LDAP Groups to Freeradius and then Ruckus Wireless?
Enrique Sainz Baixauli
enriquesainz.beca at intef.educacion.es
Mon Jun 9 16:09:04 CEST 2014
>>> Then it goes on to another module and prints those messages again. So
>>> I wonder why this fails (or doesn't get to end) in my system but runs
>>> peacefully in yours :S
>>
>>
>>IIRC your last issue was incorrect server time, causing the build
>>system to behave erratic (due to files with timestamp in the future).
>>Have you fixed that?
>
> Thanks guys, I totally forgot about the time issue... there were no warnings about that though (but they were there last time I tried, right?), but now it's already CCing everything into place :)
So I built it, installed the packages I needed and got a new segfault... now it happens on request (6) instead of (5), but I'm not sure if that's relevant. Anyway, this is the debug output:
Received Access-Request Id 5 from 192.168.60.1:1024 to 192.168.50.62:1812 length 205
User-Name = 'juan'
Calling-Station-Id = '00-26-C6-7C-C4-58'
NAS-IP-Address = 192.168.60.1
NAS-Port = 1
Called-Station-Id = '2C-E6-CC-1A-3E-5C:PROFESORES'
Service-Type = Framed-User
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
NAS-Identifier = '2C-E6-CC-1A-3E-5C'
Connect-Info = 'CONNECT 802.11a/n'
EAP-Message = 0x020500060d00
State = 0xa4cbf168a0cefc9b914d34b0ba196cbd
Attr-26.25053.3 = 0x50524f4645534f524553
Message-Authenticator = 0xecdfd4ad623a552db1db005ac3852121
(0) # Executing section authorize from file /etc/freeradius/sites-enabled/default
(0) authorize {
(0) [preprocess] = ok
(0) [chap] = noop
(0) [mschap] = noop
(0) [digest] = noop
(0) suffix : No '@' in User-Name = "juan", looking up realm NULL
(0) suffix : No such realm "NULL"
(0) [suffix] = noop
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(0) eap : EAP packet type response id 5 length 6
(0) eap : No EAP Start, assuming it's an on-going EAP conversation
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(0) [eap] = updated
(0) [files] = noop
rlm_ldap (ldap): Reserved connection (4)
(0) ldap : EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}})
(0) ldap : --> (uid=juan)
(0) ldap : EXPAND dc=ejemplo,dc=org
(0) ldap : --> dc=ejemplo,dc=org
(0) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(uid=juan)', scope 'sub'
(0) ldap : Waiting for search result...
(0) ldap : User object found at DN "uid=juan,ou=usuarios,dc=ejemplo,dc=org"
(0) ldap : No cacheable group memberships found in user object
(0) ldap : EXPAND (&(objectClass=groupOfNames)(member=%{control:Ldap-UserDn}))
(0) ldap : --> (&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))
(0) ldap : EXPAND dc=ejemplo,dc=org
(0) ldap : --> dc=ejemplo,dc=org
(0) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))', scope 'sub'
(0) ldap : Waiting for search result...
(0) ldap : Added control:Ldap-Group with value "profesores"
(0) ldap : Processing user attributes
(0) ldap : control:Password-With-Header += '1234'
rlm_ldap (ldap): Released connection (4)
(0) [ldap] = ok
(0) foreach &control:LDAP-Group
(0) update reply {
(0) EXPAND %{Foreach-Variable-0}
(0) --> profesores
(0) &Ruckus-User-Groups += "profesores"
(0) } # update reply = noop
(0) } # foreach &control:LDAP-Group = noop
(0) [expiration] = noop
(0) [logintime] = noop
(0) pap : No {...} in Password-With-Header, re-writing to Cleartext-Password
(0) WARNING: pap : Auth-Type already set. Not setting to PAP
(0) [pap] = noop
(0) } # authorize = updated
(0) Found Auth-Type = EAP
(0) # Executing group from file /etc/freeradius/sites-enabled/default
(0) authenticate {
rlm_eap (EAP): No EAP session matching state 0xa4cbf168a0cefc9b
(0) eap : Either EAP-request timed out OR EAP-response to an unknown EAP-request
(0) eap : Failed in handler
(0) [eap] = invalid
(0) } # authenticate = invalid
(0) Failed to authenticate the user
(0) Using Post-Auth-Type Reject
(0) # Executing group from file /etc/freeradius/sites-enabled/default
(0) Post-Auth-Type REJECT {
(0) attr_filter.access_reject : EXPAND %{User-Name}
(0) attr_filter.access_reject : --> juan
(0) attr_filter.access_reject : Matched entry DEFAULT at line 11
(0) [attr_filter.access_reject] = updated
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
rlm_eap (EAP): No EAP session matching state 0xa4cbf168a0cefc9b
(0) eap : Either EAP-request timed out OR EAP-response to an unknown EAP-request
(0) eap : Failed to get handler, probably already removed, not inserting EAP-Failure
(0) [eap] = noop
(0) remove_reply_message_if_eap remove_reply_message_if_eap {
(0) if (reply:EAP-Message && reply:Reply-Message)
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(0) if (reply:EAP-Message && reply:Reply-Message) -> FALSE
(0) else else {
(0) [noop] = noop
(0) } # else else = noop
(0) } # remove_reply_message_if_eap remove_reply_message_if_eap = noop
(0) } # Post-Auth-Type REJECT = updated
(0) Delaying response for 1 seconds
Waking up in 0.3 seconds.
Received Access-Request Id 7 from 192.168.60.1:1024 to 192.168.50.62:1812 length 190
User-Name = 'juan'
Calling-Station-Id = '00-26-C6-7C-C4-58'
NAS-IP-Address = 192.168.60.1
NAS-Port = 1
Called-Station-Id = '2C-E6-CC-1A-3E-5C:PROFESORES'
Service-Type = Framed-User
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
NAS-Identifier = '2C-E6-CC-1A-3E-5C'
Connect-Info = 'CONNECT 802.11a/n'
EAP-Message = 0x02080009016a75616e
Attr-26.25053.3 = 0x50524f4645534f524553
Message-Authenticator = 0x9430d795753bf83410e56c2415fc6d37
(1) # Executing section authorize from file /etc/freeradius/sites-enabled/default
(1) authorize {
(1) [preprocess] = ok
(1) [chap] = noop
(1) [mschap] = noop
(1) [digest] = noop
(1) suffix : No '@' in User-Name = "juan", looking up realm NULL
(1) suffix : No such realm "NULL"
(1) [suffix] = noop
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(1) eap : EAP packet type response id 8 length 9
(1) eap : EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(1) [eap] = ok
(1) } # authorize = ok
(1) Found Auth-Type = EAP
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(1) # Executing group from file /etc/freeradius/sites-enabled/default
(1) authenticate {
(1) eap : Peer sent Identity (1)
(1) eap : Calling eap_tls to process EAP data
(1) eap_tls : Flushing SSL sessions (of #0)
(1) eap_tls : Requiring client certificate
(1) eap_tls : Initiate
(1) eap_tls : Requiring client certificate
(1) eap_tls : Start returned 1
(1) eap : New EAP session, adding 'State' attribute to reply 0x39f9f21739f0ff37
(1) [eap] = handled
(1) } # authenticate = handled
Sending Access-Challenge Id 7 from 192.168.50.62:1812 to 192.168.60.1:1024
EAP-Message = 0x010900060d20
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x39f9f21739f0ff379b07374ed4d5dd35
(1) Finished request
Waking up in 0.3 seconds.
