Error: rlm_eap: Failed to store handler

Rokkhan rokkhan at gmail.com
Thu Aug 6 22:42:38 CEST 2009


Thanks for all,
I installed freeradius 2.1.6 and it seems that eap works correctly, Thanks!

2009/7/28 Rokkhan <rokkhan at gmail.com>:
> Ok, I'll try to update 2.1.6.
> I have not found newer rpm packages than i installed in my server on
> freeradius.org, because when I go to the download section and I select
> Binary packages for Suse, it sends me to the page where i took from
> packages the first time
> (http://download.opensuse.org/repositories/network:/aaa/) and there is
> no newer version than 2.1.1-6
> But i will ask some help from my friends and I'll try to install from
> the tar.gz.
>
> By the way, now sometimes i get this error (Error: rlm_eap: No EAP
> session matching the State variable) from the server that maybe could
> be related.
>
>
> rad_recv: Access-Request packet from host 193.4.42.201 port 1645,
> id=241, length=403
>        User-Name =
> "36005405865132200096315165226168360027502200066623658TDP00290005"
>        Framed-MTU = 1400
>        Called-Station-Id = "001e.7aa8.e7a0"
>        Calling-Station-Id = "000b.6b1f.5ac4"
>        Service-Type = Login-User
>        Message-Authenticator = 0x0f1edc0510387abdb71af318e243543b
>        EAP-Message =
> 0x020500cc1900160301008610000082008043d5b97a98332e4f8370833ee0b6e9e528c305d999e378ab3ec157582089354df3f49c859da9b21592bf7861fa0c9976e33f25265f6fd4616e06450da6462a4ca59d5e2f225f0b7fffa5302d6c5cc1a1b389745992b881e4a4eb8e468c9750a532f108984aabac56b5148a669cc5d6c4fde9d80b909dc96438b651c55d71e0ef14030100010116030100300df0a239eafc874ff2eaaba0be58c0e9f9e9bcf69fbce7673e4104fb16e476279efc864fdbde012e197579c033e2ccf5
>        NAS-Port-Type = Wireless-802.11
>        NAS-Port = 55874
>        State = 0xa65781dda5529866f068234f09c4ea04
>        NAS-IP-Address = 193.4.42.201
>        NAS-Identifier = "sar00290001"
> Tue Jul 28 12:54:26 2009 : Info: +- entering group authorize {...}
> Tue Jul 28 12:54:26 2009 : Info: ++[preprocess] returns ok
> Tue Jul 28 12:54:26 2009 : Info: [eap] EAP packet type response id 5 length 204
> Tue Jul 28 12:54:26 2009 : Info: [eap] Continuing tunnel setup.
> Tue Jul 28 12:54:26 2009 : Info: ++[eap] returns ok
> Tue Jul 28 12:54:26 2009 : Info: Found Auth-Type = EAP
> Tue Jul 28 12:54:26 2009 : Info: +- entering group authenticate {...}
> Tue Jul 28 12:54:26 2009 : Error: rlm_eap: No EAP session matching the
> State variable.
> Tue Jul 28 12:54:26 2009 : Info: [eap] Either EAP-request timed out OR
> EAP-response to an unknown EAP-request
> Tue Jul 28 12:54:26 2009 : Info: [eap] Failed in handler
> Tue Jul 28 12:54:26 2009 : Info: ++[eap] returns invalid
> Tue Jul 28 12:54:26 2009 : Info: Failed to authenticate the user.
> Tue Jul 28 12:54:26 2009 : Auth: Login incorrect:
> [36005405865132200096315165226168360027502200066623658TDP00290005/<via
> Auth-Type = EAP>] (from client wifiap_sanjuan port 55874 cli
> 000b.6b1f.5ac4)
> Tue Jul 28 12:54:26 2009 : Info: Using Post-Auth-Type Reject
> Tue Jul 28 12:54:26 2009 : Info: +- entering group REJECT {...}
> Tue Jul 28 12:54:26 2009 : Info: [attr_filter.access_reject]
> expand: %{User-Name} ->
> 36005405865132200096315165226168360027502200066623658TDP00290005
> Tue Jul 28 12:54:26 2009 : Debug:  attr_filter: Matched entry DEFAULT at line 11
> Tue Jul 28 12:54:26 2009 : Info: ++[attr_filter.access_reject] returns updated
> Tue Jul 28 12:54:26 2009 : Info: [sql]  expand: %{User-Name} ->
> 36005405865132200096315165226168360027502200066623658TDP00290005
> Tue Jul 28 12:54:26 2009 : Info: [sql] sql_set_user escaped user -->
> '36005405865132200096315165226168360027502200066623658TDP00290005'
> Tue Jul 28 12:54:26 2009 : Info: [sql]  expand: %{User-Password} ->
> Tue Jul 28 12:54:26 2009 : Info: [sql]  expand: %{Chap-Password} ->
> Tue Jul 28 12:54:26 2009 : Info: [sql]  expand: INSERT INTO
> radpostauth                           (username, pass, reply,
> authdate)                           VALUES (
> '%{User-Name}',
> '%{%{User-Password}:-%{Chap-Password}}',
> '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth
>            (username, pass, reply, authdate)
>  VALUES (
> '36005405865132200096315165226168360027502200066623658TDP00290005',
>                       '',                           'Access-Reject',
> '2009-07-28 12:54:26')
> Tue Jul 28 12:54:26 2009 : Debug: rlm_sql (sql) in sql_postauth: query
> is INSERT INTO radpostauth                           (username, pass,
> reply, authdate)                           VALUES (
>       '36005405865132200096315165226168360027502200066623658TDP00290005',
>                          '',
> 'Access-Reject', '2009-07-28 12:54:26')
> Tue Jul 28 12:54:26 2009 : Debug: rlm_sql (sql): Reserving sql socket id: 11
> Tue Jul 28 12:54:26 2009 : Debug: rlm_sql (sql): Released sql socket id: 11
> Tue Jul 28 12:54:26 2009 : Info: ++[sql] returns ok
> Tue Jul 28 12:54:26 2009 : Info: Delaying reject of request 2 for 1 seconds
> Tue Jul 28 12:54:26 2009 : Debug: Going to the next request
> Tue Jul 28 12:54:26 2009 : Debug: Waking up in 0.9 seconds.
>
>
>
> 2009/7/28 Alan DeKok <aland at deployingradius.com>:
>> Rokkhan wrote:
>>> I have a working Freedius 1.0.5 server since year 2005 and i want to
>>> improve it, migrating a Freeradius 2.1.1-6 version, the latest version
>>> i have found for my Sles10 Sp2 server.
>>
>>  See the freeradius.org web page.  It has RPMs of the newer versions
>> for suse.
>>
>>> When i run server on debug mode for doing tests the server works
>>> without problems, and validate's users using both types of EAP and
>>> both Authorization types (Ldap and Mysql).
>>> But when i run as daemon and i introduce it in production validating
>>> about 2000 of users, freeradius 2.1.1-6 crashes in a few minutes and
>>> shows this error "Error: rlm_eap: Failed to store handler".
>>
>>  That's a bad error.  I haven't seen it in a while, so I would suggest
>> upgrading to 2.1.6.
>>
>>  Alan DeKok.
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>>
>




More information about the Freeradius-Users mailing list