On Mon, Jun 9, 2014 at 3:18 PM, Muhammad Hasan <muhhasan.1311@gmail.com> wrote:

Hi Fajar,

thanks for your repply, actually I am not familiar with freeradius, I just following step that given from my friend.

My friend was tried eap-sim on freeradius server 2.2.0 before, and he was successed. the original step that he was gave to me is like this:

1. apt-get install dpkg-dev 2. apt-get build-dep freeradius 3. tar xvzf freeradius-server-2.2.0.tar.gz 4. edit eapsimlib.c (I was edit eapsimlib.c same as the step that I was read in website)

https://github.com/FreeRADIUS/freeradius-server/commit/cfd61d24b99022eb61305... 5. etract debian file in freeradius-server-2.2.0 folder type: debian/rules binary 6. install the packets: a. dpkg -i libfreeradius2_2.2.0+git_i386.deb b. dpkg -i freeradius_2.2.0+git_i386.deb c. dpkg -i freeradius-common_2.2.0+git_i386.deb d. dpkg -i freeradius-utils_2.2.0+git_i386.deb

Your original mail doesn't mention the "debian/rules" part.

but the step was succesfull until step 6 (b). i got fail: * checking FreeRADIUS daemon configuration ... [fail] invoke-rc.d: initscript freeradius, action "restart" failed. Processing triggers for ureadahead.

this is result when I type ​Freeradius -X Unable to open file "/etc/freeradius/sql/mysql/ippool-dhc.conf": No such file or directory Errors reading or parsing /etc/feeradius/radius.confbut

are those typos? "dhc.conf" and "radius.confbut". Or are those what is actually displayed? In any case those usually means you've edited the config and broke it. The default config should work fine.

-------------------------------------------------

and then I've tried on freeradius server 2.2.5 the different file on eapsimlib.c has been updated so I don't have to edit again. I just next the following step. but the result is still the same as before.

should I try the another method? but I have no idea what's the another method :(

Did you intentionally skip reading this part of my reply? On Mon, Jun 9, 2014 at 3:00 PM, Fajar A. Nugraha <list@fajar.net> wrote:

...

You probably download a prebuilt package (deb) belonging to another

...

distro/version, not the one you actually compile. If you just want to use FR-2.2.5 on ubuntu, try https://launchpad.net/~freeradius/+archive/stable

That should qualify as "another method". -- FAN

On Mon, Jun 9, 2014 at 4:29 PM, Muhammad Hasan <muhhasan.1311@gmail.com> wrote:

Hi Fajar,

yes my original message do not use debian/rules, because I think I didn't edit file eapsimlib.c again on freeradius-server 2.2.5 than freeradius-server 2.2.0

debian/rules is what's actually building the package. If you do NOT run that (or "dpkg-buildpackage -b"), then you haven't built any package. Which probably means you downloaded the debs from somewhere else (a package built for debian, perhaps?) which should explain the openssl error.

I just trying it'll make a different or not, but the result is still not same that I hope.

and sorry for my mistake, this is the right result this is result when I type ​Freeradius -X Unable to open file "/etc/freeradius/sql/mysql/ippool-dhcp.conf": No such file or directory Errors reading or parsing /etc/feeradius/radius.conf

I was type by myself after I seen the result.

copy-pasting is safer, and would save lots of problems later on. IIRC the "ippool-dhcp.conf" error was due to a default config bug, which puts it enabled by default but put the file in another package. You could probably just install freeradius-mysql (the one that you built, v2.2.0) to fix that error. Or just comment out dhcp-related settings from radiusd.conf manually.

I'm sorry for your advice about trying, I didn't read before.

Reading and following the advice given is the basics to solving a problem.

You probably download a prebuilt package (deb) belonging to another distro/version, not the one you actually compile. If you just want to use FR-2.2.5 on ubuntu, try https://launchpad.net/~freeradius/+archive/stable

​I want to use the package that was uploaded on that web, but I want to ask first, the file freeradius_2.2.5.orig.tar.bz2 <https://launchpad.net/~freeradius/+archive/stable/+files/freeradius_2.2.5.orig.tar.bz2> is same as with freeradius-server-2.2.5.tar.gz ?

