2.0.5 on Solaris with openssl 0.9.8h [SEC=UNCLASSIFIED]

[Rafiqul Ahsan]

Hi Alan,

Thank you for your responses, and I appreciate for your time. I have
few Sun machines, T2000, V210 - all of them has Solaris 10 with
/usr/sfw/ dirs...Not sure I would try deleting the directory. But
before going in to that approach, I have done a little test....

1. I moved libssl.so.0.9.7, and libcrypto.so.0.9.7 from /usr/sfw/lib
directory, and copied libssl.0.9.8, and libcrypto.0.9.8 in to this
directory.

2. Having following path, and FLAGS...
bash-3.00# echo $PATH
/usr/sbin:/usr/bin:/usr/local/ssl/bin:/usr/sfw/bin:/usr/local/bin:/usr/ccs/bin
bash-3.00# echo LDFLAGS
LDFLAGS
bash-3.00# echo $LDFLAGS
-L/usr/local/ssl/lib -R/usr/local/ssl/lib
bash-3.00# echo $CPPFLAGS
-I/usr/local/ssl/include/openssl
bash-3.00# echo $CFLAGS
-I/usr/local/ssl/include/openssl
bash-3.00# crle
Configuration file [version 4]: /var/ld/ld.config
  Default Library Path (ELF):   /lib/:/usr/lib:/usr/local/ssl/lib
  Trusted Directories (ELF):    /lib/secure:/usr/lib/secure  (system default)
Command line:
  crle -c /var/ld/ld.config -l /lib/:/usr/lib:/usr/local/ssl/lib
bash-3.00# echo $LD_LIBRARY_PATH
/usr/lib:/usr/local/ssl/lib

3. ./configure --prefix=/usr/local --with-openssl-includes=/usr/local/s
sl/include --with-openssl-libraries=/usr/local/ssl/lib

See the below WARNING :
configure: WARNING: pcap library not found, silently disabling the
RADIUS sniffer.
config.status: WARNING: ./Make.inc.in seems to ignore the --datarootdir setting
config.status: WARNING: ./src/include/build-radpaths-h.in seems to
ignore the --datarootdir setting
chmod: WARNING: can't access check-radiusd-config
configure: WARNING: silently not building rlm_counter.
configure: WARNING: FAILURE: rlm_counter requires: libgdbm.
configure: WARNING: silently not building rlm_eap_tls.
configure: WARNING: FAILURE: rlm_eap_tls requires: OpenSSL.
configure: WARNING: silently not building rlm_eap_ttls.
configure: WARNING: FAILURE: rlm_eap_ttls requires: OpenSSL.
configure: WARNING: silently not building rlm_eap_ikev2.
configure: WARNING: FAILURE: rlm_eap_ikev2 requires: libeap-ikev2
EAPIKEv2/connector.h.
configure: WARNING: the TNCS library isn't found!
configure: WARNING: silently not building rlm_eap_tnc.
configure: WARNING: FAILURE: rlm_eap_tnc requires: -lTNCS.
configure: WARNING: silently not building rlm_eap_peap.
configure: WARNING: FAILURE: rlm_eap_peap requires: OpenSSL.
configure: WARNING: silently not building rlm_ippool.
configure: WARNING: FAILURE: rlm_ippool requires: libgdbm.
configure: WARNING: neither krb5 'k5crypto' nor 'crypto' libraries are found!
configure: WARNING: the comm_err library isn't found!
configure: WARNING: silently not building rlm_krb5.
configure: WARNING: FAILURE: rlm_krb5 requires: krb5.h.
configure: WARNING: silently not building rlm_ldap.
configure: WARNING: FAILURE: rlm_ldap requires: libldap_r.
configure: WARNING: silently not building rlm_otp.
configure: WARNING: FAILURE: rlm_otp requires: openssl-libs.
configure: WARNING: silently not building rlm_perl.
configure: WARNING: FAILURE: rlm_perl requires: EXTERN.h perl.h libperl.so.
configure: WARNING: silently not building rlm_python.
configure: WARNING: FAILURE: rlm_python requires: Python.h libpython2.3.
configure: WARNING: silently not building rlm_sql_iodbc.
configure: WARNING: FAILURE: rlm_sql_iodbc requires: libiodbc isql.h.
configure: WARNING: silently not building rlm_sql_postgresql.
configure: WARNING: FAILURE: rlm_sql_postgresql requires: libpq.
configure: WARNING: oracle headers not found. Use --with-oracle-home-dir=<path>.
configure: WARNING: silently not building rlm_sql_oracle.
configure: WARNING: FAILURE: rlm_sql_oracle requires: oci.h.
configure: WARNING: silently not building rlm_sql_unixodbc.
configure: WARNING: FAILURE: rlm_sql_unixodbc requires: libodbc sql.h.

4. Make --- never creates rlm_eap_ttls/tls.o

5. Make install creates new radiusd...but with no libssl.so.0.9.X, and
libcrypto.so.0.9.X
Here is the output...
# ldd /usr/local/sbin/radiusd
libfreeradius-radius-2.0.5.so => /usr/local/lib/libfreeradius-ra
dius-2.0.5.so
libnsl.so.1 => /lib//libnsl.so.1
libresolv.so.2 => /lib//libresolv.so.2
libsocket.so.1 => /lib//libsocket.so.1
librt.so.1 => /lib//librt.so.1
libpthread.so.1 => /lib//libpthread.so.1
libcrypt_d.so.1 => /usr/lib/libcrypt_d.so.1
libltdl.so.3 => /usr/local/lib/libltdl.so.3
libdl.so.1 => /lib//libdl.so.1
libc.so.1 => /lib//libc.so.1
libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1
libmp.so.2 => /lib//libmp.so.2
libmd.so.1 => /lib//libmd.so.1
libscf.so.1 => /lib//libscf.so.1
libaio.so.1 => /lib//libaio.so.1
libgen.so.1 => /lib//libgen.so.1
libdoor.so.1 => /lib//libdoor.so.1
libuutil.so.1 => /lib//libuutil.so.1
libm.so.2 => /lib//libm.so.2
/platform/SUNW,Sun-Fire-V210/lib/libc_psr.so.1
/platform/SUNW,Sun-Fire-V210/lib/libmd_psr.so.1


I am confused !!!!! ....I see it likes , and ONLY likes
libssl.so.0.9.7, and libcrypto.so.0.9.7 at /usr.sfw/lib ...

Rafi



On 8/18/08, Alan DeKok <aland at deployingradius.com> wrote:
> Rafiqul Ahsan wrote:
> >... The issue is why Freeradius radiusd is looking for
> > object libssl.so.0.9.7 libcrypto.so.0.9.7,
>
>  Because of the linker.  This has nothing to do with RADIUS.  It has
> nothing to do with FreeRADIUS.
>
>  If all else fails, build the server on *another* machine which
> *doesn't* have /usr/sfw/, and then copy the binaries && libraries over
> to the first machine.
>
>  Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>


-- 
Rafiqul Ahsan