We have configured our radius servers to send accounting information to an Oracle database. It works our really well except when the oraclce database server isn't available (I.E. maintenance or cold backups). The radius process dies when it loses connectivity to the oracle server. Has anyone else noticed this problem? Any suggestions on how to make radiusd more robust and able to recover from this? Thanks, Brian Dourty System Administrator - Team Lead IAT Services University of Missouri - Columbia 573-882-1035
I've had similar problems with other AAA-related logging systems where it was important to have the records, but not necessarily immediately. My solution was to sent the accounting data to another more easily supportable resource, like syslog, and then use a system like syslog-ng to aggregate it all to the db server and run a shell/perl script periodically to import the records to the db. You loose a little bit of speed, but if raw speed isn't that important, it's more easily supportable and depending on you systems, possibly more robust. Thanks. Dan On Mon, 2007-01-22 at 10:41 -0500, Dourty, Brian R. (IATS) wrote:
We have configured our radius servers to send accounting information to an Oracle database. It works our really well except when the oraclce database server isn’t available (I.E. maintenance or cold backups). The radius process dies when it loses connectivity to the oracle server. Has anyone else noticed this problem? Any suggestions on how to make radiusd more robust and able to recover from this?
Thanks,
Brian Dourty
System Administrator - Team Lead
IAT Services
University of Missouri - Columbia
573-882-1035
plain text document attachment (ATT5655462.txt), "ATT5655462.txt" - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Dan Geist | dan.geist@cox.com | (404) 269-6822 Cox Communications - Engineering Security
Dourty, Brian R. (IATS) wrote:
We have configured our radius servers to send accounting information to an Oracle database. It works our really well except when the oraclce database server isn’t available (I.E. maintenance or cold backups). The radius process dies when it loses connectivity to the oracle server. Has anyone else noticed this problem? Any suggestions on how to make radiusd more robust and able to recover from this?
That's something that shouldn't be happening, of course. The main difficulty is that the developers don't have oracle systems installed, and therefore find the problem somewhat difficult to debug. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Allen, Is there anyone in particular I could work with on this? I'd be happy to contribute my time and development oracle server to the cause. Brian Dourty System Administrator - Team Lead IAT Services University of Missouri - Columbia 573-882-1035 -----Original Message----- From: freeradius-users-bounces+dourtyb=missouri.edu@lists.freeradius.org [mailto:freeradius-users-bounces+dourtyb=missouri.edu@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Monday, January 22, 2007 2:28 PM To: FreeRadius users mailing list Subject: Re: radiusd and oracle accounting Dourty, Brian R. (IATS) wrote:
We have configured our radius servers to send accounting information to an Oracle database. It works our really well except when the oraclce database server isn’t available (I.E. maintenance or cold backups). The radius process dies when it loses connectivity to the oracle server. Has anyone else noticed this problem? Any suggestions on how to make radiusd more robust and able to recover from this?
That's something that shouldn't be happening, of course. The main difficulty is that the developers don't have oracle systems installed, and therefore find the problem somewhat difficult to debug. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
We had a system using Ciscosecure ACS that wrote the accounting records to textfiles in a directory. A perl script using Dirwatch monitored the directory and triggered a stored procedure in oracle which inserted the data. If oracle wasn't available, the data just accumulated. Once oracle was up again, the queue was processed. Another solution would be to have an oracle replica on the radius box. It can continue to insert records until the main oracle DB returns, and processed the replication queue. Regards, Frank Ranner ________________________________ From: freeradius-users-bounces+frank.ranner=defence.gov.au@lists.freeradius.or g [mailto:freeradius-users-bounces+frank.ranner=defence.gov.au@lists.freer adius.org] On Behalf Of Dourty, Brian R. (IATS) Sent: Tuesday, 23 January 2007 02:41 To: freeradius-users@lists.freeradius.org Subject: radiusd and oracle accounting We have configured our radius servers to send accounting information to an Oracle database. It works our really well except when the oraclce database server isn't available (I.E. maintenance or cold backups). The radius process dies when it loses connectivity to the oracle server. Has anyone else noticed this problem? Any suggestions on how to make radiusd more robust and able to recover from this? Thanks, Brian Dourty System Administrator - Team Lead IAT Services University of Missouri - Columbia 573-882-1035
participants (4)
-
Alan DeKok -
Dan Geist -
Dourty, Brian R. (IATS) -
Ranner, Frank MR