We're getting ready for the release of 3.0.10. Please do a last double-check to be sure it's OK. We've added a LOT of tests since 3.0.9. The tests make sure that future code changes will be caught by the test cases before they're seen in production. :) The list of changed or added tests follows: src/tests/eapsim-03/radiusd-example.txt src/tests/keywords/count-error src/tests/keywords/else-error src/tests/keywords/foreach-break-4 src/tests/keywords/radiusd.conf src/tests/keywords/switch-escape src/tests/keywords/switch-virtual src/tests/keywords/update-delete src/tests/keywords/virtual src/tests/keywords/virtual-load-balance src/tests/keywords/virtual_policy src/tests/keywords/with_dots src/tests/map/base src/tests/map/base.out src/tests/map/count-error src/tests/map/count-list-error src/tests/map/map_tests.mk src/tests/map/map_unit.c src/tests/map/map_unit.mk src/tests/modules/ldap/groups_rfc2307bis.unlang src/tests/peap-client-mschapv2.conf src/tests/unit/rfc.txt src/tests/unit/tunnel.txt src/tests/unit/vendor.txt src/tests/unit/xlat.txt Alan DeKok.
I am using the latest version perfectly! # freeradius -v | head -1 freeradius: FreeRADIUS Version 3.0.10 (git #37b7b52), for host x86_64-pc-linux-gnu, built on Sep 16 2015 at 18:51:30 # for me, go ahead! -- Jorge Pereira On Wed, Sep 16, 2015 at 4:18 PM, Alan DeKok <aland@deployingradius.com> wrote:
We're getting ready for the release of 3.0.10. Please do a last double-check to be sure it's OK.
We've added a LOT of tests since 3.0.9. The tests make sure that future code changes will be caught by the test cases before they're seen in production. :)
The list of changed or added tests follows:
src/tests/eapsim-03/radiusd-example.txt src/tests/keywords/count-error src/tests/keywords/else-error src/tests/keywords/foreach-break-4 src/tests/keywords/radiusd.conf src/tests/keywords/switch-escape src/tests/keywords/switch-virtual src/tests/keywords/update-delete src/tests/keywords/virtual src/tests/keywords/virtual-load-balance src/tests/keywords/virtual_policy src/tests/keywords/with_dots src/tests/map/base src/tests/map/base.out src/tests/map/count-error src/tests/map/count-list-error src/tests/map/map_tests.mk src/tests/map/map_unit.c src/tests/map/map_unit.mk src/tests/modules/ldap/groups_rfc2307bis.unlang src/tests/peap-client-mschapv2.conf src/tests/unit/rfc.txt src/tests/unit/tunnel.txt src/tests/unit/vendor.txt src/tests/unit/xlat.txt
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I just saw this pop up in my logs: This is on 3.0.10 RHEL 6. I will see if I can get one of my package maintainers to attach a debugger and post more info (if I can find the instructions.) Dave SOFT ASSERT FAILED src/lib/value.c[1468]: ret == (len - 1) CAUGHT SIGNAL: User defined signal 1 Backtrace of last 24 frames: /usr/lib64/freeradius/libfreeradius-radius.so(fr_fault+0xee)[0x37c7a0c24e] /usr/lib64/freeradius/libfreeradius-radius.so(fr_assert_cond+0x27)[0x37c7a0c4c7] /usr/lib64/freeradius/libfreeradius-radius.so(value_data_aprints+0x1c8)[0x37c7a27468] /usr/lib64/freeradius/libfreeradius-server.so[0x37c9623370] /usr/lib64/freeradius/libfreeradius-server.so[0x37c9623db8] /usr/lib64/freeradius/libfreeradius-server.so[0x37c96237cf] /usr/lib64/freeradius/libfreeradius-server.so[0x37c9623f11] /usr/lib64/freeradius/libfreeradius-server.so[0x37c9623f7d] /usr/lib64/freeradius/libfreeradius-server.so(map_to_vp+0x2a3)[0x37c96166b3] /usr/lib64/freeradius/libfreeradius-server.so(map_to_request+0x155)[0x37c9615635] /usr/sbin/radiusd[0x426725] /usr/sbin/radiusd[0x4274ba] /usr/sbin/radiusd[0x425fca] /usr/sbin/radiusd[0x4274ba] /usr/sbin/radiusd[0x425fca] /usr/sbin/radiusd[0x4274ba] /usr/sbin/radiusd[0x425fca] /usr/sbin/radiusd(modcall+0x45)[0x427565] /usr/sbin/radiusd(indexed_modcall+0xb5)[0x4204b5] /usr/sbin/radiusd(rad_accounting+0x65)[0x40eb85] /usr/sbin/radiusd[0x436ae7] /usr/sbin/radiusd[0x42dfda] /lib64/libpthread.so.0[0x37c6207a51] /lib64/libc.so.6(clone+0x6d)[0x37c5ee89ad] No panic action set On Wed, 2015-09-16 at 15:18 -0400, Alan DeKok wrote: We're getting ready for the release of 3.0.10. Please do a last double-check to be sure it's OK. We've added a LOT of tests since 3.0.9. The tests make sure that future code changes will be caught by the test cases before they're seen in production. :) The list of changed or added tests follows: src/tests/eapsim-03/radiusd-example.txt src/tests/keywords/count-error src/tests/keywords/else-error src/tests/keywords/foreach-break-4 src/tests/keywords/radiusd.conf src/tests/keywords/switch-escape src/tests/keywords/switch-virtual src/tests/keywords/update-delete src/tests/keywords/virtual src/tests/keywords/virtual-load-balance src/tests/keywords/virtual_policy src/tests/keywords/with_dots src/tests/map/base src/tests/map/base.out src/tests/map/count-error src/tests/map/count-list-error src/tests/map/map_tests.mk src/tests/map/map_unit.c src/tests/map/map_unit.mk src/tests/modules/ldap/groups_rfc2307bis.unlang src/tests/peap-client-mschapv2.conf src/tests/unit/rfc.txt src/tests/unit/tunnel.txt src/tests/unit/vendor.txt src/tests/unit/xlat.txt Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Thu, Sep 17, 2015 at 06:56:33PM +0000, David Aldwinckle wrote:
SOFT ASSERT FAILED src/lib/value.c[1468]: ret == (len - 1) CAUGHT SIGNAL: User defined signal 1 ...
