June 2019 - Freeradius-Users - lists.freeradius.org

mschap - rlm_sql + winbind
by Eugene M. Zheganin 05 Jun '19

05 Jun '19

Hello, I have set up the rlm_sql module, and it authenticates/authorises users just fine, until it comes to mschap the thing is, I have mschap pointed to winbind and then to the samba AD domain - so in fails when user is not found in the AD (and SQL users clearly aren't). In the same time I had the experience of using mschap with rlm_sql but without winbind and then it works fine too. So, can I have like BOTH rlm_sql and winbind to authenticate users ? Preferably rlm_sql should come first. I've read the unlang mschap along with comments, but it's not clear to me how do I do this. Thanks. Eugene.

2 1

Unexpected !! Radacct session
by Srijan 05 Jun '19

05 Jun '19

2 2

Compiling / installing with MariaDB rather than MySQL
by Matthew McTague 04 Jun '19

04 Jun '19

Hi all, I've tried compiling with MariaDB rather than MySQL, and couldn't due to missing libmysqlclient. I then decided to give up on compiling from source, and try installing from CentOS' default repo. This failed due to the MySQL driver not existing at its correct path; /usr/lib64/freeradius/rlm_sql_mysql.so. I then tried installing from the NetworkRADIUS repo, which also resulted in the MySQL driver not existing at its correct path; /usr/lib64/freeradius/rlm_sql_mysql.so. Any assistance would be appreciated. Debug output: [root@radius-220q raddb]# radiusd -X FreeRADIUS Version 3.0.19 Copyright (C) 1999-2019 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp including dictionary file /etc/raddb/dictionary including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf including configuration file /etc/raddb/clients.conf including configuration file /etc/raddb/mods-enabled/sql including configuration file /etc/raddb/mods-config/sql/main/mysql/queries.conf including files in directory /etc/raddb/mods-enabled/ including configuration file /etc/raddb/mods-enabled/always including configuration file /etc/raddb/mods-enabled/attr_filter including configuration file /etc/raddb/mods-enabled/cache_eap including configuration file /etc/raddb/mods-enabled/chap including configuration file /etc/raddb/mods-enabled/date including configuration file /etc/raddb/mods-enabled/detail including configuration file /etc/raddb/mods-enabled/detail.log including configuration file /etc/raddb/mods-enabled/digest including configuration file /etc/raddb/mods-enabled/dynamic_clients including configuration file /etc/raddb/mods-enabled/eap including configuration file /etc/raddb/mods-enabled/echo including configuration file /etc/raddb/mods-enabled/exec including configuration file /etc/raddb/mods-enabled/expiration including configuration file /etc/raddb/mods-enabled/expr including configuration file /etc/raddb/mods-enabled/files including configuration file /etc/raddb/mods-enabled/linelog including configuration file /etc/raddb/mods-enabled/logintime including configuration file /etc/raddb/mods-enabled/mschap including configuration file /etc/raddb/mods-enabled/ntlm_auth including configuration file /etc/raddb/mods-enabled/pap including configuration file /etc/raddb/mods-enabled/passwd including configuration file /etc/raddb/mods-enabled/preprocess including configuration file /etc/raddb/mods-enabled/radutmp including configuration file /etc/raddb/mods-enabled/realm including configuration file /etc/raddb/mods-enabled/replicate including configuration file /etc/raddb/mods-enabled/soh including configuration file /etc/raddb/mods-enabled/sradutmp including configuration file /etc/raddb/mods-enabled/unix including configuration file /etc/raddb/mods-enabled/unpack including configuration file /etc/raddb/mods-enabled/utf8 including files in directory /etc/raddb/policy.d/ including configuration file /etc/raddb/policy.d/abfab-tr including configuration file /etc/raddb/policy.d/accounting including configuration file /etc/raddb/policy.d/canonicalization including configuration file /etc/raddb/policy.d/control including configuration file /etc/raddb/policy.d/cui including configuration file /etc/raddb/policy.d/debug including configuration file /etc/raddb/policy.d/dhcp including configuration file /etc/raddb/policy.d/eap including configuration file /etc/raddb/policy.d/filter including configuration file /etc/raddb/policy.d/moonshot-targeted-ids including configuration file /etc/raddb/policy.d/operator-name including configuration file /etc/raddb/policy.d/rfc7542 including files in directory /etc/raddb/sites-enabled/ including configuration file /etc/raddb/sites-enabled/default including configuration file /etc/raddb/sites-enabled/inner-tunnel main { security { allow_core_dumps = no } name = "radiusd" prefix = "/usr" localstatedir = "/var" logdir = "/var/log/radius" run_dir = "/var/run/radiusd" } main { name = "radiusd" prefix = "/usr" localstatedir = "/var" sbindir = "/usr/sbin" logdir = "/var/log/radius" run_dir = "/var/run/radiusd" libdir = "/usr/lib64/freeradius" radacctdir = "/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 16384 pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no colourise = yes msg_denied = "You are already logged in - access denied" } resources { } security { max_attributes = 200 reject_delay = 1.000000 status_server = yes allow_vulnerable_openssl = "no" } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = <<< secret >>> response_window = 20.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 120 limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = <<< secret >>> nas_type = "other" proto = "*" limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client localhost_ipv6 { ipv6addr = ::1 require_message_authenticator = no secret = <<< secret >>> limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } Debugger not attached systemd watchdog is disabled # Creating Auth-Type = mschap # Creating Auth-Type = digest # Creating Auth-Type = eap # Creating Auth-Type = PAP # Creating Auth-Type = CHAP # Creating Auth-Type = MS-CHAP radiusd: #### Instantiating modules #### modules { # Loaded module rlm_sql # Loading module "sql" from file /etc/raddb/mods-enabled/sql sql { driver = "rlm_sql_mysql" server = "localhost" port = 3306 login = "radius" password = <<< secret >>> radius_db = "radius" read_groups = yes read_profiles = yes read_clients = no delete_stale_sessions = yes sql_user_name = "%{User-Name}" default_user_profile = "" client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id" group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" auto_escape = no accounting { reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}" type { accounting-on { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})" } accounting-off { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})" } start { query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Framed-IPv6-Address}', '%{Framed-IPv6-Prefix}', '%{Framed-Interface-Id}', '%{Delegated-IPv6-Prefix}')" } interim-update { query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', framedipv6address = '%{Framed-IPv6-Address}', framedipv6prefix = '%{Framed-IPv6-Prefix}', framedinterfaceid = '%{Framed-Interface-Id}', delegatedipv6prefix = '%{Delegated-IPv6-Prefix}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" } stop { query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" } } } post-auth { reference = ".query" query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" } } Could not link driver rlm_sql_mysql: /usr/lib64/freeradius/rlm_sql_mysql.so: cannot open shared object file: No such file or directory Make sure it (and all its dependent libraries!) are in the search path of your system's ld /etc/raddb/mods-enabled/sql[20]: Instantiation failed for module "sql" Warm Regards, Matthew McTague Head of Infrastructure, Reliance Networks d. +64 3 222 6013 t. 0800 483 882 (+64 3 683 9090) Website | Service Desk | Internet Services Reliance Networks Ltd accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company.

