January 2017 - Freeradius-Users - lists.freeradius.org

Authorize based on Calling-Station-ID | Auth-type issue
by Koos Myburgh 25 Jan '17

25 Jan '17

Hi, I want to authorize subscribers based on calling-station-id, but I am not sure how to correctly set the auth-type. For this I have commented the pap and chap sections. Do I need to write unlang in the post-auth section for this? I have seen guys add the post-auth type to the authorize section but don't think this is right. Below is my debug where you will see it passed all checks for the subscriber but fails on auth-type: Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on proxy address * port 36949 Listening on proxy address :: port 60842 Ready to process requests (0) Received Access-Request Id 4 from 127.0.0.1:51165 to 127.0.0.1:1812 length 353 (0) Calling-Station-Id = "27842280395" (0) User-Name = "nouser" (0) NAS-IP-Address = 10.118.200.45 (0) NAS-Identifier = "GGPS02" (0) Called-Station-Id = "privateapn" (0) Service-Type = Framed-User (0) Framed-Protocol = GPRS-PDP-Context (0) NAS-Port-Type = Wireless-Other (0) 3GPP-IMSI = "655018500837935" (0) 3GPP-IMSI-MCC-MNC = "65501" (0) 3GPP-NSAPI = "5" (0) 3GPP-Charging-ID = 1952431649 (0) 3GPP-Charging-Characteristics = "0800" (0) 3GPP-SGSN-Address = 196.46.161.205 (0) 3GPP-GGSN-Address = 196.46.161.229 (0) 3GPP-RAT-Type = EUTRAN (0) 3GPP-IMEISV = "3581780428341713" (0) 3GPP-Location-Info = 0x8256f510501f56f510033fc30a (0) 3GPP-SGSN-MCC-MNC = "65501" (0) 3GPP-GGSN-MCC-MNC = "65501" (0) 3GPP-Selection-Mode = "0" (0) 3GPP-MS-Time-Zone = 0x8000 (0) 3GPP-GPRS-Negotiated-QoS-profile = "08-0406000F4240000F4240" (0) 3GPP-PDP-Type = 0 (0) 3GPP-Negotiated-DSCP = 0 (0) NAS-Port = 1441328 (0) User-Password = "nopassword" (0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default (0) authorize { (0) policy filter_username { (0) if (&User-Name) { (0) if (&User-Name) -> TRUE (0) if (&User-Name) { (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@[^@]*@/ ) { (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> FALSE (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (0) if (&User-Name =~ /\.$/) { (0) if (&User-Name =~ /\.$/) -> FALSE (0) if (&User-Name =~ /(a)\./) { (0) if (&User-Name =~ /(a)\./) -> FALSE (0) } # if (&User-Name) = notfound (0) } # policy filter_username = notfound (0) [preprocess] = ok (0) [chap] = noop (0) [files] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> nouser (0) sql: SQL-User-Name set to 'nouser' rlm_sql (sql): Reserved connection (0) (0) sql: EXPAND SELECT id, CallingStationId, attribute, value, op FROM radcheck WHERE CallingStationId = '%{Calling-Station-Id}' ORDER BY id (0) sql: --> SELECT id, CallingStationId, attribute, value, op FROM radcheck WHERE CallingStationId = '27842280395' ORDER BY id (0) sql: Executing select query: SELECT id, CallingStationId, attribute, value, op FROM radcheck WHERE CallingStationId = '27842280395' ORDER BY id (0) sql: User found in radcheck table (0) sql: Conditional check items matched, merging assignment check items (0) sql: Cleartext-Password := "testclear" (0) sql: EXPAND SELECT id, CallingStationId, attribute, value, op FROM radreply WHERE CallingStationId = '%{Calling-Station-Id}' ORDER BY id (0) sql: --> SELECT id, CallingStationId, attribute, value, op FROM radreply WHERE CallingStationId = '27842280395' ORDER BY id (0) sql: Executing select query: SELECT id, CallingStationId, attribute, value, op FROM radreply WHERE CallingStationId = '27842280395' ORDER BY id (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{Calling-Station-Id}' ORDER BY priority (0) sql: --> SELECT groupname FROM radusergroup WHERE username = '27842280395' ORDER BY priority (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = '27842280395' ORDER BY priority (0) sql: User found in the group table (0) sql: EXPAND SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id (0) sql: --> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'privateapn' ORDER BY id (0) sql: Executing select query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'privateapn' ORDER BY id (0) sql: Group "privateapn": Conditional check items matched (0) sql: Group "privateapn": Merging assignment check items (0) sql: Pool-Name := "main_pool" (0) sql: EXPAND SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id (0) sql: --> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'privateapn' ORDER BY id (0) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'privateapn' ORDER BY id (0) sql: Group "privateapn": Merging reply items (0) sql: Cisco-AVPair += "ip:dns-servers=41.215.234.106 41.223.34.154" (0) sql: Acct-Interim-Interval := 3600 (0) sql: Session-Timeout := 86400 rlm_sql (sql): Released connection (0) rlm_sql (sql): Need 5 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (5), 1 of 27 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.7.16-0ubuntu0.16.04.1, protocol version 10 (0) [sql] = ok (0) [expiration] = noop (0) [logintime] = noop (0) } # authorize = ok (0) WARNING: Please update your configuration, and remove 'Auth-Type = Local' (0) WARNING: Use the PAP or CHAP modules instead (0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default (0) Post-Auth-Type REJECT { (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND %{User-Name} (0) sql: --> nouser (0) sql: SQL-User-Name set to 'nouser' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate, callingstationid, framedipaddress) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S', '%{Calling-Station-ID}', '%{Framed-IP-Address}') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate, callingstationid, framedipaddress) VALUES ( 'nouser', 'nopassword', 'Access-Reject', '2017-01-20 14:14:47', '27842280395', '') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate, callingstationid, framedipaddress) VALUES ( 'nouser', 'nopassword', 'Access-Reject', '2017-01-20 14:14:47', '27842280395', '') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (1) (0) [sql] = ok (0) } # Post-Auth-Type REJECT = ok (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 4 from 127.0.0.1:1812 to 127.0.0.1:51165 length 83 (0) Cisco-AVPair = "ip:dns-servers=41.215.234.106 41.223.34.154" (0) Acct-Interim-Interval = 3600 (0) Session-Timeout = 86400 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 4 with timestamp +4 Ready to process requests (1) Received Status-Server Id 103 from 10.0.10.25:1814 to 10.0.10.28:1813 length 68 (1) Message-Authenticator = 0x48eb832592f3e4b940669596ed2799b6 (1) NAS-Identifier = "Status Check. Are you alive?" (1) Sent Accounting-Response Id 103 from 10.0.10.28:1813 to 10.0.10.25:1814 length 0 (1) Finished request Waking up in 4.9 seconds. (1) Cleaning up request packet ID 103 with timestamp +20 Ready to process requests (2) Received Status-Server Id 238 from 10.0.10.25:1814 to 10.0.10.28:1813 length 68 (2) Message-Authenticator = 0xed96d2625dbc44dce37c2fa22af10a1f (2) NAS-Identifier = "Status Check. Are you alive?" (2) Sent Accounting-Response Id 238 from 10.0.10.28:1813 to 10.0.10.25:1814 length 0 (2) Finished request Waking up in 4.9 seconds. (2) Cleaning up request packet ID 238 with timestamp +53 Ready to process requests (3) Received Status-Server Id 119 from 10.0.10.25:1814 to 10.0.10.28:1813 length 68 (3) Message-Authenticator = 0x920d1b597c9940cf8adcde1203614f21 (3) NAS-Identifier = "Status Check. Are you alive?" (3) Sent Accounting-Response Id 119 from 10.0.10.28:1813 to 10.0.10.25:1814 length 0 (3) Finished request Waking up in 4.9 seconds. (3) Cleaning up request packet ID 119 with timestamp +84 Ready to process requests (4) Received Accounting-Request Id 42 from 10.0.10.25:1814 to 10.0.10.28:1813 length 401 (4) NAS-IP-Address = 41.71.86.18 (4) NAS-Identifier = "tbepg1" (4) Called-Station-Id = "acme.rsaweb.mobi" (4) Framed-Protocol = GPRS-PDP-Context (4) Service-Type = Framed-User (4) NAS-Port-Type = Virtual (4) NAS-Port = 776299053 (4) Calling-Station-Id = "27827864678" (4) Acct-Status-Type = Interim-Update (4) Framed-IP-Address = 10.254.117.6 (4) Acct-Session-Id = "29D03603F0BF2FEC" (4) User-Name = "void" (4) Acct-Session-Time = 1145 (4) Acct-Input-Gigawords = 0 (4) Acct-Input-Octets = 2548 (4) Acct-Output-Gigawords = 0 (4) Acct-Output-Octets = 1340 (4) Acct-Input-Packets = 12 (4) Acct-Output-Packets = 18 (4) Event-Timestamp = "Jan 20 2017 14:16:47 SAST" (4) Acct-Authentic = RADIUS (4) Acct-Delay-Time = 0 (4) 3GPP-IMSI = "655103032261356" (4) 3GPP-Charging-ID = 4039061484 (4) 3GPP-PDP-Type = 0 (4) 3GPP-Charging-Gateway-Address = 0.0.0.0 (4) 3GPP-SGSN-Address = 41.208.54.246 (4) 3GPP-GGSN-Address = 41.208.54.3 (4) 3GPP-IMSI-MCC-MNC = "65510" (4) 3GPP-GGSN-MCC-MNC = "65510" (4) 3GPP-NSAPI = "6" (4) 3GPP-Selection-Mode = "0" (4) 3GPP-Charging-Characteristics = "0400" (4) 3GPP-SGSN-MCC-MNC = "65510" (4) 3GPP-IMEISV = "3592020767651207" (4) 3GPP-RAT-Type = UTRAN (4) 3GPP-Location-Info = 0x0156f5012b144a0d (4) 3GPP-MS-Time-Zone = 0x8000 (4) Proxy-State = 0x313739 (4) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default (4) preacct { (4) [preprocess] = ok (4) policy acct_unique { (4) update request { (4) Tmp-String-9 := "ai:" (4) } # update request = noop (4) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) { (4) EXPAND %{hex:&Class} (4) --> (4) EXPAND ^%{hex:&Tmp-String-9} (4) --> ^61693a (4) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE (4) else { (4) update request { (4) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}} (4) --> 6c48feca7d893fffd008865d6abc5548 (4) &Acct-Unique-Session-Id := 6c48feca7d893fffd008865d6abc5548 (4) } # update request = noop (4) } # else = noop (4) } # policy acct_unique = noop (4) suffix: Checking for suffix after "@" (4) suffix: No '@' in User-Name = "void", looking up realm NULL (4) suffix: No such realm "NULL" (4) [suffix] = noop (4) [files] = noop (4) } # preacct = ok (4) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default (4) accounting { (4) detail: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d (4) detail: --> /usr/local/var/log/radius/radacct/10.0.10.25/detail-20170120 (4) detail: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/10.0.10.25/detail-20170120 (4) detail: EXPAND %t (4) detail: --> Fri Jan 20 14:16:47 2017 (4) [detail] = ok (4) [unix] = noop rlm_sql (sql): Closing connection (2): Hit idle_timeout, was idle for 124 seconds rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): Closing connection (3): Hit idle_timeout, was idle for 124 seconds rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): Closing connection (4): Hit idle_timeout, was idle for 124 seconds rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): Closing connection (0): Hit idle_timeout, was idle for 120 seconds rlm_sql (sql): You probably need to lower "min" rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): Closing connection (5): Hit idle_timeout, was idle for 120 seconds rlm_sql (sql): You probably need to lower "min" rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): Closing connection (1): Hit idle_timeout, was idle for 120 seconds rlm_sql (sql): You probably need to lower "min" rlm_sql_mysql: Socket destructor called, closing socket rlm_sql (sql): 0 of 0 connections in use. You may need to increase "spare" rlm_sql (sql): Opening additional connection (6), 1 of 32 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.7.16-0ubuntu0.16.04.1, protocol version 10 rlm_sql (sql): Reserved connection (6) (4) sqlippool: EXPAND %{User-Name} (4) sqlippool: --> void (4) sqlippool: SQL-User-Name set to 'void' (4) sqlippool: EXPAND START TRANSACTION (4) sqlippool: --> START TRANSACTION (4) sqlippool: Executing query: START TRANSACTION (4) sqlippool: EXPAND UPDATE radippool SET expiry_time = NOW() + INTERVAL 86400 SECOND WHERE nasipaddress = '%{Nas-IP-Address}' AND pool_key = '%{Calling-Station-Id}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}' (4) sqlippool: --> UPDATE radippool SET expiry_time = NOW() + INTERVAL 86400 SECOND WHERE nasipaddress = '41.71.86.18' AND pool_key = '27827864678' AND username = 'void' AND callingstationid = '27827864678' AND framedipaddress = '10.254.117.6' (4) sqlippool: Executing query: UPDATE radippool SET expiry_time = NOW() + INTERVAL 86400 SECOND WHERE nasipaddress = '41.71.86.18' AND pool_key = '27827864678' AND username = 'void' AND callingstationid = '27827864678' AND framedipaddress = '10.254.117.6' rlm_sql_mysql: Rows matched: 1 Changed: 1 Warnings: 0 (4) sqlippool: EXPAND COMMIT (4) sqlippool: --> COMMIT (4) sqlippool: Executing query: COMMIT rlm_sql (sql): Released connection (6) rlm_sql (sql): Need 2 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (7), 1 of 31 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.7.16-0ubuntu0.16.04.1, protocol version 10 (4) [sqlippool] = ok (4) sql: EXPAND %{tolower:type.%{Acct-Status-Type}.query} (4) sql: --> type.interim-update.query (4) sql: Using query template 'query' rlm_sql (sql): Reserved connection (6) (4) sql: EXPAND %{User-Name} (4) sql: --> void (4) sql: SQL-User-Name set to 'void' (4) sql: EXPAND UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}' (4) sql: --> UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(1484914607), acctinterval = 1484914607 - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '10.254.117.6', acctsessiontime = 1145, acctinputoctets = '0' << 32 | '2548', acctoutputoctets = '0' << 32 | '1340' WHERE AcctUniqueId = '6c48feca7d893fffd008865d6abc5548' (4) sql: Executing query: UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(1484914607), acctinterval = 1484914607 - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '10.254.117.6', acctsessiontime = 1145, acctinputoctets = '0' << 32 | '2548', acctoutputoctets = '0' << 32 | '1340' WHERE AcctUniqueId = '6c48feca7d893fffd008865d6abc5548' rlm_sql_mysql: Rows matched: 1 Changed: 1 Warnings: 0 (4) sql: SQL query returned: success (4) sql: 1 record(s) updated rlm_sql (sql): Released connection (6) (4) [sql] = ok (4) [exec] = noop Thanks in advance! Regards Kind Regards Koos Myburgh Network Engineer RSAWEB Internet Services

