Freeradius-Users Digest, Vol 55, Issue 38

Peter Carlstedt pc_007 at hotmail.com
Tue Nov 10 13:33:10 CET 2009




> From: freeradius-users-request at lists.freeradius.org
> Subject: Freeradius-Users Digest, Vol 55, Issue 38
> To: freeradius-users at lists.freeradius.org
> Date: Tue, 10 Nov 2009 11:35:54 +0100
> 
> Send Freeradius-Users mailing list submissions to
> 	freeradius-users at lists.freeradius.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://lists.freeradius.org/mailman/listinfo/freeradius-users
> or, via email, send a message with subject or body 'help' to
> 	freeradius-users-request at lists.freeradius.org
> 
> You can reach the person managing the list at
> 	freeradius-users-owner at lists.freeradius.org
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Users digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: Freeradius-Users Digest, Vol 55, Issue 32 (Ana Gallardo)
>    2. Re: Problem with server atribute in NAS table with mysql
>       (Ana Gallardo)
>    3. Cannot upgade to 2.1.7 (kachin Agarwal)
>    4. FreeRadius crashed on accounting load tests with 1000
>       concurrent 	clients (Dinh Pham Cong)
>    5. Re: FreeRadius crashed on accounting load tests with 1000
>       concurrent	clients (Alan DeKok)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Tue, 10 Nov 2009 08:40:17 +0100
> From: Ana Gallardo <ana.gallardo.77 at gmail.com>
> Subject: Re: Freeradius-Users Digest, Vol 55, Issue 32
> To: FreeRadius users mailing list
> 	<freeradius-users at lists.freeradius.org>
> Message-ID:
> 	<74556fcf0911092340p498089f7ud0f98614a6d91fcc at mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> > I have a problem which I and a friend here have been trying to solve for
> > some days now.
> >
> 
> ?what is your problem?
> 
> After we have run in terminal "./configure" ; "make" & "sudo make install"
> > and afterwards try to run radius with "radiusd -X" (same as freeradius -X if
> > youre using freeradius installed through "Synaptic Package Manager").
> >
> 
> and when you run in debug mode??
> 
> You can try this howto that works fine
> http://www.linuxinsight.com/building-debian-freeradius-package-with-eap-tls-ttls-peap-support.html

We've tried following it and it does not work following that guide.  I can add how our control and rules looks like in the parts which has to be changed in that guide.

Changes in control:

Build-Depends: debhelper (>= 5), dpatch (>= 2), dpkg-dev (>= 1.13.19), autotools-dev, libtool (>= 1.5), libltdl3-dev, libpam0g-dev, libmysqlclient15-dev | libmysqlclient-dev, libgdbm-dev, libldap2-dev, libsasl2-dev, libiodbc2-dev, libkrb5-dev, libperl-dev, libpcap-dev, python-dev, snmp, libsnmp9-dev | libsnmp-dev, libpq-dev, libssl-dev

Changes in rules:
(In Section Autoconf)
ifeq ($(openssl), no)
     confflags += --with-openssl --with-rlm_eap_peap --with-rlm_eap_tls --with-rlm_eap_ttls --without-rlm_otp
endif
(In Section Binary Arch)
I choosed not to delete it entirely since im not sure if it is
this section that i should delete, if you check the code here against the
part in
http://www.linuxinsight.com/building-debian-freeradius-package-with-eap-tls-ttls-peap-support.html
it is different so I just commented it out.
ifeq ($(openssl), no)  
#    for pkg in $(shell grep ^Package debian/control | awk '{print $$2}') ; do \
#        if dh_shlibdeps -p $$pkg -- -O | grep -q libssl; then \
#            echo "$$pkg links to openssl" ; \
#            exit 1 ; \
#        fi ; \
#    done
endif

The problem comes when we try do run "make" it seems that way anyhow. After we have run "make" command in the terminal we get this output: (not all of the output, the parts which i think is about the error)

