FreeRadius 3.0.13-8.el7_4 fails to start/authenticate

Issues related to applications and software problems
Post Reply
ikanspelwel
Posts: 5
Joined: 2016/12/13 14:08:11

FreeRadius 3.0.13-8.el7_4 fails to start/authenticate

Post by ikanspelwel » 2017/09/14 18:51:08

With the recent update to CentOS Linux release 7.4.1708 and FreeRadius 3.0.13-8.el7_4 my radius server failed to restart.

The initial error was caused by new parameter that was missing in my custom sql config. The fix for this was rather simple, just needed to add:

Code: Select all

group_attribute = "SQL-Group"
within the "sql {" area in /etc/raddb/mods-enabled/sql file. After that FreeRadius was able to start just fine, but then all user were failing to authentication with:

Code: Select all

Module-Failure-Message Rejected: User-Name contains multiple ..s
After a bunch more trouble shooting I pin pointed to problem down /etc/raddb/policy.d/filter where the regular expression search for a "." was improperly escaped.

Code: Select all

if (&User-Name =~ /\.\./ )
Should be:

Code: Select all

if (&User-Name =~ /\\.\\./ )
I also went ahead and fixed the other incorrectly escaped periods as well. After these fixes Radius returned to normal.

I hope this saves some one else a huge headache.

Adam

Raz0r
Posts: 1
Joined: 2017/09/18 06:14:39

Re: FreeRadius 3.0.13-8.el7_4 fails to start/authenticate

Post by Raz0r » 2017/09/18 06:15:54

You saved my day, thanks alot Adam
Ibrahim

maas187
Posts: 5
Joined: 2016/12/16 10:13:19

Re: FreeRadius 3.0.13-8.el7_4 fails to start/authenticate

Post by maas187 » 2017/09/22 15:33:24

Ye Sir,

you are a king .. I had the same issue, until I fixed the "dots" in filter.

Thanks

Module-Failure-Message += 'Rejected: User-Name contains multiple ..s'

Post Reply