Re: segmentation fault in rlm_attr_rewrite and eaptls module

permalink · #1 (**permalink**) 04-06-2007

--===============0169425272==
Content-Type: multipart/alternative;
boundary="----=_Part_4374_31280938.1175874401415"

------=_Part_4374_31280938.1175874401415
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi All,

Continued.. from my previous mail..
I am seeing some more issues when i restarted radiusd. Please see the debug
log below.

rad_recv: Access-Request packet from host 192.168.1.1:18007, id=13,
length=319

User-Name = "anonymous"
Called-Station-Id = "00-15-70-23-E5-60:wpa_psk"
Calling-Station-Id = "00-00-00-22-00-8B"
NAS-Port = 4
NAS-Port-Type = Wireless-802.11
Framed-MTU = 1400
Service-Type = Framed-User
NAS-IP-Address = 192.168.1.1
NAS-Identifier = "Wireless Services"
NAS-Port-Id = "wpa_psk"
Connect-Info = "CONNECT 54Mbps 802.11a"
State = 0x3d55ed1056c3716334e831a761baf07e
EAP-Message =
0x0202007019800000006616030100610100005d0301461654 c362b26af0ff6d48f398a5156d6566ebbced03258c34446168 1761d8ed00003600390038003500160013000a00330032002f 00070066000500040063006200610015001200090065006400 60001400110008000600030100
Message-Authenticator = 0x572da3efc1f70fab4cbd23469ec0722a
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1163
modcall[authorize]: module "preprocess" returns ok for request 1163
radius_xlat: 'anonymous'
rlm_attr_rewrite: Added attribute Stripped-User-Name with value 'anonymous'
modcall[authorize]: module "copy_user_name" returns ok for request 1163
radius_xlat: '^(.*[\/]+)'
rlm_attr_rewrite: No match found for attribute Stripped-User-Name with value
'anonymous'
modcall[authorize]: module "add_dollar_sign" returns ok for request 1163
modcall[authorize]: module "etc_passwd" returns notfound for request 1163
modcall[authorize]: module "etc_group" returns notfound for request 1163
modcall[authorize]: module "chap" returns noop for request 1163
modcall[authorize]: module "mschap" returns noop for request 1163
rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix_oblic" returns noop for request 1163
rlm_realm: No '\' in User-Name = "anonymous", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix_oblic_fs" returns noop for request 1163
rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "prefix_oblic" returns noop for request 1163
rlm_realm: No '\' in User-Name = "anonymous", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "prefix_oblic_fs" returns noop for request 1163
rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix_at" returns noop for request 1163
rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "prefix_at" returns noop for request 1163
rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix_percent" returns noop for request 1163
rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL
modcall[authorize]: module "prefix_percent" returns noop for request 1163
users: Matched entry anonymous at line 5
modcall[authorize]: module "files" returns ok for request 1163
rlm_eap: EAP packet type response id 2 length 112
rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
modcall[authorize]: module "eap" returns updated for request 1163
modcall: leaving group authorize (returns updated) for request 1163
rad_check_password: Found Auth-Type EAP
rad_check_password: Found Auth-Type EAP
Warning: Found 2 auth-types on request for user 'anonymous'
auth: type "EAP"
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 1163
rlm_eap: Request found, released from the list
rlm_eap: EAP/peap
rlm_eap: processing type peap
rlm_eap_peap: Authenticate
rlm_eap_tls: processing TLS
rlm_eap_tls: Length Included
eaptls_verify returned 11
(other): before/accept initialization
TLS_accept: before/accept initialization
rlm_eap_tls: <<< TLS 1.0 Handshake [length 0061], ClientHello