 /home/peter/Desktop/freeradius-server-2.1.7/src/lib/libfreeradius-radius.la -lnsl -lresolv  -lpthread  \
        -lcrypt  -lltdl -lcrypto -lssl -lcrypto
rm -f .libs/radiusd.nm .libs/radiusd.nmS .libs/radiusd.nmT
creating .libs/radiusdS.c
(cd .libs && gcc  -g -O2 -c -fno-builtin "radiusdS.c")
rm -f .libs/radiusdS.c .libs/radiusd.nm .libs/radiusd.nmS .libs/radiusd.nmT
gcc .libs/radiusdS.o -o .libs/radiusd .libs/acct.o .libs/auth.o .libs/client.o .libs/conffile.o .libs/crypt.o .libs/exec.o .libs/files.o .libs/listen.o .libs/log.o .libs/mainconfig.o .libs/modules.o .libs/modcall.o .libs/radiusd.o .libs/stats.o .libs/session.o .libs/threads.o .libs/util.o .libs/valuepair.o .libs/version.o .libs/xlat.o .libs/event.o .libs/realms.o .libs/evaluate.o .libs/vmps.o .libs/detail.o -Wl,--export-dynamic  /home/peter/Desktop/freeradius-server-2.1.7/src/lib/.libs/libfreeradius-radius.so -lnsl -lresolv -lpthread -lcrypt /usr/lib/libltdl.so -lssl -lcrypto -ldl 
.libs/modules.o: In function `setup_modules':
/home/peter/Desktop/freeradius-server-2.1.7/src/main/modules.c:1333: undefined reference to `lt__PROGRAM__LTX_preloaded_symbols'
collect2: ld returned 1 exit status
make[4]: *** [radiusd] Error 1
make[4]: Leaving directory `/home/peter/Desktop/freeradius-server-2.1.7/src/main'
make[3]: *** [common] Error 2
make[3]: Leaving directory `/home/peter/Desktop/freeradius-server-2.1.7/src'
make[2]: *** [all] Error 2
make[2]: Leaving directory `/home/peter/Desktop/freeradius-server-2.1.7/src'
make[1]: *** [common] Error 2
make[1]: Leaving directory `/home/peter/Desktop/freeradius-server-2.1.7'
make: *** [all] Error 2

If I understand the error correctly it points out that the code which begins at line 1333 in the file "modules.c" in ~/freeradius-server-2.1.7/src/main/ has an error in it? the code in that line looks like this:

LTDL_SET_PRELOADED_SYMBOLS();

I am rather new to Linux and a complete newbie ragarding Freeradius so any help possible would be appreciated.
A question though. Why do I have to make changes in "rules" and "control" to even get it to work?

