How to complie FreeRADIUS 0.9.0 under CYGWIN

2003-08-22 Thread Philip Blow
 for x in $(MODULES);do test -f
../modules/$$x/$$x.la  echo ../modules/$$x/$$x.la;done)
+MODULE_OBJS+= $(shell for x in $(MODULES);do test -f
../modules/rlm_eap/types/$$x/$$x.la  echo
../modules/rlm_eap/types/$$x/$$x.la;done)
 endif

 all:   $(BINARIES)
@@ -33,8 +35,8 @@
 radiusd: $(SERVER_OBJS) ../lib/libradius.a $(MODULE_OBJS)
$(LIBTOOL) --mode=link $(CC) -export-dynamic -dlopen self \
$(CFLAGS) $(LDFLAGS) -o $@ \
-   $(SERVER_OBJS) $(LCRYPT) $(LIBS) \
-   $(PTHREADLIB) $(LIBLTDL) $(MODULE_LIBS)
+   $(SERVER_OBJS) $(LIBS) \
+   $(PTHREADLIB) $(LIBLTDL) $(MODULE_LIBS) $(LCRYPT)

 radiusd.o: radiusd.c $(INCLUDES)  ../include/request_list.h
../include/modules.h ../include/modcall.h ../include/modpriv.h
$(CC) $(CFLAGS) -c radiusd.c
@@ -130,12 +132,12 @@
rm -rf *.o *.so *~ $(BINARIES) .libs

 install:
-   $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(INSTALLSTRIP)
radiusd$(R)$(sbindir)
-   $(INSTALL) -m 755 $(INSTALLSTRIP) radwho
$(R)$(bindir)
-   $(INSTALL) -m 755 $(INSTALLSTRIP) radzap
$(R)$(bindir)
+   $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(INSTALLSTRIP)
radiusd$(EXEEXT)$(R)$(sbindir)
+   $(INSTALL) -m 755 $(INSTALLSTRIP) radwho$(EXEEXT)
$(R)$(bindir)
+   $(INSTALL) -m 755 $(INSTALLSTRIP) radzap$(EXEEXT)
$(R)$(bindir)
$(INSTALL) -m 755radlast$(R)$(bindir)
-   $(INSTALL) -m 755radclient  $(R)$(bindir)
-   $(INSTALL) -m 755radrelay   $(R)$(bindir)
+   $(INSTALL) -m 755radclient$(EXEEXT) $(R)$(bindir)
+   $(INSTALL) -m 755radrelay$(EXEEXT)  $(R)$(bindir)
$(INSTALL) -m 755radtest$(R)$(bindir)
$(INSTALL) -d -m 755$(R)$(logdir)
$(INSTALL) -d -m 755$(R)$(radacctdir)

~/freeradius-0.9.0/src/modules/stable

--- stable.orig 2003-08-22 16:52:37.0 +1000
+++ stable  2003-07-31 09:11:52.0 +1000
@@ -8,6 +8,9 @@
 rlm_detail
 rlm_digest
 rlm_eap
+rlm_eap_leap
+rlm_eap_md5
+rlm_eap_tls
 rlm_exec
 rlm_expr
 rlm_fastusers

~/freeradius-0.9.0/src/modules/rlm_dbm/Makefile.in

--- Makefile.in.orig2003-08-22 16:58:41.0 +1000
+++ Makefile.in 2003-07-31 09:11:52.0 +1000
@@ -19,5 +19,5 @@
 #
 rlm_dbm_install:
$(INSTALL) -d -m 755$(R)$(bindir)
-   $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_parser $(R)$(bindir)
-   $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_cat$(R)$(bindir)
+   $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_parser$(EXEEXT)
$(R)$(bindir)
+   $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_cat$(EXEEXT)
$(R)$(bindir)

~/freeradius-0.9.0/src/modules/rlm_mschap/Makefile

--- Makefile.orig   2003-08-22 16:57:51.0 +1000
+++ Makefile2003-07-31 09:11:52.0 +1000
@@ -17,4 +17,4 @@

 smbencrypt-install:
$(INSTALL) -d -m 755 $(R)$(bindir)
-   $(INSTALL) -m 755 $(INSTALLSTRIP) smbencrypt $(R)$(bindir)
+   $(INSTALL) -m 755 $(INSTALLSTRIP) smbencrypt$(EXEEXT)
$(R)$(bindir)

