Menu

freeradius 3

Help
2016-07-19
2017-12-20
  • David Lopes

    David Lopes - 2016-07-19

    Hi,

    It is possible to make a fresh install with freeradius 3 or we need to install fr2 before?

    Thanks,
    David

     
  • David Lopes

    David Lopes - 2016-07-19

    david@david-HP-Notebook:/etc$ sudo service freeradius start
    Job for freeradius.service failed because the control process exited with error code. See "systemctl status freeradius.service" and "journalctl -xe" for details.
    david@david-HP-Notebook:/etc$ systemctl status freeradius.service
    ● freeradius.service - FreeRADIUS multi-protocol policy server
    Loaded: loaded (/lib/systemd/system/freeradius.service; disabled; vendor preset: enabled)
    Active: activating (auto-restart) (Result: exit-code) since Ter 2016-07-19 17:20:22 WEST; 4s ago
    Docs: man:radiusd(8)
    man:radiusd.conf(5)
    http://wiki.freeradius.org/
    http://networkradius.com/doc/
    Process: 20352 ExecStartPre=/usr/sbin/freeradius $FREERADIUS_OPTIONS -Cxm -lstdout (code=exited, status=84)

    Jul 19 17:20:22 david-HP-Notebook systemd[1]: freeradius.service: Control process exited, code=exited status=84
    Jul 19 17:20:22 david-HP-Notebook systemd[1]: Failed to start FreeRADIUS multi-protocol policy server.
    Jul 19 17:20:22 david-HP-Notebook systemd[1]: freeradius.service: Unit entered failed state.
    Jul 19 17:20:22 david-HP-Notebook systemd[1]: freeradius.service: Failed with result 'exit-code'.
    david@david-HP-Notebook:/etc$ journalctl -xe
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: rlm_mschap (mschap): using internal authentication
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: [/etc/freeradius/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Respo
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: [/etc/freeradius/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Respo
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: tls: Using cached TLS configuration from previous invocation
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: tls: Using cached TLS configuration from previous invocation
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and lin
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: Ignoring "ldap" (see raddb/mods-available/README.rst)
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: radiusd: #### Skipping IP addresses and Ports ####
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: Configuration appears to be OK
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: Use of uninitialized value.
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: Use of uninitialized value.
    Jul 19 17:20:33 david-HP-Notebook freeradius[20365]: panic: MUTEX_LOCK (22) [op.c:737].
    Jul 19 17:20:33 david-HP-Notebook systemd[1]: freeradius.service: Control process exited, code=exited status=84
    Jul 19 17:20:33 david-HP-Notebook systemd[1]: Failed to start FreeRADIUS multi-protocol policy server.
    -- Subject: Unit freeradius.service has failed
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit freeradius.service has failed.
    --
    -- The result is failed.
    Jul 19 17:20:33 david-HP-Notebook systemd[1]: freeradius.service: Unit entered failed state.
    Jul 19 17:20:33 david-HP-Notebook systemd[1]: freeradius.service: Failed with result 'exit-code'.
    lines 1291-1313/1313 (END)

     
  • David Lopes

    David Lopes - 2016-07-19

    I posted my error message, can You help?

     
  • David Lopes

    David Lopes - 2016-07-19

    this happens when I replace the freeradius folder inside /etc

     
  • Dirk van der Walt

    Hi David,
    Are you using Ubuntu 14.04 as an OS or Debian?

    panic: MUTEX_LOCK (22) [op.c:737].

    That seems to be more common on Debian systems

     
  • David Lopes

    David Lopes - 2016-07-19

    ubuntu 16.04

     
  • Dirk van der Walt

    Ah!

    Can you try 14.04.
    We still a 3 months behind and need to do more testing to get it up and going on 16.04 especially with the PHP.

     
  • David Lopes

    David Lopes - 2016-07-19

    ok, I will give you feedback.
    Thanks.

     
  • David Lopes

    David Lopes - 2016-07-22

    It's working.
    Thanks for your help.

