This looks to me like radius is trying to connect to the httpd.aaa process and
failing.
The underlying issue does indeed seem related to TLS.
Check your rest.conf.
Is it trying to connect to an https url?
If all else fails, restore the original rest.conf.example over rest.conf.
--
Louis Munro
[email protected] :: www.inverse.ca
+1.514.447.4918 x125 :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
(www.packetfence.org)
> On Apr 26, 2016, at 17:16 , [email protected] wrote:
>
> Hi there,
>
> since my last reboot, radius daemon won't start any more. In it's
> logfile there are these lines:
>
> Tue Apr 26 20:21:35 2016 : Warning: WARNING: Ignoring "response_window =
> 20.000000", forcing to "response_window = 10.000000"
> Tue Apr 26 20:21:35 2016 : Info: Debugger not attached
> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql
> (module rlm_sql_mysql) loaded and linked
> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (pfguest): Driver rlm_sql_mysql
> (module rlm_sql_mysql) loaded and linked
> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (pfsponsor): Driver
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (pfsms): Driver rlm_sql_mysql
> (module rlm_sql_mysql) loaded and linked
> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (pflocal): Driver rlm_sql_mysql
> (module rlm_sql_mysql) loaded and linked
> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (sql_reject): Driver
> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
> Tue Apr 26 20:21:35 2016 : Info: rlm_redis: libhiredis version: 0.10.1
> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
> connection (0), 1 of 64 pending slots used
> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
> connection (1), 1 of 63 pending slots used
> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
> connection (2), 1 of 62 pending slots used
> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
> connection (3), 1 of 61 pending slots used
> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
> connection (4), 1 of 60 pending slots used
> Tue Apr 26 20:21:35 2016 : Info: rlm_rest: libcurl version:
> libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7 libidn/1.25 libssh2/1.4.2
> librtmp/2.3
> Tue Apr 26 20:21:35 2016 : Info: rlm_rest (rest): Opening additional
> connection (0), 1 of 64 pending slots used
> Tue Apr 26 20:21:35 2016 : Error: rlm_rest (rest): Connection failed: 35
> - SSL connect error
> Tue Apr 26 20:21:35 2016 : Error: rlm_rest (rest): Opening connection
> failed (0)
> Tue Apr 26 20:21:35 2016 : Error:
> /usr/local/pf/raddb//mods-enabled/rest[4]: Instantiation failed for
> module "rest"
>
> Sadly I cannot tell what I changed last before the reboot.
> Some time before I did install the latest Debian 7 security updates, and
> I also did change the domain name in pf.conf and networks.conf at a
> certain point.
>
> Because I was thinking that maybe there is a problem with the
> certificate, I changed a few lines in /radiusd/rest.conf to disable
> certifcate checks. But this did not do the trick.
>
> It is PF 6 in inline mode on Debian Wheezy.
>
> Any idea where this error comes from?
>
> Cheers,
> Till
>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users