<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
<title></title>
</head>
<body>
<span> </span> <br />
<div style="margin: 5px 0px 5px 0px; font-family: monospace;">
Alan DeKok <aland@deployingradius.com> hat am 31. August 2010 um 13:18 geschrieben:<br />
<br />
> Jan Zacharias wrote:<br />
> > Call me dump, but I have no idea what to look for.<br />
><br />
> Neither do I. It's your system...<br />
><br />
> > One idea: is ntlm_auth referred to as child? Maybe I sould<br />
> > write a wrapper and see how long execution of this "helper program"<br />
> > takes,<br />
><br />
> Possibly, yes.
</div>
<p style="margin: 0px;">│ ├─┬◆ 65437 root sshd: root@pts/4 (sshd)<br />
│ │ └─┬◆ 65440 root -bash (bash)<br />
│ │ └─┬◆ 76322 freeradius radiusd -s -X -xx -f<br />
│ │ └─┬─ 76421 freeradius /bin/sh /usr/local/bin/ntlm_auth_wrapper --request-nt-key --domain=DFKI --username=jan --challenge=xxx --nt-response=xxx</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">So, yes :)</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">The wrapper logged PID and time (real,sys,user) of ntlm_auth</p>
<p style="margin: 0px;">To speed up the debugging, I introduced a sleep of varying duration in the ntlm_auth_wrapper.</p>
<p style="margin: 0px;">I found that freeradius kills the ntlm stuff if it takes longer than ten seconds to complete.</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">My suggestion is that we introduce a configuration variable ntlm_auth_retries so that freerad kills the process,</p>
<p style="margin: 0px;">but then tries again until the retry-count is reached. This would greatly improve reliability in stress/high load/failover</p>
<p style="margin: 0px;">scenarios :)</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">What do you think, Alan? Anyone else?</p>
<p style="margin: 0px;"> </p>
<br />
Best, Jan<br />
<p style="margin: 0px;"> </p>
<div style="margin: 5px 0px 5px 0px; font-family: monospace;">
> > Alan DeKok.<br />
> -<br />
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
</div>
</body>
</html>