Debian 12下FreeRADIUS监听DHCP标准67端口时systemd无法启动服务的问题求助
Debian 12下FreeRADIUS监听DHCP标准67端口时systemd无法启动服务的问题求助
大家好,我在Debian 12上尝试搭配DHCP使用FreeRADIUS,DHCP数据包是通过路由器中继过来的,现在遇到了一个棘手的问题,想请教下各位:
- 当我把FreeRADIUS配置为监听DHCP标准端口67时,用调试命令
freeradius -X启动完全正常,所有配置都符合预期;但用systemd启动服务(systemctl start freeradius)就直接失败了。 - 我找不到更详细的错误日志,只有通过
journalctl -xeu freeradius.service看到的输出,具体内容如下:
Jul 26 13:09:41 rpi freeradius[544893]: rlm_sql (sql): Adding client ubiqap (UbiQ_AP) to global clients list Jul 26 13:09:41 rpi freeradius[544893]: rlm_sql (192.168.220.55): Client "UbiQ_AP" (sql) added Jul 26 13:09:41 rpi freeradius[544893]: rlm_sql (sql): Released connection (0) Jul 26 13:09:41 rpi freeradius[544893]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Jul 26 13:09:41 rpi freeradius[544893]: rlm_mschap (mschap): using internal authentication Jul 26 13:09:41 rpi freeradius[544893]: tls: Using cached TLS configuration from previous invocation Jul 26 13:09:41 rpi freeradius[544893]: tls: Using cached TLS configuration from previous invocation Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Discover for attr DHCP-Message-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Request for attr DHCP-Message-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Decline for attr DHCP-Message-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Inform for attr DHCP-Message-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Release for attr DHCP-Message-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling dhcp DHCP-Lease-Query for attr DHCP-Message-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type PAP for attr Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type CHAP for attr Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type MS-CHAP for attr Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Ignoring "ldap" (see raddb/mods-available/README.rst) Jul 26 13:09:41 rpi freeradius[544893]: Compiling Post-Auth-Type REJECT for attr Post-Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type PAP for attr Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type CHAP for attr Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Auth-Type MS-CHAP for attr Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Autz-Type New-TLS-Connection for attr Autz-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Post-Auth-Type REJECT for attr Post-Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Post-Auth-Type Challenge for attr Post-Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: Compiling Post-Auth-Type Client-Lost for attr Post-Auth-Type Jul 26 13:09:41 rpi freeradius[544893]: radiusd: #### Skipping IP addresses and Ports #### Jul 26 13:09:41 rpi freeradius[544893]: Configuration appears to be OK Jul 26 13:09:42 rpi systemd[1]: freeradius.service: Main process exited, code=exited, status=1/FAILURE ░░ Subject: Unit process exited ░░ Defined-By: systemd ░░ Support: https://www.debian.org/support ░░ ░░ An ExecStart= process belonging to unit freeradius.service has exited. ░░ ░░ The process' exit code is 'exited' and its exit status is 1. Jul 26 13:09:42 rpi systemd[1]: freeradius.service: Failed with result 'exit-code'. ░░ Subject: Unit failed ░░ Defined-By: systemd ░░ Support: https://www.debian.org/support ░░ ░░ The unit freeradius.service has entered the 'failed' state with result 'exit-code'. Jul 26 13:09:42 rpi systemd[1]: Failed to start freeradius.service - FreeRADIUS multi-protocol policy server. ░░ Subject: A start job for unit freeradius.service has failed ░░ Defined-By: systemd ░░ Support: https://www.debian.org/support ░░ ░░ A start job for unit freeradius.service has finished with a failure. ░░ ░░ The job identifier is 4265304 and the job result is failed.
- 我尝试把DHCP监听端口改成非标准的6700时,
systemctl start freeradius就能正常启动服务,完全没有问题。 - 我怀疑这是用户权限问题,已经试过执行
setcap cap_net_admin=ei /usr/sbin/freeradius,但没有任何效果。
有没有朋友遇到过类似的问题?或者能给我一些排查的方向吗?非常感谢!
备注:内容来源于stack exchange,提问作者amlanhldr
相关产品推荐
相关产品推荐

