This may be a Fedora/Kerberos issue rather than a Freeradius issue, but...
Has anyone experienced "radiusd -X" segfaulting when using rlm_krb5?
This is under Fedora 7 (x86_64), with freeradius 1.1.6 and 2.0.0-pre1
built from source tarballs. (I am trying to migrate to this environment
from a working freeradius-1.1.0 / Fedora Core 2 / i686 installation.)
The segfault is actually occurring in the Kerberos libraries, which
means that Freeradius might not be the issue, however the segfault
occurs only when radiusd is given "-X" or "-sfxx" options. I.e.
"radiusd -sfx" and "radiusd" work as expected, and do not segfault.
(One thing off the top of my head: Does this point to something
possibly happening when debug_flag is >= 2 ?)
The killer request: radtest testuser testpass localhost 1 testing123
Below are my users and radiusd.conf files. Full gdb output from a
segfault case follows.
So, this isn't a bug report... i'm just hoping for tips on how to
proceed... thanks in advance for any clues.
-Matt
### begin complete users file ###
DEFAULT Auth-Type:=Kerberos
### end complete users file ###
### begin partial radiusd.conf ###
# stuff that was changed from the default 1.1.6 radiusd.conf :
prefix = /opt/radius
localstatedir = /var
user = radiusd
group = radiusd
log_auth = yes
proxy_requests = no
modules {
krb5 {
keytab = radius-krb5.keytab
service_principal = radius
}
}
authenticate {
Auth-Type Kerberos {
krb5
}
}
### end partial radiusd.conf ###
### begin gdb output ###
[root@kerberos1-new raddb]# gdb radiusd
GNU gdb Red Hat Linux (6.6-15.fc7rh)
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu"...
Using host libthread_db library "/lib64/libthread_db.so.1".
(gdb) run -X
Starting program: /usr/local/sbin/radiusd -X
[Thread debugging using libthread_db enabled]
[New Thread 46912517212928 (LWP 25560)]
Starting - reading configuration files ...
reread_config: reading radiusd.conf
Config: including file: /opt/radius/etc/raddb/clients.conf
Config: including file: /opt/radius/etc/raddb/snmp.conf
Config: including file: /opt/radius/etc/raddb/eap.conf
Config: including file: /opt/radius/etc/raddb/sql.conf
main: prefix = "/opt/radius"
main: localstatedir = "/var"
main: logdir = "/var/log/radius"
main: libdir = "/opt/radius/lib"
main: radacctdir = "/var/log/radius/radacct"
main: hostname_lookups = no
main: max_request_time = 30
main: cleanup_delay = 5
main: max_requests = 1024
main: delete_blocked_requests = 0
main: port = 0
main: allow_core_dumps = no
main: log_stripped_names = no
main: log_file = "/var/log/radius/radius.log"
main: log_auth = yes
main: log_auth_badpass = no
main: log_auth_goodpass = no
main: pidfile = "/var/run/radiusd/radiusd.pid"
main: user = "radiusd"
main: group = "radiusd"
main: usercollide = no
main: lower_user = "no"
main: lower_pass = "no"
main: nospace_user = "no"
main: nospace_pass = "no"
main: checkrad = "/opt/radius/sbin/checkrad"
main: proxy_requests = no
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files: reading dictionary
read_config_files: reading naslist
read_config_files: reading clients
read_config_files: reading realms
radiusd: entering modules setup
Module: Library search path is /opt/radius/lib
Module: Loaded exec
exec: wait = yes
exec: program = "(null)"
exec: input_pairs = "request"
exec: output_pairs = "(null)"
exec: packet_type = "(null)"
rlm_exec: Wait=yes but no output defined. Did you mean output=none?
Module: Instantiated exec (exec)
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded Kerberos
krb5: keytab = "radius-krb5.keytab"
krb5: service_principal = "radius"
rlm_krb5: krb5_init ok
Module: Instantiated krb5 (krb5)
Module: Loaded PAP
pap: encryption_scheme = "crypt"
pap: auto_header = yes
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = yes
mschap: require_encryption = no
mschap: require_strong = no
mschap: with_ntdomain_hack = no
mschap: passwd = "(null)"
mschap: ntlm_auth = "(null)"
Module: Instantiated mschap (mschap)
Module: Loaded System
unix: cache = no
unix: passwd = "(null)"
unix: shadow = "(null)"
unix: group = "(null)"
unix: radwtmp = "/var/log/radius/radwtmp"
unix: usegroup = no
unix: cache_reload = 600
Module: Instantiated unix (unix)
Module: Loaded preprocess
preprocess: huntgroups = "/opt/radius/etc/raddb/huntgroups"
preprocess: hints = "/opt/radius/etc/raddb/hints"
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
preprocess: with_alvarion_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded realm
realm: format = "suffix"
realm: delimiter = "@"
realm: ignore_default = no
realm: ignore_null = no
Module: Instantiated realm (suffix)
Module: Loaded files
files: usersfile = "/opt/radius/etc/raddb/users"
files: acctusersfile = "/opt/radius/etc/raddb/acct_users"
files: preproxy_usersfile = "/opt/radius/etc/raddb/preproxy_users"
files: compat = "no"
Module: Instantiated files (files)
Module: Loaded Acct-Unique-Session-Id
acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"
Module: Instantiated acct_unique (acct_unique)
Module: Loaded detail
detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d"
detail: detailperm = 384
detail: dirperm = 493
detail: locking = no
Module: Instantiated detail (detail)
Module: Loaded radutmp
radutmp: filename = "/var/log/radius/radutmp"
radutmp: username = "%{User-Name}"
radutmp: case_sensitive = yes
radutmp: check_with_nas = yes
radutmp: perm = 384
radutmp: callerid = yes
Module: Instantiated radutmp (radutmp)
Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1:32790, id=222, length=59
User-Name = "testuser"
User-Password = "testpass"
NAS-IP-Address = 255.255.255.255
NAS-Port = 1
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
modcall[authorize]: module "mschap" returns noop for request 0
rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 0
users: Matched entry DEFAULT at line 1
modcall[authorize]: module "files" returns ok for request 0
rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this.
modcall[authorize]: module "pap" returns noop for request 0
modcall: leaving group authorize (returns ok) for request 0
rad_check_password: Found Auth-Type Kerberos
auth: type "Kerberos"
Processing the authenticate section of radiusd.conf
modcall: entering group Kerberos for request 0
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 46912517212928 (LWP 25560)]
0x00002aaaac74be19 in krb5_get_init_creds (context=0x5555558a2120, creds=0x7fffb62f7a00, client=0x7fffb62f5470,
prompter=0x2aaaac767db0 <krb5_prompter_posix>, prompter_data=0x0, start_time=-1238412144,
in_tkt_service=0x5555558ab330 "krbtgt/NYSA.US(a)NYSA.US", options=0x5555558ab2b0,
gak_fct=0x2aaaac74db10 <krb5_get_as_key_password>, gak_data=0x7fffb62f5950, use_master=0x7fffb62f597c,
as_reply=0x7fff00000000) at get_in_tkt.c:1303
1303 *as_reply = local_as_reply;
(gdb) bt
#0 0x00002aaaac74be19 in krb5_get_init_creds (context=0x5555558a2120, creds=0x7fffb62f7a00,
client=0x7fffb62f5470, prompter=0x2aaaac767db0 <krb5_prompter_posix>, prompter_data=0x0,
start_time=-1238412144, in_tkt_service=0x5555558ab330 "krbtgt/NYSA.US(a)NYSA.US", options=0x5555558ab2b0,
gak_fct=0x2aaaac74db10 <krb5_get_as_key_password>, gak_data=0x7fffb62f5950, use_master=0x7fffb62f597c,
as_reply=0x7fff00000000) at get_in_tkt.c:1303
#1 0x00002aaaac74e0ec in krb5_get_in_tkt_with_password (context=0x5555558a2120, options=0, addrs=0x0,
ktypes=0x0, pre_auth_types=0x0, password=<value optimized out>, ccache=0x5555558a9ad0,
creds=0x7fffb62f7a00, ret_as_reply=0x7fff00000000) at gic_pwd.c:509
#2 0x00002aaaac4eb197 in krb5_auth (instance=0x55555589dbb0, request=<value optimized out>) at rlm_krb5.c:305
#3 0x0000555555563462 in modcall (component=0, c=0x5555558a27b0, request=0x5555558aa680) at modcall.c:236
#4 0x0000555555563a51 in call_one (component=0, p=0x7fffb62f5460, request=0x7fff00000000,
priority=0x5555558ab0d0, result=0x5555558ab0e0) at modcall.c:269
#5 0x000055555556362c in modcall (component=0, c=0x55555589dbd0, request=0x5555558aa680) at modcall.c:324
#6 0x000055555555b563 in rad_check_password (request=0x5555558aa680) at auth.c:380
#7 0x000055555555ba8a in rad_authenticate (request=0x5555558aa680) at auth.c:675
#8 0x00005555555649da in rad_respond (request=0x5555558aa680, fun=0x55555555b810 <rad_authenticate>)
at radiusd.c:1669
#9 0x0000555555565fd6 in main (argc=<value optimized out>, argv=<value optimized out>) at radiusd.c:1434
(gdb) display local_as_reply
1: local_as_reply = (krb5_kdc_rep *) 0x5555558ab860
(gdb) display *local_as_reply
2: *local_as_reply = {magic = -1760647403, msg_type = 11, padata = 0x5555558ab900, client = 0x5555558ab920,
ticket = 0x5555558ab9b0, enc_part = {magic = -1760647418, enctype = 16, kvno = 0, ciphertext = {magic = 0,
length = 220, data = 0x5555558abb80 "▒\214ݰ\207\206\v▒}ܯ/"}}, enc_part2 = 0x5555558ab540}
(gdb) display as_reply
3: as_reply = (krb5_kdc_rep **) 0x7fff00000000
(gdb) display *as_reply
Disabling display 4 to avoid infinite recursion.
4: *as_reply = (krb5_kdc_rep *) Cannot access memory at address 0x7fff00000000
(gdb) quit
The program is running. Exit anyway? (y or n) y
[root@kerberos1-new raddb]#
### end ####
