libradius, EAP, Message-Authenticator - patches

From: Michael Bretterklieber (mbretter_at_a-quadrat.at)
Date: 03/18/04

  • Next message: Ruslan Ermilov: "Re: [current tinderbox] failure on ia64/ia64" 
    Date: Thu, 18 Mar 2004 09:51:01 +0100 (Westeuropäische Normalzeit)
To: current@freebsd.org

    Hi,

    I had to modify libradius to be able to proxy EAP requests between Mpd and
    the RADIUS server.
    If the EAP-Message attribute is present in a request, then also the
    Message-Authenticator must be present, othwerwise the RADIUS server drops
    the request. (The Message-Authenticator is an HMAC-MD5 Hash of the whole
    request packet).
    I'm using openssl for calculating the HMAC, and got rid of -lmd, but it
    looks like, that this causes problems when doing a buildworld, because ssl
    is build after libradius (output from 4-Stable):

    > ===> lib/libradius
    > rm -f .depend
    > mkdep -f .depend -a /compile/src/lib/libradius/radlib.c
    > echo libradius.so.2: /usr/obj/compile/src/i386/usr/lib/libmd.a >> .depend
    > cc -O -pipe -Wall -c /compile/src/lib/libradius/radlib.c -o radlib.o
    > building static radius library
    > ranlib libradius.a
    > cc -pg -O -pipe -Wall -c /compile/src/lib/libradius/radlib.c -o
    > radlib.po
    > building profiled radius library
    > ranlib libradius_p.a
    > cc -fpic -DPIC -O -pipe -Wall -c /compile/src/lib/libradius/radlib.c -o
    > radlib.So
    > building shared library libradius.so.2
    > /usr/obj/compile/src/i386/usr/libexec/elf/ld: cannot find -lssl
    > *** Error code 1

    It looks like we have to change the order of the _prebuild_libs in
    src/Makefile.inc, but I'm not familiar with the build system, and I'm
    not aware of the side-effects of this change.

    The patches can be found here:
    http://www.bretterklieber.com/freebsd/libradius.diff (4-Stable)
    http://www.bretterklieber.com/freebsd/libradius5.diff (5-current)

    It would be great, if somone could give me some advices how to solve the
    problems above,

    thanx,
    bye, 

    --
------------------------------- ----------------------------------
Michael Bretterklieber          - http://www.bretterklieber.com
A-Quadrat Automation GmbH       - http://www.a-quadrat.at
Tel: ++43-(0)3172-41679         - GSM: ++43-(0)699 12861847
------------------------------- ----------------------------------
"...the number of UNIX installations has grown to 10, with more
expected..." - Dennis Ritchie and Ken Thompson, June 1972
_______________________________________________
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"
  • Next message: Ruslan Ermilov: "Re: [current tinderbox] failure on ia64/ia64"

    Relevant Pages

    • Re: Wireless Radius Clients
      ... It uses the computer cert ... router and not a AP however it does have the Radius selection under ... Access request for user stevef@xxxxxxxxxxxxx was discarded. ... Windows with L2TP/IPSec will support ...
      (microsoft.public.windows.server.networking)
    • Re: Wireless Radius Clients
      ... It uses the computer cert ... router and not a AP however it does have the Radius selection under ... Access request for user stevef@xxxxxxxxxxxxx was discarded. ... = The request was discarded by a third-party extension DLL file. ...
      (microsoft.public.windows.server.networking)
    • Re: Wireless Radius Clients
      ... I think the problem has to be somewhere with setting up the linksys as the ... radius client. ... It uses the computer cert ... Access request for user stevef@xxxxxxxxxxxxx was discarded. ...
      (microsoft.public.windows.server.networking)
    • Re: Wireless Radius Clients
      ... I think the problem has to be somewhere with setting up the linksys as the ... radius client. ... It uses the computer cert ... Access request for user stevef@xxxxxxxxxxxxx was discarded. ...
      (microsoft.public.windows.server.networking)
    Loading