unable to write 'random state' when starting freeradius
Has anyone come across this error? This happens when I start freeradius for the first time. Platform: RedHat ES 4.0 Version: FreeRadius 2.1.1 I have highlighted the message in read. It doesn't matter if I run this command as root. Thanks for you help. AM sudo ./radiusd -XXXX Fri Oct 3 14:34:04 2008 : Info: FreeRADIUS Version 2.1.1, for host i686-pc-linux-gnu, built on Oct 3 2008 at 14:30:11 Fri Oct 3 14:34:04 2008 : Info: Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. Fri Oct 3 14:34:04 2008 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Fri Oct 3 14:34:04 2008 : Info: PARTICULAR PURPOSE. Fri Oct 3 14:34:04 2008 : Info: You may redistribute copies of FreeRADIUS under the terms of the Fri Oct 3 14:34:04 2008 : Info: GNU General Public License v2. Fri Oct 3 14:34:04 2008 : Info: Starting - reading configuration files ... Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/radiusd.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/proxy.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/clients.conf Fri Oct 3 14:34:04 2008 : Debug: including files in directory /usr/local/freeradius-2.1.1/etc/raddb/modules/ Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/attr_filter Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/always Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/expiration Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/digest Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/echo Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/exec Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/detail.log Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/sradutmp Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/wimax Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/checkval Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/acct_unique Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/preprocess Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/linelog Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/mac2vlan Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/counter Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/etc_group Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/ippool Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/radutmp Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/pap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/krb5 Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/mac2ip Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/detail.example.com Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/ldap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/files Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/passwd Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/inner-eap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/mschap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/expr Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/detail Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/attr_rewrite Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/unix Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/smbpasswd Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/chap Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/pam Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/realm Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/sql_log Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/policy Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/modules/logintime Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/eap.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sql.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sql/mysql/dialup.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sql/mysql/counter.conf Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/policy.conf Fri Oct 3 14:34:04 2008 : Debug: including files in directory /usr/local/freeradius-2.1.1/etc/raddb/sites-enabled/ Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sites-enabled/default Fri Oct 3 14:34:04 2008 : Debug: including configuration file /usr/local/freeradius-2.1.1/etc/raddb/sites-enabled/inner-tunnel Fri Oct 3 14:34:04 2008 : Debug: including dictionary file /usr/local/freeradius-2.1.1/etc/raddb/dictionary Fri Oct 3 14:34:05 2008 : Debug: main { Fri Oct 3 14:34:05 2008 : Debug: prefix = "/usr/local/freeradius-2.1.1" Fri Oct 3 14:34:05 2008 : Debug: localstatedir = "/usr/local/freeradius-2.1.1/var" Fri Oct 3 14:34:05 2008 : Debug: logdir = "/usr/local/freeradius-2.1.1/var/log/radius" Fri Oct 3 14:34:05 2008 : Debug: libdir = "/usr/local/freeradius-2.1.1/lib" Fri Oct 3 14:34:05 2008 : Debug: radacctdir = "/usr/local/freeradius-2.1.1/var/log/radius/radacct" Fri Oct 3 14:34:05 2008 : Debug: hostname_lookups = no Fri Oct 3 14:34:05 2008 : Debug: max_request_time = 30 Fri Oct 3 14:34:05 2008 : Debug: cleanup_delay = 5 Fri Oct 3 14:34:05 2008 : Debug: max_requests = 1024 Fri Oct 3 14:34:05 2008 : Debug: allow_core_dumps = no Fri Oct 3 14:34:05 2008 : Debug: pidfile = "/usr/local/freeradius-2.1.1/var/run/radiusd/radiusd.pid" Fri Oct 3 14:34:05 2008 : Debug: checkrad = "/usr/local/freeradius-2.1.1/sbin/checkrad" Fri Oct 3 14:34:05 2008 : Debug: debug_level = 0 Fri Oct 3 14:34:05 2008 : Debug: proxy_requests = yes Fri Oct 3 14:34:05 2008 : Debug: log { Fri Oct 3 14:34:05 2008 : Debug: stripped_names = no Fri Oct 3 14:34:05 2008 : Debug: auth = no Fri Oct 3 14:34:05 2008 : Debug: auth_badpass = no Fri Oct 3 14:34:05 2008 : Debug: auth_goodpass = no Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: security { Fri Oct 3 14:34:05 2008 : Debug: max_attributes = 200 Fri Oct 3 14:34:05 2008 : Debug: reject_delay = 1 Fri Oct 3 14:34:05 2008 : Debug: status_server = yes Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: client localhost { Fri Oct 3 14:34:05 2008 : Debug: ipaddr = 127.0.0.1 Fri Oct 3 14:34:05 2008 : Debug: require_message_authenticator = no Fri Oct 3 14:34:05 2008 : Debug: secret = "testing123" Fri Oct 3 14:34:05 2008 : Debug: nastype = "other" Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: radiusd: #### Loading Realms and Home Servers #### Fri Oct 3 14:34:05 2008 : Debug: proxy server { Fri Oct 3 14:34:05 2008 : Debug: retry_delay = 5 Fri Oct 3 14:34:05 2008 : Debug: retry_count = 3 Fri Oct 3 14:34:05 2008 : Debug: default_fallback = no Fri Oct 3 14:34:05 2008 : Debug: dead_time = 120 Fri Oct 3 14:34:05 2008 : Debug: wake_all_if_all_dead = no Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: home_server localhost { Fri Oct 3 14:34:05 2008 : Debug: ipaddr = 127.0.0.1 Fri Oct 3 14:34:05 2008 : Debug: port = 1812 Fri Oct 3 14:34:05 2008 : Debug: type = "auth" Fri Oct 3 14:34:05 2008 : Debug: secret = "testing123" Fri Oct 3 14:34:05 2008 : Debug: response_window = 20 Fri Oct 3 14:34:05 2008 : Debug: max_outstanding = 65536 Fri Oct 3 14:34:05 2008 : Debug: zombie_period = 40 Fri Oct 3 14:34:05 2008 : Debug: status_check = "status-server" Fri Oct 3 14:34:05 2008 : Debug: ping_interval = 30 Fri Oct 3 14:34:05 2008 : Debug: check_interval = 30 Fri Oct 3 14:34:05 2008 : Debug: num_answers_to_alive = 3 Fri Oct 3 14:34:05 2008 : Debug: num_pings_to_alive = 3 Fri Oct 3 14:34:05 2008 : Debug: revive_interval = 120 Fri Oct 3 14:34:05 2008 : Debug: status_check_timeout = 4 Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: home_server_pool my_auth_failover { Fri Oct 3 14:34:05 2008 : Debug: type = fail-over Fri Oct 3 14:34:05 2008 : Debug: home_server = localhost Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: realm example.com { Fri Oct 3 14:34:05 2008 : Debug: auth_pool = my_auth_failover Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: realm LOCAL { Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: radiusd: #### Instantiating modules #### Fri Oct 3 14:34:05 2008 : Debug: instantiate { Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_exec, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_exec Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating exec Fri Oct 3 14:34:05 2008 : Debug: exec { Fri Oct 3 14:34:05 2008 : Debug: wait = no Fri Oct 3 14:34:05 2008 : Debug: input_pairs = "request" Fri Oct 3 14:34:05 2008 : Debug: shell_escape = yes Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_expr, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_expr Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating expr Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_expiration, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_expiration Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating expiration Fri Oct 3 14:34:05 2008 : Debug: expiration { Fri Oct 3 14:34:05 2008 : Debug: reply-message = "Password Has Expired " Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_logintime, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_logintime Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating logintime Fri Oct 3 14:34:05 2008 : Debug: logintime { Fri Oct 3 14:34:05 2008 : Debug: reply-message = "You are calling outside your allowed timespan " Fri Oct 3 14:34:05 2008 : Debug: minimum-timeout = 60 Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: radiusd: #### Loading Virtual Servers #### Fri Oct 3 14:34:05 2008 : Debug: server inner-tunnel { Fri Oct 3 14:34:05 2008 : Debug: modules { Fri Oct 3 14:34:05 2008 : Debug: Module: Checking authenticate {...