RE: eap/tls freeradius openssl
I have radiusd in /usr/local/sbin. John, you mentioned that None of our rpm's ever install in /usr/local so I am assuming this is another artifact of an old install. How would you suggest I go about getting rid of ALL freeradius install artifacts and start a new? Do I need to reinstall my OS? If that is the recommended path do you think there is an ideal OS to run Freeradius/Openssl for eap-tls functionality? Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of John Dennis Sent: Mon 1/12/2009 3:01 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Brian Ertel wrote: Ok, I think I've installed everything correctly (according to the faq) but obviously not. starting radius in debug I still get: Perhaps you built and installed things correctly, it's hard to tell, but you might have more than one version installed and you might be running the old bogus one. How can I tell? including configuration file /usr/local/etc/raddb/radiusd.conf None of our rpm's ever install in /usr/local. A quick test of the rpm's by listing the installed files would show that (e.g. rpm -ql freeradius), How to figure out what files are contained in the rpms is in the FAQ BTW. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html winmail.dat- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Brian Ertel wrote: I have radiusd in /usr/local/sbin. John, you mentioned that None of our rpm's ever install in /usr/local so I am assuming this is another artifact of an old install. How would you suggest I go about getting rid of ALL freeradius install artifacts and start a new? Do I need to reinstall my OS? If that is the recommended path do you think there is an ideal OS to run Freeradius/Openssl for eap-tls functionality? No, you don't need to reinstall your OS, that would be insanely overkill. The old install probably won't conflict because it installed in a completely different location, but it will be an endless source of confusion, I recommend you delete it and leave only what RPM installed for you. So how did it get there in the first place? I'm willing to bet you ran make install from within some source tree didn't you? Return to the same place where you ran make install and run make uninstall. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? Brian On 1/13/09 10:33 AM, John Dennis jden...@redhat.com wrote: Brian Ertel wrote: I have radiusd in /usr/local/sbin. John, you mentioned that None of our rpm's ever install in /usr/local so I am assuming this is another artifact of an old install. How would you suggest I go about getting rid of ALL freeradius install artifacts and start a new? Do I need to reinstall my OS? If that is the recommended path do you think there is an ideal OS to run Freeradius/Openssl for eap-tls functionality? No, you don't need to reinstall your OS, that would be insanely overkill. The old install probably won't conflict because it installed in a completely different location, but it will be an endless source of confusion, I recommend you delete it and leave only what RPM installed for you. So how did it get there in the first place? I'm willing to bet you ran make install from within some source tree didn't you? Return to the same place where you ran make install and run make uninstall. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? You can recreate the tree, follow the same steps you did the first time which was probably something like this: % tar xf freeradius-server.tar % cd freeradius-server % ./configure #passing the exact same parameters you used the first time % make Now instead of make install run make make uninstall Then you can delete the source tree. BTW, all this is basic Linux/Unix administration, the freeradius-users list is not an appropriate place to learn these topics. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
On Tue, 2009-01-13 at 11:46 -0500, John Dennis wrote: Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? You can recreate the tree, follow the same steps you did the first time which was probably something like this: % tar xf freeradius-server.tar % cd freeradius-server % ./configure #passing the exact same parameters you used the first time % make Now instead of make install run make make uninstall Then you can delete the source tree. BTW, all this is basic Linux/Unix administration, the freeradius-users list is not an appropriate place to learn these topics. seems to me that it attempts to load the files he installed from tarball that are in /usr/local/[bin|sbin] and that is what he needs to clean out before he ever attempts to use anything installed from rpm Craig - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