2 4

MS-CHAPv2 not working
by Matthew McTague 04 Jun '19

04 Jun '19

Hi, Does anyone know why MS-CHAPv2 may not be working on a new FreeRADIUS implementation we've built? I'm trying to do MS-CHAPv2 with a SQL database, not with LDAP. The issue only occurs when a realm is added to the username (on the RADIUS client). As I understand, as nostrip is not entered in the relevant realm block in /etc/raddb/proxy.conf, this should be stripped. radiusd -X output is at https://pastebin.com/kK9JYsF0 Information and passwords have been changed / sanitized. If I've missed any required information, please tell me, and I will respond accordingly. Warm Regards, Matthew McTague Head of Infrastructure, Reliance Networks d. +64 3 222 6013 t. 0800 483 882 (+64 3 683 9090) Website | Service Desk | Internet Services Reliance Networks Ltd accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company.

3 8

Using something other than MD5 in 3.0.19 - FIPS
by Paul Pathiakis 04 Jun '19

04 Jun '19

Hi, For the next issue.... I have to use CentOS in FIPS mode which disallows MD5 use. What do I need to change to either encapsulate it in TLS on the client and server or what should I do to change the configuration to not advertise to CentOS 7 in FIPS mode that MD5 is being used? My understanding is that RADIUS uses MD5 by specification. FIPS mode disallows MD5 usage as being too weak. radiusd -X is up and ready for connections but the basic radtest with user bob generates an MD5 usage error stating that MD5 utlization is not allowed in FIPS mode.

