Re: Segmentation Fault with EAP-TLS
Hi, 1) ldd /usr/local/sbin/radiusd libcrypt.so.1 = /lib/libcrypt.so.1 (0x40033000) libnsl.so.1 = /lib/libnsl.so.1 (0x4006) libresolv.so.2 = /lib/libresolv.so.2 (0x40076000) libpthread.so.0 = /lib/i686/libpthread.so.0 (0x40088000) libcrypto.so.2 = /lib/libcrypto.so.2 (0x4009d000) libssl.so.2 = /lib/libssl.so.2 (0x4016) libradius-1.0.2.so = /usr/local/lib/libradius-1.0.2.so (0x4018e000) libsnmp-0.4.2.1.so = /usr/lib/libsnmp-0.4.2.1.so (0x401a1000) libltdl.so.3 = /usr/lib/libltdl.so.3 (0x401f8000) libdl.so.2 = /lib/libdl.so.2 (0x401fe000) libc.so.6 = /lib/i686/libc.so.6 (0x40202000) /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x4000) Well, /lib/libcrypto.so.2 and /lib/libssl.so.2 don't really look like the right libs, that should probably the same ...so.0.9.7 libs that are used here: 2)ldd /usr/local/lib/rlm_eap_tls-1.0.2.so libssl.so.0.9.7 = /usr/local/openssl/lib/libssl.so.0.9.7 (0x40024000) libcrypto.so.0.9.7 = /usr/local/openssl/lib/libcrypto.so.0.9.7 (0x40053000) libnsl.so.1 = /lib/libnsl.so.1 (0x40146000) libresolv.so.2 = /lib/libresolv.so.2 (0x4015c000) libpthread.so.0 = /lib/i686/libpthread.so.0 (0x4016e000) libc.so.6 = /lib/i686/libc.so.6 (0x40183000) libdl.so.2 = /lib/libdl.so.2 (0x402bf000) /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x8000) Regards, Stefan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Segmentation Fault with EAP-TLS
Thanks a lot., i am new and totally clueless as to what i need to be doing . I did use ./configure --with-openssl-includes=/usr/local/openssl/include --with-openssl-libraries=/usr/local/openssl/lib What else do i need to be doing to make the radiusd read the right libraries regards, arun On 5/16/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi, 1) ldd /usr/local/sbin/radiusd libcrypt.so.1 = /lib/libcrypt.so.1 (0x40033000) libnsl.so.1 = /lib/libnsl.so.1 (0x4006) libresolv.so.2 = /lib/libresolv.so.2 (0x40076000) libpthread.so.0 = /lib/i686/libpthread.so.0 (0x40088000) libcrypto.so.2 = /lib/libcrypto.so.2 (0x4009d000) libssl.so.2 = /lib/libssl.so.2 (0x4016) libradius-1.0.2.so = /usr/local/lib/libradius-1.0.2.so (0x4018e000) libsnmp-0.4.2.1.so = /usr/lib/libsnmp-0.4.2.1.so (0x401a1000) libltdl.so.3 = /usr/lib/libltdl.so.3 (0x401f8000) libdl.so.2 = /lib/libdl.so.2 (0x401fe000) libc.so.6 = /lib/i686/libc.so.6 (0x40202000) /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x4000) Well, /lib/libcrypto.so.2 and /lib/libssl.so.2 don't really look like the right libs, that should probably the same ...so.0.9.7 libs that are used here: 2)ldd /usr/local/lib/rlm_eap_tls-1.0.2.so libssl.so.0.9.7 = /usr/local/openssl/lib/libssl.so.0.9.7 (0x40024000) libcrypto.so.0.9.7 = /usr/local/openssl/lib/libcrypto.so.0.9.7 (0x40053000) libnsl.so.1 = /lib/libnsl.so.1 (0x40146000) libresolv.so.2 = /lib/libresolv.so.2 (0x4015c000) libpthread.so.0 = /lib/i686/libpthread.so.0 (0x4016e000) libc.so.6 = /lib/i686/libc.so.6 (0x40183000) libdl.so.2 = /lib/libdl.so.2 (0x402bf000) /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x8000) Regards, Stefan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Segmentation Fault with EAP-TLS
Hi, Thanks a lot., i am new and totally clueless as to what i need to be doing . I did use ./configure --with-openssl-includes=/usr/local/openssl/include --with-openssl-libraries=/usr/local/openssl/lib What else do i need to be doing to make the radiusd read the right libraries I'm not sure, either. Using a modified configure command like LDFLAGS=-L/usr/local/openssl/lib -lssl -lcrypto ./configure --with... might be worth a try. HTH, Stefan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: segmentation fault for eap/tls
