rlm_counter: Failed to open file /etc/raddb/db.daily: Permission denied
Any idea how to fix this? Wed Nov 12 21:29:16 2008 : Error: rlm_counter: Failed to open file /etc/raddb/db.daily: Permission denied Wed Nov 12 21:29:16 2008 : Error: /etc/raddb/radiusd.conf[152]: Instantiation failed for module "daily" Wed Nov 12 21:29:16 2008 : Error: Errors initializing modules This is an rpmbuild on Centos 5.2 radiusd: FreeRADIUS Version 2.1.1, for host i686-redhat-linux-gnu, built on Nov 11 2008 at 10:29:34 /etc drwxrwxr-x 7 root radiusd 4096 Nov 12 21:29 raddb /etc/raddb -rw------- 1 radiusd radiusd 12312 Nov 12 21:29 db.daily This works: # /usr/sbin/radiusd -X This works: # strace /usr/sbin/radiusd This does not work: # service radiusd start Starting RADIUS server: [FAILED] This does not work: counter daily { filename = ${raddbdir}/db.daily . . . This does not work: counter daily { filename = /tmp/db.daily . . . -Ted- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Ted Lum wrote:
Any idea how to fix this?
Don't edit the default configuration files to break them. The default configuration files have the server running as root. You've changed that to a user who does NOT have permission to read the configuration files.
Wed Nov 12 21:29:16 2008 : Error: rlm_counter: Failed to open file /etc/raddb/db.daily: Permission denied ... /etc/raddb -rw------- 1 radiusd radiusd 12312 Nov 12 21:29 db.daily
The server isn't running as user "radiusd/radiusd". Fix that.
This works: # /usr/sbin/radiusd -X
Becuse you're running it as root.
This works: # strace /usr/sbin/radiusd
Because you're running it as root.
This does not work: # service radiusd start Starting RADIUS server: [FAILED]
Because it changes UID's, and does not run as root. Alan DeKok.
The default user and group have not been modified. The server DOES NOT run as root. It always starts as root, but changes its self. ...from radiusd.conf # We STRONGLY recommend that you run the server with as few permissions # as possible. That is, if you're not using shadow passwords, the # user and group items below should be set to radius'. They are: user = radiusd group = radiusd In fact, the db.daily file was created by the application and this is the sole reason for the file's ownership being what it is. In addition I have moved the location to /tmp where everyone has permission and it still fails. This is a ps after "service start radiusd": UID PID PPID C STIME TTY TIME CMD radiusd 6909 1 0 Nov12 ? 00:00:00 /usr/sbin/radiusd This is a ps after "/usr/sbin/radiusd -X": UID PID PPID C STIME TTY TIME CMD radiusd 6998 6933 5 15:48 pts/0 00:00:00 /usr/sbin/radiusd -X This is a ps after "strace /usr/sbin/radiusd": UID PID PPID C STIME TTY TIME CMD radiusd 7004 1 0 15:50 ? 00:00:00 /usr/sbin/radiusd In all cases its running as radiusd. So, any more ideas on how to fix this? -Ted- Alan DeKok wrote:
Ted Lum wrote:
Any idea how to fix this?
Don't edit the default configuration files to break them.
The default configuration files have the server running as root. You've changed that to a user who does NOT have permission to read the configuration files.
Wed Nov 12 21:29:16 2008 : Error: rlm_counter: Failed to open file /etc/raddb/db.daily: Permission denied
...
/etc/raddb -rw------- 1 radiusd radiusd 12312 Nov 12 21:29 db.daily
The server isn't running as user "radiusd/radiusd". Fix that.
This works: # /usr/sbin/radiusd -X
Becuse you're running it as root.
This works: # strace /usr/sbin/radiusd
Because you're running it as root.
This does not work: # service radiusd start Starting RADIUS server: [FAILED]
Because it changes UID's, and does not run as root.
Alan DeKok.
-- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
participants (2)
-
Alan DeKok -
Ted Lum