How to complie FreeRADIUS 0.9.0 under CYGWIN
for x in $(MODULES);do test -f ../modules/$$x/$$x.la echo ../modules/$$x/$$x.la;done) +MODULE_OBJS+= $(shell for x in $(MODULES);do test -f ../modules/rlm_eap/types/$$x/$$x.la echo ../modules/rlm_eap/types/$$x/$$x.la;done) endif all: $(BINARIES) @@ -33,8 +35,8 @@ radiusd: $(SERVER_OBJS) ../lib/libradius.a $(MODULE_OBJS) $(LIBTOOL) --mode=link $(CC) -export-dynamic -dlopen self \ $(CFLAGS) $(LDFLAGS) -o $@ \ - $(SERVER_OBJS) $(LCRYPT) $(LIBS) \ - $(PTHREADLIB) $(LIBLTDL) $(MODULE_LIBS) + $(SERVER_OBJS) $(LIBS) \ + $(PTHREADLIB) $(LIBLTDL) $(MODULE_LIBS) $(LCRYPT) radiusd.o: radiusd.c $(INCLUDES) ../include/request_list.h ../include/modules.h ../include/modcall.h ../include/modpriv.h $(CC) $(CFLAGS) -c radiusd.c @@ -130,12 +132,12 @@ rm -rf *.o *.so *~ $(BINARIES) .libs install: - $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(INSTALLSTRIP) radiusd$(R)$(sbindir) - $(INSTALL) -m 755 $(INSTALLSTRIP) radwho $(R)$(bindir) - $(INSTALL) -m 755 $(INSTALLSTRIP) radzap $(R)$(bindir) + $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(INSTALLSTRIP) radiusd$(EXEEXT)$(R)$(sbindir) + $(INSTALL) -m 755 $(INSTALLSTRIP) radwho$(EXEEXT) $(R)$(bindir) + $(INSTALL) -m 755 $(INSTALLSTRIP) radzap$(EXEEXT) $(R)$(bindir) $(INSTALL) -m 755radlast$(R)$(bindir) - $(INSTALL) -m 755radclient $(R)$(bindir) - $(INSTALL) -m 755radrelay $(R)$(bindir) + $(INSTALL) -m 755radclient$(EXEEXT) $(R)$(bindir) + $(INSTALL) -m 755radrelay$(EXEEXT) $(R)$(bindir) $(INSTALL) -m 755radtest$(R)$(bindir) $(INSTALL) -d -m 755$(R)$(logdir) $(INSTALL) -d -m 755$(R)$(radacctdir) ~/freeradius-0.9.0/src/modules/stable --- stable.orig 2003-08-22 16:52:37.0 +1000 +++ stable 2003-07-31 09:11:52.0 +1000 @@ -8,6 +8,9 @@ rlm_detail rlm_digest rlm_eap +rlm_eap_leap +rlm_eap_md5 +rlm_eap_tls rlm_exec rlm_expr rlm_fastusers ~/freeradius-0.9.0/src/modules/rlm_dbm/Makefile.in --- Makefile.in.orig2003-08-22 16:58:41.0 +1000 +++ Makefile.in 2003-07-31 09:11:52.0 +1000 @@ -19,5 +19,5 @@ # rlm_dbm_install: $(INSTALL) -d -m 755$(R)$(bindir) - $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_parser $(R)$(bindir) - $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_cat$(R)$(bindir) + $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_parser$(EXEEXT) $(R)$(bindir) + $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_cat$(EXEEXT) $(R)$(bindir) ~/freeradius-0.9.0/src/modules/rlm_mschap/Makefile --- Makefile.orig 2003-08-22 16:57:51.0 +1000 +++ Makefile2003-07-31 09:11:52.0 +1000 @@ -17,4 +17,4 @@ smbencrypt-install: $(INSTALL) -d -m 755 $(R)$(bindir) - $(INSTALL) -m 755 $(INSTALLSTRIP) smbencrypt $(R)$(bindir) + $(INSTALL) -m 755 $(INSTALLSTRIP) smbencrypt$(EXEEXT) $(R)$(bindir) 6. Run configure with the following command line ./configure --without-snmp --disable-shared --enable-static 7. Execute make and then make install 8. Configure FreeRADIUS as usual. 9. If you want to run FreeRADIUS as a service, execute the following command cygrunsrv --install FreeRADIUS --path /usr/local/sbin/radiusd --args -y -s -f --shutdown --desc FreeRADIUS 0.9.0 - Cygwin --env PATH=/usr/local/bin:$PATH Philip Blow Senior Technical Manager Simply Wireless [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRadius and Cygwin
