Re: FreeRadius and LDAP

2006-12-03 Thread Alan DeKok
Sundaram Divya-QDIVYA1 wrote: > What I need to understand is how to integrate FreeRADIUS with > an LDAP Server without exposing the (crypted) password hashes. > Any pointers on what I need to do for that? Bind as the LDAP user. PAP will work, nothing else will. Alan DeKok. -- http://deploy

Re: Questions about proxy radius on multihomed host

2006-12-03 Thread Alan DeKok
Kostas Zorbadelos wrote: > on a multihomed Solaris host when radius packets are proxied what is > their source IP? Is it IP1 or it could also be IP2? Uh... that's up to the OS. There are patches pending against CVS head that should fix this. > I took a look at the sources where I see that in p

Re: Redundant Modules

2006-12-03 Thread Alan DeKok
Wilmar Campos wrote: > The problem is when the MySQL sever came up, the module does not try > the MySQL module, it stays until I restart the service. It's a bug. I have no idea why it's happening. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployin

Re: Parse error for entry DEFAULT entry in users file when Auth-Type := SQL

2006-12-03 Thread Alan DeKok
Gunther wrote: > I was trying to upgrade from version 1.1.0 to 1.1.3 but when starting > FreeRadius I received the > following error: > "Error: /usr/local/etc/raddb/users[216]: Parse error (check) for entry > DEFAULT: Unknown value SQL for attribute Auth-Type" That's because the SQL module doesn

Re: TTLS : where to indicate User/Password ?

2006-12-03 Thread Alan DeKok
Bruno Costacurta wrote: > Hello, > I'm trying to configure FreeRadius using TTLS but got confused about the > User/Password definiton and/or location as it seems that (please see log > hereafter) user is found but not the password. > Currently I indicate it in table radcheck in MySQL. Are you

Re: unable to compile with openssl libraries

2006-12-03 Thread Alan DeKok
Peter Param wrote: > dpkg-checkbuilddeps: Unmet build dependencies: debhelper (>= 4.2.32) > dpatch (>= 2) autotools-dev libtool (>= 1.5) libltdl3-dev libpam0g-dev > libmysqlclient15-dev | libmysqlclient14-dev | libmysqlclient-dev > libgdbm-dev libldap2-dev libsasl2-dev libiodbc2-dev libkrb5-dev sn

Re: unable to compile with openssl libraries

2006-12-03 Thread Peter Param
no good. when I configure with: ./configure --with-openssl-includes=/usr/local/ssl --with-openssl-libraries=/usr/local/ssl cheers Peter >>> Stephen Gran <[EMAIL PROTECTED]> 12/04/06 1:42 PM >>> On Mon, Dec 04, 2006 at 01:22:56PM +1100, Peter Param said: > what configure flags should I pass

Parse error for entry DEFAULT entry in users file when Auth-Type := SQL

2006-12-03 Thread Gunther
I was trying to upgrade from version 1.1.0 to 1.1.3 but when starting FreeRadius I received the following error: "Error: /usr/local/etc/raddb/users[216]: Parse error (check) for entry DEFAULT: Unknown value SQL for attribute Auth-Type" I use FR with MySQL and the ./raddb/users file contains the de

Re: unable to compile with openssl libraries

2006-12-03 Thread Peter Param
The following hasn't worked for me either: ./configure --with-openssl-includes=/usr/local/ssl/include/ --with-openssl-libraries=/usr/local/ssl/lib/ cheers Peter >>> Stephen Gran <[EMAIL PROTECTED]> 12/04/06 1:42 PM >>> On Mon, Dec 04, 2006 at 01:22:56PM +1100, Peter Param said: > what configure

Re: unable to compile with openssl libraries

2006-12-03 Thread Peter Param
I've tried that but I get the following errors: debian:~/freeradius-1.1.3# dpkg-buildpackage -b -uc dpkg-buildpackage: source package is freeradius dpkg-buildpackage: source version is 1.1.3-0 dpkg-buildpackage: source changed by Nicolas Baradakis <[EMAIL PROTECTED]> dpkg-buildpackage: host archit

Re: unable to compile with openssl libraries

2006-12-03 Thread Stephen Gran
On Mon, Dec 04, 2006 at 01:22:56PM +1100, Peter Param said: > what configure flags should I pass to allow for rlm_eap ...i thought > the defaults should work? You need to pass at least --with-openssl-libraries, I see now. That is probably a bug in the Debian packaging as well. I'll take a look

Re: unable to compile with openssl libraries

2006-12-03 Thread Alan DeKok
Peter Param wrote: > Debian licensing prohibits the installation of openssl as part of its > packaging and hence why i downloaded the individual tarballs to work > around this issue. See the Wiki. There are instructions for building the server on Debian. You do NOT have to play with configure,

