Csdrhrt

I try to setup a Freeradius server but when i try to start it with

# service freeradius start

Job for freeradius.service failed because the control process exited with error code. See "systemctl status freeradius.service" and "journalctl -xe" for details.

when i write journalctl i get this

-- The start-up result is done.

Dec 30 16:03:05 pppie sudo[19994]:   dilian : TTY=pts/0 ; PWD=/home/dilian ; USER=root ; COMMAND=/bin/su

Dec 30 16:03:05 pppie sudo[19994]: pam_unix(sudo:session): session opened for user root by dilian(uid=0)

Dec 30 16:03:06 pppie su[19995]: Successful su for root by root

Dec 30 16:03:06 pppie su[19995]: + /dev/pts/0 root:root

Dec 30 16:03:06 pppie su[19995]: pam_unix(su:session): session opened for user root by dilian(uid=0)

Dec 30 16:03:06 pppie su[19995]: pam_systemd(su:session): Cannot create session: Already running in a session

Dec 30 16:03:28 pppie systemd[1]: Starting LSB: Radius Daemon...

-- Subject: Unit freeradius.service has begun start-up

-- Defined-By: systemd

-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

--

-- Unit freeradius.service has begun starting up.

Dec 30 16:03:28 pppie freeradius[20039]:  * Starting FreeRADIUS daemon freeradius

Dec 30 16:03:28 pppie freeradius[20039]:    ...fail!

Dec 30 16:03:28 pppie systemd[1]: freeradius.service: Control process exited, code=exited status=1

Dec 30 16:03:28 pppie systemd[1]: Failed to start LSB: Radius Daemon.

-- Subject: Unit freeradius.service has failed

-- Defined-By: systemd

-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel

--

-- Unit freeradius.service has failed.

--

-- The result is failed.

Dec 30 16:03:28 pppie systemd[1]: freeradius.service: Unit entered failed state.

Dec 30 16:03:28 pppie systemd[1]: freeradius.service: Failed with result 'exit-code'.

And when i try "freeradius -X" i get to the last lign and it stays there doing nothing.

> # freeradius -X freeradius: FreeRADIUS Version 2.2.8, for host x86_64-pc-linux-gnu, built on Apr                                     

> 5 2016 at 13:40:43 Copyright (C) 1999-2015 The FreeRADIUS server

> project and contributors. There is NO warranty; not even for

> MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may

> redistribute copies of FreeRADIUS under the terms of the GNU General

> Public License. For more information about these matters, see the file

> named COPYRIGHT. Starting - reading configuration files ... including

> configuration file /etc/freeradius/radiusd.conf including

> configuration file /etc/freeradius/proxy.conf including configuration

> file /etc/freeradius/clients.conf including configuration file

> /etc/freeradius/snmp.conf including configuration file

> /etc/freeradius/nibs.conf main {

>         user = "nobody"

>         group = "nobody"

>         allow_core_dumps = no } including dictionary file /etc/freeradius/dictionary main {

>         name = "radiusd"

>         prefix = "/usr/local"

>         localstatedir = "/var"

>         sbindir = "/usr/local/sbin"

>         logdir = "/var/log"

>         run_dir = "/var/run/radiusd"

>         libdir = "/usr/local/lib"

>         radacctdir = "/var/log/radacct"

>         hostname_lookups = no

>         max_request_time = 30

>         cleanup_delay = 5

>         max_requests = 1024

>         pidfile = "/var/run/radiusd/radiusd.pid"

>         checkrad = "/usr/local/sbin/checkrad"

>         debug_level = 0

>         proxy_requests = no

>         log_auth = no

>         log_auth_badpass = yes

>         log_auth_goodpass = yes

>         log_stripped_names = no  security {

>         max_attributes = 200

>         reject_delay = 1

>         status_server = no

>         allow_vulnerable_openssl = no  } } radiusd: #### Loading Realms and Home Servers ####  proxy server {

>         retry_delay = 5

>         retry_count = 3

>         default_fallback = no

>         dead_time = 120

>         wake_all_if_all_dead = no  }  home_server localhost {

>         ipaddr = 127.0.0.1

>         port = 1812

>         type = "auth"

>         secret = "testing123"

>         response_window = 20

>         max_outstanding = 65536

>         require_message_authenticator = yes

>         zombie_period = 40

>         status_check = "status-server"

