Hi All,<br><br>Continued.. from my previous mail..<br>I am seeing some more issues when i restarted radiusd. Please see the debug log below.<br><br>rad_recv: Access-Request packet from host
<a href="http://192.168.1.1:18007">192.168.1.1:18007</a>, id=13, length=319<br><p class="MsoPlainText">
<span style=""> </span>User-Name =
"anonymous"<br>
<span style=""> </span>Called-Station-Id =
"00-15-70-23-E5-60:wpa_psk"<br>
<span style=""> </span>Calling-Station-Id =
"00-00-00-22-00-8B"<br>
<span style=""> </span>NAS-Port = 4<br>
<span style=""> </span>NAS-Port-Type = Wireless-802.11<br>
<span style=""> </span>Framed-MTU = 1400<br>
<span style=""> </span>Service-Type = Framed-User<br>
<span style=""> </span>NAS-IP-Address =
<a href="http://192.168.1.1">192.168.1.1</a><br>
<span style=""> </span>NAS-Identifier = "Wireless
Services"<br>
<span style="" lang="FR"><span style=""> </span>NAS-Port-Id = "wpa_psk"<br>
<span style=""> </span></span>Connect-Info =
"CONNECT 54Mbps 802.11a"<br>
<span style=""> </span><span style="">
</span>State = 0x3d55ed1056c3716334e831a761baf07e<br>
<span style=""> </span>EAP-Message =
0x0202007019800000006616030100610100005d0301461654c362b26af0ff6d48f398a5156d6566ebbced03258c344461681761d8ed00003600390038003500160013000a00330032002f0007006600050004006300620061001500120009006500640060001400110008000600030100
<br>
<span style=""> </span>Message-Authenticator =
0x572da3efc1f70fab4cbd23469ec0722a<br>
<span style=""> </span>Processing the authorize section of
radiusd.conf<br>
modcall: entering group authorize for request 1163<br>
<span style=""> </span>modcall[authorize]: module
"preprocess" returns ok for request 1163<br>
radius_xlat:<span style=""> </span>'anonymous'<br>
rlm_attr_rewrite: Added attribute Stripped-User-Name with value 'anonymous'<br>
<span style=""> </span>modcall[authorize]: module
"copy_user_name" returns ok for request 1163<br>
radius_xlat:<span style=""> </span>'^(.*[\/]+)'<br>
rlm_attr_rewrite: No match found for attribute Stripped-User-Name with value
'anonymous'<br>
<span style=""> </span>modcall[authorize]: module
"add_dollar_sign" returns ok for request 1163<br>
<span style=""> </span>modcall[authorize]: module
"etc_passwd" returns notfound for request 1163<br>
<span style=""> </span>modcall[authorize]: module
"etc_group" returns notfound for request 1163<br>
<span style=""> </span>modcall[authorize]: module
"chap" returns noop for request 1163<br>
<span style=""> </span>modcall[authorize]: module
"mschap" returns noop for request 1163<br>
<span style=""> </span>rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"suffix_oblic" returns noop for request 1163<br>
<span style=""> </span>rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"suffix_oblic_fs" returns noop for request 1163<br>
<span style=""> </span>rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"prefix_oblic" returns noop for request 1163<br>
<span style=""> </span>rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"prefix_oblic_fs" returns noop for request 1163<br>
<span style=""> </span>rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"suffix_at" returns noop for request 1163<br>
<span style=""> </span>rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"prefix_at" returns noop for request 1163<br>
<span style=""> </span>rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"suffix_percent" returns noop for request 1163<br>
