hi, still looking at issues with our FR3 that keeps dying. Sat Dec 8 10:03:58 2012 : Info: rlm_sql (sql): Opening additional connection (21) Sat Dec 8 10:03:58 2012 : Info: rlm_sql (sql): Closing idle connection (14) Sat Dec 8 10:03:58 2012 : Info: rlm_sql (sql): Closing connection (14) Sat Dec 8 10:03:58 2012 : Info: rlm_sql (sql): Closing idle connection (13) Sat Dec 8 10:03:58 2012 : Info: rlm_sql (sql): Closing connection (13) Sat Dec 8 10:03:58 2012 : Info: rlm_sql (sql): Closing idle connection (12) Sat Dec 8 10:03:58 2012 : Info: rlm_sql (sql): Closing connection (12) Sat Dec 8 10:03:58 2012 : Error: TLS Alert read:fatal:unknown CA Sat Dec 8 10:03:58 2012 : Error: TLS_accept: failed in SSLv3 read client certificate A Sat Dec 8 10:03:58 2012 : Error: SSL error error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca Sat Dec 8 10:03:58 2012 : Error: SSL: SSL_read failed inside of TLS (-1), TLS session fails. Sat Dec 8 10:03:58 2012 : Auth: (1496) Login incorrect (TLS Alert read:fatal:unknown CA): [user] (from client wifi1 port 13 cli 30-00-00-00-00-00) Sat Dec 8 10:03:58 2012 : Auth: (1497) Login OK: [user] (from client wifi1 port 13 cli c0-00-00-02-0e-00 via TLS tunnel) Sat Dec 8 10:03:58 2012 : Auth: (1500) Login OK: [anonymous@lboro.ac.uk] (from client wifi1 port 13 cli c0-00-00-02-0e-00) Sat Dec 8 10:03:59 2012 : Info: rlm_sql (sql): Opening additional connection (22) ignoring the random user with incorrect settings causing the TLS part to fail..... the sql is opening up connection 22 but our config is pool { # Number of connections to start start = 10 # Minimum number of connections to keep open min = 2 # Maximum number of connections # # If these connections are all in use and a new one # is requested, the request will NOT get a connection. max = 20 # Spare connections to be left idle # # NOTE: Idle connections WILL be closed if "idle_timeout" # is set. spare = 10 # Number of uses before the connection is closed # # 0 means "infinite" uses = 0 # The lifetime (in seconds) of the connection lifetime = 0 # idle timeout (in seconds). A connection which is # unused for this length of time will be closed. idle_timeout = 60 # NOTE: All configuration settings are enforced. If a # connection is closed because of "idle_timeout", # "uses", or "lifetime", then the total number of # connections MAY fall below "min". When that # happens, it will open a new connection. It will # also log a WARNING message. # # The solution is to either lower the "min" connections, # or increase lifetime/idle_timeout. } ....so why is the connection SQL count going over 20 ? alan