2 4

FR 3.1 failed
by Chris Howley 25 Jan '17

25 Jan '17

Hi Alan, We started using FR 3.1 to provide a service this morning but unfortunately the software failed on a couple of occasions. Any advice or help in fixing this problem would be appreciated. I've include the debugger information from the last two failures. Thanks, Chris Howley FreeRADIUS Version 3.1.0-dead Copyright (C) 1999-2016 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT [root@XXXXXXXX radius]# cat gdb-radiusd-158316.log Reading symbols from /usr/sbin/radiusd...Reading symbols from /usr/lib/debug/usr/sbin/radiusd.debug...done. done. Attaching to program: /usr/sbin/radiusd, process 158316 Reading symbols from /usr/lib64/freeradius/libfreeradius-server.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-server.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-server.so Reading symbols from /usr/lib64/freeradius/libfreeradius-radius.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-radius.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-radius.so Reading symbols from /usr/lib64/freeradius/libfreeradius-eap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-eap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-eap.so Reading symbols from /lib64/libcrypto.so.10...Reading symbols from /lib64/libcrypto.so.10...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libcrypto.so.10 Reading symbols from /lib64/libssl.so.10...Reading symbols from /lib64/libssl.so.10...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libssl.so.10 Reading symbols from /lib64/libtalloc.so.2...Reading symbols from /lib64/libtalloc.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libtalloc.so.2 Reading symbols from /lib64/libpcre.so.1...Reading symbols from /lib64/libpcre.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libpcre.so.1 Reading symbols from /lib64/libcap.so.2...Reading symbols from /lib64/libcap.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libcap.so.2 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [New LWP 158650] [New LWP 158579] [New LWP 158578] [New LWP 158577] [New LWP 158575] [New LWP 158574] [New LWP 158573] [New LWP 158572] [New LWP 158571] [New LWP 158570] [New LWP 158569] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libreadline.so.6...Reading symbols from /lib64/libreadline.so.6...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libreadline.so.6 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/libpcap.so.1...Reading symbols from /lib64/libpcap.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libpcap.so.1 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libz.so.1...Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/libgssapi_krb5.so.2...Reading symbols from /lib64/libgssapi_krb5.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libgssapi_krb5.so.2 Reading symbols from /lib64/libkrb5.so.3...Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /lib64/libk5crypto.so.3...Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libk5crypto.so.3 Reading symbols from /lib64/libattr.so.1...Reading symbols from /lib64/libattr.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libattr.so.1 Reading symbols from /lib64/libtinfo.so.5...Reading symbols from /lib64/libtinfo.so.5...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libtinfo.so.5 Reading symbols from /lib64/libfreebl3.so...Reading symbols from /lib64/libfreebl3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libfreebl3.so Reading symbols from /lib64/libkrb5support.so.0...Reading symbols from /lib64/libkrb5support.so.0...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...Reading symbols from /lib64/libselinux.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/liblzma.so.5...Reading symbols from /lib64/liblzma.so.5...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/liblzma.so.5 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libnss_sss.so.2...Reading symbols from /lib64/libnss_sss.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libnss_sss.so.2 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /usr/lib64/freeradius/rlm_always.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_always.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_always.so Reading symbols from /usr/lib64/freeradius/rlm_attr_filter.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_attr_filter.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_attr_filter.so Reading symbols from /usr/lib64/freeradius/rlm_cache.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_cache.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_cache.so Reading symbols from /usr/lib64/freeradius/rlm_chap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_chap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_chap.so Reading symbols from /usr/lib64/freeradius/rlm_detail.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_detail.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_detail.so Reading symbols from /usr/lib64/freeradius/rlm_digest.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_digest.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_digest.so Reading symbols from /usr/lib64/freeradius/rlm_dynamic_clients.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_dynamic_clients.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_dynamic_clients.so Reading symbols from /usr/lib64/freeradius/rlm_eap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap.so Reading symbols from /usr/lib64/freeradius/rlm_eap_leap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_leap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_leap.so Reading symbols from /usr/lib64/freeradius/rlm_eap_gtc.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_gtc.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_gtc.so Reading symbols from /usr/lib64/freeradius/rlm_eap_tls.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_tls.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_tls.so Reading symbols from /usr/lib64/freeradius/rlm_eap_ttls.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_ttls.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_ttls.so Reading symbols from /usr/lib64/freeradius/rlm_eap_peap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_peap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_peap.so Reading symbols from /usr/lib64/freeradius/rlm_eap_mschapv2.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_mschapv2.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_mschapv2.so Reading symbols from /usr/lib64/freeradius/rlm_eap_md5.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_md5.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_md5.so Reading symbols from /usr/lib64/freeradius/rlm_exec.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_exec.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_exec.so Reading symbols from /usr/lib64/freeradius/rlm_expiration.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_expiration.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_expiration.so Reading symbols from /usr/lib64/freeradius/rlm_expr.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_expr.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_expr.so Reading symbols from /usr/lib64/freeradius/rlm_files.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_files.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_files.so Reading symbols from /usr/lib64/freeradius/rlm_linelog.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_linelog.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_linelog.so Reading symbols from /usr/lib64/freeradius/rlm_logintime.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_logintime.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_logintime.so Reading symbols from /usr/lib64/freeradius/rlm_pap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_pap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_pap.so Reading symbols from /usr/lib64/freeradius/rlm_passwd.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_passwd.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_passwd.so Reading symbols from /usr/lib64/freeradius/rlm_preprocess.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_preprocess.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_preprocess.so Reading symbols from /usr/lib64/freeradius/rlm_radutmp.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_radutmp.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_radutmp.so Reading symbols from /usr/lib64/freeradius/rlm_realm.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_realm.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_realm.so Reading symbols from /usr/lib64/freeradius/rlm_replicate.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_replicate.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_replicate.so Reading symbols from /usr/lib64/freeradius/rlm_soh.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_soh.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_soh.so Reading symbols from /usr/lib64/freeradius/rlm_unix.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_unix.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_unix.so Reading symbols from /usr/lib64/freeradius/rlm_unpack.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_unpack.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_unpack.so Reading symbols from /usr/lib64/freeradius/rlm_utf8.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_utf8.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_utf8.so Reading symbols from /usr/lib64/freeradius/rlm_mschap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_mschap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_mschap.so Reading symbols from /lib64/libwbclient.so.0...Missing separate debuginfo for /lib64/libwbclient.so.0 Try: yum --enablerepo='*debug*' install /usr/lib/debug/.build-id/8f/645121c015937c864a158d6cbd04759199cefb.debug Reading symbols from /lib64/libwbclient.so.0...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libwbclient.so.0 Reading symbols from /usr/lib64/samba/libwinbind-client-samba4.so...Reading symbols from /usr/lib64/samba/libwinbind-client-samba4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /usr/lib64/samba/libwinbind-client-samba4.so Reading symbols from /usr/lib64/samba/libreplace-samba4.so...Reading symbols from /usr/lib64/samba/libreplace-samba4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /usr/lib64/samba/libreplace-samba4.so Reading symbols from /usr/lib64/freeradius/rlm_ldap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_ldap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_ldap.so Reading symbols from /lib64/libldap-2.4.so.2...Reading symbols from /lib64/libldap-2.4.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libldap-2.4.so.2 Reading symbols from /lib64/liblber-2.4.so.2...Reading symbols from /lib64/liblber-2.4.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/liblber-2.4.so.2 Reading symbols from /lib64/libsasl2.so.3...Reading symbols from /lib64/libsasl2.so.3...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libsasl2.so.3 Reading symbols from /lib64/libssl3.so...Reading symbols from /lib64/libssl3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libssl3.so Reading symbols from /lib64/libsmime3.so...Reading symbols from /lib64/libsmime3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libsmime3.so Reading symbols from /lib64/libnss3.so...Reading symbols from /lib64/libnss3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libnss3.so Reading symbols from /lib64/libnssutil3.so...Reading symbols from /lib64/libnssutil3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libnssutil3.so Reading symbols from /lib64/libplds4.so...Reading symbols from /lib64/libplds4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libplds4.so Reading symbols from /lib64/libplc4.so...Reading symbols from /lib64/libplc4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libplc4.so Reading symbols from /lib64/libnspr4.so...Reading symbols from /lib64/libnspr4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libnspr4.so Reading symbols from /usr/lib64/freeradius/rlm_cache_rbtree.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_cache_rbtree.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_cache_rbtree.so Reading symbols from /lib64/libnss_dns.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_dns.so.2 0x00007f4386f8d413 in select () from /lib64/libc.so.6 No symbol table info available. No symbol table info available. Thread 12 (Thread 0x7f437d9ce700 (LWP 158569)): #0 0x00007f4386f5cb59 in waitpid () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f4386ee1092 in do_system () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f4386ee1441 in system () from /lib64/libc.so.6 No symbol table info available. #3 0x00007f4389022565 in fr_fault (sig=sig@entry=6) at src/lib/debug.c:734 disable = true cmd = "gdb -silent -x /etc/raddb/panic.gdb /usr/sbin/radiusd 158316 2>&1 | tee /var/log/radius/gdb-radiusd-158316.log", '\000' <repeats 421 times> out = 0x7f437d9ccd8a ".log" left = 426 ret = <optimized out> p = <optimized out> q = 0x0 code = <optimized out> #4 0x00007f438928c639 in rad_assert_fail ( file=file@entry=0x45d145 "src/main/state.c", line=line@entry=646, expr=expr@entry=0x45d343 "request->state_ctx") at src/main/util.c:468 No locals. #5 0x00000000004319b4 in fr_request_to_state (state=0x5a951d0, request=request@entry=0x5b94c40, original=<optimized out>, packet=0x5b94de0) at src/main/state.c:646 old = <optimized out> data = 0x0 #6 0x00000000004122dd in rad_authenticate (request=0x5b94c40) at src/main/auth.c:391 code = <optimized out> check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #7 0x000000000043efbb in proxy_running (request=0x5b94c40, action=FR_ACTION_RUN) at src/main/process.c:2709 vp = 0x7f435411b910 __FUNCTION__ = "proxy_running" #8 0x000000000043666c in request_handler_thread (arg=0x5a89be0) at src/main/threads.c:731 now = <optimized out> request = 0x5b94c40 thread = 0x5a89be0 #9 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #10 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 11 (Thread 0x7f437d1cd700 (LWP 158570)): #0 0x00007f43876ebf4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f43876e7d02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f43876e7c08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x5a951d0, request=request@entry=0x5b3cfc0, packet=0x5b3ccf0) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x5b3cfc0) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x5b3cfc0, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x5a89f10) at src/main/threads.c:731 