Expedition Radius Authentication

[DavidNestler]

I'm trying to get Expededition to authenticate my users via Radius but am receiving immediate invalid UN/PW. When I started digging through the apache error log file I noticed this line with every failed attempt. It looks like apache is logging at least part of the password field for authenticing users in the error log. I noticed a previous thread about changing the LDAP method to POST to fix it for that a week or so back, but I suspect this needs to be remediated as well.

Also Radius Auth isn't working.

/var/log/apache2/error.log
[Thu Sep 27 15:55:04.777708 2018] [:error] [pid 15511] [client 10.0.48.138:39273] PHP Fatal error: Uncaught Error: Call to undefined function radius_auth_open() in /var/www/html/userManager/API/auth/login.php:115\nStack trace:\n#0 /var/www/html/bin/Auth.php(148): login('usernamehere', '<insert partial password here>')\n#1 {main}\n thrown in /var/www/html/userManager/API/auth/login.php on line 115, referer: https://expedition.url.here

[alestevez]

Thanks for let us know. We are reviewing....

[StuartHoward]

Hello,

RADIUS is failing for me as well, you say reviewing, do you have a fix for this or a guidance document?

[dgildelaig]

We may need more information regarding this error.

Could you check if you have additional information in the /var/log/apache/error.log file?

[DavidNestler]

On my side, Radius appears to be working now. I hadn't attempted it in a while but it worked fine with the latest set of updates.

[nellson]

Mine is failing to try a network attempt:

root@uspp-paloapp01:/var/log# tail -f /var/log/apache2/error.log
[Mon Mar 23 20:35:35.099527 2020] [:error] [pid 32451] [client 10.0.10.2:1923] PHP Notice: Trying to get property of non-object in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:35:35.099530 2020] [:error] [pid 32451] [client 10.0.10.2:1923] PHP Notice: Trying to get property of non-object in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:35:35.099551 2020] [:error] [pid 32451] [client 10.0.10.2:1923] PHP Fatal error: Uncaught Error: Call to a member function getUser() on null in /var/www/html/bin/Authentication.php:76\nStack trace:\n#0 /var/www/html/bin/authentication/servers/testServers.php(54): require_once()\n#1 /var/www/html/bin/authentication/servers/testServers.php(35): test(Array)\n#2 {main}\n thrown in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:40:53.508006 2020] [:error] [pid 38517] [client 10.0.10.2:2064] PHP Notice: Undefined variable: addLimit in /var/www/html/bin/authentication/logs/auditlogs.php on line 67, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:41:25.126385 2020] [:error] [pid 36885] [client 10.0.10.2:2083] PHP Notice: Undefined index: code in /var/www/html/bin/MTSettings/userSettings.php on line 43, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:41:45.381285 2020] [:error] [pid 36387] [client 10.0.10.2:2093] PHP Notice: Undefined index: code in /var/www/html/bin/MTSettings/userSettings.php on line 43, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:43:19.977571 2020] [:error] [pid 36885] [client 10.0.10.2:2125] PHP Notice: Undefined variable: app in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:43:19.977593 2020] [:error] [pid 36885] [client 10.0.10.2:2125] PHP Notice: Trying to get property of non-object in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:43:19.977596 2020] [:error] [pid 36885] [client 10.0.10.2:2125] PHP Notice: Trying to get property of non-object in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/
[Mon Mar 23 20:43:19.977614 2020] [:error] [pid 36885] [client 10.0.10.2:2125] PHP Fatal error: Uncaught Error: Call to a member function getUser() on null in /var/www/html/bin/Authentication.php:76\nStack trace:\n#0 /var/www/html/bin/authentication/servers/testServers.php(54): require_once()\n#1 /var/www/html/bin/authentication/servers/testServers.php(35): test(Array)\n#2 {main}\n thrown in /var/www/html/bin/Authentication.php on line 76, referer: https://expedition.columbia.csc/

[dgildelaig]

I would say that your session is expired.

Try to reload and refresh your Expedition session.

[MatthewFlanagan]

Hi,

This issue prevented me from upgrading our expedition beyond version 1.1.83 as it broke the RADIUS authentication.

I recently rebuilt my expedition server on ubuntu 20.04 and used the latest expedition (1.2.1)  and RADIUS authentication still wasn't working.

I've been able to troubleshoot the issue and it comes down to tho the wrong php-radius version being installed.

The version that gets installed is php7.4-radius but expedition uses php7.0 so when it tries to use the php-radius module it can't find it.

To fix it you need to install the correct package version by:

1. login to expedition server CLI as expedition user.

2. Update package indexes with the command: sudo apt update

3. Install the correct php-radius version: sudo apt install php7.0-radius

4. Restart expedition web server: sudo apache2ctl restart

Palo need to fix the expedtion-beta package depends to specify the exact version of php-radius.

regards

Matthew