     
  • Yamar

    Yamar - 2016-10-18

    hi,

    i would like to report the same issue on ubuntu 15, the error message is attached below:

    oct. 19 00:45:44 yamar-pc freeradius[885]: Starting - reading configuration files ...
    oct. 19 00:45:44 yamar-pc freeradius[885]: Debugger not attached
    oct. 19 00:45:44 yamar-pc freeradius[885]: Creating attribute Unix-Group
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
    oct. 19 00:45:44 yamar-pc freeradius[885]: Creating attribute SQL-Group
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_mschap (mschap): using internal authentication
    oct. 19 00:45:44 yamar-pc freeradius[885]: [/etc/freeradius/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay"
    oct. 19 00:45:44 yamar-pc freeradius[885]: [/etc/freeradius/mods-config/attr_filter/access_reject]:11 Check item "FreeRADIUS-Response-Delay-USe
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output
    oct. 19 00:45:44 yamar-pc freeradius[885]: tls: Using cached TLS configuration from previous invocation
    oct. 19 00:45:44 yamar-pc freeradius[885]: tls: Using cached TLS configuration from previous invocation
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql_mysql: libmysql version: 5.6.31
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): Attempting to connect to database "rd"
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): Initialising connection pool
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): Processing generate_sql_clients
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret, server
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): 0 of 0 connections in use. You may need to increase "spare"
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): Opening additional connection (0), 1 of 1 pending slots used
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql_mysql: Starting connect to MySQL server
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): Reserved connection (0)
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): Adding client 127.0.0.1 (localhost) to global clients list
    oct. 19 00:45:44 yamar-pc freeradius[885]: Failed to add duplicate client localhost
    oct. 19 00:45:44 yamar-pc freeradius[885]: Failed to add client, possible duplicate?
    oct. 19 00:45:44 yamar-pc freeradius[885]: rlm_sql (sql): Released connection (0)
    oct. 19 00:45:44 yamar-pc freeradius[885]: Ignoring "ldap" (see raddb/mods-available/README.rst)
    oct. 19 00:45:44 yamar-pc freeradius[885]: radiusd: #### Skipping IP addresses and Ports ####
    oct. 19 00:45:44 yamar-pc freeradius[885]: Configuration appears to be OK
    oct. 19 00:45:44 yamar-pc freeradius[885]: Use of uninitialized value.
    oct. 19 00:45:44 yamar-pc freeradius[885]: Use of uninitialized value.
    oct. 19 00:45:44 yamar-pc freeradius[885]: panic: MUTEX_LOCK (22) [op.c:727] during global destruction.
    oct. 19 00:45:44 yamar-pc systemd[1]: freeradius.service: Control process exited, code=exited status=84
    oct. 19 00:45:44 yamar-pc systemd[1]: Failed to start FreeRADIUS multi-protocol policy server.
    -- Subject: L'unité (unit) freeradius.service a échoué

    i think it's related to multiple instance of the rlm_sql driver...Instead of changing OS version, do you have any suggestions on another workaround?
    I have installed freeradius version 3.0.11-ppa3~wily

    Regards,
    Yari

     
  • Dirk van der Walt

    Hi guys,

    Interresting that just as I'm finishing up with the documentation on installing on Ubuntu 16.04, Yari revives this topic and I also run into a brick wall

    So here's what I found.

    Syststemd starts up fine using the origianl config files from the FreeRADIUS package.
    When we however replaces them with the RD specific ones, it would not start up but issuing

    freeradius -X
    

    Works fine

    The file in question:

    vi /lib/systemd/system/freeradius.service
    

    And the entries:

    #EnvironmentFile=-/etc/default/freeradius
    #ExecStartPre=/usr/sbin/freeradius $FREERADIUS_OPTIONS -Cxm -lstdout
    

    There were actually two problems.

