FreeRADIUS issues after update to 23.09
-
This happened a few weeks ago to a friend's device (Netgate 2100) and I just thought it was a fluke, but it just happened to mine and I don't know how to fix it.
After the upgrade, all of the FreeRADIUS users are just gone. I recreated my user again and I can't authenticate. Everything was working without issue prior to the upgrade.
Here are the errors I'm getting when looking at the debug log during the authentication process. The FreeRADIUS service shows as running. A reboot of the device didn't help. freeradius3 package is v0.15.10_1 and shows as up to date.
May 25 11:18:00 php-fpm 2115 /diag_authentication.php: Error during RADIUS authentication : Operation timed out
May 25 11:19:58 php-fpm 2115 /pkg.php: Configuration Change: MyUser@192.168.10.116 (Local Database): Package configuration item deleted from package settings page.
May 25 11:21:05 php-fpm 2115 /diag_authentication.php: Error during RADIUS authentication : Operation timed outI'm just not sure what those errors mean or how to fix them.
Thank you!
-
I got it right after I posted, but what I found leads to another question. It looks like the upgrade removed not only the users, but the NAS / Clients and the Interfaces associated with FreeRADIUS.
Is there a way to not delete everything when doing an upgrade?
The FreeRADIUS server settings box that says "If Enabled, the settings will be preserved across package reinstalls." is checked. However, I can't be 100% sure that it was checked prior to the upgrade. I wouldn't have changed anything so maybe the default of the last version was unchecked and now it's checked?
-
@Spyderturbo007 It's probably this bug
https://redmine.pfsense.org/issues/14596
https://redmine.pfsense.org/issues/14806it lost settings because a code error defaulted "save settings" to off unless the page was ever saved.
edit: you can copy/paste the info into your config and restore it, if you look at my report
edit 2: AFAIK there's not a way to fix the bug, because the uninstall happens before the fixed code is installed
-
You can avoid it by simply saving the Freeradiaus settings page, to create the 'keepsettings' tag in the config, before upgrading.
Of course that doesn't help if you have already upgraded!
-
@stephenw10
Is this in the upgrade release notes? If not this is a huge issue for those using this package in production -
@michmoor It’s a package bug from a few pfSense versions ago so no real release notes. Anyone who saved (or changed and saved) the default settings is ok. But it was quite confusing. We changed several things but not that one page.
Upgrading the package triggers it also as I recall.
