From trubela at gmail.com Sat May 2 12:28:44 2015 From: trubela at gmail.com (Peter Mraz) Date: Sat, 2 May 2015 14:28:44 +0200 Subject: [tac_plus] TACACS installation to Redhat 7.1 Message-ID: Hello guys, Last few weeks, we are trying to install tacacs on new virtual server running on vmware, redhat 7.1 Tacacs+ worked pretty well on 5.7 version, but on this 7.1 64 bit, there is some strange error and I dont know what to do with that :) Would you be so kind and look on attached log? THank you so much for your great work! -- ?akujem / Thank you ----------------------------------------------------------- Peter Mraz ----------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- SERvER : [root at SELABSK tacacs+]# uname -a Linux SELABSK 3.10.0-229.1.2.el7.x86_64 #1 SMP Fri Mar 6 17:12:08 EST 2015 x86_64 x86_64 x86_64 GNU/Linux [root at SELABSK tacacs+]# more /etc/redhat-release Red Hat Enterprise Linux Server release 7.1 (Maipo) ======================================================================================= ./CONFIGURE ======================================================================================= [root at SELABSK tacacs+-F4.0.4.27a]# ./configure --prefix /etc/tacacs+/ checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /usr/bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether to enable maintainer-specific portions of Makefiles... no checking build system type... x86_64-unknown-linux-gnu checking host system type... x86_64-unknown-linux-gnu checking for gmake... /usr/bin/gmake checking whether /usr/bin/gmake sets $(MAKE)... yes checking whether to enable maintainer-specific portions of Makefiles... no checking how to print strings... printf checking for style of include used by /usr/bin/gmake... GNU checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking dependency style of gcc... gcc3 checking for a sed that does not truncate output... /usr/bin/sed checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for fgrep... /usr/bin/grep -F checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 1572864 checking whether the shell understands some XSI constructs... yes checking whether the shell understands "+="... yes checking how to convert x86_64-unknown-linux-gnu file names to x86_64-unknown-linux-gnu format... func_convert_file_noop checking how to convert x86_64-unknown-linux-gnu file names to toolchain format... func_convert_file_noop checking for /usr/bin/ld option to reload object files... -r checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for ar... ar checking for archiver @FILE support... @ checking for strip... strip checking for ranlib... ranlib checking command to parse /usr/bin/nm -B output from gcc object... ok checking for sysroot... no checking for mt... mt checking if mt is a manifest tool... no checking how to run the C preprocessor... gcc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC -DPIC checking if gcc PIC flag -fPIC -DPIC works... yes checking if gcc static flag -static works... no checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/usr/bin/ld -m elf_x86_64) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking for shl_load... no checking for shl_load in -ldld... no checking for dlopen... no checking for dlopen in -ldl... yes checking whether a program can dlopen itself... yes checking whether a statically linked program can dlopen itself... yes checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking for the pthreads library -lpthreads... no checking whether pthreads work without any flags... no checking whether pthreads work with -Kthread... no checking whether pthreads work with -kthread... no checking for the pthreads library -llthread... no checking whether pthreads work with -pthread... yes checking for joinable pthread attribute... PTHREAD_CREATE_JOINABLE checking if more special flags are required for pthreads... no checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking dependency style of gcc... (cached) gcc3 checking for function prototypes... yes checking for string.h... (cached) yes checking how to run the C preprocessor... gcc -E checking for an ANSI C-conforming