Re: segfault error

2013-05-06 Thread Stefan Winter
Hi,

FYI, I just had the same issue and went into the code that leads to
this. The issue is that with *salted* passwords, FreeeRADIUS sometimes
decides to base64-decode *twice*. The first round does the right thing;
the second one *may* produce garbage (attempting to decode an
already-decoded string). It only does so if the decoded value from first
round looks like it could be a base64-encoded string (e.g. contains an =
sign very early) AND if your salts are long enough to trick FreeRADIUS
into thinking that there's something to decode still.

Hoping to get this fixed for 2.2.1.

Stefan

On 02.05.2013 19:33, Chris Taylor wrote:
 I forgot to include my OS and kernel type.
 
 Linux on-radius01.eastlink.ca 2.6.18-308.16.1.el5
 
 CentOS release 5.9 (Final)
 
 
 -Original Message-
 From: Chris Taylor
 Sent: Thursday, May 02, 2013 1:31 PM
 To: 'FreeRadius users mailing list'
 Subject: RE: segfault error
 
 I think I have what you are looking for now. I have copied the whole dump 
 from when I start using gdb.
 
 Chris
 
 
 
 
 [root@on-radius01 raddb]# gdb /usr/sbin/radiusd 
 /tmp/core-radiusd-11-95-95-11609-1367435209
 GNU gdb (GDB) CentOS (7.0.1-45.el5.centos) Copyright (C) 2009 Free Software 
 Foundation, Inc.
 License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
 This is free software: you are free to change and redistribute it.
 There is NO WARRANTY, to the extent permitted by law.  Type show copying
 and show warranty for details.
 This GDB was configured as x86_64-redhat-linux-gnu.
 For bug reporting instructions, please see:
 http://www.gnu.org/software/gdb/bugs/...
 Reading symbols from /usr/sbin/radiusd...done.
 [New Thread 11611]
 [New Thread 11614]
 [New Thread 11613]
 [New Thread 11612]
 [New Thread 11610]
 [New Thread 11609]
 Reading symbols from /usr/local/lib/libfreeradius-radius-2.2.0.so...done.
 Loaded symbols for /usr/local/lib/libfreeradius-radius-2.2.0.so
 Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libnsl.so.1
 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols 
 found)...done.
 Loaded symbols for /lib64/libresolv.so.2 Reading symbols from 
 /lib64/libpthread.so.0...(no debugging symbols found)...done.
 [Thread debugging using libthread_db enabled] Loaded symbols for 
 /lib64/libpthread.so.0 Reading symbols from /lib64/libcrypt.so.1...(no 
 debugging symbols found)...done.
 Loaded symbols for /lib64/libcrypt.so.1
 Reading symbols from /usr/local/lib/libltdl.so.3...done.
 Loaded symbols for /usr/local/lib/libltdl.so.3 Reading symbols from 
 /lib64/libssl.so.6...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libssl.so.6
 Reading symbols from /lib64/libcrypto.so.6...(no debugging symbols 
 found)...done.
 Loaded symbols for /lib64/libcrypto.so.6 Reading symbols from 
 /lib64/libdl.so.2...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libdl.so.2
 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libc.so.6
 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols 
 found)...done.
 Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from 
 /usr/lib64/libgssapi_krb5.so.2...(no debugging symbols found)...done.
 Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from 
 /usr/lib64/libkrb5.so.3...(no debugging symbols found)...done.
 Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from 
 /lib64/libcom_err.so.2...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from 
 /usr/lib64/libk5crypto.so.3...(no debugging symbols found)...done.
 Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from 
 /lib64/libz.so.1...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libz.so.1
 Reading symbols from /usr/lib64/libkrb5support.so.0...(no debugging symbols 
 found)...done.
 Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from 
 /lib64/libkeyutils.so.1...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from 
 /lib64/libselinux.so.1...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libselinux.so.1 Reading symbols from 
 /lib64/libsepol.so.1...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libsepol.so.1
 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols 
 found)...done.
 Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from 
 /lib64/libnss_ldap.so.2...(no debugging symbols found)...done.
 Loaded symbols for /lib64/libnss_ldap.so.2 Reading symbols from 
 /usr/local/lib/rlm_exec-2.2.0.so...done.
 Loaded symbols for /usr/local/lib/rlm_exec-2.2.0.so Reading symbols from 
 /usr/local/lib/rlm_expr-2.2.0.so...done.
 Loaded symbols for /usr/local/lib/rlm_expr-2.2.0.so Reading symbols from 
 /usr/local/lib/rlm_expiration-2.2.0.so...done.
 Loaded symbols for /usr/local/lib