5 8

Lenght string
by Montana Bag 03 Jun '19

03 Jun '19

I need to get length of string in attribute. I found something here: https://networkradius.com/doc/3.0.10/unlang/xlat_length.html I've tried: Tmp-Integer-0 := %{#control:Tmp-String-0} Tmp-Integer-0 := %{#:control:Tmp-String-0} ... but nothing happened: /etc/raddb//policy.d/dhcp_opt82[299]: Unknown or invalid value "%{#control:Tmp-String-0}" for attribute Tmp-Integer-0 /etc/raddb//policy.d/dhcp_opt82[299]: Unknown or invalid value "%{#:control:Tmp-String-0}" for attribute Tmp-Integer-0 How to do it right?

2 1

Subject:About LDAP configuration file
by 西村暢敦 / NISHIMURA，NOBUATSU 03 Jun '19

03 Jun '19

Dear Sir or Madam, My name is Nobuatsu Nishimura. I have a few questions about ldap configuration file. radius version 2 ldap config In version 3 Is this useable. I look forward to hearing from you soon. Sincerely, Nobuatsu Nishimura

2 1

IPv6 Accounting + Volume Count
by Srijan 02 Jun '19

02 Jun '19

Hello, We are on verge of deploying Dual Stack mode to customer, while testing we found client v6 data is not counting for volume count. Inserting it to new column for v6 octets like v4 in radacct table modifing dialup.conf file will be fine as we need change lots of code to count user volume. Is there any way to add both & insert in existing column "acctinputoctets"/"acctoutputoctets". Acct-Input-Octets = 1892471418 Acct-Output-Octets = 1567085180 IPv6-Acct-Input-Octets = 539808892 IPv6-Acct-Output-Octets = 712113623 Regards

3 2

eap_ttls: ERROR: TLS Alert write:fatal:bad record mac
by Fredrik Lundhag 01 Jun '19

