freeradius fails to install in focal

[Rolf Leggewie]

a couple of problems prevent a successful install or update of freeradius and related packages in focal.

- /etc/freeradius/3.0/sites-enabled directory does not exist
- /etc/freeradius/3.0/mods-enabled/eap has problems
  Failed to find 'Auth-Type EAP' section. Cannot authenticate users.
- OOTB:
  "The server is not configured to listen on any ports. Cannot start"

As it stands, that is a regression from bionic.

[Rafael David Tinoco (rafaeldtinoco)]

Hello Rolf,

I just tried to install it in a clean environment:

(c)rafaeldtinoco@freeradius:~$ journalctl _SYSTEMD_UNIT=freeradius.service
-- Logs begin at Mon 2020-04-20 01:53:09 UTC, end at Mon 2020-04-27 20:13:36 UTC. --
Apr 27 20:11:18 freeradius freeradius[1762]: FreeRADIUS Version 3.0.20
Apr 27 20:11:18 freeradius freeradius[1762]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors
Apr 27 20:11:18 freeradius freeradius[1762]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
Apr 27 20:11:18 freeradius freeradius[1762]: PARTICULAR PURPOSE
Apr 27 20:11:18 freeradius freeradius[1762]: You may redistribute copies of FreeRADIUS under the terms of the
Apr 27 20:11:18 freeradius freeradius[1762]: GNU General Public License
Apr 27 20:11:18 freeradius freeradius[1762]: For more information about these matters, see the file named COPYRIGHT
Apr 27 20:11:18 freeradius freeradius[1762]: Starting - reading configuration files ...
Apr 27 20:11:18 freeradius freeradius[1762]: Debugger not attached
Apr 27 20:11:18 freeradius freeradius[1762]: Creating attribute Unix-Group
Apr 27 20:11:18 freeradius freeradius[1762]: Please use tls_min_version and tls_max_version instead of disable_tlsv1
Apr 27 20:11:18 freeradius freeradius[1762]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2
Apr 27 20:11:18 freeradius freeradius[1762]: tls: Using cached TLS configuration from previous invocation
Apr 27 20:11:18 freeradius freeradius[1762]: tls: Using cached TLS configuration from previous invocation
Apr 27 20:11:18 freeradius freeradius[1762]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked
Apr 27 20:11:18 freeradius freeradius[1762]: rlm_mschap (mschap): using internal authentication
Apr 27 20:11:18 freeradius freeradius[1762]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output
Apr 27 20:11:18 freeradius freeradius[1762]: Ignoring "sql" (see raddb/mods-available/README.rst)
Apr 27 20:11:18 freeradius freeradius[1762]: Ignoring "ldap" (see raddb/mods-available/README.rst)
Apr 27 20:11:18 freeradius freeradius[1762]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336
Apr 27 20:11:18 freeradius freeradius[1762]: radiusd: #### Skipping IP addresses and Ports ####
Apr 27 20:11:18 freeradius freeradius[1762]: Configuration appears to be OK

----

(c)rafaeldtinoco@freeradius:~$ systemctl status freeradius.service
● freeradius.service - FreeRADIUS multi-protocol policy server
     Loaded: loaded (/lib/systemd/system/freeradius.service; disabled; vendor preset: enabled)
     Active: active (running) since Mon 2020-04-27 20:11:18 UTC; 3min 6s ago
       Docs: man:radiusd(8)
             man:radiusd.conf(5)
             http://wiki.freeradius.org/
             http://networkradius.com/doc/
   Main PID: 1764 (freeradius)
     Status: "Processing requests"
      Tasks: 6 (limit: 1128)
     Memory: 78.1M
     CGroup: /system.slice/freeradius.service
             └─1764 /usr/sbin/freeradius -f

----

Perhaps you missed to install the following package: "freeradius-config" ?

It contains:...

[Rolf Leggewie (r0lf)]

Rafael, thank you for testing this. My apologies for the late response.

If you have questions, the proper status is "Incomplete", not "Invalid". I will need to boot up my test environment to figure out what the problem was. freeradius-config must have been installed as it is a dependency. I can verify that later.

My guess here is that the dependency for freeradius-config might be missing versioning. If so, then the following steps are likely to lead to a successful reproduction of this issue.

1.) Install a system with packages for both bionic and focal
2.) install freeradius from focal but freeradius-config from bionic

If you think that's a silly thing to do, think again. This can easily happen during a half-finished upgrade from bionic to focal and it should not break the system. The fix would be easy, add a versioned dependency for freeradius-config to freeradius.

[Launchpad Janitor (janitor)]

[Expired for freeradius (Ubuntu) because there has been no activity for 60 days.]