RE: segfault error

2013-05-02 Thread Chris Taylor
)...done.
Loaded symbols for /lib64/libsepol.so.1
Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols 
found)...done.
Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from 
/lib64/libnss_ldap.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/libnss_ldap.so.2 Reading symbols from 
/usr/local/lib/rlm_exec.so...done.
Loaded symbols for /usr/local/lib/rlm_exec.so Reading symbols from 
/usr/local/lib/rlm_expr.so...done.
Loaded symbols for /usr/local/lib/rlm_expr.so Reading symbols from 
/usr/local/lib/rlm_expiration.so...done.
Loaded symbols for /usr/local/lib/rlm_expiration.so Reading symbols from 
/usr/local/lib/rlm_logintime.so...done.
Loaded symbols for /usr/local/lib/rlm_logintime.so Reading symbols from 
/usr/local/lib/rlm_pap.so...done.
Loaded symbols for /usr/local/lib/rlm_pap.so Reading symbols from 
/usr/local/lib/rlm_chap.so...done.
Loaded symbols for /usr/local/lib/rlm_chap.so Reading symbols from 
/usr/local/lib/rlm_preprocess.so...done.
Loaded symbols for /usr/local/lib/rlm_preprocess.so Reading symbols from 
/usr/local/lib/rlm_digest.so...done.
Loaded symbols for /usr/local/lib/rlm_digest.so Reading symbols from 
/usr/local/lib/rlm_realm.so...done.
Loaded symbols for /usr/local/lib/rlm_realm.so Reading symbols from 
/usr/local/lib/rlm_acct_unique.so...done.
Loaded symbols for /usr/local/lib/rlm_acct_unique.so Reading symbols from 
/usr/local/lib/rlm_files.so...done.
Loaded symbols for /usr/local/lib/rlm_files.so Reading symbols from 
/usr/local/lib/rlm_detail.so...done.
Loaded symbols for /usr/local/lib/rlm_detail.so Reading symbols from 
/usr/local/lib/rlm_unix.so...done.
Loaded symbols for /usr/local/lib/rlm_unix.so Reading symbols from 
/usr/local/lib/rlm_radutmp.so...done.
Loaded symbols for /usr/local/lib/rlm_radutmp.so Reading symbols from 
/usr/local/lib/rlm_attr_filter.so...done.
Loaded symbols for /usr/local/lib/rlm_attr_filter.so Reading symbols from 
/usr/local/lib/rlm_ldap.so...done.
Loaded symbols for /usr/local/lib/rlm_ldap.so Reading symbols from 
/usr/lib64/libldap_r-2.3.so.0...(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/libldap_r-2.3.so.0 Reading symbols from 
/usr/lib64/liblber-2.3.so.0...(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/liblber-2.3.so.0 Reading symbols from 
/usr/lib64/libsasl2.so.2...(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from 
/usr/local/lib/rlm_sql.so...done.
Loaded symbols for /usr/local/lib/rlm_sql.so Reading symbols from 
/usr/local/lib/rlm_sql_mysql.so...done.
Loaded symbols for /usr/local/lib/rlm_sql_mysql.so Reading symbols from 
/usr/lib64/mysql/libmysqlclient_r.so.15...(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/mysql/libmysqlclient_r.so.15
Reading symbols from /lib64/libm.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib64/libm.so.6
Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libgcc_s.so.1
Reading symbols from /lib64/libnss_dns.so.2...(no debugging symbols 
found)...done.
Loaded symbols for /lib64/libnss_dns.so.2 Reading symbols from 
/usr/local/lib/rlm_eap.so...done.
Loaded symbols for /usr/local/lib/rlm_eap.so Reading symbols from 
/usr/local/lib/libfreeradius-eap-2.2.0.so...done.
Loaded symbols for /usr/local/lib/libfreeradius-eap-2.2.0.so
Reading symbols from /usr/local/lib/rlm_eap_md5.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_md5.so Reading symbols from 
/usr/local/lib/rlm_eap_leap.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_leap.so Reading symbols from 
/usr/local/lib/rlm_eap_gtc.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_gtc.so Reading symbols from 
/usr/local/lib/rlm_eap_tls.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_tls.so Reading symbols from 
/usr/local/lib/rlm_eap_ttls.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_ttls.so Reading symbols from 
/usr/local/lib/rlm_eap_peap.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_peap.so Reading symbols from 
/usr/local/lib/rlm_eap_mschapv2.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_mschapv2.so
Reading symbols from /usr/local/lib/rlm_always.so...done.
Loaded symbols for /usr/local/lib/rlm_always.so