6. Run configure with the following command line

./configure --without-snmp --disable-shared --enable-static

7. Execute make and then make install

8. Configure FreeRADIUS as usual.

9. If you want to run FreeRADIUS as a service, execute the following
command

cygrunsrv --install FreeRADIUS --path /usr/local/sbin/radiusd --args
-y -s -f --shutdown --desc FreeRADIUS 0.9.0 - Cygwin --env
PATH=/usr/local/bin:$PATH


Philip Blow
Senior Technical Manager
Simply Wireless
[EMAIL PROTECTED]

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: FreeRadius and Cygwin

2003-08-20 Thread Philip Blow
Hi,

I've got FreeRADIUS 0.9.0 working on CYGWIN but have not had a chance to
post the changes for doc/CYGWIN.

If you can wait I hope to do this in the next few days.

Cheers,

Philip Blow
Senior Technical Manager
Simply Wireless

 -Original Message-
 From: A. Clausen [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, 21 August 2003 8:39 AM
 To: [EMAIL PROTECTED]
 Subject: Re: FreeRadius and Cygwin
 
 
 
 - Original Message - 
 From: Chris Parker [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, August 20, 2003 15:15
 Subject: Re: FreeRadius and Cygwin
 
 
  At 02:53 PM 8/20/2003 -0700, A. Clausen wrote:
 
  Alright, I've done as much as I know how (darn little!), 
 but its failing
 at
  this point:
  
  rm -f .libs/radiusdS.c .libs/radiusd.nm .libs/radiusd.nmS
 .libs/radiusd.nmT
  gcc
 
  snip
 
 
 ../modules/rlm_unix/.libs/rlm_unix.a 
 -L/usr/src/freeradius-0.9.0/src/lib -l
 c
  rypt -lpthread /usr/src/freeradius-0.9.0/src/lib/.libs/libradius.a
  .libs/libimp-cygltdl-3.a
  
 /usr/src/freeradius-0.9.0/src/lib/.libs/libradius.a(crypt.o)(
 .text+0x35):
 In
  function `lrad_crypt_check':
  /usr/src/freeradius-0.9.0/src/lib/crypt.c:44: undefined 
 reference to
  `_crypt'
  collect2: ld returned 1 exit status
 
  I'm at a loss.  On my cygwin install, 'nm 
 /usr/lib/libcrypt.a' does show
  a '_crypt' symbol.  What does this show on your system?
 
 As does mine.  What version of Cygwin are you running?
 
 -- 
 Aaron Clausen
 
 
 - 
 List info/subscribe/unsubscribe? See 
 http://www.freeradius.org/list/users.html
 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Need Help with SNMP

2003-07-29 Thread Philip Blow
Ats,

The way I got this working was to remove the ifdefs in the headers files
in /usr/include/ucd-snmp. Then it complies fine.

I have also started making some other changes to allow more snmp
information to be collected (it was to a pre 0.9.0 snapshot), but will
need a bit more time to sort it out and the patches will need to be
approved.

Alan,

I think that when the --enable-ucb-snmp-compatibility switch is passed
to ./configure, the configure script does not #define UCD_COMPATABILITY.
This might be the problem.

Cheers,

Philip Blow
Senior Technical Manager
Simply Wireless

 -Original Message-
 From: Atanu Das [mailto:[EMAIL PROTECTED] 
 Sent: Wednesday, 30 July 2003 4:46 AM
 To: [EMAIL PROTECTED]
 Subject: Re: Need Help with SNMP 
 
 
 Hi Alan,
 
 Thanks for such a prompt reply. I got your point.
 
 I think I will have to install the **OLD** version of ucd-snmp
 (ucd-snmp-4.2.6) in my RedHat 9 box.
 The headers that i have in /usr/include/ucd-snmp are
 
 asn1.h-
 #ifdef UCD_COMPATIBLE
 #include net-snmp/library/asn1.h
 #else
 #error Please update your headers or configure
 using --enable-ucd-snmp-compatibility
 #endif
 --snmp.h---
 #ifdef UCD_COMPATIBLE
 #include net-snmp/library/snmp.h
 #else
 #error Please update your headers or configure
 using --enable-ucd-snmp-compatibility
 #endif
 
 ---snmp_impl.h-
 #ifdef UCD_COMPATIBLE
 #include net-snmp/net-snmp-config.h
 #include net-snmp/types.h
 #include net-snmp/library/snmp_impl.h
 #else
 #error Please update your headers or configure
 using --enable-ucd-snmp-compatibility
 #endif
 
 and all the files are using the headers of net-snmp. This has 
 left me with
 no choice :)
 
 Thanks anyway
 
 Regards,
 
 Ats
 
 - Original Message - 
 From: Alan DeKok [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, July 29, 2003 11:31 PM
 Subject: Re: Need Help with SNMP
 
 
  Atanu Das [EMAIL PROTECTED] wrote:
   net-snmp-5.0.6-17
 
FreeRADIUS can't use net-snmp.
 
