Assert Failed on Proxing
andreapepa
andrea.pepa at trentinonetwork.it
Fri Oct 21 12:10:26 CEST 2011
Hi all,
As you can see from the attached log, i was tring to do some proxy test,
the server crashed attempting to proxy against a not running freeradius
proxy.... ( i was only testing proxy action not authentication on other FR
servers) is it normal?
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on authentication address 127.0.0.1 port 18120 as server
inner-tunnel
Listening on proxy address * port 1814
Ready to process requests.
rad_recv: Access-Request packet from host 172.25.18.123 port 39869, id=98,
length=215
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = "40:61:86:9C:6D:F9"
Called-Station-Id = "hotspot1"
NAS-Port-Id = "wlan1"
User-Name = "apepa at newradius.it"
NAS-Port = 2150629460
Acct-Session-Id = "80300054"
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = "http://10.29.66.1/logout"
NAS-Identifier = "AP Test Vincenzo"
NAS-IP-Address = 172.25.18.123
# Executing section authorize from file
/etc/freeradius/sites-enabled/default
+- entering group authorize {...}
++[preprocess] returns ok
++- entering policy auth_by_SSID {...}
+++? if (Called-Station-Id != /:WiNET-TR5G/ && User-Name =~ /cpe/ )
? Evaluating (Called-Station-Id != /:WiNET-TR5G/ ) -> TRUE
? Evaluating (User-Name =~ /cpe/) -> FALSE
+++? if (Called-Station-Id != /:WiNET-TR5G/ && User-Name =~ /cpe/ ) -> FALSE
++- policy auth_by_SSID returns ok
[auth_log] expand:
/var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d ->
/var/log/freeradius/radacct/172.25.18.123/auth-detail-20111021
[auth_log]
/var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands
to /var/log/freeradius/radacct/172.25.18.123/auth-detail-20111021
[auth_log] expand: %t -> Fri Oct 21 11:57:05 2011
++[auth_log] returns ok
[chap] Setting 'Auth-Type := CHAP'
++[chap] returns ok
++[mschap] returns noop
++[digest] returns noop
[suffix] Looking up realm "newradius.it" for User-Name =
"apepa at newradius.it"
[suffix] Found realm "newradius.it"
[suffix] Adding Stripped-User-Name = "apepa"
[suffix] Adding Realm = "newradius.it"
[suffix] Proxying request from user apepa to realm newradius.it
[suffix] Preparing to proxy authentication request to realm "newradius.it"
++[suffix] returns updated
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[files] returns noop
[sql] expand: %{Stripped-User-Name} -> apepa
[sql] expand: %{%{Stripped-User-Name}:-%{%{User-Name}:-none}} -> apepa
[sql] sql_set_user escaped user --> 'apepa'
rlm_sql (sql): Reserving sql socket id: 43
[sql] expand: SELECT id, UserName, Attribute, Value, Op FROM radcheck
WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName,
Attribute, Value, Op FROM radcheck WHERE Username = 'apepa' ORDER BY
id
rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM
radcheck WHERE Username = 'apepa' ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 1 , fields = 5
[sql] User found in radcheck table
[sql] expand: SELECT id, UserName, Attribute, Value, Op FROM radreply
WHERE Username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, UserName,
Attribute, Value, Op FROM radreply WHERE Username = 'apepa' ORDER BY
id
rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op FROM
radreply WHERE Username = 'apepa' ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 0 , fields = 5
[sql] expand: SELECT GroupName FROM radusergroup WHERE
UserName='%{SQL-User-Name}' ORDER BY priority -> SELECT GroupName FROM
radusergroup WHERE UserName='apepa' ORDER BY priority
rlm_sql_postgresql: query: SELECT GroupName FROM radusergroup WHERE
UserName='apepa' ORDER BY priority
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 1 , fields = 1
[sql] expand: SELECT id, GroupName, Attribute, Value, op FROM
radgroupcheck WHERE GroupName = '%{Sql-Group}' ORDER BY id -> SELECT id,
GroupName, Attribute, Value, op FROM radgroupcheck WHERE GroupName =
'TNNET' ORDER BY id
rlm_sql_postgresql: query: SELECT id, GroupName, Attribute, Value, op FROM
radgroupcheck WHERE GroupName = 'TNNET' ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 1 , fields = 5
[sql] User found in group TNNET
[sql] expand: SELECT id, GroupName, Attribute, Value, op FROM
radgroupreply WHERE GroupName = '%{Sql-Group}' ORDER BY id -> SELECT id,
GroupName, Attribute, Value, op FROM radgroupreply WHERE GroupName =
'TNNET' ORDER BY id
rlm_sql_postgresql: query: SELECT id, GroupName, Attribute, Value, op FROM
radgroupreply WHERE GroupName = 'TNNET' ORDER BY id
rlm_sql_postgresql: Status: PGRES_TUPLES_OK
rlm_sql_postgresql: query affected rows = 7 , fields = 5
rlm_sql (sql): Released sql socket id: 43
++[sql] returns ok
++[expiration] returns noop
++[logintime] returns noop
++[pap] returns noop
WARNING: Empty pre-proxy section. Using default return values.
