Re: freeRADIUS on Solaris 10 - x86
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hey, Ramm-Ericson, Johannes schrieb: >> >> configure: WARNING: silently not building rlm_counter. >> configure: WARNING: FAILURE: rlm_counter requires: libgdbm. >> configure: WARNING: silently not building rlm_ippool. >> configure: WARNING: FAILURE: rlm_ippool requires: libgdbm. >> configure: WARNING: the comm_err library isn't found! >> configure: WARNING: silently not building rlm_krb5. >> configure: WARNING: FAILURE: rlm_krb5 requires: krb5. >> configure: WARNING: silently not building rlm_ldap. >> configure: WARNING: FAILURE: rlm_ldap requires: libldap_r. > > If you plan to authenticate against Active Directory then, yes, you > _probably_ need > the krb5 module. However, if you are using (for example) Quests VAS - vintela > authentication > system, you can authenticate against the Unix backend and don't need to > compile kerberos and > LDAP support. It's all a question of how you plan to set up and use your > environment. We need ldap and kerberos, so I've installed now: 12:47:03 unknown ~ [root]pkg-get -c | grep -i gdbm gdbm1.8.3,REV=2006.01.01SAME 12:49:37 unknown ~ [root]pkg-get -c | grep -i krb krb5_admin_server1.4.2,REV=2005.08.14SAME krb5_doc [Not installed]1.4.2,REV=2005.08.14 krb5_kdc1.4.2,REV=2005.08.14SAME krb5_lib1.4.2,REV=2005.08.14SAME krb5_lib_dev1.4.2,REV=2005.08.14SAME krb5_user1.4.2,REV=2005.08.14SAME 13:28:05 unknown ~ [root]pkg-get -c | grep -i ldap mod_ldap 1.8SAME openldap 2.3.28,REV=2006.11.10SAME openldap_client 2.3.28,REV=2006.11.10SAME openldap_devel 2.3.28,REV=2006.11.10SAME openldap_rt 2.3.28,REV=2006.11.10SAME php4_ldap [Not installed] 4.4.4 php5_ldap [Not installed]5.1.6,REV=2006.09.02 pm_ldap 0.3300,REV=2006.03.07SAME py_ldap 2.0.11SAME sudo_ldap [Not installed] 1.6.8p12,REV=2006.01.27 and 21:09:19 unknown ~ [root]echo $LD_LIBRARY_PATH /lib:/usr/sfw/lib:/usr/local/lib:/usr/lib:/usr/share/lib:/usr/dt/lib:/opt/csv/lib 21:09:20 unknown ~ [root]echo $PATH /opt/csw/bin:/opt/csw/sbin/:/opt/csw/bin/:/bin:/sbin:/usr/ccs/bin:/usr/sfw/bin:/usr/bin:/usr/sbin:/usr/ucb:/etc:. but ther warnings are the same! do I need something else? thanks mIke -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFW3QfyUY4xkIcFVQRAl7UAKCYpUgS6XDnzM6+r5dZ2ZKD8raTVwCfUEe4 XfcJ6sW6EpsF6iyayjBKtuA= =uhQx -END PGP SIGNATURE- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: freeRADIUS on Solaris 10 - x86
-Original Message- > Date: Tue, 7 Nov 2006 11:37:49 +0100 (CET) > From: "Michael Messner" <[EMAIL PROTECTED]> > Subject: freeRADIUS on Solaris 10 - x86 > To: > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=iso-8859-1 > > hey freeRADIUS users, > > now it looks much better: > > configure: WARNING: silently not building rlm_counter. > configure: WARNING: FAILURE: rlm_counter requires: libgdbm. > configure: WARNING: silently not building rlm_ippool. > configure: WARNING: FAILURE: rlm_ippool requires: libgdbm. > configure: WARNING: the comm_err library isn't found! > configure: WARNING: silently not building rlm_krb5. > configure: WARNING: FAILURE: rlm_krb5 requires: krb5. > configure: WARNING: silently not building rlm_ldap. > configure: WARNING: FAILURE: rlm_ldap requires: libldap_r. > configure: WARNING: iodbc headers not found. Use > --with-iodbc-include-dir=. > configure: WARNING: sql submodule 'iodbc' disabled > configure: WARNING: oracle headers not found. Use > --with-oracle-home-dir=. > configure: WARNING: sql submodule 'oracle' disabled > configure: WARNING: unixODBC headers not found. Use > --with-unixodbc-include-dir=. > configure: WARNING: sql submodule 'unixodbc' disabled > > I think that I need the ldap module für the active directory request, do I > also need the krb5 module? > > ca mIke If you plan to authenticate against Active Directory then, yes, you _probably_ need the krb5 module. However, if you are using (for example) Quests VAS - vintela authentication system, you can authenticate against the Unix backend and don't need to compile kerberos and LDAP support. It's all a question of how you plan to set up and use your environment. Regards, JRE PS. Also, with your current configuration there are several components that you will not be ablu to use (IP Pools, Oracle SQL connectors). - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeRADIUS on Solaris 10 - x86
