Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
|
getting_started:20_install_ubuntu_freeradius_3 [2022/06/13 06:09] admin created |
getting_started:20_install_ubuntu_freeradius_3 [2022/08/31 21:56] (current) admin |
||
|---|---|---|---|
| Line 14: | Line 14: | ||
| sudo systemctl enable freeradius | sudo systemctl enable freeradius | ||
| sudo systemctl start freeradius | sudo systemctl start freeradius | ||
| + | sudo systemctl status freeradius | ||
| + | </ | ||
| + | ====== Configuring FreeRADIUS version 3.x ====== | ||
| + | * Do the following to configure FreeRADIUS 3.x to work with RADIUSdesk | ||
| + | <code bash> | ||
| + | # Stop the service if it is already running | ||
| + | sudo systemctl stop freeradius | ||
| + | # Backup the original FreeRADIUSdirectory | ||
| + | sudo mv / | ||
| + | # Extract the RADIUSdesk modified FreeRADIUS directory | ||
| + | sudo tar xzf / | ||
| + | sudo mv / | ||
| + | sudo chown -R freerad. / | ||
| + | sudo mkdir / | ||
| + | chown freerad. / | ||
| + | </ | ||
| + | * Configure the site-wide shared secret. This will be the value used by ALL Dynamic Clients. | ||
| + | <code bash> | ||
| + | sudo vi / | ||
| + | </ | ||
| + | * Look for this part in the file and change FreeRADIUS-Client-Secret to the value you choose to use. | ||
| + | <code bash> | ||
| + | # Echo the IP address of the client. | ||
| + | FreeRADIUS-Client-IP-Address = " | ||
| + | |||
| + | # require_message_authenticator | ||
| + | FreeRADIUS-Client-Require-MA = no | ||
| + | |||
| + | # secret | ||
| + | FreeRADIUS-Client-Secret = " | ||
| + | |||
| + | # shortname | ||
| + | FreeRADIUS-Client-Shortname = " | ||
| + | </ | ||
| + | * Comment out the following two lines in the Systemd unit file | ||
| + | <code bash> | ||
| + | sudo vi / | ||
| + | </ | ||
| + | * See this sample to see which two lines to comment out. Failing to do this will result in a broken system with FreeRADIUS not starting up during boot | ||
| + | <code bash> | ||
| + | [Unit] | ||
| + | Description=FreeRADIUS multi-protocol policy server | ||
| + | After=syslog.target network.target | ||
| + | Documentation=man: | ||
| + | |||
| + | [Service] | ||
| + | Type=forking | ||
| + | PIDFile=/ | ||
| + | # | ||
| + | # | ||
| + | ExecStart=/ | ||
| + | Restart=on-failure | ||
| + | RestartSec=5 | ||
| + | |||
| + | [Install] | ||
| + | WantedBy=multi-user.target | ||
| + | </ | ||
| + | * After you completed these commands you can test if FreeRADIUS starts up fine. | ||
| + | <code bash> | ||
| + | sudo systemctl daemon-reload | ||
| + | sudo systemctl restart freeradius | ||
| sudo systemctl status freeradius | sudo systemctl status freeradius | ||
| </ | </ | ||
| Line 44: | Line 105: | ||
| <code bash> | <code bash> | ||
| # Members of the admin group may gain root privileges | # Members of the admin group may gain root privileges | ||
| - | %admin ALL=(ALL) ALL www-data ALL = NOPASSWD:/ | + | %admin ALL=(ALL) ALL www-data ALL = NOPASSWD:/ |
| </ | </ | ||
| * Confirm that this line is now inside the / | * Confirm that this line is now inside the / | ||