Program received signal SIGSEGV, Segmentation fault.
0xb7e71b10 in mallopt () from /lib/libc.so.6
(gdb) where
#0 0xb7e71b10 in mallopt () from /lib/libc.so.6
#1 0xb7e721b0 in mallopt () from /lib/libc.so.6
#2 0xb7e70b38 in realloc () from /lib/libc.so.6
#3 0xb7c0c794 in default_realloc_ex () from /usr/lib/libcrypto.so.0.9.8
#4 0x00000040 in ?? ()
#5 0xb7cf36c0 in ?? () from /usr/lib/libcrypto.so.0.9.8
#6 0xb7c0cfeb in CRYPTO_realloc () from /usr/lib/libcrypto.so.0.9.8
#7 0x08158db8 in ?? ()
#8 0x00000040 in ?? ()
#9 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8
#10 0x00000096 in ?? ()
#11 0xb7d27e50 in SSL_CTX_callback_ctrl () from /usr/lib/libssl.so.0.9.8
#12 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8
#13 0xb7cf36c0 in ?? () from /usr/lib/libcrypto.so.0.9.8
#14 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8
#15 0x00000096 in ?? ()
#16 0x08140ab0 in ?? ()
#17 0xb7c73439 in sk_insert () from /usr/lib/libcrypto.so.0.9.8
#18 0x08158db8 in ?? ()
#19 0x00000040 in ?? ()
#20 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8
#21 0x00000096 in ?? ()
#22 0x08140ab0 in ?? ()
---Type <return> to continue, or q <return> to quit---
#23 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8
#24 0x03000032 in ?? ()
#25 0xb7cf36c0 in ?? () from /usr/lib/libcrypto.so.0.9.8
#26 0x0000000e in ?? ()
#27 0x00000002 in ?? ()
#28 0x081684d9 in ?? ()
#29 0xb7c73579 in sk_push () from /usr/lib/libcrypto.so.0.9.8
#30 0xb7d38760 in ssl3_ciphers () from /usr/lib/libssl.so.0.9.8
#31 0x00000007 in ?? ()
#32 0xb7c7328b in sk_new_null () from /usr/lib/libcrypto.so.0.9.8
#33 0xb7d2c090 in SSL_SESSION_get_id () from /usr/lib/libssl.so.0.9.8
#34 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8
#35 0xb7d282a3 in ssl_bytes_to_cipher_list () from /usr/lib/libssl.so.0.9.8
#36 0xb7d38760 in ssl3_ciphers () from /usr/lib/libssl.so.0.9.8
#37 0x00000020 in ?? ()
#38 0x000000e1 in ?? ()
#39 0x00000064 in ?? ()
#40 0x08158f0c in ?? ()
#41 0x08140ab0 in ?? ()
#42 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8
#43 0x00000036 in ?? ()
#44 0x081684ff in ?? ()
#45 0x0815b220 in ?? ()
---Type <return> to continue, or q <return> to quit---
#46 0xb7d106a9 in ssl3_get_client_hello () from /usr/lib/libssl.so.0.9.8
#47 0x081684c9 in ?? ()
#48 0x00000036 in ?? ()
#49 0xbffce244 in ?? ()
#50 0x00004000 in ?? ()
#51 0xbffce248 in ?? ()
#52 0xbffce224 in ?? ()
#53 0xb7c79007 in EVP_DigestInit_ex () from /usr/lib/libcrypto.so.0.9.8
#54 0x00000000 in ?? ()
Please let me know what could be the reason for this issue, and if there
are any fixes arround please let me know. Its very urgent.

Hope to get a reply soon.

