Hello, Running Freeradius 2.1.10 on CentOS 5.5 I have been taking a quick look at the radmin 'hup' command. However, I am having a problem getting it to work: radmin -e hup ERROR: You do not have write permission. See "mode = rw" in /var/run/radiusd/radiusd.sock However, the socket file shows: ls -l /var/run/radiusd/radiusd.sock srw-rw---- 1 radiusd radiusd 0 Sep 10 04:02 /var/run/radiusd/radiusd.sock ls -ld /var/run/radiusd drwxr-xr-x 2 radiusd radiusd 4096 Sep 10 04:02 /var/run/radiusd If I run the radmin command as root or the radiusd user, I get the ERROR message. Additionally in the radius log file I see (when the radmin command is run): Fri Sep 10 12:59:28 2010 : Info: ... adding new socket command file /var/run/radiusd/radiusd.sock Fri Sep 10 12:59:28 2010 : Info: ... closing socket command file /var/run/radiusd/radiusd.sock I'm not sure what the first message means as the file already exists, and the second one says it is closing the socket, yet the socket file still exists (unless it literally means it is closing the socket but leaving the file there.) Any suggestions as to what is going on here? John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001
John Horne wrote:
Running Freeradius 2.1.10 on CentOS 5.5 I have been taking a quick look at the radmin 'hup' command. However, I am having a problem getting it to work:
radmin -e hup ERROR: You do not have write permission. See "mode = rw" in /var/run/radiusd/radiusd.sock
See the default configuration file for the control socket.
I'm not sure what the first message means as the file already exists, and the second one says it is closing the socket, yet the socket file still exists (unless it literally means it is closing the socket but leaving the file there.)
Any suggestions as to what is going on here?
You need write permissions on the socket to write the "hup" text to it. You *also* need to tell FreeRADIUS to allow commands received on the socket to write to the local memory. You can set up the server so that admins have write access to the socket, but *not* write access to the server config. This lets them write commands to the socket like "show stats for X". But it doesn't let them *change* anything. Alan DeKok.
On Fri, 2010-09-10 at 14:17 +0200, Alan DeKok wrote:
John Horne wrote:
Running Freeradius 2.1.10 on CentOS 5.5 I have been taking a quick look at the radmin 'hup' command. However, I am having a problem getting it to work:
radmin -e hup ERROR: You do not have write permission. See "mode = rw" in /var/run/radiusd/radiusd.sock
See the default configuration file for the control socket.
Ah! Yes, it now works. The error message is a little misleading as I was looking at the actual socket file to see what the problem was (and as far as I could see it had rw access). Thanks. John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001
John Horne <john.horne@plymouth.ac.uk> writes:
Running Freeradius 2.1.10 on CentOS 5.5 I have been taking a quick look at the radmin 'hup' command. However, I am having a problem getting it to work:
radmin -e hup ERROR: You do not have write permission. See "mode = rw" in /var/run/radiusd/radiusd.sock
I believe that message is a bit misleading as the "mode = rw" refers to the control socket configuration (typically in raddb/sites-enabled/control-socket) and not to the actual file mode of the socket. See the documentation in raddb/sites-available/control-socket Bjørn
On 09/10/2010 08:27 AM, Bjørn Mork wrote:
John Horne<john.horne@plymouth.ac.uk> writes:
Running Freeradius 2.1.10 on CentOS 5.5 I have been taking a quick look at the radmin 'hup' command. However, I am having a problem getting it to work:
radmin -e hup ERROR: You do not have write permission. See "mode = rw" in /var/run/radiusd/radiusd.sock
I believe that message is a bit misleading as the "mode = rw" refers to the control socket configuration (typically in raddb/sites-enabled/control-socket) and not to the actual file mode of the socket.
FWIW if you install via Red Hat supplied RPM's this should just work (at least it did the last time I tested). We try to get all these installation details right for a smoother user experience. However, I'll grant you 2.1.10 is not currently available for RHEL 5. -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/
John Dennis wrote:
FWIW if you install via Red Hat supplied RPM's this should just work (at least it did the last time I tested). We try to get all these installation details right for a smoother user experience.
<cough> The default install *does* work. The control socket mode is set to read-only in the default install because that's the most secure option. Alan DeKok.
participants (4)
-
Alan DeKok -
Bjørn Mork -
John Dennis -
John Horne