Version 3.0.20 has been released

classic Classic list List threaded Threaded
15 messages Options
| Threaded
Open this post in threaded view
|

Version 3.0.20 has been released

Matthew Newton-3
Version 3.0.20 has now been released. Full release notes are on the web
site:

  https://freeradius.org/release_notes/?br=3.0.x&re=3.0.20

As the aim for version 3 is stability, this is mainly a bugfix release,
though there have been a few minor features added, too.

Some highlights:

New modules (experimental, please test):

  - Python3 support with rlm_python3.
  - MongoDB support in rlm_sql_mongo.

Security updates:

  - More EAP-PWD security fixes. Please upgrade if you use this.
  - Tighten security when running with systemd
  - Disable TLS 1.0 and 1.1 in the default configuration (strongly
recommended to do this in all installations).

Dockerfiles and packaging updates to add support for:

  - Debian 10
  - RHEL/CentOS8

As well as many other fixes and improvements, including the usual
documentation and dictionaries.

Download from all the usual places:

  https://freeradius.org/releases/

  ftp://ftp.freeradius.org/pub/freeradius/

  https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20

Docker images are building and will upload to Dockerhub shortly.
Packages will be available on https://packages.networkradius.com/
within a day or so.

--
Matthew


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Karunagaran D
Dear Team,
 Thank you for your update
Regards,
Karunad

On Thu, Nov 14, 2019 at 11:34 PM Matthew Newton <[hidden email]> wrote:

> Version 3.0.20 has now been released. Full release notes are on the web
> site:
>
>   https://freeradius.org/release_notes/?br=3.0.x&re=3.0.20
>
> As the aim for version 3 is stability, this is mainly a bugfix release,
> though there have been a few minor features added, too.
>
> Some highlights:
>
> New modules (experimental, please test):
>
>   - Python3 support with rlm_python3.
>   - MongoDB support in rlm_sql_mongo.
>
> Security updates:
>
>   - More EAP-PWD security fixes. Please upgrade if you use this.
>   - Tighten security when running with systemd
>   - Disable TLS 1.0 and 1.1 in the default configuration (strongly
> recommended to do this in all installations).
>
> Dockerfiles and packaging updates to add support for:
>
>   - Debian 10
>   - RHEL/CentOS8
>
> As well as many other fixes and improvements, including the usual
> documentation and dictionaries.
>
> Download from all the usual places:
>
>   https://freeradius.org/releases/
>
>   ftp://ftp.freeradius.org/pub/freeradius/
>
>
> https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20
>
> Docker images are building and will upload to Dockerhub shortly.
> Packages will be available on https://packages.networkradius.com/
> within a day or so.
>
> --
> Matthew
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html



--




D.Karunagaran
Network Administrator,
SSN College of Engineering,
Old Mahabalipuram Road, Kalavakkam -603110, Chennai, India,
Ph: +91-44-27469700/27469772   Ext: 222;

--
::DISCLAIMER::


---------------------------------------------------------------------
The
contents of this e-mail and any attachment(s) are confidential and
intended
for the named recipient(s) only. Views or opinions, if any,
presented in
this email are solely those of the author and may not
necessarily reflect
the views or opinions of SSN Institutions (SSN) or its
affiliates. Any form
of reproduction, dissemination, copying, disclosure,
modification,
distribution and / or publication of this message without the
prior written
consent of authorized representative of SSN is strictly
prohibited. If you
have received this email in error please delete it and
notify the sender
immediately.

---------------------------------------------------------------------

Header of this mail should have a valid DKIM signature for the domain
ssn.edu.in <http://www.ssn.edu.in/>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Matthew Newton-3
In reply to this post by Matthew Newton-3
On Thu, 2019-11-14 at 18:04 +0000, Matthew Newton wrote:
> Docker images are building and will upload to Dockerhub shortly.
> Packages will be available on https://packages.networkradius.com/
> within a day or so.

Docker images and packages are now available.

