Project

General

Profile

Actions

Regression #16863

open

RADIUS authentication fails when attribute contains an invalid ACL

Added by Quang Phan 3 days ago. Updated 3 days ago.

Status:
Feedback
Priority:
Normal
Assignee:
Category:
OpenVPN
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Release Notes:
Default
Affected Plus Version:
26.03
Affected Architecture:
All

Description

When I attempt to authenticate to my OpenVPN server configured to use a RADIUS backend, the authentication succeeds at the RADIUS level, but the pfSense openvpn.auth-user.php background script crashes and my VPN does not form. I observe that the client successfully passes the TLS handshake but hangs on PUSH_REQUEST until it times out. The OpenVPN client reports a user authentication error the the last message I see in the pfSense logs about OpenVPN is Peer Connection Initiated with [AF_INET]. This had no issues in pfSense version 25 and started when I upgraded to 26.03.1

Logs:

Crash report begins.  Anonymous machine information:

arm
16.0-CURRENT
FreeBSD 16.0-CURRENT #13 plus-RELENG_26_03_1-n256546-1d1bfd578383: Wed May 20 15:20:32 UTC 2026     root@pfsense-build-release-aarch64-2.eng.atx.netgate.com:/var/jenkins/workspace/pfSense-Plus-snapshots-26_03_1-main/obj/armv7/wbqsxpHt/var/jenkins/workspac

Crash report details:

PHP Errors:
[30-May-2026 10:55:00 US/Eastern] PHP Fatal error:  Uncaught ArgumentCountError: 3 arguments are required, 2 given in /etc/inc/util.inc:2768
Stack trace:
#0 /etc/inc/util.inc(2768): sprintf()
#1 /etc/inc/util.inc(5058): localize_text()
#2 /etc/inc/util.inc(5277): cisco_extract_index()
#3 /etc/inc/openvpn.attributes.php(30): parse_cisco_acl()
#4 /etc/inc/openvpn.auth-user.php(121): include_once('/etc/inc/openvp...')
#5 {main}
  thrown in /etc/inc/util.inc on line 2768
[30-May-2026 11:06:18 US/Eastern] PHP Fatal error:  Uncaught ArgumentCountError: 3 arguments are required, 2 given in /etc/inc/util.inc:2768
Stack trace:
#0 /etc/inc/util.inc(2768): sprintf()
#1 /etc/inc/util.inc(5058): localize_text()
#2 /etc/inc/util.inc(5277): cisco_extract_index()
#3 /etc/inc/openvpn.attributes.php(30): parse_cisco_acl()
#4 /etc/inc/openvpn.auth-user.php(121): include_once('/etc/inc/openvp...')
#5 {main}
  thrown in /etc/inc/util.inc on line 2768
[30-May-2026 11:13:15 US/Eastern] PHP Fatal error:  Uncaught ArgumentCountError: 3 arguments are required, 2 given in /etc/inc/util.inc:2768
Stack trace:
#0 /etc/inc/util.inc(2768): sprintf()
#1 /etc/inc/util.inc(5058): localize_text()
#2 /etc/inc/util.inc(5277): cisco_extract_index()
#3 /etc/inc/openvpn.attributes.php(30): parse_cisco_acl()
#4 /etc/inc/openvpn.auth-user.php(121): include_once('/etc/inc/openvp...')
#5 {main}
  thrown in /etc/inc/util.inc on line 2768

No FreeBSD crash data found.

Actions

Also available in: Atom PDF