Failed to find 'Auth-Type EAP' section.
Hello, Debug from Debian 11 system (journalctl -xe): Mar 29 09:02:22 server freeradius[448329]: FreeRADIUS Version 3.0.21 Mar 29 09:02:22 server freeradius[448329]: /etc/freeradius/3.0/eap.conf[10]: Failed to find 'Auth-Type EAP' section. Cannot authenticate users. Mar 29 09:02:22 server freeradius[448329]: /etc/freeradius/3.0/eap.conf[10]: Instantiation failed for module "eap" Mar 29 09:02:22 server systemd[1]: freeradius.service: Control process exited, code=exited, status=1/FAILURE In line 10 of my eap.conf file I have eap { And the config file specifies: Whatever you do, do NOT set 'Auth-Type := EAP'. Any ideas? Kind regards, David le Roux ________________________________ Miller Homes Limited Registered in Scotland - SC255429 2 Lochside View, Edinburgh Park, Edinburgh, EH12 9DH Disclaimer: The Information in this e-mail is confidential and for use by the addressee(s) only. It may also be privileged. If you are not the intended recipient please notify us immediately on +44 (0) 870 336 5000 and delete the message from your computer: you may not copy or forward it, or use or disclose its contents to any other person. We do not accept any liability or responsibility for: (1) changes made to this email after it was sent, or (2) viruses transmitted through this email or any attachment. Miller Homes Limited <https://www.millerhomes.co.uk>
On 29/03/2022 09:12, David le Roux wrote:
Mar 29 09:02:22 server freeradius[448329]: FreeRADIUS Version 3.0.21 Mar 29 09:02:22 server freeradius[448329]: /etc/freeradius/3.0/eap.conf[10]: Failed to find 'Auth-Type EAP' section. Cannot authenticate users.
You presumably removed the "eap" and "Auth-Type eap" config from the authenticate{} section of the virtual server. -- Matthew
Hi Matthew, By virtual server you mean the main radiusd.conf file? If so I tried it without and it made no difference. Thanks for your time. David le Roux -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+david.leroux=miller.co.uk@lists.freeradius.org> On Behalf Of Matthew Newton Sent: 29 March 2022 12:35 To: freeradius-users@lists.freeradius.org Subject: Re: Failed to find 'Auth-Type EAP' section. [You don't often get email from mcn@freeradius.org. Learn why this is important at http://aka.ms/LearnAboutSenderIdentification.] On 29/03/2022 09:12, David le Roux wrote:
Mar 29 09:02:22 server freeradius[448329]: FreeRADIUS Version 3.0.21 Mar 29 09:02:22 server freeradius[448329]: /etc/freeradius/3.0/eap.conf[10]: Failed to find 'Auth-Type EAP' section. Cannot authenticate users.
You presumably removed the "eap" and "Auth-Type eap" config from the authenticate{} section of the virtual server. -- Matthew - List info/subscribe/unsubscribe? See https://gbr01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=04%7C01%7Cdavid.leroux%40miller.co.uk%7Ceddfdc5417ba4b03eff608da1178484e%7Ca5609eb2409545a8bb4668573bbb0f92%7C1%7C0%7C637841505549362118%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=oLVvqcCPHvBRgfAcIZjn8Sq4kSX5fhSML8FTLkKX6Ps%3D&reserved=0 ________________________________ Miller Homes Limited Registered in Scotland - SC255429 2 Lochside View, Edinburgh Park, Edinburgh, EH12 9DH Disclaimer: The Information in this e-mail is confidential and for use by the addressee(s) only. It may also be privileged. If you are not the intended recipient please notify us immediately on +44 (0) 870 336 5000 and delete the message from your computer: you may not copy or forward it, or use or disclose its contents to any other person. We do not accept any liability or responsibility for: (1) changes made to this email after it was sent, or (2) viruses transmitted through this email or any attachment. Miller Homes Limited <https://www.millerhomes.co.uk>
Silly me, it was $INCLUDE ${confdir}/eap.conf Was listed twice. Delete the second one and all is right as rain. David le Roux -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+david.leroux=miller.co.uk@lists.freeradius.org> On Behalf Of David le Roux Sent: 29 March 2022 13:27 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: RE: Failed to find 'Auth-Type EAP' section. Hi Matthew, By virtual server you mean the main radiusd.conf file? If so I tried it without and it made no difference. Thanks for your time. David le Roux -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+david.leroux=miller.co.uk@lists.freeradius.org> On Behalf Of Matthew Newton Sent: 29 March 2022 12:35 To: freeradius-users@lists.freeradius.org Subject: Re: Failed to find 'Auth-Type EAP' section. [You don't often get email from mcn@freeradius.org. Learn why this is important at http://aka.ms/LearnAboutSenderIdentification.] On 29/03/2022 09:12, David le Roux wrote:
Mar 29 09:02:22 server freeradius[448329]: FreeRADIUS Version 3.0.21 Mar 29 09:02:22 server freeradius[448329]: /etc/freeradius/3.0/eap.conf[10]: Failed to find 'Auth-Type EAP' section. Cannot authenticate users.