Received Access-Request Id 8 from 192.168.60.1:1024 to 192.168.50.62:1812 length 304
User-Name = 'juan'
Calling-Station-Id = '00-26-C6-7C-C4-58'
NAS-IP-Address = 192.168.60.1
NAS-Port = 1
Called-Station-Id = '2C-E6-CC-1A-3E-5C:PROFESORES'
Service-Type = Framed-User
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
NAS-Identifier = '2C-E6-CC-1A-3E-5C'
Connect-Info = 'CONNECT 802.11a/n'
EAP-Message = 0x020900690d800000005f160301005a0100005603015395bdf89d5eff13d69d9cc15d945142971cdc6712658d56fe4931cc4abf8d66000018002f00350005000ac013c014c009c00a003200380013000401000015ff01000100000a0006000400170018000b00020100
State = 0x39f9f21739f0ff379b07374ed4d5dd35
Attr-26.25053.3 = 0x50524f4645534f524553
Message-Authenticator = 0xe03f497cea2f738954c8b4904ebc2131
(2) # Executing section authorize from file /etc/freeradius/sites-enabled/default
(2) authorize {
(2) [preprocess] = ok
(2) [chap] = noop
(2) [mschap] = noop
(2) [digest] = noop
(2) suffix : No '@' in User-Name = "juan", looking up realm NULL
(2) suffix : No such realm "NULL"
(2) [suffix] = noop
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp: Unknown value 'Challenge' for attribute 'Post-Auth-Type'
(2) eap : EAP packet type response id 9 length 105
(2) eap : No EAP Start, assuming it's an on-going EAP conversation
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(2) [eap] = updated
(2) [files] = noop
rlm_ldap (ldap): Reserved connection (4)
(2) ldap : EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}})
(2) ldap : --> (uid=juan)
(2) ldap : EXPAND dc=ejemplo,dc=org
(2) ldap : --> dc=ejemplo,dc=org
(2) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(uid=juan)', scope 'sub'
(2) ldap : Waiting for search result...
(2) ldap : User object found at DN "uid=juan,ou=usuarios,dc=ejemplo,dc=org"
(2) ldap : No cacheable group memberships found in user object
(2) ldap : EXPAND (&(objectClass=groupOfNames)(member=%{control:Ldap-UserDn}))
(2) ldap : --> (&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))
(2) ldap : EXPAND dc=ejemplo,dc=org
(2) ldap : --> dc=ejemplo,dc=org
(2) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))', scope 'sub'
(2) ldap : Waiting for search result...
(2) ldap : Added control:Ldap-Group with value "profesores"
(2) ldap : Processing user attributes
(2) ldap : control:Password-With-Header += '1234'
rlm_ldap (ldap): Released connection (4)
(2) [ldap] = ok
(2) foreach &control:LDAP-Group
(2) update reply {
(2) EXPAND %{Foreach-Variable-0}
(2) --> profesores
(2) &Ruckus-User-Groups += "profesores"
(2) } # update reply = noop
(2) } # foreach &control:LDAP-Group = noop
(2) [expiration] = noop
(2) [logintime] = noop
(2) pap : No {...} in Password-With-Header, re-writing to Cleartext-Password
(2) WARNING: pap : Auth-Type already set. Not setting to PAP
(2) [pap] = noop
(2) } # authorize = updated
(2) Found Auth-Type = EAP
(2) # Executing group from file /etc/freeradius/sites-enabled/default
(2) authenticate {
(2) eap : Expiring EAP session with state 0x39f9f21739f0ff37
(2) eap : Finished EAP session with state 0x39f9f21739f0ff37
(2) eap : Previous EAP request found for state 0x39f9f21739f0ff37, released from the list
(2) eap : Peer sent TLS (13)
(2) eap : EAP TLS (13)
(2) eap : Calling eap_tls to process EAP data
(2) eap_tls : Authenticate
(2) eap_tls : processing EAP-TLS
TLS Length 95
(2) eap_tls : Length Included
(2) eap_tls : eaptls_verify returned 11
(2) eap_tls : (other): before/accept initialization
(2) eap_tls : TLS_accept: before/accept initialization
(2) eap_tls : <<< TLS 1.0 Handshake [length 005a], ClientHello
(2) eap_tls : TLS_accept: SSLv3 read client hello A
(2) eap_tls : >>> TLS 1.0 Handshake [length 0051], ServerHello
(2) eap_tls : TLS_accept: SSLv3 write server hello A
(2) eap_tls : >>> TLS 1.0 Handshake [length 0707], Certificate
(2) eap_tls : TLS_accept: SSLv3 write certificate A
(2) eap_tls : >>> TLS 1.0 Handshake [length 0056], CertificateRequest
(2) eap_tls : TLS_accept: SSLv3 write certificate request A
(2) eap_tls : TLS_accept: SSLv3 flush data
(2) eap_tls : TLS_accept: Need to read more data: SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode
(2) eap_tls : eaptls_process returned 13
(2) eap : New EAP session, adding 'State' attribute to reply 0x39f9f21738f3ff37
(2) [eap] = handled
(2) } # authenticate = handled
Sending Access-Challenge Id 8 from 192.168.50.62:1812 to 192.168.60.1:1024
Ruckus-User-Groups += 'profesores'
EAP-Message = 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
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x39f9f21738f3ff379b07374ed4d5dd35
(2) Finished request
Waking up in 0.3 seconds.
Received Access-Request Id 9 from 192.168.60.1:1024 to 192.168.50.62:1812 length 205
User-Name = 'juan'
Calling-Station-Id = '00-26-C6-7C-C4-58'
NAS-IP-Address = 192.168.60.1
NAS-Port = 1
Called-Station-Id = '2C-E6-CC-1A-3E-5C:PROFESORES'
Service-Type = Framed-User
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
NAS-Identifier = '2C-E6-CC-1A-3E-5C'
Connect-Info = 'CONNECT 802.11a/n'
EAP-Message = 0x020a00060d00
State = 0x39f9f21738f3ff379b07374ed4d5dd35
Attr-26.25053.3 = 0x50524f4645534f524553
Message-Authenticator = 0xbf22d41890a45c48318aad0ec1d13877
(3) # Executing section authorize from file /etc/freeradius/sites-enabled/default
(3) authorize {
(3) [preprocess] = ok
(3) [chap] = noop
(3) [mschap] = noop
(3) [digest] = noop
(3) suffix : No '@' in User-Name = "juan", looking up realm NULL
(3) suffix : No such realm "NULL"
(3) [suffix] = noop
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp: Unknown value 'Challenge' for attribute 'Post-Auth-Type'
(3) eap : EAP packet type response id 10 length 6
(3) eap : No EAP Start, assuming it's an on-going EAP conversation
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(3) [eap] = updated
(3) [files] = noop
rlm_ldap (ldap): Reserved connection (4)
(3) ldap : EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}})
(3) ldap : --> (uid=juan)
(3) ldap : EXPAND dc=ejemplo,dc=org
(3) ldap : --> dc=ejemplo,dc=org
(3) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(uid=juan)', scope 'sub'
(3) ldap : Waiting for search result...
