Ok I have upgraded to a compiled version of freeradius 2.2.0, and I was able to see the same result. It crashed after a few minutes with the error below. on-radius01 kernel: radiusd[10038]: segfault at 00007ffff3d87000 rip 0000003c6c07b5bb rsp 00007ffff3d83c08 error 4 I turned on core dumps to see if I could get any more details out of it, but I could not make it crash after that. Any ideas as to what this could be I can post my -X output but all it says at the bottom when it stops working is segfault. Thanks, Chris -----Original Message----- From: freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org [mailto:freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Wednesday, April 10, 2013 9:45 AM To: FreeRadius users mailing list Subject: Re: segfault error Chris Taylor wrote:

I am running freeradius2-2.1.12-5.el5 on a CentOS server release 5.9 (Final). I was doing some testing on some new RADIUS servers that we want to put into production and I got the following error.

Well... upgrade to 2.2.0. There's no reason for us to debug issues in old versions. Those have already been debugged and fixed. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Yeah this is the only version of freeradius on the box the other was an rpm version that was removed before I compiled this one. -----Original Message----- From: freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org [mailto:freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Friday, April 12, 2013 3:45 PM To: FreeRadius users mailing list Subject: Re: segfault error Chris Taylor wrote:

Ok I have upgraded to a compiled version of freeradius 2.2.0, and I was able to see the same result. It crashed after a few minutes with the error below.

on-radius01 kernel: radiusd[10038]: segfault at 00007ffff3d87000 rip 0000003c6c07b5bb rsp 00007ffff3d83c08 error 4

Check that you're really running v2.2.0. Sometimes scripts point to old installations.

I turned on core dumps to see if I could get any more details out of it, but I could not make it crash after that.

Did you follow the instructions in doc/bugs? That says how to find the bug.

Any ideas as to what this could be I can post my -X output but all it says at the bottom when it stops working is segfault.

doc/bugs has detailed instructions for just such an occasion. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Chris Taylor wrote:

I did some more debugging and I always seem to get a segfault at the same place. Is there something I should be looking at on the LDAP backend?

See doc/bugs That should help. Alan DeKok.

On 05/01/2013 01:36 PM, Chris Taylor wrote:

I have tried a few times but I can't get a core dump. After radius dies I run " gdb /usr/sbin/radiusd /tmp/core_dump/test.dump" but I get the following output.

############################# [root@on-radius01 core_dump]# gdb /usr/sbin/radiusd /tmp/core_dump/test.dump GNU gdb (GDB) CentOS (7.0.1-45.el5.centos) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/sbin/radiusd...done. "/tmp/core_dump/test.dump" is not a core dump: File format not recognized #############################

I have ulimit set to unlimited.

[root@on-radius01 core_dump]# ulimit -a core file size (blocks, -c) unlimited data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited

What am I doing wrong on this?

There is information in this bz you may find useful https://bugzilla.redhat.com/show_bug.cgi?id=602567 -- John Dennis <jdennis@redhat.com> Looking to carve out IT costs? www.redhat.com/carveoutcosts/

Chris Taylor wrote:

I have tried a few times but I can't get a core dump.

See doc/bugs. It contains instructions for debugging a live server. If you can't get core dumps, use the instructions in Section 3 of that file. Alan DeKok.