Hi, I've got FreeRADIUS 0.9.0 working on CYGWIN but have not had a chance to post the changes for doc/CYGWIN. If you can wait I hope to do this in the next few days. Cheers, Philip Blow Senior Technical Manager Simply Wireless -Original Message- From: A. Clausen [mailto:[EMAIL PROTECTED] Sent: Thursday, 21 August 2003 8:39 AM To: [EMAIL PROTECTED] Subject: Re: FreeRadius and Cygwin - Original Message - From: Chris Parker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, August 20, 2003 15:15 Subject: Re: FreeRadius and Cygwin At 02:53 PM 8/20/2003 -0700, A. Clausen wrote: Alright, I've done as much as I know how (darn little!), but its failing at this point: rm -f .libs/radiusdS.c .libs/radiusd.nm .libs/radiusd.nmS .libs/radiusd.nmT gcc snip ../modules/rlm_unix/.libs/rlm_unix.a -L/usr/src/freeradius-0.9.0/src/lib -l c rypt -lpthread /usr/src/freeradius-0.9.0/src/lib/.libs/libradius.a .libs/libimp-cygltdl-3.a /usr/src/freeradius-0.9.0/src/lib/.libs/libradius.a(crypt.o)( .text+0x35): In function `lrad_crypt_check': /usr/src/freeradius-0.9.0/src/lib/crypt.c:44: undefined reference to `_crypt' collect2: ld returned 1 exit status I'm at a loss. On my cygwin install, 'nm /usr/lib/libcrypt.a' does show a '_crypt' symbol. What does this show on your system? As does mine. What version of Cygwin are you running? -- Aaron Clausen - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Need Help with SNMP
Ats, The way I got this working was to remove the ifdefs in the headers files in /usr/include/ucd-snmp. Then it complies fine. I have also started making some other changes to allow more snmp information to be collected (it was to a pre 0.9.0 snapshot), but will need a bit more time to sort it out and the patches will need to be approved. Alan, I think that when the --enable-ucb-snmp-compatibility switch is passed to ./configure, the configure script does not #define UCD_COMPATABILITY. This might be the problem. Cheers, Philip Blow Senior Technical Manager Simply Wireless -Original Message- From: Atanu Das [mailto:[EMAIL PROTECTED] Sent: Wednesday, 30 July 2003 4:46 AM To: [EMAIL PROTECTED] Subject: Re: Need Help with SNMP Hi Alan, Thanks for such a prompt reply. I got your point. I think I will have to install the **OLD** version of ucd-snmp (ucd-snmp-4.2.6) in my RedHat 9 box. The headers that i have in /usr/include/ucd-snmp are asn1.h- #ifdef UCD_COMPATIBLE #include net-snmp/library/asn1.h #else #error Please update your headers or configure using --enable-ucd-snmp-compatibility #endif --snmp.h--- #ifdef UCD_COMPATIBLE #include net-snmp/library/snmp.h #else #error Please update your headers or configure using --enable-ucd-snmp-compatibility #endif ---snmp_impl.h- #ifdef UCD_COMPATIBLE #include net-snmp/net-snmp-config.h #include net-snmp/types.h #include net-snmp/library/snmp_impl.h #else #error Please update your headers or configure using --enable-ucd-snmp-compatibility #endif and all the files are using the headers of net-snmp. This has left me with no choice :) Thanks anyway Regards, Ats - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, July 29, 2003 11:31 PM Subject: Re: Need Help with SNMP Atanu Das [EMAIL PROTECTED] wrote: net-snmp-5.0.6-17 FreeRADIUS can't use net-snmp. This is just a wild guess. But I have the ucd-snmp as well net-snmp headers in /usr/include/ucd-snmp and /usr/include/net-snmp. Then get the server to look at *only* ucd-snmp, and ignore net-snmp. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: rlm_eap: State verification failed