   This is just a wild guess. But I have the ucd-snmp as 
 well net-snmp
   headers in /usr/include/ucd-snmp and /usr/include/net-snmp.
 
Then get the server to look at *only* ucd-snmp, and 
 ignore net-snmp.
 
Alan DeKok.
 
  -
  List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html
 
 
 
 
 - 
 List info/subscribe/unsubscribe? See 
 http://www.freeradius.org/list/users.html
 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: rlm_eap: State verification failed

2003-03-12 Thread Philip Blow
Title: Message



Klemens,

The 
problem that you are experiencing is a known bug in the Symbol AP-4131 firmware. 
I pestered Symbol in Australia for a fix and managed to get a fixed version of 
the firmware on pre-release from the US to test that the problem was fixed. If 
you log a support call with Symbol you may also be able to get a copy to test - 
firmware version is 3.70-59y. Or use another vendors AP - Cisco 1200 and Orinoco 
2000AP both work fine.

The 
other problem that you might find is that if you attempt to use a Symbol LA-4121 
PCMCIA card under Windows 2000, the driver does not send EAPOL messages to the 
AP and hence does not even start the 802.1X authentication 
process.

Alternatively I do have some diffs for the FreeRADIUS 
source code, that I may have already posted, that change the state processing so 
that it works for Symbol APs.

However, based on my experience - I'd use Cisco. It 
worked first time and has kept working.

Cheers,

Philip 
BlowSenior Technical ManagerSimply Wireless


-Original Message-From: Klemens Jaeger 
[mailto:[EMAIL PROTECTED] Sent: Wednesday, 12 March 2003 1:57 
AMTo: [EMAIL PROTECTED]Subject: rlm_eap: 
State verification failed
hi!

do I need the module "files" in radiusd.conf where 
the file "user" will be implemented? or is the module eap enough?

thanks,
kle


RE: EAP + Windows2000

2003-02-12 Thread Philip Blow
Nadeem,

Does your set up work for Windows XP clients? I would try that first.

Then, check that client certificate you are using only has the Client
Authentication Enhanced key usage property selected. I had to do this
to get EAP to work under Windows XP and 2000.

Also try another client card. I have had this working on Windows 2000
with both LinkSys And NetGear client cards.

Philip Blow
Senior Technical Manager
Simply Wireless
[EMAIL PROTECTED]
 
 -Original Message-
 From: Nadeem Akhtar [mailto:[EMAIL PROTECTED]] 
 Sent: Thursday, 13 February 2003 6:38 AM
 To: [EMAIL PROTECTED]
 Subject: EAP + Windows2000
 
 
 
 Hi,
  I'm trying to set up eap-tls based authentication between a wireless
 client (Windows 2000) and a Cisco Aironet 350 AP. I've installed
 certificates in the client and a RADIUS server is also up and running.
The
 problem is that the client is not authenticated. I used Ethereal to
 capture packets on the client wireless interface and I can see the
 'Request, identity' EAP packet from the AP but there is no response
from
 the client! Can anyone tell me how to debug this problem or any other
 leads on this.
 
 Regards,
 Nadeem
 
 
 
 
 Nadeem Akhtar
 Centre for Comm. Systems Research
 University of Surrey
 Guildford, Surrey GU2 7XH
 United Kingdom
 
 Tel (CCSR) : 01483-683605

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: EAP + Windows2000

2003-02-12 Thread Philip Blow
David,

Have a look at Ken Roser's HOW-TO
(http://www.freeradius.org/doc/EAPTLS.pdf)
This how-to is very good and also shows how to open the Certificates MMC
plug-in. Then select Edit Properties... from the Details tab of the
client
certificate and ensure that only the Client Authentication property is
selected.

Cheers,

Philip Blow
Senior Technical Manager
Simply Wireless
[EMAIL PROTECTED]


-Original Message-
From: David Baer [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, 13 February 2003 12:28 PM
To: [EMAIL PROTECTED]
Subject: Re: EAP + Windows2000


Hi Philip,
On Thursday 13 February 2003 10:18, Philip Blow wrote:
 Nadeem,

 Does your set up work for Windows XP clients? I would try that first.

