Moving to 3.0.x series and crashes

Miika Räisänen Miika.Raisanen at oulu.fi
Mon Dec 7 13:22:36 CET 2015


> -----Original Message-----
> From: Freeradius-Users [mailto:freeradius-users-
> bounces+miika.raisanen=oulu.fi at lists.freeradius.org] On Behalf Of Alan
> DeKok
> Sent: 3. joulukuuta 2015 15:50
> To: FreeRadius users mailing list
> Subject: Re: Moving to 3.0.x series and crashes
> 
> On Dec 3, 2015, at 7:27 AM, Miika Räisänen <Miika.Raisanen at oulu.fi> wrote:
> >
> > I've been trying to upgrade our eduroam radius server 2.1.12 to 3.0.10 or
> newer. Our wifi is configured to authenticate 802.1X PEAP/mschapv2 ->
> freeradius -> Microsoft ad.
> >
> > In test environment freeradius works ok but in production it randomly
> crashes. With 3.0.10 I got some crash but did not catch any info about it and I
> just decided to try directly git version without any crash investigation.
> >
> > So last night (2nd dec) I pulled 3.0.x from git, compiled and put it on
> production. It survide about 12 hours and crashed with messages below
> >
> > Thu Dec  3 08:16:21 2015 : Auth: (22577) Login OK:
> [host/tatk032054.univ.yo.oulu.fi] (from client cisco_aps port 13 cli f8-16-54-
> f1-5d-33)
> > Thu Dec  3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program
> returned code (1) and output 'Password expired (0xc0000071)'
> > Thu Dec  3 08:16:25 2015 : ERROR: (22589) mschap: ERROR: Program
> returned code (1) and output 'Logon failure (0xc000006d)'
> > Thu Dec  3 08:16:25 2015 : Error: ASSERT FAILED
> src/modules/rlm_mschap/rlm_mschap.c[1751]: nt_password
> > CAUGHT SIGNAL: Aborted
> > Backtrace of last 42 frames:
> > /usr/local/lib/libfreeradius-radius.so(fr_fault+0x115)[0x7faabee6c4c2]
> > /usr/local/lib/libfreeradius-
> server.so(rad_assert_fail+0x46)[0x7faabf0cbe39]
> > /usr/local/lib/rlm_mschap.so(+0x5624)[0x7faab9905624]
> 
>   That helps a bit... please follow the instructions in
> 
> https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/doc/bugs
> 
>   to get a backtrace with symbols.  That will tell us exactly where the
> problem occurs.
> 
> > I know I may should provide more info, but should I set panic action or
> compile fr with debug etc?
> 
>   Yes, please compile with debugging.
> 
> > Looks like it has something to do with mschapv password change so heres
> my mschap.conf http://cc.oulu.fi/~mtr/radius/mschap
> 
>   You have all of the password change config disabled.
> 
>   Alan DeKok.
> 
> 
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

So I ran it in screen for a while and here we go:

http://cc.oulu.fi/~mtr/radius/gdb_radiusd

System is:
Linux xxx.xxx.xxx.xx 3.10.0-229.11.1.el7.x86_64 #1 SMP Thu Aug 6 01:06:18 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
gcc-4.8.3-9.el7.x86_64
libgcc-4.8.3-9.el7.x86_64
samba-winbind-clients-4.1.12-23.el7_1.x86_64
samba-winbind-4.1.12-23.el7_1.x86_64
samba-winbind-modules-4.1.12-23.el7_1.x86_64
samba-libs-4.1.12-23.el7_1.x86_64
samba-common-4.1.12-23.el7_1.x86_64
samba-4.1.12-23.el7_1.x86_64

Need something more?





More information about the Freeradius-Users mailing list