help with getting freeradius working with ldap..
Im trying to migrate freeradius from an older server running freeradius 2.1.6. The new server is running from rpms installed on my centos 7 server. freeradius-3.0.4-6.el7.x86_64 freeradius-ldap-3.0.4-6.el7.x86_64 and Im trying to start up the freeradius server and in the logs i see Sun Aug 21 16:05:55 2016 : Info: Loaded virtual server <default> Sun Aug 21 16:05:55 2016 : Error: /etc/raddb/sites-enabled/default[489]: Failed to find "ldap" in the "modules" section. Sun Aug 21 16:05:55 2016 : Error: /etc/raddb/sites-enabled/default[489]: Failed to parse "ldap" entry. Sun Aug 21 16:05:55 2016 : Error: Failed to load virtual server default [root@newjed mods-enabled]$pwd /etc/raddb/mods-enabled [root@newjed mods-enabled]$ls -al ldap lrwxrwxrwx 1 root root 22 Aug 21 21:28 ldap -> ../mods-available/ldap [root@newjed mods-enabled]$ what else to check? Jason --
Hi,
Im trying to migrate freeradius from an older server running freeradius 2.1.6. The new server is running from rpms installed on my centos 7 server. freeradius-3.0.4-6.el7.x86_64 freeradius-ldap-3.0.4-6.el7.x86_64
and Im trying to start up the freeradius server and in the logs i see Sun Aug 21 16:05:55 2016 : Info: Loaded virtual server <default> Sun Aug 21 16:05:55 2016 : Error: /etc/raddb/sites-enabled/default[489]: Failed to find "ldap" in the "modules" section. Sun Aug 21 16:05:55 2016 : Error: /etc/raddb/sites-enabled/default[489]: Failed to parse "ldap" entry. Sun Aug 21 16:05:55 2016 : Error: Failed to load virtual server default
you arnet using any v2 config files on the new v3 server are you? I as, because the default config on v3 will not fail like this - all you need to do is configure the ldap module and the server will use it *IF* the ldap is correct ( thats what the -ldap means.... nots just 'ldap' - -ldap is a conditional module, will be called if the config was okay for the module and its active/connected) you've done the typical thing of just looking at the last few lines and posting that small snipper. dont, the error is very likely in previous output - post the full output of radiusd -X alan
here ya go.. thanks for the info. Jason [root@newjed jason]$radiusd -X radiusd: FreeRADIUS Version 3.0.4, for host x86_64-redhat-linux-gnu, built on Mar 5 2015 at 23:41:36 Copyright (C) 1999-2014 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp including dictionary file /etc/raddb/dictionary including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf including configuration file /etc/raddb/clients.conf including files in directory /etc/raddb/mods-enabled/ including configuration file /etc/raddb/mods-enabled/always including configuration file /etc/raddb/mods-enabled/attr_filter including configuration file /etc/raddb/mods-enabled/cache_eap including configuration file /etc/raddb/mods-enabled/chap including configuration file /etc/raddb/mods-enabled/detail including configuration file /etc/raddb/mods-enabled/detail.log including configuration file /etc/raddb/mods-enabled/dhcp including configuration file /etc/raddb/mods-enabled/digest including configuration file /etc/raddb/mods-enabled/dynamic_clients including configuration file /etc/raddb/mods-enabled/eap including configuration file /etc/raddb/mods-enabled/echo including configuration file /etc/raddb/mods-enabled/exec including configuration file /etc/raddb/mods-enabled/expiration including configuration file /etc/raddb/mods-enabled/expr including configuration file /etc/raddb/mods-enabled/files including configuration file /etc/raddb/mods-enabled/linelog including configuration file /etc/raddb/mods-enabled/logintime including configuration file /etc/raddb/mods-enabled/mschap including configuration file /etc/raddb/mods-enabled/ntlm_auth including configuration file /etc/raddb/mods-enabled/pap including configuration file /etc/raddb/mods-enabled/passwd including configuration file /etc/raddb/mods-enabled/preprocess including configuration file /etc/raddb/mods-enabled/radutmp including configuration file /etc/raddb/mods-enabled/realm including configuration file /etc/raddb/mods-enabled/replicate including configuration file /etc/raddb/mods-enabled/soh including configuration file /etc/raddb/mods-enabled/sradutmp including configuration file /etc/raddb/mods-enabled/unix including configuration file /etc/raddb/mods-enabled/unpack including configuration file /etc/raddb/mods-enabled/utf8 including configuration file /etc/raddb/mods-enabled/ldap No such configuration item ..base_dn /etc/raddb/mods-enabled/ldap[113]: Reference "${..base_dn}" not found Errors reading or parsing /etc/raddb/radiusd.conf --
