On Dec 3, 2015, at 7:27 AM, Miika Räisänen <Miika.Raisanen@oulu.fi> wrote:
I've been trying to upgrade our eduroam radius server 2.1.12 to 3.0.10 or newer. Our wifi is configured to authenticate 802.1X PEAP/mschapv2 -> freeradius -> Microsoft ad.
In test environment freeradius works ok but in production it randomly crashes. With 3.0.10 I got some crash but did not catch any info about it and I just decided to try directly git version without any crash investigation.
So last night (2nd dec) I pulled 3.0.x from git, compiled and put it on production. It survide about 12 hours and crashed with messages below
Thu Dec 3 08:16:21 2015 : Auth: (22577) Login OK: [host/tatk032054.univ.yo.oulu.fi] (from client cisco_aps port 13 cli f8-16-54-f1-5d-33) Thu Dec 3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program returned code (1) and output 'Password expired (0xc0000071)' Thu Dec 3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program returned code (1) and output 'Logon failure (0xc000006d)' Thu Dec 3 08:16:25 2015 : Error: ASSERT FAILED src/modules/rlm_mschap/rlm_mschap.c[1751]: nt_password CAUGHT SIGNAL: Aborted Backtrace of last 42 frames: /usr/local/lib/libfreeradius-radius.so(fr_fault+0x115)[0x7faabee6c4c2] /usr/local/lib/libfreeradius-server.so(rad_assert_fail+0x46)[0x7faabf0cbe39] /usr/local/lib/rlm_mschap.so(+0x5624)[0x7faab9905624]
That helps a bit... please follow the instructions in https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/doc/bugs to get a backtrace with symbols. That will tell us exactly where the problem occurs.
I know I may should provide more info, but should I set panic action or compile fr with debug etc?
Yes, please compile with debugging.
Looks like it has something to do with mschapv password change so heres my mschap.conf http://cc.oulu.fi/~mtr/radius/mschap
You have all of the password change config disabled. Alan DeKok.