<span style=""> </span>rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>modcall[authorize]: module
"prefix_percent" returns noop for request 1163<br>
<span style=""> </span>users: Matched entry anonymous at
line 5<br>
<span style=""> </span>modcall[authorize]: module
"files" returns ok for request 1163<br>
<span style=""> </span>rlm_eap: EAP packet type response id 2
length 112<br>
<span style=""> </span>rlm_eap: No EAP Start, assuming it's an
on-going EAP conversation<br>
<span style=""> </span>modcall[authorize]: module
"eap" returns updated for request 1163<br>
modcall: leaving group authorize (returns updated) for request 1163<br>
<span style=""> </span>rad_check_password:<span style=""> </span>Found Auth-Type EAP<br>
<span style=""> </span>rad_check_password:<span style=""> </span>Found Auth-Type EAP<br>
Warning:<span style=""> </span>Found 2 auth-types on request
for user 'anonymous'<br>
auth: type "EAP"<br>
<span style=""> </span>Processing the authenticate section of
radiusd.conf<br>
modcall: entering group authenticate for request 1163<br>
<span style=""> </span>rlm_eap: Request found, released from
the list<br>
<span style=""> </span>rlm_eap: EAP/peap<br>
<span style=""> </span>rlm_eap: processing type peap<br>
<span style=""> </span>rlm_eap_peap: Authenticate<br>
<span style=""> </span>rlm_eap_tls: processing TLS<br>
rlm_eap_tls:<span style=""> </span>Length Included<br>
<span style=""> </span>eaptls_verify returned 11 <br>
<span style=""> </span>(other): before/accept initialization
<br>
<span style=""> </span>TLS_accept: before/accept
initialization <br>
<span style=""> </span>rlm_eap_tls: <<< TLS 1.0
Handshake [length 0061], ClientHello<span style="">
</span><br>
<br>
Program received signal SIGSEGV, Segmentation fault.<br>
0xb7e71b10 in mallopt () from /lib/libc.so.6<br>
(gdb) where<br>
#0<span style=""> </span>0xb7e71b10 in mallopt () from
/lib/libc.so.6<br>
#1<span style=""> </span>0xb7e721b0 in mallopt () from
/lib/libc.so.6<br>
#2<span style=""> </span>0xb7e70b38 in realloc () from
/lib/libc.so.6<br>
#3<span style=""> </span>0xb7c0c794 in default_realloc_ex ()
from /usr/lib/libcrypto.so.0.9.8<br>
#4<span style=""> </span>0x00000040 in ?? ()<br>
#5<span style=""> </span>0xb7cf36c0 in ?? () from
/usr/lib/libcrypto.so.0.9.8<br>
#6<span style=""> </span>0xb7c0cfeb in CRYPTO_realloc () from
/usr/lib/libcrypto.so.0.9.8<br>
#7<span style=""> </span>0x08158db8 in ?? ()<br>
#8<span style=""> </span>0x00000040 in ?? ()<br>
#9<span style=""> </span>0xb7ce8c45 in dummy_nid () from
/usr/lib/libcrypto.so.0.9.8<br>
#10 0x00000096 in ?? ()<br>
#11 0xb7d27e50 in SSL_CTX_callback_ctrl () from /usr/lib/libssl.so.0.9.8<br>
#12 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8<br>
#13 0xb7cf36c0 in ?? () from /usr/lib/libcrypto.so.0.9.8<br>
#14 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8<br>
#15 0x00000096 in ?? ()<br>
#16 0x08140ab0 in ?? ()<br>
#17 0xb7c73439 in sk_insert () from /usr/lib/libcrypto.so.0.9.8<br>
#18 0x08158db8 in ?? ()<br>
#19 0x00000040 in ?? ()<br>
#20 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8<br>
#21 0x00000096 in ?? ()<br>
#22 0x08140ab0 in ?? ()<br>
---Type <return> to continue, or q <return> to quit---<br>
#23 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8<br>
#24 0x03000032 in ?? ()<br>
#25 0xb7cf36c0 in ?? () from /usr/lib/libcrypto.so.0.9.8<br>
#26 0x0000000e in ?? ()<br>
#27 0x00000002 in ?? ()<br>
#28 0x081684d9 in ?? ()<br>