now = <optimized out> request = 0x5b3cfc0 thread = 0x5a89f10 #7 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 10 (Thread 0x7f437c9cc700 (LWP 158571)): #0 0x00007f43876eb790 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x0000000000436538 in request_handler_thread (arg=0x5a8a240) at src/main/threads.c:625 now = <optimized out> request = <optimized out> thread = 0x5a8a240 #2 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 9 (Thread 0x7f437c1cb700 (LWP 158572)): #0 0x00007f43876ebf4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f43876e7d02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f43876e7c08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x5a951d0, request=request@entry=0x5feead0, packet=0x5fee830) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x5feead0) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x5feead0, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x5a8a570) at src/main/threads.c:731 now = <optimized out> request = 0x5feead0 thread = 0x5a8a570 #7 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 8 (Thread 0x7f437b9ca700 (LWP 158573)): #0 0x00007f43876eb790 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x0000000000436538 in request_handler_thread (arg=0x5a8a8a0) at src/main/threads.c:625 now = <optimized out> request = <optimized out> thread = 0x5a8a8a0 #2 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 7 (Thread 0x7f437b1c9700 (LWP 158574)): #0 0x00007f43876ebf4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f43876e7d02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f43876e7c08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x5a951d0, request=request@entry=0x5ffcf40, packet=0x5ffcc20) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x5ffcf40) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x5ffcf40, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x5a8abd0) at src/main/threads.c:731 now = <optimized out> request = 0x5ffcf40 thread = 0x5a8abd0 #7 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 6 (Thread 0x7f437a9c8700 (LWP 158575)): #0 0x00007f43876ebf4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f43876e7d02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f43876e7c08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000000000431729 in fr_request_to_state (state=0x5a951d0, request=0x5f69be0, original=0x5f69940, packet=0x5f69d80) at src/main/state.c:634 old = <optimized out> data = 0x7f436436d5a0 #4 0x0000000000412225 in rad_postauth (request=request@entry=0x5f69be0) at src/main/auth.c:332 result = 2 postauth_type = 3 vp = <optimized out> #5 0x000000000043e121 in request_finish (request=request@entry=0x5f69be0, action=action@entry=FR_ACTION_RUN) at src/main/process.c:1239 vp = <optimized out> #6 0x000000000043f935 in request_running (request=0x5f69be0, action=<optimized out>) at src/main/process.c:1484 ret = <optimized out> __FUNCTION__ = "request_running" #7 0x000000000043666c in request_handler_thread (arg=0x5a8af00) at src/main/threads.c:731 now = <optimized out> request = 0x5f69be0 thread = 0x5a8af00 #8 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #9 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 5 (Thread 0x7f437a1c7700 (LWP 158577)): #0 0x00007f43876ebf4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f43876e7d02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f43876e7c08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x5a951d0, request=request@entry=0x5bbac10, packet=0x5bba970) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x5bbac10) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x5bbac10, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x5a8b230) at src/main/threads.c:731 now = <optimized out> request = 0x5bbac10 thread = 0x5a8b230 #7 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 4 (Thread 0x7f43799c6700 (LWP 158578)): #0 0x00007f43876ebf4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f43876e7d02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f43876e7c08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x5a951d0, request=request@entry=0x5c2a050, packet=0x5c29d90) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x5c2a050) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x5c2a050, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x5a8b560) at src/main/threads.c:731 now = <optimized out> request = 0x5c2a050 thread = 0x5a8b560 #7 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 3 (Thread 0x7f43791c5700 (LWP 158579)): #0 0x00007f43876ebf4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f43876e7d02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f43876e7c08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x5a951d0, request=request@entry=0x5ab5420, packet=0x5ab5180) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x5ab5420) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x5ab5420, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x5a8b890) at src/main/threads.c:731 now = <optimized out> request = 0x5ab5420 thread = 0x5a8b890 #7 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 2 (Thread 0x7f43789c4700 (LWP 158650)): #0 0x00007f43876ebf4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f43876e7d02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f43876e7c08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000000000431729 in fr_request_to_state (state=0x5a951d0, request=0x5ab32f0, original=0x5ab3050, packet=0x5ab3490) at src/main/state.c:634 old = <optimized out> data = 0x7f43480f32c0 #4 0x0000000000412225 in rad_postauth (request=request@entry=0x5ab32f0) at src/main/auth.c:332 result = 2 postauth_type = 3 vp = <optimized out> #5 0x000000000043e121 in request_finish (request=request@entry=0x5ab32f0, action=action@entry=FR_ACTION_RUN) at src/main/process.c:1239 vp = <optimized out> #6 0x000000000043f935 in request_running (request=0x5ab32f0, action=<optimized out>) at src/main/process.c:1484 ret = <optimized out> __FUNCTION__ = "request_running" #7 0x000000000043666c in request_handler_thread (arg=0x7f435001fa40) at src/main/threads.c:731 now = <optimized out> request = 0x5ab32f0 thread = 0x7f435001fa40 #8 0x00007f43876e5dc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #9 0x00007f4386f95ced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 1 (Thread 0x7f43896b2040 (LWP 158316)): #0 0x00007f4386f8d413 in select () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f438904d136 in fr_event_loop (el=0x5a7fd30) at src/lib/event.c:595 i = <optimized out> rcode = <optimized out> when = {tv_sec = 0, tv_usec = 249} wake = 0x7fffc9cfcd90 maxfd = 80 read_fds = {fds_bits = {576355199187156992, 0 <repeats 15 times>}} master_fds = {fds_bits = {576355199187156992, 0 <repeats 15 times>}} #2 0x00000000004416d1 in radius_event_process () at src/main/process.c:5460 No locals. #3 0x000000000041156a in main (argc=<optimized out>, argv=0x7fffc9cfd038) at src/main/radiusd.c:586 rcode = 0 status = <optimized out> argval = <optimized out> display_version = false from_child = {6, 7} p = <optimized out> autofree = 0x2574090 A debugging session is active. Inferior 1 [process 158316] will be detached. Quit anyway? (y or n) [answered Y; input not from terminal] [root@XXXXXX radius]# cat gdb-radiusd-157037.log Reading symbols from /usr/sbin/radiusd...Reading symbols from /usr/lib/debug/usr/sbin/radiusd.debug...done. done. Attaching to program: /usr/sbin/radiusd, process 157037 Reading symbols from /usr/lib64/freeradius/libfreeradius-server.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-server.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-server.so Reading symbols from /usr/lib64/freeradius/libfreeradius-radius.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-radius.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-radius.so Reading symbols from /usr/lib64/freeradius/libfreeradius-eap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-eap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-eap.so Reading symbols from /lib64/libcrypto.so.10...Reading symbols from /lib64/libcrypto.so.10...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libcrypto.so.10 Reading symbols from /lib64/libssl.so.10...Reading symbols from /lib64/libssl.so.10...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libssl.so.10 Reading symbols from /lib64/libtalloc.so.2...Reading symbols from /lib64/libtalloc.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libtalloc.so.2 Reading symbols from /lib64/libpcre.so.1...Reading symbols from /lib64/libpcre.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libpcre.so.1 Reading symbols from /lib64/libcap.so.2...Reading symbols from /lib64/libcap.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libcap.so.2 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [New LWP 157054] [New LWP 157047] [New LWP 157046] [New LWP 157045] [New LWP 157044] [New LWP 157043] [New LWP 157042] [New LWP 157041] [New LWP 157040] [New LWP 157039] [New LWP 157038] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libreadline.so.6...Reading symbols from /lib64/libreadline.so.6...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libreadline.so.6 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/libpcap.so.1...Reading symbols from /lib64/libpcap.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libpcap.so.1 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libz.so.1...Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/libgssapi_krb5.so.2...Reading symbols from /lib64/libgssapi_krb5.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libgssapi_krb5.so.2 Reading symbols from /lib64/libkrb5.so.3...Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /lib64/libk5crypto.so.3...Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libk5crypto.so.3 Reading symbols from /lib64/libattr.so.1...Reading symbols from /lib64/libattr.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libattr.so.1 Reading symbols from /lib64/libtinfo.so.5...Reading symbols from /lib64/libtinfo.so.5...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libtinfo.so.5 Reading symbols from /lib64/libfreebl3.so...Reading symbols from /lib64/libfreebl3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libfreebl3.so Reading symbols from /lib64/libkrb5support.so.0...Reading symbols from /lib64/libkrb5support.so.0...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...Reading symbols from /lib64/libselinux.so.1...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/liblzma.so.5...Reading symbols from /lib64/liblzma.so.5...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/liblzma.so.5 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libnss_sss.so.2...Reading symbols from /lib64/libnss_sss.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libnss_sss.so.2 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /usr/lib64/freeradius/rlm_always.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_always.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_always.so Reading symbols from /usr/lib64/freeradius/rlm_attr_filter.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_attr_filter.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_attr_filter.so Reading symbols from /usr/lib64/freeradius/rlm_cache.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_cache.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_cache.so Reading symbols from /usr/lib64/freeradius/rlm_chap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_chap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_chap.so Reading symbols from /usr/lib64/freeradius/rlm_detail.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_detail.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_detail.so Reading symbols from /usr/lib64/freeradius/rlm_digest.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_digest.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_digest.so Reading symbols from /usr/lib64/freeradius/rlm_dynamic_clients.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_dynamic_clients.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_dynamic_clients.so Reading symbols from /usr/lib64/freeradius/rlm_eap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap.so Reading symbols from /usr/lib64/freeradius/rlm_eap_leap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_leap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_leap.so Reading symbols from /usr/lib64/freeradius/rlm_eap_gtc.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_gtc.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_gtc.so Reading symbols from /usr/lib64/freeradius/rlm_eap_tls.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_tls.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_tls.so Reading symbols from /usr/lib64/freeradius/rlm_eap_ttls.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_ttls.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_ttls.so Reading symbols from /usr/lib64/freeradius/rlm_eap_peap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_peap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_peap.so Reading symbols from /usr/lib64/freeradius/rlm_eap_mschapv2.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_mschapv2.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_mschapv2.so Reading symbols from /usr/lib64/freeradius/rlm_eap_md5.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_md5.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_md5.so Reading symbols from /usr/lib64/freeradius/rlm_exec.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_exec.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_exec.so Reading symbols from /usr/lib64/freeradius/rlm_expiration.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_expiration.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_expiration.so Reading symbols from /usr/lib64/freeradius/rlm_expr.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_expr.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_expr.so Reading symbols from /usr/lib64/freeradius/rlm_files.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_files.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_files.so Reading symbols from /usr/lib64/freeradius/rlm_linelog.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_linelog.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_linelog.so Reading symbols from /usr/lib64/freeradius/rlm_logintime.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_logintime.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_logintime.so Reading symbols from /usr/lib64/freeradius/rlm_pap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_pap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_pap.so Reading symbols from /usr/lib64/freeradius/rlm_passwd.