On Tue, Oct 15, 2013 at 04:18:45PM +0100, Martin Ubank wrote:
Thanks for your reply Alan. However, I've not been able to find the exec timeout setting. In which configuration file or module will I find it?
Looks like it's hardcoded to 10s in the source (although it is probably easy to make it configurable). Unless I'm missing something, which wouldn't be the first time. Matthew
-----Original Message----- From: freeradius-users-bounces+martin.ubank=uwe.ac.uk@lists.freeradius.org [mailto:freeradius-users-bounces+martin.ubank=uwe.ac.uk@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 15 October 2013 12:54 To: FreeRadius users mailing list Subject: Re: Generating timing stats for ntlm_auth
Martin Ubank wrote:
As reported to Alan (at eduroam-uk-support), we are also seeing load problems at peak times with similar/identical error messages as those reported in this thread. We are running FreeRadius 2.2.0 on two CentOS 6 VMs, with Kerberos 1.8.2-3.el6 & Samba and Winbind 3.5.6-86.el6.
Hmm... it could be an ntlm_auth issue. Maybe moving to pipes as Phil suggested would help.
In any case, it's not new in 2.2.1. So I think it's time to release 2.2.2.
Is there anything we can do here at UWE to help identify the general problem?
Set the exec timeout to 1s. It should take less than a second to run ntlm_auth. If it takes more than a second, something is wrong. And you're probably better off dropping the connection than waiting 30s for a timeout.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>