Here is my radius -X output [root@on-radius01 raddb]# /usr/sbin/radiusd -X FreeRADIUS Version 2.2.0, for host x86_64-unknown-linux-gnu, built on Apr 19 2013 at 15:02:47 Copyright (C) 1999-2012 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf including configuration file /etc/raddb/clients.conf including files in directory /etc/raddb/modules/ including configuration file /etc/raddb/modules/cui including configuration file /etc/raddb/modules/expr including configuration file /etc/raddb/modules/attr_rewrite including configuration file /etc/raddb/modules/rediswho including configuration file /etc/raddb/modules/chap including configuration file /etc/raddb/modules/cache including configuration file /etc/raddb/modules/smbpasswd including configuration file /etc/raddb/modules/detail including configuration file /etc/raddb/modules/soh including configuration file /etc/raddb/modules/linelog including configuration file /etc/raddb/modules/digest including configuration file /etc/raddb/modules/logintime including configuration file /etc/raddb/modules/radutmp including configuration file /etc/raddb/modules/mac2vlan including configuration file /etc/raddb/modules/mac2ip including configuration file /etc/raddb/modules/attr_filter including configuration file /etc/raddb/modules/files including configuration file /etc/raddb/modules/unix including configuration file /etc/raddb/modules/policy including configuration file /etc/raddb/modules/counter including configuration file /etc/raddb/modules/redis including configuration file /etc/raddb/modules/sradutmp including configuration file /etc/raddb/modules/pap including configuration file /etc/raddb/modules/inner-eap including configuration file /etc/raddb/modules/ntlm_auth including configuration file /etc/raddb/modules/passwd including configuration file /etc/raddb/modules/exec including configuration file /etc/raddb/modules/etc_group including configuration file /etc/raddb/modules/dynamic_clients including configuration file /etc/raddb/modules/perl including configuration file /etc/raddb/modules/pam including configuration file /etc/raddb/modules/expiration including configuration file /etc/raddb/modules/sqlcounter_expire_on_login including configuration file /etc/raddb/modules/sql_log including configuration file /etc/raddb/modules/ldap.orig including configuration file /etc/raddb/modules/wimax including configuration file /etc/raddb/modules/opendirectory including configuration file /etc/raddb/modules/ldap including configuration file /etc/raddb/modules/detail.example.com including configuration file /etc/raddb/modules/acct_unique including configuration file /etc/raddb/modules/krb5 including configuration file /etc/raddb/modules/smsotp including configuration file /etc/raddb/modules/checkval including configuration file /etc/raddb/modules/echo including configuration file /etc/raddb/modules/realm including configuration file /etc/raddb/modules/always including configuration file /etc/raddb/modules/detail.log including configuration file /etc/raddb/modules/radrelay including configuration file /etc/raddb/modules/otp including configuration file /etc/raddb/modules/mschap including configuration file /etc/raddb/modules/preprocess including configuration file /etc/raddb/modules/ippool including configuration file /etc/raddb/modules/dhcp_sqlippool including configuration file /etc/raddb/sql/mysql/ippool-dhcp.conf including configuration file /etc/raddb/modules/replicate including configuration file /etc/raddb/eap.conf including configuration file /etc/raddb/sql.conf including configuration file /etc/raddb/sql/mysql/eastlink_dialup.conf including configuration file /etc/raddb/sql/mysql/eastlink_dialup.conf including configuration file /etc/raddb/sql/mysql/eastlink_dialup.conf including configuration file /etc/raddb/sql/mysql/eastlink_dialup.conf including configuration file /etc/raddb/policy.conf including files in directory /etc/raddb/sites-enabled/ including configuration file /etc/raddb/sites-enabled/virtual.amtelecom.net including configuration file /etc/raddb/sites-enabled/virtual.xcelco.on.ca including configuration file /etc/raddb/sites-enabled/default including configuration file /etc/raddb/sites-enabled/virtual.persona.ca including configuration file /etc/raddb/sites-enabled/status including configuration file /etc/raddb/sites-enabled/virtual.eastlink.ca main { user = "radiusd" group = "radiusd" allow_core_dumps = yes } Core dumps are enabled. including dictionary file /etc/raddb/dictionary main { name = "radiusd" prefix = "/usr" localstatedir = "/var" sbindir = "/usr/sbin" logdir = "/var/log/radius" run_dir = "/var/run/radiusd" libdir = "/usr/lib64/freeradius" radacctdir = "/var/log/radius/radacct" hostname_lookups = no max_request_time = 60 cleanup_delay = 5 max_requests = 8192 pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = yes auth_badpass = yes auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### home_server virtual.xcelco.on.ca { virtual_server = "virtual.xcelco.on.ca" port = 0 response_window = 30 max_outstanding = 65536 zombie_period = 40 status_check = "none" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 300 status_check_timeout = 4 } home_server virtual.amtelecom.net { virtual_server = "virtual.amtelecom.net" port = 0 response_window = 30 max_outstanding = 65536 zombie_period = 40 status_check = "none" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 300 status_check_timeout = 4 } home_server virtual.persona.ca { virtual_server = "virtual.persona.ca" port = 0 response_window = 30 max_outstanding = 65536 zombie_period = 40 status_check = "none" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 300 status_check_timeout = 4 } home_server virtual.eastlink.ca { virtual_server = "virtual.eastlink.ca" port = 0 response_window = 30 max_outstanding = 65536 zombie_period = 40 status_check = "none" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 300 status_check_timeout = 4 } realm LOCAL { } realm NULL { virtual_server = virtual.persona.ca } realm DEFAULT { } realm xcelco.on.ca { virtual_server = virtual.xcelco.on.ca } realm amtelecom.net { virtual_server = virtual.amtelecom.net } realm persona.ca { virtual_server = virtual.persona.ca } realm eastlink.ca { virtual_server = virtual.eastlink.ca } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client ntradping-stress-test { ipaddr = 24.139.17.126 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client self-stress-test { ipaddr = 24.222.150.166 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client ntradping { ipaddr = 67.58.192.254 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client newnoc.corp.amtelecom.ca { ipaddr = 67.58.192.39 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client old_nagios.corp.amtelecom.ca { ipaddr = 206.132.48.70 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client bari-bras1 { ipaddr = 24.139.16.70 require_message_authenticator = no secret = "XXXXX" nastype = "cisco" } client bari-bras1 { ipaddr = 24.139.16.74 require_message_authenticator = no secret = "XXXXX" nastype = "cisco" } client dns1.xcelco.on.ca { ipaddr = 206.132.48.20 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client dns2.xcelco.on.ca { ipaddr = 206.132.48.21 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client on-rad01.eastlink.ca { ipaddr = 24.222.150.134 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client on-rad02.eastlink.ca { ipaddr = 24.222.150.135 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client aylm-pm3-1 { ipaddr = 67.58.192.5 require_message_authenticator = no secret = "XXXXX" nastype = "livingston" } client mdmy-pm3-1 { ipaddr = 67.58.217.69 require_message_authenticator = no secret = "XXXXX" nastype = "livingston" } client lshd-pm3-1 { ipaddr = 67.58.223.69 require_message_authenticator = no secret = "XXXXX" nastype = "livingston" } client bari-pm3-1 { ipaddr = 24.139.18.5 require_message_authenticator = no secret = "XXXXX" nastype = "livingston" } client bari-pm3-2 { ipaddr = 24.139.18.6 require_message_authenticator = no secret = "XXXXX" nastype = "livingston" } client bari-pm3-3 { ipaddr = 24.139.18.7 require_message_authenticator = no secret = "XXXXX" nastype = "livingston" } client bari-pm3-4 { ipaddr = 24.139.18.8 require_message_authenticator = no secret = "XXXXX" nastype = "livingston" } client bell-idm-1 { ipaddr = 64.26.143.6 require_message_authenticator = no secret = "XXXXX" nastype = "other" } client bell-idm-2 { ipaddr = 199.243.161.110 require_message_authenticator = no secret = "XXXXX" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating module "exec" from file /etc/raddb/modules/exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating module "expr" from file /etc/raddb/modules/expr Module: Linked to module rlm_expiration Module: Instantiating module "expiration" from file /etc/raddb/modules/expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating module "logintime" from file /etc/raddb/modules/logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server { # from file /etc/raddb/radiusd.conf modules { Module: Creating Post-Auth-Type = REJECT Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating module "pap" from file /etc/raddb/modules/pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating module "chap" from file /etc/raddb/modules/chap Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating module "preprocess" from file /etc/raddb/modules/preprocess preprocess { huntgroups = "/etc/raddb/huntgroups" hints = "/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } reading pairlist file /etc/raddb/huntgroups reading pairlist file /etc/raddb/hints Module: Linked to module rlm_digest Module: Instantiating module "digest" from file /etc/raddb/modules/digest Module: Linked to module rlm_realm Module: Instantiating module "suffix" from file /etc/raddb/modules/realm realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating module "acct_unique" from file /etc/raddb/modules/acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Linked to module rlm_files Module: Instantiating module "files" from file /etc/raddb/modules/files files { usersfile = "/etc/raddb/users" acctusersfile = "/etc/raddb/acct_users" preproxy_usersfile = "/etc/raddb/preproxy_users" compat = "no" } reading pairlist file /etc/raddb/users reading pairlist file /etc/raddb/acct_users reading pairlist file /etc/raddb/preproxy_users Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating module "detail" from file /etc/raddb/modules/detail detail { detailfile = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Linked to module rlm_unix Module: Instantiating module "unix" from file /etc/raddb/modules/unix unix { radwtmp = "/var/log/radius/radwtmp" } Module: Linked to module rlm_radutmp Module: Instantiating module "radutmp" from file /etc/raddb/modules/radutmp radutmp { filename = "/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Linked to module rlm_attr_filter Module: Instantiating module "attr_filter.accounting_response" from file /etc/raddb/modules/attr_filter attr_filter attr_filter.accounting_response { attrsfile = "/etc/raddb/attrs.accounting_response" key = "%{User-Name}" relaxed = no } reading pairlist file /etc/raddb/attrs.accounting_response Module: Checking session {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Instantiating module "attr_filter.access_reject" from file /etc/raddb/modules/attr_filter attr_filter attr_filter.access_reject { attrsfile = "/etc/raddb/attrs.access_reject" key = "%{User-Name}" relaxed = no } reading pairlist file /etc/raddb/attrs.access_reject } # modules } # server server virtual.amtelecom.net { # from file /etc/raddb/sites-enabled/virtual.amtelecom.net modules { Module: Creating Auth-Type = digest Module: Creating Auth-Type = LDAP Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_ldap Module: Instantiating module "amtelecom1" from file /etc/raddb/modules/ldap ldap amtelecom1 { server = "web-ldap01.eastlink.ca" port = 389 password = "XXXXX" identity = "uid=amtelecom-ro,o=amtelecom.net,dc=eastlink,dc=ca" net_timeout = 1 timeout = 15 timelimit = 10 max_uses = 0 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=radius,o=amtelecom.net,dc=eastlink,dc=ca" filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=posixAccount)(cn=true))" base_filter = "(objectclass=radiusprofile)" password_attribute = "userPassword" auto_header = no access_attr = "cn" access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 10 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute amtelecom1-Ldap-Group rlm_ldap: Registering ldap_groupcmp for amtelecom1-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name amtelecom1 rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id rlm_ldap: LDAP radiusGroupName mapped to RADIUS Group-Name conns: 0x18b812f0 Module: Instantiating module "amtelecom2" from file /etc/raddb/modules/ldap ldap amtelecom2 { server = "web-ldap02.eastlink.ca" port = 389 password = "XXXXX" identity = "uid=amtelecom-ro,o=amtelecom.net,dc=eastlink,dc=ca" net_timeout = 1 timeout = 15 timelimit = 10 max_uses = 0 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=radius,o=amtelecom.net,dc=eastlink,dc=ca" filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=posixAccount)(cn=true))" base_filter = "(objectclass=radiusprofile)" password_attribute = "userPassword" auto_header = no access_attr = "cn" access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 10 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute amtelecom2-Ldap-Group rlm_ldap: Registering ldap_groupcmp for amtelecom2-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name amtelecom2 rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id rlm_ldap: LDAP radiusGroupName mapped to RADIUS Group-Name conns: 0x18b83cb0 Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_sql Module: Instantiating module "sql1.amtelecom.net" from file /etc/raddb/sql.conf sql sql1.amtelecom.net { driver = "rlm_sql_mysql" server = "on-mysql01.eastlink.ca" port = "3306" login = "raduser" password = "XXXXX" radius_db = "radius" read_groups = yes sqltrace = yes sqltracefile = "/var/log/radius/sqltrace.sql" readclients = no deletestalesessions = yes num_sql_socks = 15 lifetime = 0 max_queries = 0 sql_user_name = "%{User-Name}@%{Realm}" default_user_profile = "" nas_query = "SELECT id, nasname, shortname, type, secret FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" accounting_onoff_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = unix_timestamp('%S') - unix_timestamp(acctstarttime), acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = %{%{Acct-Delay-Time}:-0} WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= '%S'" accounting_update_query = " UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_update_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctsessiontime, acctauthentic, connectinfo_start, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, servicetype, framedprotocol, framedipaddress, acctstartdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_start_query = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{%{Acct-Delay-Time}:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_start_query_alt = " UPDATE radacct SET acctstarttime = '%S', acctstartdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_start = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_stop_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_stop_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{%{Acct-Delay-Time}:-0}')" group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" connect_failure_retry_delay = 60 simul_count_query = "" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } rlm_sql Creating new attribute sql1.amtelecom.net-SQL-Group rlm_sql: Registering sql_groupcmp for sql1.amtelecom.net-SQL-Group rlm_sql (sql1.amtelecom.net): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql1.amtelecom.net): Attempting to connect to raduser@on-mysql01.eastlink.ca:3306/radius rlm_sql (sql1.amtelecom.net): starting 0 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #0 rlm_sql (sql1.amtelecom.net): starting 1 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #1 rlm_sql (sql1.amtelecom.net): starting 2 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #2 rlm_sql (sql1.amtelecom.net): starting 3 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #3 rlm_sql (sql1.amtelecom.net): starting 4 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #4 rlm_sql (sql1.amtelecom.net): starting 5 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #5 rlm_sql (sql1.amtelecom.net): starting 6 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #6 rlm_sql (sql1.amtelecom.net): starting 7 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #7 rlm_sql (sql1.amtelecom.net): starting 8 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #8 rlm_sql (sql1.amtelecom.net): starting 9 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #9 rlm_sql (sql1.amtelecom.net): starting 10 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #10 rlm_sql_mysql: Starting connect to MySQL server for #10 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #10 rlm_sql (sql1.amtelecom.net): starting 11 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #11 rlm_sql_mysql: Starting connect to MySQL server for #11 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #11 rlm_sql (sql1.amtelecom.net): starting 12 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #12 rlm_sql_mysql: Starting connect to MySQL server for #12 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #12 rlm_sql (sql1.amtelecom.net): starting 13 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #13 rlm_sql_mysql: Starting connect to MySQL server for #13 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #13 rlm_sql (sql1.amtelecom.net): starting 14 rlm_sql (sql1.amtelecom.net): Attempting to connect rlm_sql_mysql #14 rlm_sql_mysql: Starting connect to MySQL server for #14 rlm_sql (sql1.amtelecom.net): Connected new DB handle, #14 Module: Instantiating module "sql2.amtelecom.net" from file /etc/raddb/sql.conf sql sql2.amtelecom.net { driver = "rlm_sql_mysql" server = "on-mysql02.eastlink.ca" port = "3306" login = "raduser" password = "XXXXX" radius_db = "radius" read_groups = yes sqltrace = yes sqltracefile = "/var/log/radius/sqltrace.sql" readclients = no deletestalesessions = yes num_sql_socks = 15 lifetime = 0 max_queries = 0 sql_user_name = "%{User-Name}@%{Realm}" default_user_profile = "" nas_query = "SELECT id, nasname, shortname, type, secret FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" accounting_onoff_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = unix_timestamp('%S') - unix_timestamp(acctstarttime), acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = %{%{Acct-Delay-Time}:-0} WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= '%S'" accounting_update_query = " UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_update_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctsessiontime, acctauthentic, connectinfo_start, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, servicetype, framedprotocol, framedipaddress, acctstartdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_start_query = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{%{Acct-Delay-Time}:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_start_query_alt = " UPDATE radacct SET acctstarttime = '%S', acctstartdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_start = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_stop_query = " UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}'" accounting_stop_query_alt = " INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{%{Acct-Session-Time}:-0} + %{%{Acct-Delay-Time}:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{%{Acct-Delay-Time}:-0}')" group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" connect_failure_retry_delay = 60 simul_count_query = "" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } rlm_sql Creating new attribute sql2.amtelecom.net-SQL-Group rlm_sql: Registering sql_groupcmp for sql2.amtelecom.net-SQL-Group rlm_sql (sql2.amtelecom.net): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql2.amtelecom.net): Attempting to connect to raduser@on-mysql02.eastlink.ca:3306/radius rlm_sql (sql2.amtelecom.net): starting 0 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #0 rlm_sql (sql2.amtelecom.net): starting 1 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #1 rlm_sql (sql2.amtelecom.net): starting 2 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #2 rlm_sql (sql2.amtelecom.net): starting 3 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #3 rlm_sql (sql2.amtelecom.net): starting 4 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #4 rlm_sql (sql2.amtelecom.net): starting 5 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #5 rlm_sql (sql2.amtelecom.net): starting 6 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #6 rlm_sql (sql2.amtelecom.net): starting 7 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #7 rlm_sql (sql2.amtelecom.net): starting 8 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #8 rlm_sql (sql2.amtelecom.net): starting 9 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #9 rlm_sql (sql2.amtelecom.net): starting 10 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #10 rlm_sql_mysql: Starting connect to MySQL server for #10 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #10 rlm_sql (sql2.amtelecom.net): starting 11 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #11 rlm_sql_mysql: Starting connect to MySQL server for #11 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #11 rlm_sql (sql2.amtelecom.net): starting 12 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #12 rlm_sql_mysql: Starting connect to MySQL server for #12 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #12 rlm_sql (sql2.amtelecom.net): starting 13 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #13 rlm_sql_mysql: Starting connect to MySQL server for #13 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #13 rlm_sql (sql2.amtelecom.net): starting 14 rlm_sql (sql2.amtelecom.net): Attempting to connect rlm_sql_mysql #14 rlm_sql_mysql: Starting connect to MySQL server for #14 rlm_sql (sql2.amtelecom.net): Connected new DB handle, #14 Module: Checking preacct {...