
As it is said here: http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#How_do_I_build_a_De... you should: - cd /usr/local/src - wget ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.2.tar.gz - tar xzf freeradius-1.1.2.tar.gz - cd freeradius-1.1.2 - fakeroot dpkg-buildpackage -b -uc - it will fail, complaining about missing dependencies - apt-get install debhelper dpatch autotools-dev libltdl3-dev libpam0g-dev libmysqlclient12-dev libgdbm-dev libldap2-dev libsasl2-dev libiodbc2-dev libkrb5-dev libperl-dev snmp libsnmp5-dev postgresql-dev libssl-dev (you don't need them all, you might want to remove some of them, but you'll have to edit debian/rules to remove the unwanted modules) - fakeroot dpkg-buildpackage -b -uc - cd .. Building all the modules will give: freeradius-dialupadmin_1.1.2-0_all.deb freeradius-krb5_1.1.2-0_i386.deb freeradius_1.1.2-0_i386.deb freeradius-postgresql_1.1.2-0_i386.deb freeradius-mysql_1.1.2-0_i386.deb freeradius-ldap_1.1.2-0_i386.deb freeradius-iodbc_1.1.2-0_i386.deb make your choice and dpkg -i the wanted debs. You'll get all the conf files into /etc/freeradius/ Regards, Fox.
On Fri, Aug 11, 2006 at 11:17:23PM +0200, Francois-Xavier GAILLARD said:
- fakeroot dpkg-buildpackage -b -uc
to be pedantic: dpkg-buildpackage -rfakeroot -b -uc only uses fakeroot when it is necessary to have pretend root, instead of all the time. It makes it easier to run clean and so forth.
- apt-get install debhelper dpatch autotools-dev libltdl3-dev libpam0g-dev libmysqlclient12-dev libgdbm-dev libldap2-dev libsasl2-dev libiodbc2-dev libkrb5-dev libperl-dev snmp libsnmp5-dev postgresql-dev libssl-dev (you don't need them all, you might want to remove some of them, but you'll have to edit debian/rules to remove the unwanted modules)
apt-get build-dep freeradius is so much easier :) But I'm being a pedant, I think. -- -------------------------------------------------------------------------- | Stephen Gran | Loni Anderson's hair should be | | steve@lobefin.net | LEGALIZED!! | | http://www.lobefin.net/~steve | | --------------------------------------------------------------------------
On 8/12/06, Francois-Xavier GAILLARD <fx.gaillard@thefox.com.fr> wrote:
Le Sat, Aug 12, 2006 at 01:55:20AM +0100, Stephen Gran ecrivait:
apt-get build-dep freeradius is so much easier :)
But I'm being a pedant, I think.
No, you're being right :)
Thank you both Stephen&fox for this explanation! I 'll try it out Sincerely, Yves
participants (6)
-
Alan DeKok -
Domingo Antonio -
Francois-Xavier GAILLARD -
Stefan Winter -
Stephen Gran -
YvesDM