(3) ldap : User object found at DN "uid=juan,ou=usuarios,dc=ejemplo,dc=org"
(3) ldap : No cacheable group memberships found in user object
(3) ldap : EXPAND (&(objectClass=groupOfNames)(member=%{control:Ldap-UserDn}))
(3) ldap : --> (&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))
(3) ldap : EXPAND dc=ejemplo,dc=org
(3) ldap : --> dc=ejemplo,dc=org
(3) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))', scope 'sub'
(3) ldap : Waiting for search result...
(3) ldap : Added control:Ldap-Group with value "profesores"
(3) ldap : Processing user attributes
(3) ldap : control:Password-With-Header += '1234'
rlm_ldap (ldap): Released connection (4)
(3) [ldap] = ok
(3) foreach &control:LDAP-Group
(3) update reply {
(3) EXPAND %{Foreach-Variable-0}
(3) --> profesores
(3) &Ruckus-User-Groups += "profesores"
(3) } # update reply = noop
(3) } # foreach &control:LDAP-Group = noop
(3) [expiration] = noop
(3) [logintime] = noop
(3) pap : No {...} in Password-With-Header, re-writing to Cleartext-Password
(3) WARNING: pap : Auth-Type already set. Not setting to PAP
(3) [pap] = noop
(3) } # authorize = updated
(3) Found Auth-Type = EAP
(3) # Executing group from file /etc/freeradius/sites-enabled/default
(3) authenticate {
(3) eap : Expiring EAP session with state 0x39f9f21738f3ff37
(3) eap : Finished EAP session with state 0x39f9f21738f3ff37
(3) eap : Previous EAP request found for state 0x39f9f21738f3ff37, released from the list
(3) eap : Peer sent TLS (13)
(3) eap : EAP TLS (13)
(3) eap : Calling eap_tls to process EAP data
(3) eap_tls : Authenticate
(3) eap_tls : processing EAP-TLS
(3) eap_tls : Received TLS ACK
(3) eap_tls : Received TLS ACK
(3) eap_tls : ACK handshake fragment handler
(3) eap_tls : eaptls_verify returned 1
(3) eap_tls : eaptls_process returned 13
(3) eap : New EAP session, adding 'State' attribute to reply 0x39f9f2173bf2ff37
(3) [eap] = handled
(3) } # authenticate = handled
Sending Access-Challenge Id 9 from 192.168.50.62:1812 to 192.168.60.1:1024
Ruckus-User-Groups += 'profesores'
EAP-Message = 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
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x39f9f2173bf2ff379b07374ed4d5dd35
(3) Finished request
Waking up in 0.2 seconds.
Received Access-Request Id 10 from 192.168.60.1:1024 to 192.168.50.62:1812 length 1701
User-Name = 'juan'
Calling-Station-Id = '00-26-C6-7C-C4-58'
NAS-IP-Address = 192.168.60.1
NAS-Port = 1
Called-Station-Id = '2C-E6-CC-1A-3E-5C:PROFESORES'
Service-Type = Framed-User
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
NAS-Identifier = '2C-E6-CC-1A-3E-5C'
Connect-Info = 'CONNECT 802.11a/n'
EAP-Message = 0x020b05d40dc0000005d916030105990b0003890003860003833082037f30820267a003020102020900c43f77feef6a22f0300d06092a864886f70d01010505003044310b3009060355040613024553310f300d06035504080c064d6164726964310e300c060355040a0c05494e5445463114301206035504030c0b656a656d706c6f2e6f7267301e170d3134303532313035323130335a170d3135303532313035323130335a303d310b3009060355040613024553310f300d06035504080c064d6164726964310e300c060355040a0c05494e544546310d300b06035504030c046a75616e30820122300d06092a864886f70d01010105000382010f003082010a0282010100d8fe45c46e4743d7ecaf6c82f5206a6d1683234f11e54af93501eba03aaadf6c4a123bb2aeebce0717b6930a3e550f9e75e38fb7f0057acebdeecb6d396c4547ed2cb496d887ae6973982c7b708898d3d4e080c44679ffc2eeea7b707f3d03aacfd8544465a96f0988366c5c8a8fd9e84bd38006f71b572a526759eaf147a20c21f42ef7c8f8c37915768eec7e41402c3869e8c06a06d6d53a3fac290b9db34a737a55ce6c3bc544396ee4f35ff28622c2318c57b0ce8b86aac710ed16e56960d4a2fafbe851afb250256e5b03cf37f52ace63f3eb801d78d6e2e3ebdb4ac5493bbca5129d60cbea4a1f7e96391a9216a
State = 0x39f9f2173bf2ff379b07374ed4d5dd35
Attr-26.25053.3 = 0x50524f4645534f524553
Message-Authenticator = 0x0e14e13b59dc144435645c484cb0e448
(4) # Executing section authorize from file /etc/freeradius/sites-enabled/default
(4) authorize {
(4) [preprocess] = ok
(4) [chap] = noop
(4) [mschap] = noop
(4) [digest] = noop
(4) suffix : No '@' in User-Name = "juan", looking up realm NULL
(4) suffix : No such realm "NULL"
(4) [suffix] = noop
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp: Unknown value 'Challenge' for attribute 'Post-Auth-Type'
(4) eap : EAP packet type response id 11 length 1492
(4) eap : No EAP Start, assuming it's an on-going EAP conversation
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(4) [eap] = updated
(4) [files] = noop
rlm_ldap (ldap): Reserved connection (4)
(4) ldap : EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}})
(4) ldap : --> (uid=juan)
(4) ldap : EXPAND dc=ejemplo,dc=org
(4) ldap : --> dc=ejemplo,dc=org
(4) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(uid=juan)', scope 'sub'
(4) ldap : Waiting for search result...
(4) ldap : User object found at DN "uid=juan,ou=usuarios,dc=ejemplo,dc=org"
(4) ldap : No cacheable group memberships found in user object
(4) ldap : EXPAND (&(objectClass=groupOfNames)(member=%{control:Ldap-UserDn}))
(4) ldap : --> (&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))
(4) ldap : EXPAND dc=ejemplo,dc=org
(4) ldap : --> dc=ejemplo,dc=org
(4) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))', scope 'sub'
(4) ldap : Waiting for search result...
