Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
vendors:cisco:routers:radius [2026/11/09 14:35] – [Sample Cisco CUBE Config] gerardorourkevendors:cisco:routers:radius [2026/11/12 09:22] (current) – [Radius Log Access] gerardorourke
Line 521: Line 521:
 But the Group does not natively have any read access (or executable access on the directory). But the Group does not natively have any read access (or executable access on the directory).
 So enable group read and executable access on the directories and read access on the log files and then add the relavant users to the radiusd group. So enable group read and executable access on the directories and read access on the log files and then add the relavant users to the radiusd group.
- 
-  * Add read+execute access to all directories and sub directories of /var/log/radius  
-    * <code>sudo find /var/log/radius -type d -exec chmod g+rx {} +</code> 
-  * Add read access to all files (recussive) /var/log/radius  
-    * <code>sudo find /var/log/radius -type f -exec chmod g+r {} +</code> 
-  * Add a user to the group radiusd (note - you need to log out and log back in for this to take affect) 
-    * <code>sudo usermod -aG radiusd <user></code> 
-  * To check the users who are in the group radiusd 
-    * <code>getent group radiusd</code> 
  
 So that any new detail file will also allow the same access edit the following config file So that any new detail file will also allow the same access edit the following config file
Line 539: Line 530:
     *Restart radiusd service:     *Restart radiusd service:
     *<code>systemctl restart radiusd</code>     *<code>systemctl restart radiusd</code>
 +
 +
 +  * Add read+execute access to all directories and sub directories of /var/log/radius (need to run this again if a new directory is created - so you can have access to that directory).
 +    * <code>sudo find /var/log/radius -type d -exec chmod g+rx {} +</code>
 +  * Add read access to all files (recussive) /var/log/radius (this should NOT be needed if above config change is done - but for any existing log files - it might need to be done once).
 +    * <code>sudo find /var/log/radius -type f -exec chmod g+r {} +</code>
 +  * Add a user to the group radiusd (note - you need to log out and log back in for this to take affect)
 +    * <code>sudo usermod -aG radiusd <user></code>
 +  * To check the users who are in the group radiusd
 +    * <code>getent group radiusd</code>
 +
  
 ==== Apache, PHP and Microsoft SQL Driver install ==== ==== Apache, PHP and Microsoft SQL Driver install ====
Line 911: Line 913:
   * <code>tail -f /var/log/apache-radius-monitor.log</code>   * <code>tail -f /var/log/apache-radius-monitor.log</code>
 ===== Troubleshooting ===== ===== Troubleshooting =====
 +
 +==== Basics - Check these ====
 +Check PHP error logs
 +<code>sudo more /var/opt/remi/php85/log/php-fpm/www-error.log</code>
 +
 +Find which radius files have a certain string - example
 +<code>sudo grep -rn "0034A582" /var/log/radius/radacct/</code>
 +
 +Check Radius Logs
 +<code>sudo more /var/log/radius/radius.log</code>
 +<code>sudo ls -al /var/log/radius/</code>
 +
 +
 +
 ==== Run radiusd from command line and get debug output to the screen ==== ==== Run radiusd from command line and get debug output to the screen ====
 First stop the service First stop the service
Line 917: Line 933:
 then start it from command line with the "-X" argument then start it from command line with the "-X" argument
 <code>sudo radiusd -X</code> <code>sudo radiusd -X</code>
 +
  
 ==== SS command ==== ==== SS command ====
  • vendors/cisco/routers/radius.1794234945.txt.gz
  • Last modified: 2026/11/09 14:35
  • by gerardorourke