I will clean up /sbin first. I understand this is a fr email list and appreciate the help with the basic OS stuff. I will try to keep this type of stuff of the list in the future. Thanks again, Brian On 1/13/09 11:51 AM, Craig White craigwh...@azapple.com wrote: On Tue, 2009-01-13 at 11:46 -0500, John Dennis wrote: Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? You can recreate the tree, follow the same steps you did the first time which was probably something like this: % tar xf freeradius-server.tar % cd freeradius-server % ./configure #passing the exact same parameters you used the first time % make Now instead of make install run make make uninstall Then you can delete the source tree. BTW, all this is basic Linux/Unix administration, the freeradius-users list is not an appropriate place to learn these topics. seems to me that it attempts to load the files he installed from tarball that are in /usr/local/[bin|sbin] and that is what he needs to clean out before he ever attempts to use anything installed from rpm Craig - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
hi, linux admin task: you can also do 'make -n install' and this will show you what and where make is going to put the files (its a test/dummy run) - then you can grep through the output for eg /usr/local and see what files to get rid of. as well as the tools themselves - radiusd, radtest etc, you'll also want to delete the related library files - these will usually be self evident by the names in /usr/local/lib - and after doing this, re-run the system library too /sbin/ldconfig -v alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Thank you Alan. Brian On 1/13/09 1:01 PM, a.l.m.bu...@lboro.ac.uk a.l.m.bu...@lboro.ac.uk wrote: hi, linux admin task: you can also do 'make -n install' and this will show you what and where make is going to put the files (its a test/dummy run) - then you can grep through the output for eg /usr/local and see what files to get rid of. as well as the tools themselves - radiusd, radtest etc, you'll also want to delete the related library files - these will usually be self evident by the names in /usr/local/lib - and after doing this, re-run the system library too /sbin/ldconfig -v alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Craig White wrote: On Tue, 2009-01-13 at 11:46 -0500, John Dennis wrote: Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? You can recreate the tree, follow the same steps you did the first time which was probably something like this: % tar xf freeradius-server.tar % cd freeradius-server % ./configure #passing the exact same parameters you used the first time % make Now instead of make install run make make uninstall Then you can delete the source tree. BTW, all this is basic Linux/Unix administration, the freeradius-users list is not an appropriate place to learn these topics. seems to me that it attempts to load the files he installed from tarball that are in /usr/local/[bin|sbin] and that is what he needs to clean out before he ever attempts to use anything installed from rpm Exactly. FWIW the paths are embedded as a consequence of parameters passed to configure. When you build from an SRPM the spec file passes different parameters to configure than the default configure parameters, thus the two installs will not likely conflict, but it's possible. Therefore the best course of action, to assure there are no conflicts and to reduce the inevitable confusion of having multiple copies installed in various locations is to remove the first installation and then do an RPM install. An install copies many files into a variety of locations, the only way to assure you've removed all the files to use the same code to uninstall as was used to perform the install in the first place. BTW, this is one reason why using the package manager on the target system (e.g. rpm, apt, dpkg, etc.) is always preferred because they know how to install and uninstall and keep a system consistent. When you go behind the back of these package managers by installing things manually (e.g. make install) you run the risk of screwing your system up unless you have advanced skills and know exactly what you're doing. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
