Skip to main content
Contributor
March 2, 2022

Troubleshooting Tip : FortiNAC Local Radius not starting with error 'Errors reading /etc/raddb/dictionary: dict_init:'

  • March 2, 2022
  • 0 replies
  • 1357 views
Description This article describes how to solve one of the cases where the local radius does not start in FortiNAC.
Scope 8.8.x, 9.1.x, 9.2.x
Solution

In this case, indicators of this failure condition can be checked in the GUI status and on the local radius service logs 

 

a)Retrieving the radius logs from FNAC CLI 

 

#cd /var/log/radius
#cat radius.log

 

b)  The related error that would appear in the logs would be:


radiusd[16323]: Starting - reading configuration files ...
[16323]: Errors reading /etc/raddb/dictionary: dict_init: /etc/raddb/dictionary.sitelocal[9]: Invalid attribute identifier: Number '999' out of allowed range in attribute identifier
F systemd[1]: radiusd.service: control process exited, code=exited status=1
F: Failed to start FreeRADIUS multi-protocol policy server (Persistent).
-- Subject: Unit radiusd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit radiusd.service has failed.
--
-- The result is failed.

 

Solution: The solution for this error would be to reinstall the local radius packages. This procedure requires internet access for the FNAC instance. Steps to reinstall  local radius package:

 

-FNAC GUI: Settings→Local RADIUS Settings: Disable radius service
-CLI: Uninstall all radius packages: yum -y remove "freeradius*"
-CLI: Confirm no radius packages are returned by: rpm -qa | grep radius
-Restart the Fnac server - this will automatically re-install and configure free radius 

-CLI command to restart FNAC would be: restartNAC
-CLI: Confirm radius packages are again installed by: rpm -qa | grep radius
freeradius-3.0.21-1.x86_64
freeradius-config-3.0.21-1.x86_64
freeradius-mysql-3.0.21-1.x86_64
freeradius-rest-3.0.21-1.x86_64
-FNAC GUI: Confirm in Settings→Local RADIUS Settings that service is enabled/running in Service
Status
-Re-test authentication

 

Note: This procedure should be applied if the error mentioned above in bold font is seen, or if advised by TAC. Please do not apply the procedure in other cases without priorly advising with TAC or a Fortinet Partner.

 

 

Related articles.

 

https://community.fortinet.com/t5/FortiNAC/Troubleshooting-Tip-Troubleshoot-and-Debug-FortiNAC-Local...

 

https://community.fortinet.com/t5/FortiNAC/Troubleshooting-Tip-FortiNAC-Local-Radius-Debug-amp/ta-p/...

 

https://community.fortinet.com/t5/FortiNAC/Troubleshooting-Tip-Local-RADIUS-log-message-examples/ta-...