This is an old revision of the document!
Table of Contents
Installing FreeRADIUS version 3.x on Ubuntu 20.04
Introduction
- Ubuntu 20.04 now comes with a FreeRADIUS 3.x release.
- Install FreeRADIUS and MySQL module.
sudo apt-get install libdatetime-perl sudo apt-get install freeradius freeradius-mysql # Answer yes to install these with their dependencies # Please note that when this package is installed there are some things generated that can take up lots of time on slower machines.
- Enable and Start FreeRADIUS
sudo systemctl enable freeradius sudo systemctl start freeradius sudo systemctl status freeradius
Configuring FreeRADIUS version 3.x
- Do the following to configure FreeRADIUS 3.x to work with RADIUSdesk
Fixing a small bug
- There is a small bug which prevents FreeRADIUS to start up after a reboot.
- It has been reported here: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954911
- There also seems to be a fix but it has not reached the Ubuntu repositories as of this writing.
- So here is the fix taken from the discussion in the link
- Create a file called /usr/lib/tmpfiles.d/freeradius.conf
sudo vi /usr/lib/tmpfiles.d/freeradius.conf
- Add the following line
d /run/freeradius 750 freerad freerad -
- If you are curious about what we did, here is a writeup on tmpfiles.d
Add Nginx to run scripts
- To create the ability for the web server to exercise some control over FreeRADIUS, we will have a custom script which is added to the sudoers file.
- The correct way to edit the sudoers file is by using:
sudo visudo
- Add the following at the bottom
# Members of the admin group may gain root privileges %admin ALL=(ALL) ALL www-data ALL = NOPASSWD:/var/www/html/cake3/rd_cake/setup/scripts/radmin_wrapper.pl
- Confirm that this line is now inside the /etc/sudoers file
sudo cat /etc/sudoers
- This will allow the root user in RADIUSdesk to Start and Stop FreeRADIUS service and do on-the-fly activation of debug traces.
Next steps
- You need to do a few small tweaks for your environment
- The first part of the instructions if specific to the Raspberry Pi. You can skip them and go to the Adapt The Settings In MESHdesk section if you are running RADIUSdesk on something else.