01 Jun '19

Hey guys, After a random interval (hours) our wifi clients gets disconnected after this log entry: ``` May 24 09:28:15 gra1-radius-01 : (205) Login incorrect (eap_ttls: TLS Alert write:fatal:bad record mac): [jolt] (from client Flattr port 85 cli 784f434d22ba) May 24 09:28:15 gra1-radius-01 : (205) eap_ttls: ERROR: TLS Alert write:fatal:bad record mac ``` This is on Alpine 3.9 with freeradius-eap-3.0.17-r5, and openssl-1.1.1b-r1. This is my first time setting this up, so bear with me. I'm running this together with an Asus router with EAP-TTLS and having mainly macbooks in this office. I have tried to search for others with this issue, but can't find much that seems related, I have set `tls_max_version = "1.2"` (to not trigger any tls1.3 bugs) but the issue still occurs. ## Output of ``[radiusd|freeradius] -fxx -l stdout`` if using eg RADIUS with TLS) ```text Waking up in 0.3 seconds. Thread 4 got semaphore Thread 4 handling request 231, (47 handled so far) (231) Received Access-Request Id 2 from 172.16.48.214:48268 to 172.16.54.20:1812 length 197 (231) User-Name = "jolt" (231) NAS-IP-Address = 172.16.48.214 (231) Called-Station-Id = "40b076368a34" (231) Calling-Station-Id = "784f434d22ba" (231) NAS-Identifier = "40b076368a34" (231) NAS-Port = 85 (231) Framed-MTU = 1400 (231) State = 0x63de82e165d997993bc43b07e7488f96 (231) NAS-Port-Type = Wireless-802.11 (231) EAP-Message = 0x020700431580000000391703030034e3e40e58ae7f7295d08781537dec10239ab8dc0c805e653756f82652fbb22f2840139d3800015443f177ff4266a1afcafaf4f27a (231) Message-Authenticator = 0x4ebdb0708a803b03cc27cd1f666e128a (231) session-state: No cached attributes (231) # Executing section authorize from file /etc/raddb/sites-enabled/default (231) authorize { (231) auth_log: EXPAND /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d (231) auth_log: --> /var/log/radius/radacct/172.16.48.214/auth-detail-20190528 (231) auth_log: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.16.48.214/auth-detail-20190528 (231) auth_log: EXPAND %t (231) auth_log: --> Tue May 28 09:27:49 2019 (231) [auth_log] = ok (231) eap: Peer sent EAP Response (code 2) ID 7 length 67 (231) eap: Continuing tunnel setup (231) [eap] = ok (231) } # authorize = ok (231) Found Auth-Type = eap (231) # Executing group from file /etc/raddb/sites-enabled/default (231) authenticate { (231) eap: Expiring EAP session with state 0x7833efcb7832e926 (231) eap: Finished EAP session with state 0x63de82e165d99799 (231) eap: Previous EAP request found for state 0x63de82e165d99799, released from the list (231) eap: Peer sent packet with method EAP TTLS (21) (231) eap: Calling submodule eap_ttls to process data (231) eap_ttls: Authenticate (231) eap_ttls: Continuing EAP-TLS (231) eap_ttls: Peer indicated complete TLS record size will be 57 bytes (231) eap_ttls: Got complete TLS record (57 bytes) (231) eap_ttls: [eaptls verify] = length included (231) eap_ttls: >>> send TLS 1.2 [length 0002] (231) eap_ttls: ERROR: TLS Alert write:fatal:bad record mac (231) eap_ttls: SSL_read Error (231) eap_ttls: ERROR: Error in fragmentation logic (231) eap_ttls: ERROR: Failed in __FUNCTION__ (SSL_read): error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac (231) eap_ttls: ERROR: System call (I/O) error (-1) (231) eap_ttls: ERROR: [eaptls process] = fail (231) eap: ERROR: Failed continuing EAP TTLS (21) session. EAP sub-module failed (231) eap: Sending EAP Failure (code 4) ID 7 length 4 (231) eap: Failed in EAP select (231) [eap] = invalid (231) } # authenticate = invalid (231) Failed to authenticate the user (231) Using Post-Auth-Type Reject (231) # Executing group from file /etc/raddb/sites-enabled/default (231) Post-Auth-Type REJECT { (231) attr_filter.access_reject: EXPAND %{User-Name} (231) attr_filter.access_reject: --> jolt (231) attr_filter.access_reject: Matched entry DEFAULT at line 11 (231) [attr_filter.access_reject] = updated (231) policy remove_reply_message_if_eap { (231) if (&reply:EAP-Message && &reply:Reply-Message) { (231) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (231) else { (231) [noop] = noop (231) } # else = noop (231) } # policy remove_reply_message_if_eap = noop (231) } # Post-Auth-Type REJECT = updated (231) Delaying response for 1.000000 seconds Thread 4 waiting to be assigned a request Waking up in 0.6 seconds. (231) Sending delayed response (231) Sent Access-Reject Id 2 from 172.16.54.20:1812 to 172.16.48.214:48268 length 44 (231) EAP-Message = 0x04070004 (231) Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 3.9 seconds. (231) Cleaning up request packet ID 2 with timestamp +330184 Ready to process requests Waking up in 0.3 seconds. Thread 3 got semaphore Thread 3 handling request 232, (47 handled so far) ``` Any guesses? -- Fredrik Lundhag wire.com <http://wire.com/>: @jolt

