PAM missing in FreeRadius 3 w/ Debian 9
Hello, I just installed FreeRadius 3.0.12 on Stretch in order to provide a Google Authenticator gateway (https://www.techdrabble.com/citrix/14-2factor-with-google-authenticator-and-... <https://www.techdrabble.com/citrix/14-2factor-with-google-authenticator-and-netscaler>), but I'm unable to start the FreeRadius service, here is the debug log : Mon Apr 23 14:23:59 2018 : Debug: # Loading session {...} Mon Apr 23 14:23:59 2018 : Debug: radutmp Mon Apr 23 14:23:59 2018 : Debug: # Loading post-proxy {...} Mon Apr 23 14:23:59 2018 : Debug: eap Mon Apr 23 14:23:59 2018 : Debug: # Loading post-auth {...} Mon Apr 23 14:23:59 2018 : Debug: } # server inner-tunnel Mon Apr 23 14:23:59 2018 : Debug: server default { # from file /etc/freeradius/3.0/sites-enabled/default Mon Apr 23 14:23:59 2018 : Debug: # Loading authenticate {...} Mon Apr 23 14:23:59 2018 : Debug: mschap Mon Apr 23 14:23:59 2018 : Debug: digest Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[489]: Failed to find "pam" as a module or policy. Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[489]: Please verify that the configuration exists in /etc/freeradius/3.0$ Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[452]: Errors parsing authenticate section. Of course there is no "/etc/freeradius/3.0/mods-enabled/pam" Someone had the same problem with Ubuntu 17.10 and FreeRadius 3 before reverting to an older version (https://enterpriseadmins.org/blog/virtualization/build-your-own-two-factor-a... <https://enterpriseadmins.org/blog/virtualization/build-your-own-two-factor-authentication-server/>) Regards
On Mon, 2018-04-23 at 14:42 +0200, servernemesis@tutanota.com wrote:
Mon Apr 23 14:23:59 2018 : Debug: digest Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- enabled/default[489]: Failed to find "pam" as a module or policy. Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- enabled/default[489]: Please verify that the configuration exists in /etc/freeradius/3.0$ Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- enabled/default[452]: Errors parsing authenticate section.
Of course there is no "/etc/freeradius/3.0/mods-enabled/pam"
OK, so this is packages from the Debian repository.
Someone had the same problem with Ubuntu 17.10 and FreeRadius 3
I suspect the Debian packages are broken (raise a Debian bug report). Or if they provide a freeradius-pam package then it's not been installed, but I don't think they do. Instructions for building Debian package here: http://wiki.freeradius.org/building/Debian%20and%20Ubuntu or use packages from http://packages.networkradius.com/. -- Matthew
Thank you, there is indeed no freeradius-pam package. The packages.networkradius.com <http://packages.networkradius.com/> repo seems to be broken, at least for the Debian Stretch version. 23. Avr 2018 14:46 de mcn@freeradius.org <mailto:mcn@freeradius.org>:
On Mon, 2018-04-23 at 14:42 +0200, > servernemesis@tutanota.com <mailto:servernemesis@tutanota.com>> wrote:
Mon Apr 23 14:23:59 2018 : Debug: digest Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- enabled/default[489]: Failed to find "pam" as a module or policy. Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- enabled/default[489]: Please verify that the configuration exists in /etc/freeradius/3.0$ Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- enabled/default[452]: Errors parsing authenticate section.
Of course there is no "/etc/freeradius/3.0/mods-enabled/pam"
OK, so this is packages from the Debian repository.
Someone had the same problem with Ubuntu 17.10 and FreeRadius 3
I suspect the Debian packages are broken (raise a Debian bug report). Or if they provide a freeradius-pam package then it's not been installed, but I don't think they do.
Instructions for building Debian package here:
http://wiki.freeradius.org/building/Debian%20and%20Ubuntu <http://wiki.freeradius.org/building/Debian%20and%20Ubuntu>
or use packages from > http://packages.networkradius.com <http://packages.networkradius.com/>> .
