Re: [Radiusplugin-users] OpenVPN & Radius Plugin

[Ralf Lübben]

Hi,

the most strange message is

terminate called after throwing an instance of 'std::bad_alloc'
what(): St9bad_alloc

the other messages should not cause a crash.

Is it possible that no memory can be allocated (system memory, process memory 
limitation)? Memory is allocated for example when a user connects.
Can you check the memory for the system/process?

Also I could try to catch all exceptions if memory if allocated, that would 
identify where error occurs and it could be handled. 

Regards,
Ralf 

Am Dienstag, 2. November 2010, um 18:43:27 schrieb Farrukh Ahmed:
> Dear Ralf,
> 
> Today again this got crashed and found these lines in logs.
> 
> address@hidden ~]# pstack 6419
> #0 0x0000003f3f8c6240 in __read_nocancel () from /lib64/libc.so.6
> #1 0x00002b0a8360723f in IpcSocket::recvInt() () from
> /etc/openvpn/radiusplugin.so
> #2 0x00002b0a83610061 in
> AuthenticationProcess::Authentication(PluginContext*) () from
> /etc/openvpn/radiusplugin.so
> #3 0x00002b0a8360e5ec in openvpn_plugin_open_v2 () from
> /etc/openvpn/radiusplugin.so
> #4 0x0000000000441971 in ASN1_BIT_STRING_get_bit ()
> #5 0x0000000000415477 in ASN1_BIT_STRING_get_bit ()
> #6 0x000000000041834d in ASN1_BIT_STRING_get_bit ()
> #7 0x0000000000418b9d in ASN1_BIT_STRING_get_bit ()
> #8 0x0000000000426e07 in ASN1_BIT_STRING_get_bit ()
> #9 0x000000000042f203 in ASN1_BIT_STRING_get_bit ()
> #10 0x0000003f3f81d994 in __libc_start_main () from /lib64/libc.so.6
> #11 0x00000000004064d9 in ASN1_BIT_STRING_get_bit ()
> #12 0x00007fff59bc06e8 in ?? ()
> #13 0x0000000000000000 in ?? ()
> address@hidden ~]# pstack 861
> Thread 2 (Thread 0x429f5940 (LWP 867)):
> #0 0x0000003f4000aee9 in pthread_cond_wait@@GLIBC_2.3.2 () from
> /lib64/libpthread.so.0
> #1 0x00002b0445501fc5 in auth_user_pass_verify(void*) () from
> /etc/openvpn-ssl/radiusplugin.so
> #2 0x0000003f4000673d in start_thread () from /lib64/libpthread.so.0
> #3 0x0000003f3f8d3f6d in clone () from /lib64/libc.so.6
> Thread 1 (Thread 0x2b04454ce3c0 (LWP 861)):
> #0 0x0000003f3f8d4358 in epoll_wait () from /lib64/libc.so.6
> #1 0x000000000040e0b1 in ASN1_BIT_STRING_get_bit ()
> #2 0x0000000000425f8a in ASN1_BIT_STRING_get_bit ()
> #3 0x000000000042f203 in ASN1_BIT_STRING_get_bit ()
> #4 0x0000003f3f81d994 in __libc_start_main () from /lib64/libc.so.6
> #5 0x00000000004064d9 in ASN1_BIT_STRING_get_bit ()
> #6 0x00007fff93e01b08 in ?? ()
> #7 0x0000000000000000 in ?? ()
> address@hidden ~]# pstack 855
> #0 0x0000003f3f8c6240 in __read_nocancel () from /lib64/libc.so.6
> #1 0x00002b0445500e6b in IpcSocket::recvInt() () from
> /etc/openvpn-ssl/radiusplugin.so
> #2 0x00002b044550ac71 in
> AuthenticationProcess::Authentication(PluginContext*) () from
> /etc/openvpn-ssl/radiusplugin.so
> #3 0x00002b04455091fa in openvpn_plugin_open_v2 () from
> /etc/openvpn-ssl/radiusplugin.so
> #4 0x0000000000441971 in ASN1_BIT_STRING_get_bit ()
> #5 0x0000000000415477 in ASN1_BIT_STRING_get_bit ()
> #6 0x000000000041834d in ASN1_BIT_STRING_get_bit ()
> #7 0x0000000000418b9d in ASN1_BIT_STRING_get_bit ()
> #8 0x0000000000425d8c in ASN1_BIT_STRING_get_bit ()
> #9 0x000000000042f203 in ASN1_BIT_STRING_get_bit ()
> #10 0x0000003f3f81d994 in __libc_start_main () from /lib64/libc.so.6
> #11 0x00000000004064d9 in ASN1_BIT_STRING_get_bit ()
> #12 0x00007fff93e01b08 in ?? ()
> #13 0x0000000000000000 in ?? ()
> address@hidden ~]#
> 
> 
> Tue Nov 2 16:56:34 2010 RADIUS-PLUGIN: BACKGROUND ACCT: No accounting data
> was found for vpn.change-mon-ip.com,92.141.115.34:60981.
