Authorization via LDAP Authentication via PAM
Hello,
In the radiusd.conf file you have the choice of specifing what Modules
are used to:
authorize {
preprocess
suffix
ldap
}
And
authenticate {
pam
}
Is it posible to authorize via Ldap (Active Directory, including all
radius attributes) and authenticate via Pam (Kerberos v, Windows 2000
KDC)?
Also is it posible to return a set of radius attribute/value-pair's from
a single ldap schema attribute? Eg:
When I created our radius ldap schema, I only wanted to create ldap
attributes for radius attribute/value-pair's used to check eg:
Called-Station-Id etc. I created a generic ldap attribute called
radiusGenericReturn, this would hold a value (attribute/value-pair)
like: Framed-Protocol=Framed, Framed-IP-Address=192.168.0.234,
Framed-IP-Netmask=255.255.255.0 ..., this would allow the addition of
any new radius attribute's with ease.
Is this posible?
Thanks
Allister Maguire
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
checkrad doesn't work
hi all
i'm here again,now i'm using Redback(NAS),freeradius4.0 on linux, and
openldap2.0.19 on AIX.i set Simultanous-use:=1 in file users,but when i test(send a
packet to radius server),checkrad haven't been called,in my radiusd.conf i configured
session {
radutmp
}
so how can i control multi loggin? i've read the doc/Simultaneous-Use but no help,so
please help,you are so kind.thanks for any help.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco 340 WinXP
hi first of all thanks for support. second: nope, it didn't help :( Try Auth-Type := EAP and remove eap in the authorize and check if it works. That is even worth. Then the eap-mod says that it can't find neither Username nor password. or try eap as the last one in the above authorize block. Which changed nothing, sorry... The problem is that the configured User-Password is never picked into the REQUEST-config_items VALUE_PAIR. Yes, evidently the password is not given to the module for validation... What should I do? tcpdump? Thanks artur -- Artur Hecker Groupe Accès et Mobilité [EMAIL PROTECTED]Département Informatique et Réseaux +33 1 45 81 750746, rue Barrault 75634 Paris cedex 13 http://www.infres.enst.fr ENST Paris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco 340 WinXP
Artur Hecker [EMAIL PROTECTED] wrote: The problem is that the configured User-Password is never picked into the REQUEST-config_items VALUE_PAIR. Yes, evidently the password is not given to the module for validation... What should I do? tcpdump? No, the problem is in the server. If you have time/interest/whatever, you can try tracking down exactly what attributes are added to the list of config items, and when. Once the 'users' file adds the User-Password attribute properly, then the EAP module should be able to find it. However, this may require breaking backwards compatibility a bit. That doesn't bother me too much, though. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco 340 WinXP
hi No, the problem is in the server. If you have time/interest/whatever, you can try tracking down exactly what attributes are added to the list of config items, and when. I have both :) I will try... I think it would be better to try the newest snapshot first... Then: question to the list - DOES ANYBODY HAVE EAP/MD5 WORKING? Could you provide me your configuration details in that case? Any tricks? Once the 'users' file adds the User-Password attribute properly, then the EAP module should be able to find it. However, this may require breaking backwards compatibility a bit. That doesn't bother me too much, though. Ok, where should I begin? artur -- Artur Hecker Groupe Accès et Mobilité hecker[at]enst[dot]fr Département Informatique et Réseaux +33 1 45 81 750746, rue Barrault 75634 Paris cedex 13 http://www.infres.enst.fr ENST Paris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: [Oz-ISP] Portmaster 2E
On Sat, 11 May 2002 16:16:52 +0200, Artur Hecker wrote: you said that your device (portmaster 2E) supposes the radius-server to be on port x which can't be reconfigured. if i understand well, your Hey! I have a Portmaster 2e and one month ago I just changed the accounting port and server to freeradius using the rfc port 18xx (i forgot right now, too much beer), when it was on the old cistron port 1646. As opiniões formuladas neste e-mail são de caráter exclusivamente pessoal. Minha opinião não necessariamente representa a opinião do meu Moto Grupo nem da empresa onde trabalho. Mene Sakkhet ur-seveh Alexandre Ganso - Diretor Steel Goose Moto Group 6, 7 e 8 de setembro - Aniversario 10 anos Steel Goose - Ouro Branco - MG 500 Four Vermelha [EMAIL PROTECTED] ICQ# 3778773 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radzap...old issue
