(RADIATOR) Multiple kerberos realms - segmentation error

Hugh Irvine hugh at open.com.au
Mon Jan 16 16:37:39 CST 2006


Hello Carol -

We will need to see a trace 4 debug from Radiator showing what is  
happening.

It is simplest to run radiusd from the command line like this:

	cd /your/Radiator/distribution

	perl radiusd -foreground -log_stdout -trace 4 -config_file .....

where "....." is the name of your configuration file.

This way you will see all of the startup messages and any Perl errors  
that occur.

regards

Hugh


On 17 Jan 2006, at 05:59, Carol Ward wrote:

> Hi folks -
>
> We're running radiator 3.13.  When I define multiple realms using  
> kerberos
> authentication, we get a segmentation error.  Interestingly,  
> radiusd continues
> to run and authenticates correctly.  Anyone have any idea  what is  
> happening?
> The config below will cause the problem.  Admittedly,
> it's silly to have 2 realms with the same authentication, but we  
> we're adding
> various flags and admission restrictions via a file and a  
> continuewhileaccept
> clause and these admission restrictions vary by client.  I have  
> kerberos 5 1.3.5
> libraries and perl module installed.  This happens both under  
> redhat 9 with perl
> 5.8
> and  debian 3.1 (sarge) with perl v5.8.4.
>
> Thanks for any help/advice.
>
> Carol
>
> ===========================================================.
>
> # See radius.cfg for more complete examples of features and
> # syntax, and refer to the reference manual for a complete description
> # of all the features and syntax.
> #
> # You should consider this file to be a starting point only
> # $Id: simple.cfg,v 1.4 2001/04/25 23:47:13 mikem Exp $
>
> LogDir		.
> DbDir		.
> # User a lower trace level in production systems:
> Trace 		4
>
> # You will probably want to add other Clients to suit your site,
> # one for each NAS you want to work with
> <Client DEFAULT>
> 	Secret	mysecret
> 	DupInterval 0
> </Client>
>
> <Realm acn>
>         <AuthBy KRB5>
>                 KrbRealm        SAMPLE.EDU
>         </AuthBy>
> </Realm>
>
> <Realm acn2>
>         <AuthBy KRB5>
>                 KrbRealm        SAMPLE.EDU
>         </AuthBy>
> </Realm>
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.


NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list