Invalid response status 4

[obilodeau]

Compiled the module on CentOS 7 with Apache 2.4.6-80

I've tried a lot of different things and all I get is this:

[Tue Aug 14 14:56:55.375460 2018] [ssl:debug] [pid 24050] ssl_engine_kernel.c(225): [client 173.231.112.245:21710] AH02034: Initial (No.1) HTTPS request received for child 0 (server wiki.gosec.co:443)
[Tue Aug 14 14:56:55.375583 2018] [authz_core:debug] [pid 24050] mod_authz_core.c(809): [client 173.231.112.245:21710] AH01626: authorization result of Require valid-user : denied (no authenticated user yet)
[Tue Aug 14 14:56:55.375594 2018] [authz_core:debug] [pid 24050] mod_authz_core.c(809): [client 173.231.112.245:21710] AH01626: authorization result of <RequireAny>: denied (no authenticated user yet)
[Tue Aug 14 14:56:55.375604 2018] [http:error] [pid 24050] [client 173.231.112.245:21710] AH01579: Invalid response status 4
[Tue Aug 14 14:56:55.375740 2018] [ssl:debug] [pid 24050] ssl_engine_io.c(993): [client 173.231.112.245:21710] AH02001: Connection closed to child 0 with standard shutdown (server wiki.gosec.co:443)

Relevant configuration:

<IfModule radius_auth_module>
    # AddRadiusAuth server[:port] <shared-secret> [ timeout [ : retries ]]
    AddRadiusAuth 192.168.x.xxx:1812 [secret] 30:3
    AddRadiusCookieValid 0
</IfModule>
<VirtualHost _default_:443>
[...]
    <Location />
        AuthType Basic
        AuthName "Test"
        AuthBasicProvider radius
        #AuthRadiusActive On
        require valid-user
        AuthRadiusDebug on

        Order allow,deny
        Allow from all
    </Location>
[...]
</VirtualHost>

Any advice or things to try?

[alandekok]

Invalid response status 4 ? That message isn't produced by mod_auth_radius. Something else is doing on.

I think you can do httpd -X to get some debug output of Apache. But it's nowhere near as useful as FreeRADIUS.

[obilodeau]

I checked out and recompiled with v.1.6.0 (instead of master) and now I'm no longer stuck at Invalid response status 4.

I believe the number 4 could be coming from this change: 5cd26b1 (PR #37)

The AUTHZ_DENIED_NO_USER enum value (as seen in above commit) is of value 4:
https://github.com/apache/httpd/blob/0d487913fcf433ac05526330f462a99d29dc9b25/include/mod_auth.h#L78.

I don't understand what's going on and the goal of the initial change but it looks like a regression.

[alandekok]

Hmm... it's not clear what's going on there, sorry.