Expedition Radius Authentication

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Expedition Radius Authentication

L1 Bithead

I'm trying to get Expededition to authenticate my users via Radius but am receiving immediate invalid UN/PW. When I started digging through the apache error log file I noticed this line with every failed attempt. It looks like apache is logging at least part of the password field for authenticing users in the error log. I noticed a previous thread about changing the LDAP method to POST to fix it for that a week or so back, but I suspect this needs to be remediated as well.

 

Also Radius Auth isn't working.

/var/log/apache2/error.log
[Thu Sep 27 15:55:04.777708 2018] [:error] [pid 15511] [client 10.0.48.138:39273] PHP Fatal error: Uncaught Error: Call to undefined function radius_auth_open() in /var/www/html/userManager/API/auth/login.php:115\nStack trace:\n#0 /var/www/html/bin/Auth.php(148): login('usernamehere', '<insert partial password here>')\n#1 {main}\n thrown in /var/www/html/userManager/API/auth/login.php on line 115, referer: https://expedition.url.here

7 REPLIES 7

L7 Applicator

Thanks for let us know. We are reviewing....

Hello,

 

RADIUS is failing for me as well, you say reviewing, do you have a fix for this or a guidance document?

We may need more information regarding this error.

Could you check if you have additional information in the /var/log/apache/error.log file?

On my side, Radius appears to be working now. I hadn't attempted it in a while but it worked fine with the latest set of updates.

Mine is failing to try a network attempt:

 

root@uspp-paloapp01:/var/log# tail -f /var/log/apache2/error.log
[Mon Mar 23 20:35:35.099527 2020] [:error] [pid 32451] [client 10.0.10.2:1923] PHP Notice: Trying to get property of non-object in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:35:35.099530 2020] [:error] [pid 32451] [client 10.0.10.2:1923] PHP Notice: Trying to get property of non-object in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:35:35.099551 2020] [:error] [pid 32451] [client 10.0.10.2:1923] PHP Fatal error: Uncaught Error: Call to a member function getUser() on null in /var/www/html/bin/Authentication.php:76\nStack trace:\n#0 /var/www/html/bin/authentication/servers/testServers.php(54): require_once()\n#1 /var/www/html/bin/authentication/servers/testServers.php(35): test(Array)\n#2 {main}\n thrown in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:40:53.508006 2020] [:error] [pid 38517] [client 10.0.10.2:2064] PHP Notice: Undefined variable: addLimit in /var/www/html/bin/authentication/logs/auditlogs.php on line 67, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:41:25.126385 2020] [:error] [pid 36885] [client 10.0.10.2:2083] PHP Notice: Undefined index: code in /var/www/html/bin/MTSettings/userSettings.php on line 43, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:41:45.381285 2020] [:error] [pid 36387] [client 10.0.10.2:2093] PHP Notice: Undefined index: code in /var/www/html/bin/MTSettings/userSettings.php on line 43, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:43:19.977571 2020] [:error] [pid 36885] [client 10.0.10.2:2125] PHP Notice: Undefined variable: app in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:43:19.977593 2020] [:error] [pid 36885] [client 10.0.10.2:2125] PHP Notice: Trying to get property of non-object in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:43:19.977596 2020] [:error] [pid 36885] [client 10.0.10.2:2125] PHP Notice: Trying to get property of non-object in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:43:19.977614 2020] [:error] [pid 36885] [client 10.0.10.2:2125] PHP Fatal error: Uncaught Error: Call to a member function getUser() on null in /var/www/html/bin/Authentication.php:76\nStack trace:\n#0 /var/www/html/bin/authentication/servers/testServers.php(54): require_once()\n#1 /var/www/html/bin/authentication/servers/testServers.php(35): test(Array)\n#2 {main}\n thrown in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/

I would say that your session is expired.

 

Try to reload and refresh your Expedition session.

L0 Member

Hi,

This issue prevented me from upgrading our expedition beyond version 1.1.83 as it broke the RADIUS authentication.

I recently rebuilt my expedition server on ubuntu 20.04 and used the latest expedition (1.2.1)  and RADIUS authentication still wasn't working.

 

I've been able to troubleshoot the issue and it comes down to tho the wrong php-radius version being installed.

The version that gets installed is php7.4-radius but expedition uses php7.0 so when it tries to use the php-radius module it can't find it.

 

To fix it you need to install the correct package version by:

1. login to expedition server CLI as expedition user.

2. Update package indexes with the command: sudo apt update

3. Install the correct php-radius version: sudo apt install php7.0-radius

4. Restart expedition web server: sudo apache2ctl restart

 

Palo need to fix the expedtion-beta package depends to specify the exact version of php-radius.

 

regards

 

Matthew

 

  • 7170 Views
  • 7 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!