Ok, the bug I'm hitting likely is this:
https://github.com/FreeRADIUS/freeradius-server/issues/4129 (also see:
http://lists.freeradius.org/pipermail/freeradius-users/2021-July/100336.html)
The commit that should fix the issue are:
https://github.com/FreeRADIUS/freeradius-server/commit/4d4af808a7b25c307d53f3e99e4727b89b110f8c
https://github.com/FreeRADIUS/freeradius-server/commit/8e204e3b6ab408106a422a55dc32e00a67e12ef3
I'm rebuilding FR and I'll keep you posted
Il 17/09/2021 09:10, Cristian Mammoli via PacketFence-users ha scritto:
Hi guys, I'm going to open an issue upstream. Could you possibly share
the .spec file you use for building freeradius?
I didn't find in the repo or on github
Thanks
Il 15/09/2021 18:24, Cristian Mammoli via PacketFence-users ha scritto:
Hi, after upgrading to v11 I noticed tha radiusd auth
(packetfence-radiusd-auth systemd unit) frequenty exits with SEGV or
ABRT and gets restarted by systemd:
Sep 15 11:29:04 srvpf.apra.it kernel: traps: radiusd[344149] general
protection fault ip:42c6a8 sp:7f95a9c1aad0 error:0 in
radiusd[400000+6f000]
Sep 15 11:46:15 srvpf.apra.it kernel: traps: radiusd[351051] general
protection fault ip:42c6a8 sp:7f6cdf4f1ad0 error:0 in
radiusd[400000+6f000]
Sep 15 12:22:22 srvpf.apra.it kernel: traps: radiusd[364681] general
protection fault ip:42c6a8 sp:7f4b503a1ad0 error:0 in
radiusd[400000+6f000]
Sep 15 12:38:46 srvpf.apra.it kernel: traps: radiusd[369964] general
protection fault ip:42c100 sp:7fbe190ceac8 error:0 in
radiusd[400000+6f000]
Sep 15 12:47:43 srvpf.apra.it kernel: traps: radiusd[373100] general
protection fault ip:42c6a8 sp:7fe6dc7c8ad0 error:0 in
radiusd[400000+6f000]
Sep 15 13:15:41 srvpf.apra.it kernel: traps: radiusd[379014] general
protection fault ip:42c6a8 sp:7f6fe8b2fad0 error:0 in
radiusd[400000+6f000]
Sep 15 13:38:15 srvpf.apra.it kernel: traps: radiusd[383774] general
protection fault ip:42c6a8 sp:7f0439542ad0 error:0 in
radiusd[400000+6f000]
Sep 15 14:57:48 srvpf.apra.it kernel: traps: radiusd[404495] general
protection fault ip:42c6a8 sp:7f4aa7d8cad0 error:0 in
radiusd[400000+6f000]
Sep 15 15:04:48 srvpf.apra.it kernel: traps: radiusd[406785] general
protection fault ip:42c6a8 sp:7feb508c2ad0 error:0 in
radiusd[400000+6f000]
Sep 15 15:12:14 srvpf.apra.it kernel: traps: radiusd[410202] general
protection fault ip:42c6a8 sp:7f2280066ad0 error:0 in
radiusd[400000+6f000]
Sep 15 16:05:07 srvpf.apra.it kernel: traps: radiusd[427480] general
protection fault ip:42c6a8 sp:7f1038cf3ad0 error:0 in
radiusd[400000+6f000]
Sep 15 16:29:25 srvpf.apra.it kernel: traps: radiusd[432827] general
protection fault ip:42c6a8 sp:7f282a736ad0 error:0 in
radiusd[400000+6f000]
Sep 15 16:40:03 srvpf.apra.it kernel: traps: radiusd[435608] general
protection fault ip:42c6a8 sp:7f5ea01c2ad0 error:0 in
radiusd[400000+6f000]
Sep 15 17:53:55 srvpf.apra.it kernel: traps: radiusd[455854] general
protection fault ip:42c6a8 sp:7f43c94a2ad0 error:0 in
radiusd[400000+6f000]
Sep 15 18:12:14 srvpf.apra.it kernel: traps: radiusd[4338] general
protection fault ip:42c6a8 sp:7f1b71beaad0 error:0 in
radiusd[400000+6f000]
In the journal I have:
Sep 15 18:12:14 srvpf.apra.it auth[4323]: [mac:] Rejected user: dummy
Sep 15 18:12:14 srvpf.apra.it auth[4323]: (84) Rejected in post-auth:
[dummy] (from client 192.168.16.42/32 port 0)
Sep 15 18:12:14 srvpf.apra.it auth[4323]: (84) Login incorrect (rest:
Server returned:): [dummy] (from client 192.168.16.42/32 port 0)
*Sep 15 18:12:14 srvpf.apra.it systemd[1]:
packetfence-radiusd-auth.service: Main process exited, code=killed,
status=11/SEGV**
**Sep 15 18:12:14 srvpf.apra.it systemd[1]:
packetfence-radiusd-auth.service: Failed with result 'signal'.*
Sep 15 18:12:14 srvpf.apra.it systemd[1]:
packetfence-radiusd-auth.service: Service RestartSec=100ms expired,
scheduling restart.
Sep 15 18:12:14 srvpf.apra.it systemd[1]:
packetfence-radiusd-auth.service: Scheduled restart job, restart
counter is at 1.
Sep 15 18:12:14 srvpf.apra.it systemd[1]: Stopped PacketFence
FreeRADIUS authentication multi-protocol authentication server.
Sep 15 18:12:14 srvpf.apra.it systemd[1]: Starting PacketFence
FreeRADIUS authentication multi-protocol authentication server...
I tried a few debug steps but I'm lost
I managed to produce a core dump if anyone could please have a look...
TIA
--
*Cristian Mammoli*
Network and Computer Systems Administrator
T.+39 0731719822
www.apra.it <https://www.apra.it>
Apra Spa
<https://www.apra.it/>
linksocial
*Avviso sulla tutela di informazioni riservate.* Questo messaggio è
stato spedito da Apra spa o da una delle aziende del Gruppo. Esso e
gli eventuali allegati, potrebbero contenere informazioni di
carattere estremamente riservato e confidenziale. Qualora non foste i
destinatari designati, vogliate cortesemente informarci
immediatamente con lo stesso mezzo ed eliminare il messaggio e i
relativi eventuali allegati, senza trattenerne copia.
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
*Cristian Mammoli*
Network and Computer Systems Administrator
T.+39 0731719822
www.apra.it <https://www.apra.it>
Apra Spa
<https://www.apra.it/>
linksocial
*Avviso sulla tutela di informazioni riservate.* Questo messaggio è
stato spedito da Apra spa o da una delle aziende del Gruppo. Esso e
gli eventuali allegati, potrebbero contenere informazioni di carattere
estremamente riservato e confidenziale. Qualora non foste i
destinatari designati, vogliate cortesemente informarci immediatamente
con lo stesso mezzo ed eliminare il messaggio e i relativi eventuali
allegati, senza trattenerne copia.
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
*Cristian Mammoli*
Network and Computer Systems Administrator
T.+39 0731719822
www.apra.it <https://www.apra.it>
Apra Spa
<https://www.apra.it/>
linksocial
*Avviso sulla tutela di informazioni riservate.* Questo messaggio è
stato spedito da Apra spa o da una delle aziende del Gruppo. Esso e gli
eventuali allegati, potrebbero contenere informazioni di carattere
estremamente riservato e confidenziale. Qualora non foste i destinatari
designati, vogliate cortesemente informarci immediatamente con lo stesso
mezzo ed eliminare il messaggio e i relativi eventuali allegati, senza
trattenerne copia.
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
