Hi, I'm using FreeRADIUS 2.1.1 wiht EAP-TLS for my WLAN authentication. It's working great and I have no authentication problems at all. I've tested my setup with eapol_test from the wpa_supplicant package and used it inside an endless loop overnight and the memory usage was 100% stable. Then I've noticed that the FreeRADIUS memory usage increases if I interrupt the eapol_test tool after it sends the first RADIUS packet. This can be done till FreeRADIUS runs out of memory and gets an exception. Is this a known problem? To force the problem with eapol_test, I've inserted an 'exit(0);' inside the radius_client_send() function. Here's the diff: diff -Nur wpa_supplicant-0.5.10-orig/radius_client.c wpa_supplicant-0.5.10-crash/radius_client.c --- wpa_supplicant-0.5.10-orig/radius_client.c 2008-02-20 01:08:52.000000000 +0100 +++ wpa_supplicant-0.5.10-crash/radius_client.c 2008-11-03 22:06:10.000000000 +0100 @@ -494,6 +494,9 @@ radius_client_list_add(radius, msg, msg_type, shared_secret, shared_secret_len, addr); + printf("Unexpected EAPOL Client Problem....\n"); + exit(0); + return res; } Regards, Alex
Alexander Bergmann wrote:
I've tested my setup with eapol_test from the wpa_supplicant package and used it inside an endless loop overnight and the memory usage was 100% stable. Then I've noticed that the FreeRADIUS memory usage increases if I interrupt the eapol_test tool after it sends the first RADIUS packet. This can be done till FreeRADIUS runs out of memory and gets an exception.
Is this a known problem?
Hmm... the "max_sessions" configuration entry in eap.conf SHOULD enforce some limits on memory use. Is this set? If so, maybe it's an OpenSSL issue, where it's caching more things behind our back... Alan DeKok.
Alexander Bergmann wrote:
I've tested my setup with eapol_test from the wpa_supplicant package and used it inside an endless loop overnight and the memory usage was 100% stable. Then I've noticed that the FreeRADIUS memory usage increases if I interrupt the eapol_test tool after it sends the first RADIUS packet. This can be done till FreeRADIUS runs out of memory and gets an exception.
Is this a known problem?
You can set "max_sessions" to limit the number of EAP sessions. If you haven't upgraded your configuration since 2.0.x, this will be "0", or "no limit". See eap.conf for details. Alan DeKok.
participants (2)
-
Alan DeKok -
Alexander Bergmann