No panic action set
This should help - see panic_action in radiusd.conf Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
On Sep 17, 2015, at 2:56 PM, David Aldwinckle <daldwinc@uwaterloo.ca> wrote:
I just saw this pop up in my logs:
This is on 3.0.10 RHEL 6. I will see if I can get one of my package maintainers to attach a debugger and post more info (if I can find the instructions.)
Dave
SOFT ASSERT FAILED src/lib/value.c[1468]: ret == (len - 1)
Hmm.. not good, but not catastrophic. It would be good to know the values of ret, len, and data, and where it's being called from. Otherwise it's difficult to know what's going wrong, and why. Alan DeKok.
I set the panic action in radiusd.conf to the suggestion for production systems (though this is dev.) "gdb -silent -x ${raddbdir}/panic.gdb %e %p 2>&1 | tee ${logdir}/gdb-${name}-%p.log" Now to wait... On Thu, 2015-09-17 at 16:40 -0400, Alan DeKok wrote: On Sep 17, 2015, at 2:56 PM, David Aldwinckle <daldwinc@uwaterloo.ca<mailto:daldwinc@uwaterloo.ca>> wrote:
I just saw this pop up in my logs:
This is on 3.0.10 RHEL 6. I will see if I can get one of my package maintainers to attach a debugger and post more info (if I can find the instructions.)
Dave
SOFT ASSERT FAILED src/lib/value.c[1468]: ret == (len - 1)
Hmm.. not good, but not catastrophic. It would be good to know the values of ret, len, and data, and where it's being called from. Otherwise it's difficult to know what's going wrong, and why. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sep 18, 2015, at 7:31 AM, David Aldwinckle <daldwinc@uwaterloo.ca> wrote:
I set the panic action in radiusd.conf to the suggestion for production systems (though this is dev.)
"gdb -silent -x ${raddbdir}/panic.gdb %e %p 2>&1 | tee ${logdir}/gdb-${name}-%p.log"
Now to wait...
If you don't get anything soon, please try the v3.0.x branch again. I've pushed a fix which means that two problematic functions are now one. So the assert will never get hit. Alan DeKok.
Hopefully this helps! SOFT ASSERT FAILED src/lib/value.c[1468]: ret == (len - 1) CAUGHT SIGNAL: User defined signal 1 Backtrace of last 24 frames: /usr/lib64/freeradius/libfreeradius-radius.so(fr_fault+0xee)[0x3c5660c24e] /usr/lib64/freeradius/libfreeradius-radius.so(fr_assert_cond+0x27)[0x3c5660c4c7] /usr/lib64/freeradius/libfreeradius-radius.so(value_data_aprints+0x1c8)[0x3c56627468] /usr/lib64/freeradius/libfreeradius-server.so[0x3c56e23370] /usr/lib64/freeradius/libfreeradius-server.so[0x3c56e23db8] /usr/lib64/freeradius/libfreeradius-server.so[0x3c56e237cf] /usr/lib64/freeradius/libfreeradius-server.so[0x3c56e23f11] /usr/lib64/freeradius/libfreeradius-server.so[0x3c56e23f7d] /usr/lib64/freeradius/libfreeradius-server.so(map_to_vp+0x2a3)[0x3c56e166b3] /usr/lib64/freeradius/libfreeradius-server.so(map_to_request+0x155)[0x3c56e15635] /usr/sbin/radiusd[0x426725] /usr/sbin/radiusd[0x4274ba] /usr/sbin/radiusd[0x425fca] /usr/sbin/radiusd[0x4274ba] /usr/sbin/radiusd[0x425fca] /usr/sbin/radiusd[0x4274ba] /usr/sbin/radiusd[0x425fca] /usr/sbin/radiusd(modcall+0x45)[0x427565] /usr/sbin/radiusd(indexed_modcall+0xb5)[0x4204b5] /usr/sbin/radiusd(rad_accounting+0x65)[0x40eb85] /usr/sbin/radiusd[0x436ae7] /usr/sbin/radiusd[0x42dfda] /lib64/libpthread.so.0[0x3c53607a51] /lib64/libc.so.6(clone+0x6d)[0x3c532e89ad] Calling: gdb -silent -x /etc/raddb/panic.gdb /usr/sbin/radiusd 1913 2>&1 | tee /var/log/radius/gdb-radiusd-1913.log Panic action exited with 0 ^C # cat /var/log/radius/gdb-radiusd-1913.log Reading symbols from /usr/sbin/radiusd...Reading symbols from /usr/lib/debug/usr/sbin/radiusd.debug...done. done. Attaching to program: /usr/sbin/radiusd, process 1913 Reading symbols from /usr/lib64/freeradius/libfreeradius-server.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-server.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-server.so Reading symbols from /usr/lib64/freeradius/libfreeradius-radius.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-radius.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-radius.so Reading symbols from /usr/lib64/freeradius/libfreeradius-eap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-eap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-eap.so Reading symbols from /usr/lib64/libcrypto.so.10...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libcrypto.so.10 Reading symbols from /usr/lib64/libssl.so.10...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libssl.so.10 Reading symbols from /usr/lib64/libtalloc.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libtalloc.so.2 Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [New LWP 1918] [New LWP 1917] [New LWP 1916] [New LWP 1915] [New LWP 1914] [Thread debugging using libthread_db enabled] Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libreadline.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libreadline.so.6 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /usr/lib64/libpcap.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libpcap.so.1 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /lib64/libgssapi_krb5.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libgssapi_krb5.so.2 Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /lib64/libk5crypto.so.3 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libtinfo.so.5...(no debugging symbols found)...done. Loaded symbols for /lib64/libtinfo.so.5 Reading symbols from /lib64/libfreebl3.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libfreebl3.so Reading symbols from /lib64/libkrb5support.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /usr/lib64/freeradius/rlm_digest.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_digest.