> terminate called after throwing an instance of 'std::bad_alloc'
> what(): St9bad_alloc
> Tue Nov 2 16:57:30 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 16:59:47 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 16:59:51 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 16:59:54 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:00:00 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:00:18 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:00:21 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:00:25 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:01:39 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:01:41 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:01:42 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:01:45 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:01:49 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:01:51 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> .Tue Nov 2 17:02:06 2010 RADIUS-PLUGIN: Client config file was not written,
> overwriteccfiles is false
> 
> Best Regards.
> 
> On Mon, Nov 1, 2010 at 1:57 AM, Ralf Lübben <address@hidden> wrote:
> > Hi,
> > 
> > it seems that the interprocess communication between the plugin processes
> > causes the crash. From the past messages it seems that the process
> > crashes after a read or write to internal sockets.
> > 
> > So far it's clear to me why.
> > 
> > If you increase the "verb" option to 7, the plugin will create some debug
> > output. I think it is also forwarded to syslog.  Can you try to send the
> > output to me? The plugin output has always a "RADIUS-PLUGIN" as prefix.
> > 
> > Regards
> > Ralf
> > 
> > Am Sonntag, 31. Oktober 2010, um 19:09:05 schrieben Sie:
> > > Dear Ralf,
> > > 
> > > Same thing happen with Radius Plugin Version 2.1
> > > 
> > > #0  0x0000003f3f8c6240 in __read_nocancel () from /lib64/libc.so.6
> > > #1  0x00002ae6c5cbee6b in IpcSocket::recvInt() () from
> > > /etc/openvpn-ssl/radiusplugin.so
> > > #2  0x00002ae6c5cc8c71 in
> > > AuthenticationProcess::Authentication(PluginContext*) () from
> > > /etc/openvpn-ssl/radiusplugin.so
> > > #3  0x00002ae6c5cc71fa in openvpn_plugin_open_v2 () from
> > > /etc/openvpn-ssl/radiusplugin.so
> > > #4  0x0000000000441971 in ASN1_BIT_STRING_get_bit ()
> > > #5  0x0000000000415477 in ASN1_BIT_STRING_get_bit ()
> > > #6  0x000000000041834d in ASN1_BIT_STRING_get_bit ()
> > > #7  0x0000000000418b9d in ASN1_BIT_STRING_get_bit ()
> > > #8  0x0000000000425d8c in ASN1_BIT_STRING_get_bit ()
> > > #9  0x000000000042f203 in ASN1_BIT_STRING_get_bit ()
> > > #10 0x0000003f3f81d994 in __libc_start_main () from /lib64/libc.so.6
> > > #11 0x00000000004064d9 in ASN1_BIT_STRING_get_bit ()
> > > #12 0x00007fff7207a588 in ?? ()
> > > #13 0x0000000000000000 in ?? ()
> > > 
> > > Best Regards.
> > > 
> > > On Sun, Oct 31, 2010 at 6:17 PM, Farrukh Ahmed <address@hidden>
> > 
> > wrote:
> > > > Dear Ralf,
> > > > 
> > > > I am using syslog logging for OpenVPN and which does not logged
> > > > Radius Plugin Logs. Today i found that we again got crashed.
> > > > 
> > > > FYI,
> > > > 
> > > > #0  0x0000003f3f8c6240 in __read_nocancel () from /lib64/libc.so.6
> > > > #1  0x00002b27a7ebce6b in std::_Rb_tree<std::basic_string<char,
> > > > std::char_traits<char>, std::allocator<char> >,
> > > > std::pair<std::basic_string<char, std::char_traits<char>,
> > > > std::allocator<char> > const, UserAcct>,
> > > > std::_Select1st<std::pair<std::basic_string<char,
> > 
> > std::char_traits<char>,
> > 
> > > > std::allocator<char> > const, UserAcct> >,
> > > > std::less<std::basic_string<char, std::char_traits<char>,
