FreeRADIUS not working after upgrade to 24.04.01

[Steven_Wittwer]

It worked sorta.

On my phone, I had to reconnect and re-accept the cert since the new install had a new cert. I only copied over the clients.conf and users file since that is all I needed.

I want to avoid that when I do the staff Radius upgrade. The staff will have no clue why it isn't working! I assume if I copy over the ca.cnf, client.cnf and server.cnf that I will be good? Assuming so, who should the owner and permissions be set to? I am not good with permissions in Ubuntu (other than basic stuff), so if there is a command I can use once I copy over the files, that would be great.

Again, really appreciate the help!

[1fallen]

That's why I wanted an update on your copy over, Like I mentioned earlier 24.04 has had me on Toes with new changes, features New and Features Removed or breakage from bugs.
I can't see why the staff couldn't do the same though>> I love the "-a" switch when used with "cp" it retains the permissions from the user issuing the copy command.

-a, --archive same as -dR --preserve=all

[Steven_Wittwer]

My server is a VM running on a Ubuntu host, so I used scp to copy them, but it still wiped out all permissions. Not sure why.

[1fallen]

I used scp to copy them, but it still wiped out all permissions. Not sure why.

There you go that's what I wanted to see.
Replace: scp with rsync ie:
just a general showing so you will need to edit this to your needs:

rsync --perms --chmod=u+rwx,g+rwx,o+rwx /path/to/file server:/path/to/file

[Steven_Wittwer]

I'll try that in a bit. when I tried rsync before (without all those options) it asked me for the root password on the device I was copying to. Being Ubuntu, there wasn't a root user, so I wasn't able to complete it that way, but I will try again.

[1fallen]

No Hurry take your time. And I assume you still have good back-ups.

[Steven_Wittwer]

What am I doing wrong? I can add my username on the remote host, but that is what I did last time I did rsync, and permissions weren't copied.

swittwer@tbcmc-admin-radius-vm:~$ rsync --perms  --chmod=u+rwx,o+rwx /etc/freeradius/3.0/users 10.200.253.2:/home/swittwer/3.0
The authenticity of host '10.200.253.2 (10.200.253.2)' can't be established.
ED25519 key fingerprint is SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '10.200.253.2' (ED25519) to the list of known hosts.
swittwer@10.200.253.2's password:
rsync: [sender] link_stat "/home/swittwer/users" failed: No such file or directory (2)
skipping non-regular file "users"
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1338) [sender=3.2.7]


swittwer@tbcmc-admin-radius-vm:~$ sudo rsync --perms  --chmod=u+rwx,o+rwx /etc/freeradius/3.0/users 10.200.253.2:/home/swittwer/3.0
root@10.200.253.2's password:
Permission denied, please try again.
root@10.200.253.2's password:
rsync error: received SIGINT, SIGTERM, or SIGHUP (code 20) at rsync.c(713) [sender=3.2.7]
swittwer@tbcmc-admin-radius-vm:~$

[1fallen]

Dang this is getting ridiculous, This worked for me the last I used it.....
I'm flat running out of ideas here:
On the VM what will this show:

#  stat /etc/freeradius/3.0
  File: /etc/freeradius/3.0
  Size: 21            Blocks: 18         IO Block: 1536   directory
Device: 0,28    Inode: 954746      Links: 9
Access: (0755/drwxr-xr-x)  Uid: (  132/ freerad)   Gid: (  140/ freerad)
Access: 2024-09-11 12:27:38.661218110 -0600
Modify: 2024-09-11 12:27:37.991218065 -0600
Change: 2024-09-11 12:27:38.659218110 -0600
 Birth: 2024-09-11 12:27:36.510217983 -0600

Someone else might need to jump in here, as I've taken all my servers off Buntu and replaced them with Arch and FreeBSD.

I'll try and recreate your system (VM) and test from there. But that will take some time, and probably tomorrow.

In the mean time anyone else is certainly welcome to jump in.

EDIT: Brain Fart Before I copied anything I did stop>>freeradius then made my "cp" or even "scp" the re-started all all the needed services.

sudo systemctl daemon-reload

And

systemctl start --now freeradius.service

[Steven_Wittwer]

It might be easier just to see who the owner is of the cert files and try it out. I just need to do some research to see if I can get the owner from the CLI (I'm sure I can, just not sure how yet).

[EDIT] easy enough... just ls -l. They are root:root, so that should be easy to recreate.
[EDIT2] It's interesting though, in 22.04 most of the files/directories are freerad:freerad.

[1fallen]

Well I was not able to reproduce what you have now, but this might be KEY, I did stop>>freeradius on the system copying to, .. then made my "cp" or even "scp" then re-started all all the needed services. See post #18