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_digest.so Reading symbols from /usr/lib64/freeradius/rlm_eap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap.so Reading symbols from /usr/lib64/freeradius/rlm_dhcp.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_dhcp.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_dhcp.so Reading symbols from /usr/lib64/freeradius/libfreeradius-dhcp.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/libfreeradius-dhcp.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/libfreeradius-dhcp.so Reading symbols from /usr/lib64/freeradius/rlm_logintime.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_logintime.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_logintime.so Reading symbols from /usr/lib64/freeradius/rlm_expr.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_expr.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_expr.so Reading symbols from /usr/lib64/freeradius/rlm_unix.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_unix.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_unix.so Reading symbols from /usr/lib64/freeradius/rlm_chap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_chap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_chap.so Reading symbols from /usr/lib64/freeradius/rlm_exec.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_exec.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_exec.so Reading symbols from /usr/lib64/freeradius/rlm_utf8.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_utf8.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_utf8.so Reading symbols from /usr/lib64/freeradius/rlm_replicate.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_replicate.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_replicate.so Reading symbols from /usr/lib64/freeradius/rlm_radutmp.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_radutmp.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_radutmp.so Reading symbols from /usr/lib64/freeradius/rlm_ldap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_ldap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_ldap.so Reading symbols from /lib64/libldap-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libldap-2.4.so.2 Reading symbols from /lib64/liblber-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/liblber-2.4.so.2 Reading symbols from /usr/lib64/libsasl2.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from /usr/lib64/libssl3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libssl3.so Reading symbols from /usr/lib64/libsmime3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsmime3.so Reading symbols from /usr/lib64/libnss3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnss3.so Reading symbols from /usr/lib64/libnssutil3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnssutil3.so Reading symbols from /lib64/libplds4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libplds4.so Reading symbols from /lib64/libplc4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libplc4.so Reading symbols from /lib64/libnspr4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libnspr4.so Reading symbols from /usr/lib64/freeradius/rlm_detail.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_detail.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_detail.so Reading symbols from /usr/lib64/freeradius/rlm_preprocess.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_preprocess.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_preprocess.so Reading symbols from /usr/lib64/freeradius/rlm_pap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_pap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_pap.so Reading symbols from /usr/lib64/freeradius/rlm_expiration.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_expiration.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_expiration.so Reading symbols from /usr/lib64/freeradius/rlm_linelog.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_linelog.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_linelog.so Reading symbols from /usr/lib64/freeradius/rlm_attr_filter.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_attr_filter.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_attr_filter.so Reading symbols from /usr/lib64/freeradius/rlm_files.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_files.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_files.so Reading symbols from /usr/lib64/freeradius/rlm_soh.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_soh.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_soh.so Reading symbols from /usr/lib64/freeradius/rlm_unpack.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_unpack.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_unpack.so Reading symbols from /usr/lib64/freeradius/rlm_mschap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_mschap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_mschap.so Reading symbols from /usr/lib64/freeradius/rlm_cache.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_cache.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_cache.so Reading symbols from /usr/lib64/freeradius/rlm_dynamic_clients.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_dynamic_clients.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_dynamic_clients.so Reading symbols from /usr/lib64/freeradius/rlm_always.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_always.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_always.so Reading symbols from /usr/lib64/freeradius/rlm_realm.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_realm.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_realm.so Reading symbols from /usr/lib64/freeradius/rlm_passwd.