Re: EAP-TLS can't get connected..etc.
Hi Everyone, I installed the Freeradius 2.0.4 as Mr. Alan DeKok had suggested I browse www.freeradius.org and run below command. #cvs -d :pserver:anoncvs@cvs.freeradius.org:/source login CVS password: anoncvs nothing happen and return to # #cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout radiusd then under #/usr/share/doc/radiusd ......run #./configure --with-openssl-includes=/usr/include/openssl --with-openssl-libraries=/usr/lib/libxm --with-prefix=/usr/local/radius # make #make install got some errors btool: install: error: cannot install "rlm_acctlog.la" to a directory not ending in /usr/local/lib/lib gmake[6]: *** [install] Error1 gmake[6]: Leaving dictory '/usr/share/doc/radiusd/src/modules/rlm_acctog' gmake[5]: *** Error 2 gmake[5]: Leaving directory '/usr/share/doc/radiusd/src/modules' gmake[4]: *** Error 2 gmake[4]: Leaving directory '/usr/share/doc/radiusd/src/modules' gmake[3]: *** Error 2 gmake[3]: Leaving directory '/usr/share/doc/radiusd/src' gmake[2]: *** Error 2 gmake[2]: Leaving directory '/usr/share/doc/radiusd/src' gmake[1]: *** Error 2 gmake[1]: Leaving directory '/usr/share/doc/radiusd' make: *** [install] Error 2 I checked the version in /usr/share/doc/radius/VERSION and it shows 2.0.2 (installed before) Have I installed freeradius-2.0.4? where it's located? If I want to uninstall or remove previous version such Freeradius-1.1.7 ..what command I should run or just simply delete the folder in Freeradius? thanks in advance. ----- Original Message ---- From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Sent: Friday, May 9, 2008 7:50:34 PM Subject: Re: EAP-TLS can't get connected..etc. Kwok Sianbin wrote:
I am newbie to linux and recently I try to implement wireless connnection with EAP-TLS encryption. I am using Freeradius-1.1.7 installed into Red Hat Enterprise 4.
You should really use 2.0.4.
Here I encounter problems that I can't solve it alone hence I need advice guru from this forum. the problem is client just can't get connected and keep request.
... Sending Access-Challenge of id 15 to 192.168.0.206 port 1025 ... Going to the next request Waking up in 6 seconds...
This is in the FAQ. It's also documented in the "eap.conf" file in 2.0.4.
Here I post the CA.certs execution result as I suppect that the errors might be due to certificate error. When I run ./CA.certs and I got a few errors.
2.0.4 also contains new scripts for certificate creation. They're MUCH better than what's in 1.1.7. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I installed the Freeradius 2.0.4 as Mr. Alan DeKok had suggested I browse www.freeradius.org and run below command. #cvs -d :pserver:anoncvs@cvs.freeradius.org:/source login CVS password: anoncvs nothing happen and return to #
'nothing' should happen as all you've done is log into a CVS session
#cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout radiusd
this will download the latest CVS version - '2.0.5' from the main site into a directory called 'radiusd' - which will be put into whereever you were when you ran the command compile problems could be due to having the latest CVS code which might have a problem in it at any time. was there a specific reason not to use eg 2.0.4.tar.bz2 download from the freeradius.org site?
I checked the version in /usr/share/doc/radius/VERSION and it shows 2.0.2 (installed before) Have I installed freeradius-2.0.4?
not from what i've seen you type. what does eg 'radiusd -v' tell you?
If I want to uninstall or remove previous version such Freeradius-1.1.7 ..what command I should run or just simply delete the folder in Freeradius?
how did you install it? from RPM or APT etc? or from source? if from source, you will need to look in the binary and library directories for all the files it will have installed...usually /location/to/bin/rad* /location/to/lib/rlm_* /local/to/lib/radius* and then a whole load of things in /usr/share/radius etc etc (just do eg 'make -n install' to see what it puts where. alan
Hi Alan, I've installed FreeRadius-2.0.4 and I got some error saying ERROR: Failed to open socket: /usr/local/etc/raddb/radiusd.conf[210]: Error binding to port for 0.0.0.0 port 1812 but when I check in radiusd.conf ipaddr = * # interface = eth0 How can I fix this error? I have 2 ethernet cards, eth1 = 192.168.1.10 (DNS & iptables), eth0 = 192.168.0.10 (Wifi) Here a few thing that I'd edited: (uncomment) clients.conf client 192.168.0.0/24 secret = testing123-1 shortname = private-network-1 users add MarsindNet ClearText-Password := "testing123" Reply-Message := "Hello, %{User-Name}" eap.conf eap { default_eap_type = tls } tls { ..... fragment_size = 1024 include_length = yes } Next step I want to test Windows XP client but I couldn't find root.der & cert-clt.p12 as previous version have.
Kwok Sianbin wrote: ...
got some errors btool: install: error: cannot install "rlm_acctlog.la" to a directory not ending in /usr/local/lib/lib
In 10 years of fighting libtool, I have *never* seen this error. I have no idea what this means. Alan DeKok.
Hi,
Kwok Sianbin wrote: ...
got some errors btool: install: error: cannot install "rlm_acctlog.la" to a directory not ending in /usr/local/lib/lib
In 10 years of fighting libtool, I have *never* seen this error. I have no idea what this means.
http://lists.gnu.org/archive/html/libtool/2006-09/msg00066.html ? there are various weird issues with libtool - one of the nasty gotchas is if DESTDIR and prefix clash in some way , the usage of --with-libdir= is then thrown into the mix bets not to play with random paths in the ./configure stage just take a simple directory location and have the libs within in - like the default build does... alan
participants (3)
-
A.L.M.Buxey@lboro.ac.uk -
Alan DeKok -
Kwok Sianbin