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_passwd.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_passwd.so Reading symbols from /usr/lib64/freeradius/rlm_preprocess.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_preprocess.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_preprocess.so Reading symbols from /usr/lib64/freeradius/rlm_radutmp.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_radutmp.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_radutmp.so Reading symbols from /usr/lib64/freeradius/rlm_realm.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_realm.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_realm.so Reading symbols from /usr/lib64/freeradius/rlm_replicate.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_replicate.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_replicate.so Reading symbols from /usr/lib64/freeradius/rlm_soh.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_soh.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_soh.so Reading symbols from /usr/lib64/freeradius/rlm_unix.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_unix.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_unix.so Reading symbols from /usr/lib64/freeradius/rlm_unpack.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_unpack.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_unpack.so Reading symbols from /usr/lib64/freeradius/rlm_utf8.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_utf8.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_utf8.so Reading symbols from /usr/lib64/freeradius/rlm_mschap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_mschap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_mschap.so Reading symbols from /lib64/libwbclient.so.0...Missing separate debuginfo for /lib64/libwbclient.so.0 Try: yum --enablerepo='*debug*' install /usr/lib/debug/.build-id/8f/645121c015937c864a158d6cbd04759199cefb.debug Reading symbols from /lib64/libwbclient.so.0...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libwbclient.so.0 Reading symbols from /usr/lib64/samba/libwinbind-client-samba4.so...Reading symbols from /usr/lib64/samba/libwinbind-client-samba4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /usr/lib64/samba/libwinbind-client-samba4.so Reading symbols from /usr/lib64/samba/libreplace-samba4.so...Reading symbols from /usr/lib64/samba/libreplace-samba4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /usr/lib64/samba/libreplace-samba4.so Reading symbols from /usr/lib64/freeradius/rlm_ldap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_ldap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_ldap.so Reading symbols from /lib64/libldap-2.4.so.2...Reading symbols from /lib64/libldap-2.4.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libldap-2.4.so.2 Reading symbols from /lib64/liblber-2.4.so.2...Reading symbols from /lib64/liblber-2.4.so.2...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/liblber-2.4.so.2 Reading symbols from /lib64/libsasl2.so.3...Reading symbols from /lib64/libsasl2.so.3...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libsasl2.so.3 Reading symbols from /lib64/libssl3.so...Reading symbols from /lib64/libssl3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libssl3.so Reading symbols from /lib64/libsmime3.so...Reading symbols from /lib64/libsmime3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libsmime3.so Reading symbols from /lib64/libnss3.so...Reading symbols from /lib64/libnss3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libnss3.so Reading symbols from /lib64/libnssutil3.so...Reading symbols from /lib64/libnssutil3.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libnssutil3.so Reading symbols from /lib64/libplds4.so...Reading symbols from /lib64/libplds4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libplds4.so Reading symbols from /lib64/libplc4.so...Reading symbols from /lib64/libplc4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libplc4.so Reading symbols from /lib64/libnspr4.so...Reading symbols from /lib64/libnspr4.so...(no debugging symbols found)...done. (no debugging symbols found)...done. Loaded symbols for /lib64/libnspr4.so Reading symbols from /usr/lib64/freeradius/rlm_cache_rbtree.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_cache_rbtree.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_cache_rbtree.so Reading symbols from /lib64/libnss_dns.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_dns.so.2 0x00007f2e4ee92413 in select () from /lib64/libc.so.6 No symbol table info available. No symbol table info available. Thread 12 (Thread 0x7f2e458d3700 (LWP 157038)): #0 0x00007f2e4f5f0790 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x0000000000436538 in request_handler_thread (arg=0x4ac5000) at src/main/threads.c:625 now = <optimized out> request = <optimized out> thread = 0x4ac5000 #2 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 11 (Thread 0x7f2e450d2700 (LWP 157039)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x4ad05f0, request=request@entry=0x4c937d0, packet=0x4c93530) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x4c937d0) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x4c937d0, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x4ac5330) at src/main/threads.c:731 now = <optimized out> request = 0x4c937d0 thread = 0x4ac5330 #7 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 10 (Thread 0x7f2e448d1700 (LWP 157040)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000000000431729 in fr_request_to_state (state=0x4ad05f0, request=0x4f45d30, original=0x4f45a90, packet=0x4f45ed0) at src/main/state.c:634 old = <optimized out> data = 0x7f2e2855efc0 #4 0x0000000000412225 in rad_postauth (request=request@entry=0x4f45d30) at src/main/auth.c:332 result = 2 postauth_type = 3 vp = <optimized out> #5 0x000000000043e121 in request_finish (request=request@entry=0x4f45d30, action=action@entry=FR_ACTION_RUN) at src/main/process.c:1239 vp = <optimized out> #6 0x000000000043f935 in request_running (request=0x4f45d30, action=<optimized out>) at src/main/process.c:1484 ret = <optimized out> __FUNCTION__ = "request_running" #7 0x000000000043666c in request_handler_thread (arg=0x4ac5660) at src/main/threads.c:731 now = <optimized out> request = 0x4f45d30 thread = 0x4ac5660 #8 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #9 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 9 (Thread 0x7f2e440d0700 (LWP 157041)): #0 0x00007f2e4ee61b59 in waitpid () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f2e4ede6092 in do_system () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f2e4ede6441 in system () from /lib64/libc.so.6 No symbol table info available. #3 0x00007f2e50f27565 in fr_fault (sig=sig@entry=6) at src/lib/debug.c:734 disable = true cmd = "gdb -silent -x /etc/raddb/panic.gdb /usr/sbin/radiusd 157037 2>&1 | tee /var/log/radius/gdb-radiusd-157037.log", '\000' <repeats 421 times> out = 0x7f2e440ced8a ".log" left = 426 ret = <optimized out> p = <optimized out> q = 0x0 code = <optimized out> #4 0x00007f2e51191639 in rad_assert_fail ( file=file@entry=0x45d145 "src/main/state.c", line=line@entry=646, expr=expr@entry=0x45d343 "request->state_ctx") at src/main/util.c:468 No locals. #5 0x00000000004319b4 in fr_request_to_state (state=0x4ad05f0, request=request@entry=0x4d1d8e0, original=<optimized out>, packet=0x4d1da80) at src/main/state.c:646 old = <optimized out> data = 0x0 #6 0x00000000004122dd in rad_authenticate (request=0x4d1d8e0) at src/main/auth.c:391 code = <optimized out> check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #7 0x000000000043efbb in proxy_running (request=0x4d1d8e0, action=FR_ACTION_RUN) at src/main/process.c:2709 vp = 0x7f2e20309100 __FUNCTION__ = "proxy_running" #8 0x000000000043666c in request_handler_thread (arg=0x4ac5990) at src/main/threads.c:731 now = <optimized out> request = 0x4d1d8e0 thread = 0x4ac5990 #9 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #10 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 8 (Thread 0x7f2e438cf700 (LWP 157042)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000000000431729 in fr_request_to_state (state=0x4ad05f0, request=0x4dbf900, original=0x4dbf660, packet=0x4dbfaa0) at src/main/state.c:634 old = <optimized out> data = 0x7f2e240c6010 #4 0x0000000000412225 in rad_postauth (request=request@entry=0x4dbf900) at src/main/auth.c:332 result = 2 postauth_type = 3 vp = <optimized out> #5 0x000000000043e121 in request_finish (request=request@entry=0x4dbf900, action=action@entry=FR_ACTION_RUN) at src/main/process.c:1239 vp = <optimized out> #6 0x000000000043f935 in request_running (request=0x4dbf900, action=<optimized out>) at src/main/process.c:1484 ret = <optimized out> __FUNCTION__ = "request_running" #7 0x000000000043666c in request_handler_thread (arg=0x4ac5cc0) at src/main/threads.c:731 now = <optimized out> request = 0x4dbf900 thread = 0x4ac5cc0 #8 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #9 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 7 (Thread 0x7f2e430ce700 (LWP 157043)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x4ad05f0, request=request@entry=0x4f8f300, packet=0x4f8efe0) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x4f8f300) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x4f8f300, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x4ac5ff0) at src/main/threads.c:731 now = <optimized out> request = 0x4f8f300 thread = 0x4ac5ff0 #7 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 6 (Thread 0x7f2e428cd700 (LWP 157044)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x4ad05f0, request=request@entry=0x4a246b0, packet=0x4a24420) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x4a246b0) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x4a246b0, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x4ac6320) at src/main/threads.c:731 now = <optimized out> request = 0x4a246b0 thread = 0x4ac6320 #7 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 5 (Thread 0x7f2e420cc700 (LWP 157045)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000000000431729 in fr_request_to_state (state=0x4ad05f0, request=0x4cf6610, original=0x4cf6380, packet=0x4cf67b0) at src/main/state.c:634 old = <optimized out> data = 0x7f2e382eb0a0 #4 0x0000000000412225 in rad_postauth (request=request@entry=0x4cf6610) at src/main/auth.c:332 result = 2 postauth_type = 3 vp = <optimized out> #5 0x000000000043e121 in request_finish (request=request@entry=0x4cf6610, action=action@entry=FR_ACTION_RUN) at src/main/process.c:1239 vp = <optimized out> #6 0x000000000043f935 in request_running (request=0x4cf6610, action=<optimized out>) at src/main/process.c:1484 ret = <optimized out> __FUNCTION__ = "request_running" #7 0x000000000043666c in request_handler_thread (arg=0x4ac6650) at src/main/threads.c:731 now = <optimized out> request = 0x4cf6610 thread = 0x4ac6650 #8 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #9 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 4 (Thread 0x7f2e418cb700 (LWP 157046)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000000000431136 in fr_state_discard (state=0x4ad05f0, request=0x4d9ef00, original=0x4d9ed60) at src/main/state.c:530 entry = <optimized out> #4 0x00000000004121a2 in rad_postauth (request=request@entry=0x4d9ef00) at src/main/auth.c:335 result = 2 postauth_type = 0 vp = <optimized out> #5 0x000000000043e121 in request_finish (request=request@entry=0x4d9ef00, action=action@entry=FR_ACTION_RUN) at src/main/process.c:1239 vp = <optimized out> #6 0x000000000043f935 in request_running (request=0x4d9ef00, action=<optimized out>) at src/main/process.c:1484 ret = <optimized out> __FUNCTION__ = "request_running" #7 0x000000000043666c in request_handler_thread (arg=0x4ac6980) at src/main/threads.c:731 now = <optimized out> request = 0x4d9ef00 thread = 0x4ac6980 #8 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #9 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 3 (Thread 0x7f2e410ca700 (LWP 157047)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x4ad05f0, request=request@entry=0x4b5d030, packet=0x4b5cd60) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x4b5d030) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x4b5d030, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x4ac6cb0) at src/main/threads.c:731 now = <optimized out> request = 0x4b5d030 thread = 0x4ac6cb0 #7 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 2 (Thread 0x7f2e408c9700 (LWP 157054)): #0 0x00007f2e4f5f0f4d in __lll_lock_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x00007f2e4f5ecd02 in _L_lock_791 () from /lib64/libpthread.so.0 No symbol table info available. #2 0x00007f2e4f5ecc08 in pthread_mutex_lock () from /lib64/libpthread.so.0 No symbol table info available. #3 0x00000000004312da in fr_state_to_request (state=0x4ad05f0, request=request@entry=0x4bc18a0, packet=0x4bc15a0) at src/main/state.c:578 entry = <optimized out> old_ctx = 0x0 #4 0x00000000004126c6 in rad_authenticate (request=0x4bc18a0) at src/main/auth.c:429 check_item = <optimized out> module_msg = <optimized out> tmp = 0x0 result = <optimized out> autz_retry = 0 '\000' autz_type = 0 #5 0x000000000043f65b in request_running (request=0x4bc18a0, action=<optimized out>) at src/main/process.c:1455 ret = <optimized out> __FUNCTION__ = "request_running" #6 0x000000000043666c in request_handler_thread (arg=0x7f2e2c421c90) at src/main/threads.c:731 now = <optimized out> request = 0x4bc18a0 thread = 0x7f2e2c421c90 #7 0x00007f2e4f5eadc5 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #8 0x00007f2e4ee9aced in clone () from /lib64/libc.so.6 No symbol table info available. Thread 1 (Thread 0x7f2e515b7040 (LWP 157037)): #0 0x00007f2e4ee92413 in select () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f2e50f52136 in fr_event_loop (el=0x4abb150) at src/lib/event.c:595 i = <optimized out> rcode = <optimized out> when = {tv_sec = 0, tv_usec = 2561} wake = 0x7ffff72675c0 maxfd = 58 read_fds = {fds_bits = {576355199187156992, 0 <repeats 15 times>}} master_fds = {fds_bits = {576355199187156992, 0 <repeats 15 times>}} #2 0x00000000004416d1 in radius_event_process () at src/main/process.c:5460 No locals. #3 0x000000000041156a in main (argc=<optimized out>, argv=0x7ffff7267868) at src/main/radiusd.c:586 rcode = 0 status = <optimized out> argval = <optimized out> display_version = false from_child = {6, 7} p = <optimized out> autofree = 0x15af090 A debugging session is active. Inferior 1 [process 157037] will be detached. Quit anyway? (y or n) [answered Y; input not from terminal]