On Tue, 2009-01-13 at 13:33 -0500, John Dennis wrote: Craig White wrote: On Tue, 2009-01-13 at 11:46 -0500, John Dennis wrote: Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? You can recreate the tree, follow the same steps you did the first time which was probably something like this: % tar xf freeradius-server.tar % cd freeradius-server % ./configure #passing the exact same parameters you used the first time % make Now instead of make install run make make uninstall Then you can delete the source tree. BTW, all this is basic Linux/Unix administration, the freeradius-users list is not an appropriate place to learn these topics. seems to me that it attempts to load the files he installed from tarball that are in /usr/local/[bin|sbin] and that is what he needs to clean out before he ever attempts to use anything installed from rpm Exactly. FWIW the paths are embedded as a consequence of parameters passed to configure. When you build from an SRPM the spec file passes different parameters to configure than the default configure parameters, thus the two installs will not likely conflict, but it's possible. Therefore the best course of action, to assure there are no conflicts and to reduce the inevitable confusion of having multiple copies installed in various locations is to remove the first installation and then do an RPM install. An install copies many files into a variety of locations, the only way to assure you've removed all the files to use the same code to uninstall as was used to perform the install in the first place. BTW, this is one reason why using the package manager on the target system (e.g. rpm, apt, dpkg, etc.) is always preferred because they know how to install and uninstall and keep a system consistent. When you go behind the back of these package managers by installing things manually (e.g. make install) you run the risk of screwing your system up unless you have advanced skills and know exactly what you're doing. and 'make uninstall' often is simply not implemented in tarballs anyway. Seeing the OP trying to install tarballs and rpm packages seems to be a lesson in futility and I always opt for rpms if at all possible, just for the reasons that you mentioned. I actually rebuilt the F10 rpms before I saw your wiki page and like about the day before you announced the 2.1.3 package in testing so I'm sorry I didn't provide any useful feedback to either. Craig - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
John, In the FAQ under the title Install the desired rpm's it reads: The rpm's under /usr/src/redhat/RPMS are the packages you'll want to install. % sudo rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm Under the RPM dir I have an i386 dir which includes: freeradius-2.1.3-1.i386.rpmfreeradius-mysql-2.1.3-1.i386.rpm freeradius-debuginfo-2.1.3-1.i386.rpm freeradius-perl-2.1.3-1.i386.rpm freeradius-devel-2.1.3-1.i386.rpm freeradius-postgresql-2.1.3-1.i386.rpm freeradius-krb5-2.1.3-1.i386.rpm freeradius-python-2.1.3-1.i386.rpm freeradius-ldap-2.1.3-1.i386.rpm freeradius-unixODBC-2.1.3-1.i386.rpm freeradius-libs-2.1.3-1.i386.rpm freeradius-utils-2.1.3-1.i386.rpm and the SRPM dir includes: freeradius-2.1.3-1.src.rpm so the only file that I have that is a .src.rpm file is freeradius-2.1.3-1.src.rpm, how for example does the: rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm command properly install the freeradius-libs-2.1.3-1.i386.rpm file? In other words freeradius-libs-2.1.3-1.i386.rpm is not a .src.rpm file right? Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of John Dennis Sent: Tue 1/13/2009 1:33 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Craig White wrote: On Tue, 2009-01-13 at 11:46 -0500, John Dennis wrote: Brian Ertel wrote: John, You are right, but the dir where the old radius was make installed is gone. That is the original folder that was created after unzipping and installing the old ver. Of radius is gone. Is there anything else I can do? You can recreate the tree, follow the same steps you did the first time which was probably something like this: % tar xf freeradius-server.tar % cd freeradius-server % ./configure #passing the exact same parameters you used the first time % make Now instead of make install run make make uninstall Then you can delete the source tree. BTW, all this is basic Linux/Unix administration, the freeradius-users list is not an appropriate place to learn these topics. seems to me that it attempts to load the files he installed from tarball that are in /usr/local/[bin|sbin] and that is what he needs to clean out before he ever attempts to use anything installed from rpm Exactly. FWIW the paths are embedded as a consequence of parameters passed to configure. When you build from an SRPM the spec file passes different parameters to configure than the default configure parameters, thus the two installs will not likely conflict, but it's possible. Therefore the best course of action, to assure there are no conflicts and to reduce the inevitable confusion of having multiple copies