} for more modules to load Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_pap, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_pap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating pap Fri Oct 3 14:34:05 2008 : Debug: pap { Fri Oct 3 14:34:05 2008 : Debug: encryption_scheme = "auto" Fri Oct 3 14:34:05 2008 : Debug: auto_header = no Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_chap, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_chap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating chap Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_mschap, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_mschap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating mschap Fri Oct 3 14:34:05 2008 : Debug: mschap { Fri Oct 3 14:34:05 2008 : Debug: use_mppe = yes Fri Oct 3 14:34:05 2008 : Debug: require_encryption = no Fri Oct 3 14:34:05 2008 : Debug: require_strong = no Fri Oct 3 14:34:05 2008 : Debug: with_ntdomain_hack = no Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_unix, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_unix Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating unix Fri Oct 3 14:34:05 2008 : Debug: unix { Fri Oct 3 14:34:05 2008 : Debug: radwtmp = "/usr/local/freeradius-2.1.1/var/log/radius/radwtmp" Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: (Loaded rlm_eap, checking if it's valid) Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to module rlm_eap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap Fri Oct 3 14:34:05 2008 : Debug: eap { Fri Oct 3 14:34:05 2008 : Debug: default_eap_type = "md5" Fri Oct 3 14:34:05 2008 : Debug: timer_expire = 60 Fri Oct 3 14:34:05 2008 : Debug: ignore_unknown_eap_types = no Fri Oct 3 14:34:05 2008 : Debug: cisco_accounting_username_bug = no Fri Oct 3 14:34:05 2008 : Debug: max_sessions = 2048 Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to sub-module rlm_eap_md5 Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap-md5 Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to sub-module rlm_eap_leap Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap-leap Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to sub-module rlm_eap_gtc Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap-gtc Fri Oct 3 14:34:05 2008 : Debug: gtc { Fri Oct 3 14:34:05 2008 : Debug: challenge = "Password: " Fri Oct 3 14:34:05 2008 : Debug: auth_type = "PAP" Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: Module: Linked to sub-module rlm_eap_tls Fri Oct 3 14:34:05 2008 : Debug: Module: Instantiating eap-tls Fri Oct 3 14:34:05 2008 : Debug: tls { Fri Oct 3 14:34:05 2008 : Debug: rsa_key_exchange = no Fri Oct 3 14:34:05 2008 : Debug: dh_key_exchange = yes Fri Oct 3 14:34:05 2008 : Debug: rsa_key_length = 512 Fri Oct 3 14:34:05 2008 : Debug: dh_key_length = 512 Fri Oct 3 14:34:05 2008 : Debug: verify_depth = 0 Fri Oct 3 14:34:05 2008 : Debug: pem_file_type = yes Fri Oct 3 14:34:05 2008 : Debug: private_key_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/server.pem" Fri Oct 3 14:34:05 2008 : Debug: certificate_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/server.pem" Fri Oct 3 14:34:05 2008 : Debug: CA_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/ca.pem" Fri Oct 3 14:34:05 2008 : Debug: private_key_password = "whatever" Fri Oct 3 14:34:05 2008 : Debug: dh_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/dh" Fri Oct 3 14:34:05 2008 : Debug: random_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/random" Fri Oct 3 14:34:05 2008 : Debug: fragment_size = 1024 Fri Oct 3 14:34:05 2008 : Debug: include_length = yes Fri Oct 3 14:34:05 2008 : Debug: check_crl = no Fri Oct 3 14:34:05 2008 : Debug: cipher_list = "DEFAULT" Fri Oct 3 14:34:05 2008 : Debug: make_cert_command = "/usr/local/freeradius-2.1.1/etc/raddb/certs/bootstrap" Fri Oct 3 14:34:05 2008 : Debug: cache { Fri Oct 3 14:34:05 2008 : Debug: enable = no Fri Oct 3 14:34:05 2008 : Debug: lifetime = 24 Fri Oct 3 14:34:05 2008 : Debug: max_entries = 255 Fri Oct 3 14:34:05 2008 : Debug: } Fri Oct 3 14:34:05 2008 : Debug: } Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time ..............................