(4) ldap : Added control:Ldap-Group with value "profesores"
(4) ldap : Processing user attributes
(4) ldap : control:Password-With-Header += '1234'
rlm_ldap (ldap): Released connection (4)
(4) [ldap] = ok
(4) foreach &control:LDAP-Group
(4) update reply {
(4) EXPAND %{Foreach-Variable-0}
(4) --> profesores
(4) &Ruckus-User-Groups += "profesores"
(4) } # update reply = noop
(4) } # foreach &control:LDAP-Group = noop
(4) [expiration] = noop
(4) [logintime] = noop
(4) pap : No {...} in Password-With-Header, re-writing to Cleartext-Password
(4) WARNING: pap : Auth-Type already set. Not setting to PAP
(4) [pap] = noop
(4) } # authorize = updated
(4) Found Auth-Type = EAP
(4) # Executing group from file /etc/freeradius/sites-enabled/default
(4) authenticate {
(4) eap : Expiring EAP session with state 0x39f9f2173bf2ff37
(4) eap : Finished EAP session with state 0x39f9f2173bf2ff37
(4) eap : Previous EAP request found for state 0x39f9f2173bf2ff37, released from the list
(4) eap : Peer sent TLS (13)
(4) eap : EAP TLS (13)
(4) eap : Calling eap_tls to process EAP data
(4) eap_tls : Authenticate
(4) eap_tls : processing EAP-TLS
TLS Length 1497
(4) eap_tls : Received EAP-TLS First Fragment of the message
(4) eap_tls : eaptls_verify returned 9
(4) eap_tls : eaptls_process returned 13
(4) eap : New EAP session, adding 'State' attribute to reply 0x39f9f2173af5ff37
(4) [eap] = handled
(4) } # authenticate = handled
Sending Access-Challenge Id 10 from 192.168.50.62:1812 to 192.168.60.1:1024
Ruckus-User-Groups += 'profesores'
EAP-Message = 0x010c00060d00
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x39f9f2173af5ff379b07374ed4d5dd35
(4) Finished request
Waking up in 0.2 seconds.
Received Access-Request Id 11 from 192.168.60.1:1024 to 192.168.50.62:1812 length 220
User-Name = 'juan'
Calling-Station-Id = '00-26-C6-7C-C4-58'
NAS-IP-Address = 192.168.60.1
NAS-Port = 1
Called-Station-Id = '2C-E6-CC-1A-3E-5C:PROFESORES'
Service-Type = Framed-User
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
NAS-Identifier = '2C-E6-CC-1A-3E-5C'
Connect-Info = 'CONNECT 802.11a/n'
EAP-Message = 0x020c00150d0056857ad842f31a556f416db6e7a853
State = 0x39f9f2173af5ff379b07374ed4d5dd35
Attr-26.25053.3 = 0x50524f4645534f524553
Message-Authenticator = 0x5e640531cb070698807ff86d2c05343b
(5) # Executing section authorize from file /etc/freeradius/sites-enabled/default
(5) authorize {
(5) [preprocess] = ok
(5) [chap] = noop
(5) [mschap] = noop
(5) [digest] = noop
(5) suffix : No '@' in User-Name = "juan", looking up realm NULL
(5) suffix : No such realm "NULL"
(5) [suffix] = noop
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp: Unknown value 'Challenge' for attribute 'Post-Auth-Type'
(5) eap : EAP packet type response id 12 length 21
(5) eap : No EAP Start, assuming it's an on-going EAP conversation
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(5) [eap] = updated
(5) [files] = noop
rlm_ldap (ldap): Reserved connection (4)
(5) ldap : EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}})
(5) ldap : --> (uid=juan)
(5) ldap : EXPAND dc=ejemplo,dc=org
(5) ldap : --> dc=ejemplo,dc=org
(5) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(uid=juan)', scope 'sub'
(5) ldap : Waiting for search result...
(5) ldap : User object found at DN "uid=juan,ou=usuarios,dc=ejemplo,dc=org"
(5) ldap : No cacheable group memberships found in user object
(5) ldap : EXPAND (&(objectClass=groupOfNames)(member=%{control:Ldap-UserDn}))
(5) ldap : --> (&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))
(5) ldap : EXPAND dc=ejemplo,dc=org
(5) ldap : --> dc=ejemplo,dc=org
(5) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))', scope 'sub'
(5) ldap : Waiting for search result...
(5) ldap : Added control:Ldap-Group with value "profesores"
(5) ldap : Processing user attributes
(5) ldap : control:Password-With-Header += '1234'
rlm_ldap (ldap): Released connection (4)
(5) [ldap] = ok
(5) foreach &control:LDAP-Group
(5) update reply {
(5) EXPAND %{Foreach-Variable-0}
(5) --> profesores
(5) &Ruckus-User-Groups += "profesores"
(5) } # update reply = noop
(5) } # foreach &control:LDAP-Group = noop
(5) [expiration] = noop
(5) [logintime] = noop
(5) pap : No {...} in Password-With-Header, re-writing to Cleartext-Password
(5) WARNING: pap : Auth-Type already set. Not setting to PAP
(5) [pap] = noop
(5) } # authorize = updated
(5) Found Auth-Type = EAP
(5) # Executing group from file /etc/freeradius/sites-enabled/default
(5) authenticate {
(5) eap : Expiring EAP session with state 0x39f9f2173af5ff37
(5) eap : Finished EAP session with state 0x39f9f2173af5ff37
(5) eap : Previous EAP request found for state 0x39f9f2173af5ff37, released from the list
(5) eap : Peer sent TLS (13)
(5) eap : EAP TLS (13)
(5) eap : Calling eap_tls to process EAP data
(5) eap_tls : Authenticate
(5) eap_tls : processing EAP-TLS
(5) eap_tls : eaptls_verify returned 7
(5) eap_tls : Done initial handshake
(5) eap_tls : <<< TLS 1.0 Handshake [length 038d], Certificate
(5) eap_tls : chain-depth=1,
(5) eap_tls : error=0
(5) eap_tls : --> User-Name = juan
(5) eap_tls : --> BUF-Name = ejemplo.org
(5) eap_tls : --> subject = /C=ES/ST=Madrid/O=INTEF/CN=ejemplo.org
(5) eap_tls : --> issuer = /C=ES/ST=Madrid/O=INTEF/CN=ejemplo.org
(5) eap_tls : --> verify return:1
(5) eap_tls : chain-depth=0,
(5) eap_tls : error=0
(5) eap_tls : --> User-Name = juan
(5) eap_tls : --> BUF-Name = juan
(5) eap_tls : --> subject = /C=ES/ST=Madrid/O=INTEF/CN=juan
(5) eap_tls : --> issuer = /C=ES/ST=Madrid/O=INTEF/CN=ejemplo.org
(5) eap_tls : --> verify return:1
(5) eap_tls : TLS_accept: SSLv3 read client certificate A
(5) eap_tls : <<< TLS 1.0 Handshake [length 0106], ClientKeyExchange
(5) eap_tls : TLS_accept: SSLv3 read client key exchange A
(5) eap_tls : <<< TLS 1.0 Handshake [length 0106], CertificateVerify
(5) eap_tls : TLS_accept: SSLv3 read certificate verify A
(5) eap_tls : <<< TLS 1.0 ChangeCipherSpec [length 0001]
(5) eap_tls : <<< TLS 1.0 Handshake [length 0010], Finished
(5) eap_tls : TLS_accept: SSLv3 read finished A
(5) eap_tls : >>> TLS 1.0 ChangeCipherSpec [length 0001]
(5) eap_tls : TLS_accept: SSLv3 write change cipher spec A
(5) eap_tls : >>> TLS 1.0 Handshake [length 0010], Finished
(5) eap_tls : TLS_accept: SSLv3 write finished A
(5) eap_tls : TLS_accept: SSLv3 flush data
SSL: adding session 44c0607deceaeaaf33012e8dae4e7fc6e6fc860ad2551162f2dd2648060e2e87 to cache
(5) eap_tls : (other): SSL negotiation finished successfully
SSL Connection Established
(5) eap_tls : eaptls_process returned 13
(5) eap : New EAP session, adding 'State' attribute to reply 0x39f9f2173df4ff37
(5) [eap] = handled
(5) } # authenticate = handled
Sending Access-Challenge Id 11 from 192.168.50.62:1812 to 192.168.60.1:1024
Ruckus-User-Groups += 'profesores'
EAP-Message = 0x010d00450d800000003b1403010001011603010030b9ad085afe5cbe4f82fa1f3e9d5b764c811772c14bcfaa360f96f9e9796adbe2ce2c5ab23ee9b802d59c2d37f893e73c
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x39f9f2173df4ff379b07374ed4d5dd35
(5) Finished request
Waking up in 0.2 seconds.
