Please šgive file /usr/local/etc/raddb/certs/server.pem, to check if u have it.----- Original Message -----From: Glen MillardSent: Saturday, April 18, 2009 8:32 PMSubject: Re: FreeRADIUS 2.1.5 on CentOS 4.4Hi ;
I thank you much for your help/input.
However, I am still seeing an error:
Here is the output.
Thanks
FreeRADIUS Version 2.1.5, for host i686-pc-linux-gnu, built on Apr 18 2009 at 05:17:11
Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License v2.
Starting - reading configuration files ...
including configuration file /usr/local/etc/raddb/radiusd.conf
including configuration file /usr/local/etc/raddb/proxy.conf
including configuration file /usr/local/etc/raddb/clients.conf
including files in directory /usr/local/etc/raddb/modules/
including configuration file /usr/local/etc/raddb/modules/mac2vlan
including configuration file /usr/local/etc/raddb/modules/always
including configuration file /usr/local/etc/raddb/modules/exec
including configuration file /usr/local/etc/raddb/modules/expiration
including configuration file /usr/local/etc/raddb/modules/detail
including configuration file /usr/local/etc/raddb/modules/radutmp
including configuration file /usr/local/etc/raddb/modules/attr_rewrite
including configuration file /usr/local/etc/raddb/modules/realm
including configuration file /usr/local/etc/raddb/modules/expr
including configuration file /usr/local/etc/raddb/modules/ldap
including configuration file /usr/local/etc/raddb/modules/passwd
including configuration file /usr/local/etc/raddb/modules/otp
including configuration file /usr/local/etc/raddb/modules/etc_group
including configuration file /usr/local/etc/raddb/modules/acct_unique
including configuration file /usr/local/etc/raddb/modules/digest
including configuration file /usr/local/etc/raddb/modules/linelog
including configuration file /usr/local/etc/raddb/modules/smsotp
including configuration file /usr/local/etc/raddb/modules/detail.log
including configuration file /usr/local/etc/raddb/modules/mac2ip
including configuration file /usr/local/etc/raddb/modules/echo
including configuration file /usr/local/etc/raddb/modules/pap
including configuration file /usr/local/etc/raddb/modules/checkval
including configuration file /usr/local/etc/raddb/modules/wimax
including configuration file /usr/local/etc/raddb/modules/sql_log
including configuration file /usr/local/etc/raddb/modules/smbpasswd
including configuration file /usr/local/etc/raddb/modules/chap
including configuration file /usr/local/etc/raddb/modules/policy
including configuration file /usr/local/etc/raddb/modules/detail.example.com
including configuration file /usr/local/etc/raddb/modules/preprocess
including configuration file /usr/local/etc/raddb/modules/pam
including configuration file /usr/local/etc/raddb/modules/attr_filter
including configuration file /usr/local/etc/raddb/modules/logintime
including configuration file /usr/local/etc/raddb/modules/inner-eap
including configuration file /usr/local/etc/raddb/modules/unix
including configuration file /usr/local/etc/raddb/modules/counter
including configuration file /usr/local/etc/raddb/modules/files
including configuration file /usr/local/etc/raddb/modules/mschap
including configuration file /usr/local/etc/raddb/modules/perl
including configuration file /usr/local/etc/raddb/modules/krb5
including configuration file /usr/local/etc/raddb/modules/sradutmp
including configuration file /usr/local/etc/raddb/modules/ippool
including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login
including configuration file /usr/local/etc/raddb/eap.conf
including configuration file /usr/local/etc/raddb/policy.conf
including files in directory /usr/local/etc/raddb/sites-enabled/
including configuration file /usr/local/etc/raddb/sites-enabled/default
including dictionary file /usr/local/etc/raddb/dictionary
main {
š š š šprefix = "/usr/local"
š š š šlocalstatedir = "/usr/local/var"