All, I struggle here to configure eap-tls. But only best thing is just blindly follow how-to guide. It will solve all problems. Thank you, Sathish Challa. GRIC Software India Pvt. Ltd., www.GoRemote.com Mobile: +91-98451-90676 Office [Direct]: +91-80 513 80 882 Server Group's Mission: Innovative, open and scalable solutions pioneered proactively with a methodical approach and engineering agility to deliver quality solutions to the Customers and prudent responses to Product Management and other decision making bodies -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Tuesday, June 08, 2004 7:44 PM To: [EMAIL PROTECTED] Subject: Re: segmentation fault for eap/tls pSathish Challa [EMAIL PROTECTED] wrote: How to restrict that to one version. In the 1.0.0-pre1: $ ./configure --help and look for openssl Everything went well in configure, make, install and running too. It is working fine for EAP/MD5 too. EAP-MD5 doesn't use OpenSSL. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: segmentation fault for eap/tls
Hi try to recompile freeradius with the --noshared option in the configure. In my case the problem was solved sergio Quoting Sathish Challa [EMAIL PROTECTED]: All, I am getting segmentation fault [core dump ] while trying out eap/tls with win-xp on freeradius. Below given last some of statements. Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 /run-radiusd: line 7: 22489 Segmentation fault /usr/local/sbin/radiusd $@ My run-radiusd script is as follows #!/bin/sh -x LD_LIBRARY_PATH=/usr/local/lib LD_PRELOAD=/usr/lib/libcrypto.so export LD_LIBRARY_PATH LD_PRELOAD /usr/local/sbin/radiusd $@ I have OpenSSL 0.9.7d 17 Mar 2004 on Red Hat Linux release 8.0 (Psyche) Thank you, Sathish Challa. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Sergio SAGLIOCCO SecureLAB - System Network Security CSP s.c. a r.l. __ Villa Gualino Viale Settimo Severo, 63 - 10133 Torino [IT] tel. +39 011 481 5140 - Mobile +39 348 6024078 fax +39 011 481 5001 __ --- This mail sent through CSP Webmail System - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: segmentation fault for eap/tls
How to restrict that to one version. Seems to be I have old OPENSSL on my Linux. But I have installed latest openssl. Everything went well in configure, make, install and running too. It is working fine for EAP/MD5 too. But for EAP/TLS core dump is happening. Thank you, Sathish Challa. GRIC Software India Pvt. Ltd., www.GoRemote.com Mobile: +91-98451-90676 Office [Direct]: +91-80 513 80 882 Server Group's Mission: Innovative, open and scalable solutions pioneered proactively with a methodical approach and engineering agility to deliver quality solutions to the Customers and prudent responses to Product Management and other decision making bodies -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Tuesday, June 08, 2004 6:59 PM To: [EMAIL PROTECTED] Subject: Re: segmentation fault for eap/tls Sergio Sagliocco [EMAIL PROTECTED] wrote: try to recompile freeradius with the --noshared option in the configure. In my case the problem was solved Most likely because you tried to link the server against a different version of OpenSSL than you used to build it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: segmentation fault for eap/tls
