Can anyone recommend where to get hold of a freeradius.spec file to build 3.0.12 RPMs in the same way as RHEL do (only much newer!)? For 3.0.11, I used the source & spec package at: https://koji.fedoraproject.org/koji/packageinfo?packageID=298 Thanks Dave
On 08/02/17 15:32, David Hartburn wrote:
Can anyone recommend where to get hold of a freeradius.spec file to build 3.0.12 RPMs in the same way as RHEL do (only much newer!)?
Hi David, A spec file is published with the FreeRADIUS source in git, which can be used to build for RHEL6 and 7, if not other platforms too: https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/redhat/freeradiu... Cheers, Jonathan -- Jonathan Gazeley Senior Systems Administrator IT Services University of Bristol
On 8 Feb 2017, at 15:32, David Hartburn <D.J.Hartburn@kent.ac.uk> wrote:
For 3.0.11, I used the source & spec package at: https://koji.fedoraproject.org/koji/packageinfo?packageID=298
If you don't want to use the one supplied by the FreeRADIUS team, you'll need to roll your own. Here's mine for v3.0.HEAD, with minimal changes from the Fedora 25 spec file: https://github.com/TheMysteriousX/freeradius/blob/el7/freeradius.spec It has extra features enabled you may not want, but it should give you an idea of the changes needed. IIRC, the mandatory changes are: https://github.com/TheMysteriousX/freeradius/commit/9b3ed38bac26e74dcc1982b7... https://github.com/TheMysteriousX/freeradius/commit/9a3b66949299e65f95380dfe... https://github.com/TheMysteriousX/freeradius/commit/d41374db1788a04ead80ff0d... https://github.com/TheMysteriousX/freeradius/commit/1bf2e275ed9302893ee7515e... https://github.com/TheMysteriousX/freeradius/commit/fa4b19b8540ee4cc4a633281... https://github.com/TheMysteriousX/freeradius/commit/fa54546f171b41f0cfb16ded... https://github.com/TheMysteriousX/freeradius/commit/563bcd0d1413c7c44fa6f520... https://github.com/TheMysteriousX/freeradius/commit/69a3cfd8a30ffafaac19332b... https://github.com/TheMysteriousX/freeradius/commit/4e6beb0346156d84525a1aff... The rest are my customisations/opinion. Regards, Adam Bishop gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.
Can anyone recommend where to get hold of a freeradius.spec file to build 3.0.12 RPMs in the same way as RHEL do (only much newer!)?
For 3.0.11, I used the source & spec package at: https://koji.fedoraproject.org/koji/packageinfo?packageID=298
That's as RedHat-official as it can get. Otherwise use the one Adam referred to. Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
We just patch the existing one like so, and before make dist we do the rename of lt_* identifiers by hand, though you could make a new patchfile for it. That's the only patch that looks to not be previously applied in 3.0.12 already or touching code that has not been radically refactored since 3.0.4. git checkout release_3_0_12 git branch rename_lt git checkout rename_lt for i in `grep -r -l lt_dl` ; do perl -i -pne 's/lt_dl/fr_dl/g' $i ; done; make dist rpm -ivh freeradius-3.0.4-7.el7_3.src.rpm ...not that I think the lt_* business is necessarily consequential. patch ../rpmbuild/SPECS/freeradius.spec: --- freeradius.spec.rpmorig 2017-01-19 10:11:59.171917266 -0500 +++ freeradius.spec 2017-01-19 10:31:32.093659337 -0500 @@ -1,5 +1,6 @@ Summary: High-performance and highly configurable free RADIUS server -Name: freeradius -Version: 3.0.4 -Release: 7%{?dist} +Name: freeradius-mybuild +Version: 3.0.12 +Release: 90%{?dist} +Obsoletes: freeradius License: GPLv2+ and LGPLv2+ @@ -16,2 +17,3 @@ %global dist_base freeradius-server-%{version} +%define _unpackaged_files_terminate_build 0 @@ -211,34 +213,2 @@ # mistakenly includes the backup files, especially problematic for raddb config files. -%patch1 -p1 -%patch2 -p1 -%patch3 -p1 -%patch4 -p1 -%patch5 -p1 -%patch6 -p1 -%patch7 -p1 -%patch8 -p1 -%patch9 -p1 -%patch10 -p1 -%patch11 -p1 -%patch12 -p1 -%patch13 -p1 -%patch14 -p1 -%patch15 -p1 -%patch16 -p1 -%patch17 -p1 -%patch18 -p1 -%patch19 -p1 -%patch20 -p1 -%patch21 -p1 -%patch22 -p1 -%patch23 -p1 -%patch24 -p1 -%patch25 -p1 -%patch26 -p1 -%patch27 -p1 -%patch28 -p1 -%patch29 -p1 -%patch30 -p1 -%patch31 -p1 -%patch32 -p1 @@ -303,3 +273,3 @@ mkdir -p $RPM_BUILD_ROOT%{_datadir}/snmp/mibs/ -install -m 644 mibs/*RADIUS*.txt $RPM_BUILD_ROOT%{_datadir}/snmp/mibs/ +install -m 644 mibs/*RADIUS*.mib $RPM_BUILD_ROOT%{_datadir}/snmp/mibs/ @@ -686,3 +656,3 @@ # MIB files -%{_datadir}/snmp/mibs/*RADIUS*.txt +%{_datadir}/snmp/mibs/*RADIUS*.mib cp