Hello there,

How did you manage to do that? Did you change the radius config on the system 
and not the web admin ?

Radius says that you have already a process listening on the 1812.

It’s either a stale process or bad configuration.

Do:

/usr/local/pf/bin/pfcmd service pf stop 

netstat -nlp | grep 1812

Do you have a process that listen still ? If yes, kill it.

You can double check the radius config with:

cd /usr/local/pf

freeradius -d raddb/ -n auth -CX

Or 

radiusd -d raddb/ -n auth -CX

You should see something like:

Configuration appears to be OK

Thanks,


Ludovic Zammit
Product Support Engineer Principal

Cell: +1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us:         <https://community.akamai.com/>  
<http://blogs.akamai.com/>  <https://twitter.com/akamai>  
<http://www.facebook.com/AkamaiTechnologies>  
<http://www.linkedin.com/company/akamai-technologies>  
<http://www.youtube.com/user/akamaitechnologies?feature=results_main>

> On Apr 4, 2022, at 4:08 AM, P.Thirunavukkarasu via PacketFence-users 
> <packetfence-users@lists.sourceforge.net> wrote:
> 
> Hi Team,
> Greetings of the day
> Linux packetfence 5.10.0-11-amd64 #1 SMP Debian 5.10.92-1 (2022-01-18) x86_64 
> (ZEN)
> I don't know how to debug the RADIUS in packetfence. As given in the 
> Installation guide I tried the debugging 
> I don't know what system is monitoring FreeRADIUS in packetfence, how to 
> figure it out? 
> 
> Herewith I am sending the RADIUS log
> Apr  4 00:00:02 packetfence auth[1288515]: /usr/local/pf/raddb/auth.conf[19]: 
> Error binding to port for 172.16.11.10 port 1812
> Apr  4 00:00:06 packetfence auth[1288559]: Ignoring "response_window = 
> 20.000000", forcing to "response_window = 10.000000"
> Apr  4 00:00:06 packetfence auth[1288559]: Ignoring "response_window = 
> 30.000000", forcing to "response_window = 10.000000"
> Apr  4 00:00:06 packetfence auth[1288559]: Ignoring "response_window = 
> 30.000000", forcing to "response_window = 10.000000"
> Apr  4 00:00:06 packetfence auth[1288559]: Ignoring "response_window = 
> 30.000000", forcing to "response_window = 10.000000"
> Apr  4 00:00:06 packetfence auth[1288559]: Debugger not attached
> Apr  4 00:00:06 packetfence auth[1288559]: systemd watchdog interval is 5.00 
> secs
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql): Driver 
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (pfguest): Driver 
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (pfsponsor): Driver 
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (pfsms): Driver 
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (pflocal): Driver 
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql_reject): Driver 
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql_degraded): Driver 
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Apr  4 00:00:06 packetfence auth[1288559]: Perl version: 5.32.0
> Apr  4 00:00:06 packetfence auth[1288559]: Perl version: 5.32.0
> Apr  4 00:00:06 packetfence auth[1288559]: Perl version: 5.32.0
> Apr  4 00:00:06 packetfence auth[1288559]: Perl version: 5.32.0
> Apr  4 00:00:06 packetfence auth[1288559]: Perl version: 5.32.0
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_redis: libhiredis version: 
> 0.14.1
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_redis: libhiredis version: 
> 0.14.1
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_rest: libcurl version: 
> libcurl/7.74.0 OpenSSL/1.1.1k zlib/1.2.11 brotli/1.0.9 libidn2/2.3.0 
> libpsl/0.21.0 (+libidn2/2.3.0) libssh2/1.9.0 nghttp2/1.43.0 librtmp/2.3
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql_mysql: libmysql version: 
> 10.5.15
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql): Attempting to 
> connect to database "pf"
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (pfguest): Attempting to 
> connect to database "pf"
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (pfsponsor): Attempting to 
> connect to database "pf"
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (pfsms): Attempting to 
> connect to database "pf"
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (pflocal): Attempting to 
> connect to database "pf"
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql_reject): 