const... yes checking for inline... inline checking for preprocessor stringizing operator... yes checking for flex... flex checking lex output file root... lex.yy checking lex library... none needed checking whether yytext is a pointer... no checking for bison... bison -y checking whether yacc is bison in disguise... yes checking whether byte ordering is bigendian... no checking size of long int... 8 checking whether to include symbols... no checking whether to set gcc warnings... no checking whether to use libwrap... yes checking whether to include skey support... no checking whether to include RSA SecurID support... no checking whether to setuid()... no checking whether to setgid()... no checking whether to include ACL support... yes checking whether to include user-enable support... yes checking whether to include maximum sessions (maxsess) support... no checking whether to include maxsess finger support... no checking whether to include ARAP DES support... no checking whether to include MSCHAP support... no checking whether to include MSCHAP DES support... no checking for alt pid file FQPN... /var/run/tac_plus.pid checking for alt accounting file FQPN... /var/log/tac_plus.acct checking for alt log file FQPN... /var/log/tac_plus.log checking for alt wholog file FQPN... /var/log/tacwho.log checking whether to profile... no checking for pam_start in -lpam... yes checking for ANSI C header files... (cached) yes checking whether time.h and sys/time.h may both be included... yes checking crypt.h usability... yes checking crypt.h presence... yes checking for crypt.h... yes checking ctype.h usability... yes checking ctype.h presence... yes checking for ctype.h... yes checking errno.h usability... yes checking errno.h presence... yes checking for errno.h... yes checking fcntl.h usability... yes checking fcntl.h presence... yes checking for fcntl.h... yes checking malloc.h usability... yes checking malloc.h presence... yes checking for malloc.h... yes checking shadow.h usability... yes checking shadow.h presence... yes checking for shadow.h... yes checking for stdlib.h... (cached) yes checking for stdint.h... (cached) yes checking for string.h... (cached) yes checking for strings.h... (cached) yes checking sys/resource.h usability... yes checking sys/resource.h presence... yes checking for sys/resource.h... yes checking sys/socket.h usability... yes checking sys/socket.h presence... yes checking for sys/socket.h... yes checking for sys/types.h... (cached) yes checking sys/wait.h usability... yes checking sys/wait.h presence... yes checking for sys/wait.h... yes checking sysexits.h usability... yes checking sysexits.h presence... yes checking for sysexits.h... yes checking syslog.h usability... yes checking syslog.h presence... yes checking for syslog.h... yes checking termios.h usability... yes checking termios.h presence... yes checking for termios.h... yes checking for unistd.h... (cached) yes checking utmp.h usability... yes checking utmp.h presence... yes checking for utmp.h... yes checking utmpx.h usability... yes checking utmpx.h presence... yes checking for utmpx.h... yes checking wait.h usability... yes checking wait.h presence... yes checking for wait.h... yes checking return type of signal handlers... void checking for socklen_t... yes checking for pid_t... yes checking for getdtablesize... yes checking for memcpy... yes checking for memset... yes checking for random... yes checking for strchr... yes checking for strcspn... yes checking for strerror... yes checking for strrchr... yes checking for wait3... yes checking for wait4... yes checking for waitpid... yes checking whether setpgrp takes no argument... yes checking if waitpid takes a union wait... no checking if signals need to be re-armed... no checking if children need to be reaped... yes checking if children need to be reaped with SIG_IGN... no checking for gnutar... no checking for gtar... gtar checking for perl5... no checking for perl... /usr/bin/perl configure: creating ./config.status config.status: creating Makefile config.status: creating version.h config.status: creating pathsl.h