--
Matthew


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

arr2036


> On 16 Nov 2019, at 19:50, Matthew Newton <[hidden email]> wrote:
>
> On Thu, 2019-11-14 at 18:04 +0000, Matthew Newton wrote:
>> Docker images are building and will upload to Dockerhub shortly.
>> Packages will be available on https://packages.networkradius.com/
>> within a day or so.
>
> Docker images and packages are now available.

Congratulations to Matthew as his new official position as release manager :)

-Arran


Arran Cudbard-Bell <[hidden email]>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Houman
In reply to this post by Matthew Newton-3
Great news.

Will this be included in Ubuntu 18.04 LTS?

Thanks,
Houman

On Thu, 14 Nov 2019 at 18:05, Matthew Newton <[hidden email]> wrote:

> Version 3.0.20 has now been released. Full release notes are on the web
> site:
>
>   https://freeradius.org/release_notes/?br=3.0.x&re=3.0.20
>
> As the aim for version 3 is stability, this is mainly a bugfix release,
> though there have been a few minor features added, too.
>
> Some highlights:
>
> New modules (experimental, please test):
>
>   - Python3 support with rlm_python3.
>   - MongoDB support in rlm_sql_mongo.
>
> Security updates:
>
>   - More EAP-PWD security fixes. Please upgrade if you use this.
>   - Tighten security when running with systemd
>   - Disable TLS 1.0 and 1.1 in the default configuration (strongly
> recommended to do this in all installations).
>
> Dockerfiles and packaging updates to add support for:
>
>   - Debian 10
>   - RHEL/CentOS8
>
> As well as many other fixes and improvements, including the usual
> documentation and dictionaries.
>
> Download from all the usual places:
>
>   https://freeradius.org/releases/
>
>   ftp://ftp.freeradius.org/pub/freeradius/
>
>
> https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20
>
> Docker images are building and will upload to Dockerhub shortly.
> Packages will be available on https://packages.networkradius.com/
> within a day or so.
>
> --
> Matthew
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

arr2036


> On 17 Nov 2019, at 10:19, Houman <[hidden email]> wrote:
>
> Great news.
>
> Will this be included in Ubuntu 18.04 LTS?


I'd ask the Debian/Ubuntu packaging team.  They control the release cycle for those packages, not us.

That's why we started providing our own for Debian/Centos (packages.networkradius.com).

-Arran


Arran Cudbard-Bell <[hidden email]>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Houman
That’s amazing. Thank you.



On Sun, 17 Nov 2019 at 15:40, Arran Cudbard-Bell <[hidden email]>
wrote:

>
>
> > On 17 Nov 2019, at 10:19, Houman <[hidden email]> wrote:
> >
> > Great news.
> >
> > Will this be included in Ubuntu 18.04 LTS?
>
>
> I'd ask the Debian/Ubuntu packaging team.  They control the release cycle
> for those packages, not us.
>
> That's why we started providing our own for Debian/Centos (
> packages.networkradius.com).
>
> -Arran
>
>
> Arran Cudbard-Bell <[hidden email]>
> FreeRADIUS Development Team
>
> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Matthew Newton-3
In reply to this post by arr2036


On 17 November 2019 15:10:53 GMT, Arran Cudbard-Bell <[hidden email]> wrote:
>
>Congratulations to Matthew as his new official position as release manager :)

Very funny...

--
Matthew

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

AW: Version 3.0.20 has been released

Oliver Wirth
In reply to this post by Houman
Hello Houman,

since 18.04 is already released there will be no upgrades within a release, according to my knowledge.
The question would be if 3.0.20 would be included in Ubuntu 20.04 LTS.

Best regards
Oliver

-----Ursprüngliche Nachricht-----
Von: Freeradius-Users <freeradius-users-bounces+o.wirth=[hidden email]> Im Auftrag von Houman
Gesendet: Sonntag, 17. November 2019 16:19
An: FreeRadius users mailing list <[hidden email]>
Betreff: Re: Version 3.0.20 has been released

Great news.

Will this be included in Ubuntu 18.04 LTS?