-- Matthew
- List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
Hi, are you sure everything got installed correctly ? /etc/freeradius/3.0/mods-available/pam gets shipped by freeradius-config /usr/lib/freradius/rlm_pam.so by freeradius Maybe forgot the symlink from mods-available to mods-enabled by accident ? On Mon, 23 Apr 2018, servernemesis@tutanota.com wrote: > Thank you, there is indeed no freeradius-pam package. > The packages.networkradius.com <http://packages.networkradius.com/> repo seems to be broken, at least for the Debian Stretch version. > > 23. Avr 2018 14:46 de mcn@freeradius.org <mailto:mcn@freeradius.org>: > > >> On Mon, 2018-04-23 at 14:42 +0200, > servernemesis@tutanota.com <mailto:servernemesis@tutanota.com>> wrote: >>> Mon Apr 23 14:23:59 2018 : Debug: digest >>> Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- >>> enabled/default[489]: Failed to find "pam" as a module or policy. >>> Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- >>> enabled/default[489]: Please verify that the configuration exists in >>> /etc/freeradius/3.0$ >>> Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites- >>> enabled/default[452]: Errors parsing authenticate section. >>> >>> Of course there is no "/etc/freeradius/3.0/mods-enabled/pam" >> >> OK, so this is packages from the Debian repository. >> >>> Someone had the same problem with Ubuntu 17.10 and FreeRadius 3 >> >> I suspect the Debian packages are broken (raise a Debian bug report). >> Or if they provide a freeradius-pam package then it's not been >> installed, but I don't think they do. >> >> Instructions for building Debian package here: >> >> http://wiki.freeradius.org/building/Debian%20and%20Ubuntu <http://wiki.freeradius.org/building/Debian%20and%20Ubuntu> >> >> or use packages from > http://packages.networkradius.com <http://packages.networkradius.com/>> . >> >> -- >> Matthew >> >> - >> List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html> > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
what is output of find /etc/freeradius -type f -iname '*pam*' -print ? Eero ma 23. huhtik. 2018 klo 15.18 <servernemesis@tutanota.com> kirjoitti:
Hello,
I just installed FreeRadius 3.0.12 on Stretch in order to provide a Google Authenticator gateway ( https://www.techdrabble.com/citrix/14-2factor-with-google-authenticator-and-... < https://www.techdrabble.com/citrix/14-2factor-with-google-authenticator-and-netscaler>), but I'm unable to start the FreeRadius service, here is the debug log :
Mon Apr 23 14:23:59 2018 : Debug: # Loading session {...} Mon Apr 23 14:23:59 2018 : Debug: radutmp Mon Apr 23 14:23:59 2018 : Debug: # Loading post-proxy {...} Mon Apr 23 14:23:59 2018 : Debug: eap Mon Apr 23 14:23:59 2018 : Debug: # Loading post-auth {...} Mon Apr 23 14:23:59 2018 : Debug: } # server inner-tunnel Mon Apr 23 14:23:59 2018 : Debug: server default { # from file /etc/freeradius/3.0/sites-enabled/default Mon Apr 23 14:23:59 2018 : Debug: # Loading authenticate {...} Mon Apr 23 14:23:59 2018 : Debug: mschap Mon Apr 23 14:23:59 2018 : Debug: digest Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[489]: Failed to find "pam" as a module or policy. Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[489]: Please verify that the configuration exists in /etc/freeradius/3.0$ Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[452]: Errors parsing authenticate section.
Of course there is no "/etc/freeradius/3.0/mods-enabled/pam"
Someone had the same problem with Ubuntu 17.10 and FreeRadius 3 before reverting to an older version ( https://enterpriseadmins.org/blog/virtualization/build-your-own-two-factor-a... < https://enterpriseadmins.org/blog/virtualization/build-your-own-two-factor-a...