#29 0xb7c73579 in sk_push () from /usr/lib/libcrypto.so.0.9.8<br>
#30 0xb7d38760 in ssl3_ciphers () from /usr/lib/libssl.so.0.9.8<br>
#31 0x00000007 in ?? ()<br>
#32 0xb7c7328b in sk_new_null () from /usr/lib/libcrypto.so.0.9.8<br>
#33 0xb7d2c090 in SSL_SESSION_get_id () from /usr/lib/libssl.so.0.9.8<br>
#34 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8<br>
#35 0xb7d282a3 in ssl_bytes_to_cipher_list () from
/usr/lib/libssl.so.0.9.8<br>
#36 0xb7d38760 in ssl3_ciphers () from /usr/lib/libssl.so.0.9.8<br>
#37 0x00000020 in ?? ()<br>
#38 0x000000e1 in ?? ()<br>
#39 0x00000064 in ?? ()<br>
#40 0x08158f0c in ?? ()<br>
#41 0x08140ab0 in ?? ()<br>
#42 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8<br>
#43 0x00000036 in ?? ()<br>
#44 0x081684ff in ?? ()<br>
#45 0x0815b220 in ?? ()<br>
---Type <return> to continue, or q <return> to quit---<br>
#46 0xb7d106a9 in ssl3_get_client_hello () from /usr/lib/libssl.so.0.9.8<br>
#47 0x081684c9 in ?? ()<br>
#48 0x00000036 in ?? ()<br>
#49 0xbffce244 in ?? ()<br>
#50 0x00004000 in ?? ()<br>
#51 0xbffce248 in ?? ()<br>
#52 0xbffce224 in ?? ()<br>
#53 0xb7c79007 in EVP_DigestInit_ex () from /usr/lib/libcrypto.so.0.9.8<br>
#54 0x00000000 in ?? ()<br>
</p>
Please let me know what could be the reason for this issue, and if there are any fixes arround please let me know. Its very urgent.<br><br>Hope to get a reply soon.<br><br>Thanks in advance.<br>-- Nikitha<br><br><div><span class="gmail_quote">
On 4/6/07, <b class="gmail_sendername">nikitha</b> <<a href="mailto:sumi.techno@gmail.com">sumi.techno@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi All,<br><br>I am running freeradius-1.1.1 for quite a long time. Never seen this kind of issue when few requests are sent to the radiusd.<br>The issue is when many requests are coming, then radiusd is crashing or going in an infinite loop and hogging for
99.9% of CPU. <br><br>Please find the debug logs below.<br>
<p>
</p><p><span>
</span>modcall[authorize]: module "preprocess" returns ok for request
1522<br>
radius_xlat:<span> </span>'anonymous'<br>
rlm_attr_rewrite: Added attribute Stripped-User-Name with value
'anonymous'<br>
<span> </span>modcall[authorize]: module
"copy_user_name" returns ok for request 1522<br>
radius_xlat:<span> </span>'^(.*[\/]+)'<br>
<br>
Program received signal SIGSEGV, Segmentation fault.<br>
0xb7df9693 in mallopt () from /lib/libc.so.6<br>
(gdb) where<br>
#0<span> </span>0xb7df9693 in mallopt () from
/lib/libc.so.6<br>
#1<span> </span>0xb7df877c in malloc () from
/lib/libc.so.6<br>
#2<span> </span>0xb7e2a329 in re_comp () from
/lib/libc.so.6<br>
#3<span> </span>0xb7e2a176 in re_comp () from
/lib/libc.so.6<br>
#4<span> </span>0xb7e29c4f in regcomp () from
/lib/libc.so.6<br>
#5<span> </span>0xb7b2e4d6 in do_attr_rewrite () from
/usr/lib/rlm_attr_rewrite-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a><br>
#6<span> </span>0xb7b2eb44 in attr_rewrite_authorize
()<br>
<span> </span>from /usr/lib/rlm_attr_rewrite-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a><br>
#7<span> </span>0x08055f26 in module_post_auth ()<br>
#8<span> </span>0x0805660d in modcall ()<br>
#9<span> </span>0x08055f9a in module_post_auth ()<br>
#10 0x0805609c in module_post_auth ()<br>
#11 0x08056565 in modcall ()<br>
#12 0x08055269 in find_module_instance ()<br>
#13 0x08055b8a in module_authorize ()<br>
#14 0x0804d7a1 in rad_authenticate ()<br>
#15 0x08059d52 in rad_respond ()<br>
#16 0x08059a22 in main ()<br>
