We are running freeradius 3.0.11 on CentOS 6.7. Recently we experienced a few radius process hangs - it didn't handle any request and in the log appeared only a lot of: Thu Mar 3 08:48:24 2016 : Error: (187540) Ignoring duplicate packet from client CM port 1814 - ID: 118 due to unfinished request in component post-auth module eduroam_log Thu Mar 3 08:48:33 2016 : Error: (187814) Ignoring duplicate packet from client CM port 1814 - ID: 152 due to unfinished request in component <core> module <queue> Our investigation showed that these problems start after requests containing a "strange" username Wed Mar 2 08:01:52 2016 : Auth: (127068) Login incorrect: [юз] (from client AP-UMK port 20526 cli 88-A7-3C-DB-35-02) Thu Mar 3 08:48:14 2016 : Auth: (187534) Login incorrect: [በᑱ] (from client AP-SPEC port 36865 cli 24-0A-64-1F-C1-D3) Thu Mar 3 09:38:19 2016 : Auth: (53871) Login incorrect: [юз] (from client AP-UMK port 20613 cli 88-A7-3C-DB-35-02) It turned out that it is caused by linelog module. After we removed %{User-Name} from this line Access-Reject = "%S eduroam-auth#ORG=%{request:Realm}#USER=%{User-Name}#CSI=%{%{Calling-Station-Id}:-Unknown Caller Id}#NAS=%{%{request:NAS-IP-Address}:-No NAS IP}#CUI=%{%{reply:Chargeable-User-Identity}:-Unknown}#MSG=%{%{reply:Reply-Message}:-No Failure Reason}#RESULT=FAIL#" the problem disappeared and strange usernames are handled smoothly. It looks like a linelog bug. Maja -- Maja Gorecka-Wolniewicz mgw@umk.pl Uczelniane Centrum Information & Communication Informatyczne Technology Centre Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574
On Mar 3, 2016, at 8:28 AM, Maja Wolniewicz <mgw@umk.pl> wrote:
We are running freeradius 3.0.11 on CentOS 6.7. Recently we experienced a few radius process hangs - it didn't handle any request and in the log appeared only a lot of:
Thu Mar 3 08:48:24 2016 : Error: (187540) Ignoring duplicate packet from client CM port 1814 - ID: 118 due to unfinished request in component post-auth module eduroam_log Thu Mar 3 08:48:33 2016 : Error: (187814) Ignoring duplicate packet from client CM port 1814 - ID: 152 due to unfinished request in component <core> module <queue>
A fix has already been pushed to the v3.0.x branch. It will be in 3.0.12. Alan DeKok.
participants (2)
-
Alan DeKok -
Maja Wolniewicz