2009 Aradial This document contains proprietary and confidential information of Aradial and shall not be reproduced or transferred to other documents, disclosed to others, or used for any purpose other than that for which it is furnished, without the prior written consent of Aradial. It shall be returned to the Aradial upon request. The trademark and service marks of Aradial, including the Aradial logo, are the exclusive property of Aradial, and may not be used without permission. All other marks mentioned in this material are the property of their respective owners. Document Information Software Version: 5.1 Document Version: 2.4.2 Publication Date: Apr 2009 Page 2
Contents 1. CentOS/Redhat Version Installation... 4 Installation... 4 Installation for MySQL Database... 5 Aradial processes... 6 Oracle Database installation... 6 Running Aradial and Mysql as services... 6 Final configuration & License... 7 Optional: Create Aradial database manually... 7 2. Generic Version Installation... 8 Installation... 8 Configuration... 8 MySQL 4.x installation... 9 MySQL V4.1... 9 Aradial Fix V4.1 (If needed)... 9 Installation command... 10 Schema installation... 10 In case that the MyODBC is not working properly:... 11 IMPORTANT... 11 Running Aradial and Mysql as services... 12 Trouble Shooting... 12 3. App. A: Installing Chillispot... 13 Page 3
1. CentOS/Redhat Version Installation Installation 1) Install CentOS from the CDs (either the server OS version or the regular which is a desktop GUI version) List of mirror sites at: http://isoredirect.centos.org/centos/5.2/isos/i386/ Recommended installation for the Desktop: Install Server mode or GUI mode. Automatic partition Configure the server to fix IP 192.168.8.155 - you may change it later. Do not use DHCP for your main interface eht0. Configure a gateway and DNS, preferred: 192.168.8.1 (so you can download from the internet). Note: we used 192.168.8.155 in all the demo database of Aradial Name the computer ardlinux Enable firewall and remote login through ssh, Web Server, FTP In the packages verify that you select: o X Windows - default o Gnome - default o Editors default o Ftp default o Mysql check all the options 2) Login as root, all the installation and running will be under this user. 3) Download the CentOS Aradial version from Linux directory in Aradial FTP site. 4) Download the ARDKEY.reg_ from Aradial site this is the Aradial temporary license. 5) Open the tar.gz to a Linux directory with root permissions. a) gzip d aradial-*.tar.gz b) tar xf Aradial-*.tar Note: the * is the correct version. Example: aradial-v51.tgz Page 4
Create a soft link : ln s aradial /usr/local/aradial or mv aradial /usr/local/aradial -> AradialDir is the folder you unpacked to. Note: the program is expected to be installed at: /usr/local/aradial Installation for MySQL Database 1) Installing Mysql: a) Perform from root an install to Mysql packages: yum install mysql-server yum install unixodbc Note: When asked confirm the installation. It will install the latest version of MySQL for Redhat. b) Install the MySql connector: yum install mysql-connector-odbc 2) Run the following script to update the odbc.ini, odbcinst.ini and my.cnf files, or merge them with existing files. Aradial files are under /usr/local/aradial/etc. cd /usr/local/aradial scripts/update_system 3) Restart the Mysql service: service mysqld start Note: This will initialize the Mysql and start the service. See page 6 for instructions how to install as a service. or (not as a service) /etc/init.d/mysqld mysqld start 4) Install the demo database by: /usr/local/aradial/scripts/install_demo_db Note: Should write: Aradial database created a) Check the database with isql as explained in the installation. isql v aradial select count(1) from users; Note: if there is a problem with '/usr/lib/libmyodbc3_r.so' remove it from /etc/odbcinst.ini, Change to: /usr/lib/libmyodbc3.so Page 5
