<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2802" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2><FONT face=Arial size=2>
<P>System hangs with Apache SSL mod_auth_radius sending authentication
information to a radius - mysql server.</P>
<P>Hi everyone,</P>
<P>I am having a problem with my apache web server hanging and am looking for
help. I have check the log files and am finding nothing to indicate the cause of
the system hangs.</P>
<P>The web server which hangs is Fedora Core 4</P>
<P>The Radius - Mysql server is Redhat EL4</P>
<P>httpd.conf excerpts.</P>
<P>LoadModule cgi_module modules/mod_cgi.so<BR>LoadModule radius_auth_module
/usr/lib/httpd/modules/mod_auth_radius-2.0.so<BR>#</IfModule><BR># End of
proxy
directives.<BR>######################################################################<BR>#<BR>#
Add to the BOTTOM of httpd.conf<BR># If we're using mod_auth_radius, then add
it's specific<BR># configuration options.<BR>#<BR><IfModule
mod_auth_radius-2.0.c></P>
<P>#<BR># AddRadiusAuth server[:port] <shared-secret> [ timeout [ :
retries ]]<BR># Use localhost, the old RADIUS port, secret 'testing123',<BR>#
time out after 5 seconds, and retry 3 times.<BR>AddRadiusAuth
imp-dell-21:1812 password
5:3<BR>#
ServerName RadiusPassword in clients.conf
file<BR>#<BR># AuthRadiusBindAddress <hostname/ip-address><BR>#<BR># Bind
client (local) socket to this local IP address.<BR># The server will then see
RADIUS client requests will come from<BR># the given IP address.<BR>#<BR># By
default, the module does not bind to any particular address,<BR># and the
operating system chooses the address to use.<BR>#</P>
<P>#<BR># AddRadiusCookieValid
<minutes-for-which-cookie-is-valid><BR>#<BR># the special value of 0
(zero) means the cookie is valid forever.<BR>#<BR>AddRadiusCookieValid
5<BR></IfModule></P>
<P>/var/www/html/.htaccess file is unchanged </P>
<P>######################################################################<BR>#<BR>#
A sample per-directory access-control configuration, to be used<BR># as a
'.htacces' file.<BR>#</P>
<P>#<BR># Use basic password authentication.<BR># AuthType Digest won't work
with RADIUS authentication.<BR>#<BR>AuthType Basic</P>
<P>#<BR># Tell the user the realm to which they're authenticating.<BR># This
string should be configured for your site.<BR>#<BR>AuthName "RADIUS
authentication for localhost"</P>
<P>#<BR># don't use 'mod_auth'.<BR># You might want to disable other
authentication types here.<BR># You can get a similar effect by commenting out
the<BR># 'AddModule mod_auth_*' lines, previously in
httpd.conf<BR>#<BR>AuthAuthoritative off</P>
<P>#<BR># Use mod_auth_radius for all authentication, and make the
responses<BR># from it authoritative.<BR>#<BR>AuthRadiusAuthoritative on</P>
<P>#<BR># Make a local variation of AddRadiusCookieValid. The server will
choose<BR># the MINIMUM of the two values.<BR>#<BR># AuthRadiusCookieValid
<minutes-for-which-cookie-is-valid><BR>#<BR>AuthRadiusCookieValid 5</P>
<P>#<BR># Set the use of RADIUS authentication at this
<Location>"<BR>#<BR># Locally set the RADIUS authentication
active.<BR>#<BR># If there is a directory which you do NOT want to have
RADIUS<BR># authentication for, then use a <Directory> directive, and<BR>#
set "AuthRadiusActive Off"<BR>#<BR>AuthRadiusActive On</P>
<P>#<BR># require that mod_auth_radius return a valid user, otherwise<BR>#
access is denied.<BR>#<BR>require valid-user</P>
<P>The error logs do not record what the problem is.</P>
<P>Any ideas?</P></FONT></FONT></DIV>
<DIV><FONT face=Arial size=2>Frank Reiss</FONT></DIV></BODY></HTML>