Thanks in advance.
-- Nikitha

On 4/6/07, nikitha <sumi.techno@gmail.com> wrote:
>
> Hi All,
>
> I am running freeradius-1.1.1 for quite a long time. Never seen this kind
> of issue when few requests are sent to the radiusd.
> The issue is when many requests are coming, then radiusd is crashing or
> going in an infinite loop and hogging for 99.9% of CPU.
>
> Please find the debug logs below.
>
> modcall[authorize]: module "preprocess" returns ok for request 1522
> radius_xlat: 'anonymous'
> rlm_attr_rewrite: Added attribute Stripped-User-Name with value
> 'anonymous'
> modcall[authorize]: module "copy_user_name" returns ok for request 1522
> radius_xlat: '^(.*[\/]+)'
>
> Program received signal SIGSEGV, Segmentation fault.
> 0xb7df9693 in mallopt () from /lib/libc.so.6
> (gdb) where
> #0 0xb7df9693 in mallopt () from /lib/libc.so.6
> #1 0xb7df877c in malloc () from /lib/libc.so.6
> #2 0xb7e2a329 in re_comp () from /lib/libc.so.6
> #3 0xb7e2a176 in re_comp () from /lib/libc.so.6
> #4 0xb7e29c4f in regcomp () from /lib/libc.so.6
> #5 0xb7b2e4d6 in do_attr_rewrite () from /usr/lib/rlm_attr_rewrite-
> 1.1.1.so
> #6 0xb7b2eb44 in attr_rewrite_authorize ()
> from /usr/lib/rlm_attr_rewrite-1.1.1.so
> #7 0x08055f26 in module_post_auth ()
> #8 0x0805660d in modcall ()
> #9 0x08055f9a in module_post_auth ()
> #10 0x0805609c in module_post_auth ()
> #11 0x08056565 in modcall ()
> #12 0x08055269 in find_module_instance ()
> #13 0x08055b8a in module_authorize ()
> #14 0x0804d7a1 in rad_authenticate ()
> #15 0x08059d52 in rad_respond ()
> #16 0x08059a22 in main ()
>
> and when i restarted the server the crash happened in eaptls module.
>
> rad_recv: Access-Request packet from host 192.168.1.1:7988, id=114,
> length=319
> User-Name = "anonymous"
> Called-Station-Id = "00-15-70-23-03-00:wpa_psk"
> Calling-Station-Id = "00-00-00-22-00-07"
> NAS-Port = 8
> NAS-Port-Type = Wireless-802.11
> Framed-MTU = 1400
> Service-Type = Framed-User
> NAS-IP-Address = 192.168.1.1
> NAS-Identifier = "Wireless Services"
> NAS-Port-Id = "wpa_psk"
> Connect-Info = "CONNECT 54Mbps 802.11g"
> State = 0x72fe4ac90661f9590e32dcb0c7059d75
> EAP-Message =
> 0x0202007019800000006616030100610100005d030146161a b12118da21a43b116bb44c8bed120272f7b2796c3976e35bd1 14643a5c00003600390038003500160013000a00330032002f 00070066000500040063006200610015001200090065006400 60001400110008000600030100
>
> Message-Authenticator = 0x9521947e080287f8034d050f25bc08ea
> Processing the authorize section of radiusd.conf
> modcall: entering group authorize for request 2652
> modcall[authorize]: module "preprocess" returns ok for request 2652
> radius_xlat: 'anonymous'
> rlm_attr_rewrite: Added attribute Stripped-User-Name with value
> 'anonymous'
> modcall[authorize]: module "copy_user_name" returns ok for request 2652
> radius_xlat: '^(.*[\/]+)'
> rlm_attr_rewrite: No match found for attribute Stripped-User-Name with
> value 'anonymous'
> modcall[authorize]: module "add_dollar_sign" returns ok for request 2652
> modcall[authorize]: module "etc_passwd" returns notfound for request
> 2652
> modcall[authorize]: module "etc_group" returns notfound for request 2652
> modcall[authorize]: module "chap" returns noop for request 2652
> modcall[authorize]: module "mschap" returns noop for request 2652
> rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL
> rlm_realm: No such realm "NULL"
> modcall[authorize]: module "suffix_oblic" returns noop for request 2652
> rlm_realm: No '\' in User-Name = "anonymous", looking up realm NULL
> rlm_realm: No such realm "NULL"
> modcall[authorize]: module "suffix_oblic_fs" returns noop for request
> 2652
> rlm_realm: No '/' in User-Name = "anonymous", looking up realm NULL
> rlm_realm: No such realm "NULL"
> modcall[authorize]: module "prefix_oblic" returns noop for request 2652
> rlm_realm: No '\' in User-Name = "anonymous", looking up realm NULL
> rlm_realm: No such realm "NULL"
> modcall[authorize]: module "prefix_oblic_fs" returns noop for request
> 2652
> rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL
> rlm_realm: No such realm "NULL"
> modcall[authorize]: module "suffix_at" returns noop for request 2652
> rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL
> rlm_realm: No such realm "NULL"
> modcall[authorize]: module "prefix_at" returns noop for request 2652
> rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL
> rlm_realm: No such realm "NULL"
> modcall[authorize]: module "suffix_percent" returns noop for request
> 2652
> rlm_realm: No '%' in User-Name = "anonymous", looking up realm NULL
> rlm_realm: No such realm "NULL"
> modcall[authorize]: module "prefix_percent" returns noop for request
> 2652
> users: Matched entry anonymous at line 5
> modcall[authorize]: module "files" returns ok for request 2652
> rlm_eap: EAP packet type response id 2 length 112
> rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
> modcall[authorize]: module "eap" returns updated for request 2652
> modcall: leaving group authorize (returns updated) for request 2652
> rad_check_password: Found Auth-Type EAP
> rad_check_password: Found Auth-Type EAP
> Warning: Found 2 auth-types on request for user 'anonymous'
> auth: type "EAP"
> Processing the authenticate section of radiusd.conf
> modcall: entering group authenticate for request 2652
> rlm_eap: Request found, released from the list
> rlm_eap: EAP/peap
> rlm_eap: processing type peap
> rlm_eap_peap: Authenticate
> rlm_eap_tls: processing TLS
> rlm_eap_tls: Length Included
> eaptls_verify returned 11
>
> Program received signal SIGSEGV, Segmentation fault.
> 0xb7e86693 in mallopt () from /lib/libc.so.6
> (gdb) where
> #0 0xb7e86693 in mallopt () from /lib/libc.so.6
> #1 0xb7e8577c in malloc () from /lib/libc.so.6
> #2 0xb7bd8023 in eaptls_extract () from /usr/lib/libeap-1.1.1.so
> #3 0xb7bd81fc in eaptls_process () from /usr/lib/libeap-1.1.1.so
> #4 0xb7bc510f in eappeap_authenticate () from /usr/lib/rlm_eap_peap-
> 1.1.1.so
> #5 0xb7bde4fe in eaptype_call () from /usr/lib/rlm_eap-1.1.1.so
> #6 0xb7bde9bb in eaptype_select () from /usr/lib/rlm_eap-1.1.1.so
> #7 0xb7bdda81 in eap_authenticate () from /usr/lib/rlm_eap-1.1.1.so
> #8 0x08055f26 in module_post_auth ()
> #9 0x0805660d in modcall ()
> #10 0x08055f9a in module_post_auth ()
> #11 0x0805609c in module_post_auth ()
> #12 0x08056565 in modcall ()
> #13 0x08055269 in find_module_instance ()
> #14 0x08055bb2 in module_authenticate ()
> #15 0x0804d43b in rad_check_password ()
> #16 0x0804d9ac in rad_authenticate ()
> #17 0x08059d52 in rad_respond ()
> #18 0x08059a22 in main ()
>
> Please let me know the details about this issue.
> Awaiting for your reply..
>
> Thanks,
> Nikitha
>
>
>

