Dotaz: FreeRadius nenastartuje

[Michal]

Nevim si rady, FreeRadius mi nestartuje pomoci systemd. Rucne spustit jde.

---

[root@radius ~]# cat /etc/centos-release
CentOS Linux release 7.3.1611 (Core)

[root@radius ~]# /usr/sbin/radiusd -v
radiusd: FreeRADIUS Version 3.0.4, for host x86_64-redhat-linux-gnu, built on Mar  5 2015 at 23:41:36

---

[root@radius ~]# cat /usr/lib/systemd/system/radiusd.service
[Unit]
Description=FreeRADIUS high performance RADIUS server.
After=syslog.target network.target

[Service]
Type=forking
PIDFile=/var/run/radiusd/radiusd.pid
ExecStartPre=-/bin/chown -R radiusd.radiusd /var/run/radiusd
ExecStartPre=/usr/sbin/radiusd -C
ExecStart=/usr/sbin/radiusd -d /etc/raddb
ExecReload=/usr/sbin/radiusd -C
ExecReload=/bin/kill -HUP $MAINPID

[Install]
WantedBy=multi-user.target

---

[root@radius ~]# systemctl start radiusd
Job for radiusd.service failed because a fatal signal was delivered to the control process. See "systemctl status radiusd.service" and "journalctl -xe" for details.
[root@radius ~]#

---

[root@radius ~]# tail /var/log/radius/radius.log
Sun Jan 15 09:17:02 2017 : Info: Loaded virtual server [default]
Sun Jan 15 09:17:02 2017 : Error: The server is not configured to listen on any ports.  Cannot start

---

[root@radius ~]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28




[root@radius ~]# ausearch -m avc -ts recent
[no matches]

---

[root@radius ~]# /usr/sbin/radiusd -C

---

[root@radius ~]#/usr/sbin/radiusd -X -d /etc/raddb

...
Listening on auth address 127.0.0.1 port 18120 as server inner-tunnel
Listening on auth address * port 1812 as server default
Listening on acct address * port 1813 as server default
Listening on auth address :: port 1812 as server default
Listening on acct address :: port 1813 as server default
Ready to process requests

---

---

Odpovědi

[NN]

Co je tady v tomto:

See "systemctl status radiusd.service" and "journalctl -xe" for details.

[Michal]

Nic zajimaveho. Vystup systemctl a journalctl je totozni.

Podle vypisu nize to chybuje na konfiguraci, jenze ta je OK. Podle vypisu /usr/sbin/radiusd -XC je konfigurace OK a je tam dokonce videt, ze ma poslouchat na vsech dostupnych adresach (ipaddr = *).

[root@radius system]# systemctl status radiusd.service
? radiusd.service - FreeRADIUS high performance RADIUS server.
   Loaded: loaded (/usr/lib/systemd/system/radiusd.service; enabled; vendor preset: disabled)
   Active: failed (Result: signal) since Sun 2017-01-15 09:17:02 CET; 7h ago
  Process: 10166 ExecStartPre=/usr/sbin/radiusd -C (code=killed, signal=TRAP)
  Process: 10164 ExecStartPre=/bin/chown -R radiusd.radiusd /var/run/radiusd (code=exited, status=0/SUCCESS)

Jan 15 09:17:02 radius systemd[1]: Starting FreeRADIUS high performance RADIUS server....
Jan 15 09:17:02 radius systemd[1]: radiusd.service: control process exited, code=killed status=5
Jan 15 09:17:02 radius systemd[1]: Failed to start FreeRADIUS high performance RADIUS server..
Jan 15 09:17:02 radius systemd[1]: Unit radiusd.service entered failed state.
Jan 15 09:17:02 radius systemd[1]: radiusd.service failed.

[vandrovnik]

Nenačítá si při ručním spuštění a při spuštění přes systemctl jinou konfiguraci?

[Michal]

Myslim, ze ne. Rucne spoustim /usr/sbin/radiusd -d /etc/raddb.
Totozne vypada definice sluzby.

[root@radius ~]# cat /usr/lib/systemd/system/radiusd.service

[Unit]
Description=FreeRADIUS high performance RADIUS server.
After=syslog.target network.target

[Service]
Type=forking
PIDFile=/var/run/radiusd/radiusd.pid
ExecStartPre=-/bin/chown -R radiusd.radiusd /var/run/radiusd
ExecStartPre=/usr/sbin/radiusd -C
ExecStart=/usr/sbin/radiusd -d /etc/raddb
ExecReload=/usr/sbin/radiusd -C
ExecReload=/bin/kill -HUP $MAINPID

[Install]
WantedBy=multi-user.target

[lertimir]

Pokud je to opravdu stejný config, který si server načte v obou případech, tak bych v něm zvýšil

Debug_Level       : 3 

z defaultu 3 na max 9 a zjištoval, co se napíše do logu v případě neschopnosti startu. (pokud se log nezmění, tak to bude indikace toho, že tento config není nabrán.)

[NN]

Nemas moc prisna prava na konfiguracnich souborech?

[timeos]

Vyreseno. Problem byl Selinux. Symlinka /etc/raddb/sites-enabled smerovala jinam nez do /etc/raddb/sites-available. Chyba se dala objevit jenom ve /var/log/audit, prikaz ausearch -m avc ji nevylistoval.