Hello, On Wed, 20 Nov 2013, Alan DeKok wrote:
Polish wrote:
I set up radsec (tls site) in FR3. On start works well, but after a while (20-30 minutes) I see following in logs: Info: Ignoring new connection due to client max_connections (16)
Do you have idle timeouts and connection lifetimes set?
Yes
and FR3 rejects new incoming tls radsec connections.
Ok, I set up client max_connetions = 0 and now after while I get: Info: Ignoring new connection due to socket max_connections
Often I see in logs reconnection: Info: ... closing socket auth from client (195.113.18 7.22, 56256) -> (*, 2083, virtual-server=default) Info: ... adding new socket auth from client (195.113 .187.22, 53889) -> (*, 2083, virtual-server=default)
I watch at netstat -t and get max 3 connections to port 2083: one in ESTABLISHED state and two in TIME_WAIT state.
Client is radiator.
What should I set up?
Please try the v3.0.x branch from github.com. I've pushed some fixes which should help.
Alan DeKok.
You are rigth, git version works well. Is possible suppress following logs records? I mean that all debuging options are turned off. : (0) Thu Nov 21 16:38:23 2013 : Debug: Requiring client certificate (0) Thu Nov 21 16:38:23 2013 : Debug: Initiate (0) Thu Nov 21 16:38:23 2013 : Debug: (other): before/accept initialization (0) Thu Nov 21 16:38:23 2013 : Debug: TLS_accept: before/accept initialization (0) Thu Nov 21 16:38:23 2013 : Debug: TLS_accept: SSLv3 read client hello A (0) Thu Nov 21 16:38:23 2013 : Debug: TLS_accept: SSLv3 write server hello A (0) Thu Nov 21 16:38:23 2013 : Debug: TLS_accept: SSLv3 write certificate A (0) Thu Nov 21 16:38:23 2013 : Debug: TLS_accept: SSLv3 write key exchange A (0) Thu Nov 21 16:38:23 2013 : Debug: TLS_accept: SSLv3 write certificate request A Thank you Pavel Polacek