 Then, check that client certificate you are using only has the Client
 Authentication Enhanced key usage property selected. I had to do this
 to get EAP to work under Windows XP and 2000.
How did you specify this  Client Authentication Enhanced key usage
property?


Cheers,
David

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: EAP + Windows2000

2003-02-12 Thread Philip Blow
Nadeem,

Also, make sure that the firmware on your client cards is version 4.25
or later
and the firmware on you AP is version 11.06 or later. This will ensure
that Draft
10 of the 802.1x protocol can be used by both the client and AP.

Cheers,

Philip Blow
Senior Technical Manager
Simply Wireless
[EMAIL PROTECTED]
 

-Original Message-
From: Nadeem Akhtar [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, 13 February 2003 6:38 AM
To: [EMAIL PROTECTED]
Subject: EAP + Windows2000



Hi,
 I'm trying to set up eap-tls based authentication between a wireless
client (Windows 2000) and a Cisco Aironet 350 AP. I've installed
certificates in the client and a RADIUS server is also up and running.
The
problem is that the client is not authenticated. I used Ethereal to
capture packets on the client wireless interface and I can see the
'Request, identity' EAP packet from the AP but there is no response from
the client! Can anyone tell me how to debug this problem or any other
leads on this.

Regards,
Nadeem




Nadeem Akhtar
Centre for Comm. Systems Research
University of Surrey
Guildford, Surrey GU2 7XH
United Kingdom

Tel (CCSR) : 01483-683605

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: HELP: EAP/TLS - XP

2003-01-30 Thread Philip Blow
David, Artur,

This problem appears to be caused by having the Server Authentication
and
Client Authentication properties set in the certificate. If you disable
all
extended certificate properties except the Client Authentication in the
Client certificate on the XP machine the EAP authentication should work.

It worked for me via both Symbol and Orinoco APs with certificates that
I generated with the OpenCA certificate authority.

Cheers,

Philip Blow
Senior Technical Manager
Simply Wireless
[EMAIL PROTECTED]
 


 hi David
 
 ok, it's good news then... if you followed exactly the steps, it
should 
 work fine.
 
 to find the error, just put the same certificate which is available at

 the server side on your XP machine and open it using the crypto 
 extensions (double-click). XP should say you what is missing. the most

 probable error would be imho an expiration date. the second possible 
 would be the forgotten extension (as already said, both errors should 
 not be there if you followed exactly the script, but still, check it).

 check the availability of the private key, check the certification
path, 
 XP should know the signing CA (meaning that the cert is signed by the
CA 
 whose certificate is installed under certification authorities).
 
 regards,
 artur
 
 
 David Baer wrote:
  The problem has been partially solved (or let's say:  narrowed).
  Somehow the server's certificate is not accepted by the
XP-supplicant.
  If the Validate server certificate check box is unchecked, the
authentication
  succeeds. To leave the server's certificate unvalidated is not very
desirbale though.
  I used the script by Ken Roser
(http://www.freeradius.org/doc/EAPTLS.pdf) to generate 
  the certificates. 
  Any idea what I could have done wrong with the server's certificate?
  david

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: FreeRADIUS under Cygwin

2003-01-29 Thread Philip Blow
Glad to be of help.

Sorry about the diffs. The doc was originally for my own use. When I get
a
Chance I will tidy up and repost.

The out of the grep is:
exeext=

Philip Blow
Senior Technical Manager
Simply Wireless
[EMAIL PROTECTED]

 Philip Blow [EMAIL PROTECTED] wrote:
  Here are some brief notes I but together for compiling FreeRADIUS
0.8.1
  on Windows XP with EAP/TLS support.
 ...
 
   Nice, but your diff's are reversed.
 
 4. the top-level Makefile change isn't needed in the CVS head, I've
   fixed that issue.
 
 - On the cygwin system, can you do:
 
   grep ^exeext libtool
 
   and mail the output to the list?  I'll see if I can fix the problems
 with installing executables.
 
 
 6.  Hmm... I'll fix that in the CVS head.  It may also explain
 weirdness on MACOSX.
 
 
   It's a good document.  I'll add it as 'doc/CYGWIN'
 
   Alan DeKok.
 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: Any experience with Symbol APs?

