IPfire: 2.25 core 152 Linux ipfire 4.14.198-ipfire #1 SMP Mon Oct 5 21:52:30 GMT 2020 x86_64 Intel(R) Atom(TM) CPU C3758 @ 2.20GHz GenuineIntel GNU/Linux Addon: freeradius 3.0.21-12 - Steps: As root, start freeradius: [root@ipfire]# radiusd -X - Expected result: radiusd starts in debugging mode while writing debugging messages to the console and starts listening for incoming packets. - Actual result: radiusd starts, writes debugging messages to the consoles, then writes the line quoted below and exits: /etc/raddb/mods-enabled/mschap[11]: Failed to link to module 'rlm_mschap': libwbclient.so.0: cannot open shared object file: No such file or directory - Further details: [root@ipfire freeradius]# pwd /usr/lib/freeradius [root@ipfire freeradius]# ldd rlm_mschap.so linux-vdso.so.1 (0x00007ffd7f361000) libwbclient.so.0 => not found libc.so.6 => /lib/libc.so.6 (0x000073f8bde35000) /lib64/ld-linux-x86-64.so.2 (0x000073f8be017000)
This library is in the samba package. Could you try running "pakfire install samba" and let me know if freeradius starts?
Installing the samba package resolved the issue. Many thanks! Although freeradius really works now, I'd rather not install the whole samba package since I have no further use of samba on the firewall. I'd like to avoid unnecessary or unused software, especially on the firewall. Maybe the freeradius package could be shipped with only the necessary libraries from the samba package?
(In reply to Data Morgana from comment #2) > Although freeradius really works now, I'd rather not install the whole samba > package since I have no further use of samba on the firewall. I'd like to > avoid unnecessary or unused software, especially on the firewall. Maybe the > freeradius package could be shipped with only the necessary libraries from > the samba package? We tried this before, but unfortunately freeradius relies on various libraries from that package. Some require samba to run to authenticate against a domain controller for example. You can simply deactivate samba if you do not use it and it won't increase the attack vector of the firewall much.
> https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=2cb220fd3cbff4382656b30d02facdd9df81775e
Thanks, I can live with that!
https://blog.ipfire.org/post/ipfire-2-25-core-update-153-available-for-testing
https://blog.ipfire.org/post/ipfire-2-25-core-update-153-released