{"id":5658,"date":"2020-05-01T13:55:09","date_gmt":"2020-05-01T10:55:09","guid":{"rendered":"https:\/\/kifarunix.com\/?p=5658"},"modified":"2024-03-14T20:49:37","modified_gmt":"2024-03-14T17:49:37","slug":"install-freeradius-with-daloradius-on-ubuntu-20-04","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/install-freeradius-with-daloradius-on-ubuntu-20-04\/","title":{"rendered":"Install FreeRADIUS with daloRADIUS on Ubuntu 20.04"},"content":{"rendered":"\n

In this tutorial, we provide a step-by-step guide on how to install FreeRADIUS with daloRADIUS on Ubuntu 20.04. FreeRADIUS<\/a> is an open source high performance and highly configurable RADIUS suite that provides centralized network authentication on systems such as 802.1x (WiFi), dialup, PPPoE, VPN\u2019s, VoIP, etc. daloRADIUS<\/a> on the other hand is an advanced web application for managing FreeRADIUS server.<\/p>\n\n\n\n

FreeRADIUS supports a wide array of database backends including OpenLDAP, MySQL, Redis, Microsoft AD, Apache Cassandra, PostgreSQL etc.<\/p>\n\n\n\n

Installing FreeRADIUS with daloRADIUS on Ubuntu 20.04<\/h2>\n\n\n\n

In this demo, we are going to setup FreeRADIUS with MySQL as the backend database. Therefore, ensure that the prerequisites below are met before you can proceed.<\/p>\n\n\n\n