Aradial processes 1) Aradial process are as follows, by default these are softlinks to the odbc version. a)./ardserver - the server b)./ardadmin - the admin c)./ardportal - the portal d)./ardwsc - the wsc. 2) To view the processes use: /usr/local/aradial/po or /usr/local/aradial/shower Or service ardrad status Oracle Database installation 1) Use the Oracle Script in /usr/local/aradial/database/oracle to create Aradial database. 2) Configure the tnsnames 3) Edit the rbsrad.conf and replace the ConnectStr=database;user;password of Aradial Oracle database 4) Replace all the soft links for the Aradial processes to point to the *ora processes. 5) Change the /usr/local/aradial/hts/messages to use Oracle statements cp /usr/local/aradial/hts/messages/oracle/* /usr/local/aradial/hts/messages/ 6) Edit: Metering.tcl to use Oracle. Running Aradial and Mysql as services chkconfig ardrad chkconfig --evel 3 mysqld on chkconfig ardrad on Page 6
Final configuration & License 1. The configuration file is rbsrad.conf 2. The default ports are set to 1812, 1813 (UDP) need to open them in the firewall. The HTTP ports that should be opened: 8000, 8001, 8002 After the installation and before connecting it is recommended to open the ports in the Linux firewall. /etc/init.d/iptables stop /usr/local/aradial/etc/firewall.iptables /etc/init.d/iptables save 3. By default in Aradial a NAS is configured in Aradial database for IP: 192.168.8.155 and the secret is 1234 in Aradial Admin. 4. The RegKey1 and RegKey2 from ARDKEY.reg_ should be updated in the rbsrad.conf. These are the license keys. 5. All the logs are opened, this is to enable debugging. If you wish to do a load test you must closed them and leave just the severe on. 6. Multithreaded support is disabled. You can change it if you wish, and restart the server. 7. Update the 8. HTTP links to use: 1. http://aradialserverip:8000 - Aradial Admin 2. http://aradialserverip:8001 - Self Care module 3. http://aradialserverip:8002/portal - for the Portal Optional: Create Aradial database manually Create the database using the script from $Aradial folder$/database/mysql in Aradial folder. i) cd /usr/local/database/mysql ii) mysql (1) create database aradial (2) quit iii) mysql aradial < MySQL-aradial.sql Page 7
2. Generic Version Installation The Linux version has been tested on three Linux environments and will work on others: 1. CentOS Recommended version Special easy installation bellow 2. Redhat 8 3. Redhat 9 and 10 4. DSL debian based 5. SuSE 6. Any other including Debian and FreeBSD Installation 2) Download the version from Linux directory. 3) Download also all the MySQL files. 4) Open the tar.gz to a Linux directory with root permissions. 5) Open the Service Packs (if exists) and override the Aradial version. 6) Create a softlink: ln s AradialDir /usr/local/aradial. AradialDir is the folder. 7) Database installation as explained in the next sections: a) Install the MySQL version from our site or greater. b) Install the unixodbc version from our site or greater. c) The MySQL version should be at least 4.1.10a. d) Do not forget to copy/merge my.cnf from $Aradial folder$/etc to /etc/my.cnf and then restart the mysqld (/etc/init.d/mysql restart). e) Create the database using the script from $Aradial folder$/database/mysql in Aradial folder. i) cd $Aradial folder$/database/mysql ii) mysql (1) create database aradial (2) quit iii) mysql aradial < MySQL-aradial.sql f) Check the database with isql as explained in the installation. 8) Either copy the ardrad to init.d and then you can start it as a daemon or run manually: a)./ardserver - the server b)./ardadmin - the admin c)./ardportal - the portal d)./ardwsc - the wsc. Configuration 9. The configuration file is rbsrad.conf 10. The default ports are set to 1812, 1813 (UDP) need to open them in the firewall. 11. The HTTP ports that should be opened: 8000, 8001, 8002 12. By default in Aradial a NAS is configured in Aradial database for IP: 192.168.8.155 and the secret is 1234 in Aradial Admin. Page 8
