In gdb, I get the following:
Thread 2 "freeradius" received signal SIGSEGV, Segmentation fault.
#0 0x00007ffff3c51c9c in ?? () from
/usr/lib/x86_64-linux-gnu/perl5/5.32/auto/POSIX/AtFork/AtFork.so
#1 0x00007ffff7945228 in __run_fork_handlers (who=<optimized out>,
who@entry=atfork_run_prepare, do_locking=do_locking@entry=true) at
register-atfork.c:123
#2 0x00007ffff798bd90 in __libc_fork () at ../sysdeps/nptl/fork.c:58
#3 0x0000555555589e12 in rad_fork ()
#4 0x00007ffff7fa46ac in radius_start_program () from
/usr/lib/freeradius/libfreeradius-server.so
#5 0x00007ffff7fa4d14 in radius_exec_program () from
/usr/lib/freeradius/libfreeradius-server.so
#6 0x00007ffff7f4e7bf in ?? () from /usr/lib/freeradius/rlm_exec.so
#7 0x0000555555580834 in ?? ()
#8 0x00005555555813a3 in ?? ()
#9 0x000055555558014d in ?? ()
#10 0x0000555555583751 in modcall ()
#11 0x000055555557e035 in indexed_modcall ()
#12 0x000055555556ac59 in rad_authenticate ()
#13 0x0000555555593230 in ?? ()
#14 0x000055555558ae12 in ?? ()
#15 0x00007ffff7b8fea7 in start_thread (arg=<optimized out>) at
pthread_create.c:477
#16 0x00007ffff79bfa2f in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:95
Why is freeradius calling a perl lib to spawn a new process?
-- Jaap
> -----Original Message-----
> From: Jaap Gordijn via PacketFence-users <packetfence-
> us...@lists.sourceforge.net>
> Sent: dinsdag 28 maart 2023 11:43
> To: 'Francis via PacketFence-users' <packetfence-
> us...@lists.sourceforge.net>
> Cc: Jaap Gordijn <f...@gordijn.org>
> Subject: [PacketFence-users] Packetfence mschap radius module
> segmentation fault
>
> Hi,
>
> I use packetfence 12.2 on debian 11 (inux pf2 5.10.0-21-amd64 #1 SMP
> Debian
> 5.10.162-1 (2023-01-21) x86_64 GNU/Linux).
>
> The mschap results in a segmentation fault at:
>
> mschap chrooted_mschap {
> ...
> ntlm_auth = "/usr/bin/sudo /usr/sbin/chroot
> /chroots/%{PacketFence-Domain} /usr/local/pf/bin/ntlm_auth_wrapper -p
> 8125
> -- \
> --request-nt-key
> --username=%{%{control:AD-Samaccountname}:-%{%{Stripped-User-
> Name}:-%{mschap
> :User-Name:-None}}} --challenge=%{mschap:Challenge:-00}
> --nt-response=%{mschap:NT-Response:-00} %{PacketFence-NTLMv2-Only}"
> ...
> }
>
>
> /usr/sbin/freeradius -d /usr/local/pf/raddb -n auth -fxx -l stdout ....
> (2) chrooted_mschap: Creating challenge hash with username: xxx
> (2) chrooted_mschap: Client is using MS-CHAPv2
> (2) chrooted_mschap: Executing: /usr/bin/sudo /usr/sbin/chroot
> /chroots/%{PacketFence-Domain} /usr/local/pf/bin/ntlm_auth_wrapper -p
> 8125
> -- --request-nt-key
> --username=%{%{control:AD-Samaccountname}:-%{%{Stripped-User-
> Name}:-%{mschap
> :User-Name:-None}}} --challenge=%{mschap:Challenge:-00}
> --nt-response=%{mschap:NT-Response:-00} %{PacketFence-NTLMv2-Only}:
> (2) chrooted_mschap: EXPAND /chroots/%{PacketFence-Domain}
> (2) chrooted_mschap: --> /chroots/yyy
> (2) chrooted_mschap: EXPAND
> --username=%{%{control:AD-Samaccountname}:-%{%{Stripped-User-
> Name}:-%{mschap
> :User-Name:-None}}}
> (2) chrooted_mschap: --> --username=xxx
> (2) chrooted_mschap: Creating challenge hash with username: xxx
> (2) chrooted_mschap: EXPAND --challenge=%{mschap:Challenge:-00}
> (2) chrooted_mschap: --> --challenge=437c750cabb201bb
> (2) chrooted_mschap: EXPAND --nt-response=%{mschap:NT-Response:-00}
> (2) chrooted_mschap: -->
> --nt-response=51d306663c6e2beb48aaf079bfbc0b371070750b6fa8bb85
> (2) chrooted_mschap: EXPAND %{PacketFence-NTLMv2-Only}
> (2) chrooted_mschap: -->
> Segmentation fault
>
> Calling a simple program e.g. /usr/bin/ls also results in a segmentation
> fault.
> Something seems to be wrong in how freeradius calls external programs
>
> Manually calling works:
> # /usr/bin/sudo /usr/sbin/chroot /chroots/gordijn
> /usr/local/pf/bin/ntlm_auth_wrapper -p 8125 -- --request-nt-key
> --username=xxx --challenge=2a9aad9a1367bb65
> --nt-response=642acf5713d9c0ead62de4e78133565ac240bcd6beef89a2
> NT_KEY: 4D109E5DB9758CAFDC7BE2690950018C
>
> Any ideas how to fix this?
>
> Best,
>
> -- Jaap
>
>
>
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