Anteva Support [EMAIL PROTECTED] wrote: The fact is that radzap won't do jack unless it can talk to the termserver from whence the connection was made. No, the error messages are confusing you. radzap: zapping termserver ip.addr.of.termserver, port 14, user user@realm radzap: no response from server This message does NOT mean that it's trying to contact the terminal server, it means that radzap is trying to contact the RADIUS server. 1: The termserver parameter is required. Yes... you have to say which NAS the user was logged in on. 2: It has been my experience that it doesn't matter what the value is, it still won't work 3: I've tried the following and always get either 'no entry found' or 'no response from server': OK... the 'entry not found' means that it's looking up an entry in the 'radutmp' file, and not finding it. 'strace radzap ...' will show you what's happening. The problem is really that 'radzap' is old, and meant to work only with the 'radutmp' file. That's wrong, and should be fixed. Instead, it should send a fake accounting packet to the server, and never look at the radutmp file. That will require source code patches. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Using ippool with two radius servers?
Echo FreeRadius [EMAIL PROTECTED] wrote: For example we are in the process of putting in 4 Nortel CVX 1800's with 1288 lines each all in one large roll over (5152 lines) in the GTA (Greater Toronto Area) From those 4 CVX's we are going to provide wholesale dialup port for 4 - 10 different ISP's ... Anyway we wouldn't want each ISP to have to assign 1288 IP's to each NAS as this would be a large waste of IP addresses. If we can have radius assign IP's then this greatly reduces the number of IP's allocated. This means that a particular IP address can be assigned on the fly to any one of 4 NAS boxes. In order to route the packet to the correct NAS, you've got to add a new route for that IP. This means (as Miquel said) thousands of routes, and hundreds of route flaps. I'm not sure how else to do it. Bridging and a smart switch may help, but then you've got to forcibly expire arp entries in the switch, and add new ones, when an IP address moves from NAS to NAS. That may be hard. Again for redundancy and performance we will likely have 2-4 radius servers per company depending on the redundancy level they require. The sharing of IP's between radius server IPpools is a great asset. It's also hard. You get into consistency issues, where the sharing may only done every so often, but customers may switch IP's and re-dial more often than that. I would think about the issues VERY carefully before implementing such a large and complicated network. Be very sure that you can do everything needed to make it work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco 340 WinXP
Artur Hecker wrote: hi first of all thanks for support. second: nope, it didn't help :( Try Auth-Type := EAP and remove eap in the authorize and check if it works. That is even worth. Then the eap-mod says that it can't find neither Username nor password. This is even strange. Can you post the logs for this. or try eap as the last one in the above authorize block. Which changed nothing, sorry... The problem is that the configured User-Password is never picked into the REQUEST-config_items VALUE_PAIR. Yes, evidently the password is not given to the module for validation... It looks like a configuration issue. If you can post your Users file, radiusd.conf and the corresponding logs, It would certaily help us to locate the problem. -Raghu - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
add a new client
i am using Free-Radius with mysql, everything works perfect, but i got a issue... when i want to add a new client in the clients.conf file, i have to stop the Free-Radius, and start it again, so it can reread the clients.conf file, and see the new client added. the problem is, while i am stoping the Free-Radius i lose data, becuase i recieve data every second what can i do to add a new client in the clients.conf and the Free-Radius read the new clients.conf file, without stop the radiusd.? thanks for any help.. David ___ GO.com Mail Get Your Free, Private E-mail at http://mail.go.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
EAP/MD5 on Solaris 8...
