在 SUSE 11 sp2 上安装freeradius
孤剑
http://blog.csdn.net/alonesword/
一、 预先条件
在安装版 dvd1 中可找到如下安装文件,并安装
unixODBC-2.2.12-198.17.x86_64.rpm
postgresql-libs-8.3.14-0.2.1.x86_64.rpm
freeradius-server-2.1.1-7.10.1.x86_64.rpm
二、 安装过程
rpm -ivh unixODBC-2.2.12-198.17.x86_64.rpm rpm -ivh postgresql-libs-8.3.14-0.2.1.x86_64.rpm rpm -ivh freeradius-server-2.1.1-7.10.1.x86_64.rpm |
Preparing... ########################################### [100%] 1:freeradius-server ########################################### [100%] openssl dhparam -out dh 1024 Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time .......+....................................+...............................+.....................+..+.........+..............................+...................................................................................................+.......+...............+.......+............................................+.....................................+..............................+......+................+...........................+............................+............................+............++*++*++* openssl req -new -out server.csr -keyout server.key -config ./server.cnf Generating a 2048 bit RSA private key .....+++ ..........+++ writing new private key to 'server.key' ----- openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Generating a 2048 bit RSA private key .............+++ .....+++ writing new private key to 'ca.key' ----- openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf Using configuration from ./server.cnf Check that the request matches the signature Signature ok Certificate Details: Serial Number: 1 (0x1) Validity Not Before: Feb 19 03:16:57 2014 GMT Not After : Feb 19 03:16:57 2015 GMT Subject: countryName = FR stateOrProvinceName = Radius organizationName = Example Inc. commonName = Example Server Certificate emailAddress = admin@example.com X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication Certificate is to be certified until Feb 19 03:16:57 2015 GMT (365 days)
Write out database with 1 new entries Data Base Updated openssl pkcs12 -export -in server.crt -inkey server.key -out server.p12 -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl pkcs12 -in server.p12 -out server.pem -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` MAC verified OK openssl x509 -inform PEM -outform DER -in ca.pem -out ca.der |
三、 常见问题
libodbc.so.1()(64bit) is needed by freeradius-server-2.1.1-7.10.1.x86_64 |
下载,并安装 unixODBC-2.2.12-198.17.x86_64.rpm包
libpq.so.5()(64bit) is needed by freeradius-server-2.1.1-7.10.1.x86_64 |
下载,并安装 postgresql-libs-8.3.14-0.2.1.x86_64.rpm包
四、 解决思路
使用关键字“suse 11sp2 rpm libodbc.so”在google上搜索,搜索到的 suse 官网上可以看出是那个包里面的文件。