+....................+..............+....+....................................................................+.......................................................................... ...................................+..................................................................................+.......+.......................................................................+................. ..............+.....+..+.................+...............................+......+..................................................................................................................................+.. .........................................+.......+.....................................................+...............+............................................................................................. ..................+.........+.............+...................................+...+.......+......+.............+......................+.....................+......+.+.......................................... .............+.........................................+......................+..............+...........................+............................................................................................. ............................................................................................................................+.............................................................+............................... ...................................................................................................................................................................................................+....................... ............+...+.................................................................+ +........................+......................................................++*++*++* *unable to write 'random state' Generating a 2048 bit RSA private key* ....................................+++ ....................+++ *unable to write 'random state' writing new private key to 'server.key'* ----- Generating a 2048 bit RSA private key ..............+++ .*+++ unable to write 'random state' writing new private key to 'ca.key'* ----- Using configuration from ./server.cnf Check that the request matches the signature Signature ok Certificate Details: Serial Number: 1 (0x1) Validity Not Before: Oct 3 18:34:45 2008 GMT Not After : Oct 3 18:34:45 2009 GMT Subject: countryName = FR stateOrProvinceName = Radius organizationName = Example Inc. commonName = Example Server Certificate emailAddress = admin@example.com X509v3 extensions: X509v3 Extended Key Usage: TLS Web Server Authentication Certificate is to be certified until Oct 3 18:34:45 2009 GMT (365 days) *Write out database with 1 new entries Data Base Updated unable to write 'random state' unable to write 'random state'* MAC verified OK Fri Oct 3 14:34:45 2008 : Debug: Exec-Program output: openssl dhparam -out dh 1024 openssl req -new -out server.csr -keyout server.key -config ./server.cnf openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf openssl pkcs12 -export -in server.crt -inkey server.key -out server.p12 -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl pkcs12 -in server.p12 -out server.pem -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl x509 -inform PEM -outform DER -in ca.pem -out ca.der Fri Oct 3 14:34:45 2008 : Debug: Exec-Program-Wait: plaintext: openssl dhparam -out dh 1024 openssl req -new -out server.csr -keyout server.key -config ./server.cnf openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf openssl ca -batch -keyfile ca.key -cert ca.pem -in server.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out server.crt -extensions xpserver_ext -extfile xpextensions -config ./server.cnf openssl pkcs12 -export -in server.crt -inkey server.key -out server.p12 -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl pkcs12 -in server.p12 -out server.pem -passin pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -passout pass:`grep output_password server.cnf | sed 's/.