Public bug reported:

1) When freeradius is configured (rediusd.conf) to start as unprivileged 
user/group (freerad) it fails to start. Looks like it drops the privileges too 
early, resulting in its being unable to read a number of configuration files 
(all of them owned by root, of course):
# Loaded module rlm_preprocess
  # Loading module "preprocess" from file 
/etc/freeradius/mods-enabled/preprocess
  preprocess {
        huntgroups = "/etc/freeradius/mods-config/preprocess/huntgroups"
Unable to check file "/etc/freeradius/mods-config/preprocess/huntgroups": 
Permission denied
/etc/freeradius/mods-enabled/preprocess[13]: Invalid configuration for module 
"preprocess"

2) Talking about the startup problems, with EAP-TLS enabled it won't start 
unless $tmpdir(e.g. /tmp/radiusd) exists — openssl requirement. So I had to 
modify this section in init script to take care of it:
# /var/run may be a tmpfs
for i in "/var/run/freeradius" "/tmp/radiusd"
do
if [ ! -d $i ]; then
    mkdir -p $i
    chown freerad:freerad $i
fi
done

** Affects: freeradius (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1730362

Title:
  fails to start as user/group freerad (recommended!)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeradius/+bug/1730362/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to