WPA HOWTO

[OLIVER Patrice]

Do this

1) Be root.
2) create de directory (freeradius for example)
mkdir freeradius
cd freeradius

3) Follow these instructions :
apt-get update
apt-get build-dep freeradius
apt-get source freeradius
apt-get install libssl-dev fakeroot
apt-get source freeradius

cd freeradius-1.1.x/debian/
(1.1.x is the version)

Edit de control file

modify these two lines :
Build-Depends: debhelper (>= 5), libltdl3-dev, libpam0g-dev, libmysqlclient15-dev | libmysqlclient-dev,
libgdbm-dev, libldap2-dev, libsasl2-dev, libiodbc2-dev, libkrb5-dev, snmp, autotools-dev, dpatch (>=
2), libperl-dev, libtool, dpkg-dev (>= 1.13.19), libssl-dev
Build-Conflicts:

removing what is after 'Build-Conflics'

Add this at the end of the file :
Package: freeradius-eaptls
Architecture: any
Depends: freeradius (= ${binary:Version}), ${shlibs:Depends}
Description: eap-tls module for FreeRADIUS server
 Debian will not provide a binary version of the rlm_eap_tls.so library. This
 module is required if you want to use EAP/TLS authentication, commonly used
 for WiFi access points

Package: freeradius-eappeap
Architecture: any
Depends: freeradius (= ${binary:Version}), ${shlibs:Depends}
Description: eap-peap module for FreeRADIUS server
 Debian will not provide a binary version of the rlm_eap_peap.so library. This
 module is required if you want to use EAP/PEAP authentication, commonly used
 for WiFi access points

Save the control file

Edit de rules file
Modify it to get something like this :
buildssl=--without-rlm_otp --without-rlm_sql_postgresql --without-snmp
modulelist=krb5 ldap sql_mysql sql_iodbc eap_peap eap_tls

Save it

Create a file named freeradius-eaptls.install, containing :
usr/lib/freeradius/rlm_eap_tls*.so

Create a file named freeradius-eaptls.postinst, containing :
#! /bin/sh

set -e

case "$1" in
 configure)
       if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then
         invoke-rc.d freeradius restart
       else
         /etc/init.d/freeradius restart
       fi
       ;;
 abort-upgrade)
       ;;
 abort-remove)
       ;;
 abort-deconfigure)
       ;;
esac

#DEBHELPER#

Create a file named freeradius-eappeap.install, containing :
usr/lib/freeradius/rlm_eap_peap*.so

Create a file named freeradios-eappeap.postinst, containing :
#! /bin/sh

set -e

case "$1" in
 configure)
       if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then
         invoke-rc.d freeradius reload
       else
         /etc/init.d/freeradius reload
       fi
       ;;
 abort-upgrade)
       ;;
 abort-remove)
       ;;
 abort-deconfigure)
       ;;
esac

#DEBHELPER#

cd .. (so you are si freeradius/freeradius-1.1.x directory)
dpkg-buildpackage -r -uc -us
After a few minutes, you will get your new packages in freeradius directory.

After, you just have to protect your installation from upgrades. See google for that, I don't have the
documentation here.


Cordialement,

----------------------------------------
Patrice OLIVER
Chef du Projet Ville Hôpital
Responsable Réseaux & Sécurité
----------------------------------------
HOSPICES CIVILS DE BEAUNE
Service Informatique
BP 104
21203 BEAUNE CEDEX

Tél. 33 3 80 24 44 09
Fax  33 3 80 24 45 90
----------------------------------------


-----Original Message-----
From: Alan DeKok <aland at deployingradius.com>
To: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>
Date: Wed, 21 Nov 2007 11:35:13 +0100
Subject: Re: WPA HOWTO

> build wrote:
> > Thank you both your patience is appreciated.
> > The build failed?
> ...
> > sh: gcc: command not found
> 
>   You do need a compiler to compile things.
> 
> > dpkg-checkbuilddeps: Unmet build dependencies: debhelper (>= 5)
> > libltdl3-dev libpam0g-dev libmysqlclient15-dev | libmysqlclient-dev
> > libgdbm-dev libldap2-dev libsasl2-dev libiodbc2-dev libkrb5-dev snmp
> > autotools-dev dpatch (>= 2) libperl-dev libtool libpq-dev libsnmp-dev
> > libssl-dev
> 
>   So... install those packages?
> 
> > and I have no bloody idea what to do.
> 
>   Read the Debian documentation for how to build packages, and what you
> need.
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html