2003-01-28 Thread Philip Blow
I currently have a call into Symbol at the moment about the corrupted
State attribute. But, after much trying I got the Symbol 4131AP
working (to a point) with FreeRADIUS 0.8.1. To get around the State
attribute problem I made the following changes below (but will not be
keeping the changes for production). This allowed the authentication to
proceed but now XP (with SP1) is sending TLS access denied messages when
accessing the client certificate.

$ diff eap.c eap_orig.c
834,835c834
   unsigned char   *id = NULL;
   int max_state_len = 16;
---
   unsigned char   *id = NULL;
857,860c856
   }

   if (state-length  max_state_len)
   max_state_len = state-length;
---
   }
862c858
   id = (unsigned char *)malloc(1/*Length*/ + 1/*Id*/ +
max_state_len + nas-length);
---
   id = (unsigned char *)malloc(1/*Length*/ + 1/*Id*/ +
state-length + nas-length);
872c868
   id[0] = (1 + 1 + max_state_len + nas-length)  0xFF;
---
   id[0] = (1 + 1 + state-length + nas-length)  0xFF;
874,875c870,871
   memcpy(id+2, state-strvalue, max_state_len);
   memcpy(id+2+max_state_len, nas-strvalue, nas-length);
---
   memcpy(id+2, state-strvalue, state-length);
   memcpy(id+2+state-length, nas-strvalue, nas-length);
888,889c884
   unsigned char   *id = NULL;
   int max_state_len = 16;
---
   unsigned char   *id = NULL;
909,925c904,917
   if (state-length  max_state_len)
   max_state_len = state-length;

   id = (unsigned char *)malloc(1/*Length*/ + 1/*Id*/ +
max_state_len + nas-length);
   if (id == NULL) {
   radlog(L_ERR, rlm_eap: out of memory);
   return NULL;
   }

   /*
* Generate unique-id to check for the reply
* id = Length + ID + State + (NAS-IP-Address | NAS-Identifier)
*/
   id[0] = (1 + 1 + max_state_len + nas-length)  0xFF;
   memcpy(id+1, response_id, sizeof(unsigned char));
   memcpy(id+2, state-strvalue, max_state_len);
   memcpy(id+2+max_state_len, nas-strvalue, nas-length);
---
   id = (unsigned char *)malloc(1/*Length*/ + 1/*Id*/ +
state-length + nas-length);
   if (id == NULL) {
   radlog(L_ERR, rlm_eap: out of memory);
   return NULL;
   }

   /*
* Generate unique-id to check for the reply
* id = Length + ID + State + (NAS-IP-Address | NAS-Identifier)
*/
   id[0] = (1 + 1 + state-length + nas-length)  0xFF;
   memcpy(id+1, response_id, sizeof(unsigned char));
   memcpy(id+2, state-strvalue, state-length);
   memcpy(id+2+state-length, nas-strvalue, nas-length);

$ diff state.c state_orig.c
199,200d198
   return 0;


Philip Blow
Senior Technical Manager
Simply Wireless
[EMAIL PROTECTED]
 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



RE: FreeRADIUS under Cygwin

2003-01-28 Thread Philip Blow
Here are some brief notes I but together for compiling FreeRADIUS 0.8.1
on Windows XP with EAP/TLS support.

Configuring FreeRADIUS for EAP under CygWin.

1.  Installing CygWin

Install the latest version of CygWin (at time of writing 1.3.19-1) from
the web download (http://www.cygwin.com).

