ULTRA IMPORTANT! Proxy - Assertion failed in listen.c, line 558 error
HI, Please, this is a very important problem that is affecting thousands of customers of mine: I have 2 realms for send proxy requests (foo.com and bar.net) If the proxy server foo.com goes down (for whatever reason) this happens: rad_recv: Access-Request packet from host 192.168.1.1 port 1385, id=21, length=60 User-Name = "user@foo.com" User-Password = "password" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 20 rlm_realm: Looking up realm "foo.com" for User-Name = "user@foo.com" rlm_realm: Found realm "foo.com" rlm_realm: Proxying request from user user to realm foo.com rlm_realm: Adding Realm = "foo.com" rlm_realm: Preparing to proxy authentication request to realm "foo.com" rlm_eap: No EAP-Message, not doing EAP modcall: group authorize returns noop for request 20 Sending Access-Request of id 16 to foo.com port 1645 User-Name = "user@foo.com" User-Password = "password" NAS-IP-Address = 192.168.1.1 Proxy-State = 0x3231 --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... rad_recv: Access-Request packet from host 192.168.1.1 port 1385, id=21, length=60 Sending duplicate proxied request to home server foo.com port 1645 - ID: 16 Assertion failed in listen.c, line 558 Aborted Then my radiusd dies and I need to bring it up again. This is incredibly critical because if domain foo.com dies, my freeradius server dies too, and in consequence, I can't proxy requests to bar.net (which have more than 21.000,00 users!) Thanks!
"Guilherme Franco" <guilhermefranco@gmail.com> wrote:
If the proxy server foo.com goes down (for whatever reason) this happens: ... Sending duplicate proxied request to home server foo.com port 1645 - ID: 16 Assertion failed in listen.c, line 558
Are you sure you're not HUP'ing the server? I asked that before, and you didn't respond. The current CVS code has an issue where it doesn't deal well with HUPs. I've been planning on addressing it for a while, but maybe now is the time to look at it. And can you get a core file? That may help. See doc/bugs. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Sorry Mr. Alan, for not answering the HUP question before. No, I'm not HUP'ing the server. The server is a minimal RHEL AS 4 r3 installation, only with gcc added. Nothing installed except freeradius-snapshot-20060920. Is there any other way to generate core dumps without reinstalling freeradius with ./configure --enable-developer? If not, it will take only a couple of minutes to get it recompiled again. Thank you! On 9/20/06, Alan DeKok <aland@deployingradius.com> wrote:
"Guilherme Franco" <guilhermefranco@gmail.com> wrote:
If the proxy server foo.com goes down (for whatever reason) this happens: ... Sending duplicate proxied request to home server foo.com port 1645 - ID: 16 Assertion failed in listen.c, line 558
Are you sure you're not HUP'ing the server? I asked that before, and you didn't respond.
The current CVS code has an issue where it doesn't deal well with HUPs. I've been planning on addressing it for a while, but maybe now is the time to look at it.
And can you get a core file? That may help. See doc/bugs.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello, Because I need the sqlippool. I was using 1.1.2 and when 1.1.3 was released, I was in a rush to deliver a working environment to the client. 1.1.3 broke somethings for me. Because of that I started to use CVS nightly builds. Until now, no other problem has appeared besides the listen.c one. Thanks. On 9/20/06, A.L.M.Buxey@lboro.ac.uk <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Nothing installed except freeradius-snapshot-20060920.
critical service for thousands of users and you're using a developmental snapshot version? What about using a standard release, eg 1.1.3 ?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Guilherme Franco" <guilhermefranco@gmail.com> wrote:
Sending duplicate proxied request to home server foo.com port 1645 - ID: 16 Assertion failed in listen.c, line 558
This is now fixed in CVS. You'll have to do a "cvs update" and re-build to get the fix. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Thank you very much! On 9/27/06, Alan DeKok <aland@deployingradius.com> wrote:
"Guilherme Franco" <guilhermefranco@gmail.com> wrote:
Sending duplicate proxied request to home server foo.com port 1645 - ID: 16 Assertion failed in listen.c, line 558
This is now fixed in CVS. You'll have to do a "cvs update" and re-build to get the fix.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
By the way, http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/ does not work: Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administrator, webmaster@freeradius.org and inform them of the time the error occurred, and anything you might have done that may have caused the error. More information about this error may be available in the server error log. Microsoft-IIS/5.0 Server at us.freeradius.org Port 80 On 9/27/06, Guilherme Franco <guilhermefranco@gmail.com> wrote:
Thank you very much!
On 9/27/06, Alan DeKok <aland@deployingradius.com> wrote:
"Guilherme Franco" <guilhermefranco@gmail.com> wrote:
Sending duplicate proxied request to home server foo.com port 1645 - ID: 16 Assertion failed in listen.c, line 558
This is now fixed in CVS. You'll have to do a "cvs update" and re-build to get the fix.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Guilherme Franco