Building FreeRADIUS packages for Red Hat/CentOS
Hello Matthew, Thank you for the information in the previous e-mail.
4. The FreeRADIUS spec file for 3.0.20 requires OpenLDAP software.
How do I modify the spec file to use the LTB OpenLDAP distribution?
You don't. Install OpenLDAP from the LTB repo, not the RedHat one. That's then the only one which can be used. I've been told that the Red Hat OpenLDAP package is part of our standard server build and the software is used by applications on the server. Would the presence of both the Red Hat and LTB OpenLDAP software cause any issues for the FreeRADIUS server? I noticed the following note on the LTB project web site (https://ltb-project.org/documentation/openldap-rpm) for the RPMs: "The installation is done under /usr/local, in order to avoid conflicts with existing OpenLDAP installation. In particular, we do not touch the ldap system libraries, which are linked in by many other programs." I'm not a software developer so I'd appreciate your advice. Thank you, Chris Howley
On Feb 3, 2020, at 10:11 AM, Chris Howley <C.P.Howley@leeds.ac.uk> wrote:
I noticed the following note on the LTB project web site (https://ltb-project.org/documentation/openldap-rpm) for the RPMs:
"The installation is done under /usr/local, in order to avoid conflicts with existing OpenLDAP installation. In particular, we do not touch the
ldap system libraries, which are linked in by many other programs."
FreeRADIUS uses that, so it should be fine. 3.0.20 also has support for LD_PRELOAD in radiusd.conf. You can use this to *force* the server to use a particular LDAP library: ... ENV { LD_PRELOAD = /usr/local/lib/libldap-foo.so LD_PRELOAD = /usr/local/lib/libber-foo.so } That configuration ensures that the system linker *never* chooses the broken version of libldap. Alan DeKok.
participants (2)
-
Alan DeKok -
Chris Howley