pam_radius_auth threading issues

Alan DeKok aland at ox.org
Tue Oct 4 21:45:19 CEST 2005


Rich Graves <rcgraves at gmail.com> wrote:
> I know (just barely) enough to agree with that, but want more hints as to
> the granularity -- do I need to lock all of pam_sm_authenticate, or just
> talk_radius?

  I would lock each PAM function.

> Ick. Well, with only a single conf->sockfd, there really is no
> choice but to put one big lock around the whole thing. If there
> was a different udp socket for each server in /etc/raddb/server,
> then I could have at least some parallellism, but that would require
> a lot of restructuring. Once I've done that work I might as well
> figure out how to make conf->sockfd private to each pthread.

  If we can get the radius library code from FreeRADIUS into shape, we
can fix those issues in the pam module by using library code.

  Alan DeKOk.




More information about the Freeradius-Users mailing list