are your > > I think that I need the ldap module für the active directory request, do I > also need the krb5 module? > are you trying to do ad authentication? if so you don't need ldap module, i needed: winbind, samba, krb5.conf(don't know to which package it belongs),auth_ntlm(again don't know which package it belongs to),freeradius.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeRADIUS on Solaris 10 - x86
"Michael Messner" <[EMAIL PROTECTED]> wrote: > Making all in rlm_perl... If you're not going to use rlm_perl, just delete that directory. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeRADIUS on Solaris 10 - x86
hey freeRADIUS users, I've installed Entire+OEM, 11:41:05 unknown ~/freeradius-1.1.3 [root]echo $PATH 11:41:09 unknown ~/freeradius-1.1.3 [root]echo $LD_LIBRARY_PATH /lib:/usr/sfw/lib:/usr/local/lib:/usr/lib:/usr/share/lib:/usr/dt/lib ./configure --sysconfdir=/etc --mandir=/usr/share/man --localstatedir=/var --with-snmp --with-ldap gmake ... Making all in rlm_perl... gmake[6]: Entering directory `/home/m1k3/freeradius-1.1.3/src/modules/rlm_perl' /home/m1k3/freeradius-1.1.3/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/home/m1k3/freeradius-1.1.3/src/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TS_ERRNO -I/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE -c rlm_perl.c mkdir .libs gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/home/m1k3/freeradius-1.1.3/src/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TS_ERRNO -I/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE -c rlm_perl.c -fPIC -DPIC -o .libs/rlm_perl.o rlm_perl.c: In function `perl_xlat': rlm_perl.c:674: warning: dereferencing type-punned pointer will break strict-aliasing rules rlm_perl.c: In function `rlmperl_call': rlm_perl.c:983: warning: dereferencing type-punned pointer will break strict-aliasing rules rlm_perl.c: In function `perl_detach': rlm_perl.c:1250: warning: dereferencing type-punned pointer will break strict-aliasing rules gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/home/m1k3/freeradius-1.1.3/src/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TS_ERRNO -I/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE -c rlm_perl.c -o rlm_perl.o >/dev/null 2>&1 /home/m1k3/freeradius-1.1.3/libtool --mode=link gcc -release 1.1.3 \ -module -export-dynamic -o rlm_perl.la \ -rpath /usr/local/lib rlm_perl.lo rlm_perl.c /home/m1k3/freeradius-1.1.3/src/lib/libradius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lsocket -lposix4 -lpthread *** Warning: Linking the shared library rlm_perl.la against the *** static library /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a is not portable! gcc -shared -Wl,-h -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so .libs/rlm_perl.o -R/home/m1k3/freeradius-1.1.3/src/lib/.libs -R/usr/local/lib -R/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE /home/m1k3/freeradius-1.1.3/src/lib/.libs/libradius.so /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a -L/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE -lperl -ldl -lm -lc -lnsl -lresolv -lsocket -lposix4 -lpthread -lc Textverschiebung beibehaltenreferenziert gegen SymbolOffset in Datei .rodata10x6 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) my_cxt 0x13 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) my_cxt 0x1a /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .rodata10x1f /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) my_cxt 0x39 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) my_cxt 0x95 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .rodata10x107 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) my_cxt 0x176 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .data1 0x1dd /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .rodata10x247 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .data1 0x303 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .rodata10x36b /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .data1 0x418 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .rodata10x475 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .rodata10x4eb /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .data1 0x579 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) .rodata10x603 /usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o) my_cxt 0x631
