Hi
I am trying to Install Freeradius1.0.2 on Redhat 7.2. and am using
openssl-0.9.7. I have installed openssl in /usr/local/openssl
and to install freeradius i executed the following commands
./configure --with-openssl-includes=/usr/local/openssl/include
--with-openssl-libraries=/usr/local/openssl/lib
make
and make install
Before the make , I also ensured that the makefile for tls was
generated properly
The installation seems successful, but in case of a EAP-TLS request,
the server gives a segmentation fault as in the following logs:
modcall: group authorize returns updated for request 2
rad_check_password: Found Auth-Type EAP
auth: type "EAP"
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 2
rlm_eap: Request found, released from the list
rlm_eap: EAP/tls
rlm_eap: processing type tls
rlm_eap_tls: Authenticate
rlm_eap_tls: processing TLS
rlm_eap_tls: Length Included
eaptls_verify returned 11
(other): before/accept initialization
TLS_accept: before/accept initialization
TLS_accept: SSLv3 read client hello A
TLS_accept: SSLv3 write server hello A
./run-radius: line 5: 1164 Segmentation fault
/usr/local/sbin/radiusd -X -A
Having gone through other mails in the list, this looks like a
problem with 2 version of openssl running on the machine and
freeradius is not looking for the right one.
But the information provided by ldd command on the system shows that
the freeradius is looking for the library files at
/usr/local/openssl/lib ( which is where i have installed openssl0.9.7)
I Also Attempted this :tried editing the /etc/ld.so.conf and appended
/usr/local/openssl/lib. And executed ldconfig -v to update the
ld.so.cache.
Although it looks like the problem is due to 2 different versions of
openssl, but still the ldd command executed on rlm_eap_tls.so and
rlm_eap_tls.so-1.0.2 and radiusd show that they use the libcrypto0.9.7
and libssl.0.9.7 which i have installed at /usr/loca/openssl/lib.
Following is the output of the ldd commmands executed on these three
files...
1) ldd /usr/local/sbin/radiusd
libcrypt.so.1 => /lib/libcrypt.so.1 (0x40033000)
libnsl.so.1 => /lib/libnsl.so.1 (0x40060000)
libresolv.so.2 => /lib/libresolv.so.2 (0x40076000)
libpthread.so.0 => /lib/i686/libpthread.so.0 (0x40088000)
libcrypto.so.2 => /lib/libcrypto.so.2 (0x4009d000)
libssl.so.2 => /lib/libssl.so.2 (0x40160000)
libradius-1.0.2.so => /usr/local/lib/libradius-1.0.2.so (0x4018e000)
libsnmp-0.4.2.1.so => /usr/lib/libsnmp-0.4.2.1.so (0x401a1000)
libltdl.so.3 => /usr/lib/libltdl.so.3 (0x401f8000)
libdl.so.2 => /lib/libdl.so.2 (0x401fe000)
libc.so.6 => /lib/i686/libc.so.6 (0x40202000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
2)ldd /usr/local/lib/rlm_eap_tls-1.0.2.so
libssl.so.0.9.7 => /usr/local/openssl/lib/libssl.so.0.9.7 (0x40024000)
libcrypto.so.0.9.7 =>
/usr/local/openssl/lib/libcrypto.so.0.9.7 (0x40053000)
libnsl.so.1 => /lib/libnsl.so.1 (0x40146000)
libresolv.so.2 => /lib/libresolv.so.2 (0x4015c000)
libpthread.so.0 => /lib/i686/libpthread.so.0 (0x4016e000)
libc.so.6 => /lib/i686/libc.so.6 (0x40183000)
libdl.so.2 => /lib/libdl.so.2 (0x402bf000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000)
3) libssl.so.0.9.7 => /usr/local/openssl/lib/libssl.so.0.9.7 (0x40024000)
libcrypto.so.0.9.7 =>
/usr/local/openssl/lib/libcrypto.so.0.9.7 (0x40053000)
libnsl.so.1 => /lib/libnsl.so.1 (0x40146000)
libresolv.so.2 => /lib/libresolv.so.2 (0x4015c000)
libpthread.so.0 => /lib/i686/libpthread.so.0 (0x4016e000)
libc.so.6 => /lib/i686/libc.so.6 (0x40183000)
libdl.so.2 => /lib/libdl.so.2 (0x402bf000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000)
can any of you help me on understanding where i am going wrong and
whats else i need to be doiing to get this fixed.
thanks a lot
regards
arun
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
