Hide Forgot
Created attachment 1204992 [details] Patch allows check to continue if virtual host listed. Please see upstream thread here: http://lists.freeradius.org/pipermail/freeradius-users/2016-September/085048.html As well as resultant upstream commit here: https://github.com/FreeRADIUS/freeradius-server/commit/c1cef7878ed2d196be1e10c9e364d031b006f65a When configured with both virtual and real home servers, freeradius will segfault if an authentication request passes across the virtual server. This has been fixed upstream. I'm requesting the attached patch be reviewed and added. Thanks!
Created attachment 1204993 [details] Associated patch to .spec file
Thank you very much for the report, Mike. I'll see where and when we can integrate the fix.
We'll work on including the fix into the next Z-stream release of RHEL7.
Any chance of it going in as a regular 7.2 update?
Yes, we will work on getting it into a 7.2.z release too.
Created attachment 1206075 [details] Patch allows check to continue if virtual host listed. (updated) Developer added an "oh also" change that I missed in the previous patch: https://github.com/FreeRADIUS/freeradius-server/commit/70a76e9c1b69350cc0f8436f1dbec12a1c1ac9b0
Fixed the patch. Was actually asking if this change would make it into the regular (non-Z) stream.
Thanks a lot on the patch update and following the developers on this, Mike. I cannot promise an asynchronous update, unfortunately. You will have to reach support on this as a customer, explicitly.
Please hold work on this. The proposed fix does not work: #0 0x00007f48dfea1416 in check_for_realm (instance=<optimized out>, request=0x7f48e7870830, returnrealm=0x7f48dc18d580) at src/modules/rlm_realm/rlm_realm.c:276 276 if (realm->acct_pool->servers[i]->ipaddr.af == AF_UNSPEC) continue; (gdb) bt #0 0x00007f48dfea1416 in check_for_realm (instance=<optimized out>, request=0x7f48e7870830, returnrealm=0x7f48dc18d580) at src/modules/rlm_realm/rlm_realm.c:276
Hi Mike, do you have any update on this issue? Have you discovered the source, a fix?
None at this time. I'd love it if Alan DeKok or one of his leads would participate here as the issue is pretty deep within Freeradius and they'd be best positioned to help.
I see. Before we can fix this, we'll need a way to reproduce this, preferably automatic one, or at least exact instructions. Also, please reach support on this one, if you're a customer.
Mike, please note that if we don't get a way to reproduce this, we won't be able to investigate it, and thus get a fix for this into next RHEL release.
Closing as WORKSFORME as we have no reproducer. Please feel free to reopen, once you have one.