warning: no loadable sections found in added symbol-file system-supplied DSO at 
0x7fff84bfd000 Core was generated by `/usr/sbin/radiusd -d /etc/raddb'.
Program terminated with signal 11, Segmentation fault.
#0  0x003c6c07b5bb in memcpy () from /lib64/libc.so.6

###
Thanks,

Chris

-Original Message-
From: 
freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org 
[mailto:freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org]
 On Behalf Of a.l.m.bu...@lboro.ac.uk
Sent: Wednesday, May 01, 2013 6:30 PM
To: FreeRadius users mailing list
Subject: Re: segfault error

hi,

..thats

Re: segfault error

2013-05-02 Thread Alan DeKok
Chris Taylor wrote:
 Sorry miscommunication on my part. Below is an example of a request that 
 causes the segfault. I was also able to get a core dump as well which I 
 pasted at the bottom.

  Which is *not* what we asked for.

  Please follow the instructions in doc/bugs.  It gives DETAILED
instructions on what to post.  You are NOT posting the information we
need to be able to help you.

  You're just showing that you can run gdb.  This isn't useful.  You
need to run the gdb commands in doc/bugs, which tell us WHERE the
problem occurred.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segfault error

2013-05-02 Thread Chris Taylor
\000\000\000\000\004\000\000\000\000\000\000\000`\001\000\000\000\000\000\000HJ5l\000\000\000`\331\307\004q+\000\000

'UsA\001\000\000\000\000\000\000\070\001\000\000\000\000\000\000\005, '\000' 
repeats 39 times, from cli\237Oh\000q+\000\00   0-bras1 port 0 
vifrom client (\000\000\000-bras1 port 0...
#3  0x0041c0e6 in call_modsingle (component=0, c=value optimized out, 
request=0x12756bb0) at modcall.c:304
No locals.
#4  modcall (component=0, c=value optimized out, request=0x12756bb0) at 
modcall.c:686
myresult = 1
stack = {pointer = 1634165107, priority = {0, 0, 0, 0, 0, 0, 0, 
1634165107, 829124461, 13106, 0 repeats 22 times},
  result = {0, 0, 2, 0 repeats 16 times, 24, 48, 80209248, 11121, 
80209056, 11121, 0, 0, 0, 0, 0, 0, 0}, children = {
0x12706950, 0x127069c0, 0x0 repeats 16 times, 0x2b7104c7e320, 
0x0, 0x2b7104c7ea80, 0x2b7104c7e970, 0x2b7104c7e970,
0x4c7e480, 0x4, 0x110, 0x12774b50, 0x2b7104c7e320, 0x3c6c068b5a, 
0xfbad8001, 0x2b7104c7e970, 0x2b7104c7e970},
  start = {0x0, 0x127069c0, 0x1270c340, 0x2b7104c7ea80, 0x2b7104c7e970, 
0x2b7104c7ea80, 0x0, 0x6, 0x8,
0x0 repeats 12 times, 0x, 0x0, 0x0, 0x12619fe0, 0x0, 0x0, 
0x0, 0x0, 0x0, 0x0, 0x1}}
parent = 0x12706950
child = 0x127069c0
if_taken = 0
was_if = 0
#5  0x00419415 in indexed_modcall (comp=0, idx=1024, 
request=0x12756bb0) at modules.c:740
rcode = value optimized out
list = 0x12706950
server = 0x0
#6  0x00409147 in rad_check_password (request=0x12756bb0) at auth.c:382
No locals.
#7  rad_authenticate (request=0x12756bb0) at auth.c:667
namepair = 0x12743dc0
check_item = value optimized out
auth_item = 0x12743f00
---Type return to continue, or q return to quit---
module_msg = value optimized out
tmp = value optimized out
result = value optimized out
autz_retry = value optimized out
autz_type = value optimized out
#8  0x00427751 in radius_handle_request (request=0x12756bb0, 
fun=0x408910 rad_authenticate) at event.c:3784
No locals.
#9  0x004278d4 in proxy_to_virtual_server (request=0x12755810) at 
event.c:1980
fake = 0x12756bb0
fun = 0x408910 rad_authenticate
#10 0x0042763a in successfully_proxied_request (request=0x12755810) at 
event.c:2265
No locals.
#11 request_post_handler (request=0x12755810) at event.c:2329
rcode = value optimized out
child_state = value optimized out
vp = value optimized out
#12 0x0042778d in radius_handle_request (request=0x12755810, 
fun=0x408910 rad_authenticate) at event.c:3790
No locals.
#13 0x00420320 in request_handler_thread (arg=value optimized out) at 
threads.c:537
fun = 0x408910 rad_authenticate
self = 0x12740a90
#14 0x003c6d00683d in start_thread () from /lib64/libpthread.so.0
No symbol table info available.
#15 0x003c6c0d500d in clone () from /lib64/libc.so.6
No symbol table info available.
(gdb)


Chris Taylor
System Administrator
Network Operations
Eastlink
chris.tay...@corp.eastlink.caT: 519.773.1287


-Original Message-
From: 
freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org 
[mailto:freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org]
 On Behalf Of Alan DeKok
Sent: Thursday, May 02, 2013 11:58 AM
To: FreeRadius users mailing list
Subject: Re: segfault error

Chris Taylor wrote:
 Sorry miscommunication on my part. Below is an example of a request that 
 causes the segfault. I was also able to get a core dump as well which I 
 pasted at the bottom.

  Which is *not* what we asked for.

  Please follow the instructions in doc/bugs.  It gives DETAILED instructions 
on what to post.  You are NOT posting the information we need to be able to 
help you.

  You're just showing that you can run gdb.  This isn't useful.  You need to 
run the gdb commands in doc/bugs, which tell us WHERE the problem occurred.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segfault error

2013-05-02 Thread Chris Taylor
I forgot to include my OS and kernel type.

Linux on-radius01.eastlink.ca 2.6.18-308.16.1.el5

CentOS release 5.9 (Final)


-Original Message-
From: Chris Taylor
Sent: Thursday, May 02, 2013 1:31 PM
To: 'FreeRadius users mailing list'
Subject: RE: segfault error

I think I have what you are looking for now. I have copied the whole dump from 
when I start using gdb.

Chris




[root@on-radius01 raddb]# gdb /usr/sbin/radiusd 
/tmp/core-radiusd-11-95-95-11609-1367435209
GNU gdb (GDB) CentOS (7.0.1-45.el5.centos) Copyright (C) 2009 Free Software 
Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type show copying
and show warranty for details.
This GDB was configured as x86_64-redhat-linux-gnu.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/...
Reading symbols from /usr/sbin/radiusd...done.
[New Thread 11611]
[New Thread 11614]
[New Thread 11613]
[New Thread 11612]
[New Thread 11610]
[New Thread 11609]
Reading symbols from /usr/local/lib/libfreeradius-radius-2.2.0.so...done.
Loaded symbols for /usr/local/lib/libfreeradius-radius-2.2.0.so
Reading symbols from /lib64/libnsl.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libnsl.so.1
Reading symbols from /lib64/libresolv.so.2...(no debugging symbols 
found)...done.
Loaded symbols for /lib64/libresolv.so.2 Reading symbols from 
/lib64/libpthread.so.0...(no debugging symbols found)...done.
[Thread debugging using libthread_db enabled] Loaded symbols for 
/lib64/libpthread.so.0 Reading symbols from /lib64/libcrypt.so.1...(no 
debugging symbols found)...done.
Loaded symbols for /lib64/libcrypt.so.1
Reading symbols from /usr/local/lib/libltdl.so.3...done.
Loaded symbols for /usr/local/lib/libltdl.so.3 Reading symbols from 
/lib64/libssl.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib64/libssl.so.6
Reading symbols from /lib64/libcrypto.so.6...(no debugging symbols 
found)...done.
Loaded symbols for /lib64/libcrypto.so.6 Reading symbols from 
/lib64/libdl.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/libdl.so.2
Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib64/libc.so.6
Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols 
found)...done.
Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from 
/usr/lib64/libgssapi_krb5.so.2...(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/libgssapi_krb5.so.2 Reading symbols from 
/usr/lib64/libkrb5.so.3...(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/libkrb5.so.3 Reading symbols from 
/lib64/libcom_err.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from 
/usr/lib64/libk5crypto.so.3...(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/libk5crypto.so.3 Reading symbols from 
/lib64/libz.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libz.so.1
Reading symbols from /usr/lib64/libkrb5support.so.0...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib64/libkrb5support.so.0 Reading symbols from 
/lib64/libkeyutils.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from 
/lib64/libselinux.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libselinux.so.1 Reading symbols from 
/lib64/libsepol.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libsepol.so.1
Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols 
found)...done.
Loaded symbols for /lib64/libnss_files.so.2 Reading symbols from 
/lib64/libnss_ldap.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/libnss_ldap.so.2 Reading symbols from 
/usr/local/lib/rlm_exec-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_exec-2.2.0.so Reading symbols from 
/usr/local/lib/rlm_expr-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_expr-2.2.0.so Reading symbols from 
/usr/local/lib/rlm_expiration-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_expiration-2.2.0.so
Reading symbols from /usr/local/lib/rlm_logintime-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_logintime-2.2.0.so
Reading symbols from /usr/local/lib/rlm_pap-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_pap-2.2.0.so Reading symbols from 
/usr/local/lib/rlm_chap-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_chap-2.2.0.so Reading symbols from 
/usr/local/lib/rlm_preprocess-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_preprocess-2.2.0.so
Reading symbols from /usr/local/lib/rlm_digest-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_digest-2.2.0.so
Reading symbols from /usr/local/lib/rlm_realm-2.2.0.so...done.
Loaded symbols for /usr/local/lib/rlm_realm-2.2.0.so