How to restrict that to one version. Seems to be I have old OPENSSL on my Linux. But I have installed latest openssl. Everything went well in configure, make, install and running too. It is working fine for EAP/MD5 too. But for EAP/TLS core dump is happening. I had the same pb and Alan is right, you can use FREEradius with EAP/MD5 because it doesn't use openssl, to be sure look log after ./configure, you will see if there's a problem linking openssl. (Error message is lost in the middle of log, it doesn't appear at end) Fred.EVRARD Thank you, Sathish Challa. GRIC Software India Pvt. Ltd., www.GoRemote.com Mobile: +91-98451-90676 Office [Direct]: +91-80 513 80 882 Server Group's Mission: Innovative, open and scalable solutions pioneered proactively with a methodical approach and engineering agility to deliver quality solutions to the Customers and prudent responses to Product Management and other decision making bodies -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Tuesday, June 08, 2004 6:59 PM To: [EMAIL PROTECTED] Subject: Re: segmentation fault for eap/tls Sergio Sagliocco [EMAIL PROTECTED] wrote: try to recompile freeradius with the --noshared option in the configure. In my case the problem was solved Most likely because you tried to link the server against a different version of OpenSSL than you used to build it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: segmentation fault for eap/tls
pSathish Challa [EMAIL PROTECTED] wrote: How to restrict that to one version. In the 1.0.0-pre1: $ ./configure --help and look for openssl Everything went well in configure, make, install and running too. It is working fine for EAP/MD5 too. EAP-MD5 doesn't use OpenSSL. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: segmentation fault for eap/tls
Problem while making free-radius: /root/freeradius-1.0.0-pre1/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys. c:84: undefined reference to `HMAC_Init_ex' /root/freeradius-1.0.0-pre1/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys. c:89: undefined reference to `HMAC_Init_ex' /root/freeradius-1.0.0-pre1/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys. c:94: undefined reference to `HMAC_CTX_cleanup' /root/freeradius-1.0.0-pre1/src/modules/rlm_eap/types/rlm_eap_tls/mppe_keys. c:95: undefined reference to `HMAC_CTX_cleanup' collect2: ld returned 1 exit status rm -f .libs/radiusdS.o gmake[4]: *** [radiusd] Error 1 gmake[4]: Leaving directory `/root/freeradius-1.0.0-pre1/src/main' gmake[3]: *** [common] Error 1 gmake[3]: Leaving directory `/root/freeradius-1.0.0-pre1/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/root/freeradius-1.0.0-pre1/src' gmake[1]: *** [common] Error 1 gmake[1]: Leaving directory `/root/freeradius-1.0.0-pre1' make: *** [all] Error 2 Following steps done. ./config --prefix=/root/myopenssl --openssldir=/root/myopenssl/openssl make make test make install # it installed on /root/myopenssl directory. For freeradius: ./configure --with-openssl-includes=/root/myopenssl/include no-shared -- with-openssl-libraries=/root/myopenssl/lib:/usr/local/lib -- prefix=/root/myfreeradius --exec-prefix=/root/myfreeradius/lib make Thank you, Sathish Challa. GRIC Software India Pvt. Ltd., www.GoRemote.com Mobile: +91-98451-90676 Office [Direct]: +91-80 513 80 882 Server Group's Mission: Innovative, open and scalable solutions pioneered proactively with a methodical approach and engineering agility to deliver quality solutions to the Customers and prudent responses to Product Management and other decision making bodies -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Tuesday, June 08, 2004 7:44 PM To: [EMAIL PROTECTED] Subject: Re: segmentation fault for eap/tls pSathish Challa [EMAIL PROTECTED] wrote: How to restrict that to one version. In the 1.0.0-pre1: $ ./configure --help and look for openssl Everything went well in configure, make, install and running too. It is working fine for EAP/MD5 too. EAP-MD5 doesn't use OpenSSL. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html