Best regards/ Peter

> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20091110/5b242894/attachment.html>
> 
> ------------------------------
> 
> Message: 2
> Date: Tue, 10 Nov 2009 09:15:35 +0100
> From: Ana Gallardo <ana.gallardo.77 at gmail.com>
> Subject: Re: Problem with server atribute in NAS table with mysql
> To: FreeRadius users mailing list
> 	<freeradius-users at lists.freeradius.org>
> Message-ID:
> 	<74556fcf0911100015s47a314e7vecbfed677576a72c at mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> > which means you havent updated the SQL qeuery to use that column.
> >
> >        nas_query = "SELECT id, nasname, shortname, type, secret, server
> > FROM ${nas_table}"
> >
> >
> That was the problem. Thank you very much Alan.
> 
> -- 
> ____________________
> 
>  Ana Gallardo G?mez
> ____________________
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20091110/87bdcb6a/attachment.html>
> 
> ------------------------------
> 
> Message: 3
> Date: Tue, 10 Nov 2009 14:05:31 +0530 (IST)
> From: kachin Agarwal <kach_gr8 at yahoo.co.in>
> Subject: Cannot upgade to 2.1.7
> To: freeradius-users at lists.freeradius.org
> Message-ID: <423843.65516.qm at web94206.mail.in2.yahoo.com>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> Hi,
> 
> I think i vefound the problem. it is not able to find the gdbm.h file from /usr/include.
> 
> configuring in src/modules/rlm_counter
> 
> configure: running /bin/sh ./configure '--prefix=/usr'? '--build' 'i686-pc-linux-gnu' '--host' 'mips-xlr-linux-gnu' '--target' 'mips-xlr-linux-gnu' '--enable-strict-dependencies' '--without-rlm_attr_filter' '--without-rlm_digest' '--without-rlm_expr' '--without-rlm_krb5' '--without-rlm_pam' '--without-rlm_preprocess' '--without-rlm_sim_files' '--without-rlm_unix' '--without-rlm_cram' '--without-rlm_fastusers' '--without-rlm_python' '--without-rlm_smb' '--without-rlm_x99_token' '--without-rlm_acct_unique' '--without-rlm_example' '--without-rlm_passwd' '--without-rlm_radutmp' '--without-rlm_sql' '--without-rlm_always' '--without-rlm_checkval' '--without-rlm_detail' '--without-rlm_exec' '--without-rlm_ippool' '--without-rlm_dbm' '--without-rlm_ns_mta_md5' '--without-rlm_perl' '--without-rlm_realm' '--without-rlm_sqlcounter' '--without-threads' '--without-rlm_eap_ikev2' '--without-rlm_eap_tnc' '--localstatedir=/var' '--sysconfdir=/etc'
>  '--with-logdir=/var/radius' '--without-snmp' 'build_alias=i686-pc-linux-gnu' 'host_alias=mips-xlr-linux-gnu' 'target_alias=mips-xlr-linux-gnu' 'CC=/opt/wios/gcc-4.2.2-glibc-2.7-p2/mips-xlr-linux-gnu/bin/mips-xlr-linux-gnu-gcc'
> 
> checking for mips-xlr-linux-gnu-gcc... /opt/wios/gcc-4.2.2-glibc-2.7-p2/mips-xlr-linux-gnu/bin/mips-xlr-linux-gnu-gcc
> checking for C compiler default output file name... a.out
> checking whether the C compiler works... yes
> checking whether we are cross compiling... yes
> checking for suffix of executables... 
> checking for suffix of object files... o
> checking whether we are using the GNU C compiler... yes
> checking whether /opt/wios/gcc-4.2.2-glibc-2.7-p2/mips-xlr-linux-gnu/bin/mips-xlr-linux-gnu-gcc accepts -g... yes
> checking for /opt/wios/gcc-4.2.2-glibc-2.7-p2/mips-xlr-linux-gnu/bin/mips-xlr-linux-gnu-gcc option to accept ANSI C... none needed
> checking how to run the C preprocessor... /opt/wios/gcc-4.2.2-glibc-2.7-p2/mips-xlr-linux-gnu/bin/mips-xlr-linux-gnu-cpp
> checking for gdbm.h... no
> checking for gdbm_open in -lgdbm... no
> checking for gdbm_fdesc... no
> configure: error: set --without-rlm_counter to disable it explicitly.
> configure: error: ./configure failed for src/modules/rlm_counter
> 
> But the gdbm.h is present in /usr/include then why is it not finding.
> wat to do?
> 
> Thanks & Regards,
> Kachin
> 
> 
> 
> 
> 
> 
>       Add whatever you love to the Yahoo! India homepage. Try now! http://in.yahoo.com/trynew
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20091110/1e48c87d/attachment.html>
> 
> ------------------------------
> 
> Message: 4
> Date: Tue, 10 Nov 2009 16:35:05 +0700
> From: Dinh Pham Cong <dinhpc at vega.com.vn>
> Subject: FreeRadius crashed on accounting load tests with 1000
> 	concurrent 	clients
> To: freeradius-users at lists.freeradius.org
> Message-ID:
> 	<7d7187fc0911100135x7e4a92dcr4b6a171f68be4b67 at mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
> 
> Hi all,
> 
> I am using FreeRADIUS Version 2.1.7, CentOS 5.3 64 bit, MySQL 5.0.77 (max
> connections 3000) on a 16-core, 16GB RAM server. This is my radiusd.conf
> 
> max_request_time = 10
> cleanup_delay = 5
> max_requests = 5120
> 
> start_servers = 1024
> max_servers = 3000
> max_spare_servers = 3000
> max_requests_per_server = 0
> 
> My sql.conf
> 
> # number of sql connections to make to server
> num_sql_socks = 1000
> 
> I developed a Java client that can create 1000 concurrent threads that
> connect and send accounting requests (start and stop) to Radius server.
> However, after sending for 20 or 30 seconds, radius server generated a lot
> of error messages and crashed
> 
> Error messages
> 
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 41442 - ID: 134 due to unfinished request 2436
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 38970 - ID: 150 due to unfinished request 2452
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 50783 - ID: 156 due to unfinished request 2458
