I have a tendency to over complicate things with freeradius, so I will just post my error on my first start up: I understand the dummy certs are created when launching radiusd -X, but not sure how to fix the missing dh file without creating new ones. Is the unknown module "eap" error because of the dh error? (This is a MAC server) tls: dh_file = "/private/etc/raddb/certs/dh" tls: random_file = "/private/etc/raddb/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap_tls: Unable to open DH file - /private/etc/raddb/certs/dh rlm_eap: Failed to initialize type tls radiusd.conf[10]: eap: Module instantiation failed. radiusd.conf[1954] Unknown module "eap". radiusd.conf[1897] Failed to parse authenticate section.
Raymond Norton wrote:
I have a tendency to over complicate things with freeradius, so I will just post my error on my first start up:
I understand the dummy certs are created when launching radiusd -X, but not sure how to fix the missing dh file without creating new ones. Is the unknown module "eap" error because of the dh error?
It's because you're using a *very* old version of the server. Install 2.1.10, and it will work. Alan DeKok.
It seems freeradius 1.3 was already installed automatically when the server was first setup. and I just installed version 2.1.1 from source. Do you know off hand how to uninstall the old version? Not finding how to do that. On 03/04/2011 09:33 AM, Alan DeKok wrote:
Raymond Norton wrote:
I have a tendency to over complicate things with freeradius, so I will just post my error on my first start up:
I understand the dummy certs are created when launching radiusd -X, but not sure how to fix the missing dh file without creating new ones. Is the unknown module "eap" error because of the dh error? It's because you're using a *very* old version of the server.
Install 2.1.10, and it will work.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
tls: dh_file = "/private/etc/raddb/certs/dh" tls: random_file = "/private/etc/raddb/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap_tls: Unable to open DH file - /private/etc/raddb/certs/dh
that file doesnt exist...or is not readable.... therefore eap module cant start up..so server daemon cant start alan
Thanks. I understood that. It seems there was an old version of freeradius installed on the server by default. I'm no mac head, and am trying to figure out how to remove it. On 03/04/2011 10:10 AM, Alan Buxey wrote:
Hi,
tls: dh_file = "/private/etc/raddb/certs/dh" tls: random_file = "/private/etc/raddb/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap_tls: Unable to open DH file - /private/etc/raddb/certs/dh that file doesnt exist...or is not readable.... therefore eap module cant start up..so server daemon cant start
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks for the pointers. Freeradius is working fine now against OD. How would I disable the old radius start up script and enable the new one instead? On 03/04/2011 10:35 AM, Alan DeKok wrote:
Raymond Norton wrote:
Thanks. I understood that. It seems there was an old version of freeradius installed on the server by default. I'm no mac head, and am trying to figure out how to remove it. $ rm ...
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan Buxey -
Alan DeKok -
Raymond Norton