It should be, but to be honest I didn't remember whether I used the official tarball, or clone from 2.2.5-git tag. Note that if you ONLY want to use a prebuilt package, it shouldn't matter, as you won't be downloading that file anyway.

​Sorry I am really beginner using freeradius.

Do you know how to use a ppa? If not, you might want to read - https://help.ubuntu.com/community/Repositories/CommandLine#Adding_Launchpad_... - http://www.webupd8.org/2012/02/how-to-use-launchpad-ppa-add-remove.html Something like add-apt-repository ppa:freeradius/stable apt-get update apt-get install freeradius ( and if for whatever reason later you want to remove all traces of packages from that ppa ) ppa-purge ppa:freeradius/stable -- Fajar

Hi,

but the result when I was type, dpkg -i freeradius_2.2.0+git_i386.deb is dpkg: dependency problems prevent configuration of freeradius: freeradius depends on ssl-cert; however:

well, you could follow the advise. the package..which you are manually installing with dpkg needs a package that you havent got installed and you dont have the .deb for during the install step..so apt-get install ssl-cert will probably fix this alan

Dear All, I'd like to thank you for the response to my post. because i am new on this. i just followed the installation instruction from my friend who was done this before the main issue that I got are the following root@xxx-laptop:/home/xxx# dpkg -i freeradius_2.2.0+git_i386.deb Selecting previously deselected package freeradius. (Reading database ... 128857 files and directories currently installed.) Unpacking freeradius (from freeradius_2.2.0+git_i386.deb) ... Setting up freeradius (2.2.0+git) ... dpkg-statoverrides: warning: --update given but /var/run/freeradius does not exist Updating default SSL certificate settings, if any... Adding user freerad to group ssl-cert Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time ....................................................+............................+..+......................................................+................................+.................................................+...................+......+...........................+...........................................+.....+......+.................+.....+...............+......+...............+.................+.....+.........................+......+....................................+..........................................................................+................................................................+....++*++*++* * Starting FreeRADIUS daemon freeradius [fail] invoke-rc.d: initscript freeradius, action "start" failed. Processing triggers for ureadahead ... ureadahead will be reprofiled on next reboot I've tried both freeradius-server 2.2.0 and freeradius-server 2.2.5, and i also tried both of them on ubuntu-server 12.04.4 LTS and ubuntu-desktop 10.04. LTS. They failed. and then this is result after I checked with freeradius -X root@xxx-laptop:/home/xxx# freeradius -X FreeRADIUS Version 2.2.0, for host i486-pc-linux-gnu, built on Jun 18 2014 at 10:09:51 Copyright (C) 1999-2012 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/freeradius/radiusd.conf including configuration file /etc/freeradius/proxy.conf including configuration file /etc/freeradius/clients.conf including files in directory /etc/freeradius/modules/ including configuration file /etc/freeradius/modules/attr_rewrite including configuration file /etc/freeradius/modules/cache including configuration file /etc/freeradius/modules/mschap including configuration file /etc/freeradius/modules/redis including configuration file /etc/freeradius/modules/wimax including configuration file /etc/freeradius/modules/linelog including configuration file /etc/freeradius/modules/opendirectory including configuration file /etc/freeradius/modules/checkval including configuration file /etc/freeradius/modules/acct_unique including configuration file /etc/freeradius/modules/mac2vlan including configuration file /etc/freeradius/modules/counter including configuration file /etc/freeradius/modules/radrelay including configuration file /etc/freeradius/modules/mac2ip including configuration file /etc/freeradius/modules/attr_filter including configuration file /etc/freeradius/modules/pap including configuration file /etc/freeradius/modules/chap including configuration file /etc/freeradius/modules/etc_group including configuration file /etc/freeradius/modules/policy including configuration file /etc/freeradius/modules/realm including configuration file /etc/freeradius/modules/replicate including configuration file /etc/freeradius/modules/detail including configuration file /etc/freeradius/modules/echo including configuration file /etc/freeradius/modules/detail.log including configuration file /etc/freeradius/modules/sqlcounter_expire_on_login including configuration file /etc/freeradius/modules/rediswho including configuration file /etc/freeradius/modules/expiration including configuration file /etc/freeradius/modules/ntlm_auth including configuration file /etc/freeradius/modules/inner-eap including configuration file /etc/freeradius/modules/sradutmp including configuration file /etc/freeradius/modules/exec including configuration file /etc/freeradius/modules/soh including configuration file /etc/freeradius/modules/passwd including configuration file /etc/freeradius/modules/krb5 including configuration file /etc/freeradius/modules/smbpasswd including configuration file /etc/freeradius/modules/dynamic_clients including configuration file /etc/freeradius/modules/always including configuration file /etc/freeradius/modules/dhcp_sqlippool including configuration file /etc/freeradius/sql/mysql/ippool-dhcp.conf Unable to open file "/etc/freeradius/sql/mysql/ippool-dhcp.conf": No such file or directory Errors reading or parsing /etc/freeradius/radiusd.conf the issue has been solved when I try this root@xxx-laptop:/home/xxx# dpkg -i freeradius-mysql_2.2.0+git_i386.deb Selecting previously deselected package freeradius-mysql. (Reading database ... 129220 files and directories currently installed.) Unpacking freeradius-mysql (from freeradius-mysql_2.2.0+git_i386.deb) ... Setting up freeradius-mysql (2.2.0+git) ... * Checking FreeRADIUS daemon configuration... [ OK ] * Stopping FreeRADIUS daemon freeradius [ OK ] * Starting FreeRADIUS daemon freeradius [ OK ] and the issue that still make me confuse is my friend didn't use dpkg -i freeradius-mysql_2.2.0+git_i386.deb before, and nothing wrong with his step, but it is fail to me. I've tried again on freeradius-server 2.2.0 and freeradius-server 2.2.5. and tried them on ubuntu-server 12.04.4 LTS and ubuntu-desktop 10.04.4 LTS with the same way as before. the result is freeradius-server 2.2.0 succesed on ubuntu-server 12.04.4 LTS and ubuntu-desktop 10.04.4 LTS. but freeradius-server 2.2.5 is only successed on ubuntu-desktop 10.04.4 LTS but failed on ubuntu-server 12.04.4 LTS the result of freeradius -X is Refusing to start with libssl version OpenSSL 1.0.1 14 Mar 2012 (in range 1.0.1 - 1.0.1f). Security advisory CVE-2014-0160 (Heartbleed) how can I change the libssl then? what's the command? thank you. alf On Mon, Jun 16, 2014 at 2:01 AM, Matthew Newton <mcn4@leicester.ac.uk> wrote:

On Sun, Jun 15, 2014 at 11:30:26AM +0700, Muhammad Hasan wrote:

...

but the result when I was type, dpkg -i freeradius_2.2.0+git_i386.deb is dpkg: dependency problems prevent configuration of freeradius: freeradius depends on ssl-cert; however: dpkg: error processing freeradius (--install): dependency problems - leaving unconfigures processing triggers for ureadahead errors were encountered while processing: freeradius

what should I do?

apt-get -f install

Standard debian systems admin. When you install a local package that depends on other stuff, dpkg won't install it (it doesn't know about the repositories). You need to kick apt-get to get it to fix up any remote dependencies.

Matthew

-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>

Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

​Hi Stefan, Thanks for your advice, it's works now. thanks alf​ On Wed, Jun 18, 2014 at 4:19 PM, Stefan Paetow <Stefan.Paetow@ja.net> wrote:

...

the result of freeradius -X is Refusing to start with libssl version OpenSSL 1.0.1 14 Mar 2012 (in range 1.0.1 - 1.0.1f). Security advisory CVE-2014-0160 (Heartbleed)

how can I change the libssl then? what's the command?

Hi, you don’t need to change libssl. The above is a safety measure introduced after Heartbleed.

What you *do* need to do is modify radiusd.conf and change the "allow_vulnerable_openssl" setting to "yes", since this is a Debian system and the Debian maintainers chose to patch their OpenSSL package instead of moving to the fixed version (1.0.1g).

Stefan

Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238

​

​ ​