>         ping_interval = 30

>         check_interval = 30

>         num_answers_to_alive = 3

>         num_pings_to_alive = 3

>         revive_interval = 120

>         status_check_timeout = 4   coa {

>         irt = 2

>         mrt = 16

>         mrc = 5

>         mrd = 30   }  }  home_server_pool my_auth_failover {

>         type = fail-over

>         home_server = localhost  }  realm example.com {

>         auth_pool = my_auth_failover  }  realm LOCAL {  } radiusd: #### Loading Clients ####  client localhost {

>         ipaddr = 127.0.0.1

>         require_message_authenticator = no

>         secret = "testing123"

>         nastype = "other"  } radiusd: #### Instantiating modules ####  instantiate {  Module: Linked to module rlm_exec  Module:

> Instantiating module "exec" from file /etc/freeradius/radiusd.conf  

> exec {

>         wait = yes

>         input_pairs = "request"

>         shell_escape = yes   }  Module: Linked to module rlm_expr  Module: Instantiating module "expr" from file

> /etc/freeradius/radiusd.conf  } radiusd: #### Loading Virtual Servers

> #### server { # from file /etc/freeradius/radiusd.conf  modules {  } # modules } # server radiusd: #### Opening IP addresses and Ports ####

>         bind_address = * WARNING: The directive 'bind_address' is deprecated, and will be removed in futu                               

> re versions of FreeRADIUS. Please edit the configuration files to use

> the direct                                                            

> ive 'listen'. Listening on authentication address * port 1812

> Listening on accounting address * port 1813 Ready to process requests.

there is no error msg and i don`t know what to do to fix it...
im using Ubuntu server 16.04

if someone has an idea what is wrong ?
10x for your time.

When i Try

root@pppie:/home/dilian# freeradius -f -lstdout -XXX

Fri Jan  6 14:05:36 2017 : Info: freeradius: FreeRADIUS Version 2.2.8, for host x86_64-pc-linux-gnu, built on Apr  5 2016 at 13:40:43

Fri Jan  6 14:05:36 2017 : Debug: Server was built with:

Fri Jan  6 14:05:36 2017 : Debug:   accounting

Fri Jan  6 14:05:36 2017 : Debug:   authentication

Fri Jan  6 14:05:36 2017 : Debug:  WITH_DHCP

Fri Jan  6 14:05:36 2017 : Debug:  WITH_VMPS

Fri Jan  6 14:05:36 2017 : Debug: Server core libs:

Fri Jan  6 14:05:36 2017 : Debug:   ssl: OpenSSL 1.0.2g  1 Mar 2016

Fri Jan  6 14:05:36 2017 : Info: Copyright (C) 1999-2015 The FreeRADIUS server project and contributors.

Fri Jan  6 14:05:36 2017 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A

Fri Jan  6 14:05:36 2017 : Info: PARTICULAR PURPOSE.

Fri Jan  6 14:05:36 2017 : Info: You may redistribute copies of FreeRADIUS under the terms of the

Fri Jan  6 14:05:36 2017 : Info: GNU General Public License.

Fri Jan  6 14:05:36 2017 : Info: For more information about these matters, see the file named COPYRIGHT.

Fri Jan  6 14:05:36 2017 : Info: Starting - reading configuration files ...

Fri Jan  6 14:05:36 2017 : Debug: including configuration file /etc/freeradius/radiusd.conf

Fri Jan  6 14:05:36 2017 : Debug: including configuration file /etc/freeradius/proxy.conf

Fri Jan  6 14:05:36 2017 : Debug: including configuration file /etc/freeradius/clients.conf

Fri Jan  6 14:05:36 2017 : Debug: including configuration file /etc/freeradius/snmp.conf

Fri Jan  6 14:05:36 2017 : Debug: including configuration file /etc/freeradius/nibs.conf

Fri Jan  6 14:05:36 2017 : Debug: main {

Fri Jan  6 14:05:36 2017 : Debug:       user = "nobody"

Fri Jan  6 14:05:36 2017 : Debug:       group = "nobody"

Fri Jan  6 14:05:36 2017 : Debug:       allow_core_dumps = no

Fri Jan  6 14:05:36 2017 : Debug: }

Fri Jan  6 14:05:36 2017 : Debug: including dictionary file /etc/freeradius/dictionary

Fri Jan  6 14:05:36 2017 : Debug: main {

Fri Jan  6 14:05:36 2017 : Debug:       name = "radiusd"

Fri Jan  6 14:05:36 2017 : Debug:       prefix = "/usr/local"

Fri Jan  6 14:05:36 2017 : Debug:       localstatedir = "/var"

Fri Jan  6 14:05:36 2017 : Debug:       sbindir = "/usr/local/sbin"

Fri Jan  6 14:05:36 2017 : Debug:       logdir = "/var/log"