Thanks,
Houman

On Thu, 14 Nov 2019 at 18:05, Matthew Newton <[hidden email]> wrote:

> Version 3.0.20 has now been released. Full release notes are on the
> web
> site:
>
>   https://freeradius.org/release_notes/?br=3.0.x&re=3.0.20
>
> As the aim for version 3 is stability, this is mainly a bugfix
> release, though there have been a few minor features added, too.
>
> Some highlights:
>
> New modules (experimental, please test):
>
>   - Python3 support with rlm_python3.
>   - MongoDB support in rlm_sql_mongo.
>
> Security updates:
>
>   - More EAP-PWD security fixes. Please upgrade if you use this.
>   - Tighten security when running with systemd
>   - Disable TLS 1.0 and 1.1 in the default configuration (strongly
> recommended to do this in all installations).
>
> Dockerfiles and packaging updates to add support for:
>
>   - Debian 10
>   - RHEL/CentOS8
>
> As well as many other fixes and improvements, including the usual
> documentation and dictionaries.
>
> Download from all the usual places:
>
>   https://freeradius.org/releases/
>
>   ftp://ftp.freeradius.org/pub/freeradius/
>
>
> https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3
> _0_20
>
> Docker images are building and will upload to Dockerhub shortly.
> Packages will be available on https://packages.networkradius.com/
> within a day or so.
>
> --
> Matthew
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Houman
Hello Oliver,

I thought minor patches will still be included, but fair enough. I think in
this case, I have to install the package via the official ppa, which is
also fine. I’m glad it is provided.

The memory leak right now is an issue that I’m experiencing on our
production. Hence I have no choice than to upgrade.

Many thanks,
Houman


On Mon, 18 Nov 2019 at 17:59, Wirth, Oliver <[hidden email]> wrote:

> Hello Houman,
>
> since 18.04 is already released there will be no upgrades within a
> release, according to my knowledge.
> The question would be if 3.0.20 would be included in Ubuntu 20.04 LTS.
>
> Best regards
> Oliver
>
> -----Ursprüngliche Nachricht-----
> Von: Freeradius-Users <freeradius-users-bounces+o.wirth=
> [hidden email]> Im Auftrag von Houman
> Gesendet: Sonntag, 17. November 2019 16:19
> An: FreeRadius users mailing list <[hidden email]>
> Betreff: Re: Version 3.0.20 has been released
>
> Great news.
>
> Will this be included in Ubuntu 18.04 LTS?
>
> Thanks,
> Houman
>
> On Thu, 14 Nov 2019 at 18:05, Matthew Newton <[hidden email]> wrote:
>
> > Version 3.0.20 has now been released. Full release notes are on the
> > web
> > site:
> >
> >   https://freeradius.org/release_notes/?br=3.0.x&re=3.0.20
> >
> > As the aim for version 3 is stability, this is mainly a bugfix
> > release, though there have been a few minor features added, too.
> >
> > Some highlights:
> >
> > New modules (experimental, please test):
> >
> >   - Python3 support with rlm_python3.
> >   - MongoDB support in rlm_sql_mongo.
> >
> > Security updates:
> >
> >   - More EAP-PWD security fixes. Please upgrade if you use this.
> >   - Tighten security when running with systemd
> >   - Disable TLS 1.0 and 1.1 in the default configuration (strongly
> > recommended to do this in all installations).
> >
> > Dockerfiles and packaging updates to add support for:
> >
> >   - Debian 10
> >   - RHEL/CentOS8
> >
> > As well as many other fixes and improvements, including the usual
> > documentation and dictionaries.
> >
> > Download from all the usual places:
> >
> >   https://freeradius.org/releases/
> >
> >   ftp://ftp.freeradius.org/pub/freeradius/
> >
> >
> > https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3
> > _0_20
> >
> > Docker images are building and will upload to Dockerhub shortly.
> > Packages will be available on https://packages.networkradius.com/
> > within a day or so.
> >
> > --
> > Matthew
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Jorge Pereira-2
Houman,

Please let us know if you got rid of the memory leak using the 3.0.20.
---
Jorge Pereira
[hidden email]



