On Thu, Sep 15, 2016 at 10:16:19AM -0400, Alan DeKok wrote:
On Sep 15, 2016, at 9:57 AM, Dave Aldwinckle <daldwinc@uwaterloo.ca> wrote:
During peak times, we have about 8K wireless logins per minute, for extended periods. We have 6 wireless controllers, from which the Access-Requests are sent. Due to the high load, I am unable to run the server with -X, because it gets crushed while running single threaded. I can use radmin, but I'm not sure what to set the debug condition to.
I don't see any errors about child processes being hung, or winbind/ntlm_auth taking too long.
Yeah, ntlm_auth typically maxes out at 100 to 200 authentications per second. That's likely the problem.
In my experience, around 30-40... but does depend on hardware. Could try using libwbclient with recent FreeRADIUS - see winbind_username/winbind_domain in mods-available/mschap. It might help; it should be a bit quicker than calling out to ntlm_auth. Recent versions of Samba should be better as well IIRC. Matthew -- Matthew Newton, Ph.D. <mcn4@leicester.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>