FreeRADIUS 3.0.13 をCentOS 7.4へインストールした

CentOS7の初期状態

firewall-d 停止
selinux停止

Mariadbのセットアップ

Mariadbのインストール

yum install mariadb mariadb-server mariadb-devel -y

1	yum install mariadb mariadb-server mariadb-devel -y

MariaDB の文字コードを utf-8 に変更

[client]
default-character-set = utf8

1 2	[client] default-character-set = utf8

/etc/my.cnf.d/client.cnf に上記を追加

[mysqld]
character-set-server = utf8

1 2	[mysqld] character-set-server = utf8

/etc/my.cnf.d/server.cnf [mysqld]の設定項目にcharacter-set-server = utf8を追加

Mariadbの起動および自動起動設定

systemctl start mariadb
systemctl enable mariadb

1 2	systemctl start mariadb systemctl enable mariadb

Mariadbの初期設定およびrootパスワード設定

rootのパスワードを設定し、不要なdatabase,userなどを削除します。

[root@radius ~]# mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user.  If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none):
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.

You already have a root password set, so you can safely answer 'n'.

Change the root password? [Y/n] y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
 ... Success!


By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] y
 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!
[root@radius ~]#

[root@radius ~]# mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB

SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current

password for the root user. If you've just installed MariaDB, and

you haven't set the root password yet, the password will be blank,

so you should just press enter here.

Enter current password for root (enter for none):

OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MariaDB

root user without the proper authorisation.

You already have a root password set, so you can safely answer 'n'.

Change the root password? [Y/n] y

New password:

Re-enter new password:

Password updated successfully!

Reloading privilege tables..

... Success!

By default, a MariaDB installation has an anonymous user, allowing anyone

to log into MariaDB without having to have a user account created for

them. This is intended only for testing, and to make the installation

go a bit smoother. You should remove them before moving into a

production environment.

Remove anonymous users? [Y/n] y

... Success!

Normally, root should only be allowed to connect from 'localhost'. This

ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] y

... Success!

By default, MariaDB comes with a database named 'test' that anyone can

access. This is also intended only for testing, and should be removed

before moving into a production environment.

Remove test database and access to it? [Y/n] y

- Dropping test database...

... Success!

- Removing privileges on test database...

... Success!

Reloading the privilege tables will ensure that all changes made so far

will take effect immediately.

Reload privilege tables now? [Y/n] y

... Success!

Cleaning up...

All done! If you've completed all of the above steps, your MariaDB

installation should now be secure.

Thanks for using MariaDB!

[root@radius ~]#

freeRADIUSデータベース作成

[root@radius my.cnf.d]# mysql -u root -p
Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 2
Server version: 5.5.56-MariaDB MariaDB Server

Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database radius;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> GRANT ALL ON radius.* TO radius@localhost IDENTIFIED BY "radiuspassword";
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> FLUSH PRIVILEGES;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> \q
Bye
[root@radius radius]#

[root@radius my.cnf.d]# mysql -u root -p

Enter password:

Welcome to the MariaDB monitor. Commands end with ; or \g.

Your MariaDB connection id is 2

Server version: 5.5.56-MariaDB MariaDB Server

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database radius;

Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> GRANT ALL ON radius.* TO radius@localhost IDENTIFIED BY "radiuspassword";

Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> FLUSH PRIVILEGES;

Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> \q

Bye

[root@radius radius]#

FreeRADIUSのセットアップ

FreeRADIUSのインストール

yum -y install freeradius freeradius-utils freeradius-mysql

1	yum -y install freeradius freeradius-utils freeradius-mysql

データベースセットアップ

mysql -u root -p radius < /etc/raddb/mods-config/sql/main/mysql/schema.sql
Enter password:

1 2	mysql -u root -p radius < /etc/raddb/mods-config/sql/main/mysql/schema.sql Enter password:

シンボリックリンクの設定

ln -s /etc/raddb/mods-available/sql /etc/raddb/mods-enabled/sql

1	ln -s /etc/raddb/mods-available/sql /etc/raddb/mods-enabled/sql

/etc/raddb/mods-available/sql　の編集

        driver = "rlm_sql_mysql"

        # The dialect of SQL you want to use, this should usually match
        # the driver you selected above.
        #
        # If you're using rlm_sql_null, then it should be the type of
        # database the logged queries are going to be executed against.
        dialect = "mysql"

        # Connection info:
        #
        server = "localhost"
        port = 3306
        login = "radius"
        password = "radiuspassword"


        # Set to 'yes' to read radius clients from the database ('nas' table)
        # Clients will ONLY be read on server startup.
        read_clients = yes

        # Table to keep radius client info
        client_table = "nas"

driver = "rlm_sql_mysql"

# The dialect of SQL you want to use, this should usually match

# the driver you selected above.

# If you're using rlm_sql_null, then it should be the type of

# database the logged queries are going to be executed against.

dialect = "mysql"

# Connection info:

server = "localhost"

port = 3306

password = "radiuspassword"

# Set to 'yes' to read radius clients from the database ('nas' table)

# Clients will ONLY be read on server startup.

read_clients = yes

# Table to keep radius client info

client_table = "nas"

sqlファイルのグループ変更

chgrp -h radiusd /etc/raddb/mods-enabled/sql

1	chgrp -h radiusd /etc/raddb/mods-enabled/sql

FreeRADIUSの起動および自動起動設定

systemctl start radiusd.service
systemctl enable radiusd.service

1 2	systemctl start radiusd.service systemctl enable radiusd.service

FreeRADIUS 3.0.13 をCentOS 7.4へインストールした

CentOS7の初期状態

Mariadbのセットアップ

Mariadbのインストール

Mariadbの起動および自動起動設定

Mariadbの初期設定およびrootパスワード設定

freeRADIUSデータベース作成

FreeRADIUSのセットアップ

FreeRADIUSのインストール

データベースセットアップ

シンボリックリンクの設定

/etc/raddb/mods-available/sql　の編集

sqlファイルのグループ変更

FreeRADIUSの起動および自動起動設定

FreeRADIUSでの実際の利用例

インフラエンジニアのメモ帳

FreeRADIUS 3.0.13 をCentOS 7.4へインストールした

CentOS7の初期状態

Mariadbのセットアップ

Mariadbのインストール

Mariadbの起動および自動起動設定

Mariadbの初期設定およびrootパスワード設定

freeRADIUSデータベース作成

FreeRADIUSのセットアップ

FreeRADIUSのインストール

データベースセットアップ

シンボリックリンクの設定

/etc/raddb/mods-available/sql の編集

sqlファイルのグループ変更

FreeRADIUSの起動および自動起動設定

FreeRADIUSでの実際の利用例

/etc/raddb/mods-available/sql　の編集