} for more modules to load Module: Checking accounting {...} for more modules to load Module: Checking session {...} for more modules to load Module: Checking post-auth {...} for more modules to load } # modules } # server server virtual.xcelco.on.ca { # from file /etc/raddb/sites-enabled/virtual.xcelco.on.ca modules { Module: Checking authenticate {...} for more modules to load Module: Instantiating module "xcelco1" from file /etc/raddb/modules/ldap ldap xcelco1 { server = "web-ldap01.eastlink.ca" port = 389 password = "XXXXX" identity = "uid=xcelco-ro,o=xcelco.on.ca,dc=eastlink,dc=ca" net_timeout = 1 timeout = 4 timelimit = 3 max_uses = 0 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=radius,o=xcelco.on.ca,dc=eastlink,dc=ca" filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=posixAccount)(cn=true))" base_filter = "(objectclass=radiusprofile)" password_attribute = "userPassword" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 10 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute xcelco1-Ldap-Group rlm_ldap: Registering ldap_groupcmp for xcelco1-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name xcelco1 rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id rlm_ldap: LDAP radiusGroupName mapped to RADIUS Group-Name conns: 0x18c60790 Module: Instantiating module "xcelco2" from file /etc/raddb/modules/ldap ldap xcelco2 { server = "web-ldap02.eastlink.ca" port = 389 password = "XXXXX" identity = "uid=xcelco-ro,o=xcelco.on.ca,dc=eastlink,dc=ca" net_timeout = 1 timeout = 4 timelimit = 3 max_uses = 0 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=radius,o=xcelco.on.ca,dc=eastlink,dc=ca" filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=posixAccount)(cn=true))" base_filter = "(objectclass=radiusprofile)" password_attribute = "userPassword" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 10 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute xcelco2-Ldap-Group rlm_ldap: Registering ldap_groupcmp for xcelco2-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name xcelco2 rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id rlm_ldap: LDAP radiusGroupName mapped to RADIUS Group-Name conns: 0x18c63110 Module: Checking authorize {...} for more modules to load Module: Checking preacct {...} for more modules to load Module: Checking accounting {...} for more modules to load Module: Checking session {...} for more modules to load Module: Checking post-auth {...} for more modules to load } # modules } # server server virtual.persona.ca { # from file /etc/raddb/sites-enabled/virtual.persona.ca modules { Module: Checking authenticate {...} for more modules to load Module: Instantiating module "persona1" from file /etc/raddb/modules/ldap ldap persona1 { server = "web-ldap01.eastlink.ca" port = 389 password = "XXXXX" identity = "uid=persona-ro,o=persona.ca,dc=eastlink,dc=ca" net_timeout = 1 timeout = 4 timelimit = 3 max_uses = 0 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=radius,o=persona.ca,dc=eastlink,dc=ca" filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=posixAccount)(cn=true))" base_filter = "(objectclass=radiusprofile)" password_attribute = "userPassword" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 10 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute persona1-Ldap-Group rlm_ldap: Registering ldap_groupcmp for persona1-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name persona1 rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id rlm_ldap: LDAP radiusGroupName mapped to RADIUS Group-Name conns: 0x18c66d80 Module: Instantiating module "persona2" from file /etc/raddb/modules/ldap ldap persona2 { server = "web-ldap02.eastlink.ca" port = 389 password = "XXXXX" identity = "uid=persona-ro,o=persona.ca,dc=eastlink,dc=ca" net_timeout = 1 timeout = 4 timelimit = 3 max_uses = 0 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=radius,o=persona.ca,dc=eastlink,dc=ca" filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=posixAccount)(cn=true))" base_filter = "(objectclass=radiusprofile)" password_attribute = "userPassword" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 10 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute persona2-Ldap-Group rlm_ldap: Registering ldap_groupcmp for persona2-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name persona2 rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id rlm_ldap: LDAP radiusGroupName mapped to RADIUS Group-Name conns: 0x18c69700 Module: Checking authorize {...} for more modules to load Module: Checking preacct {...} for more modules to load Module: Checking accounting {...} for more modules to load Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Linked to module rlm_eap Module: Instantiating module "eap" from file /etc/raddb/eap.conf eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 4096 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 CA_path = "/etc/raddb/certs" pem_file_type = yes private_key_file = "/etc/raddb/certs/server.pem" certificate_file = "/etc/raddb/certs/server.pem" CA_file = "/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/etc/raddb/certs/dh" random_file = "/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" cache { enable = no lifetime = 24 max_entries = 255 } verify { } ocsp { enable = no override_cert_url = yes url = "http://127.0.0.1/ocsp/" use_nonce = yes timeout = 0 softfail = no } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no send_error = no } Module: Checking post-auth {...} for more modules to load } # modules } # server server status { # from file /etc/raddb/sites-enabled/status modules { Module: Creating Autz-Type = Status-Server Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_always Module: Instantiating module "ok" from file /etc/raddb/modules/always always ok { rcode = "ok" simulcount = 0 mpp = no } } # modules } # server server virtual.eastlink.ca { # from file /etc/raddb/sites-enabled/virtual.eastlink.ca modules { Module: Checking authenticate {...} for more modules to load Module: Instantiating module "eastlink1" from file /etc/raddb/modules/ldap ldap eastlink1 { server = "ds01.eastlink.ca" port = 389 password = "" identity = "" net_timeout = 1 timeout = 4 timelimit = 3 max_uses = 0 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=People,o=eastlink.ca,o=asp" filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(inetUserStatus=active))" base_filter = "(objectclass=radiusprofile)" password_attribute = "userPassword" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 5 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute eastlink1-Ldap-Group rlm_ldap: Registering ldap_groupcmp for eastlink1-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name eastlink1 rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id rlm_ldap: LDAP radiusGroupName mapped to RADIUS Group-Name conns: 0x18c8cd70 Module: Instantiating module "eastlink2" from file /etc/raddb/modules/ldap ldap eastlink2 { server = "ds02.eastlink.ca" port = 389 password = "" identity = "" net_timeout = 1 timeout = 4 timelimit = 3 max_uses = 0 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=People,o=eastlink.ca,o=asp" filter = "(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(inetUserStatus=active))" base_filter = "(objectclass=radiusprofile)" password_attribute = "userPassword" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 5 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute eastlink2-Ldap-Group rlm_ldap: Registering ldap_groupcmp for eastlink2-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name eastlink2 rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id rlm_ldap: LDAP radiusGroupName mapped to RADIUS Group-Name conns: 0x18c8f690 Module: Checking authorize {...} for more modules to load Module: Checking preacct {...} for more modules to load Module: Checking accounting {...} for more modules to load Module: Checking session {...} for more modules to load Module: Checking post-auth {...} for more modules to load } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 24.222.150.166 port = 1812 } listen { type = "acct" ipaddr = 24.222.150.166 port = 1813 } listen { type = "status" ipaddr = 127.0.0.1 port = 18121 client admin { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "adminsecret" } } Listening on authentication address 24.222.150.166 port 1812 Listening on accounting address 24.222.150.166 port 1813 Listening on status address 127.0.0.1 port 18121 as server status Listening on proxy address 24.222.150.166 port 1814 Ready to process requests. Chris Taylor System Administrator Network Operations Eastlink Chris.Taylor@corp.eastlink.ca T: 519.773.1287 -----Original Message----- From: freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org [mailto:freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org] On Behalf Of A.L.M.Buxey@lboro.ac.uk Sent: Wednesday, May 01, 2013 3:14 PM To: FreeRadius users mailing list Subject: Re: segfault error Hi,