You presumably removed the "eap" and "Auth-Type eap" config from the authenticate{} section of the virtual server. -- Matthew - List info/subscribe/unsubscribe? See https://gbr01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=04%7C01%7Cdavid.leroux%40miller.co.uk%7C1d151c4c29ad463aa55908da117f823f%7Ca5609eb2409545a8bb4668573bbb0f92%7C1%7C0%7C637841536582579197%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=O0IAy5uuFHk8aM3LlMsyWW%2B8PNGnkwB75CRXmGDyy1I%3D&reserved=0 ________________________________ Miller Homes Limited Registered in Scotland - SC255429 2 Lochside View, Edinburgh Park, Edinburgh, EH12 9DH Disclaimer: The Information in this e-mail is confidential and for use by the addressee(s) only. It may also be privileged. If you are not the intended recipient please notify us immediately on +44 (0) 870 336 5000 and delete the message from your computer: you may not copy or forward it, or use or disclose its contents to any other person. We do not accept any liability or responsibility for: (1) changes made to this email after it was sent, or (2) viruses transmitted through this email or any attachment. Miller Homes Limited <https://gbr01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.millerhomes.co.uk%2F&data=04%7C01%7Cdavid.leroux%40miller.co.uk%7C1d151c4c29ad463aa55908da117f823f%7Ca5609eb2409545a8bb4668573bbb0f92%7C1%7C0%7C637841536582579197%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=fkbUxBkQda%2FDTgpbvKSmn5baSUrAs8gEYpBrjkHyfdI%3D&reserved=0> - List info/subscribe/unsubscribe? See https://gbr01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=04%7C01%7Cdavid.leroux%40miller.co.uk%7C1d151c4c29ad463aa55908da117f823f%7Ca5609eb2409545a8bb4668573bbb0f92%7C1%7C0%7C637841536582579197%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=O0IAy5uuFHk8aM3LlMsyWW%2B8PNGnkwB75CRXmGDyy1I%3D&reserved=0 ________________________________ Miller Homes Limited Registered in Scotland - SC255429 2 Lochside View, Edinburgh Park, Edinburgh, EH12 9DH Disclaimer: The Information in this e-mail is confidential and for use by the addressee(s) only. It may also be privileged. If you are not the intended recipient please notify us immediately on +44 (0) 870 336 5000 and delete the message from your computer: you may not copy or forward it, or use or disclose its contents to any other person. We do not accept any liability or responsibility for: (1) changes made to this email after it was sent, or (2) viruses transmitted through this email or any attachment. Miller Homes Limited <https://www.millerhomes.co.uk>
On Mar 29, 2022, at 8:54 AM, David le Roux <david.leroux@miller.co.uk> wrote:
Silly me, it was
$INCLUDE ${confdir}/eap.conf
Was listed twice. Delete the second one and all is right as rain.
That's good. By the way... the official 3.0 configuration file layout doesn't use eap.conf. It just uses a directory mods-enabled/. That way it's impossible to make these kinds of mistakes. Alan DeKok.
I tried using mods-enabled but when I tried to change it to use TLS then I couldn't start radius. Reverting it to default and pushing the TLS settings to eap.conf doesn't brick it. David le Roux -----Original Message----- From: Freeradius-Users <freeradius-users-bounces+david.leroux=miller.co.uk@lists.freeradius.org> On Behalf Of Alan DeKok Sent: 29 March 2022 13:58 To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Failed to find 'Auth-Type EAP' section. [You don't often get email from aland@deployingradius.com. Learn why this is important at http://aka.ms/LearnAboutSenderIdentification.] On Mar 29, 2022, at 8:54 AM, David le Roux <david.leroux@miller.co.uk> wrote:
Silly me, it was
$INCLUDE ${confdir}/eap.conf
Was listed twice. Delete the second one and all is right as rain.
That's good. By the way... the official 3.0 configuration file layout doesn't use eap.conf. It just uses a directory mods-enabled/. That way it's impossible to make these kinds of mistakes. Alan DeKok. - List info/subscribe/unsubscribe? See https://gbr01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.freeradius.org%2Flist%2Fusers.html&data=04%7C01%7Cdavid.leroux%40miller.co.uk%7Cfcdf2319aa044248df4908da1183d594%7Ca5609eb2409545a8bb4668573bbb0f92%7C1%7C0%7C637841555163219514%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=0%2Bqvd%2F46V3qn7ombLLIQUbkKb%2BA4YRHlaqGi1CH1Wyo%3D&reserved=0 ________________________________ Miller Homes Limited Registered in Scotland - SC255429 2 Lochside View, Edinburgh Park, Edinburgh, EH12 9DH Disclaimer: The Information in this e-mail is confidential and for use by the addressee(s) only. It may also be privileged. If you are not the intended recipient please notify us immediately on +44 (0) 870 336 5000 and delete the message from your computer: you may not copy or forward it, or use or disclose its contents to any other person. We do not accept any liability or responsibility for: (1) changes made to this email after it was sent, or (2) viruses transmitted through this email or any attachment. Miller Homes Limited <https://www.millerhomes.co.uk>
On Mar 30, 2022, at 10:54 AM, David le Roux <david.leroux@miller.co.uk> wrote:
I tried using mods-enabled
What does that mean? "I tried to do stuff, but it didn't work"
but when I tried to change it to use TLS then I couldn't start radius.
If only the server produced some kind of error message... Read http://wiki.freeradius.org/list-help It's clear that either you haven't read it, or you don't think that the instructions apply to you. If you want people to help you, then follow instructions. Or, your messages will get ignored.
Reverting it to default and pushing the TLS settings to eap.conf doesn't brick it.
How about: a) install 3.0.25 b) make configuration changes gradually, testing at each stage. It looks like you have a configuration from ~8 years ago, which has been copied over and over to new machines. That's just bad practice. Use the 3.0.25 configuration files and layout. It's clearer, it's documented, and it works. Alan DeKok.
participants (4)
-
Alan Buxey -
Alan DeKok -
David le Roux -
Matthew Newton