v0.5 will Seg fault - Searching the list, it's known and patches were put in CVS... So I grabbed the latest snapshot (20020517) and it doesn't compile at all... I used configure with the following options (same as I did for v0.5): ./configure --prefix=/usr/local/freeradius \ --with-raddbdir=/usr/local/freeradius/etc \ --with-rlm-ldap-lib-dir=/usr/local/openldap/lib \ --with-rlm-ldap-include-dir=/usr/local/openldap/include \ --with-ldap-lib-dir=/usr/local/openldap/lib \ --with-ldap-include-dir=/usr/local/openldap/lib Here's the last part of make: gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -I../include -o threads.o -c threads.c threads.c: In function `rad_fork': threads.c:743: warning: declaration of `sigset' shadows global declaration threads.c: In function `rad_waitpid': threads.c:872: `WNOHANG' undeclared (first use in this function) threads.c:872: (Each undeclared identifier is reported only once threads.c:872: for each function it appears in.) make[4]: *** [threads.o] Error 1 make[4]: Leaving directory `/usr/local/src/hades/freeradius-snapshot-20020517/src/main' make[3]: *** [common] Error 1 make[3]: Leaving directory `/usr/local/src/hades/freeradius-snapshot-20020517/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/usr/local/src/hades/freeradius-snapshot-20020517/src' make[1]: *** [common] Error 1 make[1]: Leaving directory `/usr/local/src/hades/freeradius-snapshot-20020517' make: *** [all] Error 2 begin:vcard adr;dom:;;;Lawrenceville;NJ;08648; adr:;;2083 Lawreceville Road;Lawrenceville;NJ;08648; n:Stella;Ricardo tel;fax:1-208-330-8297 tel;work:1-609-896-5000 x7436 x-mozilla-html:FALSE url:http://poseidon.rider.edu org:Rider University;O.I.T. version:2.1 title:Manager x-mozilla-cpt:;-3024 fn:Ricardo Stella end:vcard
Re: Using ippool with two radius servers?
In article 00a101c1fd56$61050be0$b800a8c0@kelvindell, Echo FreeRadius [EMAIL PROTECTED] wrote: For example we are in the process of putting in 4 Nortel CVX 1800's with 1288 lines each all in one large roll over (5152 lines) in the GTA (Greater Toronto Area) From those 4 CVX's we are going to provide wholesale dialup port for 4 - 10 different ISP's Each ISP wants their customers to receive an address form their IP block so it resolves back to their company. This is done for several reasons controlling access to SMTP servers and other resources as well as just for appearance so that their customers can't see that we use the same dial-up ports. So you create 1 pool for each ISP on each CVX. The CVX supports multiple pools, and you can tell it which pool to use using a radius attribute. If you have 4 CVXes, just make each pool 25% of the max. number of dialin lines an ISP may use. Well maybe a bit larger to allow for not-perfect distribution of clients over the 4 CVXes. Mike. -- Insanity -- a perfectly rational adjustment to an insane world. - R.D. Lang - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Accounting updates losing username in sqltrace
FreeRadius 0.5 snapshot 15-05-2002 on RedHat 7.1.
Using MySQL for authentication, authorisation and accouinting.
Cisco 3640 dial NAS, IOS 11.2
I'm having a problem with accounting update information. The Cisco doesn't
send the Framed-IP-Address returned to the user in the first accounting
packet (an issue with this version IOS I believe from the notes). It DOES
send a second, update, packet with the Framed-IP-Address info. I can see
this in the sqltrace for FreeRadius.
However, the SQL statement attempting to do this update to the accounting
record for the session (into radacct) is showing 'username' as empty ('')
as opposed to the proper username (which appears in the initial accouting
insert just OK). Thus the update packet isn't finding the right accounting
record to update and the Framed-IP-Address for the user doesn't get updated
into the record. Thus, I can't see what IP addresses users have when
looking at radacct.
I've looked at the SQL statements in sql.conf, and the accounting updates
appear to use the same phrasing for usernames as the accounting inserts
%{SQL_User_Name}.
The accounting stops work OK and include the right username too. It's just
the updates which don't seem to include it.
Any ideas anyone?
