You need to enable JavaScript to run this app.
优惠活动
大模型
产品
解决方案
定价
更多

Debian 12下FreeRADIUS监听DHCP标准67端口时systemd无法启动服务的问题求助

Debian 12下FreeRADIUS监听DHCP标准67端口时systemd无法启动服务的问题求助

大家好,我在Debian 12上尝试搭配DHCP使用FreeRADIUS,DHCP数据包是通过路由器中继过来的,现在遇到了一个棘手的问题,想请教下各位:

  • 当我把FreeRADIUS配置为监听DHCP标准端口67时,用调试命令 freeradius -X 启动完全正常,所有配置都符合预期;但用systemd启动服务(systemctl start freeradius)就直接失败了。
  • 我找不到更详细的错误日志,只有通过 journalctl -xeu freeradius.service 看到的输出,具体内容如下:
Jul 26 13:09:41 rpi freeradius[544893]: rlm_sql (sql): Adding client ubiqap (UbiQ_AP) to global clients list

Jul 26 13:09:41 rpi freeradius[544893]: rlm_sql (192.168.220.55): Client "UbiQ_AP" (sql) added

Jul 26 13:09:41 rpi freeradius[544893]: rlm_sql (sql): Released connection (0)

Jul 26 13:09:41 rpi freeradius[544893]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output

Jul 26 13:09:41 rpi freeradius[544893]: rlm_mschap (mschap): using internal authentication

Jul 26 13:09:41 rpi freeradius[544893]: tls: Using cached TLS configuration from previous invocation

Jul 26 13:09:41 rpi freeradius[544893]: tls: Using cached TLS configuration from previous invocation

Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Discover for attr DHCP-Message-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Request for attr DHCP-Message-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Decline for attr DHCP-Message-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Inform for attr DHCP-Message-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Release for attr DHCP-Message-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Lease-Query for attr DHCP-Message-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type PAP for attr Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type CHAP for attr Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type MS-CHAP for attr Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Ignoring "ldap" (see raddb/mods-available/README.rst)

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Post-Auth-Type REJECT for attr Post-Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type PAP for attr Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type CHAP for attr Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type MS-CHAP for attr Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Autz-Type New-TLS-Connection for attr Autz-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Post-Auth-Type REJECT for attr Post-Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Post-Auth-Type Challenge for attr Post-Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: Compiling Post-Auth-Type Client-Lost for attr Post-Auth-Type

Jul 26 13:09:41 rpi freeradius[544893]: radiusd: #### Skipping IP addresses and Ports ####

Jul 26 13:09:41 rpi freeradius[544893]: Configuration appears to be OK

Jul 26 13:09:42 rpi systemd[1]: freeradius.service: Main process exited, code=exited, status=1/FAILURE

░░ Subject: Unit process exited

░░ Defined-By: systemd

░░ Support: https://www.debian.org/support

░░

░░ An ExecStart= process belonging to unit freeradius.service has exited.

░░

░░ The process' exit code is 'exited' and its exit status is 1.

Jul 26 13:09:42 rpi systemd[1]: freeradius.service: Failed with result 'exit-code'.

░░ Subject: Unit failed

░░ Defined-By: systemd

░░ Support: https://www.debian.org/support

░░

░░ The unit freeradius.service has entered the 'failed' state with result 'exit-code'.

Jul 26 13:09:42 rpi systemd[1]: Failed to start freeradius.service - FreeRADIUS multi-protocol policy server.

░░ Subject: A start job for unit freeradius.service has failed

░░ Defined-By: systemd

░░ Support: https://www.debian.org/support

░░

░░ A start job for unit freeradius.service has finished with a failure.

░░

░░ The job identifier is 4265304 and the job result is failed.
  • 我尝试把DHCP监听端口改成非标准的6700时,systemctl start freeradius就能正常启动服务,完全没有问题。
  • 我怀疑这是用户权限问题,已经试过执行 setcap cap_net_admin=ei /usr/sbin/freeradius,但没有任何效果。

有没有朋友遇到过类似的问题?或者能给我一些排查的方向吗?非常感谢!

备注:内容来源于stack exchange,提问作者amlanhldr

相关产品推荐
方舟 Agent Plan

超全模态模型 × Harness 升级,最新支持 Deepseek-V4.1-Flash、GLM-5.3 系列、Doubao-Seedream-5.0-pro、Kimi-K3 (部分), 限时 9.9 元起

最近更新时间:2026.04.22 09:33:09