Freeradius fails to start after update to 21.1.7

[athurdent]

Log:

Code Select Expand

2021-06-16T14:31:55 Error: /usr/local/etc/raddb/mods-enabled/eap[15]: Instantiation failed for module "eap"
2021-06-16T14:31:55 Error: rlm_eap (EAP): Failed to link rlm_eap_leap: Cannot open "/usr/local/lib/freeradius-3*/rlm_eap_leap.so"

Tried deleting and reinstalling the plugin to no avail.

[mrpink]

Cisco LEAP was removed in version 3.0.22

Remove native support for Cisco LEAP. It is insecure, and should not be used. Proxying LEAP is still supported.

Open the configuration /usr/local/etc/raddb/mods-available/eap and remove the section about leap and restart freeradius.

EDIT:

Even better, please open the file /usr/local/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-eap and remove the leap section (lines 102 to 115).

[franco]

Might be worth notifying the plugin maintainer.

For a quick fix:

# opnsense-revert -r 21.1.6 freeradius3


Cheers,
Franco

[franco]

PS: ok, we have a ticket now https://github.com/opnsense/plugins/issues/2432

[athurdent]

Wow, thank you very much mrpink, mimugmail and franco. Already fixed I see, great work!  :)

[franco]

Team effort. Sometimes it's hard to protect against non-core changes in the ecosystem.

It will likely be hotfixed tomorrow for good measure.


Cheers,
Franco

[szty0pa]

Btw same (similar?) thing happens with PAP:

Code Select Expand

2021-06-17T16:58:51 radiusd[48579] /usr/local/etc/raddb/mods-enabled/pap[13]: Failed to link to module 'rlm_pap': Cannot open "/usr/local/lib/freeradius-3*/rlm_pap.so"

[franco]

Michael will take a look, although from the release notes nothing changed for PAP.

About LEAP it's a bit funny now that FreeRADIUS released 3.0.23[1] and it says...

> Silently ignore LEAP configuration instead of erroring out.

¯\_(ツ)_/¯


Cheers,
Franco

[1] https://freeradius.org/release_notes/?br=3.0.x&re=3.0.23

[mimugmail]

Btw same (similar?) thing happens with PAP:

Code Select Expand

2021-06-17T16:58:51 radiusd[48579] /usr/local/etc/raddb/mods-enabled/pap[13]: Failed to link to module 'rlm_pap': Cannot open "/usr/local/lib/freeradius-3*/rlm_pap.so"

Does this happen during startup?

[zeitlins]

Same here also get the pap[13] error, happens on start or restart of the Service the workaraound is working for now.

Thanks

[mimugmail]

Which workaround?

[zeitlins]

Might be worth notifying the plugin maintainer.

For a quick fix:

# opnsense-revert -r 21.1.6 freeradius3


Cheers,
Franco

[szty0pa]

Btw same (similar?) thing happens with PAP:

Code Select Expand

2021-06-17T16:58:51 radiusd[48579] /usr/local/etc/raddb/mods-enabled/pap[13]: Failed to link to module 'rlm_pap': Cannot open "/usr/local/lib/freeradius-3*/rlm_pap.so"

Does this happen during startup?

Yes this happens at startup and if/when i try to start radiusd manually. (Same thing happens with the freeradius plugin 1.9.13 as well.)

[mimugmail]

Doesnt happen on my side .. Screenshots please

[franco]

Running a health audit would be beneficial to rule out local issues.


Cheers,
Franco