In sql.conf I also have sql_user_name=%{stripped_sql_username}; set (for
realm stripping) - could this be contributing to the problem at all? (If
so, why aren't accounting inserts (starts) and stops affected?)
PS: Not wanting to point fingers, but our previous RADIUS server had no
trouble with this, and accounted IP updates correctly, so hence why I'm
hazarding FreeRadius is having an issue here... and the evidence from the
SQL trace.
PPS: Yes, the Cisco is now scheduled for an IOS upgrade anyway, but that
means downtime and can't be done immediately, and I'd like to solve this
little mystery if I can a bit quicker.
PPPS: Running FR in full debug (-X) shows very little at this point in the
proceedings (just the SQL update statements with an empty username
parameter) and hasn't been much help... which is unusual...
Regards,
Scott Bartlett
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: add a new client
Alex hagi [EMAIL PROTECTED] wrote: what can i do to add a new client in the clients.conf and the Free-Radius read the new clients.conf file, without stop the radiusd.? See the FAQ. 5.8 applies to clients.conf, too. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: EAP/MD5 on Solaris 8...
Ricardo Stella [EMAIL PROTECTED] wrote: So I grabbed the latest snapshot (20020517) and it doesn't compile at all... grumble Cross-platform programming is a pain. Which platform are you building it on? I've committed something which should fix it, so the current CVS, or tonight's snapshot should work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: EAP/MD5 on Solaris 8...
Sparc Ultra 10... I'll try tomorrow's snapshot... Thanks for your help... Alan DeKok wrote: Ricardo Stella [EMAIL PROTECTED] wrote: So I grabbed the latest snapshot (20020517) and it doesn't compile at all... grumble Cross-platform programming is a pain. Which platform are you building it on? I've committed something which should fix it, so the current CVS, or tonight's snapshot should work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html begin:vcard adr;dom:;;;Lawrenceville;NJ;08648; adr:;;2083 Lawreceville Road;Lawrenceville;NJ;08648; n:Stella;Ricardo tel;fax:1-208-330-8297 tel;work:1-609-896-5000 x7436 x-mozilla-html:FALSE url:http://poseidon.rider.edu org:Rider University;O.I.T. version:2.1 title:Manager x-mozilla-cpt:;-3024 fn:Ricardo Stella end:vcard
Re: Accounting updates losing username in sqltrace
[EMAIL PROTECTED] wrote:
Read the docs. This is covered in the 'cisco' readme in the 'docs'
directory.
I did that before posting to the list... ;-).
You need to add a config command to your cisco NAS that tells them not
to send the accounting packet until it has assigned the IP.
The docs (correctly, according to Cisco's web site) note that from IOS 11.3
you can do the aaa accounting update new-info to do that. Oddly, our
11.2 box has this command in it's config (without error). More importantly,
as noted in my message, the NAS *is* actually sending separate update
messages a few seconds after the initial accounting packets, and those
updates contain the Framed-IP-Address (although it shouldn't?) - this fact
is confirmed by the sqltrace file contents and the FR main debug trace (and
the fact our old RADIUS server saw and used them too). Maybe it's something
to do with the point version of the IOS (11.2(16)P) or something...
whatever...
My point is, even though the Cisco is actually sending updates (although
according to the docs it shouldn't be, FR seems to be gaffing them on the
SQL UPDATES to the database - the SQL statements in the sqltrace debug
showing 'username' being empty ('').
My initial thought was actually that the NAS wasn't including the username
in the update request. Nope - the old RADIUS server picked it up just
fine... the problem only exists with FR. Either that, or the old RADIUS did
some extrapolation to work out the missing user name (e.g. using session
ID's or something). If it wasn't for the fact that this kit is in co-lo
miles away I'd run over there and plug in a sniffer to be sure...
