Bug 25649

Summary:	freeradius missing dictionary files
Product:	Mageia	Reporter:	rexy <richard>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	critical
Priority:	Normal	CC:	andrewsfarm, geiger.david68210, herman.viaene, sysadmin-bugs, tmb
Version:	7	Keywords:	advisory, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA7-64-OK
Source RPM:	freeradius-3.0.19-1.mga7	CVE:
Status comment:

Description rexy 2019-11-02 19:47:34 CET

Hello,

Description of the problem:
Freeradius server (radiusd) can't start due to a lack of dictionaries

Error reported when running "radiusd -X" (debug mode) : Error reading dictionary: dict_init... couldn't open dictionary "/usr/share/freeradius/dictionary.iana"

There is a lack of 21 dictionaries in the folder "/usr/share/freeradius" (dictionnnary.iana, dictionnary.alcatel-lucent.aaa, dictionary.arista, etc.).

You can retrieve all these dictionaries in the last tarball of the project (freeradius-server-3.0.19.tar.gz). I test it and it works fine.

David Walser 2019-11-03 03:09:09 CET

Summary: Lack of dictionaries => freeradius missing dictionary files

Comment 1 David GEIGER 2019-11-03 04:29:19 CET

Assigning to QA,


Advisory:
========================

Due to a packaging issue some dictionary files are mistakenly missing.
So this update fixes this issue.

========================

Packages in 7/core/updates_testing:
========================
freeradius-3.0.19-1.1.mga7.x86_64.rpm
freeradius-krb5-3.0.19-1.1.mga7.x86_64.rpm
freeradius-ldap-3.0.19-1.1.mga7.x86_64.rpm
freeradius-postgresql-3.0.19-1.1.mga7.x86_64.rpm
freeradius-mysql-3.0.19-1.1.mga7.x86_64.rpm
freeradius-unixODBC-3.0.19-1.1.mga7.x86_64.rpm
freeradius-sqlite-3.0.19-1.1.mga7.x86_64.rpm
freeradius-yubikey-3.0.19-1.1.mga7.x86_64.rpm
lib64freeradius1-3.0.19-1.1.mga7.x86_64.rpm
lib64freeradius-devel-3.0.19-1.1.mga7.x86_64.rpm

freeradius-3.0.19-1.1.mga7.i586.rpm
freeradius-krb5-3.0.19-1.1.mga7.i586.rpm
freeradius-ldap-3.0.19-1.1.mga7.i586.rpm
freeradius-postgresql-3.0.19-1.1.mga7.i586.rpm
freeradius-mysql-3.0.19-1.1.mga7.i586.rpm
freeradius-unixODBC-3.0.19-1.1.mga7.i586.rpm
freeradius-sqlite-3.0.19-1.1.mga7.i586.rpm
freeradius-yubikey-3.0.19-1.1.mga7.i586.rpm
libfreeradius1-3.0.19-1.1.mga7.i586.rpm
libfreeradius-devel-3.0.19-1.1.mga7.i586.rpm

Source RPM: 
========================
freeradius-3.0.19-1.1.mga7.src.rpm

CC: (none) => geiger.david68210
Assignee: bugsquad => qa-bugs

Comment 2 rexy 2019-11-03 11:44:30 CET

Hello,

I've just tested this update. It's ok for me.

Thank you.

Comment 3 Thomas Andrews 2019-11-04 14:07:07 CET

(In reply to rexy from comment #2)
> Hello,
> 
> I've just tested this update. It's ok for me.
> 
> Thank you.

Relying on your tests for function, testing for clean install only.

On real hardware, Probook 6550b, 64-bit Plasma system. Installed the basic freeradius package only, which also installed lib64freeradious and two other dependencies. Used the list in Comment 1 with the qarepo tool to get update packages. MCC updated only two packages, freeradius and lib64freeradius. Both packages installed cleanly, no missing dependencies noted.

I could give this a tentative OK on this basis, but it would probably be better if someone more knowledgeable could give it a more thorough test.

CC: (none) => andrewsfarm

Comment 4 Herman Viaene 2019-11-04 16:03:06 CET

MGA 7-64 Plasma on Lenovo B50
No installation issues installing all packages except the devel.
I wouldn't claim more knowledge than Thomas, but I found https://wiki.freeradius.org/guide/Basic-configuration-HOWTO
So at CLI:
# systemctl start radiusd
# systemctl -l status radiusd
● radiusd.service - FreeRADIUS high performance RADIUS server.
   Loaded: loaded (/usr/lib/systemd/system/radiusd.service; disabled; vendor preset: disabled)
   Active: active (running) since Mon 2019-11-04 15:46:37 CET; 29s ago
  Process: 12605 ExecStartPre=/usr/sbin/radiusd -C (code=exited, status=0/SUCCESS)
  Process: 12607 ExecStart=/usr/sbin/radiusd -d /etc/raddb (code=exited, status=0/SUCCESS)
 Main PID: 12609 (radiusd)
   Memory: 78.4M
   CGroup: /system.slice/radiusd.service
           └─12609 /usr/sbin/radiusd -d /etc/raddb

nov 04 15:46:37 mach5.hviaene.thuis systemd[1]: Starting FreeRADIUS high performance RADIUS server....
nov 04 15:46:37 mach5.hviaene.thuis systemd[1]: Started FreeRADIUS high performance RADIUS server..
Then I added a user to /etc/raddb/users and then
# systemctl restart radiusd
and then as a normal user:
$ radtest test7 tester localhost 0 testing123
Sent Access-Request Id 7 from 0.0.0.0:41437 to 127.0.0.1:1812 length 75
        User-Name = "test7"
        User-Password = "tester"
        NAS-IP-Address = 192.168.2.5
        NAS-Port = 0
        Message-Authenticator = 0x00
        Cleartext-Password = "tester"
Received Access-Accept Id 7 from 127.0.0.1:1812 to 127.0.0.1:41437 length 20

As I don't have  a NAS , the result is not the same as in  the howto, but seems reasonable enough.
So, OK unless someone objects.

CC: (none) => herman.viaene
Whiteboard: (none) => MGA7-64-OK

Comment 5 Thomas Andrews 2019-11-07 16:37:27 CET

Since there seem to be no objections, I'll validate. Advisory in Comment 1.

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update

Thomas Backlund 2019-11-07 22:57:34 CET

Keywords: (none) => advisory
CC: (none) => tmb

Comment 6 Mageia Robot 2019-11-08 00:38:26 CET

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2019-0199.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED