And what does your Freeradius server tell? (i.e. the classical email of this mailing list: "What is the ouput of radiusd -X ?") Have a nice day! Am 26.06.2008 um 11:41 schrieb Jonathan Gazeley:
Hello,
Until a couple of days ago, my FreeRadius setup was working perfectly normally - running FreeRadius 2.0.1 on a Centos 5 server. FreeRadius was compiled from source, not installed from a repository. Two days ago I received some automatic updates from standard Centos repo, and since then Radius has not worked.
Running eapol test gives some output, including this (more of the output can be supplied on demand):
EAPOL: SUPP_BE entering state RECEIVE Received 44 bytes from RADIUS server Received RADIUS message RADIUS message: code=3 (Access-Reject) identifier=9 length=44 Attribute 79 (EAP-Message) length=6 Value: 04 09 00 04 Attribute 80 (Message-Authenticator) length=18 Value: 43 9e 23 c8 74 b1 a0 9f 8c 3b 83 be e8 36 a8 30 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 0.20 sec RADIUS packet matching with station decapsulated EAP packet (code=4 id=9 len=4) from RADIUS server: EAP Failure EAPOL: Received EAP-Packet frame EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Failure EAP: EAP entering state FAILURE CTRL-EVENT-EAP-FAILURE EAP authentication failed EAPOL: SUPP_PAE entering state HELD EAPOL: SUPP_BE entering state RECEIVE EAPOL: SUPP_BE entering state FAIL EAPOL: SUPP_BE entering state IDLE eapol_sm_cb: success=0 EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit ENGINE: engine deinit MPPE keys OK: 0 mismatch: 1 FAILURE
I checked and verified all the Freeradius configs. I recompiled 2.0.1 , and later compiled and installed 2.0.5 but this shows identical symptoms.
I have attached the relevant section of my yum.log to show which packages were updated. The Radius server was tested once every minute by authenticating with a test account. This was first reported to fail at 10:48
I do not know which package could have caused this behaviour - has anyone else seen anything like this?
It is quite urgent that I get this fixed asap as it is a production box at Bristol university. Currently we are running on the backup box, where I was luckily able to disable automatic updates before they were applied.
Any advice will be gratefully received.
Cheers, Jonathan
---------------------------- Jonathan Gazeley Systems Support Specialist ResNet | Wireless & VPN Team Information Services University of Bristol ----------------------------
Jun 24 13:45:09 Updated: libgcc.i386 4.1.2-42.el5 Jun 24 13:45:25 Updated: glibc-common.i386 2.5-24 Jun 24 13:45:32 Updated: glibc.i686 2.5-24 Jun 24 13:45:34 Updated: bash.i386 3.2-21.el5 Jun 24 13:45:35 Updated: libselinux.i386 1.33.4-5.el5 Jun 24 13:45:36 Updated: chkconfig.i386 1.3.30.1-2 Jun 24 13:45:37 Updated: audit-libs.i386 1.6.5-9.el5 Jun 24 13:45:37 Updated: popt.i386 1.10.2-48.el5 Jun 24 13:45:42 Updated: shadow-utils.i386 2:4.0.17-13.el5 Jun 24 13:45:43 Updated: device-mapper.i386 1.02.24-1.el5 Jun 24 13:45:44 Updated: e2fsprogs-libs.i386 1.39-15.el5 Jun 24 13:45:44 Updated: libstdc++.i386 4.1.2-42.el5 Jun 24 13:45:51 Updated: perl.i386 4:5.8.8-10.el5_2.3 Jun 24 13:45:52 Updated: dbus.i386 1.0.0-7.el5 Jun 24 13:45:53 Updated: libX11.i386 1.0.3-9.el5 Jun 24 13:45:54 Updated: nspr.i386 4.7.0.99.2-1.el5 Jun 24 13:46:14 Updated: nss.i386 3.11.99.5-2.el5.centos Jun 24 13:46:15 Updated: freetype.i386 2.2.1-20.el5_2 Jun 24 13:46:16 Updated: cairo.i386 1.2.4-5.el5 Jun 24 13:46:16 Updated: libacl.i386 2.2.39-3.el5 Jun 24 13:46:20 Updated: coreutils.i386 5.97-14.el5 Jun 24 13:46:22 Updated: pam.i386 0.99.6.2-3.27.el5 Jun 24 13:46:23 Updated: krb5-libs.i386 1.6.1-25.el5 Jun 24 13:46:25 Updated: openssl.i686 0.9.8b-10.el5 Jun 24 13:46:30 Updated: python.i386 2.4.3-21.el5 Jun 24 13:46:31 Updated: module-init-tools.i386 3.3-0.pre3.1.37.el5 Jun 24 13:46:31 Updated: newt.i386 0.52.2-10.el5 Jun 24 13:46:32 Updated: cups-libs.i386 1:1.2.4-11.18.el5_2.1 Jun 24 13:46:36 Updated: gtk2.i386 2.10.4-20.el5 Jun 24 13:46:37 Updated: udev.i386 095-14.16.el5 Jun 24 13:46:39 Updated: util-linux.i386 2.13-0.47.el5 Jun 24 13:46:41 Updated: binutils.i386 2.17.50.0.6-6.el5 Jun 24 13:46:42 Updated: bind-libs.i386 30:9.3.4-6.P1.el5 Jun 24 13:46:43 Updated: mysql.i386 5.0.45-7.el5 Jun 24 13:46:44 Updated: kpartx.i386 0.4.7-17.el5 Jun 24 13:46:45 Updated: procps.i386 3.2.7-9.el5 Jun 24 13:46:45 Updated: hwdata.noarch 0.213.6-1.el5 Jun 24 13:46:46 Updated: pciutils.i386 2.2.3-5 Jun 24 13:46:47 Updated: e2fsprogs.i386 1.39-15.el5 Jun 24 13:46:48 Updated: iptables.i386 1.3.5-4.el5 Jun 24 13:46:49 Updated: psmisc.i386 22.2-6 Jun 24 13:46:49 Updated: make.i386 1:3.81-3.el5 Jun 24 13:46:50 Updated: diffutils.i386 2.8.1-15.2.3.el5 Jun 24 13:46:51 Updated: iproute.i386 2.6.18-7.el5 Jun 24 13:46:52 Updated: pcsc-lite-libs.i386 1.4.4-0.1.el5 Jun 24 13:46:53 Updated: dmraid.i386 1.0.0.rc13-9.el5 Jun 24 13:46:56 Updated: libgcj.i386 4.1.2-42.el5 Jun 24 13:46:57 Updated: libuser.i386 0.54.7-2.el5.5 Jun 24 13:46:58 Updated: usermode.i386 1.88-3.el5.1 Jun 24 13:46:59 Updated: libvolume_id.i386 095-14.16.el5 Jun 24 13:46:59 Updated: libgomp.i386 4.1.2-42.el5 Jun 24 13:47:00 Updated: libnl.i386 1.0-0.10.pre5.5 Jun 24 13:47:01 Updated: file.i386 4.17-13 Jun 24 13:47:02 Updated: libgfortran.i386 4.1.2-42.el5 Jun 24 13:47:03 Updated: iptables-ipv6.i386 1.3.5-4.el5 Jun 24 13:47:04 Updated: device-mapper-multipath.i386 0.4.7-17.el5 Jun 24 13:47:05 Updated: paps.i386 0.6.6-18.el5 Jun 24 13:47:05 Updated: yum-metadata-parser.i386 1.1.2-2.el5 Jun 24 13:47:06 Updated: libselinux-python.i386 1.33.4-5.el5 Jun 24 13:47:06 Updated: audit-libs-python.i386 1.6.5-9.el5 Jun 24 13:47:07 Updated: wpa_supplicant.i386 1:0.4.8-10.2.el5 Jun 24 13:47:09 Updated: samba-common.i386 3.0.28-0.el5.8 Jun 24 13:47:10 Updated: audit.i386 1.6.5-9.el5 Jun 24 13:47:11 Updated: nscd.i386 2.5-24 Jun 24 13:47:13 Updated: nss-tools.i386 3.11.99.5-2.el5.centos Jun 24 13:47:14 Updated: e2fsprogs-devel.i386 1.39-15.el5 Jun 24 13:47:15 Updated: net-tools.i386 1.60-78.el5 Jun 24 13:47:16 Updated: libselinux-devel.i386 1.33.4-5.el5 Jun 24 13:47:17 Updated: krb5-devel.i386 