Hello,
Until a couple of days ago, my FreeRadius setup was working perfectly
normally - running FreeRadius 2.0.1 on a Centos 5 server. FreeRadius
was compiled from source, not installed from a repository. Two days ago
I received some automatic updates from standard Centos repo, and since
then Radius has not worked.
Running eapol test gives some output, including this (more of the output
can be supplied on demand):
EAPOL: SUPP_BE entering state RECEIVE
Received 44 bytes from RADIUS server
Received RADIUS message
RADIUS message: code=3 (Access-Reject) identifier=9 length=44
Attribute 79 (EAP-Message) length=6
Value: 04 09 00 04
Attribute 80 (Message-Authenticator) length=18
Value: 43 9e 23 c8 74 b1 a0 9f 8c 3b 83 be e8 36 a8 30
STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending
request, round trip time 0.20 sec
RADIUS packet matching with station
decapsulated EAP packet (code=4 id=9 len=4) from RADIUS server: EAP Failure
EAPOL: Received EAP-Packet frame
EAPOL: SUPP_BE entering state REQUEST
EAPOL: getSuppRsp
EAP: EAP entering state RECEIVED
EAP: Received EAP-Failure
EAP: EAP entering state FAILURE
CTRL-EVENT-EAP-FAILURE EAP authentication failed
EAPOL: SUPP_PAE entering state HELD
EAPOL: SUPP_BE entering state RECEIVE
EAPOL: SUPP_BE entering state FAIL
EAPOL: SUPP_BE entering state IDLE
eapol_sm_cb: success=0
EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit
ENGINE: engine deinit
MPPE keys OK: 0 mismatch: 1
FAILURE
I checked and verified all the Freeradius configs. I recompiled 2.0.1 ,
and later compiled and installed 2.0.5 but this shows identical symptoms.
I have attached the relevant section of my yum.log to show which
packages were updated. The Radius server was tested once every minute by
authenticating with a test account. This was first reported to fail at 10:48
I do not know which package could have caused this behaviour - has
anyone else seen anything like this?
It is quite urgent that I get this fixed asap as it is a production box
at Bristol university. Currently we are running on the backup box, where
I was luckily able to disable automatic updates before they were applied.
Any advice will be gratefully received.
Cheers,
Jonathan
----------------------------
Jonathan Gazeley
Systems Support Specialist
ResNet | Wireless & VPN Team
Information Services
University of Bristol
----------------------------
Jun 24 13:45:09 Updated: libgcc.i386 4.1.2-42.el5
Jun 24 13:45:25 Updated: glibc-common.i386 2.5-24
Jun 24 13:45:32 Updated: glibc.i686 2.5-24
Jun 24 13:45:34 Updated: bash.i386 3.2-21.el5
Jun 24 13:45:35 Updated: libselinux.i386 1.33.4-5.el5
Jun 24 13:45:36 Updated: chkconfig.i386 1.3.30.1-2
Jun 24 13:45:37 Updated: audit-libs.i386 1.6.5-9.el5
Jun 24 13:45:37 Updated: popt.i386 1.10.2-48.el5
Jun 24 13:45:42 Updated: shadow-utils.i386 2:4.0.17-13.el5
Jun 24 13:45:43 Updated: device-mapper.i386 1.02.24-1.el5
Jun 24 13:45:44 Updated: e2fsprogs-libs.i386 1.39-15.el5
Jun 24 13:45:44 Updated: libstdc++.i386 4.1.2-42.el5