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_passwd.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_passwd.so Reading symbols from /usr/lib64/freeradius/rlm_eap_md5.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_md5.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_md5.so Reading symbols from /usr/lib64/freeradius/rlm_eap_leap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_leap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_leap.so Reading symbols from /usr/lib64/freeradius/rlm_eap_gtc.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_gtc.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_gtc.so Reading symbols from /usr/lib64/freeradius/rlm_eap_tls.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_tls.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_tls.so Reading symbols from /usr/lib64/freeradius/rlm_eap_peap.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_peap.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_peap.so Reading symbols from /usr/lib64/freeradius/rlm_eap_mschapv2.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_eap_mschapv2.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_eap_mschapv2.so Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libnss_dns.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_dns.so.2 Reading symbols from /usr/lib64/libsoftokn3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsoftokn3.so Reading symbols from /usr/lib64/libsqlite3.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsqlite3.so.0 Reading symbols from /usr/lib64/libfreeblpriv3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libfreeblpriv3.so Reading symbols from /usr/lib64/libnsspem.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnsspem.so Reading symbols from /usr/lib64/libnssdbm3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnssdbm3.so Reading symbols from /usr/lib64/freeradius/rlm_cache_rbtree.so...Reading symbols from /usr/lib/debug/usr/lib64/freeradius/rlm_cache_rbtree.so.debug...done. done. Loaded symbols for /usr/lib64/freeradius/rlm_cache_rbtree.so 0x0000003c532e1423 in select () from /lib64/libc.so.6 No symbol table info available. No symbol table info available. Thread 6 (Thread 0x7f62dc264700 (LWP 1914)): #0 0x0000003c5360d9b0 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x000000000042dc44 in request_handler_thread (arg=0x18ecab0) at src/main/threads.c:621 self = 0x18ecab0 #2 0x0000003c53607a51 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000003c532e89ad in clone () from /lib64/libc.so.6 No symbol table info available. Thread 5 (Thread 0x7f62db863700 (LWP 1915)): #0 0x0000003c532ac70d in waitpid () from /lib64/libc.so.6 No symbol table info available. #1 0x0000003c5323e609 in do_system () from /lib64/libc.so.6 No symbol table info available. #2 0x0000003c5323e940 in system () from /lib64/libc.so.6 No symbol table info available. #3 0x0000003c5660c330 in fr_fault (sig=10) at src/lib/debug.c:728 disable = false cmd = "gdb -silent -x /etc/raddb/panic.gdb /usr/sbin/radiusd 1913 2>&1 | tee /var/log/radius/gdb-radiusd-1913.log", '\000' <repeats 425 times> out = 0x7f62db860186 ".log" left = 430 ret = <value optimized out> p = 0x3c5683d9a2 ".log" q = 0x0 code = <value optimized out> #4 0x0000003c5660c4c7 in fr_assert_cond (file=<value optimized out>, line=<value optimized out>, expr=<value optimized out>, cond=false) at src/lib/debug.c:1106 No locals. #5 0x0000003c56627468 in value_data_aprints (ctx=0x184e2f0, type=<value optimized out>, enumv=<value optimized out>, data=0x184dd00, inlen=1, quote=34 '"') at src/lib/value.c:1468 len = 1 ret = <value optimized out> p = 0x184e470 "" i = <value optimized out> #6 0x0000003c56e23370 in xlat_getvp (ctx=0x184e2f0, request=0x184d9a0, node=0x18ebea0, escape=0, escape_ctx=0x16f2b00, lvl=0) at src/main/xlat.c:2089 vp = <value optimized out> virtual = <value optimized out> packet = <value optimized out> dv = <value optimized out> ret = 0x0 cursor = {first = 0x184d878, found = 0x184dcd0, last = 0x0, current = 0x184dcd0, next = 0x184ddd0} quote = 34 '"' return_null = true #7 xlat_aprint (ctx=0x184e2f0, request=0x184d9a0, node=0x18ebea0, escape=0, escape_ctx=0x16f2b00, lvl=0) at src/main/xlat.c:2227 rcode = <value optimized out> str = 0x0 child = <value optimized out> p = <value optimized out> #8 0x0000003c56e23db8 in xlat_process (out=0x7f62db860620, request=0x184d9a0, head=<value optimized out>, escape=0, escape_ctx=0x16f2b00) at src/main/xlat.c:2419 i = <value optimized out> list = 11 total = <value optimized out> array = 0x184e2f0 answer = <value optimized out> node = <value optimized out> #9 0x0000003c56e237cf in xlat_aprint (ctx=0x184d9a0, request=0x184d9a0, node=0x18eb920, escape=0, escape_ctx=0x0, lvl=0) at src/main/xlat.c:2250 rcode = <value optimized out> str = 0x0 child = <value optimized out> p = <value optimized out> #10 0x0000003c56e23f11 in xlat_process (out=0x7f62db860708, request=0x184d9a0, head=<value optimized out>, escape=0, escape_ctx=0x0) at src/main/xlat.c:2401 i = <value optimized out> list = <value optimized out> total = <value optimized out> array = <value optimized out> answer = <value optimized out> node = <value optimized out> #11 0x0000003c56e23f7d in xlat_expand_struct (out=0x7f62db860808, outlen=0, request=<value optimized out>, node=<value optimized out>, escape=<value optimized out>, escape_ctx=<value optimized out>) at src/main/xlat.c:2473 buff = <value optimized out> len = <value optimized out> #12 0x0000003c56e166b3 in map_to_vp (ctx=0x184d800, out=0x7f62db860d50, request=0x184d9a0, map=0x18e3490, uctx=<value optimized out>) at src/main/map.c:808 rcode = 0 len = <value optimized out> vp = 0x0 new = 0x184e250 found = 0x0 context = 0x184d9a0 cursor = {first = 0x7f62db860810, found = 0x55fc21ac, last = 0x0, current = 0x7f62c802aeb0, next = 0x1b2} slen = <value optimized out> str = 0x0 #13 0x0000003c56e15635 in map_to_request (request=0x184d9a0, map=0x18e3490, func=0x3c56e16410 <map_to_vp>, ctx=0x0) at src/main/map.c:1123 rcode = 0 num = <value optimized out> list = 0x184d878 vp = <value optimized out> dst = <value optimized out> head = 0x0 found = false context = 0x184d9a0 parent = 0x184d800 dst_list = {first = 0x18db730, found = 0x1851210, last = 0x1851258, current = 0x3c5327a201, next = 0xc6} src_list = {first = 0x3c56e290f0, found = 0x149af50, last = 0x1851210, current = 0x3c56611c1b, next = 0x3bb} exp_map = {lhs = 0x0, rhs = 0x0, op = T_INVALID, ci = 0x3c5660d694, next = 0x0} exp_lhs = {type = TMPL_TYPE_UNKNOWN, name = 0x3c532c1c14 "\351\023\373\377\377D\215h\001\071\325D\017N\350A\215u\377D\211\362H\211߉L$\020\350z^\377\377A9\355\211CL\213L$\020u\020\071\351~\fLc\365G\213\004\267A9\350tg\211\350\306Cd", len = 0, quote = 5 '\005', auto_converted = 139, iflag = 39, mflag = 83, data = {attribute = {request = REQUEST_UNKNOWN, list = PAIR_LIST_UNKNOWN, da = 0x3000000002, unknown = {da = "[\000\000\000|\000\000\000w", '\000' <repeats 23 times>, "\020\000\000\000\000\000\000\000 \017\206\333b\177\000\000\000\000\000\000\000\000\000\000\001", '\000' <repeats 23 times>, "`\254\216\001\000\000\000\000\001\000\000\000\000\000\000\000 \017\206\333b\177\000\000\027x,S<\000\000\000\020\022\205\001\000\000\000\000P\024\206\333b\177\000\000\260\266\215\001\000\000\000\000\020\022\205\001\000\000\000\000P\024\206", <incomplete sequence \333>, name = "[\000\000\000|\000\000\000w", '\000' <repeats 23 times>, "\020\000\000\000\000\000\000\000 \017\206\333b\177\000\000\000\000\000\000\000\000\000\000\001", '\000' <repeats 23 times>, "`\254\216\001\000\000\000\000\001\000\000\000\000\000\000\000 \017\206\333b\177\000\000\027x,S<\000\000\000\020\022\205\001\000\000\000\000P\024\206\333b\177\000\000\260\266\215\001\000\000\000\000\020\022\205\001\000\000\000\000P\024\206", <incomplete sequence \333>}, num = 32610, tag = 0 '\000'}, literal = {type = PW_TYPE_INVALID, length = 206158430210, data = {strvalue = 0x7c0000005b <Address 0x7c0000005b out of bounds>, octets = 0x7c0000005b <Address 0x7c0000005b out of bounds>, integer = 91, ipaddr = {s_addr = 91}, date = 91, filter = {532575944795, 119, 0, 0}, ifid = "[\000\000\000|\000\000", ipv6addr = {__in6_u = {__u6_addr8 = "[\000\000\000|\000\000\000w\000\000\000\000\000\000", __u6_addr16 = {91, 0, 124, 0, 119, 0, 0, 0}, __u6_addr32 = {91, 124, 119, 0}}}, ipv6prefix = "[\000\000\000|\000\000\000w\000\000\000\000\000\000\000\000", byte = 91 '[', ushort = 91, ether = "[\000\000\000|", sinteger = 91, integer64 = 532575944795, ipv4prefix = "[\000\000\000|", ptr = 0x7c0000005b}}, xlat = 0x0, preg = 0x0}} #14 0x0000000000426725 in modcall_recurse (request=0x184d9a0, component=MOD_PREACCT, depth=3, entry=<value optimized out>, do_next_sibling=true) at src/main/modcall.c:592 rcode = <value optimized out> g = <value optimized out> map = 0x18e3490 if_taken = false was_if = false c = <value optimized out> priority = <value optimized out> result = RLM_MODULE_UNKNOWN #15 0x00000000004274ba in modcall_child (request=<value optimized out>, component=<value optimized out>, depth=<value optimized out>, entry=0x7f62db8629d0, c=<value optimized out>, result=0x7f62db86165c, do_next_sibling=true) at src/main/modcall.c:408 next = 0x7f62db8629e8 #16 0x0000000000425fca in modcall_recurse (request=0x184d9a0, component=MOD_PREACCT, depth=2, entry=<value optimized out>, do_next_sibling=true) at src/main/modcall.c:780 g = 0x18e37b0 if_taken = false was_if = false c = <value optimized out> priority = <value optimized out> result = RLM_MODULE_UNKNOWN #17 0x00000000004274ba in modcall_child (request=<value optimized out>, component=<value optimized out>, depth=<value optimized out>, entry=0x7f62db8629b8, c=<value optimized out>, result=0x7f62db861d2c, do_next_sibling=true) at src/main/modcall.c:408 next = 0x7f62db8629d0 #18 0x0000000000425fca in modcall_recurse (request=0x184d9a0, component=MOD_PREACCT, depth=1, entry=<value optimized out>, do_next_sibling=true) at src/main/modcall.c:780 g = 0x18e3090 if_taken = false was_if = false c = <value optimized out> priority = <value optimized out> result = RLM_MODULE_OK #19 0x00000000004274ba in modcall_child (request=<value optimized out>, component=<value optimized out>, depth=<value optimized out>, entry=0x7f62db8629a0, c=<value optimized out>, result=0x7f62db8623fc, do_next_sibling=true) at src/main/modcall.c:408 next = 0x7f62db8629b8 #20 0x0000000000425fca in modcall_recurse (request=0x184d9a0, component=MOD_PREACCT, depth=0, entry=<value optimized out>, do_next_sibling=true) at src/main/modcall.c:780 g = 0x18e2ef0 if_taken = false was_if = false c = <value optimized out> priority = <value optimized out> result = RLM_MODULE_UNKNOWN #21 0x0000000000427565 in modcall (component=<value optimized out>, c=<value optimized out>, request=<value optimized out>) at src/main/modcall.c:1125 stack = {{result = RLM_MODULE_NOOP, priority = 0, unwind = 0, c = 0x18e2ef0}, {result = RLM_MODULE_OK, priority = 2, unwind = 0, c = 0x18e3090}, {result = RLM_MODULE_OK, priority = 0, unwind = 0, c = 0x18e37b0}, {result = RLM_MODULE_OK, priority = 0, unwind = 0, c = 0x18e3d30}, {result = RLM_MODULE_REJECT, priority = 0, unwind = 0, c = 0x0} <repeats 28 times>} #22 0x00000000004204b5 in indexed_modcall (comp=MOD_PREACCT, idx=0, request=0x184d9a0) at src/main/modules.c:1003 rcode = <value optimized out> list = 0x18e2ef0 server = 0x18de560 #23 0x000000000040eb85 in rad_accounting (request=0x184d9a0) at src/main/acct.c:56 vp = <value optimized out> acct_type = 0 result = 2 #24 0x0000000000436ae7 in request_running (request=0x184d9a0, action=<value optimized out>) at src/main/process.c:1526 __FUNCTION__ = "request_running" #25 0x000000000042dfda in request_handler_thread (arg=0x18f73c0) at src/main/threads.c:690 self = 0x18f73c0 #26 0x0000003c53607a51 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #27 0x0000003c532e89ad in clone () from /lib64/libc.so.6 No symbol table info available. Thread 4 (Thread 0x7f62dae62700 (LWP 1916)): #0 0x0000003c5360d9b0 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x000000000042dc44 in request_handler_thread (arg=0x18f7550) at src/main/threads.c:621 self = 0x18f7550 #2 0x0000003c53607a51 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000003c532e89ad in clone () from /lib64/libc.so.6 No symbol table info available. Thread 3 (Thread 0x7f62da461700 (LWP 1917)): #0 0x0000003c5360d9b0 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x000000000042dc44 in request_handler_thread (arg=0x18f76e0) at src/main/threads.c:621 self = 0x18f76e0 #2 0x0000003c53607a51 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000003c532e89ad in clone () from /lib64/libc.so.6 No symbol table info available. Thread 2 (Thread 0x7f62d9a60700 (LWP 1918)): #0 0x0000003c5360d9b0 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x000000000042dc44 in request_handler_thread (arg=0x18f7870) at src/main/threads.c:621 self = 0x18f7870 #2 0x0000003c53607a51 in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000003c532e89ad in clone () from /lib64/libc.so.6 No symbol table info available. Thread 1 (Thread 0x7f62e27b97e0 (LWP 1913)): #0 0x0000003c532e1423 in select () from /lib64/libc.so.6 No symbol table info available. #1 0x0000003c56629fc3 in fr_event_loop (el=0x16e8c90) at src/lib/event.c:600 i = <value optimized out> rcode = <value optimized out> when = {tv_sec = 0, tv_usec = 279030} wake = <value optimized out> maxfd = 15 read_fds = {fds_bits = {62464, 0 <repeats 15 times>}} master_fds = {fds_bits = {62464, 0 <repeats 15 times>}} #2 0x0000000000427f64 in main (argc=<value optimized out>, argv=<value optimized out>) at src/main/radiusd.c:579 rcode = 0 status = <value optimized out> argval = <value optimized out> spawn_flag = true display_version = false flag = 0 from_child = {4, 5} state = 0x66b200 autofree = 0x1479060 A debugging session is active. Inferior 1 [process 1913] will be detached. Quit anyway? (y or n) [answered Y; input not from terminal] On Fri, 2015-09-18 at 09:46 -0400, Alan DeKok wrote: On Sep 18, 2015, at 7:31 AM, David Aldwinckle <daldwinc@uwaterloo.ca<mailto:daldwinc@uwaterloo.ca>> wrote:
I set the panic action in radiusd.conf to the suggestion for production systems (though this is dev.)
"gdb -silent -x ${raddbdir}/panic.gdb %e %p 2>&1 | tee ${logdir}/gdb-${name}-%p.log"
Now to wait...
If you don't get anything soon, please try the v3.0.x branch again. I've pushed a fix which means that two problematic functions are now one. So the assert will never get hit. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sep 18, 2015, at 11:27 AM, David Aldwinckle <daldwinc@uwaterloo.ca> wrote:
Hopefully this helps! ... #5 0x0000003c56627468 in value_data_aprints (ctx=0x184e2f0, type=<value optimized out>, enumv=<value optimized out>, data=0x184dd00, inlen=1, quote=34 '"') at src/lib/value.c:1468 len = 1 ret = <value optimized out> p = 0x184e470 ""
Hmm... that's an empty string. The code SHOULD be able to handle empty strings. In any case, the changes I pushed this morning should fix the issue. Alan DeKok.
Hmm, after a few days of proper operation of last week's 3.0.x, this morning I got the following: Bad talloc magic value - unknown value talloc abort: Bad talloc magic value - unknown value CAUGHT SIGNAL: Aborted Backtrace of last 23 frames: /usr/local/freeradius/3.0.x-20150915-101k/lib64/libfreeradius-radius.so(fr_fault+0x13e)[0x7fa47aa9072e] /usr/local/freeradius/3.0.x-20150915-101k/lib64/libfreeradius-radius.so(+0xe66b)[0x7fa47aa9166b] /usr/lib64/libtalloc.so.2(_talloc_get_type_abort+0xdc)[0x7fa47a0192dc] /usr/local/freeradius/3.0.x-20150915-101k/lib64/libfreeradius-radius.so(fr_pair_verify+0x8a)[0x7fa47aaa172a] /usr/local/freeradius/3.0.x-20150915-101k/lib64/libfreeradius-radius.so(fr_pair_add+0x8b)[0x7fa47aaa25bb] /usr/local/freeradius/3.0.x-20150915-101k/lib64/libfreeradius-radius.so(fr_pair_make+0x8b3)[0x7fa47aaa52d3] /usr/local/freeradius/3.0.x-20150915-101k/lib64/libfreeradius-server.so(vmodule_failure_msg+0xc0)[0x7fa47ad03730] /usr/local/freeradius/3.0.x-20150915-101k/lib64/libfreeradius-server.so(radlog_request_error+0x1e2)[0x7fa47acee442] /usr/local/freeradius/current/lib64/rlm_eap.so(eap_method_select+0x4c9)[0x7fa4778b4909] /usr/local/freeradius/current/lib64/rlm_eap.so(+0x2f12)[0x7fa4778b2f12] /usr/local/freeradius/current/sbin/radiusd[0x4357bd] /usr/local/freeradius/current/sbin/radiusd[0x42d75b] /usr/local/freeradius/current/sbin/radiusd[0x4359aa] /usr/local/freeradius/current/sbin/radiusd[0x42e21a] /usr/local/freeradius/current/sbin/radiusd(modcall+0xb6)[0x42d2a6] /usr/local/freeradius/current/sbin/radiusd(indexed_modcall+0x303)[0x429b23] /usr/local/freeradius/current/sbin/radiusd(process_authenticate+0x22)[0x42c142] /usr/local/freeradius/current/sbin/radiusd[0x411de7] /usr/local/freeradius/current/sbin/radiusd(rad_authenticate+0x59f)[0x41145f] /usr/local/freeradius/current/sbin/radiusd[0x44495c] /usr/local/freeradius/current/sbin/radiusd[0x44155f] /lib64/libpthread.so.0(+0x80db)[0x7fa47955b0db] /lib64/libc.so.6(clone+0x6d)[0x7fa479050e3d] Calling: gdb -silent -x /usr/local/freeradius/config/raddb/panic.gdb /usr/local/freeradius/current/sbin/radiusd 23271 2>&1 | tee /var/log/radius/gdb-radiusd-23271.log Mon Sep 21 07:54:02 2015 : Info: rlm_sql (sql-webmailsso-users): Need 2 more connections to reach 10 spares Mon Sep 21 07:54:02 2015 : Info: rlm_sql (sql-webmailsso-users): Opening additional connection (2265), 1 of 22 pending slots used Mon Sep 21 07:54:02 2015 : Info: rlm_sql (sql-webmailsso-users): Need 1 more connections to reach 10 spares Mon Sep 21 07:54:02 2015 : Info: rlm_sql (sql-webmailsso-users): Opening additional connection (2266), 2 of 22 pending slots used Panic action exited with 256 _EXIT(1) CALLED src/lib/debug.c[753]. Last error was: Mon Sep 21 07:54:03 2015 : Error: Cannot update core dump limit: Operation not permitted Mon Sep 21 07:54:03 2015 : Info: Core dumps are enabled Mon Sep 21 07:54:03 2015 : Info: Debugger not attached Since I'm running FR non-root, apparently the core dumps didn't quite work, so I don't have a better backtrace, sorry. Now, after restart, I also see strange stuff: Mon Sep 21 07:54:03 2015 : Info: Ready to process requests Mon Sep 21 07:54:03 2015 : Error: rlm_eap (EAP): No EAP session matching state 0xac492c8ca94e358d Mon Sep 21 07:54:06 2015 : Error: rlm_eap (EAP): No EAP session matching state 0x1a29c8c91b2afc11 Mon Sep 21 07:54:14 2015 : Info: (252) eap_peap: The users session was previously rejected: returning reject (again.) Mon Sep 21 07:54:14 2015 : Info: (252) eap_peap: This means you need to read the PREVIOUS messages in the debug output Mon Sep 21 07:54:14 2015 : Info: (252) eap_peap: to find out the reason why the user was rejected Mon Sep 21 07:54:14 2015 : Info: (252) eap_peap: Look for "reject" or "fail". Those earlier messages will tell you Mon Sep 21 07:54:14 2015 : Info: (252) eap_peap: what went wrong, and how to fix the problem Mon Sep 21 07:54:14 2015 : Error: rlm_eap (EAP): No EAP session matching state 0x99c6f89699c4e135 Mon Sep 21 07:54:39 2015 : Error: (672) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 29 due to unfinished request in component <core> module Mon Sep 21 07:54:44 2015 : Error: (672) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 29 due to unfinished request in component <core> module Mon Sep 21 07:54:49 2015 : Error: (672) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 29 due to unfinished request in component <core> module Mon Sep 21 07:54:54 2015 : Error: rlm_eap (EAP): No EAP session matching state 0xbb374e7fba347ac5 Mon Sep 21 07:55:04 2015 : Error: (1293) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 134 due to unfinished request in component <core> module Mon Sep 21 07:55:09 2015 : Error: (1293) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 134 due to unfinished request in component <core> module Mon Sep 21 07:55:11 2015 : Error: Unresponsive child for request 672, in component <core> module Mon Sep 21 07:55:14 2015 : Error: (1293) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 134 due to unfinished request in component <core> module Mon Sep 21 07:55:19 2015 : Error: rlm_eap (EAP): No EAP session matching state 0xae66b9ffaf658d0a Mon Sep 21 07:55:37 2015 : Error: Unresponsive child for request 1293, in component <core> module But that was in the seconds after restart, it doesn't seem to happen now any more. Greetings, Stefan Winter Am 16.09.2015 um 21:18 schrieb Alan DeKok:
We're getting ready for the release of 3.0.10. Please do a last double-check to be sure it's OK.
We've added a LOT of tests since 3.0.9. The tests make sure that future code changes will be caught by the test cases before they're seen in production. :)
The list of changed or added tests follows:
src/tests/eapsim-03/radiusd-example.txt src/tests/keywords/count-error src/tests/keywords/else-error src/tests/keywords/foreach-break-4 src/tests/keywords/radiusd.conf src/tests/keywords/switch-escape src/tests/keywords/switch-virtual src/tests/keywords/update-delete src/tests/keywords/virtual src/tests/keywords/virtual-load-balance src/tests/keywords/virtual_policy src/tests/keywords/with_dots src/tests/map/base src/tests/map/base.out src/tests/map/count-error src/tests/map/count-list-error src/tests/map/map_tests.mk src/tests/map/map_unit.c src/tests/map/map_unit.mk src/tests/modules/ldap/groups_rfc2307bis.unlang src/tests/peap-client-mschapv2.conf src/tests/unit/rfc.txt src/tests/unit/tunnel.txt src/tests/unit/vendor.txt src/tests/unit/xlat.txt
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
On Mon, Sep 21, 2015 at 08:00:06AM +0200, Stefan Winter wrote:
_EXIT(1) CALLED src/lib/debug.c[753]. Last error was: Mon Sep 21 07:54:03 2015 : Error: Cannot update core dump limit: Operation not permitted Mon Sep 21 07:54:03 2015 : Info: Core dumps are enabled Mon Sep 21 07:54:03 2015 : Info: Debugger not attached
Since I'm running FR non-root, apparently the core dumps didn't quite work, so I don't have a better backtrace, sorry.
Won't be much help without a core dump :( The error looks like you haven't set "ulimit -c 0" before starting FreeRADIUS? Otherwise if it is a permissions thing and on Linux you could set a core pattern so it writes to, e.g. /tmp: # echo "/tmp/core.%e.%p" > /proc/sys/kernel/core_pattern
Mon Sep 21 07:54:03 2015 : Info: Ready to process requests Mon Sep 21 07:54:03 2015 : Error: rlm_eap (EAP): No EAP session matching state 0xac492c8ca94e358d Mon Sep 21 07:54:06 2015 : Error: rlm_eap (EAP): No EAP session matching state 0x1a29c8c91b2afc11 Mon Sep 21 07:54:14 2015 : Info: (252) eap_peap: The users session was previously rejected: returning reject (again.) Mon Sep 21 07:54:14 2015 : Info: (252) eap_peap: This means you need to read the PREVIOUS messages in the debug output ... But that was in the seconds after restart, it doesn't seem to happen now any more.