</p>
<p>
</p><span style="color: rgb(255, 0, 0);">
and when i restarted the server the crash happened in eaptls module.<br><br></span>
<p>rad_recv: Access-Request packet from host
<a href="http://192.168.1.1:7988" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.1.1:7988</a>, id=114, length=319<br>
<span> </span>User-Name =
"anonymous"<br>
<span> </span>Called-Station-Id =
"00-15-70-23-03-00:wpa_psk"<br>
<span> </span>Calling-Station-Id =
"00-00-00-22-00-07"<br>
<span> </span>NAS-Port = 8<br>
<span> </span>NAS-Port-Type =
Wireless-802.11<br>
<span> </span>Framed-MTU = 1400<br>
<span> </span>Service-Type = Framed-User<br>
<span> </span><span> </span>NAS-IP-Address = <a href="http://192.168.1.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.1.1</a><br>
<span> </span>NAS-Identifier = "Wireless
Services"<br>
<span> </span>NAS-Port-Id =
"wpa_psk"<br>
<span> </span>Connect-Info = "CONNECT
54Mbps 802.11g"<br>
<span> </span>State =
0x72fe4ac90661f9590e32dcb0c7059d75<br>
<span> </span>EAP-Message =
0x0202007019800000006616030100610100005d030146161ab12118da21a43b116bb44c8bed120272f7b2796c3976e35bd114643a5c00003600390038003500160013000a00330032002f0007006600050004006300620061001500120009006500640060001400110008000600030100
<br>
<span> </span>Message-Authenticator =
0x9521947e080287f8034d050f25bc08ea<br>
<span> </span>Processing the authorize section of
radiusd.conf<br>
modcall: entering group authorize for request 2652<br>
<span> </span>modcall[authorize]: module
"preprocess" returns ok for request 2652<br>
radius_xlat:<span> </span>'anonymous'<br>
rlm_attr_rewrite: Added attribute Stripped-User-Name with value
'anonymous'<br>
<span> </span>modcall[authorize]: module
"copy_user_name" returns ok for request 2652<br>
radius_xlat:<span> </span>'^(.*[\/]+)'<br>
rlm_attr_rewrite: No match found for attribute Stripped-User-Name with value
'anonymous'<br>
<span> </span>modcall[authorize]: module "add_dollar_sign"
returns ok for request 2652<br>
<span> </span>modcall[authorize]: module
"etc_passwd" returns notfound for request 2652<br>
<span> </span>modcall[authorize]: module
"etc_group" returns notfound for request 2652<br>
<span> </span>modcall[authorize]: module
"chap" returns noop for request 2652<br>
<span> </span>modcall[authorize]: module
"mschap" returns noop for request 2652<br>
<span> </span>rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL<br>
<span> </span>rlm_realm: No such realm
"NULL"<br>
<span> </span>modcall[authorize]: module
"suffix_oblic" returns noop for request 2652<br>
<span> </span><span> </span>rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL<br>
<span> </span>rlm_realm: No such realm
"NULL"<br>
<span> </span>modcall[authorize]: module
"suffix_oblic_fs" returns noop for request 2652<br>
<span> </span>rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL<br>
<span> </span><span> </span>rlm_realm: No such realm
"NULL"<br>
<span> </span>modcall[authorize]: module
"prefix_oblic" returns noop for request 2652<br>
<span> </span>rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL<br>
<span> </span>rlm_realm: No such realm
"NULL"<br>
<span> </span>modcall[authorize]: module
"prefix_oblic_fs" returns noop for request 2652<br>
<span> </span>rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL<br>
<span> </span>rlm_realm: No such realm
"NULL"<br>
<span> </span>modcall[authorize]: module
"suffix_at" returns noop for request 2652<br>
