Re: Segmentation Fault with EAP-TLS

2005-05-16 Thread Stefan . Neis
Hi,

 1) ldd /usr/local/sbin/radiusd
 libcrypt.so.1 = /lib/libcrypt.so.1 (0x40033000)
 libnsl.so.1 = /lib/libnsl.so.1 (0x4006)
 libresolv.so.2 = /lib/libresolv.so.2 (0x40076000)
 libpthread.so.0 = /lib/i686/libpthread.so.0 (0x40088000)
 libcrypto.so.2 = /lib/libcrypto.so.2 (0x4009d000)
 libssl.so.2 = /lib/libssl.so.2 (0x4016)
 libradius-1.0.2.so = /usr/local/lib/libradius-1.0.2.so (0x4018e000)
 libsnmp-0.4.2.1.so = /usr/lib/libsnmp-0.4.2.1.so (0x401a1000)
 libltdl.so.3 = /usr/lib/libltdl.so.3 (0x401f8000)
 libdl.so.2 = /lib/libdl.so.2 (0x401fe000)
 libc.so.6 = /lib/i686/libc.so.6 (0x40202000)
 /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x4000)

Well, /lib/libcrypto.so.2 and /lib/libssl.so.2 don't really look like the
right libs, that should probably the same ...so.0.9.7 libs that are used
here:

 2)ldd /usr/local/lib/rlm_eap_tls-1.0.2.so
 libssl.so.0.9.7 = /usr/local/openssl/lib/libssl.so.0.9.7 (0x40024000)
 libcrypto.so.0.9.7 =
 /usr/local/openssl/lib/libcrypto.so.0.9.7 (0x40053000)
 libnsl.so.1 = /lib/libnsl.so.1 (0x40146000)
 libresolv.so.2 = /lib/libresolv.so.2 (0x4015c000)
 libpthread.so.0 = /lib/i686/libpthread.so.0 (0x4016e000)
 libc.so.6 = /lib/i686/libc.so.6 (0x40183000)
 libdl.so.2 = /lib/libdl.so.2 (0x402bf000)
 /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x8000)

Regards,
   Stefan



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Segmentation Fault with EAP-TLS

2005-05-16 Thread arun
Thanks a lot.,  i am new and totally clueless as to what i need to be
doing . I did use ./configure
--with-openssl-includes=/usr/local/openssl/include
--with-openssl-libraries=/usr/local/openssl/lib
What else do i need to be doing to make the radiusd read the right libraries
regards,
arun
 
On 5/16/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:
Hi,
 
  1) ldd /usr/local/sbin/radiusd
  libcrypt.so.1 = /lib/libcrypt.so.1 (0x40033000)
  libnsl.so.1 = /lib/libnsl.so.1 (0x4006)
  libresolv.so.2 = /lib/libresolv.so.2 (0x40076000)
  libpthread.so.0 = /lib/i686/libpthread.so.0 (0x40088000)
  libcrypto.so.2 = /lib/libcrypto.so.2 (0x4009d000)
  libssl.so.2 = /lib/libssl.so.2 (0x4016)
  libradius-1.0.2.so = /usr/local/lib/libradius-1.0.2.so (0x4018e000)
  libsnmp-0.4.2.1.so = /usr/lib/libsnmp-0.4.2.1.so (0x401a1000)
  libltdl.so.3 = /usr/lib/libltdl.so.3 (0x401f8000)
  libdl.so.2 = /lib/libdl.so.2 (0x401fe000)
  libc.so.6 = /lib/i686/libc.so.6 (0x40202000)
  /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x4000)
 
 Well, /lib/libcrypto.so.2 and /lib/libssl.so.2 don't really look like the
 right libs, that should probably the same ...so.0.9.7 libs that are used
 here:
 
  2)ldd /usr/local/lib/rlm_eap_tls-1.0.2.so
  libssl.so.0.9.7 = /usr/local/openssl/lib/libssl.so.0.9.7 
  (0x40024000)
  libcrypto.so.0.9.7 =
  /usr/local/openssl/lib/libcrypto.so.0.9.7 (0x40053000)
  libnsl.so.1 = /lib/libnsl.so.1 (0x40146000)
  libresolv.so.2 = /lib/libresolv.so.2 (0x4015c000)
  libpthread.so.0 = /lib/i686/libpthread.so.0 (0x4016e000)
  libc.so.6 = /lib/i686/libc.so.6 (0x40183000)
  libdl.so.2 = /lib/libdl.so.2 (0x402bf000)
  /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x8000)
 
Regards,
   Stefan
 
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Segmentation Fault with EAP-TLS

2005-05-16 Thread Stefan . Neis
Hi,

 Thanks a lot.,  i am new and totally clueless as to what i need to be
 doing . I did use ./configure
 --with-openssl-includes=/usr/local/openssl/include
 --with-openssl-libraries=/usr/local/openssl/lib
 What else do i need to be doing to make the radiusd read the right 
 libraries

I'm not sure, either. Using a modified configure command like
LDFLAGS=-L/usr/local/openssl/lib -lssl -lcrypto ./configure --with...
might be worth a try.

