Support for disconnect request and ACK messages
Hi All, Can any body help me how to add the support for disconnect request and ack in freeradius ? Thanks and regards Shankar ganesh
Shankar Ganesh C <shankarganesh@tataelxsi.co.in> wrote:
Can any body help me how to add the support for disconnect request and ack in freeradius ?
This is more a question for the freeradius-devel list. And my suggestion is to first get familiar with the server. The code is reasonably well organised, so if you have *specific* questions about what to do, they may be answered. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
So we've had many thousands of succcessful AD/PEAP authentications. Today, the thing just died. I shut the server off so that all the AP's started using my backup server. This is the logs that I have from when it happened. Unfortuanly, everything seemed fine after I rebooted the server (my emergency panic hit the reset button response) I've included a couple of good Auths. 11:58:35 seems to be when it all tanked. Mon Sep 4 11:58:34 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:34 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:34 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:34 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\nshigenari] (from client localhost port 0) Mon Sep 4 11:58:35 2006 : Info: rlm_eap_mschapv2: Issuing Challenge Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\nshigenari] (from client BUWiSM-1-1 port 29 cli 00-11-F5-31-43-B6) Mon Sep 4 11:58:35 2006 : Info: rlm_eap_mschapv2: Issuing Challenge Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Info: rlm_eap_mschapv2: Issuing Challenge Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [cflorence] (from client localhost port 0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [cflorence] (from client BUWiSM-1-2 port 29 cli 00-13-02-A6-68-3C) Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\zsimko] (from client localhost port 0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\jmartinuk] (from client localhost port 0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\jmartinuk] (from client BUWiSM-1-1 port 29 cli 00-90-4B-B3-6A-59) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\zsimko] (from client BUWiSM-1-2 port 29 cli 00-12-F0-39-A5-DE) Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\m1lyons] (from client localhost port 0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\m1lyons] (from client BUWiSM-1-2 port 29 cli 00-90-4B-66-65-5C) Mon Sep 4 11:58:35 2006 : Info: rlm_eap_mschapv2: Issuing Challenge Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Info: rlm_eap_mschapv2: Issuing Challenge Mon Sep 4 11:58:35 2006 : Info: rlm_eap_mschapv2: Issuing Challenge Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:35 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:35 2006 : Auth: Login incorrect: [BSC\\bwallis] (from client BUWiSM-2-2 port 29 cli 00-0E-35-B6-53-29) Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:35 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:35 2006 : Auth: Login incorrect: [BSC\\ecoughlan] (from client BUWiSM-1-2 port 29 cli 00-90-96-CE-DE-24) Mon Sep 4 11:58:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:35 2006 : Auth: Login OK: [BSC\\mtoomey] (from client localhost port 0) Mon Sep 4 11:58:36 2006 : Auth: Login OK: [BSC\\abender] (from client localhost port 0) Mon Sep 4 11:58:36 2006 : Auth: Login OK: [BSC\\jfeatherston] (from client localhost port 0) Mon Sep 4 11:58:36 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:36 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:36 2006 : Auth: Login OK: [BSC\\mtoomey] (from client BUWiSM-1-2 port 29 cli 00-90-96-C6-44-15) Mon Sep 4 11:58:36 2006 : Auth: Login OK: [BSC\\jfeatherston] (from client BUWiSM-1-2 port 29 cli 00-13-02-9F-45-70) Mon Sep 4 11:58:36 2006 : Auth: Login OK: [BSC\\abender] (from client BUWiSM-1-2 port 29 cli 00-02-2D-25-D4-FB) Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [BSC\\ykamel] (from client BUWiSM-2-2 port 29 cli 00-13-CE-94-E1-56) Mon Sep 4 11:58:36 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:36 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [jomran] (from client BUWiSM-1-1 port 29 cli 00-11-F5-01-06-0E) Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:36 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [BSC\\j1fleming] (from client BUWiSM-2-2 port 29 cli 00-13-CE-29-C5-FB) Mon Sep 4 11:58:36 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:36 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [sgaissl] (from client BUWiSM-1-1 port 29 cli 00-13-02-A6-52-83) Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:36 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [BSC\\tdambra] (from client BUWiSM-2-1 port 29 cli 00-13-CE-1C-AD-ED) Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:36 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [BSC\\l1gallagher] (from client BUWiSM-1-2 port 29 cli 00-0E-35-F1-25-44) Mon Sep 4 11:58:36 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read finished A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [BSC\\mwaterman] (from client BUWiSM-1-1 port 29 cli 00-90-4B-52-D2-F7) Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [BSC\\kporter] (from client BUWiSM-2-2 port 29 cli 00-13-CE-13-FB-15) Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Info: rlm_eap_mschapv2: Issuing Challenge Mon Sep 4 11:58:36 2006 : Auth: Login OK: [BSC\\m1mills] (from client localhost port 0) Mon Sep 4 11:58:36 2006 : Auth: Login OK: [BSC\\m1mills] (from client BUWiSM-1-1 port 29 cli 00-14-A5-C3-4A-FF) Mon Sep 4 11:58:36 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:36 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Auth: Login incorrect: [BSC\\dcaswell] (from client BUWiSM-2-1 port 29 cli 00-12-F0-94-76-83) Mon