Prerequisites<\/h3>\n\n\n\n

Update and upgrade your system packages;<\/p>\n\n\n\n

apt update\napt upgrade<\/code><\/pre>\n\n\n\n
Install LAMP Stack on Ubuntu 20.04 by following the link below;<\/p>\n\n\n\n
Install LAMP Stack on Ubuntu 20.04<\/a><\/p>\n\n\n\n
Install other required PHP Modules;<\/p>\n\n\n\n
apt install php-gd php-mail php-mail-mime php-mysql php-pear php-db php-mbstring php-xml php-curl<\/code><\/pre>\n\n\n\n
Install and Configure FreeRADIUS on Ubuntu 20.04<\/h3>\n\n\n\n
Installing FreeRADIUS<\/h4>\n\n\n\n
Once all the prerequisites above are met, proceed to install FreeRADIUS on Ubuntu 20.04. FreeRADIUS 3.0.x is the latest stable release versions as of this writing and are available on the default Ubuntu 20.04 repos.<\/p>\n\n\n\n
To install FreeRADIUS and other FreeRADIUS utilities including MySQL database backend utilities on Ubuntu 20.04, execute the command below;<\/p>\n\n\n\n
apt install freeradius freeradius-mysql freeradius-utils<\/code><\/pre>\n\n\n\n
Running FreeRADIUS in Debug Mode<\/h4>\n\n\n\n
Usually, FreeRADIUS is expected to run well with the default configuration settings after the installation is done. To verify the same, run FreeRADIUS in debugging mode to confirm that is ready to process request.<\/p>\n\n\n\n
Before you can run FreeRADIUS in debugging mode, you need to stop its service first (started automatically after install);<\/p>\n\n\n\n
systemctl stop freeradius<\/code><\/pre>\n\n\n\n
Once that is done, run FreeRADIUS in debugging mode;<\/p>\n\n\n\n
freeradius -X<\/code><\/pre>\n\n\n\n
If FreeRADIUS is running as expected, you should see a line, Ready to process requests<\/strong>.<\/p>\n\n\n\n
   \tmax_connections = 16\n   \tlifetime = 0\n   \tidle_timeout = 30\n   }\n}\nListening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel\nListening on auth address * port 1812 bound to server default\nListening on acct address * port 1813 bound to server default\nListening on auth address :: port 1812 bound to server default\nListening on acct address :: port 1813 bound to server default\nListening on proxy address * port 59191\nListening on proxy address :: port 33772\nReady to process requests<\/strong>\n<\/code><\/pre>\n\n\n\n
Stop the debugging mode by pressing ctrl+c<\/strong>.<\/p>\n\n\n\n
Start and enable FreeRADIUS to run on system boot;<\/p>\n\n\n\n
systemctl enable --now freeradius<\/code><\/pre>\n\n\n\n
Open FreeRADIUS on Firewall<\/h4>\n\n\n\n
FreeRADIUS uses UDP port 1812<\/strong> for authentication and authorization and UDP port 1813<\/strong> as the accouting port<\/strong>. Therefore, if UFW is running, open these ports;<\/p>\n\n\n\n
ufw allow to any port 1812 proto udp\nufw allow to any port 1813 proto udp<\/code><\/pre>\n\n\n\n
confirm port opening by running the command below;<\/p>\n\n\n\n
ss -alun4 | grep -E ':1812|:1813'<\/code><\/pre>\n\n\n\n
UNCONN  0       0               127.0.0.1:18120          0.0.0.0:*              \nUNCONN  0       0                 0.0.0.0:1812<\/strong>           0.0.0.0:*              \nUNCONN  0       0                 0.0.0.0:1813<\/strong>           0.0.0.0:*<\/code><\/pre>\n\n\n\n
Create FreeRADIUS MySQL Database and Database User<\/h4>\n\n\n\n
Login to MySQL server and create FreeRADIUS database;<\/p>\n\n\n\n
mysql -u root -p<\/code><\/pre>\n\n\n\n
create database radiusdb;<\/code><\/pre>\n\n\n\n
Create FreeRADIUS database user and grant all privileges on the database created above;<\/p>\n\n\n\n
create user radiusadmin@localhost identified by 'myStr0nP@ssW0rd';<\/code><\/pre>\n\n\n\n
grant all on radiusdb.* to radiusadmin@localhost;<\/code><\/pre>\n\n\n\n
Reload the privileges tables to affect the changes and exit the database.<\/p>\n\n\n\n
flush privileges;\nquit<\/code><\/pre>\n\n\n\n
Create FreeRADIUS SQL Schema<\/h4>\n\n\n\n
FreeRADIUS ships with the default database schema located under \/etc\/freeradius\/3.0\/mods-config\/sql\/main\/mysql\/schema.sql<\/code>. Import this schema to FreeRADIUS database created above;<\/p>\n\n\n\n
mysql -u root -p radiusdb<\/strong> < \/etc\/freeradius\/3.0\/mods-config\/sql\/main\/mysql\/schema.sql<\/code><\/pre>\n\n\n\n
Configuring FreeRADIUS to use SQL<\/h4>\n\n\n\n
To configure FreeRADIUS to use SQL modules, open the SQL module configuration file;<\/p>\n\n\n\n
vim \/etc\/freeradius\/3.0\/mods-available\/sql<\/code><\/pre>\n\n\n\n
Set the SQL dialect to mysql<\/strong>, and define the FreeRADIUS database connection settings as created above.<\/p>\n\n\n\n