I did some more debugging and I always seem to get a segfault at the same place. Is there something I should be looking at on the LDAP backend?

i'd like to knwo what you are doing, how you have this configured.....and why your server thinks '45270' or 'bradly' or SSHA encrypted, its likely you're forcing somthing to occur which is truly stuffing the SHA libraries when they try to evaluate the not SSHA1 hash as per the docs, radiusd -X output alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Sorry miscommunication on my part. Below is an example of a request that causes the segfault. I was also able to get a core dump as well which I pasted at the bottom. ############################################################ Waking up in 0.1 seconds. rad_recv: Access-Request packet from host 24.139.16.70 port 1645, id=130, length=140 Framed-Protocol = PPP User-Name = "twolittles@amtelecom.net" User-Password = "4141" NAS-Port-Type = Virtual NAS-Port-Id = "1/0/5/494" Cisco-AVPair = "client-mac-address=5cd9.985e.ed7d" Service-Type = Framed-User NAS-IP-Address = 24.139.16.70 # Executing section authorize from file /etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[digest] returns noop [suffix] Looking up realm "amtelecom.net" for User-Name = "twolittles@amtelecom.net" [suffix] Found realm "amtelecom.net" [suffix] Adding Stripped-User-Name = "twolittles" [suffix] Adding Realm = "amtelecom.net" [suffix] Proxying request from user twolittles to realm amtelecom.net [suffix] Preparing to proxy authentication request to realm "amtelecom.net" ++[suffix] returns updated ++[pap] returns noop WARNING: Empty pre-proxy section. Using default return values.

