We are using the same freeradius as a proxy and it works fine running onto a different machine. The proxy auth the outer EAP-TTLS then asks to the radius to auth the inner. It is connected at the same postgres server as the radius, but it works fine. After a few time of inactivity (no auth requests incoming) the proxy try to auth the inner with the radius, the radius accept the auth request, try to query the database. At this point the radius starts logging
Sat Dec 13 16:20:01 2008 : Error: WARNING: Unresponsive child for request 11657, in module sql component authorize
All the connections to the database are up, no lock onto the databse tables are detected, but the database server works fine with the proxy.
The connections *exist*, but the server is telling you that they are not working. If the databse is working fine, then the problem is the DB client API.
May be, but why do the proxy works fine?
We tried to schedule a -HUP signal every 5 minutes, but it has non effect.
The DB client API will likely re-try on interrupt signals.
What do you mean? There is a firewall between the radius and the database (not between the proxy and the database). May the firewall cause the problem? Thanks for all Max 4IT S.r.l. Massimiliano Tarquini | Amministratore unico --------------------------------------------------------- Via Udine 30-36, 00161 Roma Phone +39 06 97601680 Mobile +39 392 9660669 Fax +39 06 97601683 m.tarquini@4it.it www.4it.it Il presente messaggio e gli eventuali allegati sono di natura confidenziale. Qualora vi fosse pervenuto per errore, vi preghiamo di cancellarlo immediatamente dal vostro sistema e di avvisare il mittente. Grazie. This electronic mail transmission and any accompanying attachments contain confidential information. If you have received this communication in error, please immediately delete the E-mail and either notify the sender. Thank you. -----Messaggio originale----- Da: freeradius-users-bounces+m.tarquini=4it.it@lists.freeradius.org [mailto:freeradius-users-bounces+m.tarquini=4it.it@lists.freeradius.org] Per conto di Alan DeKok Inviato: domenica 14 dicembre 2008 18.58 A: FreeRadius users mailing list Oggetto: Re: Postgress SQL connections Massimiliano Tarquini wrote:
We have a full installation on freeradius 2.1.1 using postgreSql 8.1 running onto 2 different machines. The auth work fine 8we have tested it for two days with a killer script that tests in continuously) but if the proxy
What proxy? You haven't explained how you have the network set up.
stops sending auth requests for a few minutes (sometimes 15, sometimes 40), at the first request freeradius start malefunctioning. Following the log content
----------------------------------------------------------------------------
-------------------------------- Sat Dec 13 16:19:38 2008 : Error: Discarding duplicate request from client ... Sat Dec 13 16:20:01 2008 : Error: WARNING: Unresponsive child for request 11657, in module sql component authorize
That usually means that the database has blocked the server. The server is calling the DB client API to get data, and the API isn't returning.
Sat Dec 13 16:20:43 2008 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0
This happens when all of the DB connections are blocked.
Which is really strange is that the connections to the database are up and the database works fine.
The connections *exist*, but the server is telling you that they are not working. If the databse is working fine, then the problem is the DB client API.
After some retry the radius crash.
See doc/bugs for instructions on what to do when this happens.
We tried to schedule a -HUP signal every 5 minutes, but it has non effect.
The DB client API will likely re-try on interrupt signals. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Nessun virus nel messaggio in arrivo. Controllato da AVG - http://www.avg.com Versione: 8.0.176 / Database dei virus: 270.9.17/1846 - Data di rilascio: 12/12/2008 18.59