Problem reproduced with focal packages 3.0.20+dfsg-3build1
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: Python version: 3.8.10 (default, Mar 15 2022, 12:22:08) [GCC 9.4.0]
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: Libpython is not found among linked libraries
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: Failed loading libpython symbols into global symbol table
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: *** example.py instantiate ***
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: Ignoring "sql" (see raddb/mods-available/README.rst)
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: Ignoring "ldap" (see raddb/mods-available/README.rst)
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: radiusd: #### Skipping IP addresses and Ports ####
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: Configuration appears to be OK
May 12 19:05:28 focal-freeradius-1873923 freeradius[3976]: *** example.py detach ***
May 12 19:05:28 focal-freeradius-1873923 systemd[1]: freeradius.service: Control process exited, code=dumped, status=11/SEGV
This time, service restarts fine:
ubuntu@focal-freeradius-1873923:~$ sudo systemctl restart freeradius
ubuntu@focal-freeradius-1873923:~$
ubuntu user test passes:
ubuntu@focal-freeradius-1873923:~$ radtest ubuntu anypass 127.0.0.1 0 testing123
Sent Access-Request Id 220 from 0.0.0.0:54648 to 127.0.0.1:1812 length 76
User-Name = "ubuntu"
User-Password = "anypass"
NAS-IP-Address = 10.0.100.10
NAS-Port = 0
Message-Authenticator = 0x00
Cleartext-Password = "anypass"
Received Access-Accept Id 220 from 127.0.0.1:1812 to 127.0.0.1:54648 length 35
Reply-Message = "Hello ubuntu!"
A non-ubuntu user is rejected as expected:
ubuntu@focal-freeradius-1873923:~$ radtest anotheruser neverworks 127.0.0.1 0 testing123
Sent Access-Request Id 150 from 0.0.0.0:57202 to 127.0.0.1:1812 length 81
User-Name = "anotheruser"
User-Password = "neverworks"
NAS-IP-Address = 10.0.100.10
NAS-Port = 0
Message-Authenticator = 0x00
Cleartext-Password = "neverworks"
Received Access-Reject Id 150 from 127.0.0.1:1812 to 127.0.0.1:57202 length 41
Reply-Message = "You are not ubuntu!"
(0) -: Expected Access-Accept got Access-Reject
Focal verification
Problem reproduced with focal packages 3.0.20+dfsg-3build1
May 12 19:05:28 focal-freeradiu s-1873923 freeradius[3976]: Python version: 3.8.10 (default, Mar 15 2022, 12:22:08) [GCC 9.4.0] s-1873923 freeradius[3976]: Libpython is not found among linked libraries s-1873923 freeradius[3976]: Failed loading libpython symbols into global symbol table s-1873923 freeradius[3976]: *** example.py instantiate *** s-1873923 freeradius[3976]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked s-1873923 freeradius[3976]: Ignoring "sql" (see raddb/mods- available/ README. rst) s-1873923 freeradius[3976]: Ignoring "ldap" (see raddb/mods- available/ README. rst) s-1873923 freeradius[3976]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius /3.0/sites- enabled/ inner-tunnel: 336 s-1873923 freeradius[3976]: radiusd: #### Skipping IP addresses and Ports #### s-1873923 freeradius[3976]: Configuration appears to be OK s-1873923 freeradius[3976]: *** example.py detach *** s-1873923 systemd[1]: freeradius.service: Control process exited, code=dumped, status=11/SEGV
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
May 12 19:05:28 focal-freeradiu
Installing updated packages from proposed: focal-freeradiu s-1873923: ~$ apt-cache policy freeradius-python3 dfsg-3ubuntu0. 1 dfsg-3ubuntu0. 1 dfsg-3ubuntu0. 1 500 br.archive. ubuntu. com/ubuntu focal-proposed/ universe amd64 Packages dpkg/status 0.20+dfsg- 3build1 500 br.archive. ubuntu. com/ubuntu focal/universe amd64 Packages
ubuntu@
freeradius-python3:
Installed: 3.0.20+
Candidate: 3.0.20+
Version table:
*** 3.0.20+
500 http://
100 /var/lib/
3.
500 http://
This time, service restarts fine: focal-freeradiu s-1873923: ~$ sudo systemctl restart freeradius focal-freeradiu s-1873923: ~$
ubuntu@
ubuntu@
ubuntu user test passes: focal-freeradiu s-1873923: ~$ radtest ubuntu anypass 127.0.0.1 0 testing123 Authenticator = 0x00
ubuntu@
Sent Access-Request Id 220 from 0.0.0.0:54648 to 127.0.0.1:1812 length 76
User-Name = "ubuntu"
User-Password = "anypass"
NAS-IP-Address = 10.0.100.10
NAS-Port = 0
Message-
Cleartext-Password = "anypass"
Received Access-Accept Id 220 from 127.0.0.1:1812 to 127.0.0.1:54648 length 35
Reply-Message = "Hello ubuntu!"
A non-ubuntu user is rejected as expected: focal-freeradiu s-1873923: ~$ radtest anotheruser neverworks 127.0.0.1 0 testing123 Authenticator = 0x00
ubuntu@
Sent Access-Request Id 150 from 0.0.0.0:57202 to 127.0.0.1:1812 length 81
User-Name = "anotheruser"
User-Password = "neverworks"
NAS-IP-Address = 10.0.100.10
NAS-Port = 0
Message-
Cleartext-Password = "neverworks"
Received Access-Reject Id 150 from 127.0.0.1:1812 to 127.0.0.1:57202 length 41
Reply-Message = "You are not ubuntu!"
(0) -: Expected Access-Accept got Access-Reject
Focal verification succeeded.