installed in various locations is to remove the first installation and then do an RPM install. An install copies many files into a variety of locations, the only way to assure you've removed all the files to use the same code to uninstall as was used to perform the install in the first place. BTW, this is one reason why using the package manager on the target system (e.g. rpm, apt, dpkg, etc.) is always preferred because they know how to install and uninstall and keep a system consistent. When you go behind the back of these package managers by installing things manually (e.g. make install) you run the risk of screwing your system up unless you have advanced skills and know exactly what you're doing. -- John Dennis jden...@redhat.com mailto:jden...@redhat.com winmail.dat- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Thanks John, no prob. Brian On 1/13/09 4:28 PM, John Dennis jden...@redhat.com wrote: Brian Ertel wrote: John, In the FAQ under the title Install the desired rpm's it reads: The rpm's under /usr/src/redhat/RPMS are the packages you'll want to install. % sudo rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm Under the RPM dir I have an i386 dir which includes: freeradius-2.1.3-1.i386.rpmfreeradius-mysql-2.1.3-1.i386.rpm freeradius-debuginfo-2.1.3-1.i386.rpm freeradius-perl-2.1.3-1.i386.rpm freeradius-devel-2.1.3-1.i386.rpm freeradius-postgresql-2.1.3-1.i386.rpm freeradius-krb5-2.1.3-1.i386.rpm freeradius-python-2.1.3-1.i386.rpm freeradius-ldap-2.1.3-1.i386.rpm freeradius-unixODBC-2.1.3-1.i386.rpm freeradius-libs-2.1.3-1.i386.rpm freeradius-utils-2.1.3-1.i386.rpm and the SRPM dir includes: freeradius-2.1.3-1.src.rpm so the only file that I have that is a .src.rpm file is freeradius-2.1.3-1.src.rpm, how for example does the: rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm command properly install the freeradius-libs-2.1.3-1.i386.rpm file? In other words freeradius-libs-2.1.3-1.i386.rpm is not a .src.rpm file right? opps ... looks like you found another cut-n-paste bug in the documentation, my apologies. The rpm's are not under SRPM, they are under RPM and do not have .src.rpm at the end, they just have .rpm. I've updated the wiki page. Thank you for helping to debug the instructions and I'm sorry if it sent you down a wrong path. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
Oh, and should I include the /i386 dir and the i386.rpm suffix like: rpm -Uhv /usr/src/redhat/RPMS/i386/freeradius-2.1.3-1.i386.rpm /usr/src/redhat/RPMS/i386/freeradius-libs-2.1.3-1.i386.rpm Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of John Dennis Sent: Tue 1/13/2009 4:28 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Brian Ertel wrote: John, In the FAQ under the title Install the desired rpm's it reads: The rpm's under /usr/src/redhat/RPMS are the packages you'll want to install. % sudo rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm Under the RPM dir I have an i386 dir which includes: freeradius-2.1.3-1.i386.rpmfreeradius-mysql-2.1.3-1.i386.rpm freeradius-debuginfo-2.1.3-1.i386.rpm freeradius-perl-2.1.3-1.i386.rpm freeradius-devel-2.1.3-1.i386.rpm freeradius-postgresql-2.1.3-1.i386.rpm freeradius-krb5-2.1.3-1.i386.rpm freeradius-python-2.1.3-1.i386.rpm freeradius-ldap-2.1.3-1.i386.rpm freeradius-unixODBC-2.1.3-1.i386.rpm freeradius-libs-2.1.3-1.i386.rpm freeradius-utils-2.1.3-1.i386.rpm and the SRPM dir includes: freeradius-2.1.3-1.src.rpm so the only file that I have that is a .src.rpm file is freeradius-2.1.3-1.src.rpm, how for example does the: rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm command properly install the freeradius-libs-2.1.3-1.i386.rpm file? In other words freeradius-libs-2.1.3-1.i386.rpm is not a .src.rpm file right? opps ... looks like you found another cut-n-paste bug in the documentation, my apologies. The rpm's are not under SRPM, they are under RPM and do not have .src.rpm at the end, they just have .rpm. I've updated the wiki page. Thank you for helping to debug the instructions and I'm sorry if it sent you down a wrong path. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html winmail.dat- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Brian Ertel wrote: John, In the FAQ under the title Install the desired rpm's it reads: The rpm's under /usr/src/redhat/RPMS are the packages you'll want to install. % sudo rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm Under the RPM dir I have an i386 dir which includes: freeradius-2.1.3-1.i386.rpmfreeradius-mysql-2.1.3-1.i386.rpm freeradius-debuginfo-2.1.3-1.i386.rpm freeradius-perl-2.1.3-1.i386.rpm freeradius-devel-2.1.3-1.i386.rpm freeradius-postgresql-2.1.3-1.i386.rpm freeradius-krb5-2.1.3-1.i386.rpm freeradius-python-2.1.3-1.i386.rpm freeradius-ldap-2.1.3-1.i386.rpm freeradius-unixODBC-2.1.3-1.i386.rpm freeradius-libs-2.1.3-1.i386.rpm freeradius-utils-2.1.3-1.i386.rpm and the SRPM dir includes: freeradius-2.1.3-1.src.rpm so the only file that I have that is a .src.rpm file is freeradius-2.1.3-1.src.rpm, how for example does the: rpm -Uhv /usr/src/redhat/SRPMS/freeradius-2.1.1-7.fc10.src.rpm /usr/src/redhat/SRPMS/freeradius-libs-2.1.1-7.fc10.src.rpm command properly install the freeradius-libs-2.1.3-1.i386.rpm file? In other words freeradius-libs-2.1.3-1.i386.rpm is not a .src.rpm file right? opps ... looks like you found another cut-n-paste bug in the documentation, my apologies. The rpm's are not under SRPM, they are under RPM and do not have .src.rpm at the end, they just have .rpm. I've updated the wiki page. Thank you for helping to debug the instructions and I'm sorry if it sent you down a wrong path. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
On Tue, 2009-01-13 at 16:38 -0500, Brian Ertel wrote: Oh, and should I include the /i386 dir and the i386.rpm suffix like: rpm -Uhv /usr/src/redhat/RPMS/i386/freeradius-2.1.3-1.i386.rpm /usr/src/redhat/RPMS/i386/freeradius-libs-2.1.3-1.i386.rpm suggestion...make life easy on yourself cd /usr/src/redhat/RPMS/i386 yum localinstall \ freeradius-2.1.3-1.i386.rpm \ freeradius-libs-2.1.3-1.i386.rpm (yum localinstall will install the local rpm's and download/install any dependencies not yet installed) Craig - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Brian Ertel wrote: Oh, and should I include the /i386 dir and the i386.rpm suffix like: rpm -Uhv /usr/src/redhat/RPMS/i386/freeradius-2.1.3-1.i386.rpm /usr/src/redhat/RPMS/i386/freeradius-libs-2.1.3-1.i386.rpm Yes, use the filenames rpmbuild generated (it will tell you) -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Cool, thanks. Brian On 1/13/09 4:58 PM, John Dennis jden...@redhat.com wrote: Brian Ertel wrote: Oh, and should I include the /i386 dir and the i386.rpm suffix like: rpm -Uhv /usr/src/redhat/RPMS/i386/freeradius-2.1.3-1.i386.rpm /usr/src/redhat/RPMS/i386/freeradius-libs-2.1.3-1.i386.rpm Yes, use the filenames rpmbuild generated (it will tell you) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
{...} for more modules to load
Module: Linked to module rlm_acct_unique
Module: Instantiating acct_unique
acct_unique {
key = User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address,
NAS-Port
}
Module: Checking accounting {...} for more modules to load
Module: Linked to module rlm_detail
Module: Instantiating detail
detail {
detailfile =
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d
header = %t
detailperm = 384
dirperm = 493
locking = no
log_packet_header = no
}
Module: Instantiating attr_filter.accounting_response
attr_filter attr_filter.accounting_response {
attrsfile = /usr/local/etc/raddb/attrs.accounting_response
key = %{User-Name}
}
Module: Checking session {...} for more modules to load
Module: Checking post-proxy {...} for more modules to load
Module: Checking post-auth {...} for more modules to load
}
radiusd: Opening IP addresses and Ports
listen {
type = auth
ipaddr = *
port = 0
}
listen {
type = acct
ipaddr = *
port = 0
}
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
-Original Message-
From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on
behalf of Craig White
Sent: Fri 1/9/2009 2:41 PM
To: freeradius-users@lists.freeradius.org
Subject: RE: eap/tls freeradius openssl
http://wiki.freeradius.org/Red_Hat_FAQ
nice wiki
On Fri, 2009-01-09 at 14:21 -0500, Brian Ertel wrote:
Alan,
I am running CentOS 5.
Thanks,
Brian
-Original Message-
From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on
behalf of Alan DeKok
Sent: Fri 1/9/2009 2:15 PM
To: FreeRadius users mailing list
Subject: Re: eap/tls freeradius openssl
Brian Ertel wrote:
I am ready to get flamed. I reinstalled the newest ver. of Freeradius
and did not change anything. It started up in debug mode. I am trying
to put together a system that will do eap/tls. Wireless client - WAP
- Radius... I also just installed the newest version of openssl.
Freeradius starts up, but I get the:
Ignoring EAP-Type/tls because we do not have OpenSSL support.
Ignoring EAP-Type/ttls because we do not have OpenSSL support.
Ignoring EAP-Type/peap because we do not have OpenSSL support.
You need to install the OpenSSL *development* headers.
output.
I read on another thread about freeradius not being able to find the
proper Openssl libs. I do not understand the process of making FR aware
of OpenSSL and getting FR to not Ingore EAP-Type/tls...
