Crashing on startup - no errors in debug

Alan DeKok aland at deployingradius.com
Wed Oct 27 15:11:16 CEST 2021


On Oct 27, 2021, at 4:56 AM, Phil Leinster <philleinster at gmail.com> wrote:
> The package was configured with options that were incompatible with the
> configuration in the unit. Namely, I had to change the user and group from
> 'freerad' to 'root',

  It's best to not run it as root.  While we try to make everything secure, we're not perfect.

> as this was changed as part of the
> google-authenticator integration in the conf file. A bit embarrassing I
> didn't find it sooner, to be honest. I believe root is a requirement for
> the G-A module.

  3.0.25 contains a TOTP module, which can run the algorithm used by Google Authenticator.  And it doesn't need root.

  I'm not sure why the google authenticator stuff needs root.  It really shouldn't.

  Alan DeKok.




More information about the Freeradius-Users mailing list