[RADIATOR] Upgrade Challenges to 4.9

[Heikki Vatiainen]

On 05/09/2012 09:11 PM, Michael Hulko wrote:

> It would appear that I have missed the Net-LDAP module that one of our
> hooks calls.  Not sure why this is not part of the standard
> packages...Is there a specific package I should use.

I think ppm install perl-ldap should give you version 0.44 which is the
current version too.

I took a quick look at the configuration too. I suggest the following:

# DupInterval 0
EAPTLS_PEAPVersion 0

Unless there's a good reason, you should not accept duplicates. Also,
PEAP version 0 works better with e.g., with Macs and IOS devices. It's
also default in version 4.9

Heikki


> MH
> 
> 
> On 2012-05-09, at 1:36 PM, Michael Hulko wrote:
> 
>> I am attempting to upgrade our radius from 4.5.1 to the latest version
>> 4.9.  In addition of upgrading Radiator itself, I am also upgrading
>> the version of ActivePerl from 5.6.x to 5.12.x.
>>
>> Stepping through the installation instructions and pointing the
>> repository to open.au.com <http://open.au.com> for the Win32-LSA.pm
>> module, it would appear that everything was in order.   However, two
>> problems arose...
>>
>> First, when attempting to run the radiusd daemon from the command line
>> prior to running the test script, I receive an error:  " 'all' is not
>> defined in %NET::LDAP::Constant::EXPORT_TAGS at (eval 62) line 191.
>>  When I run the test.pl <http://test.pl> script, everything checks
>> out.  Not quite sure about what I am missing?
>>
>> Second...after i create a service and copy the original files and
>> certs into the directory, I get the following message when I start the
>> service in the logfile:
>>
>> "ERR: Compliation error in PostAuthHook: Can't continue after import
>> errors at (eval 68) line 191
>> BEGIN failed--compliation aborted at (eval 68) line 191"
>>
>> I have tested authentication to the server, and it appears to work,
>> however, I am concerned that something will break later.  This is a
>> Windows Server 2003 box.  Any suggestions/comments would be greatly
>> appreciated. Attached is the original radius config I inheirted.
>> (please do not critique the config)
>> <radius.cfg>
>>
>> All passwords/secrets have been removed
>>
>> Thanks
>> MH
>> _______________________________________________
>> radiator mailing list
>> radiator at open.com.au <mailto:radiator at open.com.au>
>> http://www.open.com.au/mailman/listinfo/radiator
> 
> 
> Michael Hulko
> Network Analyst
> 
> Western University Canada
> Network Operations Centre
> Information Technology Services
> 1393 Western Road, SSB 3300CC
> London, Ontario  N6G 1G9
> 
> tel: 519-661-2111 x81390
> e-mail: mihulko at uwo.ca <mailto:mihulko at uwo.ca> <mailto:mihulko at uwo.ca>
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator


-- 
Heikki Vatiainen <hvn at open.com.au>

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
NetWare etc.