Trying to install freeradius2 after Upgrade to 2.3

OlliC

Hi,

iam running the nanobsd 4g version on an Alix board. After upgrading to pfsense 2.3 yesterday (which went ok)
the automatic package upgrade took forever and i canceled it after 9 hours.

Now freeradius2 shows as Installed but with an red "!". If i try to uninstall or reinstall it hangs on "Executing custom_php_install_command()…" forever (waited at least 6 hours).

I need the radius package for Wifi logins. I found another thread where people have problems to start the server but nothing about failed installs thus far. Does somebody has a hint what to do?

jimp

Diag > NanoBSD, set permanent RW, then try again.

OlliC

Tried that, but it does not seem to work.

It says "Executing custom_php_install_command()…" and there is one process running called "php-fpm".
Waited 2 hours but it does not come to an end.

jimp

No php errors at the top of bottom of the screen? No crash reports or errors on the dashboard after that happens?

blueduckdock

I had this issue too (had it installed and just tried to upgrade.)

I ended up doing a backup without package info and then reinstalled 2.3 fresh. Freeradius installed fine after that (though the auth through it is not working yet- for what reason I do not know.)

reggie14

I had this problem, too, with the release client. I created this thread.

I fixed it by doing a clean install. After the clean install, I installed freeradius2 before restoring my backup config. And, I disabled snort and pfblockerNG before taking that backup.

OlliC

Yeah, seems to be exactly the same thing as reggie14 had after reading the whole thread. ::)

Iam a bit in doubt now what to do. Dont want to reinstall everything.

Since i am running the nanobsd version…cant i just switch to the second boot slice and do the update to 2.3 again?
Maybe i should disable all packages before the upgrade...

OlliC

Ok. Solved it.

I switched to the second boot slice, booted up the old system again.
Then i removed all packages and startet the upgrade to 2.3 again.

Then after a reboot the new system had no packages and i tried to install freeradius. The first
time i installed the package was a strange one because it said "Success" in the log but "failed" in the GUI.

Here is the log of the first failed attempt:

>>> Installing pfSense-pkg-freeradius2... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
Checking integrity... done (0 conflicting)
The following 6 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	pfSense-pkg-freeradius2: 1.7.3_1 [pfSense]
	bash: 4.3.42_1 [pfSense]
	freeradius: 2.2.9 [pfSense]
	mysql56-client: 5.6.27 [pfSense]
	gdbm: 1.11_2 [pfSense]
	postgresql93-client: 9.3.11 [pfSense]

The process will require 61 MiB more space.
[1/6] Installing mysql56-client-5.6.27...
[1/6] Extracting mysql56-client-5.6.27: .......... done
[2/6] Installing gdbm-1.11_2...
[2/6] Extracting gdbm-1.11_2: .......... done
[3/6] Installing postgresql93-client-9.3.11...
[3/6] Extracting postgresql93-client-9.3.11: .......... done
[4/6] Installing bash-4.3.42_1...
[4/6] Extracting bash-4.3.42_1: .......... done
[5/6] Installing freeradius-2.2.9...
===> Creating users and/or groups.
Using existing group 'freeradius'.
Using existing user 'freeradius'.
===> Setting user and group in radiusd.conf
[5/6] Extracting freeradius-2.2.9: .......... done
===> Adjusting ownership of directory /usr/local/etc/raddb
===> Adjusting ownership of directory /var/log/radacct
===> Adjusting ownership of directory /var/run/radiusd
===> Adjusting ownership of /var/log/radius.log
===> Adjusting ownership of /var/log/radutmp
===> Adjusting ownership of /var/log/radwtmp
===> Updating libdir in /usr/local/etc/raddb/radiusd.conf
[6/6] Installing pfSense-pkg-freeradius2-1.7.3_1...
[6/6] Extracting pfSense-pkg-freeradius2-1.7.3_1: .......... done
Saving updated package information...
overwrite!
Loading package configuration... done.
Configuring package components...
Loading package instructions...
Custom commands...
Success

The second try went ok and installed the package correctly:

>>> Installing pfSense-pkg-freeradius2... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
Updating database digests format: ..... done
The following 8 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	pfSense-pkg-freeradius2: 1.7.3_1 [pfSense]
	bash: 4.3.42_1 [pfSense]
	freeradius: 2.2.9 [pfSense]
	mysql56-client: 5.6.27 [pfSense]
	gdbm: 1.11_2 [pfSense]
	krb5: 1.14 [pfSense]
	pkgconf: 0.9.12_1 [pfSense]
	postgresql93-client: 9.3.11 [pfSense]