)
Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
@Eero : /etc/freeradius/mods-available/pam I just reinstalled it by building the packages (https://wiki.freeradius.org/building/Debian%20and%20Ubuntu <https://wiki.freeradius.org/building/Debian%20and%20Ubuntu>) but same problem :/ 23. Avr 2018 17:02 de eero.volotinen@iki.fi <mailto:eero.volotinen@iki.fi>:
what is output of find /etc/freeradius -type f -iname '*pam*' -print ?
Eero
ma 23. huhtik. 2018 klo 15.18 <> servernemesis@tutanota.com <mailto:servernemesis@tutanota.com>> > kirjoitti:
Hello,
I just installed FreeRadius 3.0.12 on Stretch in order to provide a Google Authenticator gateway ( https://www.techdrabble.com/citrix/14-2factor-with-google-authenticator-and-... <https://www.techdrabble.com/citrix/14-2factor-with-google-authenticator-and-netscaler> < https://www.techdrabble.com/citrix/14-2factor-with-google-authenticator-and-... <https://www.techdrabble.com/citrix/14-2factor-with-google-authenticator-and-netscaler>>> >), but I'm unable to start the FreeRadius service, here is the debug log :
Mon Apr 23 14:23:59 2018 : Debug: # Loading session {...} Mon Apr 23 14:23:59 2018 : Debug: radutmp Mon Apr 23 14:23:59 2018 : Debug: # Loading post-proxy {...} Mon Apr 23 14:23:59 2018 : Debug: eap Mon Apr 23 14:23:59 2018 : Debug: # Loading post-auth {...} Mon Apr 23 14:23:59 2018 : Debug: } # server inner-tunnel Mon Apr 23 14:23:59 2018 : Debug: server default { # from file /etc/freeradius/3.0/sites-enabled/default Mon Apr 23 14:23:59 2018 : Debug: # Loading authenticate {...} Mon Apr 23 14:23:59 2018 : Debug: mschap Mon Apr 23 14:23:59 2018 : Debug: digest Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[489]: Failed to find "pam" as a module or policy. Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[489]: Please verify that the configuration exists in /etc/freeradius/3.0$ Mon Apr 23 14:23:59 2018 : Error: /etc/freeradius/3.0/sites-enabled/default[452]: Errors parsing authenticate section.
Of course there is no "/etc/freeradius/3.0/mods-enabled/pam"
Someone had the same problem with Ubuntu 17.10 and FreeRadius 3 before reverting to an older version ( https://enterpriseadmins.org/blog/virtualization/build-your-own-two-factor-a... <https://enterpriseadmins.org/blog/virtualization/build-your-own-two-factor-authentication-server/> < https://enterpriseadmins.org/blog/virtualization/build-your-own-two-factor-a... <https://enterpriseadmins.org/blog/virtualization/build-your-own-two-factor-authentication-server/>
)
Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
- List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html <http://www.freeradius.org/list/users.html>
You need to link that file under mods-enabled to enable pam support and
then restart freeradius
Eero
On Mon, Apr 23, 2018 at 6:54 PM, <servernemesis@tutanota.com> wrote:
> @Eero : /etc/freeradius/mods-available/pam
>
> I just reinstalled it by building the packages (
> https://wiki.freeradius.org/building/Debian%20and%20Ubuntu <
> https://wiki.freeradius.org/building/Debian%20and%20Ubuntu>) but same
> problem :/
>
>
> 23. Avr 2018 17:02 de eero.volotinen@iki.fi <mailto:eero.volotinen@iki.fi>
> :
>
>
> > what is output of find /etc/freeradius -type f -iname '*pam*' -print ?