Jun 24 13:45:51 Updated: perl.i386 4:5.8.8-10.el5_2.3
Jun 24 13:45:52 Updated: dbus.i386 1.0.0-7.el5
Jun 24 13:45:53 Updated: libX11.i386 1.0.3-9.el5
Jun 24 13:45:54 Updated: nspr.i386 4.7.0.99.2-1.el5
Jun 24 13:46:14 Updated: nss.i386 3.11.99.5-2.el5.centos
Jun 24 13:46:15 Updated: freetype.i386 2.2.1-20.el5_2
Jun 24 13:46:16 Updated: cairo.i386 1.2.4-5.el5
Jun 24 13:46:16 Updated: libacl.i386 2.2.39-3.el5
Jun 24 13:46:20 Updated: coreutils.i386 5.97-14.el5
Jun 24 13:46:22 Updated: pam.i386 0.99.6.2-3.27.el5
Jun 24 13:46:23 Updated: krb5-libs.i386 1.6.1-25.el5
Jun 24 13:46:25 Updated: openssl.i686 0.9.8b-10.el5
Jun 24 13:46:30 Updated: python.i386 2.4.3-21.el5
Jun 24 13:46:31 Updated: module-init-tools.i386 3.3-0.pre3.1.37.el5
Jun 24 13:46:31 Updated: newt.i386 0.52.2-10.el5
Jun 24 13:46:32 Updated: cups-libs.i386 1:1.2.4-11.18.el5_2.1
Jun 24 13:46:36 Updated: gtk2.i386 2.10.4-20.el5
Jun 24 13:46:37 Updated: udev.i386 095-14.16.el5
Jun 24 13:46:39 Updated: util-linux.i386 2.13-0.47.el5
Jun 24 13:46:41 Updated: binutils.i386 2.17.50.0.6-6.el5
Jun 24 13:46:42 Updated: bind-libs.i386 30:9.3.4-6.P1.el5
Jun 24 13:46:43 Updated: mysql.i386 5.0.45-7.el5
Jun 24 13:46:44 Updated: kpartx.i386 0.4.7-17.el5
Jun 24 13:46:45 Updated: procps.i386 3.2.7-9.el5
Jun 24 13:46:45 Updated: hwdata.noarch 0.213.6-1.el5
Jun 24 13:46:46 Updated: pciutils.i386 2.2.3-5
Jun 24 13:46:47 Updated: e2fsprogs.i386 1.39-15.el5
Jun 24 13:46:48 Updated: iptables.i386 1.3.5-4.el5
Jun 24 13:46:49 Updated: psmisc.i386 22.2-6
Jun 24 13:46:49 Updated: make.i386 1:3.81-3.el5
Jun 24 13:46:50 Updated: diffutils.i386 2.8.1-15.2.3.el5
Jun 24 13:46:51 Updated: iproute.i386 2.6.18-7.el5
Jun 24 13:46:52 Updated: pcsc-lite-libs.i386 1.4.4-0.1.el5
Jun 24 13:46:53 Updated: dmraid.i386 1.0.0.rc13-9.el5
Jun 24 13:46:56 Updated: libgcj.i386 4.1.2-42.el5
Jun 24 13:46:57 Updated: libuser.i386 0.54.7-2.el5.5
Jun 24 13:46:58 Updated: usermode.i386 1.88-3.el5.1
Jun 24 13:46:59 Updated: libvolume_id.i386 095-14.16.el5
Jun 24 13:46:59 Updated: libgomp.i386 4.1.2-42.el5
Jun 24 13:47:00 Updated: libnl.i386 1.0-0.10.pre5.5
Jun 24 13:47:01 Updated: file.i386 4.17-13
Jun 24 13:47:02 Updated: libgfortran.i386 4.1.2-42.el5
Jun 24 13:47:03 Updated: iptables-ipv6.i386 1.3.5-4.el5
Jun 24 13:47:04 Updated: device-mapper-multipath.i386 0.4.7-17.el5
Jun 24 13:47:05 Updated: paps.i386 0.6.6-18.el5
Jun 24 13:47:05 Updated: yum-metadata-parser.i386 1.1.2-2.el5
Jun 24 13:47:06 Updated: libselinux-python.i386 1.33.4-5.el5
Jun 24 13:47:06 Updated: audit-libs-python.i386 1.6.5-9.el5
Jun 24 13:47:07 Updated: wpa_supplicant.i386 1:0.4.8-10.2.el5
Jun 24 13:47:09 Updated: samba-common.i386 3.0.28-0.el5.8
Jun 24 13:47:10 Updated: audit.i386 1.6.5-9.el5
Jun 24 13:47:11 Updated: nscd.i386 2.5-24
Jun 24 13:47:13 Updated: nss-tools.i386 3.11.99.5-2.el5.centos
Jun 24 13:47:14 Updated: e2fsprogs-devel.i386 1.39-15.el5
Jun 24 13:47:15 Updated: net-tools.i386 1.60-78.el5
Jun 24 13:47:16 Updated: libselinux-devel.i386 1.33.4-5.el5