> On 18 Nov 2019, at 15:02, Houman <[hidden email]> wrote:
>
> Hello Oliver,
>
> I thought minor patches will still be included, but fair enough. I think in
> this case, I have to install the package via the official ppa, which is
> also fine. I’m glad it is provided.
>
> The memory leak right now is an issue that I’m experiencing on our
> production. Hence I have no choice than to upgrade.
>
> Many thanks,
> Houman
>
>
> On Mon, 18 Nov 2019 at 17:59, Wirth, Oliver <[hidden email]> wrote:
>
>> Hello Houman,
>>
>> since 18.04 is already released there will be no upgrades within a
>> release, according to my knowledge.
>> The question would be if 3.0.20 would be included in Ubuntu 20.04 LTS.
>>
>> Best regards
>> Oliver
>>
>> -----Ursprüngliche Nachricht-----
>> Von: Freeradius-Users <freeradius-users-bounces+o.wirth=
>> [hidden email]> Im Auftrag von Houman
>> Gesendet: Sonntag, 17. November 2019 16:19
>> An: FreeRadius users mailing list <[hidden email]>
>> Betreff: Re: Version 3.0.20 has been released
>>
>> Great news.
>>
>> Will this be included in Ubuntu 18.04 LTS?
>>
>> Thanks,
>> Houman
>>
>> On Thu, 14 Nov 2019 at 18:05, Matthew Newton <[hidden email]> wrote:
>>
>>> Version 3.0.20 has now been released. Full release notes are on the
>>> web
>>> site:
>>>
>>>  https://freeradius.org/release_notes/?br=3.0.x&re=3.0.20
>>>
>>> As the aim for version 3 is stability, this is mainly a bugfix
>>> release, though there have been a few minor features added, too.
>>>
>>> Some highlights:
>>>
>>> New modules (experimental, please test):
>>>
>>>  - Python3 support with rlm_python3.
>>>  - MongoDB support in rlm_sql_mongo.
>>>
>>> Security updates:
>>>
>>>  - More EAP-PWD security fixes. Please upgrade if you use this.
>>>  - Tighten security when running with systemd
>>>  - Disable TLS 1.0 and 1.1 in the default configuration (strongly
>>> recommended to do this in all installations).
>>>
>>> Dockerfiles and packaging updates to add support for:
>>>
>>>  - Debian 10
>>>  - RHEL/CentOS8
>>>
>>> As well as many other fixes and improvements, including the usual
>>> documentation and dictionaries.
>>>
>>> Download from all the usual places:
>>>
>>>  https://freeradius.org/releases/
>>>
>>>  ftp://ftp.freeradius.org/pub/freeradius/
>>>
>>>
>>> https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3
>>> _0_20
>>>
>>> Docker images are building and will upload to Dockerhub shortly.
>>> Packages will be available on https://packages.networkradius.com/
>>> within a day or so.
>>>
>>> --
>>> Matthew
>>>
>>>
>>> -
>>> List info/subscribe/unsubscribe? See
>>> http://www.freeradius.org/list/users.html
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Houman
Hello,

Sure, I let you know Jorge, how it goes.

I have previously setup Freeradius 3.0.16 that comes with Ubuntu 18.04.  I
followed these steps to install the latest 3.0.20 and it works great..but

echo 'deb http://packages.networkradius.com/releases/ubuntu-bionic
bionic main' >> /etc/apt/sources.list
apt-key adv --keyserver keys.gnupg.net --recv-key 0x41382202
apt update
apt full-upgrade -y

But Freeradius can no longer start. I believe the default path has now
changed from "/etc/freeradius/3.0/ to "/etc/freeradius/. Can someone
confirm this, please?
Can I set the default path somewhere back to how it was to avoid having to
move certs and configs around?

