Moving to 3.0.x series and crashes

[Arran Cudbard-Bell]

> On 3 Dec 2015, at 08:49, Alan DeKok <aland at deployingradius.com> wrote:
> 
> On Dec 3, 2015, at 7:27 AM, Miika Räisänen <Miika.Raisanen at oulu.fi> wrote:
>> 
>> I've been trying to upgrade our eduroam radius server 2.1.12 to 3.0.10 or newer. Our wifi is configured to authenticate 802.1X PEAP/mschapv2 -> freeradius -> Microsoft ad.
>> 
>> In test environment freeradius works ok but in production it randomly crashes. With 3.0.10 I got some crash but did not catch any info about it and I just decided to try directly git version without any crash investigation.
>> 
>> So last night (2nd dec) I pulled 3.0.x from git, compiled and put it on production. It survide about 12 hours and crashed with messages below
>> 
>> Thu Dec  3 08:16:21 2015 : Auth: (22577) Login OK: [host/tatk032054.univ.yo.oulu.fi] (from client cisco_aps port 13 cli f8-16-54-f1-5d-33)
>> Thu Dec  3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program returned code (1) and output 'Password expired (0xc0000071)'
>> Thu Dec  3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program returned code (1) and output 'Logon failure (0xc000006d)'
>> Thu Dec  3 08:16:25 2015 : Error: ASSERT FAILED src/modules/rlm_mschap/rlm_mschap.c[1751]: nt_password
>> CAUGHT SIGNAL: Aborted
>> Backtrace of last 42 frames:
>> /usr/local/lib/libfreeradius-radius.so(fr_fault+0x115)[0x7faabee6c4c2]
>> /usr/local/lib/libfreeradius-server.so(rad_assert_fail+0x46)[0x7faabf0cbe39]
>> /usr/local/lib/rlm_mschap.so(+0x5624)[0x7faab9905624]
> 
>  That helps a bit... please follow the instructions in
> 
> https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/doc/bugs
> 
>  to get a backtrace with symbols.  That will tell us exactly where the problem occurs.
> 
>> I know I may should provide more info, but should I set panic action or compile fr with debug etc?
> 
>  Yes, please compile with debugging.
> 
>> Looks like it has something to do with mschapv password change so heres my mschap.conf http://cc.oulu.fi/~mtr/radius/mschap
> 
>  You have all of the password change config disabled.

mod_authenticate doesn't check for that is just checks for the presence of PW_MSCHAP2_CPW.

I'm confused as to how this should be working TBH.

-Arran

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS development team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20151203/d9364ac6/attachment.sig>