so Ive gotten further! thanks for the help. Now when I run the radiusd -X it complains about the sql module, so I symlinked that in the mods-enabled as well. Now I get [root@newjed mods-enabled]$radiusd -X radiusd: FreeRADIUS Version 3.0.4, for host x86_64-redhat-linux-gnu, built on Mar 5 2015 at 23:41:36 Copyright (C) 1999-2014 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp including dictionary file /etc/raddb/dictionary including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf including configuration file /etc/raddb/clients.conf including files in directory /etc/raddb/mods-enabled/ including configuration file /etc/raddb/mods-enabled/always including configuration file /etc/raddb/mods-enabled/attr_filter including configuration file /etc/raddb/mods-enabled/cache_eap including configuration file /etc/raddb/mods-enabled/chap including configuration file /etc/raddb/mods-enabled/detail including configuration file /etc/raddb/mods-enabled/detail.log including configuration file /etc/raddb/mods-enabled/dhcp including configuration file /etc/raddb/mods-enabled/digest including configuration file /etc/raddb/mods-enabled/dynamic_clients including configuration file /etc/raddb/mods-enabled/eap including configuration file /etc/raddb/mods-enabled/echo including configuration file /etc/raddb/mods-enabled/exec including configuration file /etc/raddb/mods-enabled/expiration including configuration file /etc/raddb/mods-enabled/expr including configuration file /etc/raddb/mods-enabled/files including configuration file /etc/raddb/mods-enabled/linelog including configuration file /etc/raddb/mods-enabled/logintime including configuration file /etc/raddb/mods-enabled/mschap including configuration file /etc/raddb/mods-enabled/ntlm_auth including configuration file /etc/raddb/mods-enabled/pap including configuration file /etc/raddb/mods-enabled/passwd including configuration file /etc/raddb/mods-enabled/preprocess including configuration file /etc/raddb/mods-enabled/radutmp including configuration file /etc/raddb/mods-enabled/realm including configuration file /etc/raddb/mods-enabled/replicate including configuration file /etc/raddb/mods-enabled/soh including configuration file /etc/raddb/mods-enabled/sradutmp including configuration file /etc/raddb/mods-enabled/unix including configuration file /etc/raddb/mods-enabled/unpack including configuration file /etc/raddb/mods-enabled/utf8 including configuration file /etc/raddb/mods-enabled/ldap including configuration file /etc/raddb/mods-enabled/sql including configuration file /etc/raddb/mods-config/sql/main/sqlite/queries.conf Unable to open file "/etc/raddb/mods-config/sql/main/sqlite/queries.conf": No such file or directory Errors reading or parsing /etc/raddb/radiusd.conf [root@newjed mods-enabled]$ Im not sure I need sqlite? regards, Jason --
On Mon, Aug 22, 2016 at 10:21:25PM -0400, Jason Welsh wrote:
so Ive gotten further! thanks for the help. Now when I run the radiusd -X it complains about the sql module, so I symlinked that in the mods-enabled as well. Now I get ... Unable to open file "/etc/raddb/mods-config/sql/main/sqlite/queries.conf": No such file or directory Errors reading or parsing /etc/raddb/radiusd.conf [root@newjed mods-enabled]$
Im not sure I need sqlite?
This has all the indications of taking your v2 config and trying to update it to v3 by copying bits over, as Alan said. Really, don't do it that way. Follow the server instructions which say to start with a clean v3 config, then update it to do the same as your v2 one. Then you won't get errors like you are seeing. v2 and v3 configs look very similar, but aren't compatible. Starting afresh may be a bit harder, especially if you've not touched your old config in a while and forgotten how some of it works, but will save you hassle in the long run. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Jason Welsh -
Matthew Newton