Received Access-Request Id 12 from 192.168.60.1:1024 to 192.168.50.62:1812 length 205
User-Name = 'juan'
Calling-Station-Id = '00-26-C6-7C-C4-58'
NAS-IP-Address = 192.168.60.1
NAS-Port = 1
Called-Station-Id = '2C-E6-CC-1A-3E-5C:PROFESORES'
Service-Type = Framed-User
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
NAS-Identifier = '2C-E6-CC-1A-3E-5C'
Connect-Info = 'CONNECT 802.11a/n'
EAP-Message = 0x020d00060d00
State = 0x39f9f2173df4ff379b07374ed4d5dd35
Attr-26.25053.3 = 0x50524f4645534f524553
Message-Authenticator = 0xe13f28cf718772b7a359a695064f6119
(6) # Executing section authorize from file /etc/freeradius/sites-enabled/default
(6) authorize {
(6) [preprocess] = ok
(6) [chap] = noop
(6) [mschap] = noop
(6) [digest] = noop
(6) suffix : No '@' in User-Name = "juan", looking up realm NULL
(6) suffix : No such realm "NULL"
(6) [suffix] = noop
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp: Unknown value 'Challenge' for attribute 'Post-Auth-Type'
(6) eap : EAP packet type response id 13 length 6
(6) eap : No EAP Start, assuming it's an on-going EAP conversation
SOFT ASSERT FAILED src/lib/valuepair.c[235]: vp
(6) [eap] = updated
(6) [files] = noop
rlm_ldap (ldap): Reserved connection (4)
(6) ldap : EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}})
(6) ldap : --> (uid=juan)
(6) ldap : EXPAND dc=ejemplo,dc=org
(6) ldap : --> dc=ejemplo,dc=org
(6) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(uid=juan)', scope 'sub'
(6) ldap : Waiting for search result...
(6) ldap : User object found at DN "uid=juan,ou=usuarios,dc=ejemplo,dc=org"
(6) ldap : No cacheable group memberships found in user object
(6) ldap : EXPAND (&(objectClass=groupOfNames)(member=%{control:Ldap-UserDn}))
(6) ldap : --> (&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))
(6) ldap : EXPAND dc=ejemplo,dc=org
(6) ldap : --> dc=ejemplo,dc=org
(6) ldap : Performing search in 'dc=ejemplo,dc=org' with filter '(&(objectClass=groupOfNames)(member=uid\3djuan\2cou\3dusuarios\2cdc\3dejemplo\2cdc\3dorg))', scope 'sub'
(6) ldap : Waiting for search result...
(6) ldap : Added control:Ldap-Group with value "profesores"
(6) ldap : Processing user attributes
(6) ldap : control:Password-With-Header += '1234'
rlm_ldap (ldap): Released connection (4)
(6) [ldap] = ok
(6) foreach &control:LDAP-Group
(6) update reply {
(6) EXPAND %{Foreach-Variable-0}
(6) --> profesores
(6) &Ruckus-User-Groups += "profesores"
(6) } # update reply = noop
(6) } # foreach &control:LDAP-Group = noop
(6) [expiration] = noop
(6) [logintime] = noop
(6) pap : No {...} in Password-With-Header, re-writing to Cleartext-Password
(6) WARNING: pap : Auth-Type already set. Not setting to PAP
(6) [pap] = noop
(6) } # authorize = updated
(6) Found Auth-Type = EAP
(6) # Executing group from file /etc/freeradius/sites-enabled/default
(6) authenticate {
(6) eap : Expiring EAP session with state 0x39f9f2173df4ff37
(6) eap : Finished EAP session with state 0x39f9f2173df4ff37
(6) eap : Previous EAP request found for state 0x39f9f2173df4ff37, released from the list
(6) eap : Peer sent TLS (13)
(6) eap : EAP TLS (13)
(6) eap : Calling eap_tls to process EAP data
(6) eap_tls : Authenticate
(6) eap_tls : processing EAP-TLS
(6) eap_tls : Received TLS ACK
(6) eap_tls : Received TLS ACK
(6) eap_tls : ACK handshake is finished
(6) eap_tls : eaptls_verify returned 3
(6) eap_tls : eaptls_process returned 3
(6) eap_tls : Saving session 44c0607deceaeaaf33012e8dae4e7fc6e6fc860ad2551162f2dd2648060e2e87 vps 0xa99350 in the cache
(6) eap : Freeing handler
(6) [eap] = ok
(6) } # authenticate = ok
(6) # Executing section post-auth from file /etc/freeradius/sites-enabled/default
(6) post-auth {
(6) cache : EXPAND %{User-Name}
(6) cache : --> juan
(6) cache : Creating entry for "juan"
(6) cache : Adding to cache entry:
(6) cache : control:LDAP-Group += &Ldap-Group -> 'profesores'
(6) cache : Inserted entry, TTL 3600 seconds
(6) [cache] = updated
(6) foreach &control:LDAP-Group
(6) update reply {
CAUGHT SIGNAL: Segmentation fault
Backtrace of last 26 frames:
/usr/lib/freeradius/libfreeradius-radius.so(fr_fault+0x81)[0x7ff7121b40a1]
/lib/x86_64-linux-gnu/libpthread.so.0(+0xf030)[0x7ff710efd030]
/usr/lib/freeradius/libfreeradius-radius.so(+0x1488e)[0x7ff7121bd88e]
/usr/lib/freeradius/libfreeradius-server.so(+0x14277)[0x7ff7123f4277]
/usr/lib/freeradius/libfreeradius-server.so(+0x14558)[0x7ff7123f4558]
/usr/lib/freeradius/libfreeradius-server.so(+0x15024)[0x7ff7123f5024]
/usr/lib/freeradius/libfreeradius-server.so(+0x15092)[0x7ff7123f5092]
/usr/lib/freeradius/libfreeradius-server.so(radius_map2vp+0x1cf)[0x7ff7123ef9bf]
/usr/lib/freeradius/libfreeradius-server.so(radius_map2request+0xbe)[0x7ff7123eeb5e]
freeradius[0x42017d]
freeradius[0x42053a]
freeradius[0x41fa61]
freeradius[0x41fc18]
freeradius(modcall+0x3d)[0x420d3d]
freeradius(indexed_modcall+0xb3)[0x41e363]
freeradius(rad_postauth+0x5e)[0x40fb3e]
freeradius[0x42912c]
freeradius[0x42ddbf]
freeradius[0x42a7b7]
freeradius(request_receive+0x253)[0x42c103]
freeradius[0x419822]
freeradius[0x42a0bd]
/usr/lib/freeradius/libfreeradius-radius.so(fr_event_loop+0x2d9)[0x7ff7121cd7d9]
freeradius(main+0x64a)[0x40f0ca]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd)[0x7ff710703ead]
freeradius[0x40f439]
Calling: gdb -silent -x /etc/freeradius/panic.gdb freeradius 12135 2>&1 | tee /var/log/freeradius/gdb-freeradius-12135.log
Temporarily setting PR_DUMPABLE to 1
Reading symbols from /usr/sbin/freeradius...Reading symbols from /usr/lib/debug/usr/sbin/freeradius...done.
done.