13. The RegKey1 and RegKey2 from ARDKEY.reg_ should be updated in the rbsrad.conf. These are the license keys. 14. All the logs are opened, this is to enable debugging. If you wish to do a load test you must closed them and leave just the severe on. 15. Multithreaded support is disabled. You can change it if you wish, and restart the server. 16. Update the 17. HTTP links to use: 1. http://aradialserverip:8000 - Aradial Admin 2. http://aradialserverip:8001 - Self Care module 3. http://aradialserverip:8002/portal - for the Portal MySQL 4.x installation MySQL V4.1 Download the following from Aradial FTP in MySQL4.1 folder: MySQL-client-4.1.10a-0.i386.rpm MySQL-server-4.1.10a-0.i386.rpm MySQL-shared-compat-4.1.10a-0.i386.rpm Note: No need to install if already installed newer version on your Linux. You can use on redhat or comaptible: up2date install mysqld Download and install general unixodbc (2.2.5 and above) support: Note: No need to install if already installed new version on your Linux. http://www.aradial.com/ftp/linux/unixodbcfor4.1/unixodbc-2.2.11-6.2.1.i386.rpm or: URL: http://edas.visaci.cz/en/unixodbc/ unixodbc-2.2.5-1.i386.rpm unixodbc-generic-2.2.5-1.i386.rpm unixodbc-mysql-2.2.5-1.i386.rpm Aradial Fix V4.1 (If needed) Download the file MyOdbc.tgz from http://www.aradial.com/ftp/linux/unixodbcfor4.1/myodbc.tgz In case it does not help, please try to updated unixodbc to unixodbc-2.2.10, you can take it from: http://www.aradial.com/ftp/linux/unixodbcfor4.1/unixodbc-2.2.11-6.2.1.i386.rpm Upgrading/installing the RPM: Page 9
Installation command 1. Upgrading/installing the RPM: rpm -U MySQL-shared-compat-4.1.10a-0.i386.rpm MySQL-client-4.1.10a-0.i386.rpm MySQL-server- 4.1.10a-0.i386.rpm 2. Installing myodbc please see next section as a part of the regular installation. Schema installation After the installation of Server/Client and ODBC you should: 1. Copy the text from $Aradial folder$/etc installation the my.cnf file to /etc adding the options. Note this is important because it sets the MySQL to be case insensitive. Or add to the start mysqld: -o lower_case_table_names=1 The text: [mysqld] lower_case_table_names=1 2. Restart mysqld by doing: /etc/init.d/mysqld restart Or service mysqld restart 3. Verify that mysqld is running: service mysqld status Create the database using the script from $Aradial folder$/database/mysql in Aradial folder. i) cd $Aradial folder$/database/mysql ii) mysql (1) create database aradial (2) quit iii) mysql aradial < MySQL-aradial.sql or iv) or build a Demo database: mysql aradial < DemoDatabase.dmp 4. Add the following to the odbcinst.ini file (generally at /etc/odbcinst.ini or /etc/unixodbc/odbcinst.ini): * If not already exists Or copy from the file: $Aradial folder$/etc/odbcinst.ini [MySQL] Description = Driver = /usr/local/lib/libmyodbc3.so Setup = /usr/ local/lib/libodbcmys.so FileUsage = CPTimeout = CPReuse = Note: In some linux system the *.so files are located elseware and there is a need to find them in /usr/lib or /usr/local/lib. 5. Add the following to the odbc.ini file (generally at /etc/odbc.ini or /etc/unixodbc/odbc.ini): Page 10
Or copy from the file: $Aradial folder$/etc/odbc.ini [aradial] Description = MySQL Driver = MySQL Server = localhost Database = aradial Port = 3306 Socket = Option = 131073 Stmt = USER = root PASSWQRD = aradial 5. Please execute verification on the unixodbc to verify that it can query: isql -v aradial root select * from users; In case that the MyODBC is not working properly: i. Download the file MyOdbc. Go to your linux, change your privilage to root, and go to the directory that you just put the file above. Do the following steps: a. tar -xzf MyOdbc.tgz b. cd MyOdbc c../instmyodbc ii. iii. Add a link because of an unixodbc known bug: ln -s / var/lib/mysql/mysql.sock /tmp/mysql.sock iv. Please execute verification on the unixodbc to verify that it can query: isql -v aradial root select * from users; IMPORTANT 1. Option should be set to 1! 2. Password is the database password 3. user - the user that can access the database. 4. Test the connection using: isql -v aradial root Do simple sql: select count(*) from users; 5. Set the DSN in rbsrad.conf: ConnectStr=aradial Page 11