------=_Part_4374_31280938.1175874401415
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi All, Continued.. from my previous mail.. I am seeing some more issues when i restarted radiusd. Please see the debug log below. rad_recv: Access-Request packet from host
<a href="http://192.168.1.1:18007">192.168.1.1:18007</a>, id=13, length=319 
      &nbsp ; User-Name =
"anonymous" 
      &nbsp ; Called-Station-Id =
"00-15-70-23-E5-60:wpa_psk" 
      &nbsp ; Calling-Station-Id =
"00-00-00-22-00-8B" 
      &nbsp ; NAS-Port = 4 
      &nbsp ; NAS-Port-Type = Wireless-802.11 
      &nbsp ; Framed-MTU = 1400 
      &nbsp ; Service-Type = Framed-User 
      &nbsp ; NAS-IP-Address =
<a href="http://192.168.1.1">192.168.1.1</a> 
      &nbsp ; NAS-Identifier = "Wireless
Services" 
      &nbsp ; NAS-Port-Id = "wpa_psk" 
      &nbsp ; Connect-Info =
"CONNECT 54Mbps 802.11a" 
       
State = 0x3d55ed1056c3716334e831a761baf07e 
      &nbsp ; EAP-Message =
0x0202007019800000006616030100610100005d0301461654 c362b26af0ff6d48f398a5156d6566ebbced03258c34446168 1761d8ed00003600390038003500160013000a00330032002f 00070066000500040063006200610015001200090065006400 60001400110008000600030100
 