Sending Access-Request of id 123 to 172.25.200.161 port 1812
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = "40:61:86:9C:6D:F9"
Called-Station-Id = "hotspot1"
NAS-Port-Id = "wlan1"
User-Name = "apepa"
NAS-Port = 2150629460
Acct-Session-Id = "80300054"
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = "http://10.29.66.1/logout"
NAS-Identifier = "AP Test Vincenzo"
NAS-IP-Address = 172.25.18.123
Message-Authenticator := 0x00000000000000000000000000000000
Proxy-State = 0x3938
Proxying request 0 to home server 172.25.200.161 port 1812
Sending Access-Request of id 123 to 172.25.200.161 port 1812
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = "40:61:86:9C:6D:F9"
Called-Station-Id = "hotspot1"
NAS-Port-Id = "wlan1"
User-Name = "apepa"
NAS-Port = 2150629460
Acct-Session-Id = "80300054"
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = "http://10.29.66.1/logout"
NAS-Identifier = "AP Test Vincenzo"
NAS-IP-Address = 172.25.18.123
Message-Authenticator := 0x00000000000000000000000000000000
Proxy-State = 0x3938
Going to the next request
Waking up in 0.9 seconds.
Waking up in 19.0 seconds.
rad_recv: Access-Request packet from host 172.25.18.123 port 39869, id=98,
length=215
Sending duplicate proxied request to home server 172.25.200.161 port 1812 -
ID: 123
Sending Access-Request of id 123 to 172.25.200.161 port 1812
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = "40:61:86:9C:6D:F9"
Called-Station-Id = "hotspot1"
NAS-Port-Id = "wlan1"
User-Name = "apepa"
NAS-Port = 2150629460
Acct-Session-Id = "80300054"
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = "http://10.29.66.1/logout"
NAS-Identifier = "AP Test Vincenzo"
NAS-IP-Address = 172.25.18.123
Message-Authenticator := 0x00000000000000000000000000000000
Proxy-State = 0x3938
Waking up in 16.9 seconds.
rad_recv: Access-Request packet from host 172.25.18.123 port 39869, id=98,
length=215
Sending duplicate proxied request to home server 172.25.200.161 port 1812 -
ID: 123
Sending Access-Request of id 123 to 172.25.200.161 port 1812
NAS-Port-Type = Wireless-802.11
Calling-Station-Id = "40:61:86:9C:6D:F9"
Called-Station-Id = "hotspot1"
NAS-Port-Id = "wlan1"
User-Name = "apepa"
NAS-Port = 2150629460
Acct-Session-Id = "80300054"
Framed-IP-Address = 10.29.66.3
Vendor-14988-Attr-10 = 0x0a1d4203
CHAP-Challenge = 0xb68620a7e997208ee43593bf739602b6
CHAP-Password = 0x563096c0c85e3e1b1bec92d585dc44496b
Service-Type = Login-User
WISPr-Logoff-URL = "http://10.29.66.1/logout"
NAS-Identifier = "AP Test Vincenzo"
NAS-IP-Address = 172.25.18.123
Message-Authenticator := 0x00000000000000000000000000000000
Proxy-State = 0x3938
Waking up in 13.9 seconds.
ASSERT FAILED event.c[1181]: "We do not have threads, but the request is
marked as queued or running in a child thread" == NULL
Abortito
--
View this message in context: http://freeradius.1045715.n5.nabble.com/Assert-Failed-on-Proxing-tp4924319p4924319.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
More information about the Freeradius-Users
mailing list