June 2009 - Freeradius-Users - lists.freeradius.org

Slow "update radacct ..." query
by Marinko Tarlac 02 Jun '09

02 Jun '09

Hi I know that this maybe is not FreeRadius related question... I have some problems with freeradius and mysql as a database. radacct table is InnoDB and update queries (interim-updates) are terrible slow (10 - 50 sec). Interim-updates are triggered every 8 minutes so it isn't under heavy load. (max 500 users online @ same time) After I wrote a small benchmark script for testing this kind of queries (10 000 queries "UPDATE radacct SET ... " with random integer values for acctsessiontime, acctinputoctets and acctoutputoctets) I can't reproduce this problem. My script takes 10 000 random rows from radacct table (table has almost 600 000 rows) and it is finished in 130-180 seconds (executed 5 times and all results are between 130 and 180 seconds). That means 0,013-0,018s/query (average) Slow query log is empty after this benchm. script. I checked radacct table later and I have exaclty 10 000 updated rows so the script is OK. Any ideas how to trace this problem ? FreeRadius is 2.1.6 and the same problem I had with FR1.1.7 and FR2.1.3

3 4

1 freeradius with 2 openldap (multi master)
by François Mehault 02 Jun '09

02 Jun '09

Hi All I have one freeradius and 2 openldap (multi - master). And I want my freeradius use the second openldap if the first crash. So in freeradius I instantiate the module ldap : Ldap ldapmaster { [...] } Ldap ldapbackup { [...] } And in my site-available/default I load the two modules. If my two openldap are alive, authentication succeed, but if one of them fall, authentication failed, so like this I have a « AND » between modules, and not a « OR » like I would. I don't know if I am really clear, i don't speak very well, sorry. So If some understand the problem that I try to describe and if you know how I can fix my problem, could you help me please ? thanks, Regards, François

3 6

Re: stress test or performance test result
by Nizar Zulmi 02 Jun '09

02 Jun '09

i do test my RADIUS using EvoLynx load test, do you using this also..??please just send me your result, it just to comparing my result test to know does my result is categories on fast result or slow..and it also to show my lecture that anyone has did stress test with Evolynx radius test and got accurate result. --- On Mon, 6/1/09, Marinko Tarlac <mangia81(a)gmail.com> wrote: From: Marinko Tarlac <mangia81(a)gmail.com> Subject: Re: stress test or performance test result To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Monday, June 1, 2009, 5:08 PM Hi there Right now I'm working on some tests but results won't be ready for publishing until next week. Right now I noticed that default 5.0.45 mysql who goes with RH/CentOS Fedora is very slow... Specially with innodb tables... On Mon, Jun 1, 2009 at 11:51 AM, Nizar Zulmi <siapa_bilang_emailku_panjang(a)yahoo.com> wrote: dear all..i want to compare my RADIUS server result test with someone who perform stress test or performance test. please anyone has did performance test or stress test send me the result, it could be screenshoot or anything related to. it just for compare. thank you. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -----Inline Attachment Follows----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

3 2

supported encryption
by Rakotomandimby Mihamina 02 Jun '09

02 Jun '09

Hi all, At the moment, our FreeRaduis(v1.x) is looking up users in a PGSQL database, with clear username and clear password in the fields. We would like to switch it to FreeRadius (v2.x) and by the way, crypt (SHA, just crypt(),...) the password in the Database. What encryption is supported by FreeRadius, so that I could just make the PGSQL query with the encrypted password? Thank you.

