Re: freeRADIUS on Solaris 10 - x86

2006-11-15 Thread Michael Messner
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

hey,

Ramm-Ericson, Johannes schrieb:
>>
>> configure: WARNING: silently not building rlm_counter.
>> configure: WARNING: FAILURE: rlm_counter requires:  libgdbm.
>> configure: WARNING: silently not building rlm_ippool.
>> configure: WARNING: FAILURE: rlm_ippool requires:  libgdbm.
>> configure: WARNING: the comm_err library isn't found!
>> configure: WARNING: silently not building rlm_krb5.
>> configure: WARNING: FAILURE: rlm_krb5 requires:  krb5.
>> configure: WARNING: silently not building rlm_ldap.
>> configure: WARNING: FAILURE: rlm_ldap requires:  libldap_r.
> 
> If you plan to authenticate against Active Directory then, yes, you 
> _probably_ need 
> the krb5 module. However, if you are using (for example) Quests VAS - vintela 
> authentication 
> system, you can authenticate against the Unix backend and don't need to 
> compile kerberos and 
> LDAP support. It's all a question of how you plan to set up and use your 
> environment. 

We need ldap and kerberos, so I've installed now:

12:47:03 unknown ~ [root]pkg-get -c | grep -i gdbm
   gdbm1.8.3,REV=2006.01.01SAME
12:49:37 unknown ~ [root]pkg-get -c | grep -i krb
krb5_admin_server1.4.2,REV=2005.08.14SAME
   krb5_doc [Not installed]1.4.2,REV=2005.08.14
   krb5_kdc1.4.2,REV=2005.08.14SAME
   krb5_lib1.4.2,REV=2005.08.14SAME
   krb5_lib_dev1.4.2,REV=2005.08.14SAME
  krb5_user1.4.2,REV=2005.08.14SAME
13:28:05 unknown ~ [root]pkg-get -c | grep -i ldap
   mod_ldap 1.8SAME
   openldap   2.3.28,REV=2006.11.10SAME
openldap_client   2.3.28,REV=2006.11.10SAME
 openldap_devel   2.3.28,REV=2006.11.10SAME
openldap_rt   2.3.28,REV=2006.11.10SAME
  php4_ldap [Not installed]   4.4.4
  php5_ldap [Not installed]5.1.6,REV=2006.09.02
pm_ldap   0.3300,REV=2006.03.07SAME
py_ldap  2.0.11SAME
  sudo_ldap [Not installed] 1.6.8p12,REV=2006.01.27

and

21:09:19 unknown ~ [root]echo $LD_LIBRARY_PATH
/lib:/usr/sfw/lib:/usr/local/lib:/usr/lib:/usr/share/lib:/usr/dt/lib:/opt/csv/lib
21:09:20 unknown ~ [root]echo $PATH
/opt/csw/bin:/opt/csw/sbin/:/opt/csw/bin/:/bin:/sbin:/usr/ccs/bin:/usr/sfw/bin:/usr/bin:/usr/sbin:/usr/ucb:/etc:.

but ther warnings are the same!
do I need something else?

thanks
mIke
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFW3QfyUY4xkIcFVQRAl7UAKCYpUgS6XDnzM6+r5dZ2ZKD8raTVwCfUEe4
XfcJ6sW6EpsF6iyayjBKtuA=
=uhQx
-END PGP SIGNATURE-
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: freeRADIUS on Solaris 10 - x86

2006-11-07 Thread Ramm-Ericson, Johannes
 

-Original Message-
> Date: Tue, 7 Nov 2006 11:37:49 +0100 (CET)
> From: "Michael Messner" <[EMAIL PROTECTED]>
> Subject: freeRADIUS on Solaris 10 - x86
> To: 
> Message-ID: <[EMAIL PROTECTED]>
> Content-Type: text/plain; charset=iso-8859-1
>
> hey freeRADIUS users,
> 
> now it looks much better:
> 
> configure: WARNING: silently not building rlm_counter.
> configure: WARNING: FAILURE: rlm_counter requires:  libgdbm.
> configure: WARNING: silently not building rlm_ippool.
> configure: WARNING: FAILURE: rlm_ippool requires:  libgdbm.
> configure: WARNING: the comm_err library isn't found!
> configure: WARNING: silently not building rlm_krb5.
> configure: WARNING: FAILURE: rlm_krb5 requires:  krb5.
> configure: WARNING: silently not building rlm_ldap.
> configure: WARNING: FAILURE: rlm_ldap requires:  libldap_r.
> configure: WARNING: iodbc headers not found.  Use 
> --with-iodbc-include-dir=.
> configure: WARNING: sql submodule 'iodbc' disabled
> configure: WARNING: oracle headers not found.  Use 
> --with-oracle-home-dir=.
> configure: WARNING: sql submodule 'oracle' disabled
> configure: WARNING: unixODBC headers not found.  Use 
> --with-unixodbc-include-dir=.
> configure: WARNING: sql submodule 'unixodbc' disabled
> 
> I think that I need the ldap module für the active directory request, do I 
> also need the krb5 module?
> 
> ca mIke

If you plan to authenticate against Active Directory then, yes, you _probably_ 
need the krb5 module. However, if you are using (for example) Quests VAS - 
vintela authentication system, you can authenticate against the Unix backend 
and don't need to compile kerberos and LDAP support. It's all a question of how 
you plan to set up and use your environment. 