Attaching to program: /usr/sbin/freeradius, process 12135
Reading symbols from /usr/lib/freeradius/libfreeradius-server.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/libfreeradius-server.so...done.
done.
Loaded symbols for /usr/lib/freeradius/libfreeradius-server.so
Reading symbols from /usr/lib/freeradius/libfreeradius-radius.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/libfreeradius-radius.so...done.
done.
Loaded symbols for /usr/lib/freeradius/libfreeradius-radius.so
Reading symbols from /usr/lib/freeradius/libfreeradius-eap.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/libfreeradius-eap.so...done.
done.
Loaded symbols for /usr/lib/freeradius/libfreeradius-eap.so
Reading symbols from /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
Reading symbols from /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0
Reading symbols from /usr/lib/x86_64-linux-gnu/libtalloc.so.2...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libtalloc.so.2
Reading symbols from /lib/x86_64-linux-gnu/libnsl.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnsl.so.1
Reading symbols from /lib/x86_64-linux-gnu/libresolv.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libresolv.so.2
Reading symbols from /lib/x86_64-linux-gnu/libdl.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libdl.so.2
Reading symbols from /lib/x86_64-linux-gnu/libpthread.so.0...(no debugging symbols found)...done.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Loaded symbols for /lib/x86_64-linux-gnu/libpthread.so.0
Reading symbols from /lib/x86_64-linux-gnu/libreadline.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libreadline.so.6
Reading symbols from /lib/x86_64-linux-gnu/libcrypt.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libcrypt.so.1
Reading symbols from /lib/x86_64-linux-gnu/libc.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libc.so.6
Reading symbols from /usr/lib/x86_64-linux-gnu/libpcap.so.0.8...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libpcap.so.0.8
Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/ld-linux-x86-64.so.2
Reading symbols from /lib/x86_64-linux-gnu/libz.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libz.so.1
Reading symbols from /lib/x86_64-linux-gnu/libtinfo.so.5...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libtinfo.so.5
Reading symbols from /lib/x86_64-linux-gnu/libnss_compat.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnss_compat.so.2
Reading symbols from /lib/x86_64-linux-gnu/libnss_nis.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnss_nis.so.2
Reading symbols from /lib/x86_64-linux-gnu/libnss_files.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libnss_files.so.2
Reading symbols from /usr/lib/freeradius/rlm_exec.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_exec.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_exec.so
Reading symbols from /usr/lib/freeradius/rlm_preprocess.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_preprocess.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_preprocess.so
Reading symbols from /usr/lib/freeradius/rlm_digest.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_digest.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_digest.so
Reading symbols from /usr/lib/freeradius/rlm_cache.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_cache.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_cache.so
Reading symbols from /usr/lib/freeradius/rlm_replicate.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_replicate.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_replicate.so
Reading symbols from /usr/lib/freeradius/rlm_dhcp.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_dhcp.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_dhcp.so
Reading symbols from /usr/lib/freeradius/rlm_detail.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_detail.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_detail.so
Reading symbols from /usr/lib/freeradius/rlm_linelog.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_linelog.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_linelog.so
Reading symbols from /usr/lib/freeradius/rlm_always.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_always.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_always.so
Reading symbols from /usr/lib/freeradius/rlm_chap.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_chap.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_chap.so
Reading symbols from /usr/lib/freeradius/rlm_mschap.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_mschap.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_mschap.so
Reading symbols from /usr/lib/freeradius/rlm_pap.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_pap.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_pap.so
Reading symbols from /usr/lib/freeradius/rlm_soh.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_soh.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_soh.so
Reading symbols from /usr/lib/freeradius/rlm_attr_filter.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_attr_filter.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_attr_filter.so
Reading symbols from /usr/lib/freeradius/rlm_eap.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_eap.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_eap.so
Reading symbols from /usr/lib/freeradius/rlm_eap_tls.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_eap_tls.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_eap_tls.so
Reading symbols from /usr/lib/freeradius/rlm_eap_ttls.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_eap_ttls.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_eap_ttls.so
Reading symbols from /usr/lib/freeradius/rlm_eap_peap.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_eap_peap.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_eap_peap.so
Reading symbols from /usr/lib/freeradius/rlm_eap_mschapv2.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_eap_mschapv2.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_eap_mschapv2.so
Reading symbols from /usr/lib/freeradius/rlm_passwd.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_passwd.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_passwd.so
Reading symbols from /usr/lib/freeradius/rlm_files.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_files.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_files.so
Reading symbols from /usr/lib/freeradius/rlm_logintime.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_logintime.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_logintime.so
Reading symbols from /usr/lib/freeradius/rlm_unix.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_unix.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_unix.so
Reading symbols from /usr/lib/freeradius/rlm_realm.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_realm.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_realm.so
Reading symbols from /usr/lib/freeradius/rlm_expiration.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_expiration.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_expiration.so
Reading symbols from /usr/lib/freeradius/rlm_radutmp.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_radutmp.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_radutmp.so
Reading symbols from /usr/lib/freeradius/rlm_ldap.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_ldap.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_ldap.so
Reading symbols from /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2
Reading symbols from /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2
Reading symbols from /usr/lib/x86_64-linux-gnu/libsasl2.so.2...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libsasl2.so.2
Reading symbols from /usr/lib/x86_64-linux-gnu/libgnutls.so.26...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libgnutls.so.26
Reading symbols from /lib/x86_64-linux-gnu/libgcrypt.so.11...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libgcrypt.so.11
Reading symbols from /usr/lib/x86_64-linux-gnu/libtasn1.so.3...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libtasn1.so.3
Reading symbols from /usr/lib/x86_64-linux-gnu/libp11-kit.so.0...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/x86_64-linux-gnu/libp11-kit.so.0
Reading symbols from /lib/x86_64-linux-gnu/libgpg-error.so.0...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libgpg-error.so.0
Reading symbols from /usr/lib/freeradius/rlm_utf8.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_utf8.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_utf8.so
Reading symbols from /usr/lib/freeradius/rlm_dynamic_clients.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_dynamic_clients.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_dynamic_clients.so
Reading symbols from /usr/lib/freeradius/rlm_unpack.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_unpack.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_unpack.so
Reading symbols from /usr/lib/freeradius/rlm_expr.so...Reading symbols from /usr/lib/debug/usr/lib/freeradius/rlm_expr.so...done.
done.
