Trying to install freeradius2 after Upgrade to 2.3



  • Hi,

    iam running the nanobsd 4g version on an Alix board. After upgrading to pfsense 2.3 yesterday (which went ok)
    the automatic package upgrade took forever and i canceled it after 9 hours.

    Now freeradius2 shows as Installed but with an red "!". If i try to uninstall or reinstall it hangs on "Executing custom_php_install_command()…" forever (waited at least 6 hours).

    I need the radius package for Wifi logins. I found another thread where people have problems to start the server but nothing about failed installs thus far. Does somebody has a hint what to do?


  • Rebel Alliance Developer Netgate

    Diag > NanoBSD, set permanent RW, then try again.



  • Tried that, but it does not seem to work.

    It says "Executing custom_php_install_command()…" and there is one process running called "php-fpm".
    Waited 2 hours but it does not come to an end.


  • Rebel Alliance Developer Netgate

    No php errors at the top of bottom of the screen? No crash reports or errors on the dashboard after that happens?



  • I had this issue too (had it installed and just tried to upgrade.)

    I ended up doing a backup without package info and then reinstalled 2.3 fresh. Freeradius installed fine after that (though the auth through it is not working yet- for what reason I do not know.)



  • I had this problem, too, with the release client.  I created this thread.

    I fixed it by doing a clean install.  After the clean install, I installed freeradius2 before restoring my backup config.  And, I disabled snort and pfblockerNG before taking that backup.



  • Yeah, seems to be exactly the same thing as reggie14 had after reading the whole thread.  ::)

    Iam a bit in doubt now what to do. Dont want to reinstall everything.

    Since i am running the nanobsd version…cant i just switch to the second boot slice and do the update to 2.3 again?
    Maybe i should disable all packages before the upgrade...



  • Ok. Solved it.

    I switched to the second boot slice, booted up the old system again.
    Then i removed all packages and startet the upgrade to 2.3 again.

    Then after a reboot the new system had no packages and i tried to install freeradius. The first
    time i installed the package was a strange one because it said "Success" in the log but "failed" in the GUI.

    Here is the log of the first failed attempt:

    >>> Installing pfSense-pkg-freeradius2... 
    Updating pfSense-core repository catalogue...
    pfSense-core repository is up-to-date.
    Updating pfSense repository catalogue...
    pfSense repository is up-to-date.
    All repositories are up-to-date.
    Checking integrity... done (0 conflicting)
    The following 6 package(s) will be affected (of 0 checked):
    
    New packages to be INSTALLED:
    	pfSense-pkg-freeradius2: 1.7.3_1 [pfSense]
    	bash: 4.3.42_1 [pfSense]
    	freeradius: 2.2.9 [pfSense]
    	mysql56-client: 5.6.27 [pfSense]
    	gdbm: 1.11_2 [pfSense]
    	postgresql93-client: 9.3.11 [pfSense]
    
    The process will require 61 MiB more space.
    [1/6] Installing mysql56-client-5.6.27...
    [1/6] Extracting mysql56-client-5.6.27: .......... done
    [2/6] Installing gdbm-1.11_2...
    [2/6] Extracting gdbm-1.11_2: .......... done
    [3/6] Installing postgresql93-client-9.3.11...
    [3/6] Extracting postgresql93-client-9.3.11: .......... done
    [4/6] Installing bash-4.3.42_1...
    [4/6] Extracting bash-4.3.42_1: .......... done
    [5/6] Installing freeradius-2.2.9...
    ===> Creating users and/or groups.
    Using existing group 'freeradius'.
    Using existing user 'freeradius'.
    ===> Setting user and group in radiusd.conf
    [5/6] Extracting freeradius-2.2.9: .......... done
    ===> Adjusting ownership of directory /usr/local/etc/raddb
    ===> Adjusting ownership of directory /var/log/radacct
    ===> Adjusting ownership of directory /var/run/radiusd
    ===> Adjusting ownership of /var/log/radius.log
    ===> Adjusting ownership of /var/log/radutmp
    ===> Adjusting ownership of /var/log/radwtmp
    ===> Updating libdir in /usr/local/etc/raddb/radiusd.conf
    [6/6] Installing pfSense-pkg-freeradius2-1.7.3_1...
    [6/6] Extracting pfSense-pkg-freeradius2-1.7.3_1: .......... done
    Saving updated package information...
    overwrite!
    Loading package configuration... done.
    Configuring package components...
    Loading package instructions...
    Custom commands...
    Success
    

