new freeradius setup

[Andrew Meyer]

My thought was to copy them instead of doing a symbolic link in case I had to trash the file.


On Wednesday, October 25, 2017 2:21 PM, Eero Volotinen <eero.volotinen at iki.fi> wrote:



well, cp -v is not same as ln -s (command) :)

try setting selinux to permissive mode first.


Eero


2017-10-25 21:01 GMT+03:00 Andrew Meyer via Freeradius-Users <freeradius-users at lists.freeradius.org>:

Ok, in doing more reading I have made a symbolic link for the default config:
>cp -v /etc/raddb/sites-available/ default  /etc/raddb/sites-enabled/
>
>It then started to complain about not having the authentication modules.  So I start to copy those over as well.
>
>I think I'm heading in the right direction.  (Also had to allow freeradius through SELinux)
>
>Here is the latest i'm seeing in my logs:
>Wed Oct 25 10:42:09 2017 : Error: rlm_eap_tls: Failed initializing SSL context
>Wed Oct 25 10:42:09 2017 : Error: rlm_eap (EAP): Failed to initialise rlm_eap_tls
>Wed Oct 25 10:42:09 2017 : Error: /etc/raddb/mods-enabled/eap[ 14]: Instantiation failed for module "eap"
>
>
>    On Wednesday, October 25, 2017 8:30 AM, Andrew Meyer via Freeradius-Users <freeradius-users at lists. freeradius.org> wrote:
>
>
> Alan,
>My apologies.  Yahoo defaults to Rich Text and there is no way to set the default to plain text that I can see.
>However here is my output in plain text.  Hope this is legible now.
>
>So I also added a client config and told it to allow my network to have the ability to communicate w/ FreeRADIUS. 
>Tue Oct 24 21:17:58 2017 : Auth: (0) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [bob/hello] (from client ASM port 0)
>Tue Oct 24 21:18:04 2017 : Auth: (1) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [bob/hello] (from client ASM port 0)
>
>
>
>On Wednesday, October 25, 2017 5:31 AM, Alan DeKok <aland at deployingradius.com> wrote:
>
>
>
>
>> On Oct 24, 2017, at 9:27 PM, Andrew Meyer via Freeradius-Users <freeradius-users at lists. freeradius.org> wrote:
>>
>> Ok, I did what you said, I started fresh.
>> The only thing I have put in the /etc/raddb/radiusd.conf is a listen directive.  So now in the logs i'm getting this:
>> Tue Oct 24 20:26:54 2017 : Error: Ignoring request to auth address 10.150.10.40 port 1812 from unknown client 10.150.10.40 port 35086 proto udpTue Oct 24 20:26:59 2017 : Error: Ignoring request to auth address 10.150.10.40 port 1812 from unknown client 10.150.10.40 port 35086 proto udpTue Oct 24 20:27:04 2017 : Error: Ignoring request to auth address 10.150.10.40 port 1812 from unknown client 10.150.10.40 port 35086 proto udp]
>
>  You've been told repeatedly to fix your messages so that the contents aren't mangled.  Despite that, you're still not following instructions.
>
>  If you don't care enough to post READABLE logs, I don't care to answer your questions.
>
>
>  Alan DeKok.
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html
>
>
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html