Regards,
JRE

PS. Also, with your current configuration there are several components that you 
will not be ablu to use (IP Pools, Oracle SQL connectors).

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeRADIUS on Solaris 10 - x86

2006-11-07 Thread Stieven . Struyf

are your

> 
> I think that I need the ldap module für the active directory request,
do I
> also need the krb5 module?
> 
are you trying to do ad authentication?
if so you don't need ldap module, i needed: winbind,
samba, krb5.conf(don't know to which package it belongs),auth_ntlm(again
don't know which package it belongs to),freeradius.- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeRADIUS on Solaris 10 - x86

2006-11-06 Thread Alan DeKok
"Michael Messner" <[EMAIL PROTECTED]> wrote:
> Making all in rlm_perl...

  If you're not going to use rlm_perl, just delete that directory.

  Alan DeKok.
--
  http://deployingradius.com   - The web site of the book
  http://deployingradius.com/blog/ - The blog
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeRADIUS on Solaris 10 - x86

2006-11-06 Thread Michael Messner
hey freeRADIUS users,

 I've installed Entire+OEM,

11:41:05 unknown ~/freeradius-1.1.3 [root]echo $PATH
11:41:09 unknown ~/freeradius-1.1.3 [root]echo $LD_LIBRARY_PATH
/lib:/usr/sfw/lib:/usr/local/lib:/usr/lib:/usr/share/lib:/usr/dt/lib

./configure --sysconfdir=/etc --mandir=/usr/share/man 
--localstatedir=/var --with-snmp --with-ldap

gmake
...
Making all in rlm_perl...
gmake[6]: Entering directory
`/home/m1k3/freeradius-1.1.3/src/modules/rlm_perl'
/home/m1k3/freeradius-1.1.3/libtool --mode=compile gcc  -g -O2
-D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG 
-I/home/m1k3/freeradius-1.1.3/src/include -D_LARGEFILE_SOURCE
-D_FILE_OFFSET_BITS=64 -D_TS_ERRNO 
-I/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE  -c rlm_perl.c
mkdir .libs
 gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE
-DNDEBUG -I/home/m1k3/freeradius-1.1.3/src/include -D_LARGEFILE_SOURCE
-D_FILE_OFFSET_BITS=64 -D_TS_ERRNO
-I/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE -c rlm_perl.c  -fPIC
-DPIC -o .libs/rlm_perl.o
rlm_perl.c: In function `perl_xlat':
rlm_perl.c:674: warning: dereferencing type-punned pointer will break
strict-aliasing rules
rlm_perl.c: In function `rlmperl_call':
rlm_perl.c:983: warning: dereferencing type-punned pointer will break
strict-aliasing rules
rlm_perl.c: In function `perl_detach':
rlm_perl.c:1250: warning: dereferencing type-punned pointer will break
strict-aliasing rules
 gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE
-DNDEBUG -I/home/m1k3/freeradius-1.1.3/src/include -D_LARGEFILE_SOURCE
-D_FILE_OFFSET_BITS=64 -D_TS_ERRNO
-I/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE -c rlm_perl.c -o
rlm_perl.o >/dev/null 2>&1
/home/m1k3/freeradius-1.1.3/libtool --mode=link gcc -release 1.1.3 \
-module -export-dynamic   -o rlm_perl.la \
-rpath /usr/local/lib rlm_perl.lo rlm_perl.c
/home/m1k3/freeradius-1.1.3/src/lib/libradius.la \
`perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lsocket -lposix4 
-lpthread

