Hello, I am rather new to freeradius and I´m having trouble running the server after installation I installed using: ./configure --sysconfdir=/etc Make Make install When I try running with radiusd I get the following error: /usr/local/sbin/radiusd: error while loading shared libraries: libfreeradius-radius-2.0.5.so: cannot open shared object file: No such file or directory The libfreeradius-radius-2.0.5.so file is located at the following directory: ns1:/usr/local # find / -name libfreeradius-radius-2.0.5.so /usr/local/lib/libfreeradius-radius-2.0.5.so This is my radiusd.conf prefix = /usr/local exec_prefix = ${prefix} sysconfdir = /etc localstatedir = /var sbindir = ${exec_prefix}/sbin logdir = ${localstatedir}/log/radius raddbdir = ${sysconfdir}/raddb radacctdir = ${logdir}/radacct confdir = ${raddbdir} run_dir = ${prefix}/${localstatedir}/run/radiusd db_dir = /usr/local/lib/ libdir = ${exec_prefix}/lib
From what is configured above, the libdir should be /usr/local/lib which is exactly where the file is located.
Is there something I am missing? Thank you, Frederick Pohl Esta mensagem, incluindo seus anexos, pode conter informações privilegiadas e/ou de caráter confidencial, não podendo ser retransmitida sem autorização do remetente. Se você não é o destinatário ou pessoa autorizada a recebê-la, informamos que o seu uso, divulgação, cópia ou arquivamento são proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.
Hi,
I am rather new to freeradius and I´m having trouble running the server after installation
I installed using:
./configure --sysconfdir=/etc
okay - and the libraries have gone into /usr/local/lib as per the stuff that spews out when you do make install you need to ensure this is in your LDPATH.... can be done eg by adding /usr/local/lib to /etc/ld.so.conf and then running /sbin/ldconfig -v alan
Alan Thanks for the tip. After running /sbin/ldconfig -v , I was able to execute radiusd. The only weird thing is that the daemon is not showing when I type ps aux. Even after running /usr/sbin/radiusd, nothing happens. My ps aux | grep radiusd shows only the following: root 25770 0.0 0.0 2112 660 pts/1 R+ 13:33 0:00 grep radiusd I tried installing using YAST and now I get the following error: ns1:~ # /etc/init.d/freeradius start Starting RADIUS daemon startproc: exit status of parent of /usr/sbin/radiusd: 1 failed This error message is probably not related to freeradius, but maybe someone has seen this error before and could clue me in on how to solve it. Thank you, Fred Pohl -----Mensagem original----- De: freeradius-users-bounces+frederick.pohl=oi.net.br@lists.freeradius.org [mailto:freeradius-users-bounces+frederick.pohl=oi.net.br@lists.freeradius.org] Em nome de A.L.M.Buxey@lboro.ac.uk Enviada em: segunda-feira, 4 de agosto de 2008 18:26 Para: FreeRadius users mailing list Assunto: Re: Installation problem Hi,
I am rather new to freeradius and I´m having trouble running the server after installation
I installed using:
./configure --sysconfdir=/etc
okay - and the libraries have gone into /usr/local/lib as per the stuff that spews out when you do make install you need to ensure this is in your LDPATH.... can be done eg by adding /usr/local/lib to /etc/ld.so.conf and then running /sbin/ldconfig -v alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Esta mensagem, incluindo seus anexos, pode conter informações privilegiadas e/ou de caráter confidencial, não podendo ser retransmitida sem autorização do remetente. Se você não é o destinatário ou pessoa autorizada a recebê-la, informamos que o seu uso, divulgação, cópia ou arquivamento são proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.
Hi,
After running /sbin/ldconfig -v , I was able to execute radiusd.
The only weird thing is that the daemon is not showing when I type ps aux.