Nothing to worry about. There were clients in the middle of EAP transactions when the server stopped. They keep trying to retransmit to continue their auth. When the server starts back up again it gets a load of packets from the middle of these old EAP transactions that it doesn't know about, so rightly complains that there is no EAP state. After a short while the clients time out and start again so the errors go away. But, yes, it can be a bit disconcerting when you restart a server and initially see a load of errors. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
On 21 Sep 2015, at 11:04, Matthew Newton <mcn4@leicester.ac.uk> wrote:
On Mon, Sep 21, 2015 at 08:00:06AM +0200, Stefan Winter wrote:
_EXIT(1) CALLED src/lib/debug.c[753]. Last error was: Mon Sep 21 07:54:03 2015 : Error: Cannot update core dump limit: Operation not permitted Mon Sep 21 07:54:03 2015 : Info: Core dumps are enabled Mon Sep 21 07:54:03 2015 : Info: Debugger not attached
Since I'm running FR non-root, apparently the core dumps didn't quite work, so I don't have a better backtrace, sorry.
Won't be much help without a core dump :(
All we can tell is that: - You're running a developer build. - RERROR or REDEBUG was called in eap_method_select. - When adding a Module-Failure-Message attribute, talloc encountered a already freed or mangled VALUE_PAIR or buffer.
The error looks like you haven't set "ulimit -c 0" before starting FreeRADIUS?
Otherwise if it is a permissions thing and on Linux you could set a core pattern so it writes to, e.g. /tmp:
# echo "/tmp/core.%e.%p" > /proc/sys/kernel/core_pattern
Yep. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Hi,
The error looks like you haven't set "ulimit -c 0" before starting FreeRADIUS?
Otherwise if it is a permissions thing and on Linux you could set a core pattern so it writes to, e.g. /tmp:
# echo "/tmp/core.%e.%p" > /proc/sys/kernel/core_pattern
Yep.
I've done both (and have radiusd as a core unlimited user in /lib/security/limits.conf). And have now restarted the daemon. However, this is a systemd system and I have the suspicion it has its own rules :-/ I checked the core dump collection state of systemd-coredumpctl but it had no coredumps for me. I'm not totally skilled in systemd and its core dump behaviour. If someone has a tip how to get core dumps from systemd, I'm all ears. Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
On Mon, Sep 21, 2015 at 01:42:59PM +0200, Stefan Winter wrote:
However, this is a systemd system and I have the suspicion it has its own rules :-/
Ah, the blight that is systemd. It has its own everything.
I'm not totally skilled in systemd and its core dump behaviour. If someone has a tip how to get core dumps from systemd, I'm all ears.
Google-fu suggests trying [Service] LimitCORE=infinity in the .service file. You should be able to test if it's working by doing a kill -SEGV <pid> and make sure you get a coredump. Aside from that, I'm not sure I'm afraid. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
On 21 Sep 2015, at 14:23, Matthew Newton <mcn4@LEICESTER.AC.UK> wrote:
On Mon, Sep 21, 2015 at 01:42:59PM +0200, Stefan Winter wrote:
However, this is a systemd system and I have the suspicion it has its own rules :-/
Ah, the blight that is systemd.
It has its own everything.
But it's so pretty... mmmm marmited.
I'm not totally skilled in systemd and its core dump behaviour. If someone has a tip how to get core dumps from systemd, I'm all ears.
Google-fu suggests trying
Arran-fu suggests uncommenting the panic action intended for production services as it tends to work more reliably than core dumps. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Hi,
When the server starts back up again it gets a load of packets from the middle of these old EAP transactions that it doesn't know about, so rightly complains that there is no EAP state.
After a short while the clients time out and start again so the errors go away.
But, yes, it can be a bit disconcerting when you restart a server and initially see a load of errors.
Well, I didn't mean the eap_peap errors as that's something I know already. It was much rather about the Mon Sep 21 07:54:49 2015 : Error: (672) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 29 due to unfinished request in component <core> module Mon Sep 21 07:55:04 2015 : Error: (1293) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 134 due to unfinished request in component <core> module The "<core>" module? And someone sending a request a second time, while processing of the first request didn't finsih? Stefan -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
On Sep 21, 2015, at 7:37 AM, Stefan Winter <stefan.winter@restena.lu> wrote:
It was much rather about the
Mon Sep 21 07:54:49 2015 : Error: (672) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 29 due to unfinished request in component <core> module Mon Sep 21 07:55:04 2015 : Error: (1293) Ignoring duplicate packet from client radius-1-v6 port 48773 - ID: 134 due to unfinished request in component <core> module
The "<core>" module? And someone sending a request a second time, while processing of the first request didn't finsih?
It looks like an issue with the internal state machine. I pushed a fix last week. Alan DeKok.
Hi Alan, Please consider documenting the TLS 1.2 MPPE fix with EAP-TTLS in the release notes for 3.0.10. It is presently missing. It may be worth expanding/explaining in the 2.2.9 notes that it is a bug fix and not a new feature. From: * Update EAP-TTLS for TLSv1.2 To: * Fix EAP-TTLS so that MPPE keys are correctly calculated with TLS 1.2 Cheers, Nick
On Wed, Sep 30, 2015 at 10:14:39AM +0100, Nick Lowe wrote:
Please consider documenting the TLS 1.2 MPPE fix with EAP-TTLS in the release notes for 3.0.10. It is presently missing.
It may be worth expanding/explaining in the 2.2.9 notes that it is a bug fix and not a new feature.
Pull requests incoming. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Thanks! Still need to include this for 3.0.10: "Update EAP-TTLS so that MPPE keys are correctly + calculated with TLSv1.2." Cheers, Nick
participants (7)
-
Alan DeKok -
Arran Cudbard-Bell -
David Aldwinckle -
Jorge Pereira -
Matthew Newton -
Nick Lowe -
Stefan Winter