1 0

ATTRIBUTES POSITION
by Jose Quezada 23 Jan '17

23 Jan '17

Hello founders and community, I've got a question around my mind, and this is, How I could identifier or know What Attributes must be in a certain position? Attributes Check or Attributes Reply. Sorry for my bad spelling... Thanks for advances, Jose

2 1

Proposal for online users
by Haviaras Kostas 23 Jan '17

23 Jan '17

Hello, I would like somehow to count the online users inside the freeradius! It is better to create my own module or to modify the exist sql module???

3 2

Re: Proposal for online users
by Haviaras Kostas 23 Jan '17

23 Jan '17

>> On Jan 23, 2017, at 8:10 AM, Haviaras Kostas <[hidden email] <http://freeradius.1045715.n5.nabble.com/user/SendEmail.jtp?type=node&node=5…>> wrote: >> >> Thanks for your response, Alan DeKok, my point is that I want to have limit >> at the online users. When let's say the online users is 100, to reject >> every new request. > > My point is that the information you need is in the SQL database. Use an SQL SELECT >statements to count the number of online users, and then reject the new one if there's more than >100 online. > > FreeRADIUS does *not* provide you with a pre-packaged solution to every single thing you want >to do. It has solutions for most common cases (e.g. accounting in radacct). > > If you want a custom solution, you need to understand all of the pieces, and then design / build >the solution yourself. > > Alan DeKok. I totaly agree with you, I only want your advice based on your experience, is better to develop my own module or to modify the exist (sql).

2 1

Re: Proposal for online users
by Haviaras Kostas 23 Jan '17

23 Jan '17

Thanks for your response, Alan DeKok, my point is that I want to have limit at the online users. When let's say the online users is 100, to reject every new request.

3 2

Proposal for online users
by Haviaras Kostas 23 Jan '17

23 Jan '17

Thanks for your response Matthew Newton, but I found this on the freeradius list ( http://lists.freeradius.org/pipermail/freeradius-users/2013-February/065116…) and I would like to implement what the Alan DeKok.

2 1

Windows 8.1 Wi-Fi client handshake failure REVISITED
by ChoongHotmail Kim 22 Jan '17

22 Jan '17

Hello. I've been having issues with my Windows 8.1 laptop as well as my Windows 10 laptop when trying to connect to my FreeRADIUS server via EAP-TTLS. My FreeRADIUS server is running on an Asus RT-AC68U router and was installed and configured per the instructions on https://github.com/RMerl/asuswrt-merlin/wiki/Setting-up-FreeRadius2-through… . My problem is identical to the issue reported on http://lists.freeradius.org/pipermail/freeradius-users/2014-October/074177.… , and unfortunately, the thread ended without any resolution. I was hoping to find any advice with regards to resolving this particular use-case as I started as Mr. Rowe has by setting the "cipher-list" attribute to "ALL" as well as checking the installed status of my certificates. I am only having issues with the handshake when trying to connect with Windows 8.1 or Windows 10, but have none when connecting via Android. For reference, I've a sanitized version of the output for radius -XX when successfully connecting via my Android device. Thank you. admin@ROUTER:/tmp/mnt/sda2/entware-ng.arm/etc/freeradius2# radiusd -XX Sun Jan 22 08:39:20 2017 : Info: radiusd: FreeRADIUS Version 2.2.9, for host arm-openwrt-linux-gnu, built on Dec 26 2016 at 19:02:57 Sun Jan 22 08:39:20 2017 : Debug: Server was built with: Sun Jan 22 08:39:20 2017 : Debug: accounting Sun Jan 22 08:39:20 2017 : Debug: authentication Sun Jan 22 08:39:20 2017 : Debug: WITH_DHCP Sun Jan 22 08:39:20 2017 : Debug: WITH_VMPS Sun Jan 22 08:39:20 2017 : Debug: Server core libs: Sun Jan 22 08:39:20 2017 : Debug: ssl: OpenSSL 1.0.2j 26 Sep 2016 Sun Jan 22 08:39:20 2017 : Info: Copyright (C) 1999-2015 The FreeRADIUS server project and contributors. Sun Jan 22 08:39:20 2017 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Sun Jan 22 08:39:20 2017 : Info: PARTICULAR PURPOSE. Sun Jan 22 08:39:20 2017 : Info: You may redistribute copies of FreeRADIUS under the terms of the Sun Jan 22 08:39:20 2017 : Info: GNU General Public License. Sun Jan 22 08:39:20 2017 : Info: For more information about these matters, see the file named COPYRIGHT. Sun Jan 22 08:39:20 2017 : Info: Starting - reading configuration files ... Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/radiusd.conf Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/clients.conf Sun Jan 22 08:39:20 2017 : Debug: including files in directory /opt/etc/freeradius2/modules/ Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/modules/ldap Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/modules/pap Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/modules/mschap Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/modules/files Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/eap.conf Sun Jan 22 08:39:20 2017 : Debug: including files in directory /opt/etc/freeradius2/sites/ Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:20 2017 : Debug: including configuration file /opt/etc/freeradius2/sites/inner-tunnel Sun Jan 22 08:39:20 2017 : Debug: main { Sun Jan 22 08:39:20 2017 : Debug: allow_core_dumps = no Sun Jan 22 08:39:20 2017 : Debug: } Sun Jan 22 08:39:20 2017 : Debug: including dictionary file /opt/etc/freeradius2/dictionary Sun Jan 22 08:39:20 2017 : Debug: main { Sun Jan 22 08:39:20 2017 : Debug: name = "radiusd" Sun Jan 22 08:39:20 2017 : Debug: prefix = "/opt" Sun Jan 22 08:39:20 2017 : Debug: localstatedir = "/opt/var" Sun Jan 22 08:39:20 2017 : Debug: sbindir = "/opt/sbin" Sun Jan 22 08:39:20 2017 : Debug: logdir = "/opt/var/log" Sun Jan 22 08:39:20 2017 : Debug: run_dir = "/opt/var/run/radius" Sun Jan 22 08:39:20 2017 : Debug: libdir = "/opt/lib/freeradius2" Sun Jan 22 08:39:20 2017 : Debug: radacctdir = "/opt/var/db/radacct" Sun Jan 22 08:39:20 2017 : Debug: hostname_lookups = no Sun Jan 22 08:39:20 2017 : Debug: max_request_time = 15 Sun Jan 22 08:39:20 2017 : Debug: cleanup_delay = 7 Sun Jan 22 08:39:20 2017 : Debug: max_requests = 512 Sun Jan 22 08:39:20 2017 : Debug: pidfile = "/opt/var/run/radius/radiusd.pid" Sun Jan 22 08:39:20 2017 : Debug: checkrad = "/opt/sbin/checkrad" Sun Jan 22 08:39:20 2017 : Debug: debug_level = 0 Sun Jan 22 08:39:20 2017 : Debug: proxy_requests = no Sun Jan 22 08:39:20 2017 : Debug: log { Sun Jan 22 08:39:20 2017 : Debug: stripped_names = no Sun Jan 22 08:39:20 2017 : Debug: auth = no Sun Jan 22 08:39:20 2017 : Debug: auth_badpass = no Sun Jan 22 08:39:20 2017 : Debug: auth_goodpass = no Sun Jan 22 08:39:20 2017 : Debug: } Sun Jan 22 08:39:20 2017 : Debug: security { Sun Jan 22 08:39:20 2017 : Debug: max_attributes = 200 Sun Jan 22 08:39:20 2017 : Debug: reject_delay = 5 Sun Jan 22 08:39:20 2017 : Debug: status_server = no Sun Jan 22 08:39:20 2017 : Debug: } Sun Jan 22 08:39:20 2017 : Debug: } Sun Jan 22 08:39:20 2017 : Debug: radiusd: #### Loading Realms and Home Servers #### Sun Jan 22 08:39:20 2017 : Debug: radiusd: #### Loading Clients #### Sun Jan 22 08:39:20 2017 : Debug: client localhost { Sun Jan 22 08:39:20 2017 : Debug: ipaddr = 127.0.0.1 Sun Jan 22 08:39:20 2017 : Debug: require_message_authenticator = yes Sun Jan 22 08:39:20 2017 : Debug: secret = "*removed1*" Sun Jan 22 08:39:20 2017 : Debug: nastype = "other" Sun Jan 22 08:39:20 2017 : Debug: } Sun Jan 22 08:39:20 2017 : Debug: radiusd: #### Instantiating modules #### Sun Jan 22 08:39:20 2017 : Debug: radiusd: #### Loading Virtual Servers #### Sun Jan 22 08:39:20 2017 : Debug: server { # from file /opt/etc/freeradius2/radiusd.conf Sun Jan 22 08:39:20 2017 : Debug: modules { Sun Jan 22 08:39:20 2017 : Debug: Module: Checking authenticate {...} for more modules to load Sun Jan 22 08:39:20 2017 : Debug: (Loaded rlm_eap, checking if it's valid) Sun Jan 22 08:39:20 2017 : Debug: Module: Linked to module rlm_eap Sun Jan 22 08:39:20 2017 : Debug: Module: Instantiating module "eap" from file /opt/etc/freeradius2/eap.conf Sun Jan 22 08:39:20 2017 : Debug: eap { Sun Jan 22 08:39:20 2017 : Debug: default_eap_type = "ttls" Sun Jan 22 08:39:20 2017 : Debug: timer_expire = 60 Sun Jan 22 08:39:20 2017 : Debug: ignore_unknown_eap_types = no Sun Jan 22 08:39:20 2017 : Debug: cisco_accounting_username_bug = no Sun Jan 22 08:39:20 2017 : Debug: max_sessions = 4096 Sun Jan 22 08:39:20 2017 : Debug: } Sun Jan 22 08:39:20 2017 : Debug: Module: Linked to sub-module rlm_eap_tls Sun Jan 22 08:39:20 2017 : Debug: Module: Instantiating eap-tls Sun Jan 22 08:39:20 2017 : Debug: tls { Sun Jan 22 08:39:20 2017 : Debug: rsa_key_exchange = no Sun Jan 22 08:39:20 2017 : Debug: dh_key_exchange = yes Sun Jan 22 08:39:20 2017 : Debug: rsa_key_length = 512 Sun Jan 22 08:39:20 2017 : Debug: dh_key_length = 512 Sun Jan 22 08:39:20 2017 : Debug: verify_depth = 0 Sun Jan 22 08:39:20 2017 : Debug: pem_file_type = yes Sun Jan 22 08:39:20 2017 : Debug: private_key_file = "/opt/etc/freeradius2/certs/ec-server_key.pem" Sun Jan 22 08:39:20 2017 : Debug: certificate_file = "/opt/etc/freeradius2/certs/ec-server_cert.pem" Sun Jan 22 08:39:20 2017 : Debug: private_key_password = "*removed5*" Sun Jan 22 08:39:20 2017 : Debug: dh_file = "/opt/etc/freeradius2/certs/dh" Sun Jan 22 08:39:20 2017 : Debug: random_file = "/dev/urandom" Sun Jan 22 08:39:20 2017 : Debug: fragment_size = 1024 Sun Jan 22 08:39:20 2017 : Debug: include_length = yes Sun Jan 22 08:39:20 2017 : Debug: check_crl = no Sun Jan 22 08:39:20 2017 : Debug: check_all_crl = no Sun Jan 22 08:39:20 2017 : Debug: cipher_list = "ALL" Sun Jan 22 08:39:20 2017 : Debug: check_cert_issuer = "/C=US/ST=NY/L=New York/O=Admin/OU=IT/CN=cert/emailAddress=admin(a)admin.com" Sun Jan 22 08:39:20 2017 : Debug: ecdh_curve = "secp521r1" Sun Jan 22 08:39:20 2017 : Debug: } Sun Jan 22 08:39:21 2017 : Debug: Module: Linked to sub-module rlm_eap_ttls Sun Jan 22 08:39:21 2017 : Debug: Module: Instantiating eap-ttls Sun Jan 22 08:39:21 2017 : Debug: ttls { Sun Jan 22 08:39:21 2017 : Debug: default_eap_type = "md5" Sun Jan 22 08:39:21 2017 : Debug: copy_request_to_tunnel = no Sun Jan 22 08:39:21 2017 : Debug: use_tunneled_reply = yes Sun Jan 22 08:39:21 2017 : Debug: virtual_server = "inner-tunnel" Sun Jan 22 08:39:21 2017 : Debug: include_length = yes Sun Jan 22 08:39:21 2017 : Debug: } Sun Jan 22 08:39:21 2017 : Debug: Module: Checking authorize {...} for more modules to load Sun Jan 22 08:39:21 2017 : Debug: } # modules Sun Jan 22 08:39:21 2017 : Debug: } # server Sun Jan 22 08:39:21 2017 : Debug: server inner-tunnel { # from file /opt/etc/freeradius2/sites/inner-tunnel Sun Jan 22 08:39:21 2017 : Debug: modules { Sun Jan 22 08:39:21 2017 : Debug: Module: Checking authenticate {...} for more modules to load Sun Jan 22 08:39:21 2017 : Debug: (Loaded rlm_pap, checking if it's valid) Sun Jan 22 08:39:21 2017 : Debug: Module: Linked to module rlm_pap Sun Jan 22 08:39:21 2017 : Debug: Module: Instantiating module "pap" from file /opt/etc/freeradius2/modules/pap Sun Jan 22 08:39:21 2017 : Debug: pap { Sun Jan 22 08:39:21 2017 : Debug: encryption_scheme = "auto" Sun Jan 22 08:39:21 2017 : Debug: auto_header = yes Sun Jan 22 08:39:21 2017 : Debug: } Sun Jan 22 08:39:21 2017 : Debug: Module: Checking authorize {...} for more modules to load Sun Jan 22 08:39:21 2017 : Debug: (Loaded rlm_files, checking if it's valid) Sun Jan 22 08:39:21 2017 : Debug: Module: Linked to module rlm_files Sun Jan 22 08:39:21 2017 : Debug: Module: Instantiating module "files" from file /opt/etc/freeradius2/modules/files Sun Jan 22 08:39:21 2017 : Debug: files { Sun Jan 22 08:39:21 2017 : Debug: usersfile = "/opt/etc/freeradius2/users" Sun Jan 22 08:39:21 2017 : Debug: compat = "no" Sun Jan 22 08:39:21 2017 : Debug: } Sun Jan 22 08:39:21 2017 : Debug: reading pairlist file /opt/etc/freeradius2/users Sun Jan 22 08:39:21 2017 : Debug: } # modules Sun Jan 22 08:39:21 2017 : Debug: } # server Sun Jan 22 08:39:21 2017 : Debug: radiusd: #### Opening IP addresses and Ports #### Sun Jan 22 08:39:21 2017 : Debug: listen { Sun Jan 22 08:39:21 2017 : Debug: type = "auth" Sun Jan 22 08:39:21 2017 : Debug: ipaddr = 127.0.0.1 Sun Jan 22 08:39:21 2017 : Debug: port = 1812 Sun Jan 22 08:39:21 2017 : Debug: } Sun Jan 22 08:39:21 2017 : Debug: listen { Sun Jan 22 08:39:21 2017 : Debug: type = "auth" Sun Jan 22 08:39:21 2017 : Debug: ipaddr = 127.0.0.1 Sun Jan 22 08:39:21 2017 : Debug: port = 18120 Sun Jan 22 08:39:21 2017 : Debug: } Sun Jan 22 08:39:21 2017 : Debug: Listening on authentication address 127.0.0.1 port 1812 Sun Jan 22 08:39:21 2017 : Debug: Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Sun Jan 22 08:39:21 2017 : Info: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 37394, id=0, length=131 User-Name = "anonymous" NAS-IP-Address = 127.0.0.1 Called-Station-Id = "*removed2*" Calling-Station-Id = "*removed3*" NAS-Identifier = "*removed4*" NAS-Port = 109 Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0200000e01616e6f6e796d6f7573 Message-Authenticator = 0xdc4dde7c42159b142e2d300745db62e9 Sun Jan 22 08:39:35 2017 : Info: # Executing section authorize from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:35 2017 : Info: +group authorize { Sun Jan 22 08:39:35 2017 : Info: [eap] EAP packet type response id 0 length 14 Sun Jan 22 08:39:35 2017 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Sun Jan 22 08:39:35 2017 : Info: ++[eap] = updated Sun Jan 22 08:39:35 2017 : Info: +} # group authorize = updated Sun Jan 22 08:39:35 2017 : Info: Found Auth-Type = EAP Sun Jan 22 08:39:35 2017 : Info: # Executing group from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:35 2017 : Info: +group authenticate { Sun Jan 22 08:39:35 2017 : Info: [eap] EAP Identity Sun Jan 22 08:39:35 2017 : Info: [eap] processing type tls Sun Jan 22 08:39:35 2017 : Info: [tls] Initiate Sun Jan 22 08:39:35 2017 : Info: [tls] Start returned 1 Sun Jan 22 08:39:35 2017 : Info: ++[eap] = handled Sun Jan 22 08:39:35 2017 : Info: +} # group authenticate = handled Sending Access-Challenge of id 0 to 127.0.0.1 port 37394 EAP-Message = 0x010100061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x33ba028433bb1704dfebfff672d73f51 Sun Jan 22 08:39:35 2017 : Info: Finished request 0. Sun Jan 22 08:39:35 2017 : Debug: Going to the next request Sun Jan 22 08:39:35 2017 : Debug: Waking up in 6.