š š š šlogdir = "/usr/local/var/log/radius"
š š š šlibdir = "/usr/local/lib"
š š š šradacctdir = "/usr/local/var/log/radius/radacct"
š š š šhostname_lookups = no
š š š šmax_request_time = 30
š š š šcleanup_delay = 5
š š š šmax_requests = 1024
š š š šallow_core_dumps = yes
š š š špidfile = "/usr/local/var/run/radiusd/radiusd.pid"
š š š šcheckrad = "/usr/local/sbin/checkrad"
š š š šdebug_level = 0
š š š šproxy_requests = yes
šlog {
š š š šstripped_names = no
š š š šauth = no
š š š šauth_badpass = no
š š š šauth_goodpass = no
š}
šsecurity {
š š š šmax_attributes = 200
š š š šreject_delay = 1
š š š šstatus_server = yes
š}
}
radiusd: #### Loading Realms and Home Servers ####
šproxy server {
š š š šretry_delay = 5
š š š šretry_count = 3
š š š šdefault_fallback = no
š š š šdead_time = 120
š š š šwake_all_if_all_dead = no
š}
šhome_server localhost {
š š š šipaddr = 127.0.0.1
š š š šport = 1812
š š š štype = "auth"
š š š šsecret = "testing123"
š š š šresponse_window = 20
š š š šmax_outstanding = 65536
š š š šrequire_message_authenticator = no
š š š šzombie_period = 40
š š š šstatus_check = "status-server"
š š š šping_interval = 30
š š š šcheck_interval = 30
š š š šnum_answers_to_alive = 3
š š š šnum_pings_to_alive = 3
š š š šrevive_interval = 120
š š š šstatus_check_timeout = 4
š š š širt = 2
š š š šmrt = 16
š š š šmrc = 5
š š š šmrd = 30
š}
šhome_server_pool my_auth_failover {
š š š štype = fail-over
š š š šhome_server = localhost
š}
šrealm example.com {
š š š šauth_pool = my_auth_failover
š}
šrealm LOCAL {
š}
radiusd: #### Loading Clients ####
šclient localhost {
š š š šipaddr = 127.0.0.1
š š š šrequire_message_authenticator = no
š š š šsecret = "testing123"
š š š šnastype = "other"
š}
radiusd: #### Instantiating modules ####
šinstantiate {
šModule: Linked to module rlm_exec
šModule: Instantiating exec
šexec {
š š š šwait = no
š š š šinput_pairs = "request"
š š š šshell_escape = yes
š}
šModule: Linked to module rlm_expr
šModule: Instantiating expr
šModule: Linked to module rlm_expiration
šModule: Instantiating expiration
šexpiration {
š š š šreply-message = "Password Has Expired š"
š}
šModule: Linked to module rlm_logintime
šModule: Instantiating logintime
šlogintime {
š š š šreply-message = "You are calling outside your allowed timespan š"
š š š šminimum-timeout = 60
š}
š}
radiusd: #### Loading Virtual Servers ####
šmodules {
šModule: Checking authenticate {...} for more modules to load
šModule: Linked to module rlm_pap
šModule: Instantiating pap
špap {
š š š šencryption_scheme = "auto"
š š š šauto_header = no
š}
šModule: Linked to module rlm_chap
šModule: Instantiating chap
šModule: Linked to module rlm_mschap
šModule: Instantiating mschap
šmschap {
š š š šuse_mppe = yes
š š š šrequire_encryption = no
š š š šrequire_strong = no
š š š šwith_ntdomain_hack = no
š}
šModule: Linked to module rlm_unix
šModule: Instantiating unix
šunix {
š š š šradwtmp = "/usr/local/var/log/radius/radwtmp"
š}
šModule: Linked to module rlm_eap
šModule: Instantiating eap
šeap {
š š š šdefault_eap_type = "md5"
š š š štimer_expire = 60
š š š šignore_unknown_eap_types = no
š š š šcisco_accounting_username_bug = no
š š š šmax_sessions = 2048
š}
šModule: Linked to sub-module rlm_eap_md5
šModule: Instantiating eap-md5
šModule: Linked to sub-module rlm_eap_leap
šModule: Instantiating eap-leap
šModule: Linked to sub-module rlm_eap_gtc
šModule: Instantiating eap-gtc
š gtc {
š š š šchallenge = "Password: "
š š š šauth_type = "PAP"
š }
šModule: Linked to sub-module rlm_eap_tls
šModule: Instantiating eap-tls
š tls {
š š š šrsa_key_exchange = no
š š š šdh_key_exchange = yes
š š š šrsa_key_length = 512
š š š šdh_key_length = 512
š š š šverify_depth = 0
š š š špem_file_type = yes
š š š šprivate_key_file = "/usr/local/etc/raddb/certs/server.pem"
š š š šcertificate_file = "/usr/local/etc/raddb/certs/server.pem"
š š š šCA_file = "/usr/local/etc/raddb/certs/ca.pem"
š š š šprivate_key_password = "rifywbi!"