...\nsql {\n        #\n        #  The dialect of SQL being used.\n        #\n        #  Allowed dialects are:\n        #\n        #       mssql\n...\n        dialect = \"mysql\"<\/strong>\n\n        # The driver module used to execute the queries.\n        #driver = \"rlm_sql_null\"\n        driver = \"rlm_sql_${dialect}\"<\/strong>\n...\n        # Connection info:\n        #\n        server = \"localhost\"\n        port = 3306\n        login = \"radiusadmin\"\n        password = \"myStr0nP@ssW0rd\"<\/strong>\n...\n        # Database table configuration for everything except Oracle\n        radius_db = \"radiusdb\"<\/strong>\n...\n<\/code><\/pre>\n\n\n\n
The use of MySQL database enforces use of TLS certs by default. In this demo, we do not use the TLS certs, hence commenting out the MYSQL TLS section;<\/p>\n\n\n\n
...\n        mysql {\n                # If any of the files below are set, TLS encryption is enabled\n                #tls {\n                #       ca_file = \"\/etc\/ssl\/certs\/my_ca.crt\"\n                #       ca_path = \"\/etc\/ssl\/certs\/\"\n                #       certificate_file = \"\/etc\/ssl\/certs\/private\/client.crt\"\n                #       private_key_file = \"\/etc\/ssl\/certs\/private\/client.key\"\n                #       cipher = \"DHE-RSA-AES256-SHA:AES128-SHA\"\n                #\n                #       tls_required = yes\n                #       tls_check_cert = no\n                #       tls_check_cert_cn = no\n                #}<\/strong>\n\n...<\/code><\/pre>\n\n\n\n
Enable FreeRADIUS server to read clients from database, by uncommenting (removing hash) on the line #read_clients = yes<\/strong><\/code>.<\/p>\n\n\n\n
...\n        # Set to 'yes' to read radius clients from the database ('nas' table)\n        # Clients will ONLY be read on server startup.\n        read_clients = yes<\/strong>\n...<\/code><\/pre>\n\n\n\n
Next, enable the SQL module by creating a symbolic link of SQL mods-available to mods-enabled;<\/p>\n\n\n\n
ln -s \/etc\/freeradius\/3.0\/mods-available\/sql \/etc\/freeradius\/3.0\/mods-enabled\/<\/code><\/pre>\n\n\n\n
Change the ownership user and group of the enabled SQL module (symbolic link) to freerad as shown below.<\/p>\n\n\n\n
chown -h freerad.freerad \/etc\/freeradius\/3.0\/mods-enabled\/sql<\/code><\/pre>\n\n\n\n
Restart the FreeRADIUS service,<\/p>\n\n\n\n
systemctl restart freeradius<\/code><\/pre>\n\n\n\n
Verify FreeRADIUS use of SQL Database<\/h4>\n\n\n\n
To verify that FreeRADIUS can now work with MySQL database properly, populate the FreeRADIUS database with some dummy data. Login to FreeRADIUS database as FreeRADIUS database user created above;<\/p>\n\n\n\n
mysql -u radiusadmin -p<\/code><\/pre>\n\n\n\n
use radiusdb;<\/code><\/pre>\n\n\n\n
Create a dummy user entry in radcheck<\/code> table;<\/p>\n\n\n\n
insert into radcheck (id,username,attribute,op,value) values(\"1\", \"demouser\", \"Cleartext-Password\", \":=\", \"demopass\");<\/code><\/pre>\n\n\n\n
To verify the same;<\/p>\n\n\n\n
select * from radcheck where id=\"1\";<\/code><\/pre>\n\n\n\n
+----+----------+--------------------+----+----------+\n| id | username | attribute          | op | value    |\n+----+----------+--------------------+----+----------+\n|  1 | demouser | Cleartext-Password | := | demopass |\n+----+----------+--------------------+----+----------+\n1 row in set (0.01 sec)<\/code><\/pre>\n\n\n\n
Exit the database, stop FreeRADIUS and run it again on debug mode to verify if it is working well.<\/p>\n\n\n\n
systemctl stop freeradius<\/code><\/pre>\n\n\n\n
freeradius -X<\/code><\/pre>\n\n\n\n
FreeRADIUS provides a simple test tool, radtest<\/code>, which send packets to a RADIUS server and show the reply. The syntax of using the radtest<\/code> command line tool is;<\/p>\n\n\n\n
radtest {username} {password} {hostname} 10 {radius_secret}<\/code><\/pre>\n\n\n\n
Read man pages, man radtest<\/code>, for more info on options used.<\/p>\n\n\n\n
So while FreeRADIUS is running in a debug mode, open another terminal and run the test command below. Note<\/strong>: testing123<\/code> is the shared secret for the localhost client, check clients.conf<\/code>.<\/p>\n\n\n\n
radtest demouser demopass localhost 10 testing123<\/code><\/pre>\n\n\n\n
If you get the Access-Accept<\/code><\/strong>, response upon authenticating, then the POC is done.<\/p>\n\n\n\n
Sent Access-Request Id 129 from 0.0.0.0:40930 to 127.0.0.1:1812 length 78\n\tUser-Name = \"demouser\"\n\tUser-Password = \"demopass\"\n\tNAS-IP-Address = 10.0.2.15\n\tNAS-Port = 10\n\tMessage-Authenticator = 0x00\n\tCleartext-Password = \"demopass\"\nReceived Access-Accept <\/strong>Id 129 from 127.0.0.1:1812 to 127.0.0.1:40930 length 20<\/code><\/pre>\n\n\n\n
