RE: randomly crashing
Saw this happen again last night. Last log entries I have are: Thu Sep 20 19:06:24 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Thu Sep 20 19:06:24 2007 : Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) Thu Sep 20 19:06:25 2007 : Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) Thu Sep 20 19:06:25 2007 : Auth: Login OK: [n2i7w] (from client localhost port 16689 cli 00-16-6F-07- 3F-71) Thu Sep 20 19:06:37 2007 : Auth: Login OK: [nagios] (from client nagios port 0) Thu Sep 20 19:06:49 2007 : Error: Discarding duplicate request from client hh2380:20006 - ID: 133 due to unfinished request 922 After the error it crashed. Not sure why I'm seeing this. Any thoughts are welcome!? thanks Matt [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Ashfield Sent: Tuesday, September 18, 2007 9:49 AM To: [EMAIL PROTECTED]; freeradius-users@lists.freeradius.org Subject: RE: randomly crashing version of FR? modules or backend auth system used? Using FR 1.1.5 and using mod_auth_ldap for auth - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: randomly crashing
Matt Ashfield wrote: Saw this happen again last night. Last log entries I have are: Thu Sep 20 19:06:24 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Thu Sep 20 19:06:24 2007 : Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) This message isn't in 1.1.7. Please take a serious look at upgrading. Thu Sep 20 19:06:49 2007 : Error: Discarding duplicate request from client hh2380:20006 - ID: 133 due to unfinished request 922 The DB you're using is slow. That's a problem. After the error it crashed. Not sure why I'm seeing this. Any thoughts are welcome!? doc/bugs. But first, upgrade. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: randomly crashing
version of FR? modules or backend auth system used? Using FR 1.1.5 and using mod_auth_ldap for auth - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: randomly crashing
Hi... Matt Ashfield wrote: We're running FR to authenticate users on our wireless network. It appears that radius is randomly stopping/crashing. I have checked logs, but have been unable to locate the problem and am wondering if someone could point me For what it's worth (probably not much!)... a month ago, I was having random segfaults with a new installation of 1.1.7 on Fedora 7 x86_64. In most cases, the crash seemed to correspond with this log entry you've mentioned: Mon Sep 17 00:31:30 2007 : Error: rlm_eap: Either EAP-request timed out OR EAP-response to an unknown EAP-request My segfault would typically occur right after the above log entry. Analyzing with gdb usually gave a serpentine backtrace into threading libraries and SSL-related functions -- well beyond my ability to debug. I was about to give up, when an openssl package update was issued by Fedora (0.9.8b-14.fc7, around August 14). The changelog wasn't very descriptive, but ever since updating the openssl RPMs, freeradius hasn't segfaulted at all. Was it an SSL bugfix that fixed it? Beats me. Maybe it was simply the running of ldconfig after the update. Maybe it was something else entirely. But the point is, it might pay to make sure your libraries are in order. :) (Previously I'd also had seeming 64-bit library issues with Kerberos which were causing Freeradius crashes.) -Matt PS: I do still see the Either EAP-request timed out OR EAP-response to an unknown EAP-request rlm_eap error maybe 5-10 times a day, but the Freeradius daemon no longer crashes from them. And the client auth succeeds on the retry ~30 seconds later. Never saw this behavior with Freeradius 1.1.2, but I wouldn't be surprised if it was happening back then, and that 1.1.7 simply has more verbose logging of such occurrences now. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: randomly crashing
Hi, We're running FR to authenticate users on our wireless network. It appears that radius is randomly stopping/crashing. I have checked logs, but have been unable to locate the problem and am wondering if someone could point me in a good location to look for reasons for the failure. version of FR? modules or backend auth system used? Mon Sep 17 12:40:25 2007 : Auth: Login incorrect (rlm_ldap: Bind as user failed): [s8r1z] (from client localhost port 30831 c hm, looks like the LDAP didnt like the attempt to talk to it alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: randomly crashing
Matt Garretson wrote: I was about to give up, when an openssl package update was issued by Fedora (0.9.8b-14.fc7, around August 14). The changelog wasn't very descriptive, but ever since updating the openssl RPMs, freeradius hasn't segfaulted at all. sigh Depending on other libraries is so helpful... PS: I do still see the Either EAP-request timed out OR EAP-response to an unknown EAP-request rlm_eap error maybe 5-10 times a day, but the Freeradius daemon no longer crashes from them. And the client auth succeeds on the retry ~30 seconds later. Never saw this behavior with Freeradius 1.1.2, but I wouldn't be surprised if it was happening back then, and that 1.1.7 simply has more verbose logging of such occurrences no\\w. Hmm... if you see that a lot, then something is going wrong. I'm not sure what, but it shouldn't be happening that often. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