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 37394, id=0, length=339 Sun Jan 22 08:39:35 2017 : Info: Cleaning up request 0 ID 0 with timestamp +14 User-Name = "anonymous" NAS-IP-Address = 127.0.0.1 Called-Station-Id = "*removed11*" Calling-Station-Id = "*removed12*" NAS-Identifier = "*removed13*" NAS-Port = 109 Framed-MTU = 1400 State = 0x33ba028433bb1704dfebfff672d73f51 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020100cc150016030100c1010000bd030158846fc7d8809f2085f98605d86439ecd041d6e190377d2be4e9a02cf3b2b980000054c014c00ac022c02100390038c00fc0050035c012c008c01cc01b00160013c00dc003000ac013c009c01fc01e00330032c00ec004002fc011c007c00cc002000500040015001200090014001100080006000300ff01000040000b000403000102000a00340032000e000d0019000b000c00180009000a00160017000800060007001400150004000500120013000100020003000f00100011 Message-Authenticator = 0xc06c7e7bb5daec74806b049ab8bb7d0c Sun Jan 22 08:39:35 2017 : Info: # Executing section authorize from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:35 2017 : Info: +group authorize { Sun Jan 22 08:39:35 2017 : Info: [eap] EAP packet type response id 1 length 204 Sun Jan 22 08:39:35 2017 : Info: [eap] Continuing tunnel setup. Sun Jan 22 08:39:35 2017 : Info: ++[eap] = ok Sun Jan 22 08:39:35 2017 : Info: +} # group authorize = ok Sun Jan 22 08:39:35 2017 : Info: Found Auth-Type = EAP Sun Jan 22 08:39:35 2017 : Info: # Executing group from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:35 2017 : Info: +group authenticate { Sun Jan 22 08:39:35 2017 : Info: [eap] Request found, released from the list Sun Jan 22 08:39:35 2017 : Info: [eap] EAP/ttls Sun Jan 22 08:39:35 2017 : Info: [eap] processing type ttls Sun Jan 22 08:39:35 2017 : Info: [ttls] Authenticate Sun Jan 22 08:39:35 2017 : Info: [ttls] processing EAP-TLS Sun Jan 22 08:39:35 2017 : Info: [ttls] eaptls_verify returned 7 Sun Jan 22 08:39:35 2017 : Info: [ttls] Done initial handshake Sun Jan 22 08:39:35 2017 : Info: [ttls] (other): before/accept initialization Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: before/accept initialization Sun Jan 22 08:39:35 2017 : Info: [ttls] <<< Unknown TLS version [length 0005] Sun Jan 22 08:39:35 2017 : Info: [ttls] <<< TLS 1.0 Handshake [length 00c1], ClientHello Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:35 2017 : Info: [ttls] >>> Unknown TLS version [length 0005] Sun Jan 22 08:39:35 2017 : Info: [ttls] >>> TLS 1.0 Handshake [length 0039], ServerHello Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:35 2017 : Info: [ttls] >>> Unknown TLS version [length 0005] Sun Jan 22 08:39:35 2017 : Info: [ttls] >>> TLS 1.0 Handshake [length 03f9], Certificate Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:35 2017 : Info: [ttls] >>> Unknown TLS version [length 0005] Sun Jan 22 08:39:35 2017 : Info: [ttls] >>> TLS 1.0 Handshake [length 0119], ServerKeyExchange Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:35 2017 : Info: [ttls] >>> Unknown TLS version [length 0005] Sun Jan 22 08:39:35 2017 : Info: [ttls] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: Need to read more data: unknown state Sun Jan 22 08:39:35 2017 : Info: [ttls] TLS_accept: Need to read more data: unknown state Sun Jan 22 08:39:35 2017 : Debug: In SSL Handshake Phase Sun Jan 22 08:39:35 2017 : Debug: In SSL Accept mode Sun Jan 22 08:39:35 2017 : Info: [ttls] eaptls_process returned 13 Sun Jan 22 08:39:35 2017 : Info: ++[eap] = handled Sun Jan 22 08:39:35 2017 : Info: +} # group authenticate = handled Sending Access-Challenge of id 0 to 127.0.0.1 port 37394 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x51e7b8b42411342af74b8946ba7723aa17017827f5dff7491d3d3cb8eadb6764a706c09164b601cde0acf797e686073fb6f651aa488356fa11a9ca62815eeee6f88cb1e3ebcadce6f8fd76c719c01b496edb17a382015b3082015730090603551d1304023000301106096086480186f8420101040403020640303306096086480186f842010d042616244f70656e53534c2047656e65726174656420536572766572204365727469666963617465301d0603551d0e04160414199f83c6183ee1343dd00a8cfedac804195db9f13081c00603551d230481b83081b58014956479ceb6825479147296a4672a7d22264c4b8da18191a4818e30818b310b30 EAP-Message = 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 EAP-Message = 0xeaa78fe101ded4031e55bc73 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x33ba028432b81704dfebfff672d73f51 Sun Jan 22 08:39:35 2017 : Info: Finished request 1. Sun Jan 22 08:39:35 2017 : Debug: Going to the next request Sun Jan 22 08:39:35 2017 : Debug: Waking up in 6.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 37394, id=0, length=141 Sun Jan 22 08:39:35 2017 : Info: Cleaning up request 1 ID 0 with timestamp +14 User-Name = "anonymous" NAS-IP-Address = 127.0.0.1 Called-Station-Id = "*removed13*" Calling-Station-Id = "*removed14*" NAS-Identifier = "*removed15*" NAS-Port = 109 Framed-MTU = 1400 State = 0x33ba028432b81704dfebfff672d73f51 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020200061500 Message-Authenticator = 0x134e376d22a73051434e5f01b9c6c362 Sun Jan 22 08:39:35 2017 : Info: # Executing section authorize from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:35 2017 : Info: +group authorize { Sun Jan 22 08:39:35 2017 : Info: [eap] EAP packet type response id 2 length 6 Sun Jan 22 08:39:35 2017 : Info: [eap] Continuing tunnel setup. Sun Jan 22 08:39:35 2017 : Info: ++[eap] = ok Sun Jan 22 08:39:35 2017 : Info: +} # group authorize = ok Sun Jan 22 08:39:35 2017 : Info: Found Auth-Type = EAP Sun Jan 22 08:39:35 2017 : Info: # Executing group from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:35 2017 : Info: +group authenticate { Sun Jan 22 08:39:35 2017 : Info: [eap] Request found, released from the list Sun Jan 22 08:39:35 2017 : Info: [eap] EAP/ttls Sun Jan 22 08:39:35 2017 : Info: [eap] processing type ttls Sun Jan 22 08:39:35 2017 : Info: [ttls] Authenticate Sun Jan 22 08:39:35 2017 : Info: [ttls] processing EAP-TLS Sun Jan 22 08:39:35 2017 : Info: [ttls] Received TLS ACK Sun Jan 22 08:39:35 2017 : Info: [ttls] ACK handshake fragment handler Sun Jan 22 08:39:35 2017 : Info: [ttls] eaptls_verify returned 1 Sun Jan 22 08:39:35 2017 : Info: [ttls] eaptls_process returned 13 Sun Jan 22 08:39:35 2017 : Info: ++[eap] = handled Sun Jan 22 08:39:35 2017 : Info: +} # group authenticate = handled Sending Access-Challenge of id 0 to 127.0.0.1 port 37394 EAP-Message = 0x0103017715800000056330db0242013b408b3f1975bfcee706ab640ce0885b4c97fbe652592ab4fc3969a27771b8d8b536d9a1260f6aabc6bd4922054078488670864589f983cabfedd44c880e69745516030101190c000115030019850401b77f49bc6b1797ee770a5424a59e4f3170a6ff87ebc887b1448c0696a842a67f82d2770554c6a5629b79a257f435bf671c39d6ec651cf3ab227bbb8a240134f62700f034bbf09939e9dc8bf1838c523ec3c1c650bcc0b9fb171a97be015ae9770ccd62cff839c34a1b83cbfdc1960d6a5068816aa03b8aa9f52a0c0fc430c60500e2db008a308187024200801453769b7e29283c35b4a00ad31fa9e1f90b EAP-Message = 0xc854ff2ea32d475dcab6ce05337b5886e52bc15349303acb7e905fa056f4e6c80afa7efbf8e53112a41fae0a92190241478c805797fc606c365d70e6c7a1f9f09826c325cfc93f387e1f4277741ff9a10df8f5122af7d4d8cf280f495406994e860930576409da5c5a6a0af976e46f400d16030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x33ba028431b91704dfebfff672d73f51 Sun Jan 22 08:39:35 2017 : Info: Finished request 2. Sun Jan 22 08:39:35 2017 : Debug: Going to the next request Sun Jan 22 08:39:35 2017 : Debug: Waking up in 6.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 37394, id=0, length=343 Sun Jan 22 08:39:36 2017 : Info: Cleaning up request 2 ID 0 with timestamp +14 User-Name = "anonymous" NAS-IP-Address = 127.0.0.1 Called-Station-Id = "*removed6*" Calling-Station-Id = "*removed7*" NAS-Identifier = "*removed8*" NAS-Port = 109 Framed-MTU = 1400 State = 0x33ba028431b91704dfebfff672d73f51 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020300d01500160301008a10000086850401f6a9402a58c058354414ef10493bb876a435d6ad1cd62954455bfe855111315a398f5c32d04070ee0942123275435dbf78c04683acf409a2bd1dd8580e5672a193018e8a832b15664fabe8e784b612dde5db6b8276b688111efc6efeafbbef1ec3a83e1e626d3be5a812826480b44e99b18f23cfff9172ff0be2e6a673139bb83389411403010001011603010030d8b1e1011f6b286e5ab9694d7117ba7df608ea60890450c8a8a171ee292fde0d3d19330ffbe9f7cf5ab6aab9b58600f7 Message-Authenticator = 0x9330962a55c7b0a352d20bfbfbbc4d41 Sun Jan 22 08:39:36 2017 : Info: # Executing section authorize from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:36 2017 : Info: +group authorize { Sun Jan 22 08:39:36 2017 : Info: [eap] EAP packet type response id 3 length 208 Sun Jan 22 08:39:36 2017 : Info: [eap] Continuing tunnel setup. Sun Jan 22 08:39:36 2017 : Info: ++[eap] = ok Sun Jan 22 08:39:36 2017 : Info: +} # group authorize = ok Sun Jan 22 08:39:36 2017 : Info: Found Auth-Type = EAP Sun Jan 22 08:39:36 2017 : Info: # Executing group from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:36 2017 : Info: +group authenticate { Sun Jan 22 08:39:36 2017 : Info: [eap] Request found, released from the list Sun Jan 22 08:39:36 2017 : Info: [eap] EAP/ttls Sun Jan 22 08:39:36 2017 : Info: [eap] processing type ttls Sun Jan 22 08:39:36 2017 : Info: [ttls] Authenticate Sun Jan 22 08:39:36 2017 : Info: [ttls] processing EAP-TLS Sun Jan 22 08:39:36 2017 : Info: [ttls] eaptls_verify returned 7 Sun Jan 22 08:39:36 2017 : Info: [ttls] Done initial handshake Sun Jan 22 08:39:36 2017 : Info: [ttls] <<< Unknown TLS version [length 0005] Sun Jan 22 08:39:36 2017 : Info: [ttls] <<< TLS 1.0 Handshake [length 008a], ClientKeyExchange Sun Jan 22 08:39:36 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:36 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:36 2017 : Info: [ttls] <<< Unknown TLS version [length 0005] Sun Jan 22 08:39:36 2017 : Info: [ttls] <<< TLS 1.0 ChangeCipherSpec [length 0001] Sun Jan 22 08:39:36 2017 : Info: [ttls] <<< Unknown TLS version [length 0005] Sun Jan 22 08:39:36 2017 : Info: [ttls] <<< TLS 1.0 Handshake [length 0010], Finished Sun Jan 22 08:39:36 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:36 2017 : Info: [ttls] >>> Unknown TLS version [length 0005] Sun Jan 22 08:39:36 2017 : Info: [ttls] >>> TLS 1.0 ChangeCipherSpec [length 0001] Sun Jan 22 08:39:36 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:36 2017 : Info: [ttls] >>> Unknown TLS version [length 0005] Sun Jan 22 08:39:36 2017 : Info: [ttls] >>> TLS 1.0 Handshake [length 0010], Finished Sun Jan 22 08:39:36 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:36 2017 : Info: [ttls] TLS_accept: unknown state Sun Jan 22 08:39:36 2017 : Info: [ttls] (other): SSL negotiation finished successfully Sun Jan 22 08:39:36 2017 : Debug: SSL Connection Established Sun Jan 22 08:39:36 2017 : Info: [ttls] eaptls_process returned 13 Sun Jan 22 08:39:36 2017 : Info: ++[eap] = handled Sun Jan 22 08:39:36 2017 : Info: +} # group authenticate = handled Sending Access-Challenge of id 0 to 127.0.0.1 port 37394 EAP-Message = 0x0104004515800000003b14030100010116030100306c5718901210a53f7cb47324d4f06c38c95221bb1bb1a4fd190d8cac2800704128557b41fd3e9172fb584c444cd4b65e Message-Authenticator = 0x00000000000000000000000000000000 State = 0x33ba028430be1704dfebfff672d73f51 Sun Jan 22 08:39:36 2017 : Info: Finished request 3. Sun Jan 22 08:39:36 2017 : Debug: Going to the next request Sun Jan 22 08:39:36 2017 : Debug: Waking up in 6.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 37394, id=0, length=247 Sun Jan 22 08:39:36 2017 : Info: Cleaning up request 3 ID 0 with timestamp +15 User-Name = "anonymous" NAS-IP-Address = 127.0.0.1 Called-Station-Id = "*removed9*" Calling-Station-Id = "*removed10*" NAS-Identifier = "*removed11*" NAS-Port = 109 Framed-MTU = 1400 State = 0x33ba028430be1704dfebfff672d73f51 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020400701500170301002056e79f700170cf200b740f59f5d1130bcb65f93e1ba1add723b477774adfe37f17030100400b3dfe771e2a0348c26660fea52c503a2cf1cf9d6e93b269505e756453bd5f7156ce08993cf213bb2da11488871a65233f6ccb8154984c43433caec786540593 Message-Authenticator = 0x8f418cc5f855ccc079daa09b41c9e087 Sun Jan 22 08:39:36 2017 : Info: # Executing section authorize from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:36 2017 : Info: +group authorize { Sun Jan 22 08:39:36 2017 : Info: [eap] EAP packet type response id 4 length 112 Sun Jan 22 08:39:36 2017 : Info: [eap] Continuing tunnel setup. Sun Jan 22 08:39:36 2017 : Info: ++[eap] = ok Sun Jan 22 08:39:36 2017 : Info: +} # group authorize = ok Sun Jan 22 08:39:36 2017 : Info: Found Auth-Type = EAP Sun Jan 22 08:39:36 2017 : Info: # Executing group from file /opt/etc/freeradius2/sites/default Sun Jan 22 08:39:36 2017 : Info: +group authenticate { Sun Jan 22 08:39:36 2017 : Info: [eap] Request found, released from the list Sun Jan 22 08:39:36 2017 : Info: [eap] EAP/ttls Sun Jan 22 08:39:36 2017 : Info: [eap] processing type ttls Sun Jan 22 08:39:36 2017 : Info: [ttls] Authenticate Sun Jan 22 08:39:36 2017 : Info: [ttls] processing EAP-TLS Sun Jan 22 08:39:36 2017 : Info: [ttls] eaptls_verify returned 7 Sun Jan 22 08:39:36 2017 : Info: [ttls] Done initial handshake Sun Jan 22 08:39:36 2017 : Info: [ttls] <<< Unknown TLS version [length 0005] Sun Jan 22 08:39:36 2017 : Info: [ttls] <<< Unknown TLS version [length 0005] Sun Jan 22 08:39:36 2017 : Info: [ttls] eaptls_process returned 7 Sun Jan 22 08:39:36 2017 : Info: [ttls] Session established. Proceeding to decode tunneled attributes. Sun Jan 22 08:39:36 2017 : Info: [ttls] Got tunneled request User-Name = "user" User-Password = "pass" FreeRADIUS-Proxied-To = 127.0.0.1 Sun Jan 22 08:39:36 2017 : Info: [ttls] Sending tunneled request User-Name = "user" User-Password = "pass" FreeRADIUS-Proxied-To = 127.0.0.1 server inner-tunnel { Sun Jan 22 08:39:36 2017 : Info: # Executing section authorize from file /opt/etc/freeradius2/sites/inner-tunnel Sun Jan 22 08:39:36 2017 : Info: +group authorize { Sun Jan 22 08:39:36 2017 : Info: [files] users: Matched entry user at line 7 Sun Jan 22 08:39:36 2017 : Info: ++[files] = ok Sun Jan 22 08:39:36 2017 : Info: ++[pap] = updated Sun Jan 22 08:39:36 2017 : Info: +} # group authorize = updated Sun Jan 22 08:39:36 2017 : Info: Found Auth-Type = PAP Sun Jan 22 08:39:36 2017 : Info: # Executing group from file /opt/etc/freeradius2/sites/inner-tunnel Sun Jan 22 08:39:36 2017 : Info: +group PAP { Sun Jan 22 08:39:36 2017 : Info: [pap] login attempt with password "pass" Sun Jan 22 08:39:36 2017 : Info: [pap] Using clear text password "pass" Sun Jan 22 08:39:36 2017 : Info: [pap] User authenticated successfully Sun Jan 22 08:39:36 2017 : Info: ++[pap] = ok Sun Jan 22 08:39:36 2017 : Info: +} # group PAP = ok Sun Jan 22 08:39:36 2017 : Info: WARNING: Empty post-auth section. Using default return values. } # server inner-tunnel Sun Jan 22 08:39:36 2017 : Info: [ttls] Got tunneled reply code Access-Accept Session-Timeout := 21600 Sun Jan 22 08:39:36 2017 : Info: [ttls] Got tunneled Access-Accept Sun Jan 22 08:39:36 2017 : Info: [eap] Freeing handler Sun Jan 22 08:39:36 2017 : Info: ++[eap] = ok Sun Jan 22 08:39:36 2017 : Info: +} # group authenticate = ok Sun Jan 22 08:39:36 2017 : Info: WARNING: Empty post-auth section. Using default return values. Sending Access-Accept of id 0 to 127.0.0.1 port 37394 Session-Timeout := 21600 MS-MPPE-Recv-Key = 0xe98f09cadffcf56264b1e1cd574e373caad532adab6b9fadcfc2e521c15bb667 MS-MPPE-Send-Key = 0xe427cd87c5f09f746b2e214b668fceac6bf0f86245916ec6062e146ac433beea EAP-Message = 0x03040004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "anonymous" Sun Jan 22 08:39:36 2017 : Info: Finished request 4. Sun Jan 22 08:39:36 2017 : Debug: Going to the next request Sun Jan 22 08:39:36 2017 : Debug: Waking up in 6.9 seconds. Sun Jan 22 08:39:43 2017 : Info: Cleaning up request 4 ID 0 with timestamp +15 Sun Jan 22 08:39:43 2017 : Info: Ready to process requests.