Jun 24 13:47:17 Updated: krb5-devel.i386 1.6.1-25.el5
Jun 24 13:47:19 Updated: openssl-devel.i386 0.9.8b-10.el5
Jun 24 13:47:20 Updated: gzip.i386 1.3.5-10.el5.centos
Jun 24 13:47:20 Updated: pkgconfig.i386 1:0.21-2.el5
Jun 24 13:47:22 Updated: kernel-headers.i386 2.6.18-92.1.1.el5
Jun 24 13:47:23 Updated: glibc-headers.i386 2.5-24
Jun 24 13:47:25 Updated: glibc-devel.i386 2.5-24
Jun 24 13:47:25 Updated: centos-release-notes.i386 5.2-2
Jun 24 13:47:26 Updated: centos-release.i386 10:5-2.el5.centos
Jun 24 13:47:28 Updated: initscripts.i386 8.45.19.EL-1.el5.centos.1
Jun 24 13:47:30 Updated: pcsc-lite.i386 1.4.4-0.1.el5
Jun 24 13:47:32 Updated: kbd.i386 1.12-20.el5
Jun 24 13:47:32 Updated: openssh.i386 4.3p2-26.el5
Jun 24 13:47:33 Updated: dhclient.i386 12:3.0.5-13.el5
Jun 24 13:47:34 Updated: coolkey.i386 1.1.0-6.el5
Jun 24 13:47:35 Updated: nss_ldap.i386 253-12.el5
Jun 24 13:47:36 Updated: nss_db.i386 2.2-35.3
Jun 24 13:47:37 Updated: crash.i386 4.0-5.0.3.el5.centos
Jun 24 13:47:39 Updated: at-spi.i386 1.7.11-3.el5
Jun 24 13:47:39 Installed: python-iniparse.noarch 0.2.3-4.el5
Jun 24 13:47:40 Installed: gamin-python.i386 0.1.7-8.el5
Jun 24 13:47:40 Updated: libpcap.i386 14:0.9.4-12.el5
Jun 24 13:47:41 Updated: sudo.i386 1.6.8p12-12.el5
Jun 24 13:47:44 Updated: libstdc++-devel.i386 4.1.2-42.el5
Jun 24 13:47:45 Updated: parted.i386 1.8.1-17.el5
Jun 24 13:47:45 Updated: apr-util.i386 1.2.7-7.el5
Jun 24 13:47:46 Installed: device-mapper-event.i386 1.02.24-1.el5
Jun 24 13:47:48 Updated: lvm2.i386 2.02.32-4.el5
Jun 24 13:47:49 Updated: cpp.i386 4.1.2-42.el5
Jun 24 13:47:51 Updated: gcc.i386 4.1.2-42.el5
Jun 24 13:47:51 Updated: nash.i386 5.1.19.6-28
Jun 24 13:47:52 Updated: mkinitrd.i386 5.1.19.6-28
Jun 24 13:48:02 Installed: kernel.i686 2.6.18-92.1.1.el5
Jun 24 13:48:04 Updated: systemtap-runtime.i386 0.6.2-1.el5
Jun 24 13:48:06 Updated: systemtap.i386 0.6.2-1.el5
Jun 24 13:48:07 Updated: gcc-c++.i386 4.1.2-42.el5
Jun 24 13:48:08 Updated: gcc-gfortran.i386 4.1.2-42.el5
Jun 24 13:48:09 Updated: openssh-clients.i386 4.3p2-26.el5
Jun 24 13:48:10 Updated: openssh-server.i386 4.3p2-26.el5
Jun 24 13:48:11 Updated: irqbalance.i386 2:0.55-10.el5
Jun 24 13:48:13 Updated: sysklogd.i386 1.4.1-44.el5
Jun 24 13:48:14 Installed: dhcpv6-client.i386 1.0.10-4.el5_2.2
Jun 24 13:48:17 Updated: cups.i386 1:1.2.4-11.18.el5_2.1
Jun 24 13:48:21 Updated: samba.i386 3.0.28-0.el5.8
Jun 24 13:48:21 Updated: microcode_ctl.i386 1:1.17-1.47.el5
Jun 24 13:48:22 Updated: freetype-devel.i386 2.2.1-20.el5_2
Jun 24 13:48:23 Updated: mysql-devel.i386 5.0.45-7.el5
Jun 24 13:48:24 Updated: amtu.i386 1.0.6-1.el5
Jun 24 13:48:25 Updated: system-config-securitylevel-tui.i386 1.6.29.1-2.1.el5
Jun 24 13:48:26 Updated: authconfig.i386 5.3.21-3.el5
Jun 24 13:48:35 Updated: frysk.i686 0.0.1.2008.03.19.rh1-1.el5
Jun 24 13:48:36 Updated: grub.i386 0.97-13.2
Jun 24 13:48:37 Updated: autofs.i386 1:5.0.1-0.rc2.88
Jun 24 13:48:39 Updated: mysql-server.i386 5.0.45-7.el5