Sep 4 11:58:36 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:36 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:36 2006 : Auth: Login OK: [BSC\\kbastek] (from client localhost port 0) Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:37 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:37 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:37 2006 : Auth: Login incorrect: [rzanetti] (from client BUWiSM-2-1 port 29 cli 00-13-CE-12-BA-2C) Mon Sep 4 11:58:37 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:37 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:37 2006 : Auth: Login incorrect: [BSC\\carmour] (from client BUWiSM-2-1 port 29 cli 00-0E-9B-A9-34-CF) Mon Sep 4 11:58:37 2006 : Info: rlm_eap_mschapv2: Issuing Challenge Mon Sep 4 11:58:37 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:37 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:37 2006 : Auth: Login incorrect: [HEYGUY\\tmcdonough] (from client BUWiSM-2-1 port 29 cli 00-04-23-4F-C8-93) Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:37 2006 : Auth: Login OK: [a2peters] (from client localhost port 0) Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:37 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:37 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:37 2006 : Auth: Login OK: [a2peters] (from client BUWiSM-1-2 port 29 cli 00-13-02-A5-50-63) Mon Sep 4 11:58:37 2006 : Auth: Login incorrect: [BSC-EXCHANG\\Administrator] (from client BUWiSM-1-1 port 29 cli 00-90-96-B F-91-36) Mon Sep 4 11:58:37 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:37 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:37 2006 : Auth: Login incorrect: [b2white] (from client BUWiSM-2-2 port 29 cli 00-90-4B-B5-2F-EA) Mon Sep 4 11:58:37 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:37 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:38 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Auth: Login incorrect: [BSC\\mlacey] (from client BUWiSM-1-2 port 29 cli 00-11-F5-1E-45-63) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:38 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:38 2006 : Auth: Login incorrect: [BSC\\m6kelley] (from client BUWiSM-2-2 port 29 cli 00-12-F0-7A-FB-A3) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:38 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:38 2006 : Auth: Login incorrect: [BSC\\sthistle] (from client BUWiSM-2-2 port 29 cli 00-90-96-BA-95-F5) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:38 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:38 2006 : Auth: Login incorrect: [a1simpson] (from client BUWiSM-1-2 port 29 cli 00-13-02-B1-BE-6D) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:38 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:38 2006 : Auth: Login incorrect: [rterrien] (from client BUWiSM-1-1 port 29 cli 00-13-02-A5-47-F6) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Auth: Login OK: [BSC\\kbastek] (from client BUWiSM-1-1 port 29 cli 00-90-96-CA-56-58) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:38 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [k2kelliher] (from client BUWiSM-1-1 port 29 cli 00-13-CE-0D-0A-45) Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [jzguro] (from client BUWiSM-1-1 port 29 cli 00-13-CE-1B-52-FF) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [a2peters] (from client BUWiSM-1-1 port 29 cli 00-13-02-A5-50-63) Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [j2nunes] (from client BUWiSM-1-1 port 29 cli 00-13-02-B0-1F-72) Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [j1shepard] (from client BUWiSM-2-2 port 29 cli 00-90-96-F0-D2-CE) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [BSC\\j3coleman] (from client BUWiSM-1-1 port 29 cli 00-90-96-C6-8C-F0) Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [BSC\\bbarbo] (from client BUWiSM-2-2 port 29 cli 00-12-F0-95-5E-D2) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [a1clay] (from client BUWiSM-1-2 port 29 cli 00-13-02-D6-55-93) Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [BSC\\sreddish] (from client BUWiSM-2-2 port 29 cli 00-13-02-83-C0-07) Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [BSC\\c1sweeney] (from client BUWiSM-1-1 port 29 cli 00-90-96-AE-A3-2A) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [rgimler] (from client BUWiSM-2-2 port 29 cli 00-12-F0-7E-D1-76) Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [aroper] (from client BUWiSM-1-1 port 29 cli 00-13-02-B3-1A-A2) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [BSC\\d1neffinger] (from client BUWiSM-1-1 port 29 cli 00-0E-35-95-48-53) Mon Sep 4 11:58:39 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac Mon Sep 4 11:58:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [BSC\\cfarrell] (from client BUWiSM-2-1 port 29 cli 00-13-02-A7-20-7D) Mon Sep 4 11:58:39 2006 : Auth: Login incorrect: [BSC\\adownes] (from client BUWiSM-1-1 port 29 cli 00-13-02-E0-61-CF) Mon Sep 4 11:58:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Mon Sep 4 11:58:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Mon Sep 4 11:58:40 2006 : Error: TLS Alert write:fatal:bad record mac Mon Sep 4 11:58:40 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Sep 4 11:58:40 2006 : Error: rlm_eap: SSL error error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad rec ord mac
"King, Michael" <MKing@bridgew.edu> wrote:
This is the logs that I have from when it happened. Unfortuanly, everything seemed fine after I rebooted the server (my emergency panic hit the reset button response)
It looks like a memory corruption issue. Either there's a bug in the server, or there's bad RAM in the system. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
"King, Michael" <MKing@bridgew.edu> wrote:
Any suggestions on how to test memory on a Debian box remotely?