...

...

Sending proxied request internally to virtual server. server virtual.amtelecom.net { # Executing section authorize from file /etc/raddb/sites-enabled/virtual.amtelecom.net +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [suffix] Request already proxied. Ignoring. ++[suffix] returns ok ++- entering policy redundant {...} [amtelecom1] performing user authorization for twolittles [amtelecom1] expand: %{Stripped-User-Name} -> twolittles [amtelecom1] expand: (&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=posixAccount)(cn=true)) -> (&(uid=twolittles)(objectclass=posixAccount)(cn=true)) [amtelecom1] expand: ou=radius,o=amtelecom.net,dc=eastlink,dc=ca -> ou=radius,o=amtelecom.net,dc=eastlink,dc=ca [amtelecom1] ldap_get_conn: Checking Id: 0 [amtelecom1] ldap_get_conn: Got Id: 0 [amtelecom1] performing search in ou=radius,o=amtelecom.net,dc=eastlink,dc=ca, with filter (&(uid=twolittles)(objectclass=posixAccount)(cn=true)) [amtelecom1] checking if remote access for twolittles is allowed by cn [amtelecom1] Added User-Password = {SSHA}wD2k0jpAA6JDqNZkdf4UYiT7O89XujNiZGUUeg== in check items [amtelecom1] looking for check items in directory... [amtelecom1] userPassword -> Password-With-Header == "{SSHA}wD2k0jpAA6JDqNZkdf4UYiT7O89XujNiZGUUeg==" [amtelecom1] radiusSimultaneousUse -> Simultaneous-Use == 99 [amtelecom1] radiusAuthType -> Auth-Type == PAP [amtelecom1] looking for reply items in directory... [amtelecom1] radiusGroupName -> Group-Name = "eastlink_residential_profile" [amtelecom1] user twolittles authorized to use remote access [amtelecom1] ldap_release_conn: Release Id: 0 +++[amtelecom1] returns ok ++- policy redundant returns ok ++- entering policy redundant {...} [sql1.amtelecom.net] expand: %{User-Name}@%{Realm} -> twolittles@amtelecom.net [sql1.amtelecom.net] sql_set_user escaped user --> 'twolittles@amtelecom.net' rlm_sql (sql1.amtelecom.net): Reserving sql socket id: 4 [sql1.amtelecom.net] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'twolittles@amtelecom.net' ORDER BY id rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'twolittles@amtelecom.net' ORDER BY id [sql1.amtelecom.net] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'twolittles@amtelecom.net' ORDER BY priority rlm_sql_mysql: query: SELECT groupname FROM radusergroup WHERE username = 'twolittles@amtelecom.net' ORDER BY priority [sql1.amtelecom.net] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'acl_permit_eastlink_smtp' ORDER BY id rlm_sql_mysql: query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'acl_permit_eastlink_smtp' ORDER BY id [sql1.amtelecom.net] User found in group acl_permit_eastlink_smtp [sql1.amtelecom.net] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'acl_permit_eastlink_smtp' ORDER BY id rlm_sql_mysql: query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'acl_permit_eastlink_smtp' ORDER BY id rlm_sql (sql1.amtelecom.net): Released sql socket id: 4 +++[sql1.amtelecom.net] returns ok ++- policy redundant returns ok [files] users: Matched entry DEFAULT at line 214 ++[files] returns ok [pap] Normalizing SSHA1-Password from base64 encoding [pap] WARNING: Auth-Type already set. Not setting to PAP ++[pap] returns noop Found Auth-Type = PAP # Executing group from file /etc/raddb/sites-enabled/virtual.amtelecom.net +- entering group PAP {...} [pap] login attempt with password "4141" [pap] Using SSHA encryption. [pap] Normalizing SSHA1-Password from base64 encoding Segmentation fault [root@on-radius01 raddb]# ##########################################################

########################################################## Waking up in 0.4 seconds. rad_recv: Access-Request packet from host 24.139.16.70 port 1645, id=82, length=141 Framed-Protocol = PPP User-Name = "foursisters@amtelecom.net" User-Password = "bradly" NAS-Port-Type = Virtual NAS-Port-Id = "0/0/5/236" Cisco-AVPair = "client-mac-address=0026.5acf.63d7" Service-Type = Framed-User NAS-IP-Address = 24.139.16.70 # Executing section authorize from file /etc/raddb/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[digest] returns noop [suffix] Looking up realm "amtelecom.net" for User-Name = "foursisters@amtelecom.net" [suffix] Found realm "amtelecom.net" [suffix] Adding Stripped-User-Name = "foursisters" [suffix] Adding Realm = "amtelecom.net" [suffix] Proxying request from user foursisters to realm amtelecom.net [suffix] Preparing to proxy authentication request to realm "amtelecom.net" ++[suffix] returns updated ++[pap] returns noop WARNING: Empty pre-proxy section. Using default return values.

...

...

Sending proxied request internally to virtual server. server virtual.amtelecom.net { # Executing section authorize from file /etc/raddb/sites-enabled/virtual.amtelecom.net +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [suffix] Request already proxied. Ignoring. ++[suffix] returns ok ++- entering policy redundant {...} [amtelecom1] performing user authorization for foursisters [amtelecom1] expand: %{Stripped-User-Name} -> foursisters [amtelecom1] expand: (&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectclass=posixAccount)(cn=true)) -> (&(uid=foursisters)(objectclass=posixAccount)(cn=true)) [amtelecom1] expand: ou=radius,o=amtelecom.net,dc=eastlink,dc=ca -> ou=radius,o=amtelecom.net,dc=eastlink,dc=ca [amtelecom1] ldap_get_conn: Checking Id: 0 [amtelecom1] ldap_get_conn: Got Id: 0 [amtelecom1] performing search in ou=radius,o=amtelecom.net,dc=eastlink,dc=ca, with filter (&(uid=foursisters)(objectclass=posixAccount)(cn=true)) [amtelecom1] checking if remote access for foursisters is allowed by cn [amtelecom1] Added User-Password = {SSHA}PW+QjeT/PYNlscpwJ83MgLog/UYlp9/0mCg0mA== in check items [amtelecom1] looking for check items in directory... [amtelecom1] userPassword -> Password-With-Header == "{SSHA}PW+QjeT/PYNlscpwJ83MgLog/UYlp9/0mCg0mA==" [amtelecom1] radiusSimultaneousUse -> Simultaneous-Use == 99 [amtelecom1] radiusAuthType -> Auth-Type == PAP [amtelecom1] looking for reply items in directory... [amtelecom1] radiusGroupName -> Group-Name = "eastlink_residential_profile" [amtelecom1] user foursisters authorized to use remote access [amtelecom1] ldap_release_conn: Release Id: 0 +++[amtelecom1] returns ok ++- policy redundant returns ok ++- entering policy redundant {...} [sql1.amtelecom.net] expand: %{User-Name}@%{Realm} -> foursisters@amtelecom.net [sql1.amtelecom.net] sql_set_user escaped user --> 'foursisters@amtelecom.net' rlm_sql (sql1.amtelecom.net): Reserving sql socket id: 0 [sql1.amtelecom.net] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'foursisters@amtelecom.net' ORDER BY id rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'foursisters@amtelecom.net' ORDER BY id [sql1.amtelecom.net] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'foursisters@amtelecom.net' ORDER BY priority rlm_sql_mysql: query: SELECT groupname FROM radusergroup WHERE username = 'foursisters@amtelecom.net' ORDER BY priority [sql1.amtelecom.net] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'acl_permit_eastlink_smtp' ORDER BY id rlm_sql_mysql: query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'acl_permit_eastlink_smtp' ORDER BY id [sql1.amtelecom.net] User found in group acl_permit_eastlink_smtp [sql1.amtelecom.net] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'acl_permit_eastlink_smtp' ORDER BY id rlm_sql_mysql: query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'acl_permit_eastlink_smtp' ORDER BY id rlm_sql (sql1.amtelecom.net): Released sql socket id: 0 +++[sql1.amtelecom.net] returns ok ++- policy redundant returns ok [files] users: Matched entry DEFAULT at line 214 ++[files] returns ok [pap] Normalizing SSHA1-Password from base64 encoding [pap] WARNING: Auth-Type already set. Not setting to PAP ++[pap] returns noop Found Auth-Type = PAP # Executing group from file /etc/raddb/sites-enabled/virtual.amtelecom.net +- entering group PAP {...} [pap] login attempt with password "bradly" [pap] Using SSHA encryption. [pap] Normalizing SSHA1-Password from base64 encoding Segmentation fault [root@on-radius01 raddb]# #################################################################

