在 SUSE 11 sp2 上安装 freeradius_suse 装freeradius-优快云博客

本文链接：https://blog.youkuaiyun.com/AloneSword/article/details/19496669

本文介绍了在 SUSE 11 SP2 操作系统上安装 freeradius 的详细步骤，包括预先条件、安装过程、常见问题以及解决思路。预先条件涉及了 unixODBC 和 postgresql-libs 的安装，安装过程中详细说明了所需 RPM 包的获取和安装。在遇到问题时，可以通过搜索关键字找到解决方案。

在 SUSE 11 sp2 上安装freeradius

孤剑

http://blog.youkuaiyun.com/alonesword/

一、预先条件

在安装版 dvd1 中可找到如下安装文件，并安装

unixODBC-2.2.12-198.17.x86_64.rpm

postgresql-libs-8.3.14-0.2.1.x86_64.rpm

freeradius-server-2.1.1-7.10.1.x86_64.rpm

二、安装过程

rpm -ivh unixODBC-2.2.12-198.17.x86_64.rpm

rpm -ivh postgresql-libs-8.3.14-0.2.1.x86_64.rpm

rpm -ivh freeradius-server-2.1.1-7.10.1.x86_64.rpm

Preparing... ########################################### [100%]

1:freeradius-server ########################################### [100%]

openssl dhparam -out dh 1024

Generating DH parameters, 1024 bit long safe prime, generator 2

This is going to take a long time

.......+....................................+...............................+.....................+..+.........+..............................+...................................................................................................+.......+...............+.......+............................................+.....................................+..............................+......+................+...........................+............................+............................+............++*++*++*

openssl req -new -out server.csr -keyout server.key -config ./server.cnf

Generating a 2048 bit RSA private key

.....+++

..........+++

writing new private key to 'server.key'

-----

openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf

Generating a 2048 bit RSA private key

.............+++

.....+++

writing new private key to 'ca.key'

-----

openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf

Using configuration from ./server.cnf

Check that the request matches the signature

Signature ok

Certificate Details:

Serial Number: 1 (0x1)

Validity

Not Before: Feb 19 03:16:57 2014 GMT

Not After : Feb 19 03:16:57 2015 GMT

Subject:

countryName = FR

stateOrProvinceName = Radius

organizationName = Example Inc.

commonName = Example Server Certificate

emailAddress = admin@example.com

X509v3 extensions:

X509v3 Extended Key Usage:

TLS Web Server Authentication

Certificate is to be certified until Feb 19 03:16:57 2015 GMT (365 days)

Write out database with 1 new entries

Data Base Updated

openssl pkcs12 -export -in server.crt -inkey server.key -out server.p12 -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'`

openssl pkcs12 -in server.p12 -out server.pem -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'`

MAC verified OK

openssl x509 -inform PEM -outform DER -in ca.pem -out ca.der