-----Original Message----- From: Freeradius-Users [mailto:freeradius-users- bounces+miika.raisanen=oulu.fi@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 3. joulukuuta 2015 15:50 To: FreeRadius users mailing list Subject: Re: Moving to 3.0.x series and crashes
On Dec 3, 2015, at 7:27 AM, Miika Räisänen <Miika.Raisanen@oulu.fi> wrote:
I've been trying to upgrade our eduroam radius server 2.1.12 to 3.0.10 or
newer. Our wifi is configured to authenticate 802.1X PEAP/mschapv2 -> freeradius -> Microsoft ad.
In test environment freeradius works ok but in production it randomly
crashes. With 3.0.10 I got some crash but did not catch any info about it and I just decided to try directly git version without any crash investigation.
So last night (2nd dec) I pulled 3.0.x from git, compiled and put it on
production. It survide about 12 hours and crashed with messages below
Thu Dec 3 08:16:21 2015 : Auth: (22577) Login OK:
[host/tatk032054.univ.yo.oulu.fi] (from client cisco_aps port 13 cli f8-16-54- f1-5d-33)
Thu Dec 3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program returned code (1) and output 'Password expired (0xc0000071)' Thu Dec 3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program returned code (1) and output 'Logon failure (0xc000006d)' Thu Dec 3 08:16:25 2015 : Error: ASSERT FAILED src/modules/rlm_mschap/rlm_mschap.c[1751]: nt_password CAUGHT SIGNAL: Aborted Backtrace of last 42 frames: /usr/local/lib/libfreeradius-radius.so(fr_fault+0x115)[0x7faabee6c4c2] /usr/local/lib/libfreeradius- server.so(rad_assert_fail+0x46)[0x7faabf0cbe39] /usr/local/lib/rlm_mschap.so(+0x5624)[0x7faab9905624]
That helps a bit... please follow the instructions in
https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/doc/bugs
to get a backtrace with symbols. That will tell us exactly where the problem occurs.
I know I may should provide more info, but should I set panic action or compile fr with debug etc?
Yes, please compile with debugging.
Looks like it has something to do with mschapv password change so heres my mschap.conf http://cc.oulu.fi/~mtr/radius/mschap
You have all of the password change config disabled.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
So I ran it in screen for a while and here we go: http://cc.oulu.fi/~mtr/radius/gdb_radiusd System is: Linux xxx.xxx.xxx.xx 3.10.0-229.11.1.el7.x86_64 #1 SMP Thu Aug 6 01:06:18 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux gcc-4.8.3-9.el7.x86_64 libgcc-4.8.3-9.el7.x86_64 samba-winbind-clients-4.1.12-23.el7_1.x86_64 samba-winbind-4.1.12-23.el7_1.x86_64 samba-winbind-modules-4.1.12-23.el7_1.x86_64 samba-libs-4.1.12-23.el7_1.x86_64 samba-common-4.1.12-23.el7_1.x86_64 samba-4.1.12-23.el7_1.x86_64 Need something more?