Re: unable to compile with openssl libraries

2006-12-03 Thread Peter Param
what configure flags should I pass to allow for rlm_eap ...i thought the defaults should work? >>> Stephen Gran <[EMAIL PROTECTED]> 12/04/06 1:17 PM >>> On Mon, Dec 04, 2006 at 12:13:59PM +1100, Peter Param said: > is this from the orginal 1.1.3 freeradius tarball or do you mean I > should apt-ge

Re: unable to compile with openssl libraries

2006-12-03 Thread Stephen Gran
On Mon, Dec 04, 2006 at 12:13:59PM +1100, Peter Param said: > is this from the orginal 1.1.3 freeradius tarball or do you mean I > should apt-get freeradius as well? That's what I was working from. They are slightly skewed. On Mon, Dec 04, 2006 at 12:16:59PM +1100, Peter Param said: > oops my

Re: unable to compile with openssl libraries

2006-12-03 Thread Peter Param
oops my mail client truncated the text! Attached is the output of configure. cheers Pete >>> Stephen Gran <[EMAIL PROTECTED]> 12/04/06 12:04 PM >>> On Mon, Dec 04, 2006 at 11:44:56AM +1100, Peter Param said: > Thanks for clarifying the GPL vs Openssl license issue. > > I did an "apt-get instal

Re: unable to compile with openssl libraries

2006-12-03 Thread Peter Param
is this from the orginal 1.1.3 freeradius tarball or do you mean I should apt-get freeradius as well? ./configure [no parameters] output as follows: checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether w

Re: unable to compile with openssl libraries

2006-12-03 Thread Stephen Gran
On Mon, Dec 04, 2006 at 11:44:56AM +1100, Peter Param said: > Thanks for clarifying the GPL vs Openssl license issue. > > I did an "apt-get install openssl" but still no joy. Take a look at debian/rules in the source directory of freeradius. There are a couple of variables (buildssl and modulel

Re: unable to compile with openssl libraries

2006-12-03 Thread Peter Param
Thanks for clarifying the GPL vs Openssl license issue. I did an "apt-get install openssl" but still no joy. >>> Stephen Gran <[EMAIL PROTECTED]> 12/04/06 11:30 AM >>> On Mon, Dec 04, 2006 at 11:19:24AM +1100, Peter Param said: > Debian licensing prohibits the installation of openssl as part o

Re: unable to compile with openssl libraries

2006-12-03 Thread Stephen Gran
On Mon, Dec 04, 2006 at 11:19:24AM +1100, Peter Param said: > Debian licensing prohibits the installation of openssl as part of its > packaging and hence why i downloaded the individual tarballs to work > around this issue. No, you've misunderstood the problem (not surprising, many people have). T

Re: unable to compile with openssl libraries

2006-12-03 Thread Peter Param
Debian licensing prohibits the installation of openssl as part of its packaging and hence why i downloaded the individual tarballs to work around this issue. >>> [EMAIL PROTECTED] 12/04/06 11:12 AM >>> On Mon, Dec 04, 2006 at 10:50:42AM +1100, Peter Param said: > Hi all, > > I'm using Linux deb

(CVS) Error: Assertion failed in listen.c, line 621

2006-12-03 Thread Guilherme Franco
Hello, I'm having problems again, when running radiusd (radiusd -X doesn't crash): Before, in freeradius-snapshot-20061002 it was Error: Assertion failed in listen.c, line 620, which was: rad_assert(request->proxy_listener == listener); Now, in freeradius-snapshot-20061203 it g

Re: unable to compile with openssl libraries

2006-12-03 Thread Stephen Gran
On Mon, Dec 04, 2006 at 10:50:42AM +1100, Peter Param said: > Hi all, > > I'm using Linux debian 2.6.8-2-386 and I am unable to compile with > openssl libraries even tho openssl has been installed (separately). > > configure: WARNING: silently not building rlm_eap_peap. > configure: WARNING: FA

unable to compile with openssl libraries

2006-12-03 Thread Peter Param
Hi all, I'm using Linux debian 2.6.8-2-386 and I am unable to compile with openssl libraries even tho openssl has been installed (separately). configure: WARNING: silently not building rlm_eap_peap. configure: WARNING: FAILURE: rlm_eap_peap requires: OpenSSL. I downloaded the source for freera

Error with rlm_perl

2006-12-03 Thread Robert Masse
Hi, I have the following error when trying to use rlm_perl : Module: Loaded perl /usr/sbin/freeradius: symbol lookup error: /usr/local/lib/rlm_perl-1.1.2.so: undefined symbol: perl_alloc I use freeradius-1.1.2 Thanks for any help. Robert Masse - List info/subscribe/unsubscribe? See http:/

TTLS : where to indicate User/Password ?

2006-12-03 Thread Bruno Costacurta
Hello, I'm trying to configure FreeRadius using TTLS but got confused about the User/Password definiton and/or location as it seems that (please see log hereafter) user is found but not the password. Currently I indicate it in table radcheck in MySQL. radius.log returns me: ... Debug: modcall[