      &nbsp ; Message-Authenticator =
0x572da3efc1f70fab4cbd23469ec0722a 
  Processing the authorize section of
radiusd.conf 
modcall: entering group authorize for request 1163 
  modcall[authorize]: module
"preprocess" returns ok for request 1163 
radius_xlat:  'anonymous' 
rlm_attr_rewrite: Added attribute Stripped-User-Name with value 'anonymous' 
  modcall[authorize]: module
"copy_user_name" returns ok for request 1163 
radius_xlat:  '^(.*[\/]+)' 
rlm_attr_rewrite: No match found for attribute Stripped-User-Name with value
'anonymous' 
  modcall[authorize]: module
"add_dollar_sign" returns ok for request 1163 
  modcall[authorize]: module
"etc_passwd" returns notfound for request 1163 
  modcall[authorize]: module
"etc_group" returns notfound for request 1163 
  modcall[authorize]: module
"chap" returns noop for request 1163 
  modcall[authorize]: module
"mschap" returns noop for request 1163 
    rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"suffix_oblic" returns noop for request 1163 
    rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"suffix_oblic_fs" returns noop for request 1163 
    rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"prefix_oblic" returns noop for request 1163 
    rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"prefix_oblic_fs" returns noop for request 1163 
    rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"suffix_at" returns noop for request 1163 
    rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"prefix_at" returns noop for request 1163 
    rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"suffix_percent" returns noop for request 1163 
    rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL 
  modcall[authorize]: module
"prefix_percent" returns noop for request 1163 
    users: Matched entry anonymous at
line 5 
  modcall[authorize]: module
"files" returns ok for request 1163 
  rlm_eap: EAP packet type response id 2
length 112 
  rlm_eap: No EAP Start, assuming it's an
on-going EAP conversation 
  modcall[authorize]: module
"eap" returns updated for request 1163 
modcall: leaving group authorize (returns updated) for request 1163 
  rad_check_password:  Found Auth-Type EAP 
  rad_check_password:  Found Auth-Type EAP 
Warning:  Found 2 auth-types on request
for user 'anonymous' 
auth: type "EAP" 
  Processing the authenticate section of
radiusd.conf 
modcall: entering group authenticate for request 1163 
  rlm_eap: Request found, released from
the list 
  rlm_eap: EAP/peap 
  rlm_eap: processing type peap 
  rlm_eap_peap: Authenticate 
  rlm_eap_tls: processing TLS 
rlm_eap_tls:  Length Included 
  eaptls_verify returned 11 
    (other): before/accept initialization
 
    TLS_accept: before/accept
initialization 
  rlm_eap_tls: <<< TLS 1.0
Handshake [length 0061], ClientHello 
 
 
Program received signal SIGSEGV, Segmentation fault. 
0xb7e71b10 in mallopt () from /lib/libc.so.6 
(gdb) where 
#0  0xb7e71b10 in mallopt () from
/lib/libc.so.6 
#1  0xb7e721b0 in mallopt () from
/lib/libc.so.6 
#2  0xb7e70b38 in realloc () from
/lib/libc.so.6 
#3  0xb7c0c794 in default_realloc_ex ()
from /usr/lib/libcrypto.so.0.9.8 
#4  0x00000040 in ?? () 
#5  0xb7cf36c0 in ?? () from
/usr/lib/libcrypto.so.0.9.8 
#6  0xb7c0cfeb in CRYPTO_realloc () from
/usr/lib/libcrypto.so.0.9.8 
#7  0x08158db8 in ?? () 
#8  0x00000040 in ?? () 
#9  0xb7ce8c45 in dummy_nid () from
/usr/lib/libcrypto.so.0.9.8 
#10 0x00000096 in ?? () 
#11 0xb7d27e50 in SSL_CTX_callback_ctrl () from /usr/lib/libssl.so.0.9.8 
#12 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8 
#13 0xb7cf36c0 in ?? () from /usr/lib/libcrypto.so.0.9.8 
#14 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8 
#15 0x00000096 in ?? () 
#16 0x08140ab0 in ?? () 
#17 0xb7c73439 in sk_insert () from /usr/lib/libcrypto.so.0.9.8 
#18 0x08158db8 in ?? () 
#19 0x00000040 in ?? () 
#20 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8 
#21 0x00000096 in ?? () 
#22 0x08140ab0 in ?? () 
---Type <return> to continue, or q <return> to quit--- 
#23 0xb7ce8c45 in dummy_nid () from /usr/lib/libcrypto.so.0.9.8 
#24 0x03000032 in ?? () 
#25 0xb7cf36c0 in ?? () from /usr/lib/libcrypto.so.0.9.8 
#26 0x0000000e in ?? () 
#27 0x00000002 in ?? () 
#28 0x081684d9 in ?? () 
#29 0xb7c73579 in sk_push () from /usr/lib/libcrypto.so.0.9.8 
#30 0xb7d38760 in ssl3_ciphers () from /usr/lib/libssl.so.0.9.8 
#31 0x00000007 in ?? () 
#32 0xb7c7328b in sk_new_null () from /usr/lib/libcrypto.so.0.9.8 
#33 0xb7d2c090 in SSL_SESSION_get_id () from /usr/lib/libssl.so.0.9.8 
#34 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8 
#35 0xb7d282a3 in ssl_bytes_to_cipher_list () from
/usr/lib/libssl.so.0.9.8 
#36 0xb7d38760 in ssl3_ciphers () from /usr/lib/libssl.so.0.9.8 
#37 0x00000020 in ?? () 
#38 0x000000e1 in ?? () 
#39 0x00000064 in ?? () 
#40 0x08158f0c in ?? () 
#41 0x08140ab0 in ?? () 
#42 0xb7d37880 in ?? () from /usr/lib/libssl.so.0.9.8 
#43 0x00000036 in ?? () 
#44 0x081684ff in ?? () 
#45 0x0815b220 in ?? () 
---Type <return> to continue, or q <return> to quit--- 
#46 0xb7d106a9 in ssl3_get_client_hello () from /usr/lib/libssl.so.0.9.8 
#47 0x081684c9 in ?? () 
#48 0x00000036 in ?? () 
#49 0xbffce244 in ?? () 
#50 0x00004000 in ?? () 
#51 0xbffce248 in ?? () 
#52 0xbffce224 in ?? () 
#53 0xb7c79007 in EVP_DigestInit_ex () from /usr/lib/libcrypto.so.0.9.8 
#54 0x00000000 in ?? () 


