Project

General

Profile

Bug #8466

radiusd crash

Added by Razvan Petrescu almost 3 years ago. Updated 5 days ago.

Status:
Resolved
Priority:
Normal
Category:
FreeRADIUS
Target version:
-
Start date:
04/17/2018
Due date:
% Done:

0%

Estimated time:
Affected Version:
Affected Architecture:
amd64

Description

Radiusd crash when for a user is set a password in plain text containing " (double qoutes)
After this all users get auth failed.
I'm getting this on pfsense version 2.4.3 latest stable amd64, is the only version i have installed.

History

#1 Updated by Yury Zaytsev 3 months ago

Same here on 2.4.5-RELEASE-p1 (amd64) - a nice way of locking yourself out of pfSense :-(

#2 Updated by Viktor Gurov 3 months ago

  • Affected Version deleted (2.4.3)

able to reproduce:

Thu Dec 10 18:21:14 2020 : Error: /usr/local/etc/raddb/mods-config/files/authorize[2]: Parse error (check) for entry radiususer1: Expected end of line or comma
Thu Dec 10 18:21:14 2020 : Error: Failed reading /usr/local/etc/raddb/mods-config/files/authorize
Thu Dec 10 18:21:14 2020 : Error: /usr/local/etc/raddb/mods-enabled/files[9]: Instantiation failed for module "files" 

fix:
https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/15

#3 Updated by Renato Botelho about 2 months ago

  • Status changed from New to Feedback
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

#4 Updated by Danilo Zrenjanin about 1 month ago

I tested on the latest snapshot. It still allows entering " as the first character.

e.g., entering the password "pfsense will pass the check but get stuck when the user tries to log in.

#6 Updated by Jim Pingle about 1 month ago

  • Status changed from Feedback to Pull Request Review

#7 Updated by Renato Botelho 29 days ago

  • Status changed from Pull Request Review to Feedback
  • Assignee changed from Viktor Gurov to Danilo Zrenjanin

PR has been merged. Thanks!

#9 Updated by Jim Pingle 10 days ago

  • Status changed from Feedback to Pull Request Review

#10 Updated by Renato Botelho 8 days ago

  • Status changed from Pull Request Review to Feedback

Merged

#11 Updated by Danilo Zrenjanin 5 days ago

  • Status changed from Feedback to Resolved

Tested on the latest release.

It works as expected. Ticket resolved.

Also available in: Atom PDF