Title: Message Klemens, The problem that you are experiencing is a known bug in the Symbol AP-4131 firmware. I pestered Symbol in Australia for a fix and managed to get a fixed version of the firmware on pre-release from the US to test that the problem was fixed. If you log a support call with Symbol you may also be able to get a copy to test - firmware version is 3.70-59y. Or use another vendors AP - Cisco 1200 and Orinoco 2000AP both work fine. The other problem that you might find is that if you attempt to use a Symbol LA-4121 PCMCIA card under Windows 2000, the driver does not send EAPOL messages to the AP and hence does not even start the 802.1X authentication process. Alternatively I do have some diffs for the FreeRADIUS source code, that I may have already posted, that change the state processing so that it works for Symbol APs. However, based on my experience - I'd use Cisco. It worked first time and has kept working. Cheers, Philip BlowSenior Technical ManagerSimply Wireless -Original Message-From: Klemens Jaeger [mailto:[EMAIL PROTECTED] Sent: Wednesday, 12 March 2003 1:57 AMTo: [EMAIL PROTECTED]Subject: rlm_eap: State verification failed hi! do I need the module "files" in radiusd.conf where the file "user" will be implemented? or is the module eap enough? thanks, kle
RE: EAP + Windows2000
Nadeem, Does your set up work for Windows XP clients? I would try that first. Then, check that client certificate you are using only has the Client Authentication Enhanced key usage property selected. I had to do this to get EAP to work under Windows XP and 2000. Also try another client card. I have had this working on Windows 2000 with both LinkSys And NetGear client cards. Philip Blow Senior Technical Manager Simply Wireless [EMAIL PROTECTED] -Original Message- From: Nadeem Akhtar [mailto:[EMAIL PROTECTED]] Sent: Thursday, 13 February 2003 6:38 AM To: [EMAIL PROTECTED] Subject: EAP + Windows2000 Hi, I'm trying to set up eap-tls based authentication between a wireless client (Windows 2000) and a Cisco Aironet 350 AP. I've installed certificates in the client and a RADIUS server is also up and running. The problem is that the client is not authenticated. I used Ethereal to capture packets on the client wireless interface and I can see the 'Request, identity' EAP packet from the AP but there is no response from the client! Can anyone tell me how to debug this problem or any other leads on this. Regards, Nadeem Nadeem Akhtar Centre for Comm. Systems Research University of Surrey Guildford, Surrey GU2 7XH United Kingdom Tel (CCSR) : 01483-683605 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: EAP + Windows2000
David, Have a look at Ken Roser's HOW-TO (http://www.freeradius.org/doc/EAPTLS.pdf) This how-to is very good and also shows how to open the Certificates MMC plug-in. Then select Edit Properties... from the Details tab of the client certificate and ensure that only the Client Authentication property is selected. Cheers, Philip Blow Senior Technical Manager Simply Wireless [EMAIL PROTECTED] -Original Message- From: David Baer [mailto:[EMAIL PROTECTED]] Sent: Thursday, 13 February 2003 12:28 PM To: [EMAIL PROTECTED] Subject: Re: EAP + Windows2000 Hi Philip, On Thursday 13 February 2003 10:18, Philip Blow wrote: Nadeem, Does your set up work for Windows XP clients? I would try that first. Then, check that client certificate you are using only has the Client Authentication Enhanced key usage property selected. I had to do this to get EAP to work under Windows XP and 2000. How did you specify this Client Authentication Enhanced key usage property? Cheers, David - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: EAP + Windows2000