*** Warning: Linking the shared library rlm_perl.la against the
*** static library
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a is
not portable!
gcc -shared -Wl,-h -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so 
.libs/rlm_perl.o  -R/home/m1k3/freeradius-1.1.3/src/lib/.libs
-R/usr/local/lib -R/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE
/home/m1k3/freeradius-1.1.3/src/lib/.libs/libradius.so
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a
-L/usr/perl5/5.8.4/lib/i86pc-solaris-64int/CORE -lperl -ldl -lm -lc -lnsl
-lresolv -lsocket -lposix4 -lpthread -lc
Textverschiebung beibehaltenreferenziert
gegen SymbolOffset  in Datei
.rodata10x6
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
my_cxt  0x13   
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
my_cxt  0x1a   
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.rodata10x1f   
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
my_cxt  0x39   
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
my_cxt  0x95   
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.rodata10x107  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
my_cxt  0x176  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.data1  0x1dd  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.rodata10x247  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.data1  0x303  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.rodata10x36b  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.data1  0x418  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.rodata10x475  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.rodata10x4eb  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.data1  0x579  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
.rodata10x603  
/usr/perl5/5.8.4/lib/i86pc-solaris-64int/auto/DynaLoader/DynaLoader.a(DynaLoader.o)
my_cxt  0x631

RE: freeRADIUS on Solaris 10 - x86

2006-11-02 Thread Ramm-Ericson, Johannes
 

-Original Message-
> Date: Thu, 2 Nov 2006 15:24:13 +0100 (CET)
> From: "Michael Messner" <[EMAIL PROTECTED]>
> Subject: freeRADIUS on Solaris 10 - x86
> To: 
> Message-ID: <[EMAIL PROTECTED]>
> Content-Type: text/plain; charset=iso-8859-1
>
> hey freeRADIUS users,
> 
> next step ... testing freeRADIUS on a Solaris 10 box and I'm completely new 
> to solaris! :-( I've started
> with the configure again but there are so much things missing:
>
> snip... <
>
> thanks mIke

--

Hello Mike,

Seeing as you are new to Solaris I'd say you can save yourself a lot of time 
and hard work by re-installing your x86 server with a standard Linux 
distribution. Even if you've never touched Linux before most distributions will 
have all the necessary prerequisites installed and if you choose to do so you 
won't even need to compile freeradius, you can install the vendor-supplied 
package for freeradius.

Of course, YMMV, but I "grew up" with Solaris (and enjoyed it) but these days 
it's just simply a pain to install many free/open source packages on Solaris. 
Save yourself the trouble and go with Linux. Seeing as you are from Austria I 
suspect Suse will be your best option as you will probably find most local 
support around that distribution.

Viele grüsse,
Johannes

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeRADIUS on Solaris 10 - x86

2006-11-02 Thread Alan DeKok
"Michael Messner" <[EMAIL PROTECTED]> wrote:
> I've started with the configure again but there are so much things missing:
...

  Very little of that matters.  Did the configure process exit with an
error?  That's all that matters.

  The whole purpose of configure is to discover what you have on your
system.  You won't have everything on your system, so of course it
won't find all sort of things.

  Put /usr/ccs/bin in your path, and there shouldn't be a problem.

  Alan DeKok.
--
  http://deployingradius.com   - The web site of the book
  http://deployingradius.com/blog/ - The blog
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeRADIUS on Solaris 10 - x86

2006-11-02 Thread Stieven . Struyf

did you install only the solaris core system?
if so you probably need to install some additional
packages.an important directory is /usr/ccs, maybe you need to add it to
your path.
check that SUNWbtool is installed. 
another one are the kerberos packages(SUNWkrbu and/or
SUNWkrbr)
The sun solaris package list can be usefull for you:
http://docs.sun.com/app/docs/doc/817-0545/6mgbberid?a=view


[EMAIL PROTECTED]
wrote on 11/02/2006 03:24:13 PM:

> hey freeRADIUS users,
> 
>  next step ... testing freeRADIUS on a Solaris 10 box and I'm
completely
> new to solaris! :-(
> I've started with the configure again but there are so much things
missing:
> 
> aclocal
> autoconf
> autoheader
> locate
> libgdbm
> sys/security.h
> sys/prctl.h
> prot.h
> sia.h
> siad.h
> krb5.h
> gawk
> mawk
> ar
> ramlib
> strip
> argz.h
> libldap
> dl.h
> dld.h
> mach-o/dyld.h
> gdbm.h
> pam/pam_appl.h
> oci.h
> sql.h
> 
> Where can I get all these things, do I need everything?
> 
> We are trying to get freeradius working with 802.1x authentication
to
> Microsoft Active directory with LDAP-groups and huntgroups:
> 
> users-example:
> 
> DEFAULT   LDAP-Group == "CN=adminrole,CN=users,DC=isalab,DC=local",
> Huntgroup-Name == "enterasys", Realm == ISALAB.local
>    Filter-ID == "Enterasys:version=1:mgmt=su:policy=adminrole",
>    Reply-Message = "Welcome %{Stripped-User-Name:-%{User-Name:-None}}
in the
> %{Realm} - Domain, there are no restrictions for you in this network",
>    Fall-Through = No
> 
> 
> I hope someone can help me a bit to find the right way!
> 
> thanks mIke
> 
> 
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html