Which OS are you running? The name of the OpenSSL development package
is OS dependent.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
winmail.dat-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Brian Ertel wrote: Ok, I think I've installed everything correctly (according to the faq) but obviously not. starting radius in debug I still get: Perhaps you built and installed things correctly, it's hard to tell, but you might have more than one version installed and you might be running the old bogus one. How can I tell? including configuration file /usr/local/etc/raddb/radiusd.conf None of our rpm's ever install in /usr/local. A quick test of the rpm's by listing the installed files would show that (e.g. rpm -ql freeradius), How to figure out what files are contained in the rpms is in the FAQ BTW. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
hi, did you follow the fedora/redhat quid as posted to this list - or did you just install openssl-devel and try the daemon again? if so, that wont work. you will need to rerun the ./configure and make steps again for the system to learn your got the SSL support installed..and thus compile in the support and link it to openssl etc. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
I installed the openssl and openssl-devel rpms and the freeradius SRPM with all dependency rpms... Brian On 1/12/09 3:39 PM, a.l.m.bu...@lboro.ac.uk a.l.m.bu...@lboro.ac.uk wrote: hi, did you follow the fedora/redhat quid as posted to this list - or did you just install openssl-devel and try the daemon again? if so, that wont work. you will need to rerun the ./configure and make steps again for the system to learn your got the SSL support installed..and thus compile in the support and link it to openssl etc. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Brian Ertel wrote: I installed the openssl and openssl-devel rpms and the freeradius SRPM with all dependency rpms... You didn't follow the instructions in the FAQ. You must build the SRPM and install the resulting RPM's. Please folow the instuctions in the FAQ. A SRPM contains the source to build a set of packages (hence the S before the RPM), installing the SRPM without building it is a NULL operation. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Hi, I installed the openssl and openssl-devel rpms and the freeradius SRPM with all dependency rpms... ..but before you ran your own version up? if so, you're still running your own version which radiusd will probably say /usr/local/sbin/radiusd you need to run the version the SRPMS would have installed... recalling redhat/fedora behaviour it'll normally be /usr/sbin/radiusd alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
I obeyed the faq's every command and get caught up on this: [r...@freeradius redhat]# rpmbuild -ba rpmbuild /usr/src/redhat/SPECS/freeradius.spec error: failed to stat /usr/src/redhat/rpmbuild: No such file or directory ??? Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of a.l.m.bu...@lboro.ac.uk Sent: Mon 1/12/2009 5:06 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Hi, I installed the openssl and openssl-devel rpms and the freeradius SRPM with all dependency rpms... ..but before you ran your own version up? if so, you're still running your own version which radiusd will probably say /usr/local/sbin/radiusd you need to run the version the SRPMS would have installed... recalling redhat/fedora behaviour it'll normally be /usr/sbin/radiusd alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html winmail.dat- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Brian Ertel wrote: I obeyed the faq's every command and get caught up on this: [r...@freeradius redhat]# rpmbuild -ba rpmbuild /usr/src/redhat/SPECS/freeradius.spec error: failed to stat /usr/src/redhat/rpmbuild: No such file or directory My apologies, there was a typo in the FAQ, the command should have read: rpmbuild -ba /usr/src/redhat/SPECS/freeradius.spec The second rpmbuild looks like it was a cut-n-paste bug, it is not necessary, I've fixed it on the wiki, thank you for pointing this out. Just as an aside it looks like you're running as the root user, don't do that. It's seldom necessary to run as root, it's very dangerous. Instead run as a normal user and sudo when necessary (you'll have to add yourself to /etc/sudoers using sudoedit). It is not necessary to be root to build a package. When it's time to install use sudo, when you want to run the service use sudo. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
Ahhh, ok. Tomorrow's another day Thanks John, Brian From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of John Dennis Sent: Mon 1/12/2009 6:14 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Brian Ertel wrote: I obeyed the faq's every command and get caught up on this: [r...@freeradius redhat]# rpmbuild -ba rpmbuild /usr/src/redhat/SPECS/freeradius.spec error: failed to stat /usr/src/redhat/rpmbuild: No such file or directory My apologies, there was a typo in the FAQ, the command should have read: rpmbuild -ba /usr/src/redhat/SPECS/freeradius.spec The second rpmbuild looks like it was a cut-n-paste bug, it is not necessary, I've fixed it on the wiki, thank you for pointing this out. Just as an aside it looks like you're running as the root user, don't do that. It's seldom necessary to run as root, it's very dangerous. Instead run as a normal user and sudo when necessary (you'll have to add yourself to /etc/sudoers using sudoedit). It is not necessary to be root to build a package. When it's time to install use sudo, when you want to run the service use sudo. -- John Dennis jden...@redhat.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html winmail.dat- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: eap/tls freeradius openssl