Nadeem, Also, make sure that the firmware on your client cards is version 4.25 or later and the firmware on you AP is version 11.06 or later. This will ensure that Draft 10 of the 802.1x protocol can be used by both the client and AP. Cheers, Philip Blow Senior Technical Manager Simply Wireless [EMAIL PROTECTED] -Original Message- From: Nadeem Akhtar [mailto:[EMAIL PROTECTED]] Sent: Thursday, 13 February 2003 6:38 AM To: [EMAIL PROTECTED] Subject: EAP + Windows2000 Hi, I'm trying to set up eap-tls based authentication between a wireless client (Windows 2000) and a Cisco Aironet 350 AP. I've installed certificates in the client and a RADIUS server is also up and running. The problem is that the client is not authenticated. I used Ethereal to capture packets on the client wireless interface and I can see the 'Request, identity' EAP packet from the AP but there is no response from the client! Can anyone tell me how to debug this problem or any other leads on this. Regards, Nadeem Nadeem Akhtar Centre for Comm. Systems Research University of Surrey Guildford, Surrey GU2 7XH United Kingdom Tel (CCSR) : 01483-683605 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: HELP: EAP/TLS - XP
David, Artur, This problem appears to be caused by having the Server Authentication and Client Authentication properties set in the certificate. If you disable all extended certificate properties except the Client Authentication in the Client certificate on the XP machine the EAP authentication should work. It worked for me via both Symbol and Orinoco APs with certificates that I generated with the OpenCA certificate authority. Cheers, Philip Blow Senior Technical Manager Simply Wireless [EMAIL PROTECTED] hi David ok, it's good news then... if you followed exactly the steps, it should work fine. to find the error, just put the same certificate which is available at the server side on your XP machine and open it using the crypto extensions (double-click). XP should say you what is missing. the most probable error would be imho an expiration date. the second possible would be the forgotten extension (as already said, both errors should not be there if you followed exactly the script, but still, check it). check the availability of the private key, check the certification path, XP should know the signing CA (meaning that the cert is signed by the CA whose certificate is installed under certification authorities). regards, artur David Baer wrote: The problem has been partially solved (or let's say: narrowed). Somehow the server's certificate is not accepted by the XP-supplicant. If the Validate server certificate check box is unchecked, the authentication succeeds. To leave the server's certificate unvalidated is not very desirbale though. I used the script by Ken Roser (http://www.freeradius.org/doc/EAPTLS.pdf) to generate the certificates. Any idea what I could have done wrong with the server's certificate? david - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRADIUS under Cygwin
Glad to be of help. Sorry about the diffs. The doc was originally for my own use. When I get a Chance I will tidy up and repost. The out of the grep is: exeext= Philip Blow Senior Technical Manager Simply Wireless [EMAIL PROTECTED] Philip Blow [EMAIL PROTECTED] wrote: Here are some brief notes I but together for compiling FreeRADIUS 0.8.1 on Windows XP with EAP/TLS support. ... Nice, but your diff's are reversed. 4. the top-level Makefile change isn't needed in the CVS head, I've fixed that issue. - On the cygwin system, can you do: grep ^exeext libtool and mail the output to the list? I'll see if I can fix the problems with installing executables. 6. Hmm... I'll fix that in the CVS head. It may also explain weirdness on MACOSX. It's a good document. I'll add it as 'doc/CYGWIN' Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Any experience with Symbol APs?
