Hi Everyone, I recently upgraded to 3.0.19-1 and I noticed after I restarted the service I was getting the following errors: Apr 29 22:01:29 freeradius systemd[1]: Starting FreeRADIUS high performance RADIUS server.... Apr 29 22:01:30 freeradius sh[1970]: make: *** No rule to make target 'server.cnf', needed by 'passwords.mk'. Stop. Apr 29 22:01:30 freeradius systemd[1]: radiusd.service: Control process exited, code=exited status=2 Apr 29 22:01:30 freeradius systemd[1]: radiusd.service: Failed with result 'exit-code'. Apr 29 22:01:30 freeradius systemd[1]: Failed to start FreeRADIUS high performance RADIUS server.. Apr 29 22:01:30 freeradius audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=radiusd comm="systemd " exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' After a lot of digging, I found that a "bootstrap" script on the /etc/raddb/certs/ directory was being called on the /usr/lib/systemd/system/radiusd.service. This script overwrote my current certificate files. I had to comment out the ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap to fix the problem. I am not sure if anyone else encountered this problem before. Is this being addressed on future releases? Thanks, Rafael
On Tue, 2019-04-30 at 14:17 -0700, Rafael Leiva-Ochoa wrote:
I recently upgraded to 3.0.19-1
From where?
After a lot of digging, I found that a "bootstrap" script on the /etc/raddb/certs/ directory was being called on the /usr/lib/systemd/system/radiusd.service. This script overwrote my current certificate files. I had to comment out the ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap to fix the problem. I am not sure if anyone else encountered this problem before. Is this being addressed on future releases?
That's not in the official release. https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/redhat/radiusd.s... Calling bootstrap in the service file is wrong. It should be done manually, or upon a clean install by the package manager. -- Matthew
I got it from Fedora 28 Repo: freeradius-3.0.19-1.fc28.armv7hl Here is what I have on my /usr/lib/systemd/system/radiusd.service script for systemd [Unit] Description=FreeRADIUS high performance RADIUS server. After=syslog.target network-online.target ipa.service dirsrv.target krb5kdc.service [Service] Type=forking PIDFile=/var/run/radiusd/radiusd.pid ExecStartPre=-/bin/chown -R radiusd.radiusd /var/run/radiusd #ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap ExecStartPre=/bin/chgrp -R radiusd /etc/raddb/certs/ ExecStartPre=/usr/sbin/radiusd -C ExecStart=/usr/sbin/radiusd -d /etc/raddb ExecReload=/usr/sbin/radiusd -C ExecReload=/bin/kill -HUP $MAINPID [Install] WantedBy=multi-user.target On Tue, Apr 30, 2019 at 2:27 PM Matthew Newton <mcn@freeradius.org> wrote:
On Tue, 2019-04-30 at 14:17 -0700, Rafael Leiva-Ochoa wrote:
I recently upgraded to 3.0.19-1
From where?
After a lot of digging, I found that a "bootstrap" script on the /etc/raddb/certs/ directory was being called on the /usr/lib/systemd/system/radiusd.service. This script overwrote my current certificate files. I had to comment out the ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap to fix the problem. I am not sure if anyone else encountered this problem before. Is this being addressed on future releases?
That's not in the official release.
https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/redhat/radiusd.s...
Calling bootstrap in the service file is wrong. It should be done manually, or upon a clean install by the package manager.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, 2019-04-30 at 14:38 -0700, Rafael Leiva-Ochoa wrote:
I got it from Fedora 28 Repo: freeradius-3.0.19-1.fc28.armv7hl
They've broken it, then.
Here is what I have on my /usr/lib/systemd/system/radiusd.service script for systemd
...
ExecStartPre=-/bin/chown -R radiusd.radiusd /var/run/radiusd #ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap ExecStartPre=/bin/chgrp -R radiusd /etc/raddb/certs/ ...
You'll need to raise it as an issue with Fedora. -- Matthew
I will. I justed wanted to give you guys a heads up...: ) On Tue, Apr 30, 2019 at 2:46 PM Matthew Newton <mcn@freeradius.org> wrote:
On Tue, 2019-04-30 at 14:38 -0700, Rafael Leiva-Ochoa wrote:
I got it from Fedora 28 Repo: freeradius-3.0.19-1.fc28.armv7hl
They've broken it, then.
Here is what I have on my /usr/lib/systemd/system/radiusd.service script for systemd
...
ExecStartPre=-/bin/chown -R radiusd.radiusd /var/run/radiusd #ExecStartPre=/bin/sh /etc/raddb/certs/bootstrap ExecStartPre=/bin/chgrp -R radiusd /etc/raddb/certs/ ...
You'll need to raise it as an issue with Fedora.
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Matthew Newton -
Rafael Leiva-Ochoa