Regards,
SB
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Accounting updates losing username in sqltrace
At 06:43 PM 5/17/2002 +0100, freeradius-users wrote: FreeRadius 0.5 snapshot 15-05-2002 on RedHat 7.1. Using MySQL for authentication, authorisation and accouinting. Cisco 3640 dial NAS, IOS 11.2 I'm having a problem with accounting update information. The Cisco doesn't send the Framed-IP-Address returned to the user in the first accounting Read the docs. This is covered in the 'cisco' readme in the 'docs' directory. You need to add a config command to your cisco NAS that tells them not to send the accounting packet until it has assigned the IP. -Chris -- \\\|||/// \ StarNet Inc. \ Chris Parker \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering | |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Accounting updates losing username in sqltrace
At 07:15 PM 5/17/2002 +0100, freeradius-users wrote: [EMAIL PROTECTED] wrote: Read the docs. This is covered in the 'cisco' readme in the 'docs' directory. I did that before posting to the list... ;-). You need to add a config command to your cisco NAS that tells them not to send the accounting packet until it has assigned the IP. The docs (correctly, according to Cisco's web site) note that from IOS 11.3 you can do the aaa accounting update new-info to do that. Oddly, our 11.2 box has this command in it's config (without error). 11.2 is really really old, wow. That predates even the 11.3 docs, which was about the first release that was marginally functional for a NAS. 11.3 and later ( 12.0, 12.1, 12.2 ) all have the command: aaa accounting delay-start which causes the nas to wait until it has an IP assigned. I would highly recommend updating to a more recent IOS. My initial thought was actually that the NAS wasn't including the username in the update request. Nope - the old RADIUS server picked it up just fine... the problem only exists with FR. Either that, or the old RADIUS did some extrapolation to work out the missing user name (e.g. using session ID's or something). If it wasn't for the fact that this kit is in co-lo miles away I'd run over there and plug in a sniffer to be sure... You may need to modify/update your 'sql.conf', so that the username is pulled correctly from the packet. See the part where it discusess the options you can use to set what values ( and what order it tries ) to find the username to use. -Chris -- \\\|||/// \ StarNet Inc. \ Chris Parker \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering | @ @ |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Accounting updates losing username in sqltrace
[EMAIL PROTECTED] wrote: 11.2 is really really old, wow. That predates even the 11.3 docs, which was about the first release that was marginally functional for a NAS. Well, our 3640's have actually been like tanks for several years - reliable and solid. They only do basic Modem and ISDN dial-up (using channelised PRI cards and digital modem modules) so upgrading them hasn't been in the forefront of my mind! If it ain't broke, don't fix it. Still, time moves and needs must, etc... 11.3 and later ( 12.0, 12.1, 12.2 ) all have the command: aaa accounting delay-start which causes the nas to wait until it has an IP assigned. Yep, this is where I'm thinking I should be - waiting to get the IP into the initial packet. I would highly recommend updating to a more recent IOS. Yep, as noted I'm now going to do that anyway (but it means a late-night trip to co-lo... dull...). 12.1 here we come... ;-) You may need to modify/update your 'sql.conf', so that the username is pulled correctly from the packet. See the part where it discusess the options you can use to set what values ( and what order it tries ) to find the username to use. Thanks for the info Chris, I'll go do some more digging... Regards, Scott Bartlett BTA Limited, 100 High Street Wandsworth, London SW18 4LA, United Kingdom e: [EMAIL PROTECTED]v: +44 (0)20 8871 4240 f: +44 (0)20 8871 4584 Network Consultancy and Support for Windows 9x/NT and MacOS. Internet connectivity, solutions, and business services. http://www.bta.com. This message is intended only for the use of the person(s) (The intended recipient(s)) to whom it is addressed. It may contain information which is privileged and confidential within the meaning of applicable law. If you are not the intended recipient, please contact the sender as soon as possible. The views expressed in this communication may not necessarily be the views held by BTA. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
modify clients.conf
