Alex Sharaz wrote:

I attached the full output to the original mesaage. Guess attachements don’t get through.

Ah. Looking at the code, that error comes because it's trying to look up the EAP type in the dictionaries. That lookup is failing, and so the server refuses to start. So... you've broken the dictionaries somehow. Don't do that. Use the 3.0 dictionaries with the 3.0 server. Alan DeKok.

Spot on Arran! Copied the dictionaries from the source tree into /usr/local/share/freeradius ( which previously contained FR2.x files) and away it went. Magic! many thanks … now to get radsec working A On 15 Nov 2013, at 15:28, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:

On 15 Nov 2013, at 14:48, Alan DeKok <aland@deployingradius.com> wrote:

...

Alex Sharaz wrote:

...

Well I thought I’d got FR3 working on OS X but seem to have an issue with

Error: /usr/local/etc/freeradius/mods-enabled/eap[17]: Unknown EAP method <pick a module>

Well, that's broken. However, I do all my development on Mac OSX, and Arran does his on Lion. So it *does* work.

Arran does his on OSX 10.9 Mavericks on a shiny new Mid 2012 MBP, but anyway, it shouldn't really matter...

Still running OSX lion at home on my dual quad core Mac Pro early 2008 ( or possibly 2007) coz without playing around can’t seem to upgrade to maverick.

...

...

If I go into mods-enabled/eap and comment out md5 then The message apears for the next method defined and so on. Looking in /usr/local/lib/ however I can see,

I suspect there's another issue. What does the *rest* of the debug output say?

Well that message is not related to dlopen or any library loading, it seems like maybe it hasn't picked up the dictionaries, or is using an old version of them... Check your freeradius.internal file for EAP-Type and that it has an enum value for tls.

Here's the relevant code:

method = eap_name2type(name); if (method == PW_EAP_INVALID) { cf_log_err_cs(cs, "Unknown EAP method %s", name); return -1; }

eap_type_t eap_name2type(char const *name) { DICT_VALUE *dv; dv = dict_valbyname(PW_EAP_TYPE, 0, name); if (dv) { return dv->value; } return PW_EAP_INVALID; }

We know name is correct because it's printed in the debug message, so it suggests that the dictionaries aren't being read in.

-Arran

Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

On 15 Nov 2013, at 14:56, stefan.paetow@diamond.ac.uk wrote:

Alex,

Did you compile with OpenSSL libraries on the system? Nope, built and installed later version.

Tried $ ./configure --with-openssl-includes=/usr/local/ssl/include --enable-developer --with-openssl-libraries=/usr/local/ssl/lib --with-raddbdir=/usr/local/etc/freeradius and $ ./configure --with-openssl-includes=/usr/local/ssl/include --enable-developer --with-openssl-libraries=/usr/local/ssl/lib --with-raddbdir=/usr/local/etc/freeradius --disable-shared A

Double-check that... that’s the common gotcha.

Stefan

From: freeradius-users-bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org[mailto:freeradius-users-bounces+stefan.paetow=diamond.ac.uk@lists.freeradius.org] On Behalf Of Alex Sharaz Sent: 15 November 2013 14:14 To: FreeRadius users mailing list Subject: FR3.0 and OS X lion, getting Unknown eap method

Hi,

Well I thought I’d got FR3 working on OS X but seem to have an issue with

Error: /usr/local/etc/freeradius/mods-enabled/eap[17]: Unknown EAP method <pick a module>

If I go into mods-enabled/eap and comment out md5 then The message apears for the next method defined and so on. Looking in /usr/local/lib/ however I can see,

-rwxr-xr-x 1 root admin 218656 Nov 14 21:03 rlm_eap.a -rwxr-xr-x 1 root admin 61632 Nov 14 21:03 rlm_eap.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap.la -rwxr-xr-x 1 root admin 53312 Nov 14 21:03 rlm_eap_gtc.a -rwxr-xr-x 1 root admin 14992 Nov 14 21:03 rlm_eap_gtc.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_gtc.la -rwxr-xr-x 1 root admin 132456 Nov 14 21:03 rlm_eap_leap.a -rwxr-xr-x 1 root admin 35844 Nov 14 21:03 rlm_eap_leap.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_leap.la -rwxr-xr-x 1 root admin 66808 Nov 14 21:03 rlm_eap_md5.a -rwxr-xr-x 1 root admin 20200 Nov 14 21:03 rlm_eap_md5.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_md5.la -rwxr-xr-x 1 root admin 72312 Nov 14 21:03 rlm_eap_mschapv2.a -rwxr-xr-x 1 root admin 28688 Nov 14 21:03 rlm_eap_mschapv2.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_mschapv2.la -rwxr-xr-x 1 root admin 152104 Nov 14 21:03 rlm_eap_peap.a -rwxr-xr-x 1 root admin 1583792 Nov 14 21:03 rlm_eap_peap.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_peap.la -rwxr-xr-x 1 root admin 115928 Nov 14 21:03 rlm_eap_pwd.a -rwxr-xr-x 1 root admin 1251724 Nov 14 21:03 rlm_eap_pwd.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_pwd.la -rwxr-xr-x 1 root admin 70120 Nov 14 21:03 rlm_eap_sim.a -rwxr-xr-x 1 root admin 24716 Nov 14 21:03 rlm_eap_sim.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_sim.la -rwxr-xr-x 1 root admin 54744 Nov 14 21:03 rlm_eap_tls.a -rwxr-xr-x 1 root admin 15312 Nov 14 21:03 rlm_eap_tls.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_tls.la -rwxr-xr-x 1 root admin 141512 Nov 14 21:03 rlm_eap_ttls.a -rwxr-xr-x 1 root admin 1578784 Nov 14 21:03 rlm_eap_ttls.dylib -rwxr-xr-x 1 root admin 15 Nov 14 21:03 rlm_eap_ttls.la

and I’m sure the config.log didn’t show any openssl related errors when building FR3.

Rgds Alex

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html