config.status: creating tac_plus.8 config.status: creating tac_plus.conf.5 config.status: creating config.h config.status: config.h is unchanged config.status: executing depfiles commands config.status: executing libtool commands ======================================================================================= MAKE ======================================================================================= [root at SELABSK tacacs+-F4.0.4.27a]# make /usr/bin/gmake all-am gmake[1]: Entering directory `/home/pm7625/tacacs+-F4.0.4.27a' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -g -O2 -pthread -MT libtacacs_la-maxsess.lo -MD -MP -MF .deps/libtacacs_la-maxsess.Tpo -c -o libtacacs_la-maxsess.lo `test -f 'maxsess.c' || echo './'`maxsess.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -g -O2 -pthread -MT libtacacs_la-maxsess.lo -MD -MP -MF .deps/libtacacs_la-maxsess.Tpo -c maxsess.c -fPIC -DPIC -o .libs/libtacacs_la-maxsess.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -g -O2 -pthread -MT libtacacs_la-maxsess.lo -MD -MP -MF .deps/libtacacs_la-maxsess.Tpo -c maxsess.c -o libtacacs_la-maxsess.o >/dev/null 2>&1 mv -f .deps/libtacacs_la-maxsess.Tpo .deps/libtacacs_la-maxsess.Plo /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -g -O2 -pthread -MT libtacacs_la-packet.lo -MD -MP -MF .deps/libtacacs_la-packet.Tpo -c -o libtacacs_la-packet.lo `test -f 'packet.c' || echo './'`packet.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -g -O2 -pthread -MT libtacacs_la-packet.lo -MD -MP -MF .deps/libtacacs_la-packet.Tpo -c packet.c -fPIC -DPIC -o .libs/libtacacs_la-packet.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -g -O2 -pthread -MT libtacacs_la-packet.lo -MD -MP -MF .deps/libtacacs_la-packet.Tpo -c packet.c -o libtacacs_la-packet.o >/dev/null 2>&1 mv -f .deps/libtacacs_la-packet.Tpo .deps/libtacacs_la-packet.Plo /bin/sh ./libtool --tag=CC --mode=link gcc -g -O2 -pthread -g -O2 -pthread -version-info 1:0:0 -version-number 1:0:0 -L/usr/local/lib -L/lib -L/usr/local/lib -L/lib -o libtacacs.la -rpath /etc/tacacs+/lib libtacacs_la-fdes.lo libtacacs_la-maxsess.lo libtacacs_la-md4.lo libtacacs_la-md5.lo libtacacs_la-packet.lo -lpam -lnsl -lcrypt libtool: link: rm -fr .libs/libtacacs.a .libs/libtacacs.la .libs/libtacacs.lai .libs/libtacacs.so .libs/libtacacs.so.1 .libs/libtacacs.so.1.0.0 libtool: link: gcc -shared -fPIC -DPIC .libs/libtacacs_la-fdes.o .libs/libtacacs_la-maxsess.o .libs/libtacacs_la-md4.o .libs/libtacacs_la-md5.o .libs/libtacacs_la-packet.o -L/usr/local/lib -L/lib -lpam -lnsl -lcrypt -O2 -pthread -O2 -pthread -pthread -Wl,-soname -Wl,libtacacs.so.1 -o .libs/libtacacs.so.1.0.0 libtool: link: (cd ".libs" && rm -f "libtacacs.so.1" && ln -s "libtacacs.so.1.0.0" "libtacacs.so.1") libtool: link: (cd ".libs" && rm -f "libtacacs.so" && ln -s "libtacacs.so.1.0.0" "libtacacs.so") libtool: link: ar cru .libs/libtacacs.a libtacacs_la-fdes.o libtacacs_la-maxsess.o libtacacs_la-md4.o libtacacs_la-md5.o libtacacs_la-packet.o libtool: link: ranlib .libs/libtacacs.a libtool: link: ( cd ".libs" && rm -f "libtacacs.la" && ln -s "../libtacacs.la" "libtacacs.la" ) gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT acct.o -MD -MP -MF .deps/acct.Tpo -c -o acct.o acct.c mv -f .deps/acct.Tpo .deps/acct.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT authen.o -MD -MP -MF .deps/authen.Tpo -c -o authen.o authen.c mv -f .deps/authen.Tpo .deps/authen.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT author.o -MD -MP -MF .deps/author.Tpo -c -o author.o author.c mv -f .deps/author.Tpo .deps/author.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT choose_authen.o -MD -MP -MF .deps/choose_authen.Tpo -c -o choose_authen.o choose_authen.c mv -f .deps/choose_authen.Tpo .deps/choose_authen.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT config.o -MD -MP -MF .deps/config.Tpo -c -o config.o config.c mv -f .deps/config.Tpo .deps/config.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT default_fn.o -MD -MP -MF .deps/default_fn.Tpo -c -o default_fn.o default_fn.c mv -f .deps/default_fn.Tpo .deps/default_fn.