Building Ubuntu FreeRadius 1.1.7 with EAP/TLS/TTLS support

admin — Thu, 19 Feb 2009 04:21:10 +0000

Ubuntu do not have freeradius1 is their repo.It’s annoying considering most of the online guide/config for freeradius TTLS is on freeradius1.Moreover,due to licensing issue,Ubuntu do not support EAP/TLS/TTLS by default.

This is the steps to get a freeradius1 with EAP/TLS/TTLS deb

1. Download from freeradius.org. during time of writing it’s 1.1.7 wget -c ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.7.tar.gz

2. extract it into a directory. tar xvf freeradius-1.1.7.tar.gz

3. change directory cd freeradius-1.1.7

4. check debian/rules nano debian/rules.Ensure this line is uncomment and “buildssl” contain –with-rlm_eap_peap –with-rlm_eap_tls –with-rlm_eap_ttls
modulepackages = krb5 ldap mysql iodbc postgresql buildssl = --with-rlm_eap_peap --with-rlm_eap_tls --with-rlm_eap_ttls --with-rlm_sql_postgresql_lib_dir=`pg_config --libdir` --with-rlm_sql_postgresql_include_dir=`pg_config --includedir`

5. check debian/control nano debian/control and ensure libssl-dev is in the build depends Build-Depends: debhelper (>= 4.2.32), dpatch (>= 2), autotools-dev, libtool (>= 1.5), libltdl3-dev, libpam0g-dev, libmysqlclient15-dev | libmysqlclient14-dev | libmysqlclient-dev, libgdbm-dev, libldap2-dev, libsasl2-dev, libiodbc2-dev, libkrb5-dev, libperl-dev, snmp, libsnmp9-dev | libsnmp5-dev | libsnmp4.2-dev, libpq-dev | postgresql-dev, libssl-dev

6. install packages that are required for compiling apt-get install build-essential fakeroot

7. install freeradius dependency apt-get build-dep freeradius

8. in freeradius-1.1.7 run dpkg-buildpackage -rfakeroot

9. cd ..;ls *.deb these are the deb file you had compiled freeradius_1.1.7-0_i386.deb freeradius-dialupadmin_1.1.7-0_all.deb freeradius-iodbc_1.1.7-0_i386.deb freeradius-krb5_1.1.7-0_i386.deb freeradius-ldap_1.1.7-0_i386.deb freeradius-mysql_1.1.7-0_i386.deb freeradius-postgresql_1.1.7-0_i386.deb

10. to install either packages dpkg -i freeradius_1.1.7-0_i386.deb or dpkg -i [package_name.deb]

just in case if need a dh for certs openssl dhparam -check -text -5 512 -out dh

FreeRadius

admin — Mon, 19 Jan 2009 02:23:37 +0000

There are a few dependency that freeradius did not mention.

If your planning to use EAP,you know u need SSL but not openssl.You’ll need libssl-dev.This piece of information took me few days looking on the net and even compiled openssl by source (which doesn’t help).

If your planning to use ippool,you’ll need libltdl3-dev & libgdbm-dev.

configure freeradius for wpa-enterprise http://tldp.org/HOWTO/html_single/8021X-HOWTO/#confradius

http://ubuntuforums.org/archive/index.php/t-478804.html

So far,that all I need to record down.Just in case I need to reformat the whole OS for the 5th 6th 7th time.One more bad news for ya,freeradius can’t uninstall and I can’t replace it too.So…last resort,reinstall OS.

zyrax » freeradius

Building Ubuntu FreeRadius 1.1.7 with EAP/TLS/TTLS support

FreeRadius