freeradius-server-3.0.12.tar.bz2 ../rpmbuild/SOURCES/ cd ../rpmbuild/SPECS rpmbuild -ba freeradius.spec If you are using rlm_ldap, you'll also need to compile an openldap that uses openssl rather than nss or you everything will work fine until auths idle for a while and then it will all break horribly. --- rpmbuild/SPECS/openldap.spec 2016-03-31 11:12:28.000000000 -0400 +++ openldap.spec 2017-01-13 13:30:09.864880702 -0500 @@ -4,8 +4,10 @@ %global check_password_version 1.1 -Name: openldap +%define _libdir /usr/local/lib64 + +Name: openldap-without-nss-local Version: 2.4.40 Release: 9%{?dist} -Summary: LDAP support libraries +Summary: LDAP support libraries without NSS in /usr/local Group: System Environment/Daemons License: OpenLDAP @@ -73,9 +75,9 @@ Patch102: openldap-fedora-systemd.patch -BuildRequires: cyrus-sasl-devel, nss-devel, krb5-devel, tcp_wrappers-devel, unixODBC-devel +BuildRequires: cyrus-sasl-devel, krb5-devel, tcp_wrappers-devel, unixODBC-devel BuildRequires: glibc-devel, libtool, libtool-ltdl-devel, groff, perl, perl-devel, perl(ExtUtils::Embed) # smbk5pwd overlay: BuildRequires: openssl-devel -Requires: nss-tools +#Requires: nss-tools Requires(post): rpm, coreutils, findutils @@ -161,7 +163,4 @@ %patch100 -p1 -# alternative include paths for Mozilla NSS -ln -s %{_includedir}/nss3 include/nss -ln -s %{_includedir}/nspr4 include/nspr AUTOMAKE=%{_bindir}/true autoreconf -fi @@ -267,5 +266,5 @@ --with-threads \ --with-pic \ - --with-tls=moznss \ + --with-tls=openssl \ --with-gnu-ld \ \ ________________________________________ From: Freeradius-Users <freeradius-users-bounces+bjulin=clarku.edu@lists.freeradius.org> on behalf of Stefan Paetow <Stefan.Paetow@jisc.ac.uk> Sent: Wednesday, February 8, 2017 11:17 AM To: FreeRadius users mailing list Subject: Re: 3.0.12 spec file for RHEL?
Can anyone recommend where to get hold of a freeradius.spec file to build 3.0.12 RPMs in the same way as RHEL do (only much newer!)?
For 3.0.11, I used the source & spec package at: https://koji.fedoraproject.org/koji/packageinfo?packageID=298
That's as RedHat-official as it can get. Otherwise use the one Adam referred to. Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks for the responses. I don't suppose anyone has one with winbind support in do they, to use libwbclient over ntlm_auth? Dave On 08/02/17 16:17, Stefan Paetow wrote:
Can anyone recommend where to get hold of a freeradius.spec file to build 3.0.12 RPMs in the same way as RHEL do (only much newer!)?
For 3.0.11, I used the source & spec package at: https://koji.fedoraproject.org/koji/packageinfo?packageID=298
That's as RedHat-official as it can get.
Otherwise use the one Adam referred to.
Stefan Paetow Moonshot Industry & Research Liaison Coordinator
t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet
jisc.ac.uk
Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 9 Feb 2017, at 11:49, David Hartburn <D.J.Hartburn@kent.ac.uk> wrote:
Thanks for the responses. I don't suppose anyone has one with winbind support in do they, to use libwbclient over ntlm_auth?
Mine does - you just need to change 2 lines: https://github.com/TheMysteriousX/freeradius/blob/el7/freeradius.spec#L48-L4... This depends on EL7.2 or greater - libwb support does not exist in 7.1/7.0 Regards, Adam Bishop Senior Infrastructure and Systems Architect gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 t: +44 (0)1235 822 245 xmpp: adamb@jabber.dev.ja.net jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.
Thanks. I had looked at that and did not spot it. Compiling blindness setting in! Dave On 09/02/17 11:53, Adam Bishop wrote:
On 9 Feb 2017, at 11:49, David Hartburn <D.J.Hartburn@kent.ac.uk> wrote:
Thanks for the responses. I don't suppose anyone has one with winbind support in do they, to use libwbclient over ntlm_auth?
Mine does - you just need to change 2 lines:
https://github.com/TheMysteriousX/freeradius/blob/el7/freeradius.spec#L48-L4...
This depends on EL7.2 or greater - libwb support does not exist in 7.1/7.0
Regards,
Adam Bishop Senior Infrastructure and Systems Architect
gpg: E75B 1F92 6407 DFDF 9F1C BF10 C993 2504 6609 D460 t: +44 (0)1235 822 245 xmpp: adamb@jabber.dev.ja.net
jisc.ac.uk
Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 2881024, VAT number GB 197 0632 86. The registered office is: One Castle Park, Tower Hill, Bristol BS2 0JA. T 0203 697 5800.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
Adam Bishop -
Brian Julin -
David Hartburn -
Jonathan Gazeley -
Stefan Paetow