[freeradius-server 3.0.8] errors while compiling
hey, I'm trying to install freeradius-server 3.0.8. I installed successfully talloc 2.1.0 but when I do ./configure in order to install freeradius I have these errors and warnings configure: WARNING: snmpget not found - Simultaneous-Use and checkrad may not work configure: WARNING: snmpwalk not found - Simultaneous-Use and checkrad may not work configure: WARNING: pcap library not found, silently disabling the RADIUS sniffer, and ARP listener. Use --with-pc ap-lib-dir=<path>. configure: WARNING: collectdclient library not found. Use --with-collectdclient-lib-dir=<path>. configure: WARNING: cap library not found, debugger checks will not be enabled. Use --with-cap-lib-dir=<path>. configure: error: in `/root/freeradius-server-3.0.8': configure: error: failed linking to libcrypto. Use --with-openssl-lib-dir=<path>, or --with-openssl=no (builds with out OpenSSL) See `config.log' for more details you can find the complete output of the compilation in the file attached. I'm running on centOS 7.
Read the errors. Decide if you care. If not needing snmp functions eg for simultaneous usage checking, or pcap for packet capture or mysql support etc then don't install the required development library packages for your distro. Alan
On Jun 9, 2015, at 12:26 PM, Alan Buxey <A.L.M.Buxey@LBORO.AC.UK> wrote:
Read the errors. Decide if you care. If not needing snmp functions eg for simultaneous usage checking, or pcap for packet capture or mysql support etc then don't install the required development library packages for your distro.
I think the actual error was: configure: error: in `/root/freeradius-server-3.0.8': configure: error: failed linking to libcrypto. Use --with-openssl-lib-dir=<path>, or --with-openssl=no (builds with out OpenSSL) Which is weird. We'd need the config.log file to see what the error was. -Arran
With FR you may have the openssl development/includes present now or it won't build (unless you don't care about eg EAP stuff in which case you can use the no flag as per the output) If you have self installed openssl then you need to ensure its in your build path. alan
Thank you for your responses, I agree with Arran, I think the error is related to the openssl even if i'm not sure (you're the specialists here). For the config.log please find it attached. For the openssl it was installed after a yum update (which I did before building FR and I'm afraid i didn't include it in my build path) how can I fix this? 2015-06-09 18:54 GMT+02:00 Alan Buxey <A.L.M.Buxey@lboro.ac.uk>:
With FR you may have the openssl development/includes present now or it won't build (unless you don't care about eg EAP stuff in which case you can use the no flag as per the output)
If you have self installed openssl then you need to ensure its in your build path.
alan
yes it is installed 2015-06-10 10:55 GMT+02:00 <A.L.M.Buxey@lboro.ac.uk>:
Hi,
For the openssl it was installed after a yum update (which I did before building FR and I'm afraid i didn't include it in my build path) how can I fix this?
if using packages then the system does all this for you - you have openssl-devel installed?
alan
I persued the installation with the flag --with-openssl=no and at the end of my make && make install I got the error /usr/loal/etc/raddb already exist. weird isn't it. 2015-06-10 10:58 GMT+02:00 ICHIBA Sara <ichi.sara@gmail.com>:
yes it is installed
2015-06-10 10:55 GMT+02:00 <A.L.M.Buxey@lboro.ac.uk>:
Hi,
For the openssl it was installed after a yum update (which I did before building FR and I'm afraid i didn't include it in my build path) how can I fix this?
if using packages then the system does all this for you - you have openssl-devel installed?
alan
Updates:: I deleted the /usr/loal/etc/raddb and did again make && make install. this time everything was good. and among the outputs of these commands I found: INSTALL raddb/certs/Makefile INSTALL raddb/certs/README INSTALL raddb/certs/xpextensions INSTALL raddb/certs/ca.cnf INSTALL raddb/certs/server.cnf INSTALL raddb/certs/client.cnf BOOTSTRAP raddb/certs/ gmake[1] : on entre dans le répertoire « /usr/local/etc/raddb/certs » gmake[1] : on quitte le répertoire « /usr/local/etc/raddb/certs » gmake[1] : on entre dans le répertoire « /usr/local/etc/raddb/certs » openssl dhparam -out dh 1024 Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time ..............+......................................................................................................+..........................................................................................................+.............................................................+..............+..................................................+....................................................+......................................................+................+......................................................+....................................................................+.......+...................................................................+...............................................................................................................................................................................................................................................................................+..........................................................................+............................................................................+..+..............+..+.......................+...............................................................................+......+.........++*++*++* openssl req -new -out server.csr -keyout server.key -config ./server.cnf Generating a 2048 bit RSA private key ....................+++ .+++ writing new private key to 'server.key' ----- openssl req -new -x509 -keyout ca.key -out ca.pem \ -days '60' -config ./ca.cnf Generating a 2048 bit RSA private key ..................+++ ............................................................................+++ writing new private key to 'ca.key' ----- openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr -key 'whatever' -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf Using configuration from ./server.cnf Check that the request matches the signature Signature ok Certificate Details: Serial Number: 1 (0x1) Validity Not Before: Jun 10 09:48:53 2015 GMT Not After : Aug 9 09:48:53 2015 GMT Subject: countryName = FR stateOrProvinceName = Radius organizationName = Example Inc. commonName = Example Server Certificate emailAddress = admin@example.com X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 CRL Distribution Points: Full Name: URI:http://www.example.com/example_ca.crl Certificate is to be certified until Aug 9 09:48:53 2015 GMT (60 days) 2015-06-10 11:48 GMT+02:00 ICHIBA Sara <ichi.sara@gmail.com>:
I persued the installation with the flag --with-openssl=no and at the end of my make && make install I got the error /usr/loal/etc/raddb already exist. weird isn't it.
2015-06-10 10:58 GMT+02:00 ICHIBA Sara <ichi.sara@gmail.com>:
yes it is installed
2015-06-10 10:55 GMT+02:00 <A.L.M.Buxey@lboro.ac.uk>:
Hi,
For the openssl it was installed after a yum update (which I did before building FR and I'm afraid i didn't include it in my build path) how can I fix this?
if using packages then the system does all this for you - you have openssl-devel installed?
alan
On 10 Jun 2015, at 03:52, ICHIBA Sara <ichi.sara@gmail.com> wrote:
Thank you for your responses, I agree with Arran, I think the error is related to the openssl even if i'm not sure (you're the specialists here). For the config.log please find it attached.
For the openssl it was installed after a yum update (which I did before building FR and I'm afraid i didn't include it in my build path) how can I fix this?
I think I may have seen this before when linking to OpenSSL without installing the Devel package. Try that and see if it fixes the issue. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan Buxey
-
Arran Cudbard-Bell -
ICHIBA Sara