Fri Jan  6 14:05:36 2017 : Debug:       run_dir = "/var/run/radiusd"

Fri Jan  6 14:05:36 2017 : Debug:       libdir = "/usr/local/lib"

Fri Jan  6 14:05:36 2017 : Debug:       radacctdir = "/var/log/radacct"

Fri Jan  6 14:05:36 2017 : Debug:       hostname_lookups = no

Fri Jan  6 14:05:36 2017 : Debug:       max_request_time = 30

Fri Jan  6 14:05:36 2017 : Debug:       cleanup_delay = 5

Fri Jan  6 14:05:36 2017 : Debug:       max_requests = 1024

Fri Jan  6 14:05:36 2017 : Debug:       pidfile = "/var/run/radiusd/radiusd.pid"

Fri Jan  6 14:05:36 2017 : Debug:       checkrad = "/usr/local/sbin/checkrad"

Fri Jan  6 14:05:36 2017 : Debug:       debug_level = 0

Fri Jan  6 14:05:36 2017 : Debug:       proxy_requests = no

Fri Jan  6 14:05:36 2017 : Debug:       log_auth = no

Fri Jan  6 14:05:36 2017 : Debug:       log_auth_badpass = yes

Fri Jan  6 14:05:36 2017 : Debug:       log_auth_goodpass = yes

Fri Jan  6 14:05:36 2017 : Debug:       log_stripped_names = no

Fri Jan  6 14:05:36 2017 : Debug:  security {

Fri Jan  6 14:05:36 2017 : Debug:       max_attributes = 200

Fri Jan  6 14:05:36 2017 : Debug:       reject_delay = 1

Fri Jan  6 14:05:36 2017 : Debug:       status_server = no

Fri Jan  6 14:05:36 2017 : Debug:       allow_vulnerable_openssl = no

Fri Jan  6 14:05:36 2017 : Debug:  }

Fri Jan  6 14:05:36 2017 : Debug: }

Fri Jan  6 14:05:36 2017 : Debug: radiusd: #### Loading Realms and Home Servers ####

Fri Jan  6 14:05:36 2017 : Debug:  proxy server {

Fri Jan  6 14:05:36 2017 : Debug:       retry_delay = 5

Fri Jan  6 14:05:36 2017 : Debug:       retry_count = 3

Fri Jan  6 14:05:36 2017 : Debug:       default_fallback = no

Fri Jan  6 14:05:36 2017 : Debug:       dead_time = 120

Fri Jan  6 14:05:36 2017 : Debug:       wake_all_if_all_dead = no

Fri Jan  6 14:05:36 2017 : Debug:  }

Fri Jan  6 14:05:36 2017 : Debug:  home_server localhost {

Fri Jan  6 14:05:36 2017 : Debug:       ipaddr = 127.0.0.1

Fri Jan  6 14:05:36 2017 : Debug:       port = 1812

Fri Jan  6 14:05:36 2017 : Debug:       type = "auth"

Fri Jan  6 14:05:36 2017 : Debug:       secret = "testing123"

Fri Jan  6 14:05:36 2017 : Debug:       response_window = 20

Fri Jan  6 14:05:36 2017 : Debug:       max_outstanding = 65536

Fri Jan  6 14:05:36 2017 : Debug:       require_message_authenticator = yes

Fri Jan  6 14:05:36 2017 : Debug:       zombie_period = 40

Fri Jan  6 14:05:36 2017 : Debug:       status_check = "status-server"