RE: segfault error

2013-05-01 Thread Chris Taylor
I did some more debugging and I always seem to get a segfault at the same 
place. Is there something I should be looking at on the LDAP backend?


[files] users: Matched entry DEFAULT at line 214
++[files] returns ok
[pap] Normalizing SSHA1-Password from base64 encoding
[pap] WARNING: Auth-Type already set.  Not setting to PAP
++[pap] returns noop
Found Auth-Type = PAP
# Executing group from file /etc/raddb/sites-enabled/virtual.amtelecom.net
+- entering group PAP {...}
[pap] login attempt with password 45270
[pap] Using SSHA encryption.
[pap] Normalizing SSHA1-Password from base64 encoding
Segmentation fault

++[files] returns ok
[pap] Normalizing SSHA1-Password from base64 encoding
[pap] WARNING: Auth-Type already set.  Not setting to PAP
++[pap] returns noop
Found Auth-Type = PAP
# Executing group from file /etc/raddb/sites-enabled/virtual.amtelecom.net
+- entering group PAP {...}
[pap] login attempt with password bradly
[pap] Using SSHA encryption.
[pap] Normalizing SSHA1-Password from base64 encoding
Segmentation fault


Thanks,

Chris

Chris Taylor
System Administrator
Network Operations
Eastlink
chris.tay...@corp.eastlink.caT: 519.773.1287


-Original Message-
From: 
freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org 
[mailto:freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org]
 On Behalf Of Chris Taylor
Sent: Friday, April 12, 2013 4:31 PM
To: FreeRadius users mailing list
Subject: RE: segfault error

Yeah this is the only version of freeradius on the box the other was an rpm 
version that was removed before I compiled this one.




-Original Message-
From: 
freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org 
[mailto:freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org]
 On Behalf Of Alan DeKok
Sent: Friday, April 12, 2013 3:45 PM
To: FreeRadius users mailing list
Subject: Re: segfault error

Chris Taylor wrote:
 Ok I have upgraded to a compiled version of freeradius 2.2.0, and I was able 
 to see the same result. It crashed after a few minutes with the error below.
 
 on-radius01 kernel: radiusd[10038]: segfault at 73d87000 rip 
 003c6c07b5bb rsp 73d83c08 error 4

  Check that you're really running v2.2.0.  Sometimes scripts point to old 
installations.

 I turned on core dumps to see if I could get any more details out of it, but 
 I could not make it crash after that.

  Did you follow the instructions in doc/bugs?  That says how to find the bug.

