Troubleshooting External Authentication Issues for RADIUS on an SELinux Machine
On an SELinux-enabled machine, do not copy any modified
pld.conf
file from a different location and replace it with the
existing file, as SELinux blocks access to such files. Instead, edit the
pld.conf
file contents directly using the vi/vim editor.
On an SELinux enabled machine, for External Authentication with the RADIUS
Server, after copying the
mod_auth_xradius.so
file to the directory
/usr/lib64/httpd/modules/
, execute the this command to prevent
SELinux from blocking
access:chcon -t httpd_modules_t /usr/lib64/httpd/modules/mod_auth_xradius.so
On
a SELinux enabled machine, for External Authentication with Radius, perform the
following tasks if you encounter this error after restarting HTTPD: Permission
denied: xradius: Cannot create DBM Cache at `/var/authxcache
'.
chcon -R -t httpd_cache_t /var/authxcache.dir
chcon -R -t httpd_cache_t /var/authxcache.pag
systemctl restart httpd.service