    The second try went ok and installed the package correctly:

    >>> Installing pfSense-pkg-freeradius2... 
    Updating pfSense-core repository catalogue...
    pfSense-core repository is up-to-date.
    Updating pfSense repository catalogue...
    pfSense repository is up-to-date.
    All repositories are up-to-date.
    Updating database digests format: ..... done
    The following 8 package(s) will be affected (of 0 checked):
    
    New packages to be INSTALLED:
    	pfSense-pkg-freeradius2: 1.7.3_1 [pfSense]
    	bash: 4.3.42_1 [pfSense]
    	freeradius: 2.2.9 [pfSense]
    	mysql56-client: 5.6.27 [pfSense]
    	gdbm: 1.11_2 [pfSense]
    	krb5: 1.14 [pfSense]
    	pkgconf: 0.9.12_1 [pfSense]
    	postgresql93-client: 9.3.11 [pfSense]
    
    The process will require 64 MiB more space.
    7 MiB to be downloaded.
    Fetching pfSense-pkg-freeradius2-1.7.3_1.txz: ...... done
    Fetching bash-4.3.42_1.txz: .......... done
    Fetching freeradius-2.2.9.txz: .......... done
    Fetching mysql56-client-5.6.27.txz: .......... done
    Fetching gdbm-1.11_2.txz: .......... done
    Fetching krb5-1.14.txz: .......... done
    Fetching pkgconf-0.9.12_1.txz: ... done
    Fetching postgresql93-client-9.3.11.txz: .......... done
    Checking integrity... done (0 conflicting)
    [1/8] Installing pkgconf-0.9.12_1...
    [1/8] Extracting pkgconf-0.9.12_1: ....... done
    [2/8] Installing mysql56-client-5.6.27...
    [2/8] Extracting mysql56-client-5.6.27: .......... done
    [3/8] Installing gdbm-1.11_2...
    [3/8] Extracting gdbm-1.11_2: .......... done
    [4/8] Installing krb5-1.14...
    [4/8] Extracting krb5-1.14: .......... done
    [5/8] Installing postgresql93-client-9.3.11...
    [5/8] Extracting postgresql93-client-9.3.11: .......... done
    [6/8] Installing bash-4.3.42_1...
    [6/8] Extracting bash-4.3.42_1: .......... done
    [7/8] Installing freeradius-2.2.9...
    ===> Creating users and/or groups.
    Creating group 'freeradius' with gid '133'.
    Creating user 'freeradius' with uid '133'.
    ===> Setting user and group in radiusd.conf
    [7/8] Extracting freeradius-2.2.9: .......... done
    ===> Bootstrapping default certificates, please wait...
    ===> Adjusting ownership of directory /usr/local/etc/raddb
    ===> Adjusting ownership of directory /var/log/radacct
    ===> Adjusting ownership of directory /var/run/radiusd
    ===> Adjusting ownership of /var/log/radius.log
    ===> Adjusting ownership of /var/log/radutmp
    ===> Adjusting ownership of /var/log/radwtmp
    ===> Updating libdir in /usr/local/etc/raddb/radiusd.conf
    [8/8] Installing pfSense-pkg-freeradius2-1.7.3_1...
    [8/8] Extracting pfSense-pkg-freeradius2-1.7.3_1: .......... done
    Saving updated package information...
    done.
    Loading package configuration... done.
    Configuring package components...
    Loading package instructions...
    Custom commands...
    Executing custom_php_install_command()...Generating DH parameters, 1024 bit long safe prime, generator 2
    This is going to take a long time
    .....................................+.......................+...........................+.......+...................................+............+...+.+.....+....+..............................................+...+..............+................+.......................+............+.......................+........................................+.......................+.......................................+........+.............+................................................................+................................+......................................................................+...........................................+.....................+..+....................................+..............................................+.........+.........+.............+.........................................................................+.....+.................................................................................+...+...............+...................................+..................................................+....................+...+......................+..................................++*++*++*
    10+0 records in
    10+0 records out
    5120 bytes transferred in 0.034827 secs (147012 bytes/sec)
    done.
    Executing custom_php_resync_config_command()...done.
    Menu items... done.
    Services... done.
    Writing configuration... done.
    Message from mysql56-client-5.6.27:
    * * * * * * * * * * * * * * * * * * * * * * * *
    