Fri Jan  6 14:05:36 2017 : Debug:       ping_interval = 30

Fri Jan  6 14:05:36 2017 : Debug:       check_interval = 30

Fri Jan  6 14:05:36 2017 : Debug:       num_answers_to_alive = 3

Fri Jan  6 14:05:36 2017 : Debug:       num_pings_to_alive = 3

Fri Jan  6 14:05:36 2017 : Debug:       revive_interval = 120

Fri Jan  6 14:05:36 2017 : Debug:       status_check_timeout = 4

Fri Jan  6 14:05:36 2017 : Debug:   coa {

Fri Jan  6 14:05:36 2017 : Debug:       irt = 2

Fri Jan  6 14:05:36 2017 : Debug:       mrt = 16

Fri Jan  6 14:05:36 2017 : Debug:       mrc = 5

Fri Jan  6 14:05:36 2017 : Debug:       mrd = 30

Fri Jan  6 14:05:36 2017 : Debug:   }

Fri Jan  6 14:05:36 2017 : Debug:  }

Fri Jan  6 14:05:36 2017 : Debug:  home_server_pool my_auth_failover {

Fri Jan  6 14:05:36 2017 : Debug:       type = fail-over

Fri Jan  6 14:05:36 2017 : Debug:       home_server = localhost

Fri Jan  6 14:05:36 2017 : Debug:  }

Fri Jan  6 14:05:36 2017 : Debug:  realm example.com {

Fri Jan  6 14:05:36 2017 : Debug:       auth_pool = my_auth_failover

Fri Jan  6 14:05:36 2017 : Debug:  }

Fri Jan  6 14:05:36 2017 : Debug:  realm LOCAL {

Fri Jan  6 14:05:36 2017 : Debug:  }

Fri Jan  6 14:05:36 2017 : Debug: radiusd: #### Loading Clients ####

Fri Jan  6 14:05:36 2017 : Debug:  client localhost {

Fri Jan  6 14:05:36 2017 : Debug:       ipaddr = 127.0.0.1

Fri Jan  6 14:05:36 2017 : Debug:       require_message_authenticator = no

Fri Jan  6 14:05:36 2017 : Debug:       secret = "testing123"

Fri Jan  6 14:05:36 2017 : Debug:       nastype = "other"

Fri Jan  6 14:05:36 2017 : Debug:  }

Fri Jan  6 14:05:36 2017 : Debug: radiusd: #### Instantiating modules ####

Fri Jan  6 14:05:36 2017 : Debug:  instantiate {

Fri Jan  6 14:05:36 2017 : Debug:     (Loaded rlm_exec, checking if it's valid)

Fri Jan  6 14:05:36 2017 : Debug:  Module: Linked to module rlm_exec

Fri Jan  6 14:05:36 2017 : Debug:  Module: Instantiating module "exec" from file /etc/freeradius/radiusd.conf

Fri Jan  6 14:05:36 2017 : Debug:   exec {

Fri Jan  6 14:05:36 2017 : Debug:       wait = yes

Fri Jan  6 14:05:36 2017 : Debug:       input_pairs = "request"

Fri Jan  6 14:05:36 2017 : Debug:       shell_escape = yes

Fri Jan  6 14:05:36 2017 : Debug:   }

Fri Jan  6 14:05:36 2017 : Debug:     (Loaded rlm_expr, checking if it's valid)

Fri Jan  6 14:05:36 2017 : Debug:  Module: Linked to module rlm_expr

Fri Jan  6 14:05:36 2017 : Debug:  Module: Instantiating module "expr" from file /etc/freeradius/radiusd.conf

Fri Jan  6 14:05:36 2017 : Debug:  }

Fri Jan  6 14:05:36 2017 : Debug: radiusd: #### Loading Virtual Servers ####

Fri Jan  6 14:05:36 2017 : Debug: server { # from file /etc/freeradius/radiusd.conf

Fri Jan  6 14:05:36 2017 : Debug:  modules {

Fri Jan  6 14:05:36 2017 : Debug:  } # modules

Fri Jan  6 14:05:36 2017 : Debug: } # server

Fri Jan  6 14:05:36 2017 : Debug: radiusd: #### Opening IP addresses and Ports ####

Fri Jan  6 14:05:36 2017 : Debug:       bind_address = *

Fri Jan  6 14:05:36 2017 : Info: WARNING: The directive 'bind_address' is deprecated, and will be removed in future versions of FreeRADIUS. Please edit the configuration files to use the directive 'listen'.

Fri Jan  6 14:05:36 2017 : Debug: Listening on authentication address * port 1812

Fri Jan  6 14:05:36 2017 : Debug: Listening on accounting address * port 1813

Fri Jan  6 14:05:36 2017 : Info: Ready to process requests.

and again it stays at line Ready to process requests.

When i try to start it with :

root@pppie:/home/dilian# /etc/init.d/freeradius start

[....] Starting freeradius (via systemctl): freeradius.serviceJob for freeradius.service failed because the control process exited with error code. See "systemctl status freeradius.service" and "journalctl -xe" for details.

 failed!

Im running as root

Very likely a permissions issue.

With -X the FreeRADIUS process does not switch users, it stays running as whoever executed it.

Start freeradius with:

-f -lstdout -xxx

• 
  -f Run in foreground


• 
  -lstdout log to stdout


• 
  -xxx set logging verbosity to the same as -X
  

It'll then run with the configured UID/GID.

My first attempt was to use the local host. The client details that I used for the localhost were the source of my problem.

when I entered the following for the testing client:

client 127.0.0.1{
secret = mysecret
short name = localhost
nastype = other
}

the service started and I was able to finish the installation on Ubuntu 16.04