> > The freeradius I downloaded is: freeradius-snapshot-20030930
> > My question is: how can I remove some of the build dependencies for
> > packages that I do not intent to use?
>
> libpam0g-dev is used by rlm_pam
>
> libgbmg1 is used by rlm_counter, rlm_gdbm and rlm_ippool
>
> postgresql-dev is for rlm_sql_postgresql
>
> libldap2-dev and libsasl2-dev are for rlm_ldap
>
> libiodbc2-dev is for rlm_sql_iodbc
>
> libkrb5-dev is for rlm_krb5
>
> None of these build-dependancies are for the core daemon.
>
> The way I'd do it is remove those modules from the 'stable' file in
> src/modules or src/modules/rlm_sql/ depending on which modules they are.
> This step is basically optional, since it should skip that which it can't
> build.
>
> Then remove the entries for those things from debian/rules in the various
> 'for each' clauses. And remove the entries from the debian/control file.
> (ie. the opposite of the freeradius-iodbc patch you've already got. :-)
>
> Then remove the build-dependancies that trouble you so.
>
> You'll need that libltdl3-dev, however. No way around it except building
> statically, and I dunno what that does to the build-dependancies, or the
> rlm_sql and rlm_eap modules.
I followed your above instructions for removing unwanted modules and it
created and installed the .deb files just fine.
***
One thing to note, when installing the deb files with dpkg -i, it will try to
start the freeradius daemon. That failed because all of the modules that I
removed were still defined in radius.conf.
So one think to keep in mind when splitting out the modules: if the module is
not being installed, do not try to use it in radius.conf. You will probably
want to work some sed magic to (un)comment the modules in the auth type
sections at the bottom of the radius.conf based on which modules are
installed.
One other thing, if there is database module that is separate from the main
freeradius package, make sure to instruct the user to create the database and
modify "sql.conf" for things to work. It might be obvious to you and I, but
it will save some help questions!
I noticed a new change in sql.conf. My older version has these definitions:
1.
# simul_zap_query - query to close "stale" sessions where NAS
shows call
# - was disconnected, but no stop account packet
was received.
# - ( %s will be replaced with the appropriate
RadAcctId )
# - Leave blank or commented out to skip zapping
stale sessions
#######################################################################
2.
simul_zap_query = "DELETE FROM ${acct_table1} WHERE RadAcctId = '%s'"
Why are these not in the new version?
I also noticed that this has been removed:
#######################################################################
# Authentication Query
#######################################################################
# This query is used only to get the password for the
# user we want to authenticate. The password MUST
# be the first field in the return row data.
# The 'Password' attribute is deprecated in favor of 'User-Password'.
#######################################################################
authenticate_query = "SELECT passwd,Attribute FROM ${authcheck_table}
WHERE userid = '%{User-Name}' AND ( Attribute = 'User-Password' OR Attribute
= 'Password' OR Attribute = 'Crypt-Password' ) ORDER BY Attribute DESC"
I'm guessing this was removed because you cannot put the sql module in the
authentication section of radius.conf anymore, but I am not sure which sql
query takes its place. My guess is the "authorize_check_query". If I am wrong
please correct me.
That's all for now. I'll test it more tomorrow.
Nick
--
Nick Davis
Associate Systems Administrator
[EMAIL PROTECTED]
Internet Exposure, Inc.
http://www.iexposure.com
(612)676-1946
Web Development-Web Marketing-ISP Services
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
