Hi all! I had a problem with Radius server on Saturday, and after a lot of searching I have not found an appropriate answer on the Web. I will be submitting the log file that contains the problem that I have been working on. Aug 25 19:59:39 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 19:59:39 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 19:59:39 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:01:29 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:01:29 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:01:29 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:02:50 aai radiusd[12649]: Login incorrect (Home Server says so): [host/Lazar-PC] (from client cisco5508-L port 1 cli 00-22-5f-b8-c7-29) Aug 25 20:02:57 aai radiusd[12649]: Login incorrect (Home Server says so): [Lazar-PC\\Lazar] (from client cisco5508-L port 1 cli 00-22-5f-b8-c7-29) Aug 25 20:03:11 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:03:11 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:03:11 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:04:07 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:04:07 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:04:07 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:04:18 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:04:18 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:04:18 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:04:44 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:04:44 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:04:44 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:06:38 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:06:38 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:06:38 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:07:41 aai radiusd[12649]: Login OK: [rv070182d@etf.bg.ac.rs] (from client cisco5508-L port 1 cli 64-a7-69-b0-9a-bb) Aug 25 20:08:02 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:08:02 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:08:02 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:08:17 aai radiusd[12649]: Login OK: [anonymous@bfspc.bg.ac.rs] (from client cisco5508-L port 1 cli 60-d8-19-50-19-85) Aug 25 20:08:58 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:08:58 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:08:58 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:09:14 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:09:14 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:09:14 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:09:41 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:09:41 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:09:41 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:10:27 aai radiusd[12649]: Login OK: [anonimous@pharmacy.bg.ac.rs] (from client cisco5508-L port 1 cli 94-71-ac-51-f9-37) Aug 25 20:11:36 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:11:36 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:11:36 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:13:08 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:13:08 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:13:08 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:13:58 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:13:58 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:13:58 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:14:14 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:14:14 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:14:14 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:14:41 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 20:14:41 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:14:41 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:15:57 aai radiusd[12649]: Login OK: [mn11s2r@leeds.ac.uk] (from client cisco5508-R port 1 cli cc-08-e0-ab-fd-c7) Aug 25 20:16:01 aai radiusd[12649]: Login OK: [mn11s2r@leeds.ac.uk] (from client cisco5508-R port 1 cli cc-08-e0-ab-fd-c7) Aug 25 20:16:31 aai radiusd[12649]: TLS Alert write:fatal:decompression failure Aug 25 20:16:31 aai radiusd[12649]: rlm_eap: SSL error error:1408F06B:SSL routines:SSL3_GET_RECORD:bad decompression Aug 25 20:16:31 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:18:07 aai radiusd[12649]: TLS Alert write:fatal:decompression failure Aug 25 20:18:07 aai radiusd[12649]: rlm_eap: SSL error error:1408F06B:SSL routines:SSL3_GET_RECORD:bad decompression Aug 25 20:18:07 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:18:31 aai radiusd[12649]: Login OK: [ds100432d@etf.bg.ac.rs] (from client cisco5508-L port 1 cli a0-0b-ba-c7-9b-04) Aug 25 20:19:03 aai radiusd[12649]: rlm_eap: SSL error error:140D1041:SSL routines:TLS1_CHANGE_CIPHER_STATE:malloc failure Aug 25 20:19:03 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:19:17 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:19:17 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:19:44 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:19:44 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:21:37 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:21:37 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:23:05 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:23:05 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:24:00 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:24:00 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:24:15 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:24:15 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:24:43 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:24:43 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:24:45 aai radiusd[12649]: Login OK: [ds100432d@etf.bg.ac.rs] (from client cisco5508-L port 1 cli a0-0b-ba-c7-9b-04) Aug 25 20:26:02 aai radiusd[12649]: Login OK: [ds100432d@etf.bg.ac.rs] (from client cisco5508-L port 1 cli a0-0b-ba-c7-9b-04) Aug 25 20:26:36 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:26:36 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:27:41 aai radiusd[12649]: Login OK: [anonymous@bfspc.bg.ac.rs] (from client cisco5508-L port 1 cli c8-7b-5b-36-96-c7) Aug 25 20:27:54 aai radiusd[12649]: Login OK: [anonymous@bfspc.bg.ac.rs] (from client cisco5508-L port 1 cli 48-5d-60-d1-78-b3) Aug 25 20:28:08 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:28:08 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:28:59 