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT default_v0_fn.o -MD -MP -MF .deps/default_v0_fn.Tpo -c -o default_v0_fn.o default_v0_fn.c mv -f .deps/default_v0_fn.Tpo .deps/default_v0_fn.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT do_acct.o -MD -MP -MF .deps/do_acct.Tpo -c -o do_acct.o do_acct.c mv -f .deps/do_acct.Tpo .deps/do_acct.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT do_author.o -MD -MP -MF .deps/do_author.Tpo -c -o do_author.o do_author.c mv -f .deps/do_author.Tpo .deps/do_author.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT dump.o -MD -MP -MF .deps/dump.Tpo -c -o dump.o dump.c mv -f .deps/dump.Tpo .deps/dump.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT enable.o -MD -MP -MF .deps/enable.Tpo -c -o enable.o enable.c mv -f .deps/enable.Tpo .deps/enable.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT encrypt.o -MD -MP -MF .deps/encrypt.Tpo -c -o encrypt.o encrypt.c mv -f .deps/encrypt.Tpo .deps/encrypt.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT expire.o -MD -MP -MF .deps/expire.Tpo -c -o expire.o expire.c mv -f .deps/expire.Tpo .deps/expire.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT hash.o -MD -MP -MF .deps/hash.Tpo -c -o hash.o hash.c mv -f .deps/hash.Tpo .deps/hash.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT maxsessint.o -MD -MP -MF .deps/maxsessint.Tpo -c -o maxsessint.o maxsessint.c mv -f .deps/maxsessint.Tpo .deps/maxsessint.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT parse.o -MD -MP -MF .deps/parse.Tpo -c -o parse.o parse.c mv -f .deps/parse.Tpo .deps/parse.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT programs.o -MD -MP -MF .deps/programs.Tpo -c -o programs.o programs.c mv -f .deps/programs.Tpo .deps/programs.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT pw.o -MD -MP -MF .deps/pw.Tpo -c -o pw.o pw.c mv -f .deps/pw.Tpo .deps/pw.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT pwlib.o -MD -MP -MF .deps/pwlib.Tpo -c -o pwlib.o pwlib.c mv -f .deps/pwlib.Tpo .deps/pwlib.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT report.o -MD -MP -MF .deps/report.Tpo -c -o report.o report.c mv -f .deps/report.Tpo .deps/report.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT sendauth.o -MD -MP -MF .deps/sendauth.Tpo -c -o sendauth.o sendauth.c mv -f .deps/sendauth.Tpo .deps/sendauth.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT sendpass.o -MD -MP -MF .deps/sendpass.Tpo -c -o sendpass.o sendpass.c mv -f .deps/sendpass.Tpo .deps/sendpass.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT tac_plus.o -MD -MP -MF .deps/tac_plus.Tpo -c -o tac_plus.o tac_plus.c mv -f .deps/tac_plus.Tpo .deps/tac_plus.Po gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT utils.o -MD -MP -MF .deps/utils.Tpo -c -o utils.o utils.c mv -f .deps/utils.Tpo .deps/utils.Po /bin/sh ./libtool --tag=CC --mode=link gcc -g -O2 -pthread -L. -L/usr/local/lib -L/lib -o tac_plus acct.o authen.o author.o choose_authen.o config.o default_fn.o default_v0_fn.o do_acct.o do_author.o dump.o enable.o encrypt.o expire.o hash.o maxsessint.o parse.o programs.o pw.o pwlib.o report.o sendauth.o sendpass.o tac_plus.o utils.o -lwrap -ltacacs -lpam -lnsl -lcrypt libtool: link: gcc -g -O2 -pthread -o .libs/tac_plus acct.o authen.o author.o choose_authen.o config.o default_fn.o default_v0_fn.o do_acct.o do_author.o dump.o enable.o encrypt.o expire.o hash.o maxsessint.o parse.o programs.o pw.o pwlib.o report.o sendauth.o sendpass.o tac_plus.o utils.o -L. -L/usr/local/lib -L/lib -lwrap /home/pm7625/tacacs+-F4.0.4.27a/.libs/libtacacs.so -lpam -lnsl -lcrypt -pthread -Wl,-rpath -Wl,/etc/tacacs+/lib /usr/bin/ld: skipping incompatible /lib/libwrap.so when searching for -lwrap rm -f tac_convert tac_convert.tmp; \ sed -e 's, at bindir\@,/etc/tacacs+/bin,g' -e 's, at prefix\@,/etc/tacacs+,g' -e 's, at libexecdir\@,/etc/tacacs+/libexec,g' -e 's, at localstatedir\@,/etc/tacacs+/var,g' -e 's, at libdir\@,/etc/tacacs+/lib,g' -e 's, at pkglibdir\@,/etc/tacacs+/lib/tacacs+,g' -e 's, at sysconfdir\@,/etc/tacacs+/etc,g' -e 's, at PERLV_PATH\@,/usr/bin/perl,g' -e 's, at TACPLUS_PIDFILE\@,/var/run/tac_plus.pid,g' -e 's, at