RE: freeRADIUS on Solaris 10 - x86
-Original Message- > Date: Thu, 2 Nov 2006 15:24:13 +0100 (CET) > From: "Michael Messner" <[EMAIL PROTECTED]> > Subject: freeRADIUS on Solaris 10 - x86 > To: > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=iso-8859-1 > > hey freeRADIUS users, > > next step ... testing freeRADIUS on a Solaris 10 box and I'm completely new > to solaris! :-( I've started > with the configure again but there are so much things missing: > > snip... < > > thanks mIke -- Hello Mike, Seeing as you are new to Solaris I'd say you can save yourself a lot of time and hard work by re-installing your x86 server with a standard Linux distribution. Even if you've never touched Linux before most distributions will have all the necessary prerequisites installed and if you choose to do so you won't even need to compile freeradius, you can install the vendor-supplied package for freeradius. Of course, YMMV, but I "grew up" with Solaris (and enjoyed it) but these days it's just simply a pain to install many free/open source packages on Solaris. Save yourself the trouble and go with Linux. Seeing as you are from Austria I suspect Suse will be your best option as you will probably find most local support around that distribution. Viele grüsse, Johannes - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeRADIUS on Solaris 10 - x86
"Michael Messner" <[EMAIL PROTECTED]> wrote: > I've started with the configure again but there are so much things missing: ... Very little of that matters. Did the configure process exit with an error? That's all that matters. The whole purpose of configure is to discover what you have on your system. You won't have everything on your system, so of course it won't find all sort of things. Put /usr/ccs/bin in your path, and there shouldn't be a problem. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeRADIUS on Solaris 10 - x86
did you install only the solaris core system? if so you probably need to install some additional packages.an important directory is /usr/ccs, maybe you need to add it to your path. check that SUNWbtool is installed. another one are the kerberos packages(SUNWkrbu and/or SUNWkrbr) The sun solaris package list can be usefull for you: http://docs.sun.com/app/docs/doc/817-0545/6mgbberid?a=view [EMAIL PROTECTED] wrote on 11/02/2006 03:24:13 PM: > hey freeRADIUS users, > > next step ... testing freeRADIUS on a Solaris 10 box and I'm completely > new to solaris! :-( > I've started with the configure again but there are so much things missing: > > aclocal > autoconf > autoheader > locate > libgdbm > sys/security.h > sys/prctl.h > prot.h > sia.h > siad.h > krb5.h > gawk > mawk > ar > ramlib > strip > argz.h > libldap > dl.h > dld.h > mach-o/dyld.h > gdbm.h > pam/pam_appl.h > oci.h > sql.h > > Where can I get all these things, do I need everything? > > We are trying to get freeradius working with 802.1x authentication to > Microsoft Active directory with LDAP-groups and huntgroups: > > users-example: > > DEFAULT LDAP-Group == "CN=adminrole,CN=users,DC=isalab,DC=local", > Huntgroup-Name == "enterasys", Realm == ISALAB.local > Filter-ID == "Enterasys:version=1:mgmt=su:policy=adminrole", > Reply-Message = "Welcome %{Stripped-User-Name:-%{User-Name:-None}} in the > %{Realm} - Domain, there are no restrictions for you in this network", > Fall-Through = No > > > I hope someone can help me a bit to find the right way! > > thanks mIke > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html