RADIUS stops responding after a while
I've got strange behavior on y FR, need to find the way to prevent it, and find out what caused it. I've just went to my radius server and found out that it doesn't want to handle requests.. I restarted it in debug and it told me that SQL module is unknown. (was working fine for 1 month) I restarted again in debug and now it went OK and works fine, but this thing is not acceptable in the field . So does any one knows what could cause such a behavior (not accepting requests, due to module malfunction) and more importantly is there any way to monitor the server functionality? Let's say something like send testing request each 30min or something and if server doesn't reply send email notification? Thanks!
"Alex M" <radiussupport@lrcommunications.net> wrote:
I've just went to my radius server and found out that it doesn't want to handle requests.. I restarted it in debug and it told me that SQL module is unknown.
Who edited the config file since the last time the server started?
So does any one knows what could cause such a behavior (not accepting requests, due to module malfunction) and more importantly is there any way to monitor the server functionality? Let's say something like send testing request each 30min or something and if server doesn't reply send email notification?
It should be trivial to write a shell script to do that. Alan DeKok.
-----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Alan DeKok Sent: Friday, April 07, 2006 1:53 AM To: FreeRadius users mailing list Subject: Re: RADIUS stops responding after a while "Alex M" <radiussupport@lrcommunications.net> wrote:
I've just went to my radius server and found out that it doesn't want to handle requests.. I restarted it in debug and it told me that SQL module is unknown.
= Who edited the config file since the last time the server started? I've edited the script long time ago, but haven't change anything before the frees
So does any one knows what could cause such a behavior (not accepting requests, due to module malfunction) and more importantly is there any way to monitor the server functionality? Let's say something like send testing request each 30min or something and if server doesn't reply send email notification?
=It should be trivial to write a shell script to do that. I think I will do that in php Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I've got strange behavior on y FR, need to find the way to prevent it, and find out what caused it.
That is something several people are experiencing and it is being looked into. Any help in debugging would be appreciated, I guess, since the problem is indeed hard to spot. Check the mailing list archives of topic: "Version 1.1.1 stops responding".
I've just went to my radius server and found out that it doesn't want to handle requests.. I restarted it in debug and it told me that SQL module is unknown. (was working fine for 1 month) I restarted again in debug and now it went OK and works fine, but this thing is not acceptable in the field .
Interesting.
So does any one knows what could cause such a behavior (not accepting requests, due to module malfunction) and more importantly is there any way to monitor the server functionality? Let's say something like send testing request each 30min or something and if server doesn't reply send email notification?
You could use Nagios and its RADIUS module. That's what we do and it works like a charm. You can even say sth like: if the probe failed twice, do a stop/start of service and see if it helps; if not, send a notification. Greetings, Stefan Winter -- Stefan WINTER RESTENA Foundation - Réseau Téléinformatique de l'Education Nationale et de la Recherche R&D Engineer 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg email: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
Hi!
I've just went to my radius server and found out that it doesn't want to handle requests.. I restarted it in debug and it told me that SQL module is unknown. (was working fine for 1 month) I restarted again in debug and now it went OK and works fine, but this thing is not acceptable in the field .
Are you using mySQL? It would be great if you could tell us the *exact* version number. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
I'm using MySQL 4.1.7 and it is located on remote server (not even on the same subnet as the radius) -----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Stefan Winter Sent: Friday, April 07, 2006 5:22 AM To: FreeRadius users mailing list Subject: Re: RADIUS stops responding after a while Hi!
I've just went to my radius server and found out that it doesn't want to handle requests.. I restarted it in debug and it told me that SQL module is unknown. (was working fine for 1 month) I restarted again in debug and now it went OK and works fine, but this thing is not acceptable in the field .
Are you using mySQL? It would be great if you could tell us the *exact* version number. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Fri 07 Apr 2006 20:57, Alex M wrote:
I'm using MySQL 4.1.7 and it is located on remote server (not even on the same subnet as the radius)
Do you have a statefull firewall (Checkpoint etc) between radius and the sql server? That can cause timeout problems accessing the database, although not problems finding a module.. -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
Yea got one firewall in between... but if it is time out I assume it should just drop like couple requests and then work fine, but in my case it just stop responding for everything.... -----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Peter Nixon Sent: Friday, April 07, 2006 2:46 PM To: FreeRadius users mailing list Subject: Re: RADIUS stops responding after a while On Fri 07 Apr 2006 20:57, Alex M wrote:
I'm using MySQL 4.1.7 and it is located on remote server (not even on the same subnet as the radius)
Do you have a statefull firewall (Checkpoint etc) between radius and the sql server? That can cause timeout problems accessing the database, although not problems finding a module.. -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Well, a statefull firewall that has forgotten the state will hang ALL sql connections that are open... -Peter On Fri 07 Apr 2006 21:59, Alex M wrote:
Yea got one firewall in between... but if it is time out I assume it should just drop like couple requests and then work fine, but in my case it just stop responding for everything....
-----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradiu s .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.f r eeradius.org] On Behalf Of Peter Nixon Sent: Friday, April 07, 2006 2:46 PM To: FreeRadius users mailing list Subject: Re: RADIUS stops responding after a while
On Fri 07 Apr 2006 20:57, Alex M wrote:
I'm using MySQL 4.1.7 and it is located on remote server (not even on the same subnet as the radius)
Do you have a statefull firewall (Checkpoint etc) between radius and the sql
server? That can cause timeout problems accessing the database, although not
problems finding a module..
-- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
"Alex M" <radiussupport@lrcommunications.net> wrote:
I'm using MySQL 4.1.7 and it is located on remote server (not even on the same subnet as the radius)
I have seen it before where a firewall drops state, and it looks like the SQL server is down. New connections go through fine, but old connections are dead. One way to test this would be to edit rlm_sql so that it opens a new connection to the SQL server for *every* request. That would be slower than what it does now, but it might work. I would also suggest putting a test SQL server on the same subnet as the RADIUS server. Havr it do nothing more than log data, and if connections to it are OK, the problem is most likely the firewall. Alan DeKok.
What do you mean by "Have it do nothing more than log data"? And how would I do that? -----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Alan DeKok Sent: Saturday, April 08, 2006 1:24 PM To: FreeRadius users mailing list Subject: Re: RADIUS stops responding after a while "Alex M" <radiussupport@lrcommunications.net> wrote:
I'm using MySQL 4.1.7 and it is located on remote server (not even on the same subnet as the radius)
I have seen it before where a firewall drops state, and it looks like the SQL server is down. New connections go through fine, but old connections are dead. One way to test this would be to edit rlm_sql so that it opens a new connection to the SQL server for *every* request. That would be slower than what it does now, but it might work. I would also suggest putting a test SQL server on the same subnet as the RADIUS server. Havr it do nothing more than log data, and if connections to it are OK, the problem is most likely the firewall. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Alex M" <radiussupport@lrcommunications.net> wrote:
What do you mean by "Have it do nothing more than log data"? And how would I do that?
You can configure the SQL module in either the "authorize" section, where it will affect user authentication, or in the "accounting" section, where it won't affect anything. Alan DEKok.
Ok, will do that and post back with results Thanks! -----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Alan DeKok Sent: Saturday, April 08, 2006 3:54 PM To: FreeRadius users mailing list Subject: Re: RADIUS stops responding after a while "Alex M" <radiussupport@lrcommunications.net> wrote:
What do you mean by "Have it do nothing more than log data"? And how would I do that?
You can configure the SQL module in either the "authorize" section, where it will affect user authentication, or in the "accounting" section, where it won't affect anything. Alan DEKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Alex M -
Peter Nixon -
Stefan Winter