Child is hung for request … message
Hi, I've just downloaded,compiled and installed the latest version of 2.2 (2.2.1?) from git.freeradius.org. Installed it on an internal server and things seemed to work o.k. I then upgraded another server that deals with our external ( eduroam) connectivity and within a few mins am seeing Thu Mar 7 10:25:58 2013 : Error: WARNING: Unresponsive child for request 16, in component <core> module <thread> Thu Mar 7 10:25:59 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:26:00 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:26:03 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:26:06 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:26:11 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:26:16 2013 : Auth: Login OK: [lw09ea@leeds.ac.uk] (from client nasaaa2 port 0 cli 40-A6-D9-B9-A8-A6) Thu Mar 7 10:26:19 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:26:26 2013 : Auth: Login OK: [zszz5238@kclad.ds.kcl.ac.uk] (from client nasaaa2 port 0 cli 58-1F-AA-53-87-B4) Thu Mar 7 10:26:30 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:26:47 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:27:13 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:27:29 2013 : Auth: Login OK: [nagios@york.ac.uk] (from client systems0 port 0) Thu Mar 7 10:27:51 2013 : Info: WARNING: Child is hung for request 16 in component <core> module <thread>. Thu Mar 7 10:28:18 2013 : Error: Discarding duplicate request from client nasaaa2 port 1814 - ID: 255 due to unfinished request 88 Thu Mar 7 10:28:24 2013 : Error: Discarding duplicate request from client nasaaa2 port 1814 - ID: 255 due to unfinished request 88 Thu Mar 7 10:29:04 2013 : Error: WARNING: Unresponsive child for request 88, in component <core> module <thread> Thu Mar 7 10:29:05 2013 : Info: WARNING: Child is hung for request 88 in component <core> module <thread>. Thu Mar 7 10:29:06 2013 : Info: WARNING: Child is hung for request 88 in component <core> module <thread>. Thu Mar 7 10:29:08 2013 : Info: WARNING: Child is hung for request 88 in component <core> module <thread>. Thu Mar 7 10:29:12 2013 : Info: WARNING: Child is hung for request 88 in component <core> module <thread>. Thu Mar 7 10:29:17 2013 : Info: WARNING: Child is hung for request 88 in component <core> module <thread>. Thu Mar 7 10:29:25 2013 : Info: WARNING: Child is hung for request 88 in component <core> module <thread>. Thu Mar 7 10:29:36 2013 : Info: WARNING: Child is hung for request 88 in component <core> module <thread>. The server is basically proxying off auth requests to remote RADIUS servers. Is the above just telling me that the other end is taking a while to reply or is there some underlying issue? Rgds A
On 07.03.2013 11:32, Alex Sharaz wrote:
Hi, I've just downloaded,compiled and installed the latest version of 2.2 (2.2.1?) from git.freeradius.org.
Installed it on an internal server and things seemed to work o.k. I then upgraded another server that deals with our external ( eduroam) connectivity and within a few mins am seeing The server is basically proxying off auth requests to remote RADIUS servers. Is the above just telling me that the other end is taking a while to reply or is there some underlying issue?
Without a debug output it's hard to tell. Please send freeradius -X output. Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier@heliosnet.org
Though you might say that. Running FR in debug mode now A On 7 Mar 2013, at 11:18, Olivier Beytrison <olivier@heliosnet.org> wrote:
On 07.03.2013 11:32, Alex Sharaz wrote:
Hi, I've just downloaded,compiled and installed the latest version of 2.2 (2.2.1?) from git.freeradius.org.
Installed it on an internal server and things seemed to work o.k. I then upgraded another server that deals with our external ( eduroam) connectivity and within a few mins am seeing The server is basically proxying off auth requests to remote RADIUS servers. Is the above just telling me that the other end is taking a while to reply or is there some underlying issue?
Without a debug output it's hard to tell. Please send freeradius -X output.
Olivier -- Olivier Beytrison Network & Security Engineer, HES-SO Fribourg Mail: olivier@heliosnet.org - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 7 Mar 2013, at 06:21, Alex Sharaz <alex.sharaz@york.ac.uk> wrote:
Though you might say that. Running FR in debug mode now A
If you can't reproduce it with -X, try with the -fxxl stdout incantation, -X will also force the server into single threaded mode, and this might be a locking issue. -Arran
Hi,
The server is basically proxying off auth requests to remote RADIUS servers. Is the above just telling me that the other end is taking a while to reply or is there some underlying issue?
what is your retry time set to on the NAS kit? If your kit is expecting a reply in eg 3 seconds...well, a remply from a remote site may take longer. are you using status-server ? I would advise status-server usage in the first instance to ensure that your RADIUS server knows the remote RADIUS is okay and not the issue. alan
On 7 Mar 2013, at 11:36, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
The server is basically proxying off auth requests to remote RADIUS servers. Is the above just telling me that the other end is taking a while to reply or is there some underlying issue?
what is your retry time set to on the NAS kit? If your kit is expecting a reply in eg 3 seconds...well, a remply from a remote site may take longer.
are you using status-server ? I would advise status-server usage in the first instance to ensure that your RADIUS server knows the remote RADIUS is okay and not the issue.
Yup I'm using status server. in local-config/nrps.conf I've now got server_pool eduroam { home_server = eduroam1 home_server = eduroam2 home_server = eduroam0 type = client-port-balance } and home_server eduroam0 { ipaddr = ${eduroam_config.server0} #ipv6addr = ${eduroam_config.server0} secret = ${eduroam_config.secret0} port = 1812 type = auth+acct require_message_authenticator = yes nostrip response_window = 5 zombie_period = 40 revive_interval = 60 status_check = status-server check_interval = 30 num_answers_to_alive = 3 ……... } Rgds Alex
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 7 Mar 2013, at 12:15, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
response_window = 5
thats a little low. the default provided with FreeRADIUS is 20 IIRC - and you need to ensure that theres correlation with the NAS
o.k can't remember where I got that value, suspect it was from a google of an email Thanks A
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alex Sharaz -
Arran Cudbard-Bell -
Olivier Beytrison