Compiling freeradius 1.1.1 in FreeBSD 6.0 with mysql support
I'm trying to build freeradius 1.1.1 on a FreeBSD 6.0 system with MySQL 4.1.15 I'm using the following configure commandline: ./configure --with-mysql-lib=/usr/local/mysql/lib/mysql --with-mysql-include=/usr/local/mysql/include/mysql --prefix=/usr/local/adm/freeradius-1.1.1 I'd include the full output, but I figure that I should only do that if asked. Here's the problematic section: configuring in ./drivers/rlm_sql_mysql running /bin/sh ./configure --with-mysql-lib-dir=/usr/local/mysql/lib/mysql --with-mysql-include-dir=/usr/local/mysql/include/mysql --prefix=/usr/local/adm/freeradius-1.1.1 --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for mysql_config... (cached) yes checking for pthread_create in -lpthread... (cached) yes checking for mysql_init in -lmysqlclient_r (using mysql_config)... no checking for mysql_init in -lmysqlclient_r... no configure: warning: mysql libraries not found. Use --with-mysql-lib-dir=<path>. checking for mysql.h (using mysql_config)... yes configure: warning: sql submodule 'mysql' disabled updating cache ../../../../.././config.cache creating ./config.status creating Makefile creating config.h config.h is unchanged It's not seeing mysql libraries, but they do indeed exist: # ls -al /usr/local/mysql/lib/mysql total 1974 drwxr-xr-x 2 root wheel 512 Apr 5 10:39 . drwxr-xr-x 3 root wheel 512 Apr 5 10:39 .. -rw-r--r-- 1 root wheel 14446 Apr 5 10:39 libdbug.a -rw-r--r-- 1 root wheel 41928 Apr 5 10:39 libheap.a -rw-r--r-- 1 root wheel 13640 Apr 5 10:39 libmerge.a -rw-r--r-- 1 root wheel 331488 Apr 5 10:39 libmyisam.a -rw-r--r-- 1 root wheel 24934 Apr 5 10:39 libmyisammrg.a -rw-r--r-- 1 root wheel 472466 Apr 5 10:39 libmysqlclient.a -rwxr-xr-x 1 root wheel 871 Apr 5 10:39 libmysqlclient.la lrwxr-xr-x 1 root wheel 20 Apr 5 10:39 libmysqlclient.so -> libmysqlclient.so.14 -rwxr-xr-x 1 root wheel 387482 Apr 5 10:39 libmysqlclient.so.14 -rw-r--r-- 1 root wheel 237570 Apr 5 10:39 libmystrings.a -rw-r--r-- 1 root wheel 253852 Apr 5 10:39 libmysys.a -rw-r--r-- 1 root wheel 105640 Apr 5 10:39 libnisam.a -rw-r--r-- 1 root wheel 5472 Apr 5 10:39 libvio.a # ls -al /usr/local/mysql/include/mysql total 288 drwxr-xr-x 2 root wheel 1024 Apr 5 10:39 . drwxr-xr-x 3 root wheel 512 Apr 5 10:39 .. -rw-r--r-- 1 root wheel 3428 Apr 5 10:39 errmsg.h -rw-r--r-- 1 root wheel 6778 Apr 5 10:39 keycache.h -rw-r--r-- 1 root wheel 17899 Apr 5 10:39 m_ctype.h -rw-r--r-- 1 root wheel 8085 Apr 5 10:39 m_string.h -rw-r--r-- 1 root wheel 1859 Apr 5 10:39 my_alloc.h -rw-r--r-- 1 root wheel 28650 Apr 5 10:39 my_config.h -rw-r--r-- 1 root wheel 3463 Apr 5 10:39 my_dbug.h -rw-r--r-- 1 root wheel 3509 Apr 5 10:39 my_dir.h -rw-r--r-- 1 root wheel 3000 Apr 5 10:39 my_getopt.h -rw-r--r-- 1 root wheel 39298 Apr 5 10:39 my_global.h -rw-r--r-- 1 root wheel 1515 Apr 5 10:39 my_list.h -rw-r--r-- 1 root wheel 3588 Apr 5 10:39 my_net.h -rw-r--r-- 1 root wheel 1245 Apr 5 10:39 my_no_pthread.h -rw-r--r-- 1 root wheel 24387 Apr 5 10:39 my_pthread.h -rw-r--r-- 1 root wheel 1784 Apr 5 10:39 my_semaphore.h -rw-r--r-- 1 root wheel 32346 Apr 5 10:39 my_sys.h -rw-r--r-- 1 root wheel 2007 Apr 5 10:39 my_xml.h -rw-r--r-- 1 root wheel 27615 Apr 5 10:39 mysql.h -rw-r--r-- 1 root wheel 15028 Apr 5 10:39 mysql_com.h -rw-r--r-- 1 root wheel 1241 Apr 5 10:39 mysql_embed.h -rw-r--r-- 1 root wheel 2184 Apr 5 10:39 mysql_time.h -rw-r--r-- 1 root wheel 781 Apr 5 10:39 mysql_version.h -rw-r--r-- 1 root wheel 11315 Apr 5 10:39 mysqld_error.h -rw-r--r-- 1 root wheel 5841 Apr 5 10:39 raid.h -rw-r--r-- 1 root wheel 6499 Apr 5 10:39 readline.h -rw-r--r-- 1 root wheel 1751 Apr 5 10:39 sql_common.h -rw-r--r-- 1 root wheel 6401 Apr 5 10:39 sql_state.h -rw-r--r-- 1 root wheel 1055 Apr 5 10:39 sslopt-case.h -rw-r--r-- 1 root wheel 1883 Apr 5 10:39 sslopt-longopts.h -rw-r--r-- 1 root wheel 970 Apr 5 10:39 sslopt-vars.h -rw-r--r-- 1 root wheel 1265 Apr 5 10:39 typelib.h I'm thoroughly perplexed. What should I try next? -- Mark Hennessy
"Mark Hennessy" <mhennessy@cloud9.net> wrote:
I'm trying to build freeradius 1.1.1 on a FreeBSD 6.0 system with MySQL 4.1.15
Doesn't the ports system work?