################################################################### GNU gdb (GDB) CentOS (7.0.1-45.el5.centos) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/sbin/radiusd...done. [New Thread 11387] [New Thread 11386] [New Thread 11385] [New Thread 11384] [New Thread 11383] [New Thread 11382] Reading symbols from /usr/local/lib/libfreeradius-radius-2.2.0.so...done. Loaded symbols for /usr/local/lib/libfreeradius-radius-2.2.0.so Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /usr/local/lib/libltdl.so.3...done. Loaded symbols for /usr/local/lib/libltdl.so.3 Reading symbols from /lib64/libssl.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libssl.so.6 Reading symbols from /lib64/libcrypto.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypto.so.6 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib64/libgssapi_krb5.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from /usr/lib64/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /usr/lib64/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /usr/lib64/libkrb5support.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libsepol.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libsepol.so.1 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libnss_ldap.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_ldap.so.2 Reading symbols from /usr/local/lib/rlm_exec.so...done. Loaded symbols for /usr/local/lib/rlm_exec.so Reading symbols from /usr/local/lib/rlm_expr.so...done. Loaded symbols for /usr/local/lib/rlm_expr.so Reading symbols from /usr/local/lib/rlm_expiration.so...done. Loaded symbols for /usr/local/lib/rlm_expiration.so Reading symbols from /usr/local/lib/rlm_logintime.so...done. Loaded symbols for /usr/local/lib/rlm_logintime.so Reading symbols from /usr/local/lib/rlm_pap.so...done. Loaded symbols for /usr/local/lib/rlm_pap.so Reading symbols from /usr/local/lib/rlm_chap.so...done. Loaded symbols for /usr/local/lib/rlm_chap.so Reading symbols from /usr/local/lib/rlm_preprocess.so...done. Loaded symbols for /usr/local/lib/rlm_preprocess.so Reading symbols from /usr/local/lib/rlm_digest.so...done. Loaded symbols for /usr/local/lib/rlm_digest.so Reading symbols from /usr/local/lib/rlm_realm.so...done. Loaded symbols for /usr/local/lib/rlm_realm.so Reading symbols from /usr/local/lib/rlm_acct_unique.so...done. Loaded symbols for /usr/local/lib/rlm_acct_unique.so Reading symbols from /usr/local/lib/rlm_files.so...done. Loaded symbols for /usr/local/lib/rlm_files.so Reading symbols from /usr/local/lib/rlm_detail.so...done. Loaded symbols for /usr/local/lib/rlm_detail.so Reading symbols from /usr/local/lib/rlm_unix.so...done. Loaded symbols for /usr/local/lib/rlm_unix.so Reading symbols from /usr/local/lib/rlm_radutmp.so...done. Loaded symbols for /usr/local/lib/rlm_radutmp.so Reading symbols from /usr/local/lib/rlm_attr_filter.so...done. Loaded symbols for /usr/local/lib/rlm_attr_filter.so Reading symbols from /usr/local/lib/rlm_ldap.so...done. Loaded symbols for /usr/local/lib/rlm_ldap.so Reading symbols from /usr/lib64/libldap_r-2.3.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libldap_r-2.3.so.0 Reading symbols from /usr/lib64/liblber-2.3.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/liblber-2.3.so.0 Reading symbols from /usr/lib64/libsasl2.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from /usr/local/lib/rlm_sql.so...done. Loaded symbols for /usr/local/lib/rlm_sql.so Reading symbols from /usr/local/lib/rlm_sql_mysql.so...done. Loaded symbols for /usr/local/lib/rlm_sql_mysql.so Reading symbols from /usr/lib64/mysql/libmysqlclient_r.so.15...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/mysql/libmysqlclient_r.so.15 Reading symbols from /lib64/libm.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libm.so.6 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /lib64/libnss_dns.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_dns.so.2 Reading symbols from /usr/local/lib/rlm_eap.so...done. Loaded symbols for /usr/local/lib/rlm_eap.so Reading symbols from /usr/local/lib/libfreeradius-eap-2.2.0.so...done. Loaded symbols for /usr/local/lib/libfreeradius-eap-2.2.0.so Reading symbols from /usr/local/lib/rlm_eap_md5.so...done. Loaded symbols for /usr/local/lib/rlm_eap_md5.so Reading symbols from /usr/local/lib/rlm_eap_leap.so...done. Loaded symbols for /usr/local/lib/rlm_eap_leap.so Reading symbols from /usr/local/lib/rlm_eap_gtc.so...done. Loaded symbols for /usr/local/lib/rlm_eap_gtc.so Reading symbols from /usr/local/lib/rlm_eap_tls.so...done. Loaded symbols for /usr/local/lib/rlm_eap_tls.so Reading symbols from /usr/local/lib/rlm_eap_ttls.so...done. Loaded symbols for /usr/local/lib/rlm_eap_ttls.so Reading symbols from /usr/local/lib/rlm_eap_peap.so...done. Loaded symbols for /usr/local/lib/rlm_eap_peap.so Reading symbols from /usr/local/lib/rlm_eap_mschapv2.so...done. Loaded symbols for /usr/local/lib/rlm_eap_mschapv2.so Reading symbols from /usr/local/lib/rlm_always.so...done. Loaded symbols for /usr/local/lib/rlm_always.so warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7fff84bfd000 Core was generated by `/usr/sbin/radiusd -d /etc/raddb'. Program terminated with signal 11, Segmentation fault. #0 0x0000003c6c07b5bb in memcpy () from /lib64/libc.so.6 ################################################################### Thanks, Chris -----Original Message----- From: freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org [mailto:freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org] On Behalf Of A.L.M.Buxey@lboro.ac.uk Sent: Wednesday, May 01, 2013 6:30 PM To: FreeRadius users mailing list Subject: Re: segfault error hi, ..thats the startup....and when a request comes in (the one that segfaults the server.....) ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