 Any ideas as to what this could be I can post my -X output but all it says at 
 the bottom when it stops working is segfault.

  doc/bugs has detailed instructions for just such an occasion.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: segfault error

2013-05-01 Thread Alan DeKok
Chris Taylor wrote:
 I did some more debugging and I always seem to get a segfault at the same 
 place. Is there something I should be looking at on the LDAP backend?

  See doc/bugs

  That should help.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segfault error

2013-05-01 Thread Chris Taylor
I have tried a few times but I can't get a core dump. After radius dies I run  
gdb /usr/sbin/radiusd /tmp/core_dump/test.dump but I get the following output.


#
[root@on-radius01 core_dump]# gdb /usr/sbin/radiusd /tmp/core_dump/test.dump
GNU gdb (GDB) CentOS (7.0.1-45.el5.centos)
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type show copying
and show warranty for details.
This GDB was configured as x86_64-redhat-linux-gnu.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/...
Reading symbols from /usr/sbin/radiusd...done.
/tmp/core_dump/test.dump is not a core dump: File format not recognized
#

I have ulimit set to unlimited.

[root@on-radius01 core_dump]# ulimit -a
core file size  (blocks, -c) unlimited
data seg size   (kbytes, -d) unlimited
scheduling priority (-e) 0
file size   (blocks, -f) unlimited

What am I doing wrong on this?

Thanks,

Chris


-Original Message-
From: 
freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org 
[mailto:freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org]
 On Behalf Of Alan DeKok
Sent: Wednesday, May 01, 2013 12:14 PM
To: FreeRadius users mailing list
Subject: Re: segfault error

Chris Taylor wrote:
 I did some more debugging and I always seem to get a segfault at the same 
 place. Is there something I should be looking at on the LDAP backend?

  See doc/bugs

  That should help.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: segfault error

2013-05-01 Thread John Dennis

On 05/01/2013 01:36 PM, Chris Taylor wrote:

I have tried a few times but I can't get a core dump. After radius dies I run  gdb 
/usr/sbin/radiusd /tmp/core_dump/test.dump but I get the following output.


#
[root@on-radius01 core_dump]# gdb /usr/sbin/radiusd /tmp/core_dump/test.dump
GNU gdb (GDB) CentOS (7.0.1-45.el5.centos)
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type show copying
and show warranty for details.
This GDB was configured as x86_64-redhat-linux-gnu.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/...
Reading symbols from /usr/sbin/radiusd...done.
/tmp/core_dump/test.dump is not a core dump: File format not recognized
#

I have ulimit set to unlimited.

[root@on-radius01 core_dump]# ulimit -a
core file size  (blocks, -c) unlimited
data seg size   (kbytes, -d) unlimited
scheduling priority (-e) 0
file size   (blocks, -f) unlimited

What am I doing wrong on this?