> groupmemb_query is empty.  Please delete it from the configuration
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql_reject): 
> authorize_check_query is empty.  Please delete it from the configuration
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql_reject): Attempting 
> to connect to database "pf"
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql_degraded): 
> groupmemb_query is empty.  Please delete it from the configuration
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql_degraded): Ignoring 
> read_groups as group_membership_query is not configured
> Apr  4 00:00:06 packetfence auth[1288559]: rlm_sql (sql_degraded): Attempting 
> to connect to database "pf"
> Apr  4 00:00:07 packetfence auth[1288559]: rlm_ldap: libldap vendor: 
> OpenLDAP, version: 20457
> Apr  4 00:00:07 packetfence auth[1288559]: 
> [/usr/local/pf/raddb/mods-config/attr_filter/access_reject]:11 Check item 
> "FreeRADIUS-Response-Delay" found in filter list for realm "DEFAULT".
> Apr  4 00:00:07 packetfence auth[1288559]: 
> [/usr/local/pf/raddb/mods-config/attr_filter/access_reject]:11 Check item 
> "FreeRADIUS-Response-Delay-USec" found in filter list for realm "DEFAULT".
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server <default>
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server status
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server 
> packetfence-tunnel
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server 
> packetfence-tunnel-fast
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server packetfence
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server pf-remote
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server pf.degraded
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server 
> packetfence-degraded-tunnel
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server 
> dynamic_clients
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server eduroam
> Apr  4 00:00:07 packetfence auth[1288559]: Loaded virtual server 
> packetfence-cli
> Apr  4 00:00:07 packetfence auth[1288559]: Failed binding to auth address 
> 172.16.11.10 port 1812 bound to server packetfence: Address already in use
> Apr  4 00:00:07 packetfence auth[1288559]: /usr/local/pf/raddb/auth.conf[19]: 
> Error binding to port for 172.16.11.10 port 1812
> 
> I tried a lot to debug the RADIUS. But not able to succeed....
> 
> freeradiud -X -d /usr/local/pf/raddb -n auth
> listen {
>         type = "auth"
>         virtual_server = "packetfence"
>         ipaddr = 172.16.11.10
>         port = 0
> Failed binding to auth address 172.16.11.10 port 1812 bound to server 
> packetfence: Address already in use
> /usr/local/pf/raddb/auth.conf[19]: Error binding to port for 172.16.11.10 
> port 1812
> 
> freeradius -X -d /usr/local/pf/raddb -n acct
> acct: #### Opening IP addresses and Ports ####
> listen {
>         type = "acct"
>         virtual_server = "packetfence"
>         ipaddr = 172.16.11.10
>         port = 0
> Failed binding to acct address 172.16.11.10 port 1813 bound to server 
> packetfence: Address already in use
> /usr/local/pf/raddb/acct.conf[8]: Error binding to port for 172.16.11.10 port 
> 1813
> 
> The O/P shows that the port is already in use. Indicated that the RADIUS is 
> running by using the ports....
> 
> root@packetfence:~# raddebug -t 300 -f /usr/local/pf/var/run/radiusd.sock
> radmin: Failed connecting to /usr/local/pf/var/run/radiusd.sock: No such file 
> or directory
> Perhaps you need to run the commands:   cd /etc/raddb
>         ln -s sites-available/control-socket sites-enabled/control-socket
> and then re-start the server?
> 
> root@packetfence:~# raddebug -t 300 -f /usr/local/pf/var/run/radiusd-acct.sock
> radmin: Failed connecting to /usr/local/pf/var/run/radiusd-acct.sock: No such 
> file or directory
> Perhaps you need to run the commands:   cd /etc/raddb
>         ln -s sites-available/control-socket sites-enabled/control-socket
> and then re-start the server?
> 
> How to start and stop the freeradius service
> Is freeradius set to auto-restart when stopped?
> Regards
> Thirunavukkarasu
> 
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!CuF6GhMhgWgbVZ8Yx58jCV-tiu9f6ZwT-JkBaWd-eCV3AUTskoWJFkuZmu0inGA5$
>  

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to