Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Upgrade FreeRadius no longer can connect via OpenVPN

    Scheduled Pinned Locked Moved OpenVPN
    3 Posts 2 Posters 455 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bigbmn
      last edited by

      Anyone run in to this:
      After upgrading PFSense (23.09.01) and freeradius3 (0.15.10_1), this deleted the FreeRadius settings.
      After reverting configuration (since the upgrade deleted it) no users can connect to OpenVPN with user with OTP, without getting a Credential Error Message

      Logs show the following
      Jan 29 17:26:43 azure-tmc-pfsense openvpn[61590]: xx.xxx.xx.xx:56931 [joe_simpson] Peer Connection Initiated with [AF_INET]yy.yy.yy.yy:56931
      Jan 29 17:26:58 azure-tmc-pfsense openvpn[1050]: /openvpn.auth-user.php: Error during RADIUS authentication : Operation timed out

      Any ideas or additional debugging steps

      B 1 Reply Last reply Reply Quote 0
      • B
        bigbmn @bigbmn
        last edited by

        This might be helpful to anyone that finds this same type of issue.
        After upgrading PFSense (23.09.01) and freeradius3 (0.15.10_1) specifically freeradius3 that wipes out all FreeRADIUS configuration.

        To fix:
        Revert the PFSense configuration prior to the update of FreeRADIUS, under Diagnostics > Backup & Restore
        Under Services FreeRADIUS, go through the tabs of NAS/Clients, Interfaces, Settings, EAP and edit them and resave them. View Config should show the FreeRadius Configuration
        (Not 100% clear if that was necessary but it appeared to write to the configuration files
        ssh to pfsense server sudo su admin, and then invoke shell
        Copy /usr/local/etc/raddb/users To /usr/local/etc/raddb/mods-config/files/authorize
        Create symbolic link from /usr/local/etc/raddb/users To /usr/local/etc/raddb/mods-config/files/authorize
        Need to restart FreeRadius Service from pfsense console

        S 1 Reply Last reply Reply Quote 0
        • S
          SteveITS Galactic Empire @bigbmn
          last edited by

          @bigbmn unfortunately I found this one. There was a bug in the code where it incorrectly defaulted to removing the settings unless the page had specifically been saved.
          https://forum.netgate.com/topic/181594/restore-missing-freeradius-config/

          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
          Upvote 👍 helpful posts!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.