Business Community > WiFi > EAP Controller 2.5.3 for Linux
< WiFi

EAP Controller 2.5.3 for Linux

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
12

EAP Controller 2.5.3 for Linux

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
EAP Controller 2.5.3 for Linux
EAP Controller 2.5.3 for Linux
2017-11-04 08:57:08 - last edited 2021-03-30 03:55:41
Good news: EAP controller 2.5.3 for Linux just has been released and is available for download.

Bad news: it still lacks privilege separation and needs to run with root permissions. Very risky if you intend to use it on a public server!

Even more bad news: the start/stop script still checks for the root user by looking at the shell environment variable UID.
So any local, non-privileged user with access to the server can easily stop a running EAP controller by claiming to be root:

[CODE]$ cd /opt/tplink/EAPController/bin
$ ./control.sh stop
The script need root permission. Exit.

$ UID=0 ./control.sh stop
Stopping EAP Controller ...
Stop successfully.
$
[/CODE]

This is really annoying, since I filed not only a bug report, but also a fix to TP-Link on occasion of the release of version 2.4.8 already.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0      
 
  0      
 
#1
Options
13 Reply
Re:EAP Controller 2.5.3 for Linux
2017-11-06 20:03:30
Did you get it to work? I've upgrade mine from version 2.4.8, but it kept throwing java exceptions and the accesspoint was shown as disconnected, so I restored the directory from a backup. I've unfortunately not kept the logfile when uninstalling version 2.5.3 so I cannot give the exact exception. BTW, what you describe is not possible on CentOS 7, UID is a read-only variable:
[CODE]
sh-4.2# UID=0
sh: UID: readonly variable
[/CODE]
  0  
  0  
#2
Options
Re:EAP Controller 2.5.3 for Linux
2017-11-06 21:58:19
Hmmmm could not find it on the website, can you post the link maybe?
  0  
  0  
#3
Options
Re:EAP Controller 2.5.3 for Linux
2017-11-06 23:47:50

bane4s wrote

Hmmmm could not find it on the website, can you post the link maybe?


Sure: http://static.tp-link.com/resources/software/EAP_Controller_v2.5.3_linux_x64.tar.gz
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#4
Options
Re:EAP Controller 2.5.3 for Linux
2017-11-07 00:30:01
Does your fix involve recompiling, or is it just a change in the start/stop scripts? If it's something I can do myself I'd love to do it until TP-Link gets off their collective duff to fix it. Thanks!
  0  
  0  
#5
Options
Re:EAP Controller 2.5.3 for Linux
2017-11-07 01:05:17

R1D2 wrote



Thanks I have got it and installed it already.
If you create a backup it will ask you to import it automatically, that's sweet :)
It seems that everything is in there except maps. This page now doesn't even have controls to import new map... could it be a bug.. will check if I can do something about it
  0  
  0  
#6
Options
Re:EAP Controller 2.5.3 for Linux
2017-11-07 01:12:27
Hmmm, I just did a fresh install of 2.5.3 and was able to put in my own map. The "Configure Maps" button in the upper right looks disabled, but still functions normally. Click it, click the blue "(+) Add" button in the upper right of the dialog, then give your map a label and upload the file. I also trashed the default map :P
  0  
  0  
#7
Options
Re:EAP Controller 2.5.3 for Linux
2017-11-07 01:39:37
Yes. that works, but if you had multiple sites, the old maps are not backed, so you need to re-upload them again. Since I had other than "Default" site preselected, I had a blank screen... then I realized if I get back to Default site, then I see default map plus Configure Maps grey button as you described.
So... this issue is resolved, functionality is there, just maps needs to be included into backup as well.
  0  
  0  
#8
Options
Re:EAP Controller 2.5.3 for Linux
2017-11-07 04:05:37
Good to know. Maps probably should be part of the backup, but I can see it causing file size or format issues with the config file (especially if you have, say, 10 maps each at ~300K, that balloons the config file from ~50K to ~3MB). They should just have something in the backup UI that says to make sure you save (and recreate) your maps separately, or just have a dedicated means to export/import that data.
  0  
  0  
#9
Options
Re:EAP Controller 2.5.3 for Linux
2017-11-07 09:53:59

DocJones wrote

Maps probably should be part of the backup,


Maps in /opt/tplink/EAPController/data/map are saved over an uninstall/install cycle if you answer 'y' to the question from uninstall.sh wether you want to save the DB. The DB backup file is saved in /opt/tplink/EAPController.

install.sh then will detect it and re-create the database including all maps. No need to save them in a config backup.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#10
Options
Re:EAP Controller 2.5.3 for Linux
2017-12-02 02:40:35
That's fine for an uninstall/reinstall, but if you're migrating, or replacing a broken server, those files won't necessarily exist any more. They should have a UI-based means to export/back up the DB and maps.
  0  
  0  
#11
Options
12

Information

Helpful: 0

Views: 2784

Replies: 13

Related Articles
Proper upgrade procedure from EAP Controller 2.4.8 to 2.5.3 on Linux
2699 0
Omada Controller 3.2.1(Linux) has been released.
6535 0
New tpeap-1.4 for Omada Controller 3.0.2 (Linux)
7318 4
eap controller linux start failed
3427 0
Omada Controller 2.7.0 for Linux (community version)
31754 7
Recipe: Installing your own SSL certificate in Omada Controller 2.7.0 for Linux
16923 7
About Us
Press
Copyright © TP-LINK CORPORATION PTE. LTD. All rights reserved.