checking for mysql_init in -lmysqlclient_r (using mysql_config)... no
See the config.log for details. Maybe libmysqlclient_r needs additional libraries for it to work. Alan DeKok.
On Wed, 2006-05-04 at 13:08 -0400, Alan DeKok wrote:
"Mark Hennessy" <mhennessy@cloud9.net> wrote:
I'm trying to build freeradius 1.1.1 on a FreeBSD 6.0 system with MySQL 4.1.15
Doesn't the ports system work?
That exactly what I was thinking. The port was updated on Mar. 28
checking for mysql_init in -lmysqlclient_r (using mysql_config)... no
See the config.log for details. Maybe libmysqlclient_r needs additional libraries for it to work.
Mark Hennessy wrote:
checking for mysql_init in -lmysqlclient_r (using mysql_config)... no checking for mysql_init in -lmysqlclient_r... no
FreeRADIUS requires the thread-safe version of the MySQL client library, unless you configure it with the option --without-threads.
It's not seeing mysql libraries, but they do indeed exist: # ls -al /usr/local/mysql/lib/mysql total 1974 drwxr-xr-x 2 root wheel 512 Apr 5 10:39 . drwxr-xr-x 3 root wheel 512 Apr 5 10:39 .. -rw-r--r-- 1 root wheel 14446 Apr 5 10:39 libdbug.a -rw-r--r-- 1 root wheel 41928 Apr 5 10:39 libheap.a -rw-r--r-- 1 root wheel 13640 Apr 5 10:39 libmerge.a -rw-r--r-- 1 root wheel 331488 Apr 5 10:39 libmyisam.a -rw-r--r-- 1 root wheel 24934 Apr 5 10:39 libmyisammrg.a -rw-r--r-- 1 root wheel 472466 Apr 5 10:39 libmysqlclient.a -rwxr-xr-x 1 root wheel 871 Apr 5 10:39 libmysqlclient.la lrwxr-xr-x 1 root wheel 20 Apr 5 10:39 libmysqlclient.so -> libmysqlclient.so.14 -rwxr-xr-x 1 root wheel 387482 Apr 5 10:39 libmysqlclient.so.14 -rw-r--r-- 1 root wheel 237570 Apr 5 10:39 libmystrings.a -rw-r--r-- 1 root wheel 253852 Apr 5 10:39 libmysys.a -rw-r--r-- 1 root wheel 105640 Apr 5 10:39 libnisam.a -rw-r--r-- 1 root wheel 5472 Apr 5 10:39 libvio.a
I don't see the file "libmysqlclient_r.so" in your setup. Re-install MySQL with thread support, or configure FreeRADIUS without thread support. -- Nicolas Baradakis
Hi All, Any one can help me juniper equiqments are configured on free radius? If so please help me out the server side configuration of users on Redhat. If there are any referral web links please do let me know. A quick response in this regard would be highly appreciated. Regards Venugopal __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
On Thursday 06 April 2006 06:56, Venu Gopal wrote:
Hi All,
Any one can help me juniper equiqments are configured on free radius? If so please help me out the server side configuration of users on Redhat. If there are any referral web links please do let me know. A quick response in this regard would be highly appreciated.
Google 'Juniper radius configuration' or read the 'help topic system radius-server' from the router cli. Juniper specific attributes are listed there. On Juniper router: [edit system] radius-server server-address { port number; secret password; retry number; timeout seconds; } On freeRADIUS make entries for the router as you would for any NAS in clients.conf and user using any of the applicable attributes. Zoltan Ori
Thanks a lot for the reply, i got this link for configuring radius, but wonder is there any modification to be done apart from cisco devices. Regards Venu --- "Zoltan A. Ori" <z.ori@morehead-st.edu> wrote:
On Thursday 06 April 2006 06:56, Venu Gopal wrote:
Hi All,
Any one can help me juniper equiqments are configured on free radius? If so please help me out the server side configuration of users on Redhat. If there are any referral web links please do let me know. A quick response in this regard would be highly appreciated.
Google 'Juniper radius configuration' or read the 'help topic system radius-server' from the router cli. Juniper specific attributes are listed there.