Google for memory test utilities. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
24 hrs later, Different radius server. (on a different box, this one is RedHat) FreeRadius 1.1.3 Same problem, throwing the same Error. Tue Sep 5 13:24:33 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Tue Sep 5 13:24:33 2006 : Error: TLS Alert write:fatal:bad record mac Tue Sep 5 13:24:33 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Tue Sep 5 13:24:33 2006 : Error: rlm_eap: SSL error error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac Tue Sep 5 13:24:33 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Tue Sep 5 13:24:33 2006 : Auth: Login incorrect: [BSC\\r1chandra] (from client BUWiSM-1-2 port 29 cli 00-90-96-CE-DE-24) Tue Sep 5 13:24:35 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Sep 5 13:24:35 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Tue Sep 5 13:24:35 2006 : Error: TLS Alert write:fatal:bad record mac Tue Sep 5 13:24:35 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Tue Sep 5 13:24:35 2006 : Error: rlm_eap: SSL error error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac Tue Sep 5 13:24:35 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Tue Sep 5 13:24:35 2006 : Auth: Login incorrect: [BSC\\d4johnson] (from client BUWiSM-2-1 port 29 cli 00-13-02-9F-1D-58) Tue Sep 5 13:24:37 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Sep 5 13:24:37 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Tue Sep 5 13:24:37 2006 : Error: TLS Alert write:fatal:bad record mac Tue Sep 5 13:24:37 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Tue Sep 5 13:24:37 2006 : Error: rlm_eap: SSL error error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac Tue Sep 5 13:24:37 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Tue Sep 5 13:24:37 2006 : Auth: Login incorrect: [glowell] (from client BUWiSM-1-2 port 29 cli 00-13-02-A6-B9-60) Tue Sep 5 13:24:38 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Sep 5 13:24:38 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Tue Sep 5 13:24:38 2006 : Error: TLS Alert write:fatal:bad record mac Tue Sep 5 13:24:38 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Tue Sep 5 13:24:38 2006 : Error: rlm_eap: SSL error error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac Tue Sep 5 13:24:38 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Tue Sep 5 13:24:38 2006 : Auth: Login incorrect: [BSC\\mmerrill] (from client BUWiSM-2-1 port 29 cli 00-13-02-AC-AE-68) Tue Sep 5 13:24:39 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Sep 5 13:24:39 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Tue Sep 5 13:24:39 2006 : Error: TLS Alert write:fatal:bad record mac Tue Sep 5 13:24:39 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Tue Sep 5 13:24:39 2006 : Error: rlm_eap: SSL error error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac Tue Sep 5 13:24:39 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Tue Sep 5 13:24:39 2006 : Auth: Login incorrect: [BSC\\jblute] (from client BUWiSM-2-1 port 29 cli 00-13-02-A5-53-20) Tue Sep 5 13:24:43 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Sep 5 13:24:43 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Tue Sep 5 13:24:44 2006 : Error: TLS Alert write:fatal:bad record mac Tue Sep 5 13:24:44 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Tue Sep 5 13:24:44 2006 : Error: rlm_eap: SSL error error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac Tue Sep 5 13:24:44 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Tue Sep 5 13:24:44 2006 : Auth: Login incorrect: [mking] (from client BUWiSM-2-1 port 29 cli 00-0B-7D-1B-B0-BA) Tue Sep 5 13:24:44 2006 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Sep 5 13:24:44 2006 : Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) Tue Sep 5 13:24:44 2006 : Error: TLS Alert write:fatal:bad record mac Tue Sep 5 13:24:44 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Tue Sep 5 13:24:44 2006 : Error: rlm_eap: SSL error error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac Tue Sep 5 13:24:44 2006 : Error: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. Tue Sep 5 13:24:44 2006 : Auth: Login incorrect: [BSC\\kmaccune] (from client BUWiSM-2-1 port 29 cli 00-13-02-BC-EC-22)
"King, Michael" <MKing@bridgew.edu> wrote:
24 hrs later, Different radius server. (on a different box, this one is RedHat) FreeRadius 1.1.3 Same problem, throwing the same Error.
