I got it from Fedora 28 Repo: freeradius-3.0.19-1.fc28.armv7hl Here is what I have on my /usr/lib/systemd/system/radiusd.service script for systemd [Unit] Description=FreeRADIUS high performance RADIUS server. After=syslog.target network-online.target ipa.service dirsrv.target krb5kdc.service [Service] Type=forking PIDFile=/var/run/radiusd/radiusd.pid ExecStartPre=-/bin/chown -R radiusd.radiusd /var/run/radiusd #ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap ExecStartPre=/bin/chgrp -R radiusd /etc/raddb/certs/ ExecStartPre=/usr/sbin/radiusd -C ExecStart=/usr/sbin/radiusd -d /etc/raddb ExecReload=/usr/sbin/radiusd -C ExecReload=/bin/kill -HUP $MAINPID [Install] WantedBy=multi-user.target On Tue, Apr 30, 2019 at 2:27 PM Matthew Newton <mcn@freeradius.org> wrote:
On Tue, 2019-04-30 at 14:17 -0700, Rafael Leiva-Ochoa wrote:
I recently upgraded to 3.0.19-1
From where?
After a lot of digging, I found that a "bootstrap" script on the /etc/raddb/certs/ directory was being called on the /usr/lib/systemd/system/radiusd.service. This script overwrote my current certificate files. I had to comment out the ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap to fix the problem. I am not sure if anyone else encountered this problem before. Is this being addressed on future releases?
That's not in the official release.
https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/redhat/radiusd.s...
Calling bootstrap in the service file is wrong. It should be done manually, or upon a clean install by the package manager.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html