Loaded symbols for /usr/lib/freeradius/rlm_expr.so
Reading symbols from /lib/x86_64-linux-gnu/libgcc_s.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/x86_64-linux-gnu/libgcc_s.so.1
0x00007ff7107911ee in waitpid () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
No symbol table info available.
Thread 1 (Thread 0x7ff7127d5720 (LWP 12135)):
#0 0x00007ff7107911ee in waitpid () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#1 0x00007ff710724c99 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
No symbol table info available.
#2 0x00007ff7121b425e in fr_fault (sig=11) at src/lib/debug.c:525
disable = true
cmd = "gdb -silent -x /etc/freeradius/panic.gdb freeradius 12135 2>&1 | tee /var/log/freeradius/gdb-freeradius-12135.log", '\000' <repeats 418 times>
out = 0x7fffdc102c4d ".log"
left = 423
ret = <optimized out>
p = 0x7ff7123de8c7 ".log"
q = 0x0
code = <optimized out>
#3 <signal handler called>
No symbol table info available.
#4 vp_prints_value (out=out at entry=0xaa0640 "", outlen=outlen at entry=1024,
vp=0x4600000000, quote=quote at entry=0 '\000') at src/lib/print.c:329
v = <optimized out>
buf = "l\242\032\022\367\177\000\000\260\070\020\334\377\177\000\000(\247\032\022\367\177\000\000\300\070\020\334\006\000\000\000\260\265\032\022\367\177\000\000\220\240\224\021\367\177", '\000' <repeats 18 times>, "H*\202\022\367\177\000\000\352:>\022\367\177\000\000\000\322\032\022\367\177\000\000\b\036>\022\367\177\000\000\000\000\000\000\001\000\000\000\233\000\000\000\001\000\000\000\000\000\000\000\001\000\000\000\240(\202\022\367\177\000\000\000\071\020\334\377\177\000\000\000\000\000\000\000\000\000\000(9\020\334\377\177\000\000H%\202\022\367\177\000\000,\273\036o\000\000\000\000\002\334`\022\367\177", '\000' <repeats 18 times>, "\001", '\000' <repeats 15 times>, "\001\000\000\000\377\177\000\000H%\202\022\367\177\000\000\001\000\000\000\000\000\000\000\343\204\034\022\367\177\000\000P\035\252\000\000\000\000\000`ݩ", '\000' <repeats 13 times>"\240, (\202\022\367\177\000\000\260"...
a = <optimized out>
t = <optimized out>
s_tm = {tm_sec = 310222032, tm_min = 32759, tm_hour = 18, tm_mday = 0,
tm_mon = 1864284972, tm_year = 0, tm_wday = 308336659,
tm_yday = 32759, tm_isdst = 1774235483, tm_gmtoff = 0,
tm_zone = 0x2c <Address 0x2c out of bounds>}
len = <optimized out>
freespace = <optimized out>
#5 0x00007ff7121bdfc5 in vp_prints_value (out=out at entry=0xaa0640 "",
outlen=outlen at entry=1024, vp=<optimized out>, quote=quote at entry=0 '\000')
at src/lib/print.c:532
freespace = <optimized out>
#6 0x00007ff7123f4277 in xlat_foreach (instance=<optimized out>,
request=0xa9df10, fmt=<optimized out>, out=0xaa0640 "", outlen=1024)
at src/main/xlat.c:405
pvp = <optimized out>
len = <optimized out>
#7 0x00007ff7123f4558 in xlat_aprint (ctx=ctx at entry=0xa9df10,
request=0xa9df10, node=0xa64e60, escape=escape at entry=0,
escape_ctx=escape_ctx at entry=0x0, lvl=0) at src/main/xlat.c:2004
rcode = <optimized out>
str = 0xaa0640 ""
child = <optimized out>
ref = <optimized out>
#8 0x00007ff7123f5024 in xlat_process (out=0x7fffdc103c98, request=0xa9df10,
head=<optimized out>, escape=0, escape_ctx=0x0) at src/main/xlat.c:2101
i = <optimized out>
list = <optimized out>
total = <optimized out>
array = <optimized out>
answer = <optimized out>
node = <optimized out>
#9 0x00007ff7123f5092 in xlat_expand_struct (out=0x7fffdc103cd8, outlen=0,
request=<optimized out>, node=<optimized out>, escape=<optimized out>,
escape_ctx=<optimized out>) at src/main/xlat.c:2173
buff = 0x0
len = <optimized out>
#10 0x00007ff7123ef9bf in radius_map2vp (out=0x7fffdc103d60, request=0xa9df10,
map=0xa618e0, ctx=<optimized out>) at src/main/valuepair.c:1456
slen = <optimized out>
str = 0x0
rcode = 0
vp = 0xaa1c20
found = <optimized out>
from = 0x0
da = 0x9494d0
context = 0xa9df10
cursor = {first = 0x7fffdc1040f8, found = 0x0, last = 0x7ff710833420,
current = 0xa61b10, next = 0xa9df10}
#11 0x00007ff7123eeb5e in radius_map2request (request=request at entry=0xa9df10,
map=map at entry=0xa618e0, func=func at entry=0x7ff7123ef7f0 <radius_map2vp>,
ctx=ctx at entry=0x0) at src/main/valuepair.c:1003
rcode = 0
num = <optimized out>
list = 0xaa40d8
vp = <optimized out>
dst = <optimized out>
head = 0x0
found = false
context = 0xa9df10
parent = 0xaa4060
dst_list = {first = 0x3, found = 0x441b08, last = 0xa76b90,
current = 0x7ff710a6a7a0, next = 0x7fffdc104430}
src_list = {first = 0x7fffdc104448, found = 0x7ff7121d47f0,
last = 0x7ff710a6a7a0, current = 0x7ff710728870, next = 0x9b2980}
#12 0x000000000042017d in modcall_recurse (request=request at entry=0xa9df10,
component=component at entry=RLM_COMPONENT_POST_AUTH, depth=depth at entry=2,
entry=entry at entry=0x7fffdc104250) at src/main/modcall.c:596
rcode = <optimized out>
map = 0xa618e0
if_taken = false
was_if = false
c = <optimized out>
priority = <optimized out>
result = RLM_MODULE_UNKNOWN
#13 0x000000000042053a in modcall_recurse (request=0xa9df10,
component=RLM_COMPONENT_POST_AUTH, depth=1,
entry=entry at entry=0x7fffdc104238) at src/main/modcall.c:704
i = <optimized out>
vps = 0xaa2500
vp = 0x1
cursor = {first = 0x7fffdc103fb8, found = 0xaa3930, last = 0x0,
current = 0x0, next = 0x0}
foreach_depth = 1
next = 0x7fffdc104250
copy = {first = 0x7fffdc103fb0, found = 0x0, last = 0x0,
current = 0xaa2500, next = 0x0}
if_taken = false
was_if = false
c = <optimized out>
priority = <optimized out>
result = RLM_MODULE_UPDATED
#14 0x000000000041fa61 in modcall_child (request=<optimized out>,
component=<optimized out>, depth=<optimized out>, entry=0x7fffdc104220,
c=<optimized out>, result=0x7fffdc10411c) at src/main/modcall.c:412
next = 0x7fffdc104238
#15 0x000000000041fc18 in modcall_recurse (request=request at entry=0xa9df10,
