linelog permission issue

[Alan DeKok]

On Nov 12, 2020, at 6:37 AM, lingctam <lingctam at hku.hk> wrote
> 
> My client authentications keep failing due to linelog permissions issues:
> 
> Thu Nov 12 19:22:15 2020 : Auth: (58)   Login OK: [xxxxxxxxxxxxxx at anon.com] (from client xxxxxxxxxx port 0 via TLS tunnel)
> Thu Nov 12 19:22:15 2020 : Error: rlm_linelog: Failed to open /radius/log/linelog-20201112: Permission denied
> Thu Nov 12 19:22:15 2020 : Error: rlm_linelog: Failed to open /radius/log/linelog-20201112: Permission denied
> Thu Nov 12 19:22:15 2020 : Auth: (59) Rejected in post-auth: [xxxxxxxxxxx at anon.com] (from client xxxxxxxxxxxx port 13 cli 0ec84fa38cad)
> 
> There are no issues writing into authentication, accounting, and reply logs. I have set 660 permissions for the linelog module as well. Could someone please help? Or offer a way to bypass this?

  FreeRADIUS does not change the permissions or owners of the log directories.  If you *keep* having issues, then something *else* is mangling the permissions.

  Check the rest of the system, for log rotation scripts, etc.  Those are likely breaking FreeRADIUS.

  Alan DeKok.