HTH,
Stefan




-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segmentation fault for eap/tls

2004-06-11 Thread Sathish Challa
All,
I struggle here to configure eap-tls. But only best thing is just
blindly follow how-to guide. It will solve all problems.

Thank you,
Sathish Challa.
GRIC Software India Pvt. Ltd., www.GoRemote.com
Mobile: +91-98451-90676
Office [Direct]: +91-80 513 80 882
 
Server Group's Mission:
Innovative, open and scalable solutions pioneered proactively with a
methodical approach and engineering agility to deliver quality solutions to
the Customers and prudent responses to Product Management and other decision
making bodies
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok
Sent: Tuesday, June 08, 2004 7:44 PM
To: [EMAIL PROTECTED]
Subject: Re: segmentation fault for eap/tls 

pSathish Challa [EMAIL PROTECTED] wrote:
 How to restrict that to one version.

  In the 1.0.0-pre1:

$ ./configure --help

  and look for openssl

 Everything went well in configure, make, install and running too. It is
 working fine for EAP/MD5 too.

  EAP-MD5 doesn't use OpenSSL.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: segmentation fault for eap/tls

2004-06-08 Thread Sergio Sagliocco
Hi
try to recompile freeradius with the --noshared option in the configure.
In my case the problem was solved

sergio

Quoting Sathish Challa [EMAIL PROTECTED]:

 All,
I am getting segmentation fault [core dump ] while trying out eap/tls
 with win-xp on freeradius.
Below given last some of statements.

 Processing the authenticate section of radiusd.conf
 modcall: entering group authenticate for request 3
   rlm_eap: Request found, released from the list
   rlm_eap: EAP/tls
   rlm_eap: processing type tls
   rlm_eap_tls: Authenticate
   rlm_eap_tls: processing TLS
 rlm_eap_tls:  Length Included
   eaptls_verify returned 11 
 /run-radiusd: line 7: 22489 Segmentation fault  /usr/local/sbin/radiusd
 $@
 
 My run-radiusd script is as follows
 
 #!/bin/sh -x
 LD_LIBRARY_PATH=/usr/local/lib
 LD_PRELOAD=/usr/lib/libcrypto.so
 export LD_LIBRARY_PATH LD_PRELOAD
 /usr/local/sbin/radiusd $@
 
 I have OpenSSL 0.9.7d 17 Mar 2004 on Red Hat Linux release 8.0 (Psyche)
 
 
 Thank you,
 Sathish Challa.
 
 
 
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html
 
 
 


-- 
Sergio SAGLIOCCO
SecureLAB - System  Network Security 
CSP s.c. a r.l. 
__
Villa Gualino
Viale Settimo Severo, 63 - 10133 Torino [IT]
tel. +39 011 481 5140 - Mobile +39 348 6024078 
fax  +39 011 481 5001 
__



---
This mail sent through CSP Webmail System



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segmentation fault for eap/tls

2004-06-08 Thread Sathish Challa
How to restrict that to one version.
Seems to be I have old OPENSSL on my Linux.
But I have installed latest openssl.
Everything went well in configure, make, install and running too. It is
working fine for EAP/MD5 too.
But for EAP/TLS core dump is happening.

Thank you,
Sathish Challa.
GRIC Software India Pvt. Ltd., www.GoRemote.com
Mobile: +91-98451-90676
Office [Direct]: +91-80 513 80 882
 
Server Group's Mission:
Innovative, open and scalable solutions pioneered proactively with a
methodical approach and engineering agility to deliver quality solutions to
the Customers and prudent responses to Product Management and other decision
making bodies
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok
Sent: Tuesday, June 08, 2004 6:59 PM
To: [EMAIL PROTECTED]
Subject: Re: segmentation fault for eap/tls 

Sergio Sagliocco [EMAIL PROTECTED] wrote:
 try to recompile freeradius with the --noshared option in the configure.
 In my case the problem was solved

  Most likely because you tried to link the server against a different
version of OpenSSL than you used to build it.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segmentation fault for eap/tls

2004-06-08 Thread Frédéric EVRARD
 How to restrict that to one version.
 Seems to be I have old OPENSSL on my Linux.
 But I have installed latest openssl.
 Everything went well in configure, make, install and running too. It is
 working fine for EAP/MD5 too.
 But for EAP/TLS core dump is happening.

