2.2. Requirements

In this section, each invoked library will have to be installed and the header have to be in standard places (so configure can found them).

2.2.1. Nuauth dependencies

2.2.1.1. nuauth core daemon

nuauth dependencies are as follows:

  • libglib2.0: nuauth heavily uses this library which provides a set of very useful high level objects. It needs at least 2.4 release.

  • libgnutls: encryption of communications between the different parts of the system is performed via TLS

  • libsasl2: authentication is done via sasl

  • libtool: It's needed for the compilation of library and modules

2.2.1.2. MySQL logging

The libmysqlclient library is required for compiling of this module.

2.2.1.3. PostgreSQL logging

The libpq library is required for compiling this module.

2.2.1.4. Prelude logging

The libprelude library is required for compiling this module. Prelude allows for gathering security events at the scale of any organisation, and NuFW can send Prelude the following events :

  • User authentication failures

  • User authentication successes

  • Start and end of user sessions

  • Start and end of authenticated connections

  • Rejected connections

All information about the Prelude project is available at http://prelude-ids.org

2.2.2. nufw dependencies

The nufw daemon only depends on:

2.2.3. User marking requirement on old kernel

A system with a kernel prior to 2.6.14 needs a patched version of the ip_queue module and of its "sibling" library libipq.

2.2.4. Using nfnetlink and getting all latest NuFW features

On kernel superior to 2.6.14, ipq is now deprecated in favor of libnetfilter_queue which uses the new nfnetlink system. We encourage you to switch to this library as it is the future. On top of that nfnetlink also provides libnetfilter_conntrack which is used by NuFW to implement time-based acls.

To be able to use this features, the following libraries are needed:

You can find working versions of these libraries at http://nufw.org/download/libs/index.html And if you run debian, packages are available at http://www.nufw.org/debian/

If you plan to use NuFW time-based acls, it is best to use a kernel superior to 2.6.18 or to apply patches provided on NuFW site.