<span> </span>rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL<br>
<span> </span>rlm_realm: No such realm
"NULL"<br>
<span> </span>modcall[authorize]: module
"prefix_at" returns noop for request 2652<br>
<span> </span>rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL<br>
<span> </span>rlm_realm: No such realm
"NULL"<br>
<span> </span>modcall[authorize]: module
"suffix_percent" returns noop for request 2652<br>
<span> </span>rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL<br>
<span> </span>rlm_realm: No such realm
"NULL"<br>
<span> </span>modcall[authorize]: module
"prefix_percent" returns noop for request 2652<br>
<span> </span>users: Matched entry anonymous at
line 5<br>
<span> </span>modcall[authorize]: module
"files" returns ok for request 2652<br>
<span> </span>rlm_eap: EAP packet type response id 2
length 112<br>
<span> </span>rlm_eap: No EAP Start, assuming it's an
on-going EAP conversation<br>
<span> </span>modcall[authorize]: module "eap"
returns updated for request 2652<br>
modcall: leaving group authorize (returns updated) for request 2652<br>
<span> </span>rad_check_password:<span> </span>Found Auth-Type EAP<br>
<span> </span>rad_check_password:<span> </span>Found Auth-Type EAP<br>
Warning:<span> </span>Found 2 auth-types on request
for user 'anonymous'<br>
auth: type "EAP"<br>
<span> </span>Processing the authenticate section of
radiusd.conf<br>
modcall: entering group authenticate for request 2652<br>
<span> </span>rlm_eap: Request found, released from
the list<br>
<span> </span>rlm_eap: EAP/peap<br>
<span> </span>rlm_eap: processing type peap<br>
<span> </span>rlm_eap_peap: Authenticate<br>
<span> </span>rlm_eap_tls: processing TLS<br>
rlm_eap_tls:<span> </span>Length Included<br>
<span> </span>eaptls_verify returned 11 <br>
<br>
Program received signal SIGSEGV, Segmentation fault.<br>
0xb7e86693 in mallopt () from /lib/libc.so.6<br>
(gdb) where<br>
#0<span> </span>0xb7e86693 in mallopt () from
/lib/libc.so.6<br>
#1<span> </span>0xb7e8577c in malloc () from
/lib/libc.so.6<br>
#2<span> </span>0xb7bd8023 in eaptls_extract () from
/usr/lib/libeap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a><br>
#3<span> </span>0xb7bd81fc in eaptls_process () from
/usr/lib/libeap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a><br>
#4<span> </span>0xb7bc510f in eappeap_authenticate ()
from /usr/lib/rlm_eap_peap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a><br>
#5<span> </span>0xb7bde4fe in eaptype_call () from
/usr/lib/rlm_eap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a><br>
#6<span> </span>0xb7bde9bb in eaptype_select () from
/usr/lib/rlm_eap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a><br>
#7<span> </span>0xb7bdda81 in eap_authenticate ()
from /usr/lib/rlm_eap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a><br>
#8<span> </span>0x08055f26 in module_post_auth
()<br>
#9<span> </span>0x0805660d in modcall ()<br>
#10 0x08055f9a in module_post_auth ()<br>
#11 0x0805609c in module_post_auth ()<br>
#12 0x08056565 in modcall ()<br>
#13 0x08055269 in find_module_instance ()<br>
#14 0x08055bb2 in module_authenticate ()<br>
#15 0x0804d43b in rad_check_password ()<br>
#16 0x0804d9ac in rad_authenticate ()<br>
#17 0x08059d52 in rad_respond ()<br>
#18 0x08059a22 in main ()<br>
<br>Please let me know the details about this issue. <br></p>Awaiting for your reply..<br><br>Thanks,<br><span class="sg">Nikitha<br><br><br>
</span></blockquote></div><br>