Nov 22 20:32:59 stag-2 freeradius[15078]: FreeRADIUS Version 3.0.20
Nov 22 20:32:59 stag-2 freeradius[15078]: Copyright (C) 1999-2019 The
FreeRADIUS server project and contributors
Nov 22 20:32:59 stag-2 freeradius[15078]: There is NO warranty; not even
for MERCHANTABILITY or FITNESS FOR A
Nov 22 20:32:59 stag-2 freeradius[15078]: PARTICULAR PURPOSE
Nov 22 20:32:59 stag-2 freeradius[15078]: You may redistribute copies of
FreeRADIUS under the terms of the
Nov 22 20:32:59 stag-2 freeradius[15078]: GNU General Public License
Nov 22 20:32:59 stag-2 freeradius[15078]: For more information about these
matters, see the file named COPYRIGHT
Nov 22 20:32:59 stag-2 freeradius[15078]: Starting - reading configuration
files ...
Nov 22 20:32:59 stag-2 freeradius[15078]: Debug state unknown
(cap_sys_ptrace capability not set)
Nov 22 20:32:59 stag-2 freeradius[15078]: Creating attribute Unix-Group
Nov 22 20:32:59 stag-2 freeradius[15078]: Unable to check file
"/etc/freeradius/certs/server.pem": No such file or directory
Nov 22 20:32:59 stag-2 freeradius[15078]:
/etc/freeradius/mods-enabled/eap[183]: Failed parsing configuration item
"private_key_file"
Nov 22 20:32:59 stag-2 freeradius[15078]: rlm_eap_tls: Failed initializing
SSL context
Nov 22 20:32:59 stag-2 freeradius[15078]: rlm_eap (EAP): Failed to
initialise rlm_eap_tls
Nov 22 20:32:59 stag-2 freeradius[15078]:
/etc/freeradius/mods-enabled/eap[14]: Instantiation failed for module "eap"
Nov 22 20:32:59 stag-2 systemd[1]: freeradius.service: Control process
exited, code=exited status=1
Nov 22 20:32:59 stag-2 systemd[1]: freeradius.service: Failed with result
'exit-code'.
Nov 22 20:32:59 stag-2 systemd[1]: Failed to start FreeRADIUS
multi-protocol policy server.

Many Thanks,
Houman


On Mon, 18 Nov 2019 at 20:01, Jorge Pereira <[hidden email]> wrote:

> Houman,
>
> Please let us know if you got rid of the memory leak using the 3.0.20.
> ---
> Jorge Pereira
> [hidden email]
>
>
>
> > On 18 Nov 2019, at 15:02, Houman <[hidden email]> wrote:
> >
> > Hello Oliver,
> >
> > I thought minor patches will still be included, but fair enough. I think
> in
> > this case, I have to install the package via the official ppa, which is
> > also fine. I’m glad it is provided.
> >
> > The memory leak right now is an issue that I’m experiencing on our
> > production. Hence I have no choice than to upgrade.
> >
> > Many thanks,
> > Houman
> >
> >
> > On Mon, 18 Nov 2019 at 17:59, Wirth, Oliver <[hidden email]> wrote:
> >
> >> Hello Houman,
> >>
> >> since 18.04 is already released there will be no upgrades within a
> >> release, according to my knowledge.
> >> The question would be if 3.0.20 would be included in Ubuntu 20.04 LTS.
> >>
> >> Best regards
> >> Oliver
> >>
> >> -----Ursprüngliche Nachricht-----
> >> Von: Freeradius-Users <freeradius-users-bounces+o.wirth=
> >> [hidden email]> Im Auftrag von Houman
> >> Gesendet: Sonntag, 17. November 2019 16:19
> >> An: FreeRadius users mailing list <
> [hidden email]>
> >> Betreff: Re: Version 3.0.20 has been released
> >>
> >> Great news.
> >>
> >> Will this be included in Ubuntu 18.04 LTS?
> >>
> >> Thanks,
> >> Houman
> >>
> >> On Thu, 14 Nov 2019 at 18:05, Matthew Newton <[hidden email]>
> wrote:
> >>
> >>> Version 3.0.20 has now been released. Full release notes are on the
> >>> web
> >>> site:
> >>>
> >>>  https://freeradius.org/release_notes/?br=3.0.x&re=3.0.20
> >>>
> >>> As the aim for version 3 is stability, this is mainly a bugfix
> >>> release, though there have been a few minor features added, too.
> >>>
> >>> Some highlights:
> >>>
> >>> New modules (experimental, please test):
> >>>
> >>>  - Python3 support with rlm_python3.
> >>>  - MongoDB support in rlm_sql_mongo.
> >>>
> >>> Security updates:
> >>>
> >>>  - More EAP-PWD security fixes. Please upgrade if you use this.
> >>>  - Tighten security when running with systemd
> >>>  - Disable TLS 1.0 and 1.1 in the default configuration (strongly
> >>> recommended to do this in all installations).
> >>>
> >>> Dockerfiles and packaging updates to add support for:
> >>>
> >>>  - Debian 10
> >>>  - RHEL/CentOS8
> >>>
> >>> As well as many other fixes and improvements, including the usual
> >>> documentation and dictionaries.
> >>>
> >>> Download from all the usual places:
> >>>
> >>>  https://freeradius.org/releases/
> >>>
> >>>  ftp://ftp.freeradius.org/pub/freeradius/
> >>>
> >>>
> >>> https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3
> >>> _0_20
> >>>
> >>> Docker images are building and will upload to Dockerhub shortly.
> >>> Packages will be available on https://packages.networkradius.com/
> >>> within a day or so.
> >>>
> >>> --
> >>> Matthew
> >>>
> >>>
> >>> -
> >>> List info/subscribe/unsubscribe? See
> >>> http://www.freeradius.org/list/users.html
> >> -
> >> List info/subscribe/unsubscribe? See
> >> http://www.freeradius.org/list/users.html
> >>
> >> -
> >> List info/subscribe/unsubscribe? See
> >> http://www.freeradius.org/list/users.html
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Matthew Newton-3
On Fri, 2019-11-22 at 20:57 +0000, Houman wrote:
> But Freeradius can no longer start. I believe the default path has
> now changed from "/etc/freeradius/3.0/ to "/etc/freeradius/. Can
> someone confirm this, please?