Stop FreeRADIUS debugging mode and start the service.<\/p>\n\n\n\n
systemctl start freeradius<\/code><\/pre>\n\n\n\n
Install and Configure daloRADIUS on Ubuntu 20.04<\/h2>\n\n\n\n
daloRADIUS is an advanced web application for managing FreeRADIUS server.  daloRADIUS homepage is hosted on sourceforge, https:\/\/sourceforge.net\/projects\/daloradius<\/a>. To download the latest release version, simply grab it from sourceforge homepage. <\/p>\n\n\n\n
Once you downloaded the daloRADIUS zip file, extract it to your web root directory;<\/p>\n\n\n\n
unzip daloradius-1.1-2.zip 'daloradius\/*' -d \/var\/www\/html\/<\/code><\/pre>\n\n\n\n
ls \/var\/www\/html\/\ndaloradius<\/strong><\/code><\/pre>\n\n\n\n
daloRADIUS ships with its default MySQL tables. Import these tables to the FreeRADIUS database created above.<\/p>\n\n\n\n
mysql -u root -p radiusdb < \/var\/www\/html\/daloradius\/contrib\/db\/fr2-mysql-daloradius-and-freeradius.sql<\/code><\/pre>\n\n\n\n
mysql -u root -p radiusdb < \/var\/www\/html\/daloradius\/contrib\/db\/mysql-daloradius.sql<\/code><\/pre>\n\n\n\n
Configure ownership of the daloRADIUS web configuration files to Apache web user as shown below;<\/p>\n\n\n\n
chown -R www-data.www-data \/var\/www\/html\/daloradius\/<\/code><\/pre>\n\n\n\n
Configure the permissions of the daloRADIUS main configuration file to 664<\/code> as shown below;<\/p>\n\n\n\n
chmod 664 \/var\/www\/html\/daloradius\/library\/daloradius.conf.php<\/code><\/pre>\n\n\n\n
Configure daloRADIUS database connection settings;<\/p>\n\n\n\n
vim \/var\/www\/html\/daloradius\/library\/daloradius.conf.php<\/code><\/pre>\n\n\n\n
Set the connection settings as per your setup.<\/p>\n\n\n\n
...\n$configValues['DALORADIUS_VERSION'] = '1.1-2';\n$configValues['DALORADIUS_DATE'] = '08 Aug 2019';\n$configValues['FREERADIUS_VERSION'] = '2';\n$configValues['CONFIG_DB_ENGINE'] = 'mysqli';\n$configValues['CONFIG_DB_HOST'] = 'localhost';\n$configValues['CONFIG_DB_PORT'] = '3306';\n$configValues['CONFIG_DB_USER'] = 'radiusadmin<\/strong>'; \n$configValues['CONFIG_DB_PASS'] = 'myStr0nP@ssW0rd<\/strong>';\n$configValues['CONFIG_DB_NAME'] = 'radiusdb<\/strong>';\n...<\/code><\/pre>\n\n\n\n
Save and exit the configuration file and restart FreeRADIUS.<\/p>\n\n\n\n
systemctl restart freeradius<\/code><\/pre>\n\n\n\n
Access daloRADIUS from Web<\/h3>\n\n\n\n
You can now access daloRADIUS from web so can administer FreeRADIUS with ease. Use the address, http:\/\/server-IP-Or-Hostname\/daloradius<\/strong><\/code>.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Login with the default credentials: Username: administrator<\/strong><\/code> Password: radius<\/strong><\/code><\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
And there you go. you have successfully installed FreeRADIUS with daloRADIUS on Ubuntu 20.04. Explore the RADIUS…<\/p>\n\n\n\n
Reference<\/h3>\n\n\n\n
Install FreeRADIUS 3.x on Debian\/Ubuntu<\/a><\/p>\n\n\n\n
Related Tutorials<\/h3>\n\n\n\n
Install FreeRADIUS with daloRADIUS on Debian 9<\/a><\/p>\n\n\n\n
Install and Configure FreeRADIUS with daloRADIUS on Fedora 29<\/a><\/p>\n\n\n\n
Install phpLDAPadmin on CentOS 8<\/a><\/p>\n\n\n\n
Install and Setup OpenLDAP on CentOS 8<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
In this tutorial, we provide a step-by-step guide on how to install FreeRADIUS with daloRADIUS on Ubuntu 20.04. FreeRADIUS is an open source high performance<\/p>\n","protected":false},"author":1,"featured_media":10647,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[121,298],"tags":[1539,296,1540,297,1541,1538,1537],"class_list":["post-5658","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-howtos","category-radius","tag-configure-freeradius-with-daloradius","tag-daloradius","tag-daloradius-ubuntu-20-04","tag-freeradius","tag-freeradius-ubuntu-20-04","tag-install-daloradius-ubuntu-20-04","tag-install-freeradius-on-ubuntu-20-04","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/5658"}],"collection":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/comments?post=5658"}],"version-history":[{"count":4,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/5658\/revisions"}],"predecessor-version":[{"id":21409,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/5658\/revisions\/21409"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media\/10647"}],"wp:attachment":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media?parent=5658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/categories?post=5658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/tags?post=5658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}