Inheritance of eap.conf settings
Hi list, I'm neatening up my sprawling FreeRADIUS config and I've noticed something strange. Nothing uses the default eap.conf (and the default virtual server is disabled) but my understanding is that instantiations of the eap module, called like: eap eduroameap {} ... should inherit settings from eap.conf. In my eap.conf I've set: dh_file = /etc/raddb/certs/dh random_file = /dev/urandom And in my numerous EAP modules for various virtual servers, I've removed dh_file and random_file. Nothing complained about random_file being missing but apparently the dh_file being missing is an issue: rlm_eap_tls: Unable to open DH file - (null) rlm_eap: Failed to initialize type tls /etc/raddb/modules/rainboweap[17]: Instantiation failed for module "rainboweap" /etc/raddb/sites-enabled/rainbow-inner[17]: Failed to find "rainboweap" in the "modules" section. /etc/raddb/sites-enabled/rainbow-inner[13]: Errors parsing authenticate section. How come random_file was inherited while dh_file wasn't? Or have I misunderstood how this works, inerheritance doesn't exist, and it's just that random_file has a default value if undefined while dh_file doesn't? Thanks, Jonathan
On 12/02/14 16:07, Jonathan Gazeley wrote:
How come random_file was inherited while dh_file wasn't? Or have I misunderstood how this works, inerheritance doesn't exist, and it's just that random_file has a default value if undefined while dh_file doesn't?
The latter. There is no inheritance. There are "template" objects; look in the default configs for an example.
On 12 Feb 2014, at 16:07, Jonathan Gazeley <jonathan.gazeley@bristol.ac.uk> wrote:
Hi list,
I'm neatening up my sprawling FreeRADIUS config and I've noticed something strange.
Nothing uses the default eap.conf (and the default virtual server is disabled) but my understanding is that instantiations of the eap module, called like:
eap eduroameap {}
... should inherit settings from eap.conf. In my eap.conf I've set:
Nope. Not at all.
dh_file = /etc/raddb/certs/dh random_file = /dev/urandom
And in my numerous EAP modules for various virtual servers, I've removed dh_file and random_file. Nothing complained about random_file being missing but apparently the dh_file being missing is an issue:
rlm_eap_tls: Unable to open DH file - (null) rlm_eap: Failed to initialize type tls /etc/raddb/modules/rainboweap[17]: Instantiation failed for module "rainboweap" /etc/raddb/sites-enabled/rainbow-inner[17]: Failed to find "rainboweap" in the "modules" section. /etc/raddb/sites-enabled/rainbow-inner[13]: Errors parsing authenticate section.
Yes, fixed that already.
How come random_file was inherited while dh_file wasn't? Or have I misunderstood how this works,
You have.
inerheritance doesn't exist, and it's just that random_file has a default value if undefined while dh_file doesn't?
Yep. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Jonathan Gazeley wrote:
Hi list,
I'm neatening up my sprawling FreeRADIUS config and I've noticed something strange.
Nothing uses the default eap.conf (and the default virtual server is disabled) but my understanding is that instantiations of the eap module, called like:
eap eduroameap {}
... should inherit settings from eap.conf.
No. Nothing is inherited. The server has *defaults*, but those defaults are compiled into the server.
And in my numerous EAP modules for various virtual servers, I've removed dh_file and random_file. Nothing complained about random_file being missing but apparently the dh_file being missing is an issue:
Yes.
How come random_file was inherited while dh_file wasn't?
random_file has a default, and dh_file doesn't.
Or have I misunderstood how this works, inerheritance doesn't exist, and it's just that random_file has a default value if undefined while dh_file doesn't?
Yes. Alan DeKok.
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Jonathan Gazeley -
Phil Mayers