FreeRADIUS/pam_radius

Currently not working on solaris 10

HolyRoses opened this issue · 3 comments

HolyRoses commented

The current master build does not work on Solaris 10.

Seems to have occurred with the add IPv6 support commit de3a47e However with that commit you dont get the extra failure messages.

When I compile with commit a581c21 all is fine.

Here is a log of failure messages from Solaris 10 sparc. Let me know what other tests I can run to help troubleshoot the issue.

Aug 9 13:48:34 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.debug] pam_radius_auth: Got user name rogerst
Aug 9 13:48:34 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.debug] pam_radius_auth: ignore last_pass, force_prompt set
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.debug] pam_radius_auth: Sending RADIUS request code 1
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.debug] pam_radius_auth: DEBUG: get_ipaddr(10.136.115.232) returned 0.
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.error] pam_radius_auth: Error sending RADIUS packet to server 10.136.115.232:1812: Invalid argument
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.debug] pam_radius_auth: DEBUG: get_ipaddr(10.136.115.233) returned 0.
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.error] pam_radius_auth: Error sending RADIUS packet to server 10.136.115.233:1812: Invalid argument
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.debug] pam_radius_auth: DEBUG: get_ipaddr(10.137.107.20) returned 0.
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.error] pam_radius_auth: Error sending RADIUS packet to server 10.137.107.20:1812: Invalid argument
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.error] pam_radius_auth: All RADIUS servers failed to respond.
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 801593 auth.debug] pam_radius_auth: authentication failed
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 800047 auth.info] Keyboard-interactive (PAM) userauth failed[12] while authenticating: Can not retrieve authentication info
Aug 9 13:48:47 unix-test-zone-8.vwoa.na.vwg sshd[10901]: [ID 800047 auth.notice] Failed keyboard-interactive for rogerst from 10.136.102.228 port 38327 ssh2

alandekok commented

That helps. I've pushed a fix. Please let me know if it works.

  • 👍1
HolyRoses commented

Awesome that seems to have worked.

I compiled on solaris 10 with gcc and now in the log I get this:

Aug 9 14:14:26 unix-test-zone-8.vwoa.na.vwg sshd[14786]: [ID 801593 auth.debug] pam_radius_auth: Got user name rogerst
Aug 9 14:14:26 unix-test-zone-8.vwoa.na.vwg sshd[14786]: [ID 801593 auth.debug] pam_radius_auth: ignore last_pass, force_prompt set
Aug 9 14:14:35 unix-test-zone-8.vwoa.na.vwg sshd[14786]: [ID 801593 auth.debug] pam_radius_auth: Sending RADIUS request code 1
Aug 9 14:14:35 unix-test-zone-8.vwoa.na.vwg sshd[14786]: [ID 801593 auth.debug] pam_radius_auth: DEBUG: get_ipaddr(10.136.115.232) returned 0.
Aug 9 14:14:37 unix-test-zone-8.vwoa.na.vwg sshd[14786]: [ID 801593 auth.debug] pam_radius_auth: Got RADIUS response code 2
Aug 9 14:14:37 unix-test-zone-8.vwoa.na.vwg sshd[14786]: [ID 801593 auth.debug] pam_radius_auth: authentication succeeded
Aug 9 14:14:37 unix-test-zone-8.vwoa.na.vwg sshd[14786]: [ID 800047 auth.info] Accepted keyboard-interactive for rogerst from 10.136.102.228 port 40118 ssh2

alandekok commented

Thanks.