IT-блог Жаконды

apt-get install mariadb-server -y

mysql_secure_installation

mariadb

CREATE DATABASE radius;
CREATE USER 'radius'@'localhost' IDENTIFIED BY 'radius';
GRANT SELECT ON radius.* TO 'radius'@'localhost';
FLUSH PRIVILEGES;

apt-get install freeradius freeradius-utils freeradius-mysql freeradius-ldap -y

mariadb radius < /etc/freeradius/3.0/mods-config/sql/main/mysql/schema.sql

mariadb -e "use radius;show tables;"

+------------------+
| Tables_in_radius |
+------------------+
| nas              |
| radacct          |
| radcheck         |
| radgroupcheck    |
| radgroupreply    |
| radpostauth      |
| radreply         |
| radusergroup     |
+------------------+

ln -s /etc/freeradius/3.0/mods-available/sql /etc/freeradius/3.0/mods-enabled/

chown freerad:freerad -R /etc/freeradius/3.0/mods-enabled/sql

dialect = "sqlite" на dialect = "mysql"
driver = "rlm_sql_null" на driver = "rlm_sql_mysql"

mysql {
    # If any of the files below are set, TLS encryption is enabled
    tls {
           ca_file = "/etc/ssl/certs/my_ca.crt"
           ca_path = "/etc/ssl/certs/"
           certificate_file = "/etc/ssl/certs/private/client.crt"
           private_key_file = "/etc/ssl/certs/private/client.key"
           cipher = "DHE-RSA-AES256-SHA:AES128-SHA"

           tls_required = yes
           tls_check_cert = no
           tls_check_cert_cn = no
    }

    # If yes, (or auto and libmysqlclient reports warnings are
    # available), will retrieve and log additional warnings from
    # the server if an error has occured. Defaults to 'auto'
    warnings = auto
}

# Connection info:
#
server = "localhost"
port = 3306
login = "radius"
password = "radius"

# Database table configuration for everything except Oracle
radius_db = "radius"

# Set to 'yes' to read radius clients from the database ('nas' table)
# Clients will ONLY be read on server startup.
read_clients = yes

systemctl restart freeradius

systemctl stop freeradius
freeradius -X

apt-get install apache2 apache2-utils php7.4 libapache2-mod-php7.4 php7.4-{curl,gd,common,mysql,mbstring,xml} php-gd php-db php-mail php-mail-mime git -y

cd /var/www
git clone https://github.com/lirantal/daloradius.git
cd daloradius/

mysql -u root radius < /var/www/daloradius/contrib/db/fr3-mysql-freeradius.sql
mysql -u root radius < /var/www/daloradius/contrib/db/mysql-daloradius.sql

mariadb -e "use radius;show tables;"
+------------------------+
| Tables_in_radius       |
+------------------------+
| batch_history          |
| billing_history        |
| billing_merchant       |
| billing_paypal         |
| billing_plans          |
| billing_plans_profiles |
| billing_rates          |
| cui                    |
| dictionary             |
| hotspots               |
| invoice                |
| invoice_items          |
| invoice_status         |
| invoice_type           |
| nas                    |
| node                   |
| operators              |
| operators_acl          |
| operators_acl_files    |
| payment                |
| payment_type           |
| proxys                 |
| radacct                |
| radcheck               |
| radgroupcheck          |
| radgroupreply          |
| radhuntgroup           |
| radippool              |
| radpostauth            |
| radreply               |
| radusergroup           |
| realms                 |
| userbillinfo           |
| userinfo               |
| wimax                  |
+------------------------+

cp app/common/includes/daloradius.conf.php.sample app/common/includes/daloradius.conf.php
chown www-data:www-data app/common/includes/daloradius.conf.php

mkdir -p var/{log,backup}
chown www-data:www-data -R var

$configValues['CONFIG_DB_ENGINE'] = 'mysqli';
$configValues['CONFIG_DB_HOST'] = 'localhost';
$configValues['CONFIG_DB_PORT'] = '3306';
$configValues['CONFIG_DB_USER'] = 'radius';
$configValues['CONFIG_DB_PASS'] = 'radius';
$configValues['CONFIG_DB_NAME'] = 'radius';

# If you just change the port or add more ports here, you will likely also
# have to change the VirtualHost statement in
# /etc/apache2/sites-enabled/000-default.conf

Listen 80
Listen 8080

<IfModule ssl_module>
        Listen 443
</IfModule>

<IfModule mod_gnutls.c>
        Listen 443
</IfModule>

cat <<EOF > /etc/apache2/sites-available/daloradius_operators.conf
  Alias /operators /var/www/daloradius/app/operators
  <VirtualHost *:80>
      DocumentRoot /var/www/daloradius/app/operators
      ErrorLog ${APACHE_LOG_DIR}/daloradius_operators.error.log
      CustomLog ${APACHE_LOG_DIR}/daloradius_operators.access.log combined
      <Directory /var/www/daloradius/app/operators>
          Options -Indexes +FollowSymLinks
          AllowOverride None
          Require all granted
      </Directory>
      <Directory /var/www/daloradius>
          Require all denied
      </Directory>
  </VirtualHost>
EOF

cat <<EOF > /etc/apache2/sites-available/daloradius_users.conf
<VirtualHost *:80>
    DocumentRoot /var/www/daloradius/app/users
    ErrorLog ${APACHE_LOG_DIR}/daloradius_users.error.log
    CustomLog ${APACHE_LOG_DIR}/daloradius_users.access.log combined
    <Directory /var/www/daloradius/app/users>
        Options -Indexes +FollowSymLinks
        AllowOverride None
        Require all granted
    </Directory>
    <Directory /var/www/daloradius>
        Require all denied
    </Directory>
</VirtualHost>
EOF

a2ensite daloradius_users.conf daloradius_operators.conf
a2dissite 000-default

/etc/init.d/apache2 restart