在 SUSE 11 sp2 上安装 freeradius

国内私募机构九鼎控股打造APP，来就送 20元现金领取地址：http://jdb.jiudingcapital.com/phone.html
内部邀请码：C8E245J （不写邀请码，没有现金送）
国内私募机构九鼎控股打造，九鼎投资是在全国股份转让系统挂牌的公众公司，股票代码为430719，为“中国PE第一股”，市值超1000亿元。 

------------------------------------------------------------------------------------------------------------------------------------------------------------------

在 SUSE 11 sp2 上安装 freeradius

孤剑

http://blog.csdn.net/alonesword/

一、            预先条件

在安装版 dvd1 中可找到如下安装文件，并安装

unixODBC-2.2.12-198.17.x86_64.rpm

postgresql-libs-8.3.14-0.2.1.x86_64.rpm

freeradius-server-2.1.1-7.10.1.x86_64.rpm

二、            安装过程

rpm -ivh unixODBC-2.2.12-198.17.x86_64.rpm

rpm -ivh postgresql-libs-8.3.14-0.2.1.x86_64.rpm

rpm -ivh freeradius-server-2.1.1-7.10.1.x86_64.rpm

Preparing...                ########################################### [100%]

1:freeradius-server      ########################################### [100%]

openssl dhparam -out dh 1024

Generating DH parameters, 1024 bit long safe prime, generator 2

This is going to take a long time

.......+....................................+...............................+.....................+..+.........+..............................+...................................................................................................+.......+...............+.......+............................................+.....................................+..............................+......+................+...........................+............................+............................+............++*++*++*

openssl req -new  -out server.csr -keyout server.key -config ./server.cnf

Generating a 2048 bit RSA private key

.....+++

..........+++

writing new private key to 'server.key'

-----

openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf

Generating a 2048 bit RSA private key

.............+++

.....+++

writing new private key to 'ca.key'

-----

openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr  -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf

Using configuration from ./server.cnf

Check that the request matches the signature

Signature ok

Certificate Details:

Serial Number: 1 (0x1)

Validity

Not Before: Feb 19 03:16:57 2014 GMT

Not After : Feb 19 03:16:57 2015 GMT

Subject:

countryName               = FR

stateOrProvinceName       = Radius

organizationName          = Example Inc.

commonName                = Example Server Certificate

emailAddress              = admin@example.com

X509v3 extensions:

X509v3 Extended Key Usage:

TLS Web Server Authentication

Certificate is to be certified until Feb 19 03:16:57 2015 GMT (365 days)

Write out database with 1 new entries

Data Base Updated

openssl pkcs12 -export -in server.crt -inkey server.key -out server.p12  -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'`

openssl pkcs12 -in server.p12 -out server.pem -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'`

MAC verified OK

openssl x509 -inform PEM -outform DER -in ca.pem -out ca.der

三、            常见问题

libodbc.so.1()(64bit) is needed by freeradius-server-2.1.1-7.10.1.x86_64

下载，并安装 unixODBC-2.2.12-198.17.x86_64.rpm 包

libpq.so.5()(64bit) is needed by freeradius-server-2.1.1-7.10.1.x86_64

下载，并安装 postgresql-libs-8.3.14-0.2.1.x86_64.rpm 包

四、            解决思路

使用关键字“suse 11 sp2 rpm libodbc.so”在google上搜索，搜索到的 suse 官网上可以看出是那个包里面的文件。