The process will require 64 MiB more space.
7 MiB to be downloaded.
Fetching pfSense-pkg-freeradius2-1.7.3_1.txz: ...... done
Fetching bash-4.3.42_1.txz: .......... done
Fetching freeradius-2.2.9.txz: .......... done
Fetching mysql56-client-5.6.27.txz: .......... done
Fetching gdbm-1.11_2.txz: .......... done
Fetching krb5-1.14.txz: .......... done
Fetching pkgconf-0.9.12_1.txz: ... done
Fetching postgresql93-client-9.3.11.txz: .......... done
Checking integrity... done (0 conflicting)
[1/8] Installing pkgconf-0.9.12_1...
[1/8] Extracting pkgconf-0.9.12_1: ....... done
[2/8] Installing mysql56-client-5.6.27...
[2/8] Extracting mysql56-client-5.6.27: .......... done
[3/8] Installing gdbm-1.11_2...
[3/8] Extracting gdbm-1.11_2: .......... done
[4/8] Installing krb5-1.14...
[4/8] Extracting krb5-1.14: .......... done
[5/8] Installing postgresql93-client-9.3.11...
[5/8] Extracting postgresql93-client-9.3.11: .......... done
[6/8] Installing bash-4.3.42_1...
[6/8] Extracting bash-4.3.42_1: .......... done
[7/8] Installing freeradius-2.2.9...
===> Creating users and/or groups.
Creating group 'freeradius' with gid '133'.
Creating user 'freeradius' with uid '133'.
===> Setting user and group in radiusd.conf
[7/8] Extracting freeradius-2.2.9: .......... done
===> Bootstrapping default certificates, please wait...
===> Adjusting ownership of directory /usr/local/etc/raddb
===> Adjusting ownership of directory /var/log/radacct
===> Adjusting ownership of directory /var/run/radiusd
===> Adjusting ownership of /var/log/radius.log
===> Adjusting ownership of /var/log/radutmp
===> Adjusting ownership of /var/log/radwtmp
===> Updating libdir in /usr/local/etc/raddb/radiusd.conf
[8/8] Installing pfSense-pkg-freeradius2-1.7.3_1...
[8/8] Extracting pfSense-pkg-freeradius2-1.7.3_1: .......... done
Saving updated package information...
done.
Loading package configuration... done.
Configuring package components...
Loading package instructions...
Custom commands...
Executing custom_php_install_command()...Generating DH parameters, 1024 bit long safe prime, generator 2
This is going to take a long time
.....................................+.......................+...........................+.......+...................................+............+...+.+.....+....+..............................................+...+..............+................+.......................+............+.......................+........................................+.......................+.......................................+........+.............+................................................................+................................+......................................................................+...........................................+.....................+..+....................................+..............................................+.........+.........+.............+.........................................................................+.....+.................................................................................+...+...............+...................................+..................................................+....................+...+......................+..................................++*++*++*
10+0 records in
10+0 records out
5120 bytes transferred in 0.034827 secs (147012 bytes/sec)
done.
Executing custom_php_resync_config_command()...done.
Menu items... done.
Services... done.
Writing configuration... done.
Message from mysql56-client-5.6.27:
* * * * * * * * * * * * * * * * * * * * * * * *

Please be aware the database client is vulnerable
to CVE-2015-3152 - SSL Downgrade aka "BACKRONYM".
You may find more information at the following URL:

http://www.vuxml.org/freebsd/36bd352d-299b-11e5-86ff-14dae9d210b8.html

Although this database client is not listed as
"affected", it is vulnerable and will not be 
receiving a patch. Please take note of this when
deploying this software.

* * * * * * * * * * * * * * * * * * * * * * * *
Message from postgresql93-client-9.3.11:
The PostgreSQL port has a collection of "side orders":

postgresql-docs
  For all of the html documentation

p5-Pg
  A perl5 API for client access to PostgreSQL databases.

postgresql-tcltk 
  If you want tcl/tk client support.

postgresql-jdbc
  For Java JDBC support.

postgresql-odbc
  For client access from unix applications using ODBC as access
  method. Not needed to access unix PostgreSQL servers from Win32
  using ODBC. See below.

ruby-postgres, py-PyGreSQL
  For client access to PostgreSQL databases using the ruby & python
  languages.

postgresql-plperl, postgresql-pltcl & postgresql-plruby
  For using perl5, tcl & ruby as procedural languages.

postgresql-contrib
  Lots of contributed utilities, postgresql functions and
  datatypes. There you find pg_standby, pgcrypto and many other cool
  things.

etc...
Message from bash-4.3.42_1:
======================================================================

bash requires fdescfs(5) mounted on /dev/fd

If you have not done it yet, please do the following:

	mount -t fdescfs fdesc /dev/fd

To make it permanent, you need the following lines in /etc/fstab:

	fdesc	/dev/fd		fdescfs		rw	0	0

======================================================================
Message from freeradius-2.2.9:
===============================================================================

To enable FreeRADIUS, put the following line in /etc/rc.conf

radiusd_enable="YES"

The sample configuration can be found at
/usr/local/share/examples/freeradius/raddb

If you are upgrading FreeRADIUS, you are advised to use this as a reference
for updating your configuration.

FreeRADIUS will look for its configuration directory at
/usr/local/etc/raddb by default.

If you did not already have a configuration at this location, the sample
configuration has been copied to this location and has been bootstrapped.

If you wish to point FreeRADIUS to a configuration at a different
location, put the following line in /etc/rc.conf

radiusd_flags="-d /path/to/raddb"

To start the server in normal (daemon) mode, run:

/usr/local/etc/rc.d/radiusd start

and to stop the server, run:

/usr/local/etc/rc.d/radiusd stop

To start the server in debugging mode, run:

/usr/local/etc/rc.d/radiusd debug

You are advised to make cautious changes to the configuration, and to test
frequently, using debugging mode where necessary. Try to resist the
temptation to disable or delete things that you don't understand - you may
well break things!

Useful configuration advice can be found in the FreeRADIUS Wiki at
http://wiki.freeradius.org

===============================================================================
Message from pfSense-pkg-freeradius2-1.7.3_1:
Please visit Services - FreeRADIUS menu to configure the package.
>>> Cleaning up cache... done.
Success

So something seems to be quite buggy there with this package in particular. But i am happy it works now. ;D