I've put some pre releases of 2.1.12 on the web site: http://git.freeradius.org/pre/ Please let me know if there are any problems. If not, this can become 2.1.12. Alan DeKok.
Hi, it's now running on our most busy server. Both -X and background-multithreaded do their usual job. I do not see any problems so far. That said, I was at that point with 2.1.11 as well, and it caught fire after 48+ hours only. So, there might still be surprises. I'll keep it running under surveillance for the rest of the week. By next Monday, I'll speak up again and let you know if my setup (still) works fine. Greetings, Stefan Winter Am 29.08.2011 16:13, schrieb Alan DeKok:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please let me know if there are any problems. If not, this can become 2.1.12.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
Hi,
it's now running on our most busy server. Both -X and background-multithreaded do their usual job. I do not see any problems so far.
That said, I was at that point with 2.1.11 as well, and it caught fire after 48+ hours only. So, there might still be surprises. I'll keep it running under surveillance for the rest of the week. By next Monday, I'll speak up again and let you know if my setup (still) works fine.
Keeps on running like Forest Gump. Stefan
Greetings,
Stefan Winter
Am 29.08.2011 16:13, schrieb Alan DeKok:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please let me know if there are any problems. If not, this can become 2.1.12.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
Alan DeKok <aland@deployingradius.com> wrote:
I've put some pre releases of 2.1.12 on the web site:
Priming up my end for a burn in... Cheers -- Alexander Clouter .sigmonster says: And on the seventh day, He exited from append mode.
Alexander Clouter <alex@digriz.org.uk> wrote:
I've put some pre releases of 2.1.12 on the web site:
Priming up my end for a burn in...
24 hours later, still churning happily. Running 2.1.12 (bfe2c025). Cheers -- Alexander Clouter .sigmonster says: The only constant is change.
40,000 authentications in about 6 and a half hours. I use eap, eap-peap, ldap, mschap, files, sql (mysql), proxy, and postauth mostly. No problems. The files and sql modules are where I have my wildest modifications, but that is that not much compared to what some people on this list are doing. I use the eap cach and configure the eap/mschap with "send_error = yes". No problems seen. My first impression is that the server is doing a cleaner job of managing child processes. My platform is CentOS 5.6 with standard packages except Samba and Freeradius.
On 29/08/2011 15:13, Alan DeKok wrote:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please let me know if there are any problems. If not, this can become 2.1.12.
All seems good so far. -James radmin> show version FreeRADIUS Version 2.1.12, for host i686-pc-linux-gnu, built on Aug 30 2011 at 01:08:47 radmin> show uptime Up since Thu Sep 1 04:02:20 2011 radmin> stats client auth requests 419006 responses 432061 accepts 56219 rejects 4154 challenges 371688 dup 44 invalid 0 malformed 0 bad_signature 0 dropped 65 unknown_types 0 radmin> stats client acct requests 93500 responses 93499 dup 0 invalid 0 malformed 0 bad_signature 0 dropped 0 unknown_types 0
Alan DeKok <aland@deployingradius.com> wrote:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please let me know if there are any problems. If not, this can become 2.1.12.
Something handy to add if it is not too late. We suffered a power failure today which caused our 802.1X/MAC-auth clients to surge their accounting traffic. All due to the following in post-auth: ---- # defaults update reply { [snipped] Acct-Interim-Interval := 3600 } ---- Would be handy to change Acct-Interim-Interval to something like: ---- update reply { Acct-Interim-Interval := 3000 + %{rand:1200} } ---- This would give me Acct-Interim-Interval set to 1hr+-10mins. As it is set now, I just got 1MB of journal recorded to file accounting data landing on my systems :) Cheers -- Alexander Clouter .sigmonster says: The chief cause of problems is solutions. -- Eric Sevareid
Would be handy to change Acct-Interim-Interval to something like: ---- update reply { Acct-Interim-Interval := 3000 + %{rand:1200} } ----
This would give me Acct-Interim-Interval set to 1hr+-10mins.
As it is set now, I just got 1MB of journal recorded to file accounting data landing on my systems :)
Are you suggesting adding a rand xlat? I guess it'd be useful to add some fuzz to interim update intervals. But there are many other options for fuzz other than rand. For example... if("%{%{NAS-IP-Address}:-%{Packet-Src-Ip-Address}}" =~ /([0-9]{1,3})[.]([0-9]{1,3})$/){ update control { Tmp-Integer-0 = "%{expr:((%{1}*1000)+%{2})%%2000}" } } -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org RADIUS - Half the complexity of Diameter
Been running a week now, and the prerelease still looks good here as well. Bjørn
FWIW, found this in ./freeradius-server-2.1.12/src/main/auth.c 502c502 < #ifdef WITH_POXT_PROXY_AUTHORIZE ---
#ifdef WITH_POST_PROXY_AUTHORIZE
On Aug 29, 2011, at 7:13 AM, Alan DeKok wrote:
I've put some pre releases of 2.1.12 on the web site:
http://git.freeradius.org/pre/
Please let me know if there are any problems. If not, this can become 2.1.12.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (9)
-
Alan Buxey -
Alan DeKok -
Alexander Clouter -
Arran Cudbard-Bell -
Bjørn Mork -
Bruce Nunn -
James J J Hooper -
Jim Madden -
Stefan Winter