2 2

Trying to use sql module
by Matthew McTague 01 Jun '19

01 Jun '19

Hi, When I soft link raddb/mods-available/sql to raddb/mods-enabled/sql, and comment out $INCLUDE mods-enabled/sql in raddb/radiusd.conf, I get the below debug output, ending in a segmentation fault. The only other changes I have made since compiling were to set the dialect and database connection details in raddb/mods-available/sql. I've read each file that I've modified, and I'm unsure what is causing this issue. I'm using git to manage my changes, so can go back to the very beginning easily if I need to. Debug output: Info : FreeRADIUS Version 4.0.0 Info : Copyright 1999-2019 The FreeRADIUS server project and contributors Info : There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Info : PARTICULAR PURPOSE Info : You may redistribute copies of FreeRADIUS under the terms of the Info : GNU General Public License Info : For more information about these matters, see the file named COPYRIGHT Info : Starting - reading configuration files ... Debug : Including dictionary file "/etc/freeradius/raddb/dictionary" Debug : including configuration file /etc/freeradius/raddb/radiusd.conf Debug : including configuration file /etc/freeradius/raddb/clients.conf Debug : including configuration file /etc/freeradius/raddb/mods-enabled/sql Debug : including configuration file /etc/freeradius/raddb/mods-config/sql/driver/mysql Debug : including configuration file /etc/freeradius/raddb/mods-config/sql/main/mysql/queries.conf Debug : Including files in directory "/etc/freeradius/raddb/mods-enabled/" Debug : including configuration file /etc/freeradius/raddb/mods-enabled/always Debug : including configuration file /etc/freeradius/raddb/mods-enabled/attr_filter Debug : including configuration file /etc/freeradius/raddb/mods-enabled/cache_eap Debug : including configuration file /etc/freeradius/raddb/mods-enabled/chap Debug : including configuration file /etc/freeradius/raddb/mods-enabled/client Debug : including configuration file /etc/freeradius/raddb/mods-enabled/delay Debug : including configuration file /etc/freeradius/raddb/mods-enabled/detail Debug : including configuration file /etc/freeradius/raddb/mods-enabled/detail.log Debug : including configuration file /etc/freeradius/raddb/mods-enabled/digest Debug : including configuration file /etc/freeradius/raddb/mods-enabled/dhcpv4 Debug : including configuration file /etc/freeradius/raddb/mods-enabled/echo Debug : including configuration file /etc/freeradius/raddb/mods-enabled/escape Debug : including configuration file /etc/freeradius/raddb/mods-enabled/exec Debug : including configuration file /etc/freeradius/raddb/mods-enabled/expiration Debug : including configuration file /etc/freeradius/raddb/mods-enabled/expr Debug : including configuration file /etc/freeradius/raddb/mods-enabled/files Debug : including configuration file /etc/freeradius/raddb/mods-enabled/linelog Debug : including configuration file /etc/freeradius/raddb/mods-enabled/logintime Debug : including configuration file /etc/freeradius/raddb/mods-enabled/mschap Debug : including configuration file /etc/freeradius/raddb/mods-enabled/ntlm_auth Debug : including configuration file /etc/freeradius/raddb/mods-enabled/pap Debug : including configuration file /etc/freeradius/raddb/mods-enabled/passwd Debug : including configuration file /etc/freeradius/raddb/mods-enabled/radius Debug : including configuration file /etc/freeradius/raddb/mods-enabled/radutmp Debug : including configuration file /etc/freeradius/raddb/mods-enabled/soh Debug : including configuration file /etc/freeradius/raddb/mods-enabled/sradutmp Debug : including configuration file /etc/freeradius/raddb/mods-enabled/stats Debug : including configuration file /etc/freeradius/raddb/mods-enabled/unix Debug : including configuration file /etc/freeradius/raddb/mods-enabled/unpack Debug : including configuration file /etc/freeradius/raddb/mods-enabled/utf8 CAUGHT SIGNAL: Segmentation fault Backtrace of last 12 frames: /usr/local/lib/libfreeradius-util.so(fr_fault+0xe8)[0x7fe35056e6ec] /lib64/libpthread.so.0(+0xf5d0)[0x7fe34edc25d0] /lib64/libc.so.6(fgets+0x1b)[0x7fe34ea5483b] /usr/local/lib/libfreeradius-server.so(+0x15990)[0x7fe350c40990] /usr/local/lib/libfreeradius-server.so(+0x18216)[0x7fe350c43216] /usr/local/lib/libfreeradius-server.so(+0x165dc)[0x7fe350c415dc] /usr/local/lib/libfreeradius-server.so(+0x18216)[0x7fe350c43216] /usr/local/lib/libfreeradius-server.so(cf_file_read+0x23d)[0x7fe350c434b0] /usr/local/lib/libfreeradius-server.so(main_config_init+0x42c)[0x7fe350c62c8d] radiusd(main+0x95f)[0x404982] /lib64/libc.so.6(__libc_start_main+0xf5)[0x7fe34ea083d5] radiusd[0x403e09] No panic action set _EXIT(139) CALLED src/lib/util/debug.c[921]. Last error was: Not built with support for LSAN interface Warm Regards, Matthew McTague Head of Infrastructure, Reliance Networks d. +64 3 222 6013 t. 0800 483 882 (+64 3 683 9090) Website | Service Desk | Internet Services Reliance Networks Ltd accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company.

2 3