    ExecStartPre=/usr/sbin/freeradius $FREERADIUS_OPTIONS -Cxm -lstdout

    When it does a config check, and since we run a few Perl instances this error comes up:

    https://github.com/FreeRADIUS/freeradius-server/issues/1674

    Then:

    EnvironmentFile=-/etc/default/freeradius

    Commenting it out I thing result in the default environment which allows FreeRADIUS to start up through systemd

    So to recap here's my final file that works:

    [Unit]
    Description=FreeRADIUS multi-protocol policy server
    After=syslog.target network.target
    Documentation=man:radiusd(8) man:radiusd.conf(5) http://wiki.freeradius.org/ http://networkradius.com/doc/
    
    [Service]
    Type=forking
    PIDFile=/run/freeradius/freeradius.pid
    #EnvironmentFile=-/etc/default/freeradius
    #ExecStartPre=/usr/sbin/freeradius $FREERADIUS_OPTIONS -Cxm -lstdout
    ExecStart=/usr/sbin/freeradius $FREERADIUS_OPTIONS
    Restart=on-failure
    RestartSec=5
    
    [Install]
    WantedBy=multi-user.target
    

    Let me know if this works on your systems also

     
    • Nafis Haliullin

      Nafis Haliullin - 2017-12-20

      Hello, please help. Where is this file in ubuntu 16.04 - vi /lib/systemd/system/freeradius.service?

       
  • Fabrizio Lazzaretti

    This solution works for me !

     
  • Yamar

    Yamar - 2016-10-26

    Hi Dirk and Fabrizio,

    The solution work for me, thank you, but i had issues with the admin login screen when i use php5(Failure not defined),

    2016/10/24 08:53:09 [crit] 8896#8896: *128 connect() to unix:/var/run/php5-fpm.sock failed (2: No such file or directory) while connecting to upstream, client: 127.0.0.1, server: _, request: "POST /cake2/rd_cake/desktop/authenticate.json HTTP/1.1", upstream: "fastcgi://unix:/var/run/php5-fpm.sock:", host: "127.0.0.1", referrer: "http://127.0.0.1/rd/"

    i switch to php7, and after filling username and password, nothing happen when clicking on the login button, i didn't find even any log for troubleshooting on the server side.
    Finallly, this discussion help me to solve the issue:

    https://sourceforge.net/p/radiusdesk/discussion/help/thread/2c13ee5a/

    Change

    */
    Configure::write('debug', 2);
    //Configure::write('debug', 0);

    /**

    To

    */
    //Configure::write('debug', 2);
    Configure::write('debug', 0);

    /**

    in /usr/share/nginx/html/cake2/rd_cake/Config/core.php

    After that i was able to log in as root -> admin
    But when doing some configurations, for some items that i want to add or update, the message: "Failure not Defined" appears again. And below his the two kind of errors in the log:

    2016/10/24 11:47:21 [error] 1088#1088: *80 FastCGI sent in stderr: "PHP message: PHP Fatal error: Cannot use 'String' as class name as it is reserved in /usr/share/nginx/html/cake2/lib/Cake/Utility/String.php on line 26" while reading response header from upstream, client: 127.0.0.1, server: _, request: "POST /cake2/rd_cake/access_providers/add.json HTTP/1.1", upstream: "fastcgi://unix:/run/php/php7.0-fpm.sock:", host: "127.0.0.1", referrer: "http://127.0.0.1/rd/"

    2016/10/24 12:00:15 [error] 1087#1087: *148 FastCGI sent in stderr: "PHP message: PHP Fatal error: Cannot use 'String' as class name as it is reserved in /usr/share/nginx/html/cake2/lib/Cake/Utility/String.php on line 26" while reading response header from upstream, client: 127.0.0.1, server: _, request: "POST /cake2/rd_cake/permanent_users/edit_basic_info.json HTTP/1.1", upstream: "fastcgi://unix:/run/php/php7.0-fpm.sock:", host: "127.0.0.1", referrer: "http://127.0.0.1/rd/"

    Nevertheless, i have a complete view of RD and it works by default with Coova(when connected to internet)...

    I will adopt it as a solution for WiFi HotSpot System, and plan to test the paypal integration in the future.

    Thank you very much for bringing the community this great product.

    YaRi

     

    Last edit: Yamar 2016-10-26
  • Fabrizio Lazzaretti

    yeah, check the path in nginx config file to php unix socket.
    it should be "/var/run/php/php5.6-fpm.sock"
    and not "/var/run/php5.6-fpm.sock"

    The latest problem is that the "String" class is deprecated but the problem is fixes if you update at latest svn version beacuse String is replaced with CakeText

     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.