There is information in this bz you may find useful

https://bugzilla.redhat.com/show_bug.cgi?id=602567

--
John Dennis jden...@redhat.com

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segfault error

2013-05-01 Thread Chris Taylor
 for /usr/local/lib/rlm_detail.so
Reading symbols from /usr/local/lib/rlm_unix.so...done.
Loaded symbols for /usr/local/lib/rlm_unix.so
Reading symbols from /usr/local/lib/rlm_radutmp.so...done.
Loaded symbols for /usr/local/lib/rlm_radutmp.so
Reading symbols from /usr/local/lib/rlm_attr_filter.so...done.
Loaded symbols for /usr/local/lib/rlm_attr_filter.so
Reading symbols from /usr/local/lib/rlm_ldap.so...done.
Loaded symbols for /usr/local/lib/rlm_ldap.so
Reading symbols from /usr/lib64/libldap_r-2.3.so.0...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib64/libldap_r-2.3.so.0
Reading symbols from /usr/lib64/liblber-2.3.so.0...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib64/liblber-2.3.so.0
Reading symbols from /usr/lib64/libsasl2.so.2...(no debugging symbols 
found)...done.
Loaded symbols for /usr/lib64/libsasl2.so.2
Reading symbols from /usr/local/lib/rlm_sql.so...done.
Loaded symbols for /usr/local/lib/rlm_sql.so
Reading symbols from /usr/local/lib/rlm_sql_mysql.so...done.
Loaded symbols for /usr/local/lib/rlm_sql_mysql.so
Reading symbols from /usr/lib64/mysql/libmysqlclient_r.so.15...(no debugging 
symbols found)...done.
Loaded symbols for /usr/lib64/mysql/libmysqlclient_r.so.15
Reading symbols from /lib64/libm.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib64/libm.so.6
Reading symbols from /lib64/libgcc_s.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/libgcc_s.so.1
Reading symbols from /lib64/libnss_dns.so.2...(no debugging symbols 
found)...done.
Loaded symbols for /lib64/libnss_dns.so.2
Reading symbols from /usr/local/lib/rlm_eap.so...done.
Loaded symbols for /usr/local/lib/rlm_eap.so
Reading symbols from /usr/local/lib/libfreeradius-eap-2.2.0.so...done.
Loaded symbols for /usr/local/lib/libfreeradius-eap-2.2.0.so
Reading symbols from /usr/local/lib/rlm_eap_md5.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_md5.so
Reading symbols from /usr/local/lib/rlm_eap_leap.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_leap.so
Reading symbols from /usr/local/lib/rlm_eap_gtc.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_gtc.so
Reading symbols from /usr/local/lib/rlm_eap_tls.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_tls.so
Reading symbols from /usr/local/lib/rlm_eap_ttls.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_ttls.so
Reading symbols from /usr/local/lib/rlm_eap_peap.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_peap.so
Reading symbols from /usr/local/lib/rlm_eap_mschapv2.so...done.
Loaded symbols for /usr/local/lib/rlm_eap_mschapv2.so
Reading symbols from /usr/local/lib/rlm_always.so...done.
Loaded symbols for /usr/local/lib/rlm_always.so

warning: no loadable sections found in added symbol-file system-supplied DSO at 
0x7fff84bfd000
Core was generated by `/usr/sbin/radiusd -d /etc/raddb'.
Program terminated with signal 11, Segmentation fault.
#0  0x003c6c07b5bb in memcpy () from /lib64/libc.so.6



-Original Message-
From: John Dennis [mailto:jden...@redhat.com] 
Sent: Wednesday, May 01, 2013 2:06 PM
To: FreeRadius users mailing list
Cc: Chris Taylor
Subject: Re: segfault error

On 05/01/2013 01:36 PM, Chris Taylor wrote:
 I have tried a few times but I can't get a core dump. After radius dies I run 
  gdb /usr/sbin/radiusd /tmp/core_dump/test.dump but I get the following 
 output.


 #
 [root@on-radius01 core_dump]# gdb /usr/sbin/radiusd 
 /tmp/core_dump/test.dump GNU gdb (GDB) CentOS (7.0.1-45.el5.centos) 
 Copyright (C) 2009 Free Software Foundation, Inc.
 License GPLv3+: GNU GPL version 3 or later 
 http://gnu.org/licenses/gpl.html
 This is free software: you are free to change and redistribute it.
 There is NO WARRANTY, to the extent permitted by law.  Type show copying
 and show warranty for details.
 This GDB was configured as x86_64-redhat-linux-gnu.
 For bug reporting instructions, please see:
 http://www.gnu.org/software/gdb/bugs/...
 Reading symbols from /usr/sbin/radiusd...done.
 /tmp/core_dump/test.dump is not a core dump: File format not 
 recognized #

 I have ulimit set to unlimited.

 [root@on-radius01 core_dump]# ulimit -a
 core file size  (blocks, -c) unlimited
 data seg size   (kbytes, -d) unlimited
 scheduling priority (-e) 0
 file size   (blocks, -f) unlimited

 What am I doing wrong on this?

There is information in this bz you may find useful

https://bugzilla.redhat.com/show_bug.cgi?id=602567

--
John Dennis jden...@redhat.com

Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: segfault error

2013-05-01 Thread Alan DeKok
Chris Taylor wrote:
 I have tried a few times but I can't get a core dump.

  See doc/bugs.  It contains instructions for debugging a live server.
If you can't get core dumps, use the instructions in Section 3 of that file.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: segfault error

2013-05-01 Thread A . L . M . Buxey
Hi,

 I did some more debugging and I always seem to get a segfault at the same 
 place. Is there something I should be looking at on the LDAP backend?

i'd like to knwo what you are doing, how you have this configured.and why 
your server thinks '45270' or
'bradly' or SSHA encrypted, its likely you're forcing somthing to occur which 
is truly stuffing
the SHA libraries when they try to evaluate the not SSHA1 hash

as per the docs, radiusd -X output


alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: segfault error

2013-05-01 Thread A . L . M . Buxey
hi,

..thats the startupand when a request comes in (the one that segfaults
the server.) ?

