Installing FreeRADIUS from source on macOS

[Sebastian Hagedorn]

--On 11. Oktober 2018 um 11:22:28 +0300 Palvelin Postmaster via

has anyone successfully installed FreeRADIUS 3.x and it’s dependencies
from source on macOS Mojave (or previous versions)? More specifically,
I’m primarily interested in using FR for authenticating against Open
Directory.
I’d prefer not to use Homebrew to install because I already use
Macports (unfortunately there isn’t a 3.x build available yet).
The wiki instructions: https://wiki.freeradius.org/building/macOS are
very straight forward but don't include some of the configure flags
('--with-talloc-lib-dir --with-talloc-include-dir=
--with-openssl-lib-dir= --with-openssl-include-dir’) included in the
https://github.com/Homebrew/homebrew-core/blob/master/Formula/freeradius-
server.rb
Also, Apple's Makefile of FreeRADIUS 2.2 included in the Server App has a
few other configure flags ('--disable-static --enable-shared
--enable-ltdl-install=yes --without-rlm_perl --without-rlm_sql_mysql')
as well as some CC and LD flags which I’m thinking could still be
https://opensource.apple.com/source/freeradius/freeradius-42/Makefile.aut
o.html).
It would appear OD support is an ’experimental’ feature in FR 3.x so
I believe '--with-experimental-modules’ is needed at the very least.

Apple has recently published this guide that also covers FR 3 with OD:

<https://developer.apple.com/support/macos-server/macOS-Server-Service-Migration-Guide.pdf>

I haven't tried it myself.

[Alan DeKok]

Post by Sebastian Hagedorn
<https://developer.apple.com/support/macos-server/macOS-Server-Service-Migration-Guide.pdf>

It looks to be reasonable. I've added a link to it from the "opendirectory" module configuration.

Alan DeKok.


-
List info/subscribe/unsubscri

[Alan DeKok]

These quotes are both confusing and conflicting. On one hand it bluntly states "new users" won’t be able to use FreeRADIUS. New how? Added after upgrading to macOS Mojave? On the other hand it also instructs adding new users via OD.

I suspect that adding users to OpenDirectory will be fine.

Additionally, it discusses storing passwords ”in a less secure manner” which, I’m guessing, refers to using Crypt or Shadow password types instead of OD type. This would be, of course, less desirable, but based on my initial research it looks like it’s also impossible because macOS Mojave’s OD service doesn’t allow selection of password type anymore.

That means PEAP won't work. But TTLS + PAP will work.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.

[Alan Buxey]

that should be okay with 3.0.17 rather than the documented 3.0.0 - would be
interesting to know if there *are* any issues that have affected OSX since
3.0.0
(and with OpenSSL 1.1.1 rather than 1.1.0e )


alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.

[Alan DeKok]

./configure --prefix=/usr/local/talloc --without-gettext && make && sudo make install
./configure --prefix=/usr/local/freeradius --localstatedir=/var --with-talloc-lib-dir=/usr/local/talloc/lib/ --with-talloc-include-dir=/usr/local/talloc/include/ --with-openssl-lib-dir=/opt/local/lib --with-openssl-include-dir=/opt/local/include/ --enable-developer=yes && make && sudo make install
dyld: Library not loaded: /Users/admin/src/talloc-2.1.14/bin/default/libtalloc.inst.dylib
Referenced from: /usr/local/freeradius/sbin/radiusd
Looks like freeradius is linking against talloc library in the source code directory instead of /usr/local/talloc. I wonder why?

That's weird. See the Make.inc file to see which talloc it's linking against.

I build on OSX every day. I just install talloc via homebrew, and it just works.

Alan DeKok.


-
List info/subscribe/unsubscribe? See http://www.f