4 3

Script execute if all Proxies are dead
by Chris Taylor (chtaylo2) 21 Jan '17

21 Jan '17

We’re using freeradius-2.2.6-6.el6_7 to proxy inbound radius requests to home servers. proxy.conf home_server_pool primary_radius_auth { type = fail-over home_server = server1.fqdn.com home_server = server2.fqdn.com home_server = server3.fqdn.com home_server = server4.fqdn.com } Works great, until last night when we found all home servers were erroring in the log file. Jan 19 21:48:55 proxy-server radiusd[17073]: No response to status check 16506 for home server 00.00.00.01 port 1812 Jan 19 21:48:57 proxy-server radiusd[17073]: No response to status check 16509 for home server 00.00.00.02 port 1812 Jan 19 21:49:00 proxy-server radiusd[17073]: No response to status check 16510 for home server 00.00.00.03 port 1812 Jan 19 21:49:00 proxy-server radiusd[17073]: No response to status check 16510 for home server 00.00.00.04 port 1812 After this was noticed, we restarted the radiusd service on, and it fixed the issue. My question is, any suggestions on how we could kick a shell script if the status check determines all home servers are down at a given point? I’d like to have it restart the service, in an attempt to self-heal. Thanks Chris

3 4

using x mode to monitor and analyse users
by firing neurons 19 Jan '17

19 Jan '17

Hi, I am using freeradius 3 to auth our users. I keep a tab of freeradius in x mode to monitor live activity in the network. How do I interpret and feed this data to my script to automate actions in the network? FN

3 2