Hi All,<br><br>I am running freeradius-1.1.1 for quite a long time. Never seen this kind of issue when few requests are sent to the radiusd.<br>The issue is when many requests are coming, then radiusd is crashing or going in an infinite loop and hogging for
99.9% of CPU. <br><br>Please find the debug logs below.<br>
<p class="MsoPlainText">
</p><p class="MsoPlainText"><span style="">
</span>modcall[authorize]: module "preprocess" returns ok for request
1522<br>
radius_xlat:<span style=""> </span>'anonymous'<br>
rlm_attr_rewrite: Added attribute Stripped-User-Name with value
'anonymous'<br>
<span style=""> </span>modcall[authorize]: module
"copy_user_name" returns ok for request 1522<br>
radius_xlat:<span style=""> </span>'^(.*[\/]+)'<br>
<br>
Program received signal SIGSEGV, Segmentation fault.<br>
0xb7df9693 in mallopt () from /lib/libc.so.6<br>
(gdb) where<br>
#0<span style=""> </span>0xb7df9693 in mallopt () from
/lib/libc.so.6<br>
#1<span style=""> </span>0xb7df877c in malloc () from
/lib/libc.so.6<br>
#2<span style=""> </span>0xb7e2a329 in re_comp () from
/lib/libc.so.6<br>
#3<span style=""> </span>0xb7e2a176 in re_comp () from
/lib/libc.so.6<br>
#4<span style=""> </span>0xb7e29c4f in regcomp () from
/lib/libc.so.6<br>
#5<span style=""> </span>0xb7b2e4d6 in do_attr_rewrite () from
/usr/lib/rlm_attr_rewrite-<a href="http://1.1.1.so">1.1.1.so</a><br>
#6<span style=""> </span>0xb7b2eb44 in attr_rewrite_authorize
()<br>
<span style=""> </span>from /usr/lib/rlm_attr_rewrite-<a href="http://1.1.1.so">1.1.1.so</a><br>
#7<span style=""> </span>0x08055f26 in module_post_auth ()<br>
#8<span style=""> </span>0x0805660d in modcall ()<br>
#9<span style=""> </span>0x08055f9a in module_post_auth ()<br>
#10 0x0805609c in module_post_auth ()<br>
#11 0x08056565 in modcall ()<br>
#12 0x08055269 in find_module_instance ()<br>
#13 0x08055b8a in module_authorize ()<br>
#14 0x0804d7a1 in rad_authenticate ()<br>
#15 0x08059d52 in rad_respond ()<br>
#16 0x08059a22 in main ()<br>
</p>
<p class="MsoPlainText">
</p><span style="color: rgb(255, 0, 0);">
and when i restarted the server the crash happened in eaptls module.<br><br></span>
<p class="MsoPlainText">rad_recv: Access-Request packet from host
<a href="http://192.168.1.1:7988">192.168.1.1:7988</a>, id=114, length=319<br>
<span style=""> </span>User-Name =
"anonymous"<br>
<span style=""> </span>Called-Station-Id =
"00-15-70-23-03-00:wpa_psk"<br>
<span style=""> </span>Calling-Station-Id =
"00-00-00-22-00-07"<br>
<span style=""> </span>NAS-Port = 8<br>
<span style=""> </span>NAS-Port-Type =
Wireless-802.11<br>
<span style=""> </span>Framed-MTU = 1400<br>
<span style=""> </span>Service-Type = Framed-User<br>
<span style=""> </span><span style=""> </span>NAS-IP-Address = <a href="http://192.168.1.1">192.168.1.1</a><br>
<span style=""> </span>NAS-Identifier = "Wireless
Services"<br>
<span style=""> </span>NAS-Port-Id =
"wpa_psk"<br>
<span style=""> </span>Connect-Info = "CONNECT
54Mbps 802.11g"<br>
<span style=""> </span>State =
0x72fe4ac90661f9590e32dcb0c7059d75<br>
<span style=""> </span>EAP-Message =
0x0202007019800000006616030100610100005d030146161ab12118da21a43b116bb44c8bed120272f7b2796c3976e35bd114643a5c00003600390038003500160013000a00330032002f0007006600050004006300620061001500120009006500640060001400110008000600030100
<br>
<span style=""> </span>Message-Authenticator =
0x9521947e080287f8034d050f25bc08ea<br>
<span style=""> </span>Processing the authorize section of
radiusd.conf<br>
modcall: entering group authorize for request 2652<br>
<span style=""> </span>modcall[authorize]: module
"preprocess" returns ok for request 2652<br>
radius_xlat:<span style=""> </span>'anonymous'<br>
rlm_attr_rewrite: Added attribute Stripped-User-Name with value
'anonymous'<br>
<span style=""> </span>modcall[authorize]: module
"copy_user_name" returns ok for request 2652<br>
radius_xlat:<span style=""> </span>'^(.*[\/]+)'<br>
rlm_attr_rewrite: No match found for attribute Stripped-User-Name with value
'anonymous'<br>
<span style=""> </span>modcall[authorize]: module "add_dollar_sign"
returns ok for request 2652<br>
<span style=""> </span>modcall[authorize]: module
"etc_passwd" returns notfound for request 2652<br>
<span style=""> </span>modcall[authorize]: module
"etc_group" returns notfound for request 2652<br>
<span style=""> </span>modcall[authorize]: module
"chap" returns noop for request 2652<br>
<span style=""> </span>modcall[authorize]: module
"mschap" returns noop for request 2652<br>
<span style=""> </span>rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"suffix_oblic" returns noop for request 2652<br>
<span style=""> </span><span style=""> </span>rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"suffix_oblic_fs" returns noop for request 2652<br>
<span style=""> </span>rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span><span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"prefix_oblic" returns noop for request 2652<br>
<span style=""> </span>rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"prefix_oblic_fs" returns noop for request 2652<br>
<span style=""> </span>rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"suffix_at" returns noop for request 2652<br>
<span style=""> </span>rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"prefix_at" returns noop for request 2652<br>
<span style=""> </span>rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"suffix_percent" returns noop for request 2652<br>
<span style=""> </span>rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL<br>
<span style=""> </span>rlm_realm: No such realm
"NULL"<br>
<span style=""> </span>modcall[authorize]: module
"prefix_percent" returns noop for request 2652<br>
<span style=""> </span>users: Matched entry anonymous at
line 5<br>
<span style=""> </span>modcall[authorize]: module
"files" returns ok for request 2652<br>
<span style=""> </span>rlm_eap: EAP packet type response id 2
length 112<br>
<span style=""> </span>rlm_eap: No EAP Start, assuming it's an
on-going EAP conversation<br>
<span style=""> </span>modcall[authorize]: module "eap"
returns updated for request 2652<br>
modcall: leaving group authorize (returns updated) for request 2652<br>
<span style=""> </span>rad_check_password:<span style=""> </span>Found Auth-Type EAP<br>
<span style=""> </span>rad_check_password:<span style=""> </span>Found Auth-Type EAP<br>
Warning:<span style=""> </span>Found 2 auth-types on request
for user 'anonymous'<br>
auth: type "EAP"<br>
<span style=""> </span>Processing the authenticate section of
radiusd.conf<br>
modcall: entering group authenticate for request 2652<br>
<span style=""> </span>rlm_eap: Request found, released from
the list<br>
<span style=""> </span>rlm_eap: EAP/peap<br>
<span style=""> </span>rlm_eap: processing type peap<br>
<span style=""> </span>rlm_eap_peap: Authenticate<br>
<span style=""> </span>rlm_eap_tls: processing TLS<br>
rlm_eap_tls:<span style=""> </span>Length Included<br>
<span style=""> </span>eaptls_verify returned 11 <br>
<br>
Program received signal SIGSEGV, Segmentation fault.<br>
0xb7e86693 in mallopt () from /lib/libc.so.6<br>
(gdb) where<br>
#0<span style=""> </span>0xb7e86693 in mallopt () from
/lib/libc.so.6<br>
#1<span style=""> </span>0xb7e8577c in malloc () from
/lib/libc.so.6<br>
#2<span style=""> </span>0xb7bd8023 in eaptls_extract () from
/usr/lib/libeap-<a href="http://1.1.1.so">1.1.1.so</a><br>
#3<span style=""> </span>0xb7bd81fc in eaptls_process () from
/usr/lib/libeap-<a href="http://1.1.1.so">1.1.1.so</a><br>
#4<span style=""> </span>0xb7bc510f in eappeap_authenticate ()
from /usr/lib/rlm_eap_peap-<a href="http://1.1.1.so">1.1.1.so</a><br>
#5<span style=""> </span>0xb7bde4fe in eaptype_call () from
/usr/lib/rlm_eap-<a href="http://1.1.1.so">1.1.1.so</a><br>
#6<span style=""> </span>0xb7bde9bb in eaptype_select () from
/usr/lib/rlm_eap-<a href="http://1.1.1.so">1.1.1.so</a><br>
#7<span style=""> </span>0xb7bdda81 in eap_authenticate ()
from /usr/lib/rlm_eap-<a href="http://1.1.1.so">1.1.1.so</a><br>
#8<span style=""> </span>0x08055f26 in module_post_auth
()<br>
#9<span style=""> </span>0x0805660d in modcall ()<br>
#10 0x08055f9a in module_post_auth ()<br>
#11 0x0805609c in module_post_auth ()<br>
#12 0x08056565 in modcall ()<br>
#13 0x08055269 in find_module_instance ()<br>
#14 0x08055bb2 in module_authenticate ()<br>
#15 0x0804d43b in rad_check_password ()<br>
#16 0x0804d9ac in rad_authenticate ()<br>
#17 0x08059d52 in rad_respond ()<br>
#18 0x08059a22 in main ()<br>
<br>Please let me know the details about this issue. <br></p>Awaiting for your reply..<br><br>Thanks,<br>Nikitha<br><br><br>