I currently have a call into Symbol at the moment about the corrupted State attribute. But, after much trying I got the Symbol 4131AP working (to a point) with FreeRADIUS 0.8.1. To get around the State attribute problem I made the following changes below (but will not be keeping the changes for production). This allowed the authentication to proceed but now XP (with SP1) is sending TLS access denied messages when accessing the client certificate. $ diff eap.c eap_orig.c 834,835c834 unsigned char *id = NULL; int max_state_len = 16; --- unsigned char *id = NULL; 857,860c856 } if (state-length max_state_len) max_state_len = state-length; --- } 862c858 id = (unsigned char *)malloc(1/*Length*/ + 1/*Id*/ + max_state_len + nas-length); --- id = (unsigned char *)malloc(1/*Length*/ + 1/*Id*/ + state-length + nas-length); 872c868 id[0] = (1 + 1 + max_state_len + nas-length) 0xFF; --- id[0] = (1 + 1 + state-length + nas-length) 0xFF; 874,875c870,871 memcpy(id+2, state-strvalue, max_state_len); memcpy(id+2+max_state_len, nas-strvalue, nas-length); --- memcpy(id+2, state-strvalue, state-length); memcpy(id+2+state-length, nas-strvalue, nas-length); 888,889c884 unsigned char *id = NULL; int max_state_len = 16; --- unsigned char *id = NULL; 909,925c904,917 if (state-length max_state_len) max_state_len = state-length; id = (unsigned char *)malloc(1/*Length*/ + 1/*Id*/ + max_state_len + nas-length); if (id == NULL) { radlog(L_ERR, rlm_eap: out of memory); return NULL; } /* * Generate unique-id to check for the reply * id = Length + ID + State + (NAS-IP-Address | NAS-Identifier) */ id[0] = (1 + 1 + max_state_len + nas-length) 0xFF; memcpy(id+1, response_id, sizeof(unsigned char)); memcpy(id+2, state-strvalue, max_state_len); memcpy(id+2+max_state_len, nas-strvalue, nas-length); --- id = (unsigned char *)malloc(1/*Length*/ + 1/*Id*/ + state-length + nas-length); if (id == NULL) { radlog(L_ERR, rlm_eap: out of memory); return NULL; } /* * Generate unique-id to check for the reply * id = Length + ID + State + (NAS-IP-Address | NAS-Identifier) */ id[0] = (1 + 1 + state-length + nas-length) 0xFF; memcpy(id+1, response_id, sizeof(unsigned char)); memcpy(id+2, state-strvalue, state-length); memcpy(id+2+state-length, nas-strvalue, nas-length); $ diff state.c state_orig.c 199,200d198 return 0; Philip Blow Senior Technical Manager Simply Wireless [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRADIUS under Cygwin
Here are some brief notes I but together for compiling FreeRADIUS 0.8.1 on Windows XP with EAP/TLS support. Configuring FreeRADIUS for EAP under CygWin. 1. Installing CygWin Install the latest version of CygWin (at time of writing 1.3.19-1) from the web download (http://www.cygwin.com). 2. Install the following packages (make as minimum list) Package Version _update-info-dir00126-1 ash 20020731-1 autoconf2.54-1 autoconf-devel 2.57-1 autoconf-stable 2.13-4 automake1.7.1-1 automake-devel 1.7.2-1 automake-stable 1.4p5-5 base-files 1.1-1 base-passwd 1.0-1 bash2.05b-8 bc 1.06-1 binutils20021117-1 byacc 1.9-1 bzip2 1.0.2-2 crypt 1.0-1 cygrunsrv 0.95-1 cygutils1.1.3-1 cygwin 1.3.19-1 cygwin-doc 1.3-2 diff1.0-1 diffutils 2.8.1-1 ed 0.2-1 file3.37-1 fileutils 4.1-1 findutils 4.1.7-4 gawk3.1.1-5 gcc 3.2-3 gcc-mingw 