Even after running /usr/sbin/radiusd, nothing happens.
yep - at this point you run radiusd -X to see whats wrong alan
Thanks again, Alan. Radius is now running and working fine. I tested it using radtest "radtest fpohl <password> localhost 1812 <password>" and I got an OK result "rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=162, length=20" My question is now regarding users. The user fpohl is a regular Unix user I created with useradd but it does not belong to the same group as radiusd. It is configured as follow: fpohl:x:1000:110:Fred:/home/fpohl:/bin/bash radiusd:x:107:109:Radius daemon:/var/lib/radiusd:/bin/false ns1:~ # id fpohl uid=1000(fpohl) gid=110 groups=110,16(dialout),33(video) ns1:~ # id radiusd uid=107(radiusd) gid=109(radiusd) groups=109(radiusd) How can I configure freeradius to only accept connections from users that belong to the same groups as radiusd? What I really need is to not allow all unix users to be a radius client, only the ones that belong to a specific group. If my questions are too basic and there are documents on the web that can help new users like me, please show me the way. Frederick Pohl -----Mensagem original----- De: freeradius-users-bounces+frederick.pohl=oi.net.br@lists.freeradius.org [mailto:freeradius-users-bounces+frederick.pohl=oi.net.br@lists.freeradius.org] Em nome de A.L.M.Buxey@lboro.ac.uk Enviada em: terça-feira, 5 de agosto de 2008 13:48 Para: FreeRadius users mailing list Assunto: Re: RES: Installation problem Hi,
After running /sbin/ldconfig -v , I was able to execute radiusd.
The only weird thing is that the daemon is not showing when I type ps aux.
Even after running /usr/sbin/radiusd, nothing happens.
yep - at this point you run radiusd -X to see whats wrong alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Esta mensagem, incluindo seus anexos, pode conter informações privilegiadas e/ou de caráter confidencial, não podendo ser retransmitida sem autorização do remetente. Se você não é o destinatário ou pessoa autorizada a recebê-la, informamos que o seu uso, divulgação, cópia ou arquivamento são proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.
Frederick William Borges Pohl wrote:
The user fpohl is a regular Unix user I created with useradd but it does not belong to the same group as radiusd.
There is NO relationship between the group membership of users, and the group that the RADIUS server runs as. They are completely independent... unless you make them dependent.
How can I configure freeradius to only accept connections from users that belong to the same groups as radiusd?
See the FAQ. There is an example of using group checking to deny users. Alan DeKok.
hi, I'd follow eg the FAQ http://wiki.freeradius.org/FAQ eg How do I use Login-Time for groups, not for users? DEFAULT Group == "daysonly", Login-Time := "0800-2000" DEFAULT Group == "weekdays", Login-Time := "Wk0800-2000" of course, you dont care about times....so justhave eg DEFAULT Group == "radiusd" as a starter alan
Thanks again, Alan. Radius is now running and working fine. I tested it using radtest "radtest fpohl <password> localhost 1812 <password>" and I got an OK result "rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=162, length=20" My question is now regarding users. The user fpohl is a regular Unix user I created with useradd but it does not belong to the same group as radiusd. It is configured as follow: fpohl:x:1000:110:Fred:/home/fpohl:/bin/bash radiusd:x:107:109:Radius daemon:/var/lib/radiusd:/bin/false ns1:~ # id fpohl uid=1000(fpohl) gid=110 groups=110,16(dialout),33(video) ns1:~ # id radiusd uid=107(radiusd) gid=109(radiusd) groups=109(radiusd) How can I configure freeradius to only accept connections from users that belong to the same groups as radiusd? What I really need is to not allow all unix users to be a radius client, only the ones that belong to a specific group. If my questions are too basic and there are documents on the web that can help new users like me, please show me the way. Frederick Pohl -----Mensagem original----- De: freeradius-users-bounces+frederick.pohl=oi.net.br@lists.freeradius.org [mailto:freeradius-users-bounces+frederick.pohl=oi.net.br@lists.freeradius.org] Em nome de A.L.M.Buxey@lboro.ac.uk Enviada em: terça-feira, 5 de agosto de 2008 13:48 Para: FreeRadius users mailing list Assunto: Re: RES: Installation problem Hi,
After running /sbin/ldconfig -v , I was able to execute radiusd.
The only weird thing is that the daemon is not showing when I type ps aux.
Even after running /usr/sbin/radiusd, nothing happens.
yep - at this point you run radiusd -X to see whats wrong alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Esta mensagem, incluindo seus anexos, pode conter informações privilegiadas e/ou de caráter confidencial, não podendo ser retransmitida sem autorização do remetente. Se você não é o destinatário ou pessoa autorizada a recebê-la, informamos que o seu uso, divulgação, cópia ou arquivamento são proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.
Frederick William Borges Pohl wrote: .... Stop posting the same message again and again and again. Your questions were answered already. If you didn't see the answers, go look at the archives on the web. Alan DeKok.
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Frederick William Borges Pohl