Alan Thanks for the reply. Sorry about my English, I'm still learning. I have a Red Hat Enterprise Linux Server release 7.9 server and I have package freeradius-3.0.13-15.el7.x86_64 already installed and latest version installed for rhel-7-server-rpms repository I have installed openldap-2.4.44-23.el7_9.x86_64 as well. The LDAP server is active at all times, but when the FR starts receiving connections from NAS, the cpu process grows up and those errors start to be written to the radius log. On Wed, Jul 7, 2021 at 7:00 PM Alan DeKok <aland@deployingradius.com> wrote:
On Jul 7, 2021, at 4:21 PM, Nicolás Ciuffolotti via Freeradius-Users < freeradius-users@lists.freeradius.org> wrote:
Hi Thank you in advance for your help I'm using freeradius-3.0.13-15
You should really upgrade. 3.0.13 is many years out of date.
with ldap like DB.
LDAP "like"? Or actual LDAP? Which LDAP server are you using?
I've 2 servers listening to 1812 and 1813, 3 BNG like NAS for AAA. The problem is that setting the AAA in this BNG, start this messages and the server doesn't respond:
Wed Jul 7 15:57:17 2021 : WARNING: (363) WARNING: Module rlm_ldap became unblocked
There is no reason for the LDAP server to not respond to FreeRADIUS. If the LDAP server is down, then FreeRADIUS can't do anything.
Fix your LDAP server so that it replies to FreeRADIUS. Nothing else will fix the problem.
Wed Jul 7 15:57:17 2021 : Error: 7 requests have been waiting in the processing queue for 36 seconds. Check that all databases are running properly! Wed Jul 7 15:57:17 2021 : Error: (951) Ignoring duplicate packet from client SMMAIJR01 port 61631 - ID: 247 due to unfinished request in component <core> module <queue>
That message is a side effect of the main problem: the LDAP server is down.
I don't know the problem, but the cpu of the ldap process grows up 80-90% and the BNGs inform timeout or unrecheable. What could be the reason for this?
The LDAP server is down. Fix that.
And upgrade to a version released in the past 4 years.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html