From 69ecadbbd1e9bff6fe06d4b2802d09749821eb1f Mon Sep 17 00:00:00 2001 From: Tom Hubrecht Date: Sat, 17 Feb 2024 23:57:40 +0100 Subject: [PATCH] fix(radius): Make it work --- machines/compute01/k-radius/module.nix | 5 +++-- .../compute01/secrets/radius-auth_token_file | Bin 1362 -> 2010 bytes 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/machines/compute01/k-radius/module.nix b/machines/compute01/k-radius/module.nix index 6275584..c726617 100644 --- a/machines/compute01/k-radius/module.nix +++ b/machines/compute01/k-radius/module.nix @@ -131,7 +131,7 @@ in name: { secret, ipaddr }: '' - cat <> ${cfg.configDir}/client.conf + cat <> ${cfg.configDir}/clients.conf client ${name} { ipaddr = ${ipaddr} secret = $(cat "${secret}") @@ -177,7 +177,7 @@ in ]; serviceConfig = { - ExecStart = "${cfg.freeradius}/bin/radiusd -f -d ${cfg.configDir} -l stdout"; + ExecStart = "${cfg.freeradius}/bin/radiusd -X -f -d ${cfg.configDir} -l stdout"; ExecReload = [ "${cfg.freeradius}/bin/radiusd -C -d ${cfg.configDir} -l stdout" "${pkgs.coreutils}/bin/kill -HUP $MAINPID" @@ -189,6 +189,7 @@ in RestartSec = 2; LogsDirectory = "radius"; StateDirectory = "radius"; + RuntimeDirectory = "radius"; Environment = [ "KANIDM_RLM_CONFIG=/var/lib/radius/kanidm.toml" "PYTHONPATH=${rlm_python.pythonPath}" diff --git a/machines/compute01/secrets/radius-auth_token_file b/machines/compute01/secrets/radius-auth_token_file index c162a638bf3b615e2a02716bac337dbe7c17fde7..489a0cfe7f9a4a011cb9ce9afe81e2cd813519b9 100644 GIT binary patch literal 2010 zcmZY9`I{4k9mjD6T4<_Vi>sVXDIjciJIUl6WVd9JNivgUlDTpfq?2TlnPhU#B$Ej! zA_x>7MDRdm!2&DzP!1^~PvzmVb*WMc2-W3ys4fbqz%BxE39Y}>AMh`DKhO7heZFj( zYvJ;VvRagdLjJdfavG=_G%amfN#a|$Bxp7pAg$~yVPsk>K!g{ImYHPL4~O(6&=kad zK1T#(46Myw0b``DDn$rdO!10FrlNo)A7o0NSTq>dx&0()w3@3GK`jN7VTI!aeGZm& zCb_7;zm`EGsi0k(#`qi}5&;ym;DDsJhSDaz(Na+H5TdVI%ymP^9$?EtQ~*&;Qc7?V zjM<=2Le}NDtX0W5op4%wx+9(-7Gx2#!h*C6I6z!fOUQ&WOALaP*l4Xh2X3JrRkI;Y-Cul_+ zlALns3C`mH4XKciA{;KtZH>B%wn7Ak!)7BF&C{Vk9CrhCIBYEzS$~p4l1{0v;me*R z3PFn9pz}tG@thK&Va1pah4W>`%T@A;0^k-P03;J0#(-l*#u$wIjWp&7NHnGol{E%M