At some point Debian decided they were going to move the config from
/etc/freeradius to /etc/freeradius/3.0, so their packages are
different.

> Can I set the default path somewhere back to how it was to avoid
> having to move certs and configs around?

Easiest is probably to move all the files from /etc/freeradius/3.0 to
etc/freeradius, remove the unnecessary directory, and create a symlink
in case anything's still looking in the other location, something like

  mv /etc/freeradius/3.0/* /etc/freeradius/
  rmdir /etc/freeradius/3.0
  ln -s /etc/freeradius/3.0 /etc/freeradius

Or you can change where it looks for its config in
/etc/default/freeradius: add `-d /etc/freeradius/3.0` to the command
line args.

--
Matthew


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Houman
Hi Matthew,

Thank you for confirming. I noticed there is no dh file in the certs folder
anymore:

Nov 22 21:15:31 stag-2 freeradius[28702]: Unable to check file
"/etc/freeradius/certs/dh": No such file or directory

So I copied the existing dh file from /etc/freeradius/3.0/certs/dh to
/etc/freeradius/certs/dh

Nov 22 21:26:02 stag-2 freeradius[32109]: Please use tls_min_version and
tls_max_version instead of disable_tlsv1
Nov 22 21:26:02 stag-2 freeradius[32109]: Please use tls_min_version and
tls_max_version instead of disable_tlsv1_2
Nov 22 21:26:02 stag-2 freeradius[32109]: tls: Unable to open DH file -
/etc/freeradius/certs/dh
Nov 22 21:26:02 stag-2 freeradius[32109]: rlm_eap_tls: Failed initializing
SSL context
Nov 22 21:26:02 stag-2 freeradius[32109]: rlm_eap (EAP): Failed to
initialise rlm_eap_tls
Nov 22 21:26:02 stag-2 freeradius[32109]:
/etc/freeradius/mods-enabled/eap[14]: Instantiation failed for module "eap"

I didn't create this dh file previously myself, how is it generated and do
you know why is it now missing?

