Moving to 3.0.x series and crashes

[Miika Räisänen]

Hi,

I've been trying to upgrade our eduroam radius server 2.1.12 to 3.0.10 or newer. Our wifi is configured to authenticate 802.1X PEAP/mschapv2 -> freeradius -> Microsoft ad.

In test environment freeradius works ok but in production it randomly crashes. With 3.0.10 I got some crash but did not catch any info about it and I just decided to try directly git version without any crash investigation.

So last night (2nd dec) I pulled 3.0.x from git, compiled and put it on production. It survide about 12 hours and crashed with messages below

Thu Dec  3 08:16:21 2015 : Auth: (22577) Login OK: [host/tatk032054.univ.yo.oulu.fi] (from client cisco_aps port 13 cli f8-16-54-f1-5d-33)
Thu Dec  3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program returned code (1) and output 'Password expired (0xc0000071)'
Thu Dec  3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program returned code (1) and output 'Logon failure (0xc000006d)'
Thu Dec  3 08:16:25 2015 : Error: ASSERT FAILED src/modules/rlm_mschap/rlm_mschap.c[1751]: nt_password
CAUGHT SIGNAL: Aborted
Backtrace of last 42 frames:
/usr/local/lib/libfreeradius-radius.so(fr_fault+0x115)[0x7faabee6c4c2]
/usr/local/lib/libfreeradius-server.so(rad_assert_fail+0x46)[0x7faabf0cbe39]
/usr/local/lib/rlm_mschap.so(+0x5624)[0x7faab9905624]
/usr/local/sbin/radiusd[0x4283e4]
/usr/local/sbin/radiusd[0x428aa4]
/usr/local/sbin/radiusd[0x4285ba]
/usr/local/sbin/radiusd[0x4294d8]
/usr/local/sbin/radiusd(modcall+0xa2)[0x42a21d]
/usr/local/sbin/radiusd(indexed_modcall+0x363)[0x425c2f]
/usr/local/sbin/radiusd(process_authenticate+0x22)[0x427cd6]
/usr/local/lib/rlm_eap_mschapv2.so(+0x25ff)[0x7faab62215ff]
/usr/local/lib/rlm_eap.so(+0x3f55)[0x7faaba72bf55]
/usr/local/lib/rlm_eap.so(eap_method_select+0x421)[0x7faaba72c888]
/usr/local/lib/rlm_eap.so(+0x2c07)[0x7faaba72ac07]
/usr/local/sbin/radiusd[0x4283e4]
/usr/local/sbin/radiusd[0x428aa4]
/usr/local/sbin/radiusd[0x4285ba]
/usr/local/sbin/radiusd[0x4294d8]
/usr/local/sbin/radiusd(modcall+0xa2)[0x42a21d]
/usr/local/sbin/radiusd(indexed_modcall+0x363)[0x425c2f]
/usr/local/sbin/radiusd(process_authenticate+0x22)[0x427cd6]
/usr/local/sbin/radiusd[0x40f583]
/usr/local/sbin/radiusd(rad_authenticate+0x51e)[0x40fe9c]
/usr/local/sbin/radiusd(rad_virtual_server+0x110)[0x4104b9]
/usr/local/lib/rlm_eap_peap.so(eappeap_process+0xe68)[0x7faab6428a12]
/usr/local/lib/rlm_eap_peap.so(+0x1fd3)[0x7faab6425fd3]
/usr/local/lib/rlm_eap.so(+0x3f55)[0x7faaba72bf55]
/usr/local/lib/rlm_eap.so(eap_method_select+0x421)[0x7faaba72c888]
/usr/local/lib/rlm_eap.so(+0x2c07)[0x7faaba72ac07]
/usr/local/sbin/radiusd[0x4283e4]
/usr/local/sbin/radiusd[0x428aa4]
/usr/local/sbin/radiusd[0x4285ba]
/usr/local/sbin/radiusd[0x4294d8]
/usr/local/sbin/radiusd(modcall+0xa2)[0x42a21d]
/usr/local/sbin/radiusd(indexed_modcall+0x363)[0x425c2f]
/usr/local/sbin/radiusd(process_authenticate+0x22)[0x427cd6]
/usr/local/sbin/radiusd[0x40f583]
/usr/local/sbin/radiusd(rad_authenticate+0x51e)[0x40fe9c]
/usr/local/sbin/radiusd[0x43cca9]
/usr/local/sbin/radiusd[0x438939]
/lib64/libpthread.so.0(+0x7df5)[0x7faabd943df5]
/lib64/libc.so.6(clone+0x6d)[0x7faabd43a1ad]
No panic action set
_EXIT(1) CALLED src/lib/debug.c[745].  Last error was: Internal sanity check 3352
[root at pc184005 ~]#

I know I may should provide more info, but should I set panic action or compile fr with debug etc?

Looks like it has something to do with mschapv password change so heres my mschap.conf http://cc.oulu.fi/~mtr/radius/mschap