20020817-5 gcc22.95.3-10 gdb 20021218-1 gdbm1.8.0-4 gettext 0.11.5-1 grep2.5-1 groff 1.18.1-2 gzip1.3.3-4 inetutils 1.3.2-20 initscripts 0.9-1 less378-1 libbz2_01.0.2-1 libbz2_11.0.2-2 libiconv2 1.8-2 libintl 0.10.38-3 libintl10.10.40-1 libintl20.11.5-1 libltdl320030103-1 libncurses5 5.2-1 libncurses6 5.2-8 libpng101.0.14-2 libpng121.2.4-2 libpopt01.6.4-4 libreadline44.1-2 libreadline54.3-2 libtool 20020202a-1 libtool-devel 20021227-1 libtool-stable 1.4.2-2 libxml2 2.4.23-1 login 1.7-1 m4 1.4-1 make3.79.1-7 man 1.5j-1 mingw-runtime 2.3-1 mktemp 1.4-1 more2.11o-1 nasm0.98.35-1 ncurses 5.2-8 newlib-man 20020801 openssh 3.5p1-3 openssl 0.9.7-1 openssl-devel 0.9.7-1 openssl096 0.9.6h-1 patch 2.5.8-2 pcre3.7-1 perl5.6.1-2 readline4.3-2 sed 4.0.5-1 sh-utils2.0.15-3 sharutils 4.2.1-2 sysvinit2.84-3 tar 1.13.25-1 tcltk 20021218-1 termcap 20020930-1 terminfo5.2-3 texinfo 4.2-4 textutils 2.0.21-1 tiff3.5.7-1 time1.7-1 unzip 5.50-1 vim 6.1-2 w32api 2.1-1 wget1.8.2-2 which 1.5-1 xinetd 2.3.9-1 zip 2.3-2 zlib1.1.4-1 3. Download the FreeRADIUS source code form http://www.freeradius.org/. Version 0.8.1 is the most recent at time of writing. 4. Expand freeradius.0.8.1.tar.gz 5. Make the following changes to the source code Makefile install: installed --- install: 71,73d70 installed: touch installed src/main/Makefile.in 145,148c145,148 $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(INSTALLSTRIP) radiusd.exe $(R)$(sbindir) $(INSTALL) -m 755 $(INSTALLSTRIP) radwho.exe $(R)$(bindir) $(INSTALL) -m 755 $(INSTALLSTRIP) raduse.exe $(R)$(bindir) $(INSTALL) -m 755 $(INSTALLSTRIP) radzap.exe $(R)$(bindir) --- $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(INSTALLSTRIP) radiusd $(R)$(sbindir) $(INSTALL) -m 755 $(INSTALLSTRIP) radwho $(R)$(bindir) $(INSTALL) -m 755 $(INSTALLSTRIP) raduse $(R)$(bindir) $(INSTALL) -m 755 $(INSTALLSTRIP) radzap $(R)$(bindir) 150,151c150,151 $(INSTALL) -m 755radclient.exe $(R)$(bindir) $(INSTALL) -m 755radrelay.exe $(R)$(bindir) --- $(INSTALL) -m 755radclient $(R)$(bindir) $(INSTALL) -m 755radrelay $(R)$(bindir) src/modules/rlm_dbm/Makefile.in 22,23c22,23 $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_parser.exe $(R)$(bindir) $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_cat.exe $(R)$(bindir) --- $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_parser $(R)$(bindir) $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_cat$(R)$(bindir) src/modules/rlm_mschap/Makefile 20c20 $(INSTALL) -m 755 $(INSTALLSTRIP) smbencrypt.exe $(R)$(bindir) --- $(INSTALL) -m 755 $(INSTALLSTRIP) smbencrypt $(R)$(bindir) 6. Link gcc.exe to cc.exe is /bin with ln -s ./gcc.exe cc.exe - this is required because the rlm_eap_tls configure file is incorrect can uses cc even if it is not defined. 7. Run configure with the following command line ./configure -without-snmp -disable-shared -enabled-static 8. Modify the Make.inc after configure has completed so that the STATIC_MODULES variable is set to -dlpreopen ../modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.la \ -dlpreopen ../modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.la 9. Execute make and then make install Philip Blow Senior Technical Manager Simply Wireless [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html