    Please be aware the database client is vulnerable
    to CVE-2015-3152 - SSL Downgrade aka "BACKRONYM".
    You may find more information at the following URL:
    
    http://www.vuxml.org/freebsd/36bd352d-299b-11e5-86ff-14dae9d210b8.html
    
    Although this database client is not listed as
    "affected", it is vulnerable and will not be 
    receiving a patch. Please take note of this when
    deploying this software.
    
    * * * * * * * * * * * * * * * * * * * * * * * *
    Message from postgresql93-client-9.3.11:
    The PostgreSQL port has a collection of "side orders":
    
    postgresql-docs
      For all of the html documentation
    
    p5-Pg
      A perl5 API for client access to PostgreSQL databases.
    
    postgresql-tcltk 
      If you want tcl/tk client support.
    
    postgresql-jdbc
      For Java JDBC support.
    
    postgresql-odbc
      For client access from unix applications using ODBC as access
      method. Not needed to access unix PostgreSQL servers from Win32
      using ODBC. See below.
    
    ruby-postgres, py-PyGreSQL
      For client access to PostgreSQL databases using the ruby & python
      languages.
    
    postgresql-plperl, postgresql-pltcl & postgresql-plruby
      For using perl5, tcl & ruby as procedural languages.
    
    postgresql-contrib
      Lots of contributed utilities, postgresql functions and
      datatypes. There you find pg_standby, pgcrypto and many other cool
      things.
    
    etc...
    Message from bash-4.3.42_1:
    ======================================================================
    
    bash requires fdescfs(5) mounted on /dev/fd
    
    If you have not done it yet, please do the following:
    
    	mount -t fdescfs fdesc /dev/fd
    
    To make it permanent, you need the following lines in /etc/fstab:
    
    	fdesc	/dev/fd		fdescfs		rw	0	0
    
    ======================================================================
    Message from freeradius-2.2.9:
    ===============================================================================
    
    To enable FreeRADIUS, put the following line in /etc/rc.conf
    
    radiusd_enable="YES"
    
    The sample configuration can be found at
    /usr/local/share/examples/freeradius/raddb
    
    If you are upgrading FreeRADIUS, you are advised to use this as a reference
    for updating your configuration.
    
    FreeRADIUS will look for its configuration directory at
    /usr/local/etc/raddb by default.
    
    If you did not already have a configuration at this location, the sample
    configuration has been copied to this location and has been bootstrapped.
    
    If you wish to point FreeRADIUS to a configuration at a different
    location, put the following line in /etc/rc.conf
    
    radiusd_flags="-d /path/to/raddb"
    
    To start the server in normal (daemon) mode, run:
    
    /usr/local/etc/rc.d/radiusd start
    
    and to stop the server, run:
    
    /usr/local/etc/rc.d/radiusd stop
    
    To start the server in debugging mode, run:
    
    /usr/local/etc/rc.d/radiusd debug
    
    You are advised to make cautious changes to the configuration, and to test
    frequently, using debugging mode where necessary. Try to resist the
    temptation to disable or delete things that you don't understand - you may
    well break things!
    
    Useful configuration advice can be found in the FreeRADIUS Wiki at
    http://wiki.freeradius.org
    
    ===============================================================================
    Message from pfSense-pkg-freeradius2-1.7.3_1:
    Please visit Services - FreeRADIUS menu to configure the package.
    >>> Cleaning up cache... done.
    Success
    

    So something seems to be quite buggy there with this package in particular. But i am happy it works now.  ;D