Please let me know what could be the reason for this issue, and if there are any fixes arround please let me know. Its very urgent. Hope to get a reply soon. Thanks in advance. -- Nikitha <div>
On 4/6/07, nikitha <<a href="mailto:sumi.techno@gmail.com">sumi.techno@gm ail.com</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi All, I am running freeradius-1.1.1 for quite a long time. Never seen this kind of issue when few requests are sent to the radiusd. The issue is when many requests are coming, then radiusd is crashing or going in an infinite loop and hogging for
99.9% of CPU. Please find the debug logs below. 



 
modcall[authorize]: module "preprocess" returns ok for request
1522 
radius_xlat:  'anonymous' 
rlm_attr_rewrite: Added attribute Stripped-User-Name with value
'anonymous' 
  modcall[authorize]: module
"copy_user_name" returns ok for request 1522 
radius_xlat:  '^(.*[\/]+)' 
 
Program received signal SIGSEGV, Segmentation fault. 
0xb7df9693 in mallopt () from /lib/libc.so.6 
(gdb) where 
#0  0xb7df9693 in mallopt () from
/lib/libc.so.6 
#1  0xb7df877c in malloc () from
/lib/libc.so.6 
#2  0xb7e2a329 in re_comp () from
/lib/libc.so.6 
#3  0xb7e2a176 in re_comp () from
/lib/libc.so.6 
#4  0xb7e29c4f in regcomp () from
/lib/libc.so.6 
#5  0xb7b2e4d6 in do_attr_rewrite () from
/usr/lib/rlm_attr_rewrite-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a> 
#6  0xb7b2eb44 in attr_rewrite_authorize
() 
   from /usr/lib/rlm_attr_rewrite-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a> 
#7  0x08055f26 in module_post_auth () 
#8  0x0805660d in modcall () 
#9  0x08055f9a in module_post_auth () 
#10 0x0805609c in module_post_auth () 
#11 0x08056565 in modcall () 
#12 0x08055269 in find_module_instance () 
#13 0x08055b8a in module_authorize () 
#14 0x0804d7a1 in rad_authenticate () 
#15 0x08059d52 in rad_respond () 
#16 0x08059a22 in main () 





and when i restarted the server the crash happened in eaptls module. 

rad_recv: Access-Request packet from host
<a href="http://192.168.1.1:7988" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.1.1 :7988</a>, id=114, length=319 
        User-Name =
"anonymous" 
        Called-Station-Id =
"00-15-70-23-03-00:wpa_psk" 
        Calling-Station-Id =
"00-00-00-22-00-07" 
        NAS-Port = 8 
        NAS-Port-Type =
Wireless-802.11 
        Framed-MTU = 1400 
        Service-Type = Framed-User 
        NAS-IP-Address = <a href="http://192.168.1.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.1.1 </a> 
        NAS-Identifier = "Wireless
Services" 
        NAS-Port-Id =
"wpa_psk" 
        Connect-Info = "CONNECT
54Mbps 802.11g" 
        State =
0x72fe4ac90661f9590e32dcb0c7059d75 
        EAP-Message =
0x0202007019800000006616030100610100005d030146161a b12118da21a43b116bb44c8bed120272f7b2796c3976e35bd1 14643a5c00003600390038003500160013000a00330032002f 00070066000500040063006200610015001200090065006400 60001400110008000600030100
 