> >
> > Eero
> >
> > ma 23. huhtik. 2018 klo 15.18 <> servernemesis@tutanota.com <mailto:
> servernemesis@tutanota.com>> > kirjoitti:
> >
> >>
> >> Hello,
> >>
> >>
> >>
> >>
> >> I just installed FreeRadius 3.0.12 on Stretch in order to provide a
> Google
> >> Authenticator gateway (
> >> https://www.techdrabble.com/citrix/14-2factor-with-google-
> authenticator-and-netscaler <https://www.techdrabble.com/
> citrix/14-2factor-with-google-authenticator-and-netscaler>
> >> <
> >> https://www.techdrabble.com/citrix/14-2factor-with-google-
> authenticator-and-netscaler <https://www.techdrabble.com/
> citrix/14-2factor-with-google-authenticator-and-netscaler>>> >),
> >> but I'm unable to start the FreeRadius service, here is the debug log :
> >>
> >>
> >>
> >>
> >> Mon Apr 23 14:23:59 2018 : Debug: # Loading session {...}
> >> Mon Apr 23 14:23:59 2018 : Debug: radutmp
> >> Mon Apr 23 14:23:59 2018 : Debug: # Loading post-proxy {...}
> >> Mon Apr 23 14:23:59 2018 : Debug: eap
> >> Mon Apr 23 14:23:59 2018 : Debug: # Loading post-auth {...}
> >> Mon Apr 23 14:23:59 2018 : Debug: } # server inner-tunnel
> >> Mon Apr 23 14:23:59 2018 : Debug: server default { # from file
> >> /etc/freeradius/3.0/sites-enabled/default
> >> Mon Apr 23 14:23:59 2018 : Debug: # Loading authenticate {...}
> >> Mon Apr 23 14:23:59 2018 : Debug: mschap
> >> Mon Apr 23 14:23:59 2018 : Debug: digest
> >> Mon Apr 23 14:23:59 2018 : Error:
> >> /etc/freeradius/3.0/sites-enabled/default[489]: Failed to find "pam"
> as a
> >> module or policy.
> >> Mon Apr 23 14:23:59 2018 : Error:
> >> /etc/freeradius/3.0/sites-enabled/default[489]: Please verify that the
> >> configuration exists in /etc/freeradius/3.0$
> >> Mon Apr 23 14:23:59 2018 : Error:
> >> /etc/freeradius/3.0/sites-enabled/default[452]: Errors parsing
> authenticate
> >> section.
> >>
> >>
> >>
> >> Of course there is no "/etc/freeradius/3.0/mods-enabled/pam"
> >>
> >>
> >>
> >>
> >> Someone had the same problem with Ubuntu 17.10 and FreeRadius 3 before
> >> reverting to an older version (
> >> https://enterpriseadmins.org/blog/virtualization/build-
> your-own-two-factor-authentication-server <https://enterpriseadmins.org/
> blog/virtualization/build-your-own-two-factor-authentication-server/>
> >> <
> >> https://enterpriseadmins.org/blog/virtualization/build-
> your-own-two-factor-authentication-server <https://enterpriseadmins.org/
> blog/virtualization/build-your-own-two-factor-authentication-server/>
> >> >)
> >>
> >>
> >>
> >>
> >> Regards
> >> -
> >> List info/subscribe/unsubscribe? See
> >> http://www.freeradius.org/list/users.html <http://www.freeradius.org/
> list/users.html>
> > -
> > List info/subscribe/unsubscribe? See > http://www.freeradius.org/
> list/users.html <http://www.freeradius.org/list/users.html>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
so, run something like ln -sf source target on root
ex: ln -sf /etc/freeradius/mods-available/pam /etc/freeradius/mods-
enabled/pam
On Mon, Apr 23, 2018 at 9:01 PM, Eero Volotinen <eero.volotinen@iki.fi>
wrote:
> You need to link that file under mods-enabled to enable pam support and
> then restart freeradius
>
> Eero
>
> On Mon, Apr 23, 2018 at 6:54 PM, <servernemesis@tutanota.com> wrote:
>
>> @Eero : /etc/freeradius/mods-available/pam
>>
>> I just reinstalled it by building the packages (
>> https://wiki.freeradius.org/building/Debian%20and%20Ubuntu <
>> https://wiki.freeradius.org/building/Debian%20and%20Ubuntu>) but same
>> problem :/
>>
>>
>> 23. Avr 2018 17:02 de eero.volotinen@iki.fi <mailto:eero.volotinen@iki.fi
>> >:
>>
>>
>> > what is output of find /etc/freeradius -type f -iname '*pam*' -print ?