š š š šdh_file = "/usr/local/etc/raddb/certs/dh"
š š š šrandom_file = "/usr/local/etc/raddb/certs/random"
š š š šfragment_size = 1024
š š š šinclude_length = yes
š š š šcheck_crl = no
š š š šcipher_list = "DEFAULT"
š š š šmake_cert_command = "/usr/local/etc/raddb/certs/bootstrap"
š šcache {
š š š šenable = no
š š š šlifetime = 24
š š š šmax_entries = 255
š š}
š }
rlm_eap: SSL error error:0906D06C:PEM routines:PEM_read_bio:no start line
rlm_eap_tls: Error reading private key file /usr/local/etc/raddb/certs/server.pem
rlm_eap: Failed to initialize type tls
/usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap"
/usr/local/etc/raddb/sites-enabled/default[280]: Failed to find module "eap".
/usr/local/etc/raddb/sites-enabled/default[227]: Errors parsing authenticate section.
š}
Errors initializing modules
2009/4/18 ÷ĎĚĎŰÉÎ ÷ŃŢĹÓĚÁ× <voloshin@maks.net>
Delete from '/usr/local/etc/raddb/sites-enabled' all files, except 'default'.šš----- Original Message -----From: Glen MillardSent: Saturday, April 18, 2009 6:00 PMSubject: FreeRADIUS 2.1.5 on CentOS 4.4Hello All;
I have been spinning my wheels on this for a couple of days now.
I build FreeRADIUS from the source , no errors, builds successfully.
However, when I launch the FreeRADIUS server ( radiusd -X) this is what I see.
If I use the 'fake' certs ( the test ones with the bootstrap script) , it runs successfully.
Any ideas? I see discussion similar, but nothing very clear.
Anyone?
Thanks
Glen
+++++++++++++++++++++++++++++++++++
FreeRADIUS Version 2.1.5, for host i686-pc-linux-gnu, built on Apr 18 2009 at 05:17:11
Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License v2.
Starting - reading configuration files ...
including configuration file /usr/local/etc/raddb/radiusd.conf
including configuration file /usr/local/etc/raddb/proxy.conf
including configuration file /usr/local/etc/raddb/clients.conf
including files in directory /usr/local/etc/raddb/modules/
including configuration file /usr/local/etc/raddb/modules/mac2vlan
including configuration file /usr/local/etc/raddb/modules/always
including configuration file /usr/local/etc/raddb/modules/exec
including configuration file /usr/local/etc/raddb/modules/expiration
including configuration file /usr/local/etc/raddb/modules/detail
including configuration file /usr/local/etc/raddb/modules/radutmp
including configuration file /usr/local/etc/raddb/modules/attr_rewrite
including configuration file /usr/local/etc/raddb/modules/realm
including configuration file /usr/local/etc/raddb/modules/expr
including configuration file /usr/local/etc/raddb/modules/ldap
including configuration file /usr/local/etc/raddb/modules/passwd
including configuration file /usr/local/etc/raddb/modules/otp
including configuration file /usr/local/etc/raddb/modules/etc_group
including configuration file /usr/local/etc/raddb/modules/acct_unique
including configuration file /usr/local/etc/raddb/modules/digest
including configuration file /usr/local/etc/raddb/modules/linelog
including configuration file /usr/local/etc/raddb/modules/smsotp
including configuration file /usr/local/etc/raddb/modules/detail.log
including configuration file /usr/local/etc/raddb/modules/mac2ip
including configuration file /usr/local/etc/raddb/modules/echo
including configuration file /usr/local/etc/raddb/modules/pap