Running Aradial and Mysql as services 1. Copy from Aradial/etc/ardrad installation to /etc/init.d. 2. Add Aradial to the services (chkconfig). chkconfig add ardrad chkconfig level 3 mysqld on chkconfig ardrad on Trouble Shooting 1. The Aradial path must be in LD_LIBRARY_PATH in order that the Linux will find the *.so files in Aradial directory and not to search them else ware. 2. If there is a problem with MySQL. a. Please check: mysqlodbc 3.51.10 was installed instead of 3.51.07. b. If there is a problem with mysql.lock: [root@aradial /]# find. -name "mysql.lock" /var/lib/mysql/mysql.sock [root@aradial /]# ln -s /var/lib/mysql/mysql.sock /tmp/mysql.sock c. Sometimes there is a need to compile the ODBC on the Linux machine. 3. The access is denied because of wrong password or incorrect password. Although the password seems ok in the database. Usually is because of the following: 1. Wrong NAS secret. 2. Wrong NAS model using Aradial NAS Simulator model which is not good for NASes. 4. SQL does not work well. Please verify that the following been applied. Copy from Aradial/etc installation the my.cnf file to /etc. Note this is important because it sets the MySQL to be case insensitive. Or add to the start mysqld: -o lower_case_table_names=1 5. In case it does not help, please try to updated unixodbc to unixodbc-2.2.10, you can take it from: http://www.aradial.com/ftp/linux/ UnixODBCFor4.1/unixODBC-2.2.11-6.2.1.i386.rpm Page 12
3. App. A: Installing Chillispot This section is optional and explains how to install Chillispot access controller with Aradial RADIUS on the same computer. Note: In order to install Chillispot you would need two network cards on the computer. Login as root: 1. ChilliSpot is installed by issuing the commands: rpm -i i http://www.chillispot.org/download/chillispot-1.0.i386.rpm 1. Download aradial-chillispot.tar from Aradial FTP site. 2. cd / tar xf aradial-chillispot.tar 3. In order to automate startup of chilli issue the command: chkconfig chilli on ChilliSpot will start next time you reboot the system, or you can start it directly by issuing the command /etc/init.d/chilli start 4. Firewall Setup It is important to protect ChilliSpot from unauthorized traffic. No single firewall ruleset can satisfy all network configurations, and generally you should write your own set of rules. As a starting point you can use the script located in: /usr/share/doc/chillispot-1.0/firewall.iptables You can edit this file to suit your own configuration or simply use it without modification using the existing Aradial default configuration. Once you have edited the file install it by issuing the following commands: /etc/init.d/iptables stop /usr/share/doc/chillispot-1.0/firewall.iptables /etc/init.d/iptables save This will first clear the current firewall rules, install the new rules and finally save the Page 13
rules so that they will be restored whenever the system is rebooted. 5. Port Forwarding Should be automatically configured by Aradial tar ball. In order for ChilliSpot to forward network packets, IP forwarding must be turned on in the kernel. You need to change the line which reads net.ipv4.ip_forward = 0 in /etc/sysctl.conf to the following: net.ipv4.ip_forward = 1 The changes take effect when you reboot the system, or you can activate them directly by issuing the command /sbin/sysctl -p If you use an external radius and UAM server this concludes the installation. You should now reboot the system in order to make sure that all the changes you made take effect. If you are not using an external Radius and/or UAM server you need to install these as described below. 6. Edit /etc/chilli.conf and put the right IP for Aradial and the Portal. Page 14