RE: Freeradius How to integrate Active Directory [AD Integration WindowsXP NTLM Tutorial]
Hi Robin
-----Original Message-----
I have one Debian specific error
rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory radiusd.conf[9]: eap: Module instantiation failed.
it seems that the shared object is not shipped when I did apt-get install freeradius
Ignore the freeRADIUS package. Due to license restrictions, it cannot contain the binaries for OpenSSL. We have to use the source. Download the latest release of freeRADIUS Unzip freeRADIUS Tar -zxvf freeradius-1.0.5.tar.gz Switch to the directory then ./configure --disable-shared make make install You can look at my notes if you want: http://www.mpking.com/articles.php?lng=en&pg=55 These are not a howto, just my notes to myself as I built this config 3 or 4 times in a row. Couple of notes... The krb5.conf and the samba.conf files are not perfect. They don't take advantage of the fact samba can do a DNS lookup for the activedirectory server. Like I said, they're just my notes.
King, Michael wrote:
Ignore the freeRADIUS package. Due to license restrictions, it cannot contain the binaries for OpenSSL. We have to use the source.
Indeed.
Download the latest release of freeRADIUS
Unzip freeRADIUS Tar -zxvf freeradius-1.0.5.tar.gz
Switch to the directory then
./configure --disable-shared make make install
I don't recommend this method to the Debian users, because it confuses dpkg about the files installed on the system and it's not possible to uninstall the files later. I think it's a lot better to build FreeRADIUS from sources using dpkg-buildpackage. $ tar zxf freeradius-1.0.5.tar.gz $ cd freeradius-1.0.5 $ fakeroot dpkg-buildpackage -b -uc $ sudo dpkg -i ../freeradius_1.0.5-0_i386.deb
You can look at my notes if you want: http://www.mpking.com/articles.php?lng=en&pg=55
Please add a note about dpkg-buildpackage, too. -- Nicolas Baradakis
participants (2)
-
King, Michael -
Nicolas Baradakis