I think I have what you are looking for now. I have copied the whole dump from when I start using gdb. Chris [root@on-radius01 raddb]# gdb /usr/sbin/radiusd /tmp/core-radiusd-11-95-95-11609-1367435209 GNU gdb (GDB) CentOS (7.0.1-45.el5.centos) Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/sbin/radiusd...done. [New Thread 11611] [New Thread 11614] [New Thread 11613] [New Thread 11612] [New Thread 11610] [New Thread 11609] Reading symbols from /usr/local/lib/libfreeradius-radius-2.2.0.so...done. Loaded symbols for /usr/local/lib/libfreeradius-radius-2.2.0.so Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libnsl.so.1 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /usr/local/lib/libltdl.so.3...done. Loaded symbols for /usr/local/lib/libltdl.so.3 Reading symbols from /lib64/libssl.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libssl.so.6 Reading symbols from /lib64/libcrypto.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypto.so.6 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /usr/lib64/libgssapi_krb5.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from /usr/lib64/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /usr/lib64/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /usr/lib64/libkrb5support.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libselinux.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libsepol.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libsepol.so.1 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from /lib64/libnss_ldap.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_ldap.so.2 Reading symbols from /usr/local/lib/rlm_exec-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_exec-2.2.0.so Reading symbols from /usr/local/lib/rlm_expr-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_expr-2.2.0.so Reading symbols from /usr/local/lib/rlm_expiration-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_expiration-2.2.0.so Reading symbols from /usr/local/lib/rlm_logintime-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_logintime-2.2.0.so Reading symbols from /usr/local/lib/rlm_pap-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_pap-2.2.0.so Reading symbols from /usr/local/lib/rlm_chap-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_chap-2.2.0.so Reading symbols from /usr/local/lib/rlm_preprocess-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_preprocess-2.2.0.so Reading symbols from /usr/local/lib/rlm_digest-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_digest-2.2.0.so Reading symbols from /usr/local/lib/rlm_realm-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_realm-2.2.0.so Reading symbols from /usr/local/lib/rlm_acct_unique-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_acct_unique-2.2.0.so Reading symbols from /usr/local/lib/rlm_files-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_files-2.2.0.so Reading symbols from /usr/local/lib/rlm_detail-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_detail-2.2.0.so Reading symbols from /usr/local/lib/rlm_unix-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_unix-2.2.0.so Reading symbols from /usr/local/lib/rlm_radutmp-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_radutmp-2.2.0.so Reading symbols from /usr/local/lib/rlm_attr_filter-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_attr_filter-2.2.0.so Reading symbols from /usr/local/lib/rlm_ldap-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_ldap-2.2.0.so Reading symbols from /usr/lib64/libldap_r-2.3.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libldap_r-2.3.so.0 Reading symbols from /usr/lib64/liblber-2.3.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/liblber-2.3.so.0 Reading symbols from /usr/lib64/libsasl2.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from /usr/local/lib/rlm_sql-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_sql-2.2.0.so Reading symbols from /usr/local/lib/rlm_sql_mysql-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_sql_mysql-2.2.0.so Reading symbols from /usr/lib64/mysql/libmysqlclient_r.so.15...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/mysql/libmysqlclient_r.so.15 Reading symbols from /lib64/libm.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libm.so.6 Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libgcc_s.so.1 Reading symbols from /lib64/libnss_dns.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_dns.so.2 Reading symbols from /usr/local/lib/rlm_eap-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_eap-2.2.0.so Reading symbols from /usr/local/lib/libfreeradius-eap-2.2.0.so...done. Loaded symbols for /usr/local/lib/libfreeradius-eap-2.2.0.so Reading symbols from /usr/local/lib/rlm_eap_md5-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_eap_md5-2.2.0.so Reading symbols from /usr/local/lib/rlm_eap_leap-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_eap_leap-2.2.0.so Reading symbols from /usr/local/lib/rlm_eap_gtc-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_eap_gtc-2.2.0.so Reading symbols from /usr/local/lib/rlm_eap_tls-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_eap_tls-2.2.0.so Reading symbols from /usr/local/lib/rlm_eap_ttls-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_eap_ttls-2.2.0.so Reading symbols from /usr/local/lib/rlm_eap_peap-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_eap_peap-2.2.0.so Reading symbols from /usr/local/lib/rlm_eap_mschapv2-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_eap_mschapv2-2.2.0.so Reading symbols from /usr/local/lib/rlm_always-2.2.0.so...done. Loaded symbols for /usr/local/lib/rlm_always-2.2.0.so warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7fffdaffd000 Core was generated by `/usr/sbin/radiusd -d /etc/raddb'. Program terminated with signal 11, Segmentation fault. #0 0x0000003c6c07b5bb in memcpy () from /lib64/libc.so.6 (gdb) set logging file /etc/raddb/gdb-radiusd.log (gdb) set logging on Copying output to /etc/raddb/gdb-radiusd.log. (gdb) info threads 6 Thread 0x2b70ff350f60 (LWP 11609) 0x0000003c6c0ce1a2 in select () from /lib64/libc.so.6 5 Thread 11610 0x0000003c6d00ce51 in sem_wait () from /lib64/libpthread.so.0 4 Thread 11612 0x0000003c6d00ce51 in sem_wait () from /lib64/libpthread.so.0 3 Thread 11613 0x0000003c6d00ce51 in sem_wait () from /lib64/libpthread.so.0 2 Thread 11614 0x0000003c6d00ce51 in sem_wait () from /lib64/libpthread.so.0 * 1 Thread 0x2b7104c7f940 (LWP 11611) 0x0000003c6c07b5bb in memcpy () from /lib64/libc.so.6 (gdb) thread apply all bt full Thread 6 (Thread 0x2b70ff350f60 (LWP 11609)): #0 0x0000003c6c0ce1a2 in select () from /lib64/libc.so.6 No symbol table info available. #1 0x00002b70fef24cf7 in fr_event_loop (el=0x12739500) at event.c:391 i = <value optimized out> rcode = 1 maxfd = 39 when = {tv_sec = 0, tv_usec = 427000} wake = 0x7fffdafcdb30 read_fds = {fds_bits = {1047972020224, 0 <repeats 15 times>}} master_fds = {fds_bits = {1047972020224, 0 <repeats 15 times>}} #2 0x000000000041cc3a in main (argc=<value optimized out>, argv=<value optimized out>) at radiusd.c:408 rcode = 309599712 argval = <value optimized out> spawn_flag = 1 dont_fork = 0 flag = 0 act = {__sigaction_handler = {sa_handler = 0x41cf20 <sig_fatal>, sa_sigaction = 0x41cf20 <sig_fatal>}, sa_mask = { __val = {0 <repeats 16 times>}}, sa_flags = 0, sa_restorer = 0} Thread 5 (Thread 11610): #0 0x0000003c6d00ce51 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x000000000041ff83 in request_handler_thread (arg=<value optimized out>) at threads.c:498 fun = 0x408910 <rad_authenticate> self = 0x12740a50 #2 0x0000003c6d00683d in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000003c6c0d500d in clone () from /lib64/libc.so.6 No symbol table info available. Thread 4 (Thread 11612): #0 0x0000003c6d00ce51 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x000000000041ff83 in request_handler_thread (arg=<value optimized out>) at threads.c:498 fun = 0x408910 <rad_authenticate> self = 0x12740c10 #2 0x0000003c6d00683d in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000003c6c0d500d in clone () from /lib64/libc.so.6 ---Type <return> to continue, or q <return> to quit--- No symbol table info available. Thread 3 (Thread 11613): #0 0x0000003c6d00ce51 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x000000000041ff83 in request_handler_thread (arg=<value optimized out>) at threads.c:498 fun = 0x408300 <rad_accounting> self = 0x12740d90 #2 0x0000003c6d00683d in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000003c6c0d500d in clone () from /lib64/libc.so.6 No symbol table info available. Thread 2 (Thread 11614): #0 0x0000003c6d00ce51 in sem_wait () from /lib64/libpthread.so.0 No symbol table info available. #1 0x000000000041ff83 in request_handler_thread (arg=<value optimized out>) at threads.c:498 fun = 0x408300 <rad_accounting> self = 0x12740f10 #2 0x0000003c6d00683d in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #3 0x0000003c6c0d500d in clone () from /lib64/libc.so.6 No symbol table info available. Thread 1 (Thread 0x2b7104c7f940 (LWP 11611)): #0 0x0000003c6c07b5bb in memcpy () from /lib64/libc.so.6 No symbol table info available. #1 0x00002b710027f3e9 in normify (request=0x12756bb0, vp=0x12778160, min_length=20) at rlm_pap.c:273 decoded = 18446744073709551615 buffer = "\311-\307\004q+\000\000j\b\362\376p+\000\000+ \260\333\307\004q+\000\000p\334\307\004q+\000\000@\330\307\00 4q+\000\000\210\301v\022\000\000\000\000P\301v\022\000\000\000" #2 0x00002b710027fb57 in pap_authenticate (instance=0x12618990, request=0x12756bb0) at rlm_pap.c:707 vp = <value optimized out> module_fmsg_vp = <value optimized out> module_fmsg = '\000' <repeats 32 times>, "H\200w\022\001\000\000\000 \tb\022", '\000' <repeats 12 times>, "t\000\000\000\00 0\000\000\000\253\200\362\376p+", '\000' <repeats 18 times>"\253, \200\362\376p+\000\000\253\200\362\376\000\000\000\000v\203\361\3 76p+\000\000\024\000\000\000\000\000\000\000\274\362'\000q+\000\000\375\000\000\022\000\000\000\000\024\000\000\000\000\000\000\000 \024\000\000\000\000\000\000\000`\201w\022", '\000' <repeats 12 times>"\260, ku\022\000\000\000\000\230\201w\022\000\000\000\000\35 1\363'\000q+\000\000\321=\253\365H.f\001\360~\243v\230\001\021L\257j\024\342QDn\246\344]\354\375<\000\000\000F\004\000\000\000\000\ 000\000^\032\362\376p+\000\000HJ5l<\000\000\000\001\000\000\000\000" md5_context = {state = {0, 0, 309685208, 0}, count = {1213420411, 1862303041}, ---Type <return> to continue, or q <return> to quit--- buffer = "-Realm\000\000\340\341K\022\000\000\000\000\340I5l<", '\000' <repeats 11 times>"\340, I5l<", '\000' <repeats 11 times>, "8\001\000\000\000\000\000\000\035\367\350\000q+\000"} sha1_context = {state = {309685208, 0, 1, 0, 309821792}, count = {0, 309728429}, buffer = "\000\000\000\000\373\377\377\377\377\377\377\377\260ku\022\000\000\000\000\251\024v\022\000\000\000\000\022\365 '\000q+\000\000 \334\307\004q+\000\000 \334\307\004q+\000\000\220\211a\022\000\000\000\000\203\070\361\376"} digest = "d>u\022", '\000' <repeats 35 times> buff = "\001\000\000\000\000\000\000\000\360\335v\022\000\000\000\000\200<t\022\000\000\000\000\260ku\022\000\000\000\000\a \004\000\000\000\000\000\000A\001\000\000\000\000\000\000\070\001\000\000\000\000\000\000\005", '\000' <repeats 39 times>, "\020.w\ 022\000\000\000\000\020Xu\022", '\000' <repeats 12 times>"\262, \022B\000\000\000\000\000\000\000\000\000\001\000\000\000`\001\000\ 000(\000\000\000HJ5l<\000\000\000\300\332\307\004q+\000\000\000\000\000\000\000\000\000\000A\001\000\000\000\000\000\000\070\001\00 0\000\000\000\000\000\340I5l<\000\000\000 \004b\022\000\000\000\000`\001\000\000\000\000\000\000HJ5l<\000\000\000\000\333\307\004q+ \000\000\035\367\350\000q+\000\000A\001\000\000\000\000\000\000\070\001\000\000\000\000\000\000"... buff2 = "\001\000\000\000\000\000\000\000rTh\000q+\000\000\260ku\022\000\000\000\000\060\227a\022\000\000\000\000\001\000\0 00\000\000\000\000\000\001\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\071Xh\000q+\000\000\200\246a\022\000\000\000 \000\340(v\022\000\000\000\000\004\000\000\000\000\000\000\000`\001\000\000\000\000\000\000HJ5l<\000\000\000`\331\307\004q+\000\000 'UsA\001\000\000\000\000\000\000\070\001\000\000\000\000\000\000\005", '\000' <repeats 39 times>, "from cli\237Oh\000q+\000\00 0-bras1 port 0 vifrom client (\000\000\000-bras1 port 0"... #3 0x000000000041c0e6 in call_modsingle (component=0, c=<value optimized out>, request=0x12756bb0) at modcall.c:304 No locals. #4 modcall (component=0, c=<value optimized out>, request=0x12756bb0) at modcall.c:686 myresult = 1 stack = {pointer = 1634165107, priority = {0, 0, 0, 0, 0, 0, 0, 1634165107, 829124461, 13106, 0 <repeats 22 times>}, result = {0, 0, 2, 0 <repeats 16 times>, 24, 48, 80209248, 11121, 80209056, 11121, 0, 0, 0, 0, 0, 0, 0}, children = { 0x12706950, 0x127069c0, 0x0 <repeats 16 times>, 0x2b7104c7e320, 0x0, 0x2b7104c7ea80, 0x2b7104c7e970, 0x2b7104c7e970, 0x4c7e480, 0x4, 0x110, 0x12774b50, 0x2b7104c7e320, 0x3c6c068b5a, 0xfbad8001, 0x2b7104c7e970, 0x2b7104c7e970}, start = {0x0, 0x127069c0, 0x1270c340, 0x2b7104c7ea80, 0x2b7104c7e970, 0x2b7104c7ea80, 0x0, 0x600000000, 0x8, 0x0 <repeats 12 times>, 0xffffffff, 0x0, 0x0, 0x12619fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}} parent = 0x12706950 child = 0x127069c0 if_taken = 0 was_if = 0 #5 0x0000000000419415 in indexed_modcall (comp=0, idx=1024, request=0x12756bb0) at modules.c:740 rcode = <value optimized out> list = 0x12706950 server = 0x0 #6 0x0000000000409147 in rad_check_password (request=0x12756bb0) at auth.c:382 No locals. #7 rad_authenticate (request=0x12756bb0) at auth.c:667 namepair = 0x12743dc0 check_item = <value optimized out> auth_item = 0x12743f00 ---Type <return> to continue, or q <return> to quit--- module_msg = <value optimized out> tmp = <value optimized out> result = <value optimized out> autz_retry = <value optimized out> autz_type = <value optimized out> #8 0x0000000000427751 in radius_handle_request (request=0x12756bb0, fun=0x408910 <rad_authenticate>) at event.c:3784 No locals. #9 0x00000000004278d4 in proxy_to_virtual_server (request=0x12755810) at event.c:1980 fake = 0x12756bb0 fun = 0x408910 <rad_authenticate> #10 0x000000000042763a in successfully_proxied_request (request=0x12755810) at event.c:2265 No locals. #11 request_post_handler (request=0x12755810) at event.c:2329 rcode = <value optimized out> child_state = <value optimized out> vp = <value optimized out> #12 0x000000000042778d in radius_handle_request (request=0x12755810, fun=0x408910 <rad_authenticate>) at event.c:3790 No locals. #13 0x0000000000420320 in request_handler_thread (arg=<value optimized out>) at threads.c:537 fun = 0x408910 <rad_authenticate> self = 0x12740a90 #14 0x0000003c6d00683d in start_thread () from /lib64/libpthread.so.0 No symbol table info available. #15 0x0000003c6c0d500d in clone () from /lib64/libc.so.6 No symbol table info available. (gdb) Chris Taylor System Administrator Network Operations Eastlink Chris.Taylor@corp.eastlink.ca T: 519.773.1287 -----Original Message----- From: freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org [mailto:freeradius-users-bounces+chris.taylor=corp.eastlink.ca@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Thursday, May 02, 2013 11:58 AM To: FreeRadius users mailing list Subject: Re: segfault error Chris Taylor wrote:

Sorry miscommunication on my part. Below is an example of a request that causes the segfault. I was also able to get a core dump as well which I pasted at the bottom.

Which is *not* what we asked for. Please follow the instructions in doc/bugs. It gives DETAILED instructions on what to post. You are NOT posting the information we need to be able to help you. You're just showing that you can run gdb. This isn't useful. You need to run the gdb commands in doc/bugs, which tell us WHERE the problem occurred. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html