Jun 24 13:48:40 Updated: bind-utils.i386 30:9.3.4-6.P1.el5
Jun 24 13:48:42 Updated: oprofile.i386 0.9.3-16.el5
Jun 24 13:48:43 Updated: nfs-utils.i386 1:1.0.9-33.el5
Jun 24 13:48:44 Updated: krb5-workstation.i386 1.6.1-25.el5
Jun 24 13:48:46 Updated: pygtk2.i386 2.10.1-12.el5
Jun 24 13:48:48 Updated: notification-daemon.i386 0.3.5-9.el5
Jun 24 13:48:48 Updated: ntsysv.i386 1.3.30.1-2
Jun 24 13:48:50 Updated: m2crypto.i386 0.16-6.el5.2
Jun 24 13:48:52 Updated: ntp.i386 4.2.2p1-8.el5.centos.1
Jun 24 13:48:53 Updated: tcpdump.i386 14:3.9.4-12.el5
Jun 24 13:48:55 Updated: Deployment_Guide-en-US.noarch 5.2-9.el5.centos
Jun 24 13:48:56 Updated: logwatch.noarch 7.3-6.el5
Jun 24 13:48:57 Updated: ksh.i386 20060214-1.7
Jun 24 13:48:58 Updated: xorg-x11-xinit.i386 1.0.2-15.el5
Jun 24 13:48:59 Updated: acl.i386 2.2.39-3.el5
Jun 24 13:49:01 Updated: libX11-devel.i386 1.0.3-9.el5
Jun 24 13:49:01 Updated: redhat-rpm-config.noarch 8.0.45-24.el5
Jun 24 13:49:02 Updated: cpuspeed.i386 1:1.2.1-3.el5
Jun 24 13:49:04 Updated: xorg-x11-server-Xvfb.i386 1.1.1-48.41.el5_2.1
Jun 24 13:49:05 Updated: shared-mime-info.i386 0.19-5.el5
Jun 24 13:49:07 Updated: gdb.i386 6.5-37.el5_2.2
Jun 24 13:49:08 Updated: mdadm.i386 2.6.4-1.el5
Jun 24 13:49:08 Updated: htmlview.noarch 4.0.0-2.el5
Jun 24 13:49:09 Updated: traceroute.i386 3:2.0.1-3.el5
Jun 24 13:49:10 Updated: ltrace.i386 0.5-7.45svn.el5
Jun 24 13:49:10 Updated: diffstat.i386 1.41-1.2.3.el5
Jun 24 13:49:11 Updated: checkpolicy.i386 1.33.1-4.el5
Jun 24 13:49:12 Installed: libhugetlbfs.i386 1.2-5.el5
Jun 24 13:49:13 Updated: hal.i386 0.5.8.1-35.el5
Jun 24 13:49:16 Updated: rpm.i386 4.4.2-48.el5
Jun 24 13:49:17 Updated: rpm-libs.i386 4.4.2-48.el5
Jun 24 13:49:18 Updated: policycoreutils.i386 1.33.12-14.el5
Jun 24 13:49:19 Updated: rpm-python.i386 4.4.2-48.el5
Jun 24 13:49:20 Updated: oddjob-libs.i386 0.27-9.el5
Jun 24 13:49:21 Updated: kudzu.i386 1.2.57.1.17-1
Jun 24 13:49:22 Updated: pm-utils.i386 0.99.3-6.el5.centos.19
Jun 24 13:49:24 Updated: selinux-policy.noarch 2.4.6-137.el5
Jun 24 13:49:25 Updated: bind.i386 30:9.3.4-6.P1.el5
Jun 24 13:49:26 Updated: NetworkManager.i386 1:0.6.4-8.el5
Jun 24 13:49:27 Updated: oddjob.i386 0.27-9.el5
Jun 24 13:49:28 Updated: bind-chroot.i386 30:9.3.4-6.P1.el5
Jun 24 13:50:11 Updated: selinux-policy-targeted.noarch 2.4.6-137.el5
Jun 24 13:50:13 Updated: system-config-network-tui.noarch 1.3.99.10-2.el5
Jun 24 13:50:14 Updated: rpm-build.i386 4.4.2-48.el5
Jun 24 13:50:15 Updated: smartmontools.i386 1:5.36-4.el5
Jun 24 13:50:16 Updated: yum.noarch 3.2.8-9.el5.centos.2.1
Jun 24 13:50:17 Installed: yum-fastestmirror.noarch 1.1.10-9.el5.centos
Jun 24 13:50:17 Updated: yum-updatesd.noarch 1:0.9-2.el5
Jun 24 13:51:23 Erased: dhcpv6_client
Jun 24 13:52:04 Erased: libhugetlbfs-lib
Jun 24 13:52:30 Updated: Deployment_Guide-en-US.noarch 5.2-9.el5.centos
Jun 24 13:52:31 Updated: bind-chroot.i386 30:9.3.4-6.P1.el5
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
