FreeRADIUS not working after upgrade to 24.04.01

[Steven_Wittwer]

I am running a Virtual Machine with Ubuntu Server Edition 22.04 LTS. It is running FreeRadius. I updated to 24.04.01 last night and FreeRADIUS wouldn't start. I ended up reverting to a snapshot, so I don't have a lot of info, but iirc, it said that it was 'masked' and 'dead'.

Did I do something wrong?

I have 2 RADIUS servers, and I don't want to upgrade either until I know what is up.

Any help or direction would be great! I know I don't have much to go on. But if needed, I can re-upgrade 1 of them and get details.

[EDIT]: I have multiple other upgrades that went smoothly. DNS, Caddy, and Omada servers are all working fine.

[1fallen2]

Well without seeing the real error shown from terminal it is very hard for any of us to guide you.

They did move "FreeRADIUS" to:

/etc/freeradius/3.0
/etc/freeradius/dictionary_overrides

Did you check there?
Only the "dictionary_overrides" folder has to be in "/etc/freeradius." The last time I used it.

My solution then was to simply "sudo chown freerad:freerad /etc/freeradius/3.0"
Then reload the service.

But without seeing why yours is not working, I'm just sharing my commonly seen errors with Up-Grades.

[Steven_Wittwer]

I appreciate the reply.

I am 99.9% sure that when I looked, the /etc/freeradius folder was completely missing after the upgrade. I may try the upgrade again and see what happens. This particular RADIUS server is only used for 2 users.

If things go badly again, is there some output that would be helpful? I am not a Ubuntu noob, but with that said, I am far from an expert. I can certainly post the status of the service.

[1fallen2]

Well it is nicer if we know from the timeline of the failure:
Maybe this after the upgrade:

systemctl status freeradius.service

And possibly "dmesg" and or "apparmor"

But I suspect your error might be along the lines as this:

Process: 264020 ExecStartPre=/usr/bin/radiusd -C (code=exited, status=1/FAILURE)
Or This
Failed to start FreeRADIUS high performance RADIUS server

I would first like to see this though after the upgrade:

journalctl -xeu freeradius.service

And This Please:

radiusd -X

I'll be on and offline today just a heads up.

This might help you as well: https://wiki.archlinux.org/title/FreeRADIUS

[Steven_Wittwer]

Thanks, and no worries on being on and off. I just completed the upgrade. I forgot that it did ask me if I wanted to keep my version of the config or update. I chose 'N' (which is default) to keep my version.

Here is an ls -lh showing the /etc/freeradius folder completely gone:

swittwer@tbcmc-admin-radius-vm:/etc$ ls -lh
total 912K
....
-rw-r--r-- 1 root root       685 Jan  8  2022 e2scrub.conf
-rw-r--r-- 1 root root       106 Feb 17  2023 environment
-rw-r--r-- 1 root root      1.9K Oct 17  2022 ethertypes
drwxr-xr-x 4 root root      4.0K Sep 11 10:14 fonts
-rw-r--r-- 1 root root       657 Nov  8  2023 fstab
-rw-r--r-- 1 root root       694 Mar 23  2022 fuse.conf
drwxr-xr-x 3 root root      4.0K Nov  8  2023 fwupd
-rw-r--r-- 1 root root      2.6K Feb  2  2022 gai.conf
drwxr-xr-x 2 root root      4.0K Sep 11 10:11 gnutls
drwxr-xr-x 2 root root      4.0K Sep 11 10:15 groff
....

swittwer@tbcmc-admin-radius-vm:/etc$ systemctl status freeradius.service
○ freeradius.service
     Loaded: masked (Reason: Unit freeradius.service is masked.)
     Active: inactive (dead)
swittwer@tbcmc-admin-radius-vm:/etc$

The "journelctl" command had a bunch of empty lines ending in "-- No entries --"

[EDIT] I did a variety of dmesg commands (IE: dmesg | grep radius) and the only hit I got was the hostname. no other references on radius, radiusd, or RADIUS.
[EDIT2] It scrolled by really fast, so I can't be 100% sure, but I think when the upgrade process was removing packages I saw a reference to freeradius. It was so fast though that I am not 100% sure. Obviously if that was the case, it would explain why it is missing.

[1fallen2]

The "journelctl" command had a bunch of empty lines ending in "-- No entries --" is because it's Masked??? Wired that's a first for me.

Have you tried to umask it?

Normally this should be the only entry's shown with:

 systemctl list-unit-files | grep masked
cryptdisks-early.service                                                  masked          enabled
cryptdisks.service                                                        masked          enabled
hwclock.service                                                           masked          enabled
saned.service                                                             masked          enabled
sudo.service                                                              masked          enabled
x11-common.service                                                        masked          enabled
zfs-import.service                                                        masked          enabled
zfs-load-key.service

Maybe the above would be good to see as well.