> > > > std::allocator<char> > >,
> > > > std::allocator<std::pair<std::basic_string<char,
> > 
> > std::char_traits<char>,
> > 
> > > > std::allocator<char> > const, UserAcct> >
> > > > 
> > > > >::_M_insert(std::_Rb_tree_node_base*, std::_Rb_tree_node_base*,
> > > > 
> > > > std::pair<std::basic_string<char, std::char_traits<char>,
> > > > std::allocator<char> > const, UserAcct> const&) () from
> > > > /etc/openvpn/radiusplugin.so
> > > > #2  0x00002b27a7ec6c71 in
> > > > AuthenticationProcess::Authentication(PluginContext*) () from
> > > > /etc/openvpn/radiusplugin.so
> > > > #3  0x00002b27a7ec51fa in User::User(User const&) () from
> > > > /etc/openvpn/radiusplugin.so
> > > > #4  0x0000000000441971 in ASN1_BIT_STRING_get_bit ()
> > > > #5  0x0000000000415477 in ASN1_BIT_STRING_get_bit ()
> > > > #6  0x000000000041834d in ASN1_BIT_STRING_get_bit ()
> > > > #7  0x0000000000418b9d in ASN1_BIT_STRING_get_bit ()
> > > > #8  0x0000000000426e07 in ASN1_BIT_STRING_get_bit ()
> > > > #9  0x000000000042f203 in ASN1_BIT_STRING_get_bit ()
> > > > #10 0x0000003f3f81d994 in __libc_start_main () from /lib64/libc.so.6
> > > > #11 0x00000000004064d9 in ASN1_BIT_STRING_get_bit ()
> > > > #12 0x00007fff46ebb6d8 in ?? ()
> > > > #13 0x0000000000000000 in ?? ()
> > > > 
> > > > I will try 2.1 and let you know if there will be no issue.
> > > > 
> > > > Best Regards.
> > > > 
> > > > On Sun, Oct 31, 2010 at 2:37 PM, Ralf Lübben <address@hidden>
> > 
> > wrote:
> > > >> Hello,
> > > >> 
> > > >> can you also try the version 2.1 from
> > > >> http://www.nongnu.org/radiusplugin/?
> > > >> 
> > > >> The new beta mainly includes a "accounting only feature" and "non
> > 
> > fatal
> > 
> > > >> accouting" and bugfixes related to BSD.
> > > >> 
> > > >> Some changes are in the function AccoutingProcess which seems to
> > 
> > crash,
> > 
> > > >> to find
> > > >> the code where the plugin crashes I would need the end (~100 lines)
> > > >> of the OpenVPN log file, maybe it gives a hint.
> > > >> 
> > > >> Can you identify the event when the plugin crashes, e.g. a user
> > > >> connects, disconnects, etc?
> > > >> 
> > > >> Regards,
> > > >> Ralf
> > > >> 
> > > >> Am Samstag, 30. Oktober 2010, um 14:03:49 schrieb Farrukh Ahmed:
> > > >> > Dear Ralf,
> > > >> > 
> > > >> > can you provide me some more information:
> > > >> > > - Which version of the plugin do you use?
> > > >> > 
> > > >> > I have used this v2.1a_beta1 and from CVS head.
> > > >> > 
> > > >> > > - Which operating system? Is it 64 bit os?
> > > >> > 
> > > >> > Yes, its CentOS 64 bit os.
> > > >> > 
> > > >> > > - The plugin configuration.
> > > >> > 
> > > >> > NAS-Identifier=OpenVPN-NL-01
> > > >> > Service-Type=5
> > > >> > Framed-Protocol=1
> > > >> > NAS-Port-Type=5
> > > >> > NAS-IP-Address=83.170.87.238
> > > >> > OpenVPNConfig=/etc/openvpn/server.conf
> > > >> > subnet=255.255.255.0
> > > >> > overwriteccfiles=false
> > > >> > 
> > > >> > server
> > > >> > {
> > > >> > 
> > > >> >         acctport=1813
> > > >> >         authport=1812
> > > >> >         name=83.170.87.238
> > > >> >         retry=1
> > > >> >         wait=1
> > > >> >         sharedsecret=testing123
> > > >> > 
> > > >> > }
> > > >> > 
> > > >> > > - And can you also increase the verbosity in OpenVPN to 7 and
> > > >> > > send me
> > > >> 
> > > >> the
> > > >> 
> > > >> > > OpenVPN log file? The plugin will write some debug information
> > > >> > > to it.
> > > >> > 
> > > >> > I have seen log file its very huge i can not send it to you right
> > 
> > now.
> > 
> > > >> > Best Regards.
> > > > 
> > > > --
> > > > Färrükh Ähmëd