radiusd exits on signal 6
hi, is it intentional behaviour? FR v.3.0.9 configured with LDAP, exiting on signal 6 when more than one user comply with filter ... I expected log file error or warning record but not exit ... ---[ `radiusd -X | tee /tmp/radiusd-X.log' output quotation start ]--- ... (1) files: Waiting for search result... (1) files: ERROR: Ambiguous search result, returned 2 unsorted entries (should return 1 or 0). Enable sorting, or specify a more restrictive base_dn, filter or scope (1) files: ERROR: The following entries were returned: (1) files: ERROR: uid=rad-visitor,authorizedService=802.1x-eap-tls@xyz,uid=jdoe,ou=People,dc=xyz Assertion failed: (entry != NULL), function ldap_next_entry, file getentry.c, line 48. zsh: abort radiusd -X | zsh: done tee /tmp/radiusd-X.log ---[ quotation end ]------------------------------------------------ and what sorting it means? I didn't find any sorting related option in ldap module config -- Zeus V. Panchenko jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC GMT+2 (EET)
On Aug 12, 2015, at 12:39 PM, Zeus Panchenko <zeus@ibs.dn.ua> wrote:
hi,
is it intentional behaviour?
Hitting an assert in production code is obviously not intentional behaviour :)
FR v.3.0.9 configured with LDAP, exiting on signal 6 when more than one user comply with filter ... I expected log file error or warning record but not exit ...
---[ `radiusd -X | tee /tmp/radiusd-X.log' output quotation start ]--- ... (1) files: Waiting for search result... (1) files: ERROR: Ambiguous search result, returned 2 unsorted entries (should return 1 or 0). Enable sorting, or specify a more restrictive base_dn, filter or scope (1) files: ERROR: The following entries were returned: (1) files: ERROR: uid=rad-visitor,authorizedService=802.1x-eap-tls@xyz,uid=jdoe,ou=People,dc=xyz Assertion failed: (entry != NULL), function ldap_next_entry, file getentry.c, line 48.
Weird, i'll track it down the assert being triggered is actually in libldap. The ERROR is valid though, you should fix your filter. -Arran
On Aug 12, 2015, at 12:59 PM, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On Aug 12, 2015, at 12:39 PM, Zeus Panchenko <zeus@ibs.dn.ua> wrote:
hi,
is it intentional behaviour?
Hitting an assert in production code is obviously not intentional behaviour :)
FR v.3.0.9 configured with LDAP, exiting on signal 6 when more than one user comply with filter ... I expected log file error or warning record but not exit ...
---[ `radiusd -X | tee /tmp/radiusd-X.log' output quotation start ]--- ... (1) files: Waiting for search result... (1) files: ERROR: Ambiguous search result, returned 2 unsorted entries (should return 1 or 0). Enable sorting, or specify a more restrictive base_dn, filter or scope (1) files: ERROR: The following entries were returned: (1) files: ERROR: uid=rad-visitor,authorizedService=802.1x-eap-tls@xyz,uid=jdoe,ou=People,dc=xyz Assertion failed: (entry != NULL), function ldap_next_entry, file getentry.c, line 48.
Weird, i'll track it down the assert being triggered is actually in libldap. The ERROR is valid though, you should fix your filter.
OK pushed a fix.
Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
Assertion failed: (entry != NULL), function ldap_next_entry, file getentry.c, line 48.
Weird, i'll track it down the assert being triggered is actually in libldap. The ERROR is valid though, you should fix your filter.
yes yes, it was for test only, but all the same, it'd be great if FR spawns some error/warning instead of exiting ;) P.S. when I changed scope from syb to one, FR doesn't exit (no result search in that case) -- Zeus V. Panchenko jid:zeus@im.ibs.dn.ua IT Dpt., I.B.S. LLC GMT+2 (EET)
Zeus Panchenko wrote:
is it intentional behaviour?
FR v.3.0.9 configured with LDAP, exiting on signal 6 when more than one user comply with filter ... I expected log file error or warning record but not exit ...
---[ `radiusd -X | tee /tmp/radiusd-X.log' output quotation start ]--- ... (1) files: Waiting for search result... (1) files: ERROR: Ambiguous search result, returned 2 unsorted entries (should return 1 or 0). Enable sorting, or specify a more restrictive base_dn, filter or scope (1) files: ERROR: The following entries were returned: (1) files: ERROR: uid=rad-visitor,authorizedService=802.1x-eap-tls@xyz,uid=jdoe,ou=People,dc=xyz Assertion failed: (entry != NULL), function ldap_next_entry, file getentry.c, line 48. zsh: abort radiusd -X | zsh: done tee /tmp/radiusd-X.log
---[ quotation end ]------------------------------------------------
and what sorting it means? I didn't find any sorting related option in ldap module config
The search operation for your LDAP parameters returned more than one search result and FreeRADIUS does not know which one to choose. Being in your situation I'd try to look at the LDAP server's or radiusd's log to find about the exact LDAP search filter/base/scope used and whether that meets your expectations. Ciao, Michael.
participants (3)
-
Arran Cudbard-Bell -
Michael Ströder -
Zeus Panchenko