On Juniper router:
[edit system] radius-server server-address { port number; secret password; retry number; timeout seconds; }
On freeRADIUS make entries for the router as you would for any NAS in clients.conf and user using any of the applicable attributes.
Zoltan Ori
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
On Thursday 06 April 2006 09:37, Venu Gopal wrote:
Thanks a lot for the reply, i got this link for configuring radius, but wonder is there any modification to be done apart from cisco devices.
I'm not sure what you mean. You have Cisco authenticating and want to have the same for Juniper? You probably need to define exactly what you are trying to accomplish and what you are working with. On the assumption that you have Cisco working and want Juniper, too: Decide what reply attributes you need and how you will differentiate the sources of the access request. Read about huntgroups. Or, you might include both Juniper and Cisco replies in the same users entry since the devices should ignore attributes they don't understand. I won't guarantee that will work as I've not done it myself. Zoltan Ori
Hey Ori, It works for juniper netscreen too...i found the dictionary file in the radius and configured for basic authentication from the server. thanks for all the help and support from your side. Have a great weekend. Need to do more tweaking on netscreen to set it up for privileges. Regards Venugopa --- Zoltan Ori <z.ori@morehead-st.edu> wrote:
On Thursday 06 April 2006 09:37, Venu Gopal wrote:
Thanks a lot for the reply, i got this link for configuring radius, but wonder is there any modification to be done apart from cisco devices.
I'm not sure what you mean. You have Cisco authenticating and want to have the same for Juniper? You probably need to define exactly what you are trying to accomplish and what you are working with.
On the assumption that you have Cisco working and want Juniper, too: Decide what reply attributes you need and how you will differentiate the sources of the access request. Read about huntgroups. Or, you might include both Juniper and Cisco replies in the same users entry since the devices should ignore attributes they don't understand. I won't guarantee that will work as I've not done it myself.
Zoltan Ori
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Venu Gopal <gopalb007@yahoo.com> writes:
Thanks a lot for the reply, i got this link for configuring radius, but wonder is there any modification to be done apart from cisco devices.
It would help if you said what type of Juniper system you are configuring FreeRADIUS for, and what services you are using radius for. The E-series has a completely different dictionary from the M/T-series. For the M/T management you'd probably want to set Juniper-Local-User-Name to some predefined local user on the router, or you won't be able to log in (unless you define the default user "remote") Bjørn
--- "Zoltan A. Ori" <z.ori@morehead-st.edu> wrote:
On Thursday 06 April 2006 06:56, Venu Gopal wrote:
Hi All,
Any one can help me juniper equiqments are configured on free radius? If so please help me out the server side configuration of users on Redhat. If there are any referral web links please do let me know. A quick response in this regard would be highly appreciated.
Google 'Juniper radius configuration' or read the 'help topic system radius-server' from the router cli. Juniper specific attributes are listed there.
On Juniper router:
[edit system] radius-server server-address { port number; secret password; retry number; timeout seconds; }
On freeRADIUS make entries for the router as you would for any NAS in clients.conf and user using any of the applicable attributes.
Zoltan Ori
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Currently i'm doing testing on Netscreen boxes N25/50 series, it works for authentication. If you could help me in defining the privilege level commands on radius server like cisco for netscreen boxes, it would be great help. Regards Venugopal --- Bjørn Mork <bjorn@mork.no> wrote:
Venu Gopal <gopalb007@yahoo.com> writes:
Thanks a lot for the reply, i got this link for configuring radius, but wonder is there any modification to be done apart from cisco devices.
It would help if you said what type of Juniper system you are configuring FreeRADIUS for, and what services you are using radius for. The E-series has a completely different dictionary from the M/T-series.
For the M/T management you'd probably want to set Juniper-Local-User-Name to some predefined local user on the router, or you won't be able to log in (unless you define the default user "remote")
Bjørn
--- "Zoltan A. Ori" <z.ori@morehead-st.edu> wrote:
On Thursday 06 April 2006 06:56, Venu Gopal wrote:
Hi All,
Any one can help me juniper equiqments are configured on free radius? If so please help me out the server side configuration of users on Redhat. If there are any referral web links please do let me know. A quick response in this regard would be highly appreciated.
Google 'Juniper radius configuration' or read the 'help topic system radius-server' from the router cli. Juniper specific attributes are listed there.
On Juniper router:
[edit system] radius-server server-address { port number; secret password; retry number; timeout seconds; }
On freeRADIUS make entries for the router as you would for any NAS in clients.conf and user using any of the applicable attributes.
Zoltan Ori
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Venu Gopal <gopalb007@yahoo.com> writes:
Currently i'm doing testing on Netscreen boxes N25/50 series, it works for authentication. If you could help me in defining the privilege level commands on radius server like cisco for netscreen boxes, it would be great help.
Take a look at share/dictionary.netscreen I haven't used these boxes myself, but the VSAs look pretty self-explanatory. Bjørn
participants (8)
-
Alan DeKok -
Bjørn Mork -
Guy Fraser -
Mark Hennessy -
Nicolas Baradakis -
Venu Gopal -
Zoltan A. Ori -
Zoltan Ori