Segmentation fault v1.1.0 after requiring client certificate. Server crash.

[Phil Mayers]

Pascal Huisman wrote:
> Server crashes, have no clue why.
> 
> Installed from a debian binary package.
> I couldn't find rlm_eap_tls.so anywhere in my system. I did various
> searches.
> So I got tar.bz v1.1.0, compiled the source, made it and copied the
> various rlm_eap_tls files to the freeradius directory.

Hmm. Well that doesn't sound like a good start.

> 
> Server started up fine.
> 
> After connection to wlan from the XP machine I get warning messages
> about fragmentated packages.
> 
> Check the freeradius server, which crashed with a segmantation fault.
> 
> What went wrong?

There's no way of knowing. The server segfaulted so it can't print 
debugging info.

To find out, you'll need to follow the instructions in the "doc/bugs" 
file and run it under a debugger and get a traceback.

> 
> 
> Listening on authentication *:1812
> Listening on accounting *:1813
> Ready to process requests.
> rad_recv: Access-Request packet from host 192.168.0.3:1812, id=7, length=135
>         User-Name = "client"
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-802.11
>         NAS-Port = 0
>         NAS-Identifier =
> "USR5450\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
>         Calling-Station-Id = "00-60-b3-9d-ef-dd"
>         EAP-Message = 0x0201000b01636c69656e74
>         NAS-IP-Address = 192.168.0.3
>         Message-Authenticator = 0x70375d88fd54fcf3adb87b7293bd15fe
>   Processing the authorize section of radiusd.conf
> modcall: entering group authorize for request 0
>   modcall[authorize]: module "preprocess" returns ok for request 0
>   modcall[authorize]: module "chap" returns noop for request 0
>   modcall[authorize]: module "mschap" returns noop for request 0
>     rlm_realm: No '@' in User-Name = "client", looking up realm NULL
>     rlm_realm: No such realm "NULL"
>   modcall[authorize]: module "suffix" returns noop for request 0
>   rlm_eap: EAP packet type response id 1 length 11
>   rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
>   modcall[authorize]: module "eap" returns updated for request 0
>     users: Matched entry DEFAULT at line 155
>   modcall[authorize]: module "files" returns ok for request 0
> modcall: leaving group authorize (returns updated) for request 0
>   rad_check_password:  Found Auth-Type EAP
> auth: type "EAP"
>   Processing the authenticate section of radiusd.conf
> modcall: entering group authenticate for request 0
>   rlm_eap: EAP Identity
>   rlm_eap: processing type tls
>  rlm_eap_tls: Requiring client certificate
> Segmentatie fout
> 
> Thx.
> 
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html