TACPLUS_LOGFILE\@,/var/log/tac_plus.log,g' ./tac_convert.in >tac_convert.tmp; \ mv tac_convert.tmp tac_convert; \ chmod 755 tac_convert rm -f users_guide users_guide.tmp; \ sed -e 's, at bindir\@,/etc/tacacs+/bin,g' -e 's, at prefix\@,/etc/tacacs+,g' -e 's, at libexecdir\@,/etc/tacacs+/libexec,g' -e 's, at localstatedir\@,/etc/tacacs+/var,g' -e 's, at libdir\@,/etc/tacacs+/lib,g' -e 's, at pkglibdir\@,/etc/tacacs+/lib/tacacs+,g' -e 's, at sysconfdir\@,/etc/tacacs+/etc,g' -e 's, at PERLV_PATH\@,/usr/bin/perl,g' -e 's, at TACPLUS_PIDFILE\@,/var/run/tac_plus.pid,g' -e 's, at TACPLUS_LOGFILE\@,/var/log/tac_plus.log,g' ./users_guide.in >users_guide.tmp; \ mv users_guide.tmp users_guide gmake[1]: Leaving directory `/home/pm7625/tacacs+-F4.0.4.27a' [root at SELABSK tacacs+-F4.0.4.27a]# -------------------------------------------------------------------------- start tacacs -------------------------------------------------------------------------- [root at SELABSK tacacs+]# /etc/tacacs+/tac_process FDO1550K0T8 49 start /usr/local/bin/tac_plus: error while loading shared libraries: libtacacs.so.1: wrong ELF class: ELFCLASS64 Tacacs for FDO1550K0T8 with port:49 Pid: started! [root at SELABSK tacacs+]# From heas at shrubbery.net Sat May 2 15:38:44 2015 From: heas at shrubbery.net (heasley) Date: Sat, 2 May 2015 15:38:44 +0000 Subject: [tac_plus] TACACS installation to Redhat 7.1 In-Reply-To: References: Message-ID: <20150502153844.GC80520@shrubbery.net> Sat, May 02, 2015 at 02:28:44PM +0200, Peter Mraz: > Hello guys, > > Last few weeks, we are trying to install tacacs on new virtual server > running on vmware, redhat 7.1 > Tacacs+ worked pretty well on 5.7 version, but on this 7.1 64 bit, there is > some strange error and I dont know what to do with that :) > [root at SELABSK tacacs+]# /etc/tacacs+/tac_process FDO1550K0T8 49 start > /usr/local/bin/tac_plus: error while loading shared libraries: libtacacs.so.1: wrong ELF class: ELFCLASS64 looks like your tacacs is linked 32bit but libtacacs is 64bit. check the libs in .libs where you built it. it doesnt look like any of it was built 64bit, so you have a conflicting libtacacs installed. > Tacacs for FDO1550K0T8 with port:49 Pid: started! > [root at SELABSK tacacs+]# this is a separate bug. when ld.so fails above, does it not return an error result code? whatever the starting wrapper is, it should have recognized an error and reported it. From trubela at gmail.com Sun May 3 06:48:02 2015 From: trubela at gmail.com (Peter Marx) Date: Sun, 3 May 2015 08:48:02 +0200 Subject: [tac_plus] TACACS installation to Redhat 7.1 In-Reply-To: <20150502153844.GC80520@shrubbery.net> References: <20150502153844.GC80520@shrubbery.net> Message-ID: <8C40C766-569E-4DDD-B794-363B8A644A84@gmail.com> hi do you have please 64 bit tacacs+ version? Sent from my iPhone > On 02 May 2015, at 17:38, heasley wrote: > > Sat, May 02, 2015 at 02:28:44PM +0200, Peter Mraz: >> Hello guys, >> >> Last few weeks, we are trying to install tacacs on new virtual server >> running on vmware, redhat 7.1 >> Tacacs+ worked pretty well on 5.7 version, but on this 7.1 64 bit, there is >> some strange error and I dont know what to do with that :) > >> [root at SELABSK tacacs+]# /etc/tacacs+/tac_process FDO1550K0T8 49 start >> /usr/local/bin/tac_plus: error while loading shared libraries: libtacacs.so.1: wrong ELF class: ELFCLASS64 > > looks like your tacacs is linked 32bit but libtacacs is 64bit. check the > libs in .libs where you built it. it doesnt look like any of it was > built 64bit, so you have a conflicting libtacacs installed. > >> Tacacs for FDO1550K0T8 with port:49 Pid: started! >> [root at SELABSK tacacs+]# > > this is a separate bug. when ld.so fails above, does it not return an > error result code? whatever the starting wrapper is, it should have > recognized an error and reported it. From trubela at gmail.com Sun May 3 12:30:32 2015 From: trubela at gmail.com (Peter Mraz) Date: Sun, 3 May 2015 14:30:32 +0200 Subject: [tac_plus] TACACS installation to Redhat 7.1 In-Reply-To: <20150502153844.GC80520@shrubbery.net> References: <20150502153844.GC80520@shrubbery.net> Message-ID: The most probably, tcp_wrappers should be 32 bit. tcp_wrappers.x86_64 7.6-77.el7 @anaconda/7.1 tcp_wrappers-devel.i686 7.6-77.el7 @rhel-7-server-rpms tcp_wrappers-devel.x86_64 7.6-77.el7 @rhel-7-server-rpms tcp_wrappers-libs.i686 7.6-77.el7 @rhel-7-server-rpms tcp_wrappers-libs.x86_64 7.6-77.el7 @anaconda/7.1 (based on this output : /usr/bin/ld: skipping incompatible /lib/libwrap.so when searching for -lwrap) On 2 May 2015 at 17:38, heasley wrote: > Sat, May 02, 2015 at 02:28:44PM +0200, Peter Mraz: > > Hello guys, > > > > Last few weeks, we are trying to install tacacs on new virtual server > > running on vmware, redhat 7.1 > > Tacacs+ worked pretty well on 5.7 version, but on this 7.1 64 bit, there > is > > some strange error and I dont know what to do with that :) > > > [root at SELABSK tacacs+]# /etc/tacacs+/tac_process FDO1550K0T8 49 start > > /usr/local/bin/tac_plus: error while loading shared libraries: > libtacacs.so.1: wrong ELF class: ELFCLASS64 > > looks like your tacacs is linked 32bit but libtacacs is 64bit. check the > libs in .libs where you built it. it doesnt look like any of it was > built 64bit, so you have a conflicting libtacacs installed. > > > Tacacs for FDO1550K0T8 with port:49 Pid: started! > > [root at SELABSK tacacs+]# > > this is a separate bug. when ld.so fails above, does it not return an > error result code? whatever the starting wrapper is, it should have > recognized an error and reported it. > -- ?akujem / Thank you ----------------------------------------------------------- Peter Mraz ----------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From trubela at gmail.com Sun May 3 13:24:09 2015 From: trubela at gmail.com (Peter Mraz) Date: Sun, 3 May 2015 15:24:09 +0200 Subject: [tac_plus] TACACS installation to Redhat 7.1 In-Reply-To: References: <20150502153844.GC80520@shrubbery.net> Message-ID: Looks during installation it put into /usr/local/bin/ just tac_pwd, tac_plus and tac_plus.conf is not there. [root at SELABSK bin]# pwd /usr/local/bin [root at SELABSK bin]# ll total 24 -rwxr-xr-x 1 root root 21285 May 3 13:20 tac_pwd [root at SELABSK tacacs-F4.0.4.28]# make install /usr/bin/gmake install-am gmake[1]: Entering directory `/home/il574w/tacacs-F4.0.4.28' gmake[2]: Entering directory `/home/il574w/tacacs-F4.0.4.28' /usr/bin/mkdir -p '/usr/local/lib' /bin/sh ./libtool --mode=install /usr/bin/install -c libtacacs.la '/usr/local/lib' libtool: install: /usr/bin/install -c .libs/libtacacs.so.1.0.0 /usr/local/lib/libtacacs.so.1.0.0 libtool: install: (cd /usr/local/lib && { ln -s -f libtacacs.so.1.0.0 libtacacs.so.1 || { rm -f libtacacs.so.1 && ln -s libtacacs.so.1.0.0 libtacacs.so.1; }; }) libtool: install: (cd /usr/local/lib && { ln -s -f libtacacs.so.1.0.0 libtacacs.so || { rm -f libtacacs.so && ln -s libtacacs.so.1.0.0 libtacacs.so; }; }) libtool: install: /usr/bin/install -c .libs/libtacacs.lai /usr/local/lib/ libtacacs.la libtool: install: /usr/bin/install -c .libs/libtacacs.a /usr/local/lib/libtacacs.a libtool: install: chmod 644 /usr/local/lib/libtacacs.a libtool: install: ranlib /usr/local/lib/libtacacs.a libtool: finish: PATH="/usr/lib64/qt-3.3/bin:/usr/local/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/home/pm7625/bin:/sbin" ldconfig -n /usr/local/lib ---------------------------------------------------------------------- Libraries have been installed in: /usr/local/lib If you ever happen to want to link against installed libraries in a given directory, LIBDIR, you must either use libtool, and specify the full pathname of the library, or use the `-LLIBDIR' flag during linking and do at least one of the following: - add LIBDIR to the `LD_LIBRARY_PATH' environment variable during execution - add LIBDIR to the `LD_RUN_PATH' environment variable during linking - use the `-Wl,-rpath -Wl,LIBDIR' linker flag - have your system administrator add LIBDIR to `/etc/ld.so.conf' See any operating system documentation about shared libraries for more information, such as the ld(1) and ld.so(8) manual pages. ---------------------------------------------------------------------- /usr/bin/mkdir -p '/usr/local/bin' /bin/sh ./libtool --mode=install /usr/bin/install -c tac_pwd '/usr/local/bin' libtool: install: /usr/bin/install -c tac_pwd /usr/local/bin/tac_pwd /usr/bin/mkdir -p '/usr/local/sbin' /bin/sh ./libtool --mode=install /usr/bin/install -c tac_plus '/usr/local/sbin' libtool: install: /usr/bin/install -c .libs/tac_plus /usr/local/sbin/tac_plus /usr/bin/mkdir -p '/usr/local/include' /usr/bin/install -c -m 644 tacacs.h '/usr/local/include' /usr/bin/mkdir -p '/usr/local/share/man/man5' /usr/bin/install -c -m 644 tac_plus.conf.5 '/usr/local/share/man/man5' /usr/bin/mkdir -p '/usr/local/share/man/man8' /usr/bin/install -c -m 644 tac_plus.8 tac_pwd.8 '/usr/local/share/man/man8' /usr/bin/mkdir -p '/usr/local/share/tacacs' /usr/bin/install -c -m 644 do_auth.py users_guide '/usr/local/share/tacacs' /usr/bin/mkdir -p '/usr/local/share/tacacs' /usr/bin/install -c tac_convert '/usr/local/share/tacacs' gmake[2]: Leaving directory `/home/il574w/tacacs-F4.0.4.28' gmake[1]: Leaving directory `/home/il574w/tacacs-F4.0.4.28' On 3 May 2015 at 14:30, Peter Mraz wrote: > The most probably, tcp_wrappers should be 32 bit. > > tcp_wrappers.x86_64 7.6-77.el7 > @anaconda/7.1 > tcp_wrappers-devel.i686 7.6-77.el7 > @rhel-7-server-rpms > tcp_wrappers-devel.x86_64 7.6-77.el7 > @rhel-7-server-rpms > tcp_wrappers-libs.i686 7.6-77.el7 > @rhel-7-server-rpms > tcp_wrappers-libs.x86_64 7.6-77.el7 > @anaconda/7.1 > > (based on this output : /usr/bin/ld: skipping incompatible /lib/libwrap.so > when searching for -lwrap) > > On 2 May 2015 at 17:38, heasley wrote: > >> Sat, May 02, 2015 at 02:28:44PM +0200, Peter Mraz: >> > Hello guys, >> > >> > Last few weeks, we are trying to install tacacs on new virtual server >> > running on vmware, redhat 7.1 >> > Tacacs+ worked pretty well on 5.7 version, but on this 7.1 64 bit, >> there is >> > some strange error and I dont know what to do with that :) >> >> > [root at SELABSK tacacs+]# /etc/tacacs+/tac_process FDO1550K0T8 49 start >> > /usr/local/bin/tac_plus: error while loading shared libraries: >> libtacacs.so.1: wrong ELF class: ELFCLASS64 >> >> looks like your tacacs is linked 32bit but libtacacs is 64bit. check the >> libs in .libs where you built it. it doesnt look like any of it was >> built 64bit, so you have a conflicting libtacacs installed. >> >> > Tacacs for FDO1550K0T8 with port:49 Pid: started! >> > [root at SELABSK tacacs+]# >> >> this is a separate bug. when ld.so fails above, does it not return an >> error result code? whatever the starting wrapper is, it should have >> recognized an error and reported it. >> > > > > -- > ?akujem / Thank you > > ----------------------------------------------------------- > Peter Mraz > ----------------------------------------------------------- > -- ?akujem / Thank you ----------------------------------------------------------- Peter Mraz ----------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From heas at shrubbery.net Sun May 3 19:00:00 2015 From: heas at shrubbery.net (Heasley) Date: Sun, 3 May 2015 12:00:00 -0700 Subject: [tac_plus] TACACS installation to Redhat 7.1 In-Reply-To: References: <20150502153844.GC80520@shrubbery.net> Message-ID: <657315DB-4368-4507-A506-FDC935C64DD2@shrubbery.net> Am 03.05.2015 um 05:30 schrieb Peter Mraz : > > The most probably, tcp_wrappers should be 32 bit. > You have the source, compile it how you like. But you cant mix ABIs. > tcp_wrappers.x86_64 7.6-77.el7 @anaconda/7.1 > tcp_wrappers-devel.i686 7.6-77.el7 @rhel-7-server-rpms > tcp_wrappers-devel.x86_64 7.6-77.el7 @rhel-7-server-rpms > tcp_wrappers-libs.i686 7.6-77.el7 @rhel-7-server-rpms > tcp_wrappers-libs.x86_64 7.6-77.el7 @anaconda/7.1 > > (based on this output : /usr/bin/ld: skipping incompatible /lib/libwrap.so when searching for -lwrap) > >> On 2 May 2015 at 17:38, heasley wrote: >> Sat, May 02, 2015 at 02:28:44PM +0200, Peter Mraz: >> > Hello guys, >> > >> > Last few weeks, we are trying to install tacacs on new virtual server >> > running on vmware, redhat 7.1 >> > Tacacs+ worked pretty well on 5.7 version, but on this 7.1 64 bit, there is >> > some strange error and I dont know what to do with that :) >> >> > [root at SELABSK tacacs+]# /etc/tacacs+/tac_process FDO1550K0T8 49 start >> > /usr/local/bin/tac_plus: error while loading shared libraries: libtacacs.so.1: wrong ELF class: ELFCLASS64 >> >> looks like your tacacs is linked 32bit but libtacacs is 64bit. check the >> libs in .libs where you built it. it doesnt look like any of it was >> built 64bit, so you have a conflicting libtacacs installed. >> >> > Tacacs for FDO1550K0T8 with port:49 Pid: started! >> > [root at SELABSK tacacs+]# >> >> this is a separate bug. when ld.so fails above, does it not return an >> error result code? whatever the starting wrapper is, it should have >> recognized an error and reported it. > > > > -- > ?akujem / Thank you > > ----------------------------------------------------------- > Peter Mraz > ----------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From trubela at gmail.com Sun May 3 19:19:40 2015 From: trubela at gmail.com (Peter Mraz) Date: Sun, 3 May 2015 21:19:40 +0200 Subject: [tac_plus] TACACS installation to Redhat 7.1 In-Reply-To: <657315DB-4368-4507-A506-FDC935C64DD2@shrubbery.net> References: <20150502153844.GC80520@shrubbery.net> <657315DB-4368-4507-A506-FDC935C64DD2@shrubbery.net> Message-ID: Hi it works ...I just copied tac_plus from /usr/local/lib to /usr/local/bin/ and it works, somehow, it was not during installtion copied to /usr/local/bin/ Cheers for help. On 3 May 2015 at 21:00, Heasley wrote: > Am 03.05.2015 um 05:30 schrieb Peter Mraz : > > The most probably, tcp_wrappers should be 32 bit. > > > You have the source, compile it how you like. But you cant mix ABIs. > > tcp_wrappers.x86_64 7.6-77.el7 > @anaconda/7.1 > tcp_wrappers-devel.i686 7.6-77.el7 > @rhel-7-server-rpms > tcp_wrappers-devel.x86_64 7.6-77.el7 > @rhel-7-server-rpms > tcp_wrappers-libs.i686 7.6-77.el7 > @rhel-7-server-rpms > tcp_wrappers-libs.x86_64 7.6-77.el7 > @anaconda/7.1 > > (based on this output : /usr/bin/ld: skipping incompatible /lib/libwrap.so > when searching for -lwrap) > > On 2 May 2015 at 17:38, heasley wrote: > >> Sat, May 02, 2015 at 02:28:44PM +0200, Peter Mraz: >> > Hello guys, >> > >> > Last few weeks, we are trying to install tacacs on new virtual server >> > running on vmware, redhat 7.1 >> > Tacacs+ worked pretty well on 5.7 version, but on this 7.1 64 bit, >> there is >> > some strange error and I dont know what to do with that :) >> >> > [root at SELABSK tacacs+]# /etc/tacacs+/tac_process FDO1550K0T8 49 start >> > /usr/local/bin/tac_plus: error while loading shared libraries: >> libtacacs.so.1: wrong ELF class: ELFCLASS64 >> >> looks like your tacacs is linked 32bit but libtacacs is 64bit. check the >> libs in .libs where you built it. it doesnt look like any of it was >> built 64bit, so you have a conflicting libtacacs installed. >> >> > Tacacs for FDO1550K0T8 with port:49 Pid: started! >> > [root at SELABSK tacacs+]# >> >> this is a separate bug. when ld.so fails above, does it not return an >> error result code? whatever the starting wrapper is, it should have >> recognized an error and reported it. >> > > > > -- > ?akujem / Thank you > > ----------------------------------------------------------- > Peter Mraz > ----------------------------------------------------------- > > -- ?akujem / Thank you ----------------------------------------------------------- Peter Mraz ----------------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From kadamski at yorku.ca Wed May 13 14:41:03 2015 From: kadamski at yorku.ca (Krzysztof Adamski) Date: Wed, 13 May 2015 14:41:03 -0000 Subject: [tac_plus] Rugged switch priv access Message-ID: <55536279.3050508@yorku.ca> Hi, I'm integrating a rugged switch into our tacacs environment, the setup works fine for normal access. The switch needs priv level 15 for admin access. In our environment we start of at level 1 then do enable and become level 15. There does not seem to be an "enable" type command on the rugged, so it expect that tacacs to send it priv-lvl = 15, but I don't want to make that a default for all devices. So my question is can I send different priv-lvl to some devices and not others? Thanks in advance, K