component=component at entry=RLM_COMPONENT_POST_AUTH, depth=depth at entry=0,
entry=entry at entry=0x7fffdc104220) at src/main/modcall.c:783
if_taken = false
was_if = false
c = <optimized out>
priority = <optimized out>
result = RLM_MODULE_UNKNOWN
#16 0x0000000000420d3d in modcall (
component=component at entry=RLM_COMPONENT_POST_AUTH, c=c at entry=0xa61610,
request=request at entry=0xa9df10) at src/main/modcall.c:1092
stack = {{result = RLM_MODULE_NOOP, priority = 0, unwind = 0,
c = 0xa61610}, {result = RLM_MODULE_UPDATED, priority = 4,
unwind = 0, c = 0xa61800}, {result = RLM_MODULE_UPDATED,
priority = 0, unwind = 0, c = 0xa61b10}, {result = 10975040,
priority = 0, unwind = 16, c = 0x7ff7121c15cd}, {
result = RLM_MODULE_UNKNOWN, priority = 0, unwind = -602914008,
c = 0x0}, {result = 34, priority = 0, unwind = 11141487, c = 0x3},
{result = RLM_MODULE_REJECT, priority = 0, unwind = 0, c = 0x0}, {
result = RLM_MODULE_REJECT, priority = 0, unwind = 11141501,
c = 0x0}, {result = 10975040, priority = 0, unwind = 8223328,
c = 0x10}, {result = 16, priority = 0, unwind = -602914008,
c = 0xc}, {result = RLM_MODULE_REJECT, priority = 0, unwind = 0,
c = 0x10}, {result = 11138512, priority = 0, unwind = 9,
c = 0xcd}, {result = 3692053592, priority = 32767,
unwind = -602913728, c = 0x7fffdc104500}, {result = 297950210,
priority = 32759, unwind = -602913808, c = 0x7fffdc1043a0}, {
result = 3692053760, priority = 32767, unwind = 303800625,
c = 0xb0}, {result = 279363256, priority = 32759,
unwind = 279363272, c = 0xa8}, {result = 96, priority = 0,
unwind = 909522437, c = 0xd0}, {result = 909522486, priority = 11,
unwind = 86, c = 0xa77740}, {result = 279363168, priority = 32759,
unwind = 160, c = 0x7ff7121d5c25}, {result = 11137984,
priority = 0, unwind = 279363168, c = 0x56}, {
result = RLM_MODULE_NOTFOUND, priority = 0, unwind = 86,
c = 0xaa018d}, {result = 11132688, priority = 0, unwind = 7,
c = 0x7}, {result = 10875088, priority = 0, unwind = 10884624,
c = 0x43c915}, {result = 306146127, priority = 32759, unwind = 0,
c = 0x3000000020}, {result = 3692053808, priority = 32767,
unwind = -602913680, c = 0x10}, {result = 303834342,
priority = 32759, unwind = 16, c = 0x7fffdc1044f8}, {
result = 4442389, priority = 0, unwind = 10317072, c = 0x0}, {
result = 303835214, priority = 32759, unwind = 0, c = 0x12}, {
result = 11141517, priority = 0, unwind = 11138520,
c = 0x7fffdc104510}, {result = 303774288, priority = 32759,
unwind = 11113024, c = 0x7ff7121cb7ea}, {result = 11132256,
priority = 0, unwind = 11132256, c = 0x7fffdc104530}, {
result = 4313904, priority = 0, unwind = 1014, c = 0xa9df10}}
#17 0x000000000041e363 in indexed_modcall (
comp=comp at entry=RLM_COMPONENT_POST_AUTH, idx=idx at entry=0,
request=request at entry=0xa9df10) at src/main/modules.c:818
rcode = <optimized out>
list = 0xa61610
server = 0xa5f0d0
#18 0x000000000041efff in process_post_auth (
postauth_type=postauth_type at entry=0, request=request at entry=0xa9df10)
at src/main/modules.c:1865
No locals.
#19 0x000000000040fb3e in rad_postauth (request=request at entry=0xa9df10)
at src/main/auth.c:303
result = <optimized out>
postauth_type = 0
vp = <optimized out>
#20 0x000000000042912c in request_finish (request=request at entry=0xa9df10,
action=action at entry=1) at src/main/process.c:1274
vp = <optimized out>
#21 0x000000000042ddbf in request_running (action=1, request=0xa9df10)
at src/main/process.c:1461
No locals.
#22 request_running (request=0xa9df10, action=<optimized out>)
at src/main/process.c:1381
No locals.
#23 0x000000000042a7b7 in request_queue_or_run (request=0xa9df10,
process=process at entry=0x42dc70 <request_running>) at src/main/process.c:999
No locals.
#24 0x000000000042c103 in request_receive (listener=listener at entry=0xa64090,
packet=0xa77740, client=client at entry=0x9a2620,
fun=fun at entry=0x40fb80 <rad_authenticate>) at src/main/process.c:1639
count = <optimized out>
packet_p = <optimized out>
request = 0xa9df10
now = {tv_sec = 1402322517, tv_usec = 877630}
sock = <optimized out>
#25 0x0000000000419822 in auth_socket_recv (listener=0xa64090)
at src/main/listen.c:1507
rcode = <optimized out>
code = 1
src_port = <optimized out>
packet = 0xa77740
fun = 0x40fb80 <rad_authenticate>
client = 0x9a2620
src_ipaddr = {af = 2, ipaddr = {ip4addr = {s_addr = 20752576},
ip6addr = {__in6_u = {
__u6_addr8 = "\300\250<\001\036\304\374\003\000\000\000\000\260\242\032\022", __u6_addr16 = {43200, 316, 50206, 1020, 0, 0, 41648, 4634},
__u6_addr32 = {20752576, 66896926, 0, 303735472}}}},
prefix = 32 ' ', scope = 3692054640}
#26 0x000000000042a0bd in event_socket_handler (xel=<optimized out>,
fd=<optimized out>, ctx=<optimized out>) at src/main/process.c:3924
listener = <optimized out>
#27 0x00007ff7121cd7d9 in fr_event_loop (el=0x7cc9a0) at src/lib/event.c:495
ef = 0x7cca08
i = <optimized out>
rcode = 1
maxfd = 16
when = {tv_sec = 1402322518, tv_usec = 99350}
wake = <optimized out>
read_fds = {fds_bits = {16384, 0 <repeats 15 times>}}
master_fds = {fds_bits = {124928, 0 <repeats 15 times>}}
#28 0x000000000042ee91 in radius_event_process () at src/main/process.c:4785
No locals.
#29 0x000000000040f0ca in main (argc=<optimized out>, argv=<optimized out>)
at src/main/radiusd.c:565
rcode = 0
status = <optimized out>
argval = <optimized out>
spawn_flag = false
write_pid = false
display_version = false
flag = 0
from_child = {-1, -1}
autofree = 0x7af060
A debugging session is active.
Inferior 1 [process 12135] will be detached.
Quit anyway? (y or n) [answered Y; input not from terminal]
Resetting PR_DUMPABLE to 0
Panic action exited with 0
If running under a debugger it should break <<here>>
More information about the Freeradius-Users
mailing list