<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16441" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi everyone,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have a queer comportment on a Debian FreeRadius
version</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The server is configured to authenticate the users
(with a bind) on two</FONT></DIV>
<DIV><FONT face=Arial size=2>identical LDAP servers through SSL.</FONT></DIV>
<DIV><FONT face=Arial size=2>(for 802.1x authentication purposes)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>This works quite fine for a while (a few
days) and then stops working at all untill service
restart.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Should this be related to a machine limitation
?</FONT></DIV>
<DIV><FONT face=Arial size=2>A buffer overflow or so ?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>At the time the service stops working, about 30
LDAPS connexions are open between FreeRadius</FONT></DIV>
<DIV><FONT face=Arial size=2>and the first LDAP server (the second one in never
sollicitated)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Is there a way to limit the LDAP connexions'
duration and force FreeRadius to close them after this limit</FONT></DIV>
<DIV><FONT face=Arial size=2>and open new ones (to clean its buffers)
?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Any help will be appreciated.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The auth mechanisms used are EAP-TTLS + PAP with
SecureW2 supplicant.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Best regards</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Vincent MAZARD</FONT></DIV>
<DIV><FONT face=Arial size=2>DML Frane</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><A
href="mailto:vmazard@dml.fr">vmazard@dml.fr</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.dml.fr">www.dml.fr</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV><pre>
****** ATTENTION : Nouvelle adresse et nouveaux numéros de telephone ******
Vous pouvez dorénavant nous joindre ou nous écrire aux coordonnées suivantes :
Tél : 01 70 56 51 51
Fax : 01 70 56 51 52
Nouvelle Adresse:
7 place Marcel Rebuffat
Parc d'activités de Villejust
91971 Courtaboeuf 7 cedex
</pre></BODY></HTML>