1.6.1-25.el5 Jun 24 13:47:19 Updated: openssl-devel.i386 0.9.8b-10.el5 Jun 24 13:47:20 Updated: gzip.i386 1.3.5-10.el5.centos Jun 24 13:47:20 Updated: pkgconfig.i386 1:0.21-2.el5 Jun 24 13:47:22 Updated: kernel-headers.i386 2.6.18-92.1.1.el5 Jun 24 13:47:23 Updated: glibc-headers.i386 2.5-24 Jun 24 13:47:25 Updated: glibc-devel.i386 2.5-24 Jun 24 13:47:25 Updated: centos-release-notes.i386 5.2-2 Jun 24 13:47:26 Updated: centos-release.i386 10:5-2.el5.centos Jun 24 13:47:28 Updated: initscripts.i386 8.45.19.EL-1.el5.centos.1 Jun 24 13:47:30 Updated: pcsc-lite.i386 1.4.4-0.1.el5 Jun 24 13:47:32 Updated: kbd.i386 1.12-20.el5 Jun 24 13:47:32 Updated: openssh.i386 4.3p2-26.el5 Jun 24 13:47:33 Updated: dhclient.i386 12:3.0.5-13.el5 Jun 24 13:47:34 Updated: coolkey.i386 1.1.0-6.el5 Jun 24 13:47:35 Updated: nss_ldap.i386 253-12.el5 Jun 24 13:47:36 Updated: nss_db.i386 2.2-35.3 Jun 24 13:47:37 Updated: crash.i386 4.0-5.0.3.el5.centos Jun 24 13:47:39 Updated: at-spi.i386 1.7.11-3.el5 Jun 24 13:47:39 Installed: python-iniparse.noarch 0.2.3-4.el5 Jun 24 13:47:40 Installed: gamin-python.i386 0.1.7-8.el5 Jun 24 13:47:40 Updated: libpcap.i386 14:0.9.4-12.el5 Jun 24 13:47:41 Updated: sudo.i386 1.6.8p12-12.el5 Jun 24 13:47:44 Updated: libstdc++-devel.i386 4.1.2-42.el5 Jun 24 13:47:45 Updated: parted.i386 1.8.1-17.el5 Jun 24 13:47:45 Updated: apr-util.i386 1.2.7-7.el5 Jun 24 13:47:46 Installed: device-mapper-event.i386 1.02.24-1.el5 Jun 24 13:47:48 Updated: lvm2.i386 2.02.32-4.el5 Jun 24 13:47:49 Updated: cpp.i386 4.1.2-42.el5 Jun 24 13:47:51 Updated: gcc.i386 4.1.2-42.el5 Jun 24 13:47:51 Updated: nash.i386 5.1.19.6-28 Jun 24 13:47:52 Updated: mkinitrd.i386 5.1.19.6-28 Jun 24 13:48:02 Installed: kernel.i686 2.6.18-92.1.1.el5 Jun 24 13:48:04 Updated: systemtap-runtime.i386 0.6.2-1.el5 Jun 24 13:48:06 Updated: systemtap.i386 0.6.2-1.el5 Jun 24 13:48:07 Updated: gcc-c++.i386 4.1.2-42.el5 Jun 24 13:48:08 Updated: gcc-gfortran.i386 4.1.2-42.el5 Jun 24 13:48:09 Updated: openssh-clients.i386 4.3p2-26.el5 Jun 24 13:48:10 Updated: openssh-server.i386 4.3p2-26.el5 Jun 24 13:48:11 Updated: irqbalance.i386 2:0.55-10.el5 Jun 24 13:48:13 Updated: sysklogd.i386 1.4.1-44.el5 Jun 24 13:48:14 Installed: dhcpv6-client.i386 1.0.10-4.el5_2.2 Jun 24 13:48:17 Updated: cups.i386 1:1.2.4-11.18.el5_2.1 Jun 24 13:48:21 Updated: samba.i386 3.0.28-0.el5.8 Jun 24 13:48:21 Updated: microcode_ctl.i386 1:1.17-1.47.el5 Jun 24 13:48:22 Updated: freetype-devel.i386 2.2.1-20.el5_2 Jun 24 13:48:23 Updated: mysql-devel.i386 5.0.45-7.el5 Jun 24 13:48:24 Updated: amtu.i386 1.0.6-1.el5 Jun 24 13:48:25 Updated: system-config-securitylevel-tui.i386 1.6.29.1-2.1.el5 Jun 24 13:48:26 Updated: authconfig.i386 5.3.21-3.el5 Jun 24 13:48:35 Updated: frysk.i686 0.0.1.2008.03.19.rh1-1.el5 Jun 24 13:48:36 Updated: grub.i386 0.97-13.2 Jun 24 13:48:37 Updated: autofs.i386 1:5.0.1-0.rc2.88 Jun 24 13:48:39 Updated: mysql-server.i386 5.0.45-7.el5 Jun 24 13:48:40 Updated: bind-utils.i386 30:9.3.4-6.P1.el5 Jun 24 13:48:42 Updated: oprofile.i386 0.9.3-16.el5 Jun 24 13:48:43 Updated: nfs-utils.i386 