Brian Ertel wrote: I am ready to get flamed. I reinstalled the newest ver. of Freeradius and did not change anything. It started up in debug mode. I am trying to put together a system that will do eap/tls. Wireless client - WAP - Radius... I also just installed the newest version of openssl. Freeradius starts up, but I get the: Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support. You need to install the OpenSSL *development* headers. output. I read on another thread about freeradius not being able to find the proper Openssl libs. I do not understand the process of making FR aware of OpenSSL and getting FR to not Ingore EAP-Type/tls... Which OS are you running? The name of the OpenSSL development package is OS dependent. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
Alan, I am running CentOS 5. Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of Alan DeKok Sent: Fri 1/9/2009 2:15 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Brian Ertel wrote: I am ready to get flamed. I reinstalled the newest ver. of Freeradius and did not change anything. It started up in debug mode. I am trying to put together a system that will do eap/tls. Wireless client - WAP - Radius... I also just installed the newest version of openssl. Freeradius starts up, but I get the: Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support. You need to install the OpenSSL *development* headers. output. I read on another thread about freeradius not being able to find the proper Openssl libs. I do not understand the process of making FR aware of OpenSSL and getting FR to not Ingore EAP-Type/tls... Which OS are you running? The name of the OpenSSL development package is OS dependent. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html winmail.dat- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
http://wiki.freeradius.org/Red_Hat_FAQ nice wiki On Fri, 2009-01-09 at 14:21 -0500, Brian Ertel wrote: Alan, I am running CentOS 5. Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of Alan DeKok Sent: Fri 1/9/2009 2:15 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Brian Ertel wrote: I am ready to get flamed. I reinstalled the newest ver. of Freeradius and did not change anything. It started up in debug mode. I am trying to put together a system that will do eap/tls. Wireless client - WAP - Radius... I also just installed the newest version of openssl. Freeradius starts up, but I get the: Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support. You need to install the OpenSSL *development* headers. output. I read on another thread about freeradius not being able to find the proper Openssl libs. I do not understand the process of making FR aware of OpenSSL and getting FR to not Ingore EAP-Type/tls... Which OS are you running? The name of the OpenSSL development package is OS dependent. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
Hi Craig, So if I install freeradius as an rpm is there also a freeradius-openssl and freeradius-openssl-dev rpm? Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of Craig White Sent: Fri 1/9/2009 2:41 PM To: freeradius-users@lists.freeradius.org Subject: RE: eap/tls freeradius openssl http://wiki.freeradius.org/Red_Hat_FAQ nice wiki On Fri, 2009-01-09 at 14:21 -0500, Brian Ertel wrote: Alan, I am running CentOS 5. Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of Alan DeKok Sent: Fri 1/9/2009 2:15 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Brian Ertel wrote: I am ready to get flamed. I reinstalled the newest ver. of Freeradius and did not change anything. It started up in debug mode. I am trying to put together a system that will do eap/tls. Wireless client - WAP - Radius... I also just installed the newest version of openssl. Freeradius starts up, but I get the: Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support. You need to install the OpenSSL *development* headers. output. I read on another thread about freeradius not being able to find the proper Openssl libs. I do not understand the process of making FR aware of OpenSSL and getting FR to not Ingore EAP-Type/tls... Which OS are you running? The name of the OpenSSL development package is OS dependent. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html winmail.dat- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: eap/tls freeradius openssl
No - you download the fedora source rpm and build from spec file and it compiles using openssl-devel (and other development libraries as required) Craig On Fri, 2009-01-09 at 14:54 -0500, Brian Ertel wrote: Hi Craig, So if I install freeradius as an rpm is there also a freeradius-openssl and freeradius-openssl-dev rpm? Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of Craig White Sent: Fri 1/9/2009 2:41 PM To: freeradius-users@lists.freeradius.org Subject: RE: eap/tls freeradius openssl http://wiki.freeradius.org/Red_Hat_FAQ nice wiki On Fri, 2009-01-09 at 14:21 -0500, Brian Ertel wrote: Alan, I am running CentOS 5. Thanks, Brian -Original Message- From: freeradius-users-bounces+bsertel=amherst@lists.freeradius.org on behalf of Alan DeKok Sent: Fri 1/9/2009 2:15 PM To: FreeRadius users mailing list Subject: Re: eap/tls freeradius openssl Brian Ertel wrote: I am ready to get flamed. I reinstalled the newest ver. of Freeradius and did not change anything. It started up in debug mode. I am trying to put together a system that will do eap/tls. Wireless client - WAP - Radius... I also just installed the newest version of openssl. Freeradius starts up, but I get the: Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support. You need to install the OpenSSL *development* headers. output. I read on another thread about freeradius not being able to find the proper Openssl libs. I do not understand the process of making FR aware of OpenSSL and getting FR to not Ingore EAP-Type/tls... Which OS are you running? The name of the OpenSSL development package is OS dependent. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
