Again: Major impact on authentication!



Hello,

Thanks to everyone!

I'm using Oracle just for radcheck/radacct and PostgreSQL for radippool only.

No, Mr. Peter, no one is using dial-up admin nor anything alike when
the problem occurs, just pure auth (without acct).

I've disabled the cron.hourly job and the problem appeared again after
some hours. A simple radiusd restart solves the problem. As this
causes impact, I can't afford to do this all the time just to debug,
but I think I gonna run a script to capture all the radiusd -xxx
messages, so when the behaviour starts, I can see what's happening.

Also, it's important to note that this server is the proxy radius and
those error messages appear:

Error: Discarding duplicate request from client ERX-1:50000 - ID: 115
due to unfinished request 32

Info: The maximum number of threads (32) are active, cannot spawn new
thread to handle request

Error: WARNING: Unresponsive child (id 1315006816) for request 105


With acct:

Error: rlm_sql (sql) in sql_accounting: stop packet with zero session
length. [user 'joe.black@foo.com', nas '10.10.2.1']

Error: Internal error processing module entry


Thank you.



On 2/6/07, Peter Nixon <listuser@peternixon.net> wrote:
On Mon 05 Feb 2007 13:05, A.L.M.Buxey@lboro.ac.uk wrote:
> Hi,
>
> > Freeradius 1.1.4 is randomly losing connection to both databases and
> > it's causing total loss in the authentication process:
>
> from a historical perspective you may find that is wasnt the 1.1.4 upgrade
> that has broken things - your database may have finally become too big and
> unwieldy. this has certainly been the case in many such cases.  I would
> check how long your database queries/inserts are taking. perhaps
> vacuum/optimise the tables, move/drop older entries, create better KEYs
> for the purposes you need.

The _random_ problems don't coincide with a user running a usage report from
a web interface by any chance do they??

Regards
--

Peter Nixon
http://www.peternixon.net/
PGP Key: http://www.peternixon.net/public.asc

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html






This archive was generated by a fusion of Pipermail (Mailman edition) and MHonArc.