including configuration file /usr/local/etc/raddb/modules/checkval
including configuration file /usr/local/etc/raddb/modules/wimax
including configuration file /usr/local/etc/raddb/modules/sql_log
including configuration file /usr/local/etc/raddb/modules/smbpasswd
including configuration file /usr/local/etc/raddb/modules/chap
including configuration file /usr/local/etc/raddb/modules/policy
including configuration file /usr/local/etc/raddb/modules/detail.example.com
including configuration file /usr/local/etc/raddb/modules/preprocess
including configuration file /usr/local/etc/raddb/modules/pam
including configuration file /usr/local/etc/raddb/modules/attr_filter
including configuration file /usr/local/etc/raddb/modules/logintime
including configuration file /usr/local/etc/raddb/modules/inner-eap
including configuration file /usr/local/etc/raddb/modules/unix
including configuration file /usr/local/etc/raddb/modules/counter
including configuration file /usr/local/etc/raddb/modules/files
including configuration file /usr/local/etc/raddb/modules/mschap
including configuration file /usr/local/etc/raddb/modules/perl
including configuration file /usr/local/etc/raddb/modules/krb5
including configuration file /usr/local/etc/raddb/modules/sradutmp
including configuration file /usr/local/etc/raddb/modules/ippool
including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login
including configuration file /usr/local/etc/raddb/eap.conf
including configuration file /usr/local/etc/raddb/policy.conf
including files in directory /usr/local/etc/raddb/sites-enabled/
including configuration file /usr/local/etc/raddb/sites-enabled/default
including configuration file /usr/local/etc/raddb/sites-enabled/control-socket
including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel
including dictionary file /usr/local/etc/raddb/dictionary
main {
š š š šprefix = "/usr/local"
š š š šlocalstatedir = "/usr/local/var"
š š š šlogdir = "/usr/local/var/log/radius"
š š š šlibdir = "/usr/local/lib"
š š š šradacctdir = "/usr/local/var/log/radius/radacct"
š š š šhostname_lookups = no
š š š šmax_request_time = 30
š š š šcleanup_delay = 5
š š š šmax_requests = 1024
š š š šallow_core_dumps = yes
š š š špidfile = "/usr/local/var/run/radiusd/radiusd.pid"
š š š šcheckrad = "/usr/local/sbin/checkrad"
š š š šdebug_level = 0
š š š šproxy_requests = yes
šlog {
š š š šstripped_names = no
š š š šauth = no
š š š šauth_badpass = no
š š š šauth_goodpass = no
š}
šsecurity {
š š š šmax_attributes = 200
š š š šreject_delay = 1
š š š šstatus_server = yes
š}
}
radiusd: #### Loading Realms and Home Servers ####
šproxy server {
š š š šretry_delay = 5
š š š šretry_count = 3
š š š šdefault_fallback = no
š š š šdead_time = 120
š š š šwake_all_if_all_dead = no
š}
šhome_server localhost {
š š š šipaddr = 127.0.0.1
š š š šport = 1812
š š š štype = "auth"
š š š šsecret = "testing123"
š š š šresponse_window = 20
š š š šmax_outstanding = 65536
š š š šrequire_message_authenticator = no
š š š šzombie_period = 40
š š š šstatus_check = "status-server"
š š š šping_interval = 30
š š š šcheck_interval = 30
š š š šnum_answers_to_alive = 3
š š š šnum_pings_to_alive = 3
š š š šrevive_interval = 120
š š š šstatus_check_timeout = 4
š š š širt = 2
š š š šmrt = 16
š š š šmrc = 5
š š š šmrd = 30
š}
šhome_server_pool my_auth_failover {
š š š štype = fail-over
š š š šhome_server = localhost