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segfault error

2013-04-12 Thread Chris Taylor
Ok I have upgraded to a compiled version of freeradius 2.2.0, and I was able to 
see the same result. It crashed after a few minutes with the error below.

on-radius01 kernel: radiusd[10038]: segfault at 73d87000 rip 
003c6c07b5bb rsp 73d83c08 error 4

I turned on core dumps to see if I could get any more details out of it, but I 
could not make it crash after that.

Any ideas as to what this could be I can post my -X output but all it says at 
the bottom when it stops working is segfault.

Thanks,

Chris

-Original Message-
From: 
freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org 
[mailto:freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org]
 On Behalf Of Alan DeKok
Sent: Wednesday, April 10, 2013 9:45 AM
To: FreeRadius users mailing list
Subject: Re: segfault error

Chris Taylor wrote:
 I am running freeradius2-2.1.12-5.el5 on a CentOS server release 5.9 
 (Final). I was doing some testing on some new RADIUS servers that we 
 want to put into production and I got the following error.

  Well... upgrade to 2.2.0.  There's no reason for us to debug issues in old 
versions.  Those have already been debugged and fixed.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: segfault error

2013-04-12 Thread Alan DeKok
Chris Taylor wrote:
 Ok I have upgraded to a compiled version of freeradius 2.2.0, and I was able 
 to see the same result. It crashed after a few minutes with the error below.
 
 on-radius01 kernel: radiusd[10038]: segfault at 73d87000 rip 
 003c6c07b5bb rsp 73d83c08 error 4

  Check that you're really running v2.2.0.  Sometimes scripts point to
old installations.

 I turned on core dumps to see if I could get any more details out of it, but 
 I could not make it crash after that.

  Did you follow the instructions in doc/bugs?  That says how to find
the bug.

 Any ideas as to what this could be I can post my -X output but all it says at 
 the bottom when it stops working is segfault.

  doc/bugs has detailed instructions for just such an occasion.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: segfault error

2013-04-12 Thread Chris Taylor
Yeah this is the only version of freeradius on the box the other was an rpm 
version that was removed before I compiled this one.




-Original Message-
From: 
freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org 
[mailto:freeradius-users-bounces+chris.taylor=corp.eastlink...@lists.freeradius.org]
 On Behalf Of Alan DeKok
Sent: Friday, April 12, 2013 3:45 PM
To: FreeRadius users mailing list
Subject: Re: segfault error

Chris Taylor wrote:
 Ok I have upgraded to a compiled version of freeradius 2.2.0, and I was able 
 to see the same result. It crashed after a few minutes with the error below.
 
 on-radius01 kernel: radiusd[10038]: segfault at 73d87000 rip 
 003c6c07b5bb rsp 73d83c08 error 4

  Check that you're really running v2.2.0.  Sometimes scripts point to old 
installations.

 I turned on core dumps to see if I could get any more details out of it, but 
 I could not make it crash after that.

  Did you follow the instructions in doc/bugs?  That says how to find the bug.

 Any ideas as to what this could be I can post my -X output but all it says at 
 the bottom when it stops working is segfault.

  doc/bugs has detailed instructions for just such an occasion.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


segfault error

2013-04-10 Thread Chris Taylor
I am running freeradius2-2.1.12-5.el5 on a CentOS server release 5.9 (Final). I 
was doing some testing on some new RADIUS servers that we want to put into 
production and I got the following error.

/var/log/messages
Apr  9 17:33:45 on-radius01 kernel: radiusd[8831]: segfault at 2aae660ae000 
rip 2aae5b6215eb rsp 2aae660ab7c8 error 4

What should I be looking for the RADIUS logs didn't turn up anything as it 
wasn't in debug mode.

Thanks,

Chris


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: segfault error

2013-04-10 Thread Alan DeKok
Chris Taylor wrote:
 I am running freeradius2-2.1.12-5.el5 on a CentOS server release 5.9
 (Final). I was doing some testing on some new RADIUS servers that we
 want to put into production and I got the following error.

  Well... upgrade to 2.2.0.  There's no reason for us to debug issues in
old versions.  Those have already been debugged and fixed.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html