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 60038 - ID: 162 due to unfinished request 2464
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 59541 - ID: 191 due to unfinished request 2493
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 59858 - ID: 205 due to unfinished request 2507
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 45654 - ID: 220 due to unfinished request 2522
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 59464 - ID: 229 due to unfinished request 2531
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 57658 - ID: 240 due to unfinished request 2542
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 33253 - ID: 71 due to unfinished request 2629
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 54171 - ID: 105 due to unfinished request 2663
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 41039 - ID: 176 due to unfinished request 2734
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 53611 - ID: 199 due to unfinished request 2757
> Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from client
> tester1 port 58608 - ID: 208 due to unfinished request 2766
> Tue Nov 10 16:14:36 2009 : Error: Discarding duplicate request from client
> tester1 port 33814 - ID: 171 due to unfinished request 4521
> Tue Nov 10 16:14:36 2009 : Info: rlm_sql_mysql: Starting connect to MySQL
> server for #942
> Tue Nov 10 16:14:36 2009 : Error: Discarding duplicate request from client
> tester1 port 54081 - ID: 187 due to unfinished request 4537
> Tue Nov 10 16:14:36 2009 : Info: rlm_sql_mysql: Starting connect to MySQL
> server for #926
> Tue Nov 10 16:14:36 2009 : Info: rlm_sql_mysql: Starting connect to MySQL
> server for #913
> Tue Nov 10 16:14:36 2009 : Error: rlm_sql_mysql: Socket not connected
> Tue Nov 10 16:14:36 2009 : Error: rlm_sql_mysql: Socket not connected
> 
> Crashed
> 
> Nov 10 15:55:35 Mobile6 kernel: radiusd[22242]: segfault at 00000000000000c8
> rip 0000003daee5306b rsp 00002aae5d82a780 error 4
> Nov 10 15:57:29 Mobile6 kernel: radiusd[30941]: segfault at 00000000000000c8
> rip 0000003daee5306b rsp 00002aaee56de180 error 4
> Nov 10 16:14:36 Mobile kernel: radiusd[10788]: segfault at 00000000000000c8
> rip 0000003daee5306b rsp 00002aac913de780 error 4
> 
> What do I need to do to enable FreeRadius server to meet more than 1000
> accounting request (INSERT AND DELETE) for a second?
> 
> Thanks,
> 
> Dinh
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20091110/5ae5bd6c/attachment.html>
> 
> ------------------------------
> 
> Message: 5
> Date: Tue, 10 Nov 2009 11:35:50 +0100
> From: Alan DeKok <aland at deployingradius.com>
> Subject: Re: FreeRadius crashed on accounting load tests with 1000
> 	concurrent	clients
> To: FreeRadius users mailing list
> 	<freeradius-users at lists.freeradius.org>
> Message-ID: <4AF94206.3080207 at deployingradius.com>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> Dinh Pham Cong wrote:
> > start_servers = 1024
> > max_servers = 3000
> > max_spare_servers = 3000
> 
>   That's a little high.
> 
> > My sql.conf
> > 
> > # number of sql connections to make to server
> > num_sql_socks = 1000
> 
>   Remember: 1000 packets/s does *not* mean 1000 threads or 1000 SQL
> sockets.  The server should be able to do 1000 packets/s with a much
> smaller number of threads && sockets.  i.e. 50/50.
> 
> > I developed a Java client that can create 1000 concurrent threads that
> > connect and send accounting requests (start and stop) to Radius server.
> 
>   See also "radperf" (http://networkradius.com/radperf.html).  It can do
> load testing and user login simulations.
> 
> > However, after sending for 20 or 30 seconds, radius server generated a
> > lot of error messages and crashed
> > 
> > Error messages
> > 
> > Tue Nov 10 16:14:34 2009 : Error: Discarding duplicate request from
> > client tester1 port 41442 - ID: 134 due to unfinished request 2436
> 
>   This is likely because your SQL database is too slow.
> 
>   Have you checked to see if the SQL database can handle 1000 inserts/s?
> 
> > Crashed
> > 
> > Nov 10 15:55:35 Mobile6 kernel: radiusd[22242]: segfault at
> > 00000000000000c8 rip 0000003daee5306b rsp 00002aae5d82a780 error 4
> 
>   See doc/bugs for instructions on producing useful crash reports.  We
> can then use these to fix bugs.
> 
> > Nov 10 15:57:29 Mobile6 kernel: radiusd[30941]: segfault at
> > 00000000000000c8 rip 0000003daee5306b rsp 00002aaee56de180 error 4
> > Nov 10 16:14:36 Mobile kernel: radiusd[10788]: segfault at
> > 00000000000000c8 rip 0000003daee5306b rsp 00002aac913de780 error 4
> > 
> > What do I need to do to enable FreeRadius server to meet more than 1000
> > accounting request (INSERT AND DELETE) for a second?
> 
>   Use a database that can handle 1000 requests/s.
> 
>   Alan DeKok.
> 
> 
> ------------------------------
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 
> 
> End of Freeradius-Users Digest, Vol 55, Issue 38
> ************************************************
 		 	   		  
_________________________________________________________________
Windows Live: Friends get your Flickr, Yelp, and Digg updates when they e-mail you.
http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_3:092010
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20091110/5b45da66/attachment.html>


More information about the Freeradius-Users mailing list