Re: Debian testing = no PEAP/TLS/TTLS support?

2005-01-15 Thread Paul Hampson
On Sat, Jan 15, 2005 at 11:30:03AM +0100, pascal wrote:
> Hi,

> rlm_eap: Loaded and initialized type md5
> rlm_eap: Loaded and initialized type leap
>  gtc: challenge = "Password: "
>  gtc: auth_type = "PAP"
> rlm_eap: Loaded and initialized type gtc
> rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared 
> object file: No such file or directory
> 
> It seems I have teh same problem.
> On a Debian "Sarge" system.
> I know there is a bugreport for this problem, but I hoped it would be fixed 
> with a newer version.

It was recently discussed on the Debian-Legal mailling list, and I have
a list of packages to check for OpenSSL-linkability. If they all pass,
and the licenses of the various chunks of FreeRADIUS can be changed
(which is a harder problem) we can then add an exception to the GPL to
allow linking aginst OpenSSL.

Alternatively, someone who has their head wrapped around SSL can convert
the various OpenSSL-users in FreeRADIUS to optionally use gnuTLS
instead, controlled by the configure.in system. I plan on doing this,
but I'm a bit of a TLS Barbie. ^_^

However, that change will only affect FreeRADIUS 1.1.0 or later, since
I don't want to be trying to mangle _two_ sets of autoconf scripts. In
the meantime, locally compiled FreeRADIUS packages with a build-depends
on libssl-dev instead of a build-conflicts will contain the appropriate
libraries without any other code changes. If you version it as .0.0.1, then it'll be safe from apt replacing it from
the archive, and if you put it on hold, then apt-get upgrade won't touch
it.

I try not to upload too frequently, and so you can take your time to
consider if you need to rebuild any new Debian revisions or just leave
the current version held.

Alternatively, you can build from the release_1_0 branch in CVS, which
will give you what will hopefully soon be 1.0.2, and I try and keep the
debian/ directory upstream the same as the one in Debian's archive, so
the packages should mesh fine.

-- 
Paul "TBBle" Hampson, on an alternate email client.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Debian testing = no PEAP/TLS/TTLS support?

2005-01-15 Thread Paul Hampson
On Sat, Jan 15, 2005 at 06:47:38AM +0100, Sven Juergensen wrote:
> the start/stop script of the debian freeradius package is faulty
> as well. let me know if you need a modified script and i'll mail it
> to you.

Alternatively, file a bug report and then everyone can benefit from
a fix to whatever's wrong with the init script.

-- 
Paul "TBBle" Hampson, on an alternate email client.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Debian testing = no PEAP/TLS/TTLS support? (Lincoln Smith)

2005-01-15 Thread Pascal
Hi Lincoln,
How did you solve this problem?
rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared
object file: No such file or directory
radiusd.conf[9]: eap: Module instantiation failed.
It seems I have the same problem.
There was a buglisting for this problem, but I don't know how to solve it, 
so I was hoping you could help me out.

Thx,
Pascal. 

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Debian testing = no PEAP/TLS/TTLS support?

2005-01-14 Thread Sven Juergensen
the start/stop script of the debian freeradius package is faulty
as well. let me know if you need a modified script and i'll mail it
to you.
cheers,
sven
Lincoln Smith wrote:
Err as usual found the solution shortly after posting...
Lincoln Smith wrote:
Hi there
Module: Loaded eap
rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open 
shared object file: No such file or directory
radiusd.conf[9]: eap: Module instantiation failed.

Is it the case that PEAP/TLS/TTLS support has been removed from the 
freeradius package in debian testing? The libraries appear to be gone 
and all I've managed to turn up on the web is a small entry in the the 
changelog alluding to (licence?) conflicts with openssl.

Is this situation likely to reverse anytime soon?
Cheers


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Debian testing = no PEAP/TLS/TTLS support?

2005-01-14 Thread Lincoln Smith
Err as usual found the solution shortly after posting...
Lincoln Smith wrote:
Hi there
Module: Loaded eap
rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared 
object file: No such file or directory
radiusd.conf[9]: eap: Module instantiation failed.

Is it the case that PEAP/TLS/TTLS support has been removed from the 
freeradius package in debian testing? The libraries appear to be gone 
and all I've managed to turn up on the web is a small entry in the the 
changelog alluding to (licence?) conflicts with openssl.

Is this situation likely to reverse anytime soon?
Cheers
--
Lincoln Smith
[EMAIL PROTECTED]
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Debian testing = no PEAP/TLS/TTLS support?

2005-01-14 Thread Lincoln Smith
Hi there
Module: Loaded eap
rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared 
object file: No such file or directory
radiusd.conf[9]: eap: Module instantiation failed.

Is it the case that PEAP/TLS/TTLS support has been removed from the 
freeradius package in debian testing? The libraries appear to be gone 
and all I've managed to turn up on the web is a small entry in the the 
changelog alluding to (licence?) conflicts with openssl.

Is this situation likely to reverse anytime soon?
Cheers
--
Lincoln Smith
[EMAIL PROTECTED]
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html