This may be related: https://www.aet.tu-cottbus.de/pipermail/postfix_tls/2002/000353.html ... It ends up that my IMAP server and postfix were using two different self-signed certs that had identical common names. As soon as I began to use the same cert for both servers, the mozilla/netscape problem went away. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
How can I get you more information? It seems to take about 12 hours to happen. I did have this in the message log about 1 hour before hand, but I think it's unrelated Sep 6 09:09:19 radius1 kernel: audit(1157548159.246:31): avc: denied { search } for pid=2699 comm="winbindd" name="lib" dev=dm-0 ino=589826 scontext=user _u:system_r:winbind_t tcontext=system_u:object_r:var_lib_t tclass=dir Sep 6 09:09:19 radius1 kernel: audit(1157548159.246:32): avc: denied { getattr } for pid=2699 comm="winbindd" name="samba" dev=dm-0 ino=589961 scontext=u ser_u:system_r:winbind_t tcontext=system_u:object_r:var_lib_t tclass=dir I've had this happen on two different boxes, on two different distributions. The Certs I'm using are from two different Paid CA's. (One is Geotrust, the other is IPSCA) Neither server has had a cert before. So... Should all the machines be named the same, and have the same cert? (This is what the last email has let me to, but I wouldn't think this is the way you would setup Radius)
-----Original Message----- From: freeradius-users-bounces+mking=bridgew.edu@lists.freeradius.or g [mailto:freeradius-users-bounces+mking=bridgew.edu@lists.freer adius.org] On Behalf Of Alan DeKok Sent: Tuesday, September 05, 2006 3:52 PM To: FreeRadius users mailing list Subject: Re: Failed Logins
"King, Michael" <MKing@bridgew.edu> wrote:
24 hrs later, Different radius server. (on a different box, this one is RedHat) FreeRadius 1.1.3 Same problem, throwing the same Error.
This may be related:
https://www.aet.tu-cottbus.de/pipermail/postfix_tls/2002/000353.html
... It ends up that my IMAP server and postfix were using two different self-signed certs that had identical common names. As soon as I began to use the same cert for both servers, the mozilla/netscape problem went away.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"King, Michael" <MKing@bridgew.edu> wrote:
How can I get you more information?
No idea. I'd ask on an OpenSSL list.
Should all the machines be named the same, and have the same cert?
No, that's not what I read from the email. The email said if you have two different certs with the same name, you'll run into problems. Maybe you have a server cert that you generated a few months ago, but the clients have a server cert with the same name that was generated a year ago. If the errors happen for the same clients, that would appear to be the problem. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
So, I've rolled back to my freeRADIUS 1.0.4 server, cause it hasn't crashed like my 1.1.3 has been doing. I got this today in it's debug logs. Is there a config option to increase the number of threads? Is there a better way to fix that? Wed Sep 6 13:08:22 2006 : Auth: Login OK: [BSC\\j2kelley] (from client localhost port 0) Wed Sep 6 13:08:22 2006 : Info: rlm_eap_tls: Received EAP-TLS ACK message Wed Sep 6 13:08:22 2006 : Info: The maximum number of threads (32) are active, cannot spawn new thread to handle request Wed Sep 6 13:08:22 2006 : Info: The maximum number of threads (32) are active, cannot spawn new thread to handle request Wed Sep 6 13:08:22 2006 : Info: The maximum number of threads (32) are active, cannot spawn new thread to handle request Wed Sep 6 13:08:22 2006 : Info: The maximum number of threads (32) are active, cannot spawn new thread to handle request Wed Sep 6 13:08:22 2006 : Auth: Login OK: [BSC\\j2kelley] (from client New-Network port 29 cli 00-12-F0-88-A6-94) Wed Sep 6 13:08:22 2006 : Auth: Login OK: [BSC\\emulhern] (from client localhost port 0)
"King, Michael" <MKing@bridgew.edu> wrote:
I got this today in it's debug logs. Is there a config option to increase the number of threads? Is there a better way to fix that?
See "thread pool" in radiusd.conf. It looks like your DB is slow...
So, I've rolled back to my freeRADIUS 1.0.4 server, cause it hasn't crashed like my 1.1.3 has been doing.
Very weird, and very annoying. Maybe running it under valgrind will help? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
-----Original Message----- See "thread pool" in radiusd.conf.
It looks like your DB is slow...
Entirely possible. It is Active Directory (Via the ntlm_auth program) so I have no control over it. :-(
So, I've rolled back to my freeRADIUS 1.0.4 server, cause it hasn't crashed like my 1.1.3 has been doing.
Very weird, and very annoying. Maybe running it under valgrind will help?
Got a good howto out on the Interweb.....?
participants (3)
-
Alan DeKok -
King, Michael -
Shankar Ganesh C