<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />
<title></title>
</head>
<body>
<p style="margin: 0px;">Hey Alan!<span> </span></p>
<br />
<div style="margin: 5px 0px 5px 0px; font-family: monospace;">
Alan DeKok <aland@deployingradius.com> hat am 1. September 2010 um 15:46 geschrieben:<br />
<br />
> Jan Zacharias wrote:<br />
> > To speed up the debugging, I introduced a sleep of varying duration in<br />
> > the ntlm_auth_wrapper.<br />
> ><br />
> > I found that freeradius kills the ntlm stuff if it takes longer than ten<br />
> > seconds to complete.<br />
><br />
> Yes. Any child script which takes that long is broken.
</div>
<p style="margin: 0px;">No, it can also be just someone pulling a network cord/routing changes etc.etc.</p>
<p style="margin: 0px;"> </p>
<div style="margin: 5px 0px 5px 0px; font-family: monospace;">
><br />
> > My suggestion is that we introduce a configuration variable<br />
> > ntlm_auth_retries so that freerad kills the process,<br />
><br />
> No. You can write a shell script wrapper around ntlm_auth that does:<br />
><br />
> - fork ntlm_auth<br />
> - wait 1s for it to return<br />
> - if it doesn't return, kill it<br />
> - try to fork it again
</div>
<p style="margin: 0px;">Yeah sure, this was also my first idea, but i'm still limited to ten seconds then :(</p>
<p style="margin: 0px;"> </p>
<div style="margin: 5px 0px 5px 0px; font-family: monospace;">
> > > What do you think, Alan? Anyone else?<br />
><br />
> This isn't a server problem, and changing the server isn't necessary.
</div>
<p style="margin: 0px;">Sure it's not a problem, but it would improve reliability and robustness.</p>
<p style="margin: 0px;"> </p>
<p style="margin: 0px;">This is not about finger pointing or so, I just want to help make freerad even better :)</p>
<p style="margin: 0px;"> </p>
Best, Jan<br />
</body>
</html>