FR-1.1.3 on solaris10 strange things

[Alexander Serkin]

Alan DeKok пишет:
> Alexander Serkin <als at cell.ru> wrote:
>> May be someone could give an advice how to debug the problem while the 
>> server will not be in production?
> 
>   Attach to it with gdb, and see what it's doing.
> 

Got some debugs on this. The problem does not depend on solaris version 
- both 9 and 10 have the same effects.
The effect rises up when the request is proxied to other server and this 
server does not answer:

rad_recv: Access-Request packet from host 127.0.0.1:34653, id=69, length=81
         User-Name = "mobile"
         User-Password = "internet"
         Calling-Station-Id = "999999999999999"
         Framed-Protocol = PPP
         Service-Type = Framed-User
         NAS-IP-Address = 212.119.97.85
rad_lowerpair:  User-Name now 'mobile'
   Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
   modcall[authorize]: module "preprocess" returns ok for request 0
   modcall[authorize]: module "chap" returns noop for request 0
     rlm_realm: No '@' in User-Name = "mobile", looking up realm NULL
     rlm_realm: Found realm "NULL"
     rlm_realm: Adding Stripped-User-Name = "mobile"
     rlm_realm: Proxying request from user mobile to realm NULL
     rlm_realm: Adding Realm = "NULL"
     rlm_realm: Authentication realm is LOCAL.
   modcall[authorize]: module "suffix" returns noop for request 0
     users: Matched entry DEFAULT at line 156
   modcall[authorize]: module "files" returns ok for request 0
radius_xlat:  'mobile'
rlm_sql (sqlauth): sql_set_user escaped user --> 'mobile'
radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE 
Username = 'mobile' ORDER BY id'
rlm_sql (sqlauth): Reserving sql socket id: 4
radius_xlat:  'SELECT 
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op 
  FROM radgroupcheck,usergroup WHERE (usergroup.Username = 'mobile' or 
usergroup.CLID = '999999999999999') AND usergroup.GroupName = 
radgroupcheck.GroupName ORDER BY usergroup.PRIORITY,radgroupcheck.id'
radius_xlat:  'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE 
Username = 'mobile' ORDER BY id'
radius_xlat:  'SELECT 
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op 
  FROM radgroupreply,usergroup WHERE (usergroup.Username = 'mobile' OR 
usergroup.CLID = '999999999999999') AND usergroup.GroupName = 
radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sqlauth): Released sql socket id: 4
   modcall[authorize]: module "sqlauth" returns ok for request 0
   modcall[authorize]: module "mschap" returns noop for request 0
modcall: leaving group authorize (returns ok) for request 0
Sending Access-Request of id 0 to 212.119.96.99 port 1812
         User-Name = "mobile"
         User-Password = "internet"
         Calling-Station-Id = "999999999999999"
         Framed-Protocol = PPP
         Service-Type = Framed-User
         NAS-IP-Address = 212.119.97.85
         Proxy-State = 0x3639
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 0 seconds...

After that the srings Walking/Waking rapidly appear during dead_time 
configured in proxy.conf and at the same time the process takes about 
50% of CPU on slow netra 1120 (2x440MHz) and up to 99% on Netra-240 
(1x1GHz). After dead_time we see:

Waking up in 0 seconds...
--- Walking the entire request list ---
Rejecting request 0 due to lack of any response from home server 
localhost:34653
Server rejecting request 0.
Waking up in 0 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 69 to 127.0.0.1 port 34653
Cleaning up request 0 ID 69 with timestamp 45596c9d
Nothing to do.  Sleeping until we see a request.
--- Walking the entire request list ---
Nothing to do.  Sleeping until we see a request.


I do not understand why it says "home server localhost" while the 
request was proxied to home server 212.119.96.99?

May be i have some incorrect configuration in the proxy.conf?

proxy.conf:

Proxy server {
         synchronous = no
         retry_delay = 5
         retry_count = 3
         dead_time = 15
         default_fallback = no
}
realm DUMMY {
         type            = radius
         authhost        = 212.119.96.99:1812
         accthost        = 212.119.96.99:1813
         secret          = secret
         nostrip
}



-- 
Sincerely Yours,
Alexander