2.  Install the following packages (make as minimum list)

Package Version
_update-info-dir00126-1
ash 20020731-1
autoconf2.54-1
autoconf-devel  2.57-1
autoconf-stable 2.13-4
automake1.7.1-1
automake-devel  1.7.2-1
automake-stable 1.4p5-5
base-files  1.1-1
base-passwd 1.0-1
bash2.05b-8
bc  1.06-1
binutils20021117-1
byacc   1.9-1
bzip2   1.0.2-2
crypt   1.0-1
cygrunsrv   0.95-1
cygutils1.1.3-1
cygwin  1.3.19-1
cygwin-doc  1.3-2
diff1.0-1
diffutils   2.8.1-1
ed  0.2-1
file3.37-1
fileutils   4.1-1
findutils   4.1.7-4
gawk3.1.1-5
gcc 3.2-3
gcc-mingw   20020817-5
gcc22.95.3-10
gdb 20021218-1
gdbm1.8.0-4
gettext 0.11.5-1
grep2.5-1
groff   1.18.1-2
gzip1.3.3-4
inetutils   1.3.2-20
initscripts 0.9-1
less378-1
libbz2_01.0.2-1
libbz2_11.0.2-2
libiconv2   1.8-2
libintl 0.10.38-3
libintl10.10.40-1
libintl20.11.5-1
libltdl320030103-1
libncurses5 5.2-1
libncurses6 5.2-8
libpng101.0.14-2
libpng121.2.4-2
libpopt01.6.4-4
libreadline44.1-2
libreadline54.3-2
libtool 20020202a-1
libtool-devel   20021227-1
libtool-stable  1.4.2-2
libxml2 2.4.23-1
login   1.7-1
m4  1.4-1
make3.79.1-7
man 1.5j-1
mingw-runtime   2.3-1
mktemp  1.4-1
more2.11o-1
nasm0.98.35-1
ncurses 5.2-8
newlib-man  20020801
openssh 3.5p1-3
openssl 0.9.7-1
openssl-devel   0.9.7-1
openssl096  0.9.6h-1
patch   2.5.8-2
pcre3.7-1
perl5.6.1-2
readline4.3-2
sed 4.0.5-1
sh-utils2.0.15-3
sharutils   4.2.1-2
sysvinit2.84-3
tar 1.13.25-1
tcltk   20021218-1
termcap 20020930-1
terminfo5.2-3
texinfo 4.2-4
textutils   2.0.21-1
tiff3.5.7-1
time1.7-1
unzip   5.50-1
vim 6.1-2
w32api  2.1-1
wget1.8.2-2
which   1.5-1
xinetd  2.3.9-1
zip 2.3-2
zlib1.1.4-1

3.  Download the FreeRADIUS source code form
http://www.freeradius.org/. Version 0.8.1 is the most recent at time of
writing.

4.  Expand freeradius.0.8.1.tar.gz

5.  Make the following changes to the source code

Makefile

 install: installed
---
 install:
71,73d70
 installed:
   touch installed


src/main/Makefile.in

145,148c145,148
   $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(INSTALLSTRIP)
radiusd.exe $(R)$(sbindir)
   $(INSTALL) -m 755 $(INSTALLSTRIP) radwho.exe
$(R)$(bindir)
   $(INSTALL) -m 755 $(INSTALLSTRIP) raduse.exe
$(R)$(bindir)
   $(INSTALL) -m 755 $(INSTALLSTRIP) radzap.exe
$(R)$(bindir)
---
   $(LIBTOOL) --mode=install $(INSTALL) -m 755 $(INSTALLSTRIP)
radiusd $(R)$(sbindir)
   $(INSTALL) -m 755 $(INSTALLSTRIP) radwho
$(R)$(bindir)
   $(INSTALL) -m 755 $(INSTALLSTRIP) raduse
$(R)$(bindir)
   $(INSTALL) -m 755 $(INSTALLSTRIP) radzap
$(R)$(bindir)
150,151c150,151
   $(INSTALL) -m 755radclient.exe  $(R)$(bindir)
   $(INSTALL) -m 755radrelay.exe   $(R)$(bindir)
---
   $(INSTALL) -m 755radclient  $(R)$(bindir)
   $(INSTALL) -m 755radrelay   $(R)$(bindir)

src/modules/rlm_dbm/Makefile.in

22,23c22,23
   $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_parser.exe
$(R)$(bindir)
   $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_cat.exe
$(R)$(bindir)
---
   $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_parser $(R)$(bindir)
   $(INSTALL) -m 755 $(INSTALLSTRIP) rlm_dbm_cat$(R)$(bindir)

src/modules/rlm_mschap/Makefile

20c20
   $(INSTALL) -m 755 $(INSTALLSTRIP) smbencrypt.exe $(R)$(bindir)
---
   $(INSTALL) -m 755 $(INSTALLSTRIP) smbencrypt $(R)$(bindir)

6.  Link gcc.exe to cc.exe is /bin with ln -s ./gcc.exe cc.exe -
this is required because the rlm_eap_tls configure file is incorrect can
uses cc even if it is not defined.

7.  Run configure with the following command line

./configure -without-snmp -disable-shared -enabled-static

8.  Modify the Make.inc after configure has completed so that the
STATIC_MODULES variable is set to
-dlpreopen ../modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.la \
-dlpreopen ../modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.la

9.  Execute make and then make install


Philip Blow
Senior Technical Manager
Simply Wireless
[EMAIL PROTECTED]
 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html