>> >
>> > Eero
>> >
>> > ma 23. huhtik. 2018 klo 15.18 <> servernemesis@tutanota.com <mailto:
>> servernemesis@tutanota.com>> > kirjoitti:
>> >
>> >>
>> >> Hello,
>> >>
>> >>
>> >>
>> >>
>> >> I just installed FreeRadius 3.0.12 on Stretch in order to provide a
>> Google
>> >> Authenticator gateway (
>> >> https://www.techdrabble.com/citrix/14-2factor-with-google-au
>> thenticator-and-netscaler <https://www.techdrabble.com/c
>> itrix/14-2factor-with-google-authenticator-and-netscaler>
>> >> <
>> >> https://www.techdrabble.com/citrix/14-2factor-with-google-au
>> thenticator-and-netscaler <https://www.techdrabble.com/c
>> itrix/14-2factor-with-google-authenticator-and-netscaler>>> >),
>> >> but I'm unable to start the FreeRadius service, here is the debug log :
>> >>
>> >>
>> >>
>> >>
>> >> Mon Apr 23 14:23:59 2018 : Debug: # Loading session {...}
>> >> Mon Apr 23 14:23:59 2018 : Debug: radutmp
>> >> Mon Apr 23 14:23:59 2018 : Debug: # Loading post-proxy {...}
>> >> Mon Apr 23 14:23:59 2018 : Debug: eap
>> >> Mon Apr 23 14:23:59 2018 : Debug: # Loading post-auth {...}
>> >> Mon Apr 23 14:23:59 2018 : Debug: } # server inner-tunnel
>> >> Mon Apr 23 14:23:59 2018 : Debug: server default { # from file
>> >> /etc/freeradius/3.0/sites-enabled/default
>> >> Mon Apr 23 14:23:59 2018 : Debug: # Loading authenticate {...}
>> >> Mon Apr 23 14:23:59 2018 : Debug: mschap
>> >> Mon Apr 23 14:23:59 2018 : Debug: digest
>> >> Mon Apr 23 14:23:59 2018 : Error:
>> >> /etc/freeradius/3.0/sites-enabled/default[489]: Failed to find "pam"
>> as a
>> >> module or policy.
>> >> Mon Apr 23 14:23:59 2018 : Error:
>> >> /etc/freeradius/3.0/sites-enabled/default[489]: Please verify that the
>> >> configuration exists in /etc/freeradius/3.0$
>> >> Mon Apr 23 14:23:59 2018 : Error:
>> >> /etc/freeradius/3.0/sites-enabled/default[452]: Errors parsing
>> authenticate
>> >> section.
>> >>
>> >>
>> >>
>> >> Of course there is no "/etc/freeradius/3.0/mods-enabled/pam"
>> >>
>> >>
>> >>
>> >>
>> >> Someone had the same problem with Ubuntu 17.10 and FreeRadius 3 before
>> >> reverting to an older version (
>> >> https://enterpriseadmins.org/blog/virtualization/build-your-
>> own-two-factor-authentication-server <https://enterpriseadmins.org/
>> blog/virtualization/build-your-own-two-factor-authentication-server/>
>> >> <
>> >> https://enterpriseadmins.org/blog/virtualization/build-your-
>> own-two-factor-authentication-server <https://enterpriseadmins.org/
>> blog/virtualization/build-your-own-two-factor-authentication-server/>
>> >> >)
>> >>
>> >>
>> >>
>> >>
>> >> Regards
>> >> -
>> >> List info/subscribe/unsubscribe? See
>> >> http://www.freeradius.org/list/users.html <
>> http://www.freeradius.org/list/users.html>
>> > -
>> > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list
>> /users.html <http://www.freeradius.org/list/users.html>
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list
>> /users.html
>>
>
>
participants (4)
-
Eero Volotinen -
Matthew Newton -
servernemesis＠tutanota.com -
Tommy Scheunemann