Hi all,
I have a problem with rlm_eap_tls. The radius server doesn't seem to accept the access request from the access point, though the log file in the access point indicates that it has indeed sent an access request.
First of all,
$ ldd radiusd
libcrypt.so.1 => /lib/libcrypt.so.1 (0x4001b000)
libradius-0.9.3.so => /usr/local/lib/libradius-0.9.3.so (0x40048000)
libltdl.so.3 => /usr/local/lib/libltdl.so.3 (0x4017f000)
libdl.so.2 => /lib/libdl.so.2 (0x40186000)
libnsl.so.1 => /lib/libnsl.so.1 (0x4018a000)
libresolv.so.2 => /lib/libresolv.so.2 (0x401a1000)
libpthread.so.0 => /lib/i686/libpthread.so.0 (0x401b3000)
libc.so.6 => /lib/i686/libc.so.6 (0x401c8000)
libcryptoki.so => /opt/Eracom/lib/libcryptoki.so (0x40303000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
libm.so.6 => /lib/i686/libm.so.6 (0x4031f000)
libcrypt.so.1 => /lib/libcrypt.so.1 (0x4001b000)
libradius-0.9.3.so => /usr/local/lib/libradius-0.9.3.so (0x40048000)
libltdl.so.3 => /usr/local/lib/libltdl.so.3 (0x4017f000)
libdl.so.2 => /lib/libdl.so.2 (0x40186000)
libnsl.so.1 => /lib/libnsl.so.1 (0x4018a000)
libresolv.so.2 => /lib/libresolv.so.2 (0x401a1000)
libpthread.so.0 => /lib/i686/libpthread.so.0 (0x401b3000)
libc.so.6 => /lib/i686/libc.so.6 (0x401c8000)
libcryptoki.so => /opt/Eracom/lib/libcryptoki.so (0x40303000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
libm.so.6 => /lib/i686/libm.so.6 (0x4031f000)
Is the above correct ?
Secondly, int the log file:
Info: Starting - reading configuration files ...
Error: rlm_eap_tls: conf N ctx stored
Error: rlm_eap_tls: conf N ctx stored
Is the above normal ? I read on the previous post that this is normal with freeradius-0.9.3 (I know that freeradius-1.0.1 is out and more stable, but I'm sure that EAP/TLS can work with freeradius-0.9.3)
In http://www.missl.cs.umd.edu/wireless/eaptls/?tag=missl-802-1, it is said that EAP/TLS can only work with SNAP version of openssl-0.9.7. Is this right ?
Thanks for any reply,
lara
Alan DeKok <[EMAIL PROTECTED]> wrote:
Lara Adianto <[EMAIL PROTECTED]>wrote:
> Anyway, I've tried using freeradius-1.0.1 like what you have suggested, this time it complained about openssl/des.h:
>
> Making static dynamic in rlm_x99_token...
That module doesn't currently have a maintainter. If you're not
using it, delete the directory containing the module, and everything
else will still work.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------------------------------------------------------------
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
- Guy de Maupassant -
------------------------------------------------------------------------------------
Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses.