Mine before the mask was issued:

systemctl status freeradius.service
● freeradius.service
     Loaded: masked (Reason: Unit freeradius.service is masked.)
     Active: active (running) since Wed 2024-09-11 12:32:36 MDT; 7min ago
 Invocation: 36f1889f57364628830ec5f291184a42
   Main PID: 68489 (freeradius)
     Status: "Processing requests"
      Tasks: 6 (limit: 16491)
     Memory: 42.2M (peak: 43.8M)
        CPU: 152ms
     CGroup: /system.slice/freeradius.service
             └─68489 /usr/sbin/freeradius -f

Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Compiling Auth-Type PAP for attr Auth-Type
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Compiling Auth-Type CHAP for attr Auth-Type
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Compiling Auth-Type MS-CHAP for attr Auth-Ty>
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Compiling Autz-Type New-TLS-Connection for a>
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Compiling Post-Auth-Type REJECT for attr Pos>
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Compiling Post-Auth-Type Challenge for attr >
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Compiling Post-Auth-Type Client-Lost for att>
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: radiusd: #### Skipping IP addresses and Port>
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Configuration appears to be OK
Sep 11 12:32:36 Legion-5-15ACH6-zfs systemd[1]: Started freeradius.service - FreeRADIUS multi-proto

After a manual mask:

systemctl status freeradius.service
× freeradius.service
     Loaded: masked (Reason: Unit freeradius.service is masked.)
     Active: failed (Result: watchdog) since Wed 2024-09-11 12:40:38 MDT; 45s ago
   Duration: 7min 59.999s
 Invocation: 36f1889f57364628830ec5f291184a42
   Main PID: 68489 (code=dumped, signal=ABRT)
     Status: "Processing requests"
   Mem peak: 43.8M
        CPU: 191ms

Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Compiling Post-Auth-Type Client-Lost for attr Post-Auth-Type
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: radiusd: #### Skipping IP addresses and Ports ####
Sep 11 12:32:36 Legion-5-15ACH6-zfs freeradius[68487]: Configuration appears to be OK
Sep 11 12:32:36 Legion-5-15ACH6-zfs systemd[1]: Started freeradius.service - FreeRADIUS multi-protocol policy server.
Sep 11 12:40:06 Legion-5-15ACH6-zfs systemd[1]: freeradius.service: Got notification message from PID 68489, but reception is disabled
Sep 11 12:40:36 Legion-5-15ACH6-zfs systemd[1]: freeradius.service: Got notification message from PID 68489, but reception is disabled
Sep 11 12:40:36 Legion-5-15ACH6-zfs systemd[1]: freeradius.service: Watchdog timeout (limit 1min)!

Now I'll un mask it again:

First:

sudo syatemctl unmask freeradius.service

Reload systemd

sudo systemctl daemon-reload

Now try and start it:

systemctl start --now freeradius.service

Now check if its open for business.

systemctl status freeradius.service
● freeradius.service - FreeRADIUS multi-protocol policy server
     Loaded: loaded (/usr/lib/systemd/system/freeradius.service; enabled; preset: enabled)
     Active: active (running) since Wed 2024-09-11 12:32:36 MDT; 20s ago
 Invocation: 36f1889f57364628830ec5f291184a42
       Docs: man:radiusd(8)
             man:radiusd.conf(5)
             http://wiki.freeradius.org/
             http://networkradius.com/doc/
    Process: 68487 ExecStartPre=/usr/sbin/freeradius $FREERADIUS_OPTIONS -Cx -lstdout (code=exited,>
   Main PID: 68489 (freeradius)
     Status: "Processing requests"
      Tasks: 6 (limit: 16491)

[Steven_Wittwer]

I can do that (would have to update again, but that's easy). However, based on my EDIT2 above, I checked to see if it was in fact removed, and it appears so. I tried doing an apt install, and it said it was going to install all new packages.

I don't know why it would have been removed during the upgrade though.

[1fallen2]

I don't know why it would have been removed during the upgrade though.

Noble has had many surprises for myself and others,

Also check to see if these are intact as well:

sudo ls /etc/freeradius/3.0
certs          experimental.conf  mods-available  panic.gdb   radiusd.conf     sites-enabled   users
clients.conf  hints         mods-config     policy.d    README.rst       templates.conf
dictionary    huntgroups     mods-enabled     proxy.conf  sites-available  trigger.conf

Sounds like you might have a handle on this now, I'll check back later.

[Steven_Wittwer]

llike I mentioned, the /etc/freeradius folder is completely missing. I suppose I can resinstall, and copy over my backups.

[1fallen2]

Yes I saw that. This is after the upgrade and re-install of /freeradius .

If you do copy over from a back-up please let us know how that went for you.