i am using Free-Radius, with mysql, but the problem that i have is, when i have to added a new client, in the clients.conf filei have to restart the free-radius, kill the proccess and start it again, while i stop and start the radiusd, i lose data. how can i reread the new clients.conf file after added a client without stop the radiusd? thanks in advance. David ___ GO.com Mail Get Your Free, Private E-mail at http://mail.go.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Freeradius-Users -- confirmation of subscription -- request 849612
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Friday, May 17, 2002 10:25 PM To: [EMAIL PROTECTED] Subject: Freeradius-Users -- confirmation of subscription -- request 849612 Freeradius-Users -- confirmation of subscription -- request 849612 We have received a request from 206.105.64.25 for subscription of your email address, [EMAIL PROTECTED], to the [EMAIL PROTECTED] mailing list. To confirm the request, please send a message to [EMAIL PROTECTED], and either: - maintain the subject line as is (the reply's additional Re: is ok), - or include the following line - and only the following line - in the message body: confirm 849612 (Simply sending a 'reply' to this message should work from most email interfaces, since that usually leaves the subject line in the right form.) If you do not wish to subscribe to this list, please simply disregard this message. Send questions to [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Compiling errors
I have just downloaded FreeRadius 0.5. and am trying to compile it on Solaris 8 for Sparc. I can run the configure command but when I run make I get the following errors gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DND EBUG -I../../include -c rlm_eap.c -o rlm_eap.o In file included from rlm_eap.c:25: eap.h:9: ltdl.h: No such file or directory In file included from eap.h:17, from rlm_eap.c:25: /usr/include/netinet/in.h:271: warning: `INADDR_ANY' redefined ../../include/missing.h:73: warning: this is the location of the previous definition /usr/include/netinet/in.h:272: warning: `INADDR_LOOPBACK' redefined ../../include/missing.h:77: warning: this is the location of the previous definition make[6]: *** [rlm_eap.o] Error 1 make[6]: Leaving directory `/export/home/russell/freeradius-0.5/src/modules/rlm_eap' make[5]: *** [common] Error 1 make[5]: Leaving directory `/export/home/russell/freeradius-0.5/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/export/home/russell/freeradius-0.5/src/modules' make[3]: *** [common] Error 1 make[3]: Leaving directory `/export/home/russell/freeradius-0.5/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/export/home/russell/freeradius-0.5/src' make[1]: *** [common] Error 1 make[1]: Leaving directory `/export/home/russell/freeradius-0.5' make: *** [all] Error 2 Could someone please tell me what the problem might be. Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Compiling errors
What did you use for configure options? I've compile on the same platform successfully. I use ldap and mysql (for accounting), so my configure options were:#!/bin/sh # ./configure --enable-ldap=yes --enable-mysql=yes Sincerely, Michael Klatsky Senior Unix Administrator Connecticut Telephone 1 Talcott Plaza Hartford, CT 06103 1-860-240-6496 On Fri, 2002-05-17 at 22:36, Russell Premont wrote: I have just downloaded FreeRadius 0.5. and am trying to compile it on Solaris 8 for Sparc. I can run the configure command but when I run make I get the following errors gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DND EBUG -I../../include -c rlm_eap.c -o rlm_eap.o In file included from rlm_eap.c:25: eap.h:9: ltdl.h: No such file or directory In file included from eap.h:17, from rlm_eap.c:25: /usr/include/netinet/in.h:271: warning: `INADDR_ANY' redefined ../../include/missing.h:73: warning: this is the location of the previous definition /usr/include/netinet/in.h:272: warning: `INADDR_LOOPBACK' redefined ../../include/missing.h:77: warning: this is the location of the previous definition make[6]: *** [rlm_eap.o] Error 1 make[6]: Leaving directory `/export/home/russell/freeradius-0.5/src/modules/rlm_eap' make[5]: *** [common] Error 1 make[5]: Leaving directory `/export/home/russell/freeradius-0.5/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/export/home/russell/freeradius-0.5/src/modules' make[3]: *** [common] Error 1 make[3]: Leaving directory `/export/home/russell/freeradius-0.5/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/export/home/russell/freeradius-0.5/src' make[1]: *** [common] Error 1 make[1]: Leaving directory `/export/home/russell/freeradius-0.5' make: *** [all] Error 2 Could someone please tell me what the problem might be. Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