1:1.0.9-33.el5 Jun 24 13:48:44 Updated: krb5-workstation.i386 1.6.1-25.el5 Jun 24 13:48:46 Updated: pygtk2.i386 2.10.1-12.el5 Jun 24 13:48:48 Updated: notification-daemon.i386 0.3.5-9.el5 Jun 24 13:48:48 Updated: ntsysv.i386 1.3.30.1-2 Jun 24 13:48:50 Updated: m2crypto.i386 0.16-6.el5.2 Jun 24 13:48:52 Updated: ntp.i386 4.2.2p1-8.el5.centos.1 Jun 24 13:48:53 Updated: tcpdump.i386 14:3.9.4-12.el5 Jun 24 13:48:55 Updated: Deployment_Guide-en-US.noarch 5.2-9.el5.centos Jun 24 13:48:56 Updated: logwatch.noarch 7.3-6.el5 Jun 24 13:48:57 Updated: ksh.i386 20060214-1.7 Jun 24 13:48:58 Updated: xorg-x11-xinit.i386 1.0.2-15.el5 Jun 24 13:48:59 Updated: acl.i386 2.2.39-3.el5 Jun 24 13:49:01 Updated: libX11-devel.i386 1.0.3-9.el5 Jun 24 13:49:01 Updated: redhat-rpm-config.noarch 8.0.45-24.el5 Jun 24 13:49:02 Updated: cpuspeed.i386 1:1.2.1-3.el5 Jun 24 13:49:04 Updated: xorg-x11-server-Xvfb.i386 1.1.1-48.41.el5_2.1 Jun 24 13:49:05 Updated: shared-mime-info.i386 0.19-5.el5 Jun 24 13:49:07 Updated: gdb.i386 6.5-37.el5_2.2 Jun 24 13:49:08 Updated: mdadm.i386 2.6.4-1.el5 Jun 24 13:49:08 Updated: htmlview.noarch 4.0.0-2.el5 Jun 24 13:49:09 Updated: traceroute.i386 3:2.0.1-3.el5 Jun 24 13:49:10 Updated: ltrace.i386 0.5-7.45svn.el5 Jun 24 13:49:10 Updated: diffstat.i386 1.41-1.2.3.el5 Jun 24 13:49:11 Updated: checkpolicy.i386 1.33.1-4.el5 Jun 24 13:49:12 Installed: libhugetlbfs.i386 1.2-5.el5 Jun 24 13:49:13 Updated: hal.i386 0.5.8.1-35.el5 Jun 24 13:49:16 Updated: rpm.i386 4.4.2-48.el5 Jun 24 13:49:17 Updated: rpm-libs.i386 4.4.2-48.el5 Jun 24 13:49:18 Updated: policycoreutils.i386 1.33.12-14.el5 Jun 24 13:49:19 Updated: rpm-python.i386 4.4.2-48.el5 Jun 24 13:49:20 Updated: oddjob-libs.i386 0.27-9.el5 Jun 24 13:49:21 Updated: kudzu.i386 1.2.57.1.17-1 Jun 24 13:49:22 Updated: pm-utils.i386 0.99.3-6.el5.centos.19 Jun 24 13:49:24 Updated: selinux-policy.noarch 2.4.6-137.el5 Jun 24 13:49:25 Updated: bind.i386 30:9.3.4-6.P1.el5 Jun 24 13:49:26 Updated: NetworkManager.i386 1:0.6.4-8.el5 Jun 24 13:49:27 Updated: oddjob.i386 0.27-9.el5 Jun 24 13:49:28 Updated: bind-chroot.i386 30:9.3.4-6.P1.el5 Jun 24 13:50:11 Updated: selinux-policy-targeted.noarch 2.4.6-137.el5 Jun 24 13:50:13 Updated: system-config-network-tui.noarch 1.3.99.10-2.el5 Jun 24 13:50:14 Updated: rpm-build.i386 4.4.2-48.el5 Jun 24 13:50:15 Updated: smartmontools.i386 1:5.36-4.el5 Jun 24 13:50:16 Updated: yum.noarch 3.2.8-9.el5.centos.2.1 Jun 24 13:50:17 Installed: yum-fastestmirror.noarch 1.1.10-9.el5.centos Jun 24 13:50:17 Updated: yum-updatesd.noarch 1:0.9-2.el5 Jun 24 13:51:23 Erased: dhcpv6_client Jun 24 13:52:04 Erased: libhugetlbfs-lib Jun 24 13:52:30 Updated: Deployment_Guide-en-US.noarch 5.2-9.el5.centos Jun 24 13:52:31 Updated: bind-chroot.i386 30:9.3.4-6.P1.el5 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ users.html
Nicolas Goutte extragroup GmbH - Karlsruhe Waldstr. 49 76133 Karlsruhe Germany Geschäftsführer: Stephan Mönninghoff, Hans Martin Kern, Tilman Haerdle Registergericht: Amtsgericht Münster / HRB: 5624 Steuer Nr.: 337/5903/0421 / UstID: DE 204607841