Help with Certificates

Alan DeKok aland at deployingradius.com
Thu Aug 10 13:08:25 CEST 2017


On Aug 10, 2017, at 12:58 PM, Arron Fox <arronf at hotmail.com> wrote:
> 
> Many thanks for the swift reply, unfortunately I am out of my depth with the product suite, the previous sysadm configured the solution with no handover.

  That's always bad...

> The CA's are from a Microsoft Certificate Authority, I believe that the configuration in /etc/raddb/mods-enabled/ldap which then references to the certs being held in
> /etc/openstack/certs.

  Ok... it would have been good to explain that at the start.

> {tls............
>                ca_file = /etc/openldap/certs/cacert.pem
> 
>                ca_path = /etc/openldap/certs
>                certificate_file = /etc/openldap/certs/radius.pem
>                private_key_file = /etc/openldap/certs/radius.key
> 
> I have been reviewing OpenLDAP but I cannot find any logs to this component,

  You need to look at libldap.  That is the library used by FreeRADIUS.  It is part of the OpenLDAP project, but it is not the OpenLDAP server.

> the solution was working fine and dandy up until Monday 07/08/2017. Is there a way to see if this is installed? 

  That isn't a FreeRADIUS questions.  Basic system administration is outside of the scope of this list.

  Alan DeKok.




More information about the Freeradius-Users mailing list