RE: Version 1.1.1 stops responding
I'm running it in debug mode (and piping it to a file) Freeradius -X -A >crash.log After a few hours this is what I got. On the command line. rad2:/home/mking# /usr/sbin/freeradius -X -A >crash.log Killed rad2:/home/mking# The last few lines from the log file are rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello And that's it? Unfortunatly, I deleted the log file by mistake. (I really should drink my coffee before typing) I'm attempting to recreate it now. It shouldn't be long, (I hope)
Hi, I have a follow-up as well. After configuring everything for doing SIGHUPs it turned out that after a SIGHUP, the process sits there and does nothing any more. When I did "killall -HUP radiusd" in non-debug mode, the process kept running, but didn't process anything any more. When I did it in -X mode, it segfaulted. The end of the -X output is: Sending Access-Accept of id 132 to 158.64.X.Y port 10270 Finished request 328 Going to the next request Cleaning up request 315 ID 35 with timestamp 442404d4 Waking up in 1 seconds... Waking up in 1 seconds... Reloading configuration files. reread_config: reading radiusd.conf Config: including file: /etc/raddb/proxy.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/eap.conf Config: including file: /etc/raddb/sql-normal-vpn.conf Config: including file: /etc/raddb/sql-normal-eduroam.conf Config: including file: /etc/raddb/sql-luxdsl-cops.conf Config: including file: /etc/raddb/sql-luxdsl-erx.conf main: prefix = "/usr/local/freeradius" main: localstatedir = "/var" main: logdir = "/var/log/radius" main: libdir = "/usr/local/freeradius/lib" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/radiusd/radiusd.pid" main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/freeradius/sbin/checkrad" main: proxy_requests = yes security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms Segmentation fault HTH, Stefan Winter -- Stefan WINTER RESTENA Foundation - Réseau Téléinformatique de l'Education Nationale et de la Recherche R&D Engineer 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg email: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Stefan Winter <stefan.winter@restena.lu> wrote:
When I did it in -X mode, it segfaulted. The end of the -X output is: ...
Could you do the same, but with core dumps enabled (ulimit -c unlimited) and symbols? That would help a lot in tracking down the problem. Also, what OS you're running on, etc. Alan DeKok.
List, Hello: I've got the sql postauth working for Valid Logins, but rlm_sql does not even call sql_postauth if the login fails. Is this by design, or do I have a configuration error? PROCESSES SQL_POSTAUTH: Login OK: [intermapper] (from client intermapper port 0) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 14 rlm_sql (sql): Processing sql_postauth radius_xlat: 'intermapper' rlm_sql (sql): sql_set_user escaped user --> 'intermapper' radius_xlat: 'insert into radauth (UserName, Password, RadReply, NASIPAddress, NASIdentifier, NASPort, CalledStationId, CallingStationId) values ('intermapper', 'password', 'Access-Accept', '10.15.1.15', '', '', '', '')' rlm_sql (sql) in sql_postauth: query is insert into radauth (UserName, Password, RadReply, NASIPAddress, NASIdentifier, NASPort, CalledStationId, CallingStationId) values ('intermapper', 'password', 'Access-Accept', '10.15.1.15', '', '', '', '') rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Released sql socket id: 4 DOESNT PROCESS SQL_POSTAUTH: rlm_sql (sql): sql_set_user escaped user --> '00111AE0D100' radius_xlat: 'select id, username, attribute, value, op from radcheck where username = '00111AE0D100' order by id' rlm_sql (sql): Reserving sql socket id: 0 rlm_sql (sql): User 00111AE0D100 not found in radcheck radius_xlat: '' radius_xlat: 'select radgroupreply.id, radgroupreply.groupname, radgroupreply.attribute, radgroupreply.value, radgroupreply.op from radgroupreply, usergroup where usergroup.username = '00111AE0D100' and usergroup.groupname = radgroupreply.groupname order by radgroupreply.id' rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns ok for request 6 modcall[authorize]: module "files" returns notfound for request 6 modcall: leaving group authorize (returns ok) for request 6 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Login incorrect: [00111AE0D100/12810341630068900201] (from client ubr7223 port 60000) Sending Access-Reject of id 222 to 63.252.228.2 port 21745 Finished request 6 Going to the next request --- Walking the entire request list --- Waking up in 5 seconds...
"Duane Cox" <duanec@mail.illicom.net> wrote:
I've got the sql postauth working for Valid Logins, but rlm_sql does not even call sql_postauth if the login fails.
You must list sql in the "reject" subsection of postauth. See the default configs. Alan DeKok.
participants (4)
-
Alan DeKok -
Duane Cox -
King, Michael -
Stefan Winter