zS3yi9z+)WcPFbsHEkM{YZ`lzcb1pkYQ|=0Y>!hrdAnT=o7+~U*iF7C&!WK|ZH4SRw zWg}{H*|J_5sF3y=$pa2p)J42z%Hnf53qXuE+H$xBkLR$OjZ*=N%drt#DhAYmfTt2r zH91xFN@a^8=iO;Mrh_Ox$KW;-nv@Y9FA;9Py<`yT0W-|w91k;A9mNA8g`prt)eD&t ztTD298Ihy*j4xwDQP^C=)0WszBmq^0NDx}oh7yQFj^bs17$e;#LJ+eR)Qy-JkwP=#zUl1*6@CT5pvu6!VYC+K84OK7aTA3|_HBosl9z_|)K z&?yIk0+unxX=_T&*76dM)F3@#`%%*WKLF;gS@HA_Ze31@5z4EU01v&@?`IZl;0*aLbhqT*uHQH4p;xFEP{3TP4eERLl^XraUv1)ojR z($b;@GL-6|168u(N1bW6q$bq5-{vW1RodWHLP&)b1r$Mehw9e|`^_(JSP}&1wu5}@c=az2EPP%Z-MwX}+kUAr*?#NH?ENoI zAG!G4_&I|QEZEV$?925h4&2kPym&D5!oYI}r;#@v>sh|*!~*jC&o=EoI)3$<-o0-> zhwWG^KKJ57$=f4azi(`?Sg^Uj+x+TMAhk{$E~>wteezN9oq@aZj@QNy?_RcK>Xqin z;HWomGKO2l!%Yoe2;iddNn_*nVQWu!11q|JxnM%<+Ku;^#>%o;Glx%o@4{!>ikIdN zI(4qW{Oy##&(Z>)6d(O>TXVO?N(Guk7iKbQn9X4Qn28e(=YUH#^JyjxA1&5qrn%?%H*rYiscA zmz&l;>ztYE%j>mYKhiUKemZyf9x9p44%gU2iywcmP$61w2A`hh>}*`BF--XSnSqu4 zV#BsMZ#agwpUb3QAJYHos!#i@f$I*7__uSRvE=OtaO&VX@Ehyk*r1ky{|U6h)0dB1 z)hZmiZfG5`-@EbP+JD)f+2UC=r?b>IzwdbE7aKx-=3FYQm~r%0`|@eHyt4C!sSjWL z%?1|z;G?YCxA)HWGo72}^}}cUd-6-S9=v!4yR#hHxGERdKG1V>)w_L=q4JHB^&#`_ z$*bWHW<+_!*}e6teaG%T`Qe&@*S-fHUoyh}d*wAA=(*nKh~{|LitFovQM)4BvAa8m zvOU=~6X1n=*Ik(O#KOfJng+ygKDltA_{M-IM*X?t&_6bue)ms%Y%``^GEO;hs`-mC z^IJds>RA8J=AW#3mqOTKnV6WEGU)9S$~Q+Z(^n2}-8MEcApkXZoqfx(@8Km~e~paq zsrE0+w`O)VydDccI#Z8v^T%G}*gdCrwfF60`-F}>(qy)c+j3;(B2D+xJG#F6qn+G% zd~GiC&MW$ML*woPlWNWG*240q$-qBfRcA-Dji%Adwrg&`ym#FG^CRCM(spWf53a4Z Go%$c(2@m-I literal 1362 zcmZXTyQ|~`7)QY}7Q3Y&!c;cln#UxQWEX|JCdnj|$>g0BLNdwZJ$X)&8N_zGt*q^A zWWmBho9#se5wzJxaX|~Q5yWcMYjK+^-yd)|KfV(r@lAX>beCqx>eD-Qmp~%|+`PBw z`}8J`P#j07#lW>2Jz4nEQlU!Hs{^m>TW)J))K;tVqj-d6jGu2Wr`loFP#Fxcy&Rh2 zq?jvDbx+Hadrnx6$m0rXdVA@w<5^}`Rt*Zf?R{Dx$SJzyt`a+per}1INr$HU zw0)^F)PAwo1vm{sqndlFE=?A@2=0!MXLjGl>z%>F2#jCwCAxNb06Xht-D!|=JVao- zkF1Ms3DeH@N>kbP` zVE;I0r#8h$T=8+UYjGzJg}7A>gIQ@~Z6G-giiBt#BXT%5f}Awjeo0i_lJz_w?n|LQ zE~lpItY44#t>qc{=5zAPI zDrg(gsT~K&-P(7RK;yJO>=!*rALLGMhG4)Y>%?oD0veYU>t`*)T|18_ZIG%hZ^x6s z&Qe8zbq!t9y(KHo!w`;q$hGpI!eV?hb+qKq(aOzH={^nCDdM&gSU0EMS*cl{WwF{D zlhsU8e;U<+A|S2kruxF2N5i7I8o(4!{>?(yhOImq$6D; z`M=vnm|-UAuXi7YxAnR%EbC=QG*Hd#rc@4bPdR?fR?FFpPhmZ zCW?1h#6e;_D@V{(K>vucF}Nm(`D%Foxs3x