Thank you,
Houman


On Fri, 22 Nov 2019 at 21:11, Matthew Newton <[hidden email]> wrote:

> On Fri, 2019-11-22 at 20:57 +0000, Houman wrote:
> > But Freeradius can no longer start. I believe the default path has
> > now changed from "/etc/freeradius/3.0/ to "/etc/freeradius/. Can
> > someone confirm this, please?
>
> At some point Debian decided they were going to move the config from
> /etc/freeradius to /etc/freeradius/3.0, so their packages are
> different.
>
> > Can I set the default path somewhere back to how it was to avoid
> > having to move certs and configs around?
>
> Easiest is probably to move all the files from /etc/freeradius/3.0 to
> etc/freeradius, remove the unnecessary directory, and create a symlink
> in case anything's still looking in the other location, something like
>
>   mv /etc/freeradius/3.0/* /etc/freeradius/
>   rmdir /etc/freeradius/3.0
>   ln -s /etc/freeradius/3.0 /etc/freeradius
>
> Or you can change where it looks for its config in
> /etc/default/freeradius: add `-d /etc/freeradius/3.0` to the command
> line args.
>
> --
> Matthew
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
| Threaded
Open this post in threaded view
|

Re: Version 3.0.20 has been released

Jorge Pereira-2
Houman,

Try using:

$ openssl dhparam -out /etc/freeradius/certs/dh 2048

----
Jorge Pereira
[hidden email]


> On 22 Nov 2019, at 18:27, Houman <[hidden email]> wrote:
>
> Hi Matthew,
>
> Thank you for confirming. I noticed there is no dh file in the certs folder
> anymore:
>
> Nov 22 21:15:31 stag-2 freeradius[28702]: Unable to check file
> "/etc/freeradius/certs/dh": No such file or directory
>
> So I copied the existing dh file from /etc/freeradius/3.0/certs/dh to
> /etc/freeradius/certs/dh
>
> Nov 22 21:26:02 stag-2 freeradius[32109]: Please use tls_min_version and
> tls_max_version instead of disable_tlsv1
> Nov 22 21:26:02 stag-2 freeradius[32109]: Please use tls_min_version and
> tls_max_version instead of disable_tlsv1_2
> Nov 22 21:26:02 stag-2 freeradius[32109]: tls: Unable to open DH file -
> /etc/freeradius/certs/dh
> Nov 22 21:26:02 stag-2 freeradius[32109]: rlm_eap_tls: Failed initializing
> SSL context
> Nov 22 21:26:02 stag-2 freeradius[32109]: rlm_eap (EAP): Failed to
> initialise rlm_eap_tls
> Nov 22 21:26:02 stag-2 freeradius[32109]:
> /etc/freeradius/mods-enabled/eap[14]: Instantiation failed for module "eap"
>
> I didn't create this dh file previously myself, how is it generated and do
> you know why is it now missing?
>
> Thank you,
> Houman
>
>
> On Fri, 22 Nov 2019 at 21:11, Matthew Newton <[hidden email]> wrote:
>
>> On Fri, 2019-11-22 at 20:57 +0000, Houman wrote:
>>> But Freeradius can no longer start. I believe the default path has
>>> now changed from "/etc/freeradius/3.0/ to "/etc/freeradius/. Can
>>> someone confirm this, please?
>>
>> At some point Debian decided they were going to move the config from
>> /etc/freeradius to /etc/freeradius/3.0, so their packages are
>> different.
>>
>>> Can I set the default path somewhere back to how it was to avoid
>>> having to move certs and configs around?
>>
>> Easiest is probably to move all the files from /etc/freeradius/3.0 to
>> etc/freeradius, remove the unnecessary directory, and create a symlink
>> in case anything's still looking in the other location, something like
>>
>>  mv /etc/freeradius/3.0/* /etc/freeradius/
>>  rmdir /etc/freeradius/3.0
>>  ln -s /etc/freeradius/3.0 /etc/freeradius
>>
>> Or you can change where it looks for its config in
>> /etc/default/freeradius: add `-d /etc/freeradius/3.0` to the command
>> line args.
>>
>> --
>> Matthew
>>
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html