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:28:59 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:29:13 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:29:13 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:29:40 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:29:40 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:31:32 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:31:32 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:33:11 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error Aug 25 20:33:11 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:34:11 aai radiusd[12649]: TLS_accept: error in before/accept initialization Aug 25 20:34:11 aai radiusd[12649]: rlm_eap: SSL error error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure Aug 25 20:34:11 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:34:38 aai radiusd[12649]: TLS_accept: error in before/accept initialization Aug 25 20:34:38 aai radiusd[12649]: rlm_eap: SSL error error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure Aug 25 20:34:38 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:35:59 aai radiusd[12649]: Login incorrect (Home Server says so): [host/Lazar-PC] (from client cisco5508-L port 1 cli 00-22-5f-b8-c7-29) Aug 25 20:36:06 aai radiusd[12649]: Login incorrect (Home Server says so): [Lazar-PC\\Lazar] (from client cisco5508-L port 1 cli 00-22-5f-b8-c7-29) Aug 25 20:36:33 aai radiusd[12649]: TLS_accept: error in before/accept initialization Aug 25 20:36:33 aai radiusd[12649]: rlm_eap: SSL error error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure Aug 25 20:36:33 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:38:07 aai radiusd[12649]: TLS_accept: error in before/accept initialization Aug 25 20:38:07 aai radiusd[12649]: rlm_eap: SSL error error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure Aug 25 20:38:07 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:39:02 aai radiusd[12649]: TLS_accept: error in before/accept initialization Aug 25 20:39:02 aai radiusd[12649]: rlm_eap: SSL error error:07064041:memory buffer routines:BUF_MEM_grow:malloc failure Aug 25 20:39:02 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:39:17 aai radiusd[12649]: rlm_eap: SSL error error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure Aug 25 20:39:17 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:39:44 aai radiusd[12649]: rlm_eap: SSL error error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure Aug 25 20:39:44 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:41:37 aai radiusd[12649]: rlm_eap: SSL error error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure Aug 25 20:41:37 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:42:34 aai radiusd[12649]: Login OK: [anonymous@bfspc.bg.ac.rs] (from client cisco5508-L port 1 cli 00-25-d3-63-af-a7) Aug 25 20:42:50 aai radiusd[12649]: Login OK: [anonymous@bfspc.bg.ac.rs] (from client cisco5508-L port 1 cli 48-5d-60-d1-78-b3) Aug 25 20:43:04 aai radiusd[12649]: rlm_eap: SSL error error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure Aug 25 20:43:04 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. Aug 25 20:44:00 aai radiusd[12649]: rlm_eap: SSL error error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure Aug 25 20:44:00 aai radiusd[12649]: SSL: SSL_read failed in a system call (-1), TLS session fails. One thing I noticed is that the server did accept connection requests during the time of the problem. I found some answers but just wanted to see If anyone else had the same problem. I read that it can be a memory allocation issue, but just wanted to confirm. Also, I would like to know what could be done to solve this problem? Thanks and best regards to all, Marko
Marko Eremija wrote:
Hi all!
I had a problem with Radius server on Saturday, and after a lot of searching I have not found an appropriate answer on the Web. I will be submitting the log file that contains the problem that I have been working on.
Aug 25 19:59:39 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 19:59:39 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error
Those are errors related to EAP. An end user is doing something weird with TLS.
Aug 25 20:41:37 aai radiusd[12649]: rlm_eap: SSL error error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure
That's pretty definitive.
One thing I noticed is that the server did accept connection requests during the time of the problem. I found some answers but just wanted to see If anyone else had the same problem. I read that it can be a memory allocation issue, but just wanted to confirm.
"malloc" is "memory allocation".
Also, I would like to know what could be done to solve this problem?
Make sure that the system has enough RAM and CPU to do RADIUS. Don't run jobs which use all RAM and CPU. Alan DeKok.
Thanks, this helpa a lot. -----Original Message----- From: freeradius-users-bounces+marko.eremija=amres.ac.rs@lists.freeradius.org [mailto:freeradius-users-bounces+marko.eremija=amres.ac.rs@lists.freeradius. org] On Behalf Of Alan DeKok Sent: Tuesday, August 28, 2012 12:37 PM To: FreeRadius users mailing list Subject: Re: Radius server failure Marko Eremija wrote:
Hi all!
I had a problem with Radius server on Saturday, and after a lot of searching I have not found an appropriate answer on the Web. I will be submitting the log file that contains the problem that I have been working on.
Aug 25 19:59:39 aai radiusd[12649]: TLS_accept: error in SSLv3 write finished A Aug 25 19:59:39 aai radiusd[12649]: rlm_eap: SSL error error:140D108E:SSL routines:TLS1_CHANGE_CIPHER_STATE:compression library error
Those are errors related to EAP. An end user is doing something weird with TLS.
Aug 25 20:41:37 aai radiusd[12649]: rlm_eap: SSL error error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure
That's pretty definitive.
One thing I noticed is that the server did accept connection requests during the time of the problem. I found some answers but just wanted to see If anyone else had the same problem. I read that it can be a memory allocation issue, but just wanted to confirm.
"malloc" is "memory allocation".
Also, I would like to know what could be done to solve this problem?
Make sure that the system has enough RAM and CPU to do RADIUS. Don't run jobs which use all RAM and CPU. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Marko Eremija