2 1

Re: stress test or performance test result
by Nizar Zulmi 02 Jun '09

02 Jun '09

i just configure my RADIUS server with standard configuration. iam using intel pentium 4 processors with 512MB of RAM, and this is what i got, to perform stress test i am using Evolynx RADIUS load test??do you test your RADIUS with this tool??this the result i got setting and parameter Komputer 1 Server Test parameter Value Server Addres 192.168.0.1 Connection Number 2 userID Usertest1 Request Setting Non Stop Password Test1 Packet to send Auth Request Auth port 1812 Time 300 second Accounting Port 1813 Komputer 2 Server host 192.168.0.1 Connection Number 2 userID Usertest2 Request Setting Non Stop Password Test2 Packet to send Auth Request Auth port 1812 Time 300 second Accounting Port 1813 result Komputer 1 Server Test Result Value Server Addres 192.168.0.1 Request Count 100305 userID Usertest1 Accept Count 100303 Password Test1 Reject Count 0 Auth port 1812 RequestDrop 2 Accounting Port Performance/second 363 Komputer 2 Server host 192.168.0.1 Request Count 101158 userID Usertest2 Accept Count 101154 Password Test2 Reject Count 0 Auth port 1812 RequestDrop 4 Accounting Port Performance/second 386 Total performance 749 appreciate for your reply RegardNizar --- On Tue, 6/2/09, Sajeewa Warnakulasuriya <sajeewaw(a)ispone.com.au> wrote: From: Sajeewa Warnakulasuriya <sajeewaw(a)ispone.com.au> Subject: Re: stress test or performance test result To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Tuesday, June 2, 2009, 5:05 AM Hi, If you can let us know of any modifications you have done to make it faster would greatly be appreciated. We are currently in the process of testing free radius as well. At the moment with a mysql db backend we are processing around 400 - 500 requests per sec. Regards, Sajeewa Warnakulasuriya Systems Development Manager ispONE is a wholesale ISP built to help internet access resellers and independent ISPs to compete in the Australian marketplace through ONE Brand, ONE Provider, ONE Solution. Level 14 520 Collins Street Melbourne 3000 VIC Phone: 1300 663 400 Fax: 1300 665 400 E-Mail: sajeewaw(a)ispone.com.au Web: http://www.ispone.com.au/ On Mon, 1 Jun 2009, Marinko Tarlac wrote: > Hi there > > Right now I'm working on some tests but results won't be ready for > publishing until next week. > Right now I noticed that default 5.0.45 mysql who goes with RH/CentOS Fedora > is very slow... Specially with innodb tables... > > > > On Mon, Jun 1, 2009 at 11:51 AM, Nizar Zulmi < > siapa_bilang_emailku_panjang(a)yahoo.com> wrote: > >> dear all.. >> >> i want to compare my RADIUS server result test with someone who perform >> stress test or performance test. please anyone has did performance test or >> stress test send me the result, it could be screenshoot or anything related >> to. >> >> it just for compare. >> >> >> thank you. >> >> >> >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Re: Members of two groups
by Mike Loosbrock 01 Jun '09

01 Jun '09

On Mon, Jun 1, 2009 at 7:53 AM, Andrew Paternoster <andrew(a)gpk.net.au>wrote: > > Hi List > > Sorry if this is a simple problem i have been pulling my hair out for 3 > days. I running Freeradius 2.1.6 and its all working great. Ecept for my > users that are members of 2 groups. I have been reading on the net and it > looks like it can be done but for the life of me i can not get it to work > The only grop that applies is the lowest priorty. The system just seems to > ingor the rest of the list. The strange this is that if i run the SQL querys > it looks like it pulling the right data back but not adding each attibute to > the logon only the first one. I have moved the prioritys around and it works > will all of them but only one at a time and only the lowest priority. > Are you using the Fall-Through attribute in your radgroupcheck and radgroupreply tables? If not, only attributes for the highest priority (first) group are applied: http://wiki.freeradius.org/Rlm_sql Mike Loosbrock Bethel University Network Services 651-638-6723

2 1

stress test or performance test result
by Nizar Zulmi 01 Jun '09

01 Jun '09

dear all..i want to compare my RADIUS server result test with someone who perform stress test or performance test. please anyone has did performance test or stress test send me the result, it could be screenshoot or anything related to.it just for compare. thank you.

3 2

Failed to link to module 'rlm_exec': /usr/local/lib/rlm_exec.a: invalid ELF header
by Nakul Deshpande 01 Jun '09

01 Jun '09

Hi, When I give the command radiusd –X start, i get the the message: radiusd.conf[1600] Failed to link to module 'rlm_exec': /usr/local/lib/rlm_exec.a: invalid ELF header I have read the previous posts and tried to install different packages. I know that this is a issue with Linux/Debian and not a Freeradius issue. But if anybody has faced this problem and has been able link the “rlm_exec” module, please do let me know. Thanks, Nakul Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/freeradius/freeradius.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib radiusd.conf[1600] Failed to link to module 'rlm_exec': /usr/local/lib/rlm_exec.a: invalid ELF header

1 0

Building a test tool
by Vinit Karandikar 01 Jun '09

01 Jun '09

Hello folks, I'm new to Free Radius and would like to use it to build a test tool for testing a AAA server. I'd like the test tool to simulate (say) 10 network elements that talk to a AAA server - using threads on different ports that are controlled by the main thread. Some of these will initiate traffic to the AAA server (like the one simulating the PDSN). Others will receive traffic and talk back to the AAA server (like the one simulating the Pre-paid Server). I'm sure I'm not going to find something like this in the wild. So I'm planning to write code to do the above. I was wondering if there are bits of code that I can shamelessly pilfer from or use as a starting point. Any tips are plenty welcome... Thanks in advance to all, -Vinit

2 1

conditional acct proxy?
by Fajar A. Nugraha 01 Jun '09

01 Jun '09

Is it possible to proxy certain acct packets only? For example, I want to forward acct start and stop packets to another radius server, but I don't want to forward interim-update packets. -- Fajar

1 0