Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support FreeRADIUS 3 #11

Closed
plettich opened this issue Jul 3, 2018 · 3 comments

Comments

Projects
None yet
2 participants
@plettich
Copy link
Member

commented Jul 3, 2018

there are some issues getting this to work with FreeRADIUS 3 (default on debian 9.4).
My changes:

  • The $raddbdir/sites-enabled/privacyidea-file:
server {
        authorize {
                files
                perl
                if (ok || updated) {
                        update control {
                                Auth-Type := Perl
                        }
                }
        }
        listen {
                type = auth
                ipaddr = *
                port = 0
        }
        authenticate {
                Auth-Type Perl {
                        perl
                }
        }
}
  • The $raddbdir/mods-enabled/perl-file:
perl {
        filename = ${modconfdir}/${.:instance}/privacyidea.pl
}
  • Copy the privacyidea_radius.pm-file into $raddbdir/mods-config/perl/privacyidea.pl
  • Update the $raddbdir/dictionary-file

I also removed all other enabled sites.
On debian 9.4 you also need to remove the libjson-xs-perl-package since it breaks when running in threaded mode: https://cygwin.com/ml/cygwin/2016-03/msg00033.html
Radius still complains about $RAD_REPLY{'Class'} not being defined but the request goes through.
Oh, and use User-Password=... for radclient instead of just Password=....

@cornelinux

This comment has been minimized.

Copy link
Member

commented Mar 29, 2019

@plettich I think we support freeradius 3 now. The centos packages and UCS packages build that way.
So the issue could be closed, right? Or is it more of a packaging issue, so it should be move to another repo?

@cornelinux

This comment has been minimized.

Copy link
Member

commented Mar 29, 2019

I suggest to add two directories with the corresponding config:

freeradius2/privacyidea
freeradius3/privacyidea

@cornelinux cornelinux added this to the 3.1 milestone Mar 29, 2019

@cornelinux

This comment has been minimized.

Copy link
Member

commented Mar 29, 2019

OK, working on packaging for FreeRADIUS2 / Ubuntu 18.04

cornelinux added a commit that referenced this issue Mar 29, 2019

Provide config for packing for FreeRADIUS2 and 3
We only provide the sites-config.
The user file and the perl module config will
be generated in the corresponding build environments.

Closes #11

@plettich plettich closed this in #23 Mar 29, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.