I had the same pb and Alan is right, you can use FREEradius with EAP/MD5
because it doesn't use openssl, to be sure look log after ./configure, you
will see if there's a problem linking openssl.
(Error message is lost in the middle of log, it doesn't appear at end)

Fred.EVRARD



 Thank you,
 Sathish Challa.
 GRIC Software India Pvt. Ltd., www.GoRemote.com
 Mobile: +91-98451-90676
 Office [Direct]: +91-80 513 80 882

 Server Group's Mission:
 Innovative, open and scalable solutions pioneered proactively with a
 methodical approach and engineering agility to deliver quality solutions
 to
 the Customers and prudent responses to Product Management and other
 decision
 making bodies


 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Alan
 DeKok
 Sent: Tuesday, June 08, 2004 6:59 PM
 To: [EMAIL PROTECTED]
 Subject: Re: segmentation fault for eap/tls

 Sergio Sagliocco [EMAIL PROTECTED] wrote:
 try to recompile freeradius with the --noshared option in the configure.
 In my case the problem was solved

   Most likely because you tried to link the server against a different
 version of OpenSSL than you used to build it.

   Alan DeKok.

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html


 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: segmentation fault for eap/tls

2004-06-08 Thread Alan DeKok
pSathish Challa [EMAIL PROTECTED] wrote:
 How to restrict that to one version.

  In the 1.0.0-pre1:

$ ./configure --help

  and look for openssl

 Everything went well in configure, make, install and running too. It is
 working fine for EAP/MD5 too.

  EAP-MD5 doesn't use OpenSSL.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segmentation fault for eap/tls

2004-06-08 Thread Sathish Challa
Problem while making free-radius:

/root/freeradius-1.0.0-pre1/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys.
c:84: undefined reference to `HMAC_Init_ex'
/root/freeradius-1.0.0-pre1/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys.
c:89: undefined reference to `HMAC_Init_ex'
/root/freeradius-1.0.0-pre1/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys.
c:94: undefined reference to `HMAC_CTX_cleanup'
/root/freeradius-1.0.0-pre1/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys.
c:95: undefined reference to `HMAC_CTX_cleanup'
collect2: ld returned 1 exit status
rm -f .libs/radiusdS.o
gmake[4]: *** [radiusd] Error 1
gmake[4]: Leaving directory `/root/freeradius-1.0.0-pre1/src/main'
gmake[3]: *** [common] Error 1
gmake[3]: Leaving directory `/root/freeradius-1.0.0-pre1/src'
gmake[2]: *** [all] Error 2
gmake[2]: Leaving directory `/root/freeradius-1.0.0-pre1/src'
gmake[1]: *** [common] Error 1
gmake[1]: Leaving directory `/root/freeradius-1.0.0-pre1'
make: *** [all] Error 2

Following steps done.

./config --prefix=/root/myopenssl --openssldir=/root/myopenssl/openssl
make
make test
make install # it installed on /root/myopenssl directory.

For freeradius:
./configure --with-openssl-includes=/root/myopenssl/include no-shared --
with-openssl-libraries=/root/myopenssl/lib:/usr/local/lib --
prefix=/root/myfreeradius --exec-prefix=/root/myfreeradius/lib
make

Thank you,
Sathish Challa.
GRIC Software India Pvt. Ltd., www.GoRemote.com
Mobile: +91-98451-90676
Office [Direct]: +91-80 513 80 882
 
Server Group's Mission:
Innovative, open and scalable solutions pioneered proactively with a
methodical approach and engineering agility to deliver quality solutions to
the Customers and prudent responses to Product Management and other decision
making bodies
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok
Sent: Tuesday, June 08, 2004 7:44 PM
To: [EMAIL PROTECTED]
Subject: Re: segmentation fault for eap/tls 

pSathish Challa [EMAIL PROTECTED] wrote:
 How to restrict that to one version.

  In the 1.0.0-pre1:

$ ./configure --help

  and look for openssl

 Everything went well in configure, make, install and running too. It is
 working fine for EAP/MD5 too.

  EAP-MD5 doesn't use OpenSSL.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html