š}
šrealm example.com {
š š š šauth_pool = my_auth_failover
š}
šrealm LOCAL {
š}
radiusd: #### Loading Clients ####
šclient localhost {
š š š šipaddr = 127.0.0.1
š š š šrequire_message_authenticator = no
š š š šsecret = "testing123"
š š š šnastype = "other"
š}
radiusd: #### Instantiating modules ####
šinstantiate {
šModule: Linked to module rlm_exec
šModule: Instantiating exec
šexec {
š š š šwait = no
š š š šinput_pairs = "request"
š š š šshell_escape = yes
š}
šModule: Linked to module rlm_expr
šModule: Instantiating expr
šModule: Linked to module rlm_expiration
šModule: Instantiating expiration
šexpiration {
š š š šreply-message = "Password Has Expired š"
š}
šModule: Linked to module rlm_logintime
šModule: Instantiating logintime
šlogintime {
š š š šreply-message = "You are calling outside your allowed timespan š"
š š š šminimum-timeout = 60
š}
š}
radiusd: #### Loading Virtual Servers ####
server inner-tunnel {
šmodules {
šModule: Checking authenticate {...} for more modules to load
šModule: Linked to module rlm_pap
šModule: Instantiating pap
špap {
š š š šencryption_scheme = "auto"
š š š šauto_header = no
š}
šModule: Linked to module rlm_chap
šModule: Instantiating chap
šModule: Linked to module rlm_mschap
šModule: Instantiating mschap
šmschap {
š š š šuse_mppe = yes
š š š šrequire_encryption = no
š š š šrequire_strong = no
š š š šwith_ntdomain_hack = no
š}
šModule: Linked to module rlm_unix
šModule: Instantiating unix
šunix {
š š š šradwtmp = "/usr/local/var/log/radius/radwtmp"
š}
šModule: Linked to module rlm_eap
šModule: Instantiating eap
šeap {
š š š šdefault_eap_type = "md5"
š š š štimer_expire = 60
š š š šignore_unknown_eap_types = no
š š š šcisco_accounting_username_bug = no
š š š šmax_sessions = 2048
š}
šModule: Linked to sub-module rlm_eap_md5
šModule: Instantiating eap-md5
šModule: Linked to sub-module rlm_eap_leap
šModule: Instantiating eap-leap
šModule: Linked to sub-module rlm_eap_gtc
šModule: Instantiating eap-gtc
š gtc {
š š š šchallenge = "Password: "
š š š šauth_type = "PAP"
š }
šModule: Linked to sub-module rlm_eap_tls
šModule: Instantiating eap-tls
š tls {
š š š šrsa_key_exchange = no
š š š šdh_key_exchange = yes
š š š šrsa_key_length = 512
š š š šdh_key_length = 512
š š š šverify_depth = 0
š š š špem_file_type = yes
š š š šprivate_key_file = "/usr/local/etc/raddb/certs/server.pem"
š š š šcertificate_file = "/usr/local/etc/raddb/certs/server.pem"
š š š šCA_file = "/usr/local/etc/raddb/certs/ca.pem"
š š š šprivate_key_password = "rifywbi!"
š š š šdh_file = "/usr/local/etc/raddb/certs/dh"
š š š šrandom_file = "/usr/local/etc/raddb/certs/random"
š š š šfragment_size = 1024
š š š šinclude_length = yes
š š š šcheck_crl = no
š š š šcipher_list = "DEFAULT"
š š š šmake_cert_command = "/usr/local/etc/raddb/certs/bootstrap"
š šcache {
š š š šenable = no
š š š šlifetime = 24
š š š šmax_entries = 255
š š}
š }
rlm_eap: SSL error error:0906D06C:PEM routines:PEM_read_bio:no start line
rlm_eap_tls: Error reading private key file /usr/local/etc/raddb/certs/server.pem
rlm_eap: Failed to initialize type tls
/usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap"
/usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap".
/usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section.
š}
}
Errors initializing modules
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html