*=//;s/^ *//'` openssl x509 -inform PEM -outform DER -in ca.pem -out ca.der Fri Oct 3 14:34:45 2008 : Debug: Exec-Program: returned: 0 Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to sub-module rlm_eap_ttls Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating eap-ttls Fri Oct 3 14:34:45 2008 : Debug: ttls { Fri Oct 3 14:34:45 2008 : Debug: default_eap_type = "md5" Fri Oct 3 14:34:45 2008 : Debug: copy_request_to_tunnel = no Fri Oct 3 14:34:45 2008 : Debug: use_tunneled_reply = no Fri Oct 3 14:34:45 2008 : Debug: virtual_server = "inner-tunnel" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to sub-module rlm_eap_peap Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating eap-peap Fri Oct 3 14:34:45 2008 : Debug: peap { Fri Oct 3 14:34:45 2008 : Debug: default_eap_type = "mschapv2" Fri Oct 3 14:34:45 2008 : Debug: copy_request_to_tunnel = no Fri Oct 3 14:34:45 2008 : Debug: use_tunneled_reply = no Fri Oct 3 14:34:45 2008 : Debug: proxy_tunneled_request_as_eap = yes Fri Oct 3 14:34:45 2008 : Debug: virtual_server = "inner-tunnel" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating eap-mschapv2 Fri Oct 3 14:34:45 2008 : Debug: mschapv2 { Fri Oct 3 14:34:45 2008 : Debug: with_ntdomain_hack = no Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking authorize {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_realm, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_realm Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating suffix Fri Oct 3 14:34:45 2008 : Debug: realm suffix { Fri Oct 3 14:34:45 2008 : Debug: format = "suffix" Fri Oct 3 14:34:45 2008 : Debug: delimiter = "@" Fri Oct 3 14:34:45 2008 : Debug: ignore_default = no Fri Oct 3 14:34:45 2008 : Debug: ignore_null = no Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_files, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_files Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating files Fri Oct 3 14:34:45 2008 : Debug: files { Fri Oct 3 14:34:45 2008 : Debug: usersfile = "/usr/local/freeradius-2.1.1/etc/raddb/users" Fri Oct 3 14:34:45 2008 : Debug: acctusersfile = "/usr/local/freeradius-2.1.1/etc/raddb/acct_users" Fri Oct 3 14:34:45 2008 : Debug: preproxy_usersfile = "/usr/local/freeradius-2.1.1/etc/raddb/preproxy_users" Fri Oct 3 14:34:45 2008 : Debug: compat = "no" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking session {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_radutmp, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_radutmp Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating radutmp Fri Oct 3 14:34:45 2008 : Debug: radutmp { Fri Oct 3 14:34:45 2008 : Debug: filename = "/usr/local/freeradius-2.1.1/var/log/radius/radutmp" Fri Oct 3 14:34:45 2008 : Debug: username = "%{User-Name}" Fri Oct 3 14:34:45 2008 : Debug: case_sensitive = yes Fri Oct 3 14:34:45 2008 : Debug: check_with_nas = yes Fri Oct 3 14:34:45 2008 : Debug: perm = 384 Fri Oct 3 14:34:45 2008 : Debug: callerid = yes Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking post-proxy {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: Module: Checking post-auth {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_attr_filter Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating attr_filter.access_reject Fri Oct 3 14:34:45 2008 : Debug: attr_filter attr_filter.access_reject { Fri Oct 3 14:34:45 2008 : Debug: attrsfile = "/usr/local/freeradius-2.1.1/etc/raddb/attrs.access_reject" Fri Oct 3 14:34:45 2008 : Debug: key = "%{User-Name}" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: modules { Fri Oct 3 14:34:45 2008 : Debug: Module: Checking authenticate {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: Module: Checking authorize {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_preprocess, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_preprocess Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating preprocess Fri Oct 3 14:34:45 2008 : Debug: preprocess { Fri Oct 3 14:34:45 2008 : Debug: huntgroups = "/usr/local/freeradius-2.1.1/etc/raddb/huntgroups" Fri Oct 3 14:34:45 2008 : Debug: hints = "/usr/local/freeradius-2.1.1/etc/raddb/hints" Fri Oct 3 14:34:45 2008 : Debug: with_ascend_hack = no Fri Oct 3 14:34:45 2008 : Debug: ascend_channels_per_line = 23 Fri Oct 3 14:34:45 2008 : Debug: with_ntdomain_hack = no Fri Oct 3 14:34:45 2008 : Debug: with_specialix_jetstream_hack = no Fri Oct 3 14:34:45 2008 : Debug: with_cisco_vsa_hack = no Fri Oct 3 14:34:45 2008 : Debug: with_alvarion_vsa_hack = no Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking preacct {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_acct_unique, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_acct_unique Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating acct_unique Fri Oct 3 14:34:45 2008 : Debug: acct_unique { Fri Oct 3 14:34:45 2008 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking accounting {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: (Loaded rlm_detail, checking if it's valid) Fri Oct 3 14:34:45 2008 : Debug: Module: Linked to module rlm_detail Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating detail Fri Oct 3 14:34:45 2008 : Debug: detail { Fri Oct 3 14:34:45 2008 : Debug: detailfile = "/usr/local/freeradius-2.1.1/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" Fri Oct 3 14:34:45 2008 : Debug: header = "%t" Fri Oct 3 14:34:45 2008 : Debug: detailperm = 384 Fri Oct 3 14:34:45 2008 : Debug: dirperm = 493 Fri Oct 3 14:34:45 2008 : Debug: locking = no Fri Oct 3 14:34:45 2008 : Debug: log_packet_header = no Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Instantiating attr_filter.accounting_response Fri Oct 3 14:34:45 2008 : Debug: attr_filter attr_filter.accounting_response { Fri Oct 3 14:34:45 2008 : Debug: attrsfile = "/usr/local/freeradius-2.1.1/etc/raddb/attrs.accounting_response" Fri Oct 3 14:34:45 2008 : Debug: key = "%{User-Name}" Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Module: Checking session {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: Module: Checking post-proxy {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: Module: Checking post-auth {...} for more modules to load Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: radiusd: #### Opening IP addresses and Ports #### Fri Oct 3 14:34:45 2008 : Debug: listen { Fri Oct 3 14:34:45 2008 : Debug: type = "auth" Fri Oct 3 14:34:45 2008 : Debug: ipaddr = * Fri Oct 3 14:34:45 2008 : Debug: port = 0 Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: listen { Fri Oct 3 14:34:45 2008 : Debug: type = "acct" Fri Oct 3 14:34:45 2008 : Debug: ipaddr = * Fri Oct 3 14:34:45 2008 : Debug: port = 0 Fri Oct 3 14:34:45 2008 : Debug: } Fri Oct 3 14:34:45 2008 : Debug: Listening on authentication address * port 1812 Fri Oct 3 14:34:45 2008 : Debug: Listening on accounting address * port 1813 Fri Oct 3 14:34:45 2008 : Debug: Listening on proxy address * port 1814 Fri Oct 3 14:34:45 2008 : Debug: Ready to process requests.
Madwifi Wireless wrote:
Has anyone come across this error? This happens when I start freeradius for the first time. Platform: RedHat ES 4.0 Version: FreeRadius 2.1.1
random_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/random" What are the ownership and permissions and ownership on the directory /usr/local/freeradius-2.1.1/etc/raddb/certs? Do they match the user and group specified in /usr/local/freeradius-2.1.1/etc/radiusd.conf? Assuming the user/group is either radius or radiusd the does the directory permissions allow an owner or group to write into that directory? For example it should be something this (this example assumes installation with prefix=/usr): sudo ls -ld /etc/raddb/certs drwxrwx--- 2 root radiusd 4096 2008-09-25 15:29 /etc/raddb/certs -- John Dennis <jdennis@redhat.com>
Hi John, Thanks for the response, here is my settings. I am basically running this as root since am just testing right now. In my radiusd.conf the user/group is commented out. # #user = radius #group = radius And the permission on the certs directory is 770 [root@ns2 sbin]# ls -ld ../etc/raddb/certs *drwxrwx--- 2 root root 4096 Oct 3 18:00 ../etc/raddb/certs* [root@ns2 sbin]# I've also tried the same thing on ubuntu and I have the same error message. AM John Dennis wrote:
Madwifi Wireless wrote:
Has anyone come across this error? This happens when I start freeradius for the first time. Platform: RedHat ES 4.0 Version: FreeRadius 2.1.1
random_file = "/usr/local/freeradius-2.1.1/etc/raddb/certs/random"
What are the ownership and permissions and ownership on the directory /usr/local/freeradius-2.1.1/etc/raddb/certs?
Do they match the user and group specified in /usr/local/freeradius-2.1.1/etc/radiusd.conf?
Assuming the user/group is either radius or radiusd the does the directory permissions allow an owner or group to write into that directory?
For example it should be something this (this example assumes installation with prefix=/usr):
sudo ls -ld /etc/raddb/certs drwxrwx--- 2 root radiusd 4096 2008-09-25 15:29 /etc/raddb/certs
Madwifi Wireless wrote:
Has anyone come across this error? This happens when I start freeradius for the first time.
Use google. The server starts up fine, so there are no errors. The errors are produced when running OpenSSL. In fact, this is a FAQ for OpenSSL: http://www.openssl.org/support/faq.cgi#USER2 Alan DeKok.
participants (3)
-
Alan DeKok -
John Dennis -
Madwifi Wireless