        Message-Authenticator =
0x9521947e080287f8034d050f25bc08ea 
  Processing the authorize section of
radiusd.conf 
modcall: entering group authorize for request 2652 
  modcall[authorize]: module
"preprocess" returns ok for request 2652 
radius_xlat:  'anonymous' 
rlm_attr_rewrite: Added attribute Stripped-User-Name with value
'anonymous' 
  modcall[authorize]: module
"copy_user_name" returns ok for request 2652 
radius_xlat:  '^(.*[\/]+)' 
rlm_attr_rewrite: No match found for attribute Stripped-User-Name with value
'anonymous' 
  modcall[authorize]: module "add_dollar_sign"
returns ok for request 2652 
  modcall[authorize]: module
"etc_passwd" returns notfound for request 2652 
  modcall[authorize]: module
"etc_group" returns notfound for request 2652 
  modcall[authorize]: module
"chap" returns noop for request 2652 
  modcall[authorize]: module
"mschap" returns noop for request 2652 
    rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"suffix_oblic" returns noop for request 2652 
    rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"suffix_oblic_fs" returns noop for request 2652 
    rlm_realm: No '/' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"prefix_oblic" returns noop for request 2652 
    rlm_realm: No '\' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"prefix_oblic_fs" returns noop for request 2652 
    rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"suffix_at" returns noop for request 2652 
    rlm_realm: No '@' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"prefix_at" returns noop for request 2652 
    rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"suffix_percent" returns noop for request 2652 
    rlm_realm: No '%' in User-Name =
"anonymous", looking up realm NULL 
    rlm_realm: No such realm
"NULL" 
  modcall[authorize]: module
"prefix_percent" returns noop for request 2652 
    users: Matched entry anonymous at
line 5 
  modcall[authorize]: module
"files" returns ok for request 2652 
  rlm_eap: EAP packet type response id 2
length 112 
  rlm_eap: No EAP Start, assuming it's an
on-going EAP conversation 
  modcall[authorize]: module "eap"
returns updated for request 2652 
modcall: leaving group authorize (returns updated) for request 2652 
  rad_check_password:  Found Auth-Type EAP 
  rad_check_password:  Found Auth-Type EAP 
Warning:  Found 2 auth-types on request
for user 'anonymous' 
auth: type "EAP" 
  Processing the authenticate section of
radiusd.conf 
modcall: entering group authenticate for request 2652 
  rlm_eap: Request found, released from
the list 
  rlm_eap: EAP/peap 
  rlm_eap: processing type peap 
  rlm_eap_peap: Authenticate 
  rlm_eap_tls: processing TLS 
rlm_eap_tls:  Length Included 
  eaptls_verify returned 11 
 
Program received signal SIGSEGV, Segmentation fault. 
0xb7e86693 in mallopt () from /lib/libc.so.6 
(gdb) where 
#0  0xb7e86693 in mallopt () from
/lib/libc.so.6 
#1  0xb7e8577c in malloc () from
/lib/libc.so.6 
#2  0xb7bd8023 in eaptls_extract () from
/usr/lib/libeap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a> 
#3  0xb7bd81fc in eaptls_process () from
/usr/lib/libeap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a> 
#4  0xb7bc510f in eappeap_authenticate ()
from /usr/lib/rlm_eap_peap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a> 
#5  0xb7bde4fe in eaptype_call () from
/usr/lib/rlm_eap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a> 
#6  0xb7bde9bb in eaptype_select () from
/usr/lib/rlm_eap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a> 
#7  0xb7bdda81 in eap_authenticate ()
from /usr/lib/rlm_eap-<a href="http://1.1.1.so" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.so</a> 
#8  0x08055f26 in module_post_auth
() 
#9  0x0805660d in modcall () 
#10 0x08055f9a in module_post_auth () 
#11 0x0805609c in module_post_auth () 
#12 0x08056565 in modcall () 
#13 0x08055269 in find_module_instance () 
#14 0x08055bb2 in module_authenticate () 
#15 0x0804d43b in rad_check_password () 
#16 0x0804d9ac in rad_authenticate () 
#17 0x08059d52 in rad_respond () 
#18 0x08059a22 in main () 
 Please let me know the details about this issue. Awaiting for your reply.. Thanks, Nikitha 
</blockquote></div> 

------=_Part_4374_31280938.1175874401415--

--===============0169425272==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--===============0169425272==--

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode