server with EAP enabled no longer starts

[alanbuxey]

hi,

thought to be a transient issue during all the code changes...but still not operating after this weekends big updates.

when server runs, barfs out at rlm_eap module loading time with message like:

Module: Linked to sub-module rlm_eap_tls
Module: Instantiating eap-tls
tls {
tls = "tls-common"
type 5900650 not supported yet
}
rlm_eap: Failed to initialize type tls
/etc/raddb/mods-enabled/eap[17]: Instantiation failed for module "eap"
/etc/raddb/sites-enabled/default[447]: Failed to find "eap" in the "modules" section.
/etc/raddb/sites-enabled/default[447]: Failed to parse "eap" entry.

where type XXXXXXX not support yet line has a different value of XXXXXX each time (so its pointing to wierd places in memory....has there been a cross-over of 2.x code into 3.x ??? anyway, this WAS a 3.x config before a GIT update - so its not a 2.x config in play...

alan

[alandekok]

Alan Buxey wrote:

when server runs, barfs out at rlm_eap module loading time with message
like:

Module: Linked to sub-module rlm_eap_tls
Module: Instantiating eap-tls
tls {
tls = "tls-common"
type 5900650 not supported yet
}
rlm_eap: Failed to initialize type tls
/etc/raddb/mods-enabled/eap[17]: Instantiation failed for module "eap"
/etc/raddb/sites-enabled/default[447]: Failed to find "eap" in the
"modules" section.
/etc/raddb/sites-enabled/default[447]: Failed to parse "eap" entry.

Use the "boilermake" build system. In fact, I'll go and delete the
old one. It's evil.

That message comes from conffile.c. It means that the config parser
thinks the "tls" entry is not ipaddr, string, integer, etc. The only
way that this can happen is a build error.

The old build system didn't do proper dependency checking. If
something changed in a header file, the modules might not be rebuilt.
The new build system works.

The canonical fix is to re-do "configure". I've made boilermake the
default. That will fix it.

[alanbuxey]

interesting..this was with --enable-boilermake

anyway...about to get the latest code...wanna see all the colours! :-)

alan

[alanbuxey]

fresh git clone, ./configure with the boilermake. same error. CentOS 5.9 on 32bit Linux.

full debug log doesnt show the tls-common stuff being loaded up

eap {
default_eap_type = "peap"
timer_expire = 60
ignore_unknown_eap_types = yes
cisco_accounting_username_bug = yes
max_sessions = 4096
}
Module: Linked to sub-module rlm_eap_gtc
Module: Instantiating eap-gtc
gtc {
challenge = "Password: "
auth_type = "kerberos"
}
Module: Linked to sub-module rlm_eap_tls
Module: Instantiating eap-tls
tls {
tls = "tls-common"
type 9271658 not supported yet
}
rlm_eap: Failed to initialize type tls
/etc/raddb/mods-enabled/eap[17]: Instantiation failed for module "eap"
/etc/raddb/sites-enabled/default[447]: Failed to find "eap" in the "modules" section.
/etc/raddb/sites-enabled/default[447]: Failed to parse "eap" entry.

(like the RED text BTW! ;-) )

alan

[alanbuxey]

looks like it works now.