Small problem with authentication

[Mark Jones]

Here are more entries from yesterdays logs. i don't think its a quinsidensce




Jan 23 08:26:45 radius freeradius[28054]: rlm_unix: [mjones]: invalid 
password
Jan 23 08:26:45 radius freeradius[28054]: Login incorrect: [mjones/mjones] 
(from client 216.8.137.103 port 0)
Jan 23 08:26:46 radius freeradius[28056]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
--
Jan 23 09:49:46 radius freeradius[2289]: Login incorrect: [mjones/mjones] 
(from client 216.8.137.103 port 0)
Jan 23 09:49:48 radius freeradius[2292]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
--
Jan 23 10:32:46 radius freeradius[6262]: rlm_unix: [mjones]: invalid 
password
Jan 23 10:32:46 radius freeradius[6262]: Login incorrect: [mjones/xxxxx] 
(from client 216.8.137.103 port 0)
Jan 23 10:32:46 radius freeradius[6260]: Login incorrect: [kjrumble/xxxxxx] 
(from client 216.8.136.106 port 0 cli 
ip:64.230.198.9:64.230.196.49:524c:393b:68f7:4f83:108974)
Jan 23 10:32:47 radius freeradius[6261]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
--
Jan 23 14:10:47 radius freeradius[23198]: rlm_unix: [mjones]: invalid 
password
Jan 23 14:10:47 radius freeradius[23198]: Login incorrect: [mjones/xxxxx] 
(from client 216.8.137.103 port 0)
Jan 23 14:10:48 radius freeradius[23199]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
--
Jan 23 14:42:47 radius freeradius[29576]: rlm_unix: [mjones]: invalid 
password
Jan 23 14:42:47 radius freeradius[29576]: Login incorrect: [mjones/xxxxxx] 
(from client 216.8.137.103 port 0)
Jan 23 14:42:49 radius freeradius[29577]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
--
Jan 23 14:51:47 radius freeradius[29575]: Login incorrect: [mjones/xxxxxx] 
(from client 216.8.137.103 port 0)
Jan 23 14:51:47 radius freeradius[29574]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
--
Jan 23 23:09:49 radius freeradius[9667]: rlm_unix: [mjones]: invalid 
password
Jan 23 23:09:49 radius freeradius[9667]: Login incorrect: [mjones/xxxxxx] 
(from client 216.8.137.103 port 0)
Jan 23 23:09:49 radius freeradius[9666]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
--
Jan 24 03:05:50 radius freeradius[9664]: rlm_unix: [mjones]: invalid 
password
Jan 24 03:05:50 radius freeradius[9664]: Login incorrect: [mjones/xxxxxx] 
(from client 216.8.137.103 port 0)
Jan 24 03:05:52 radius freeradius[9666]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
--
Jan 24 04:48:51 radius freeradius[9664]: rlm_unix: [mjones]: invalid 
password
Jan 24 04:48:51 radius freeradius[9664]: Login incorrect: [mjones/xxxxx] 
(from client 216.8.137.103 port 0)
Jan 24 04:48:53 radius freeradius[9662]: rlm_detail: Failed to aquire 
filelock for /usr/local/var/log/radius/radacct/detail-combined, giving up
----- Original Message ----- 
From: "Alan DeKok" <aland at deployingradius.com>
To: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
Sent: Wednesday, January 24, 2007 2:35 AM
Subject: Re: Small problem with authentication


> Mark Jones wrote:
>> That is an exccert from our log this morning. Two users were denied
>> access even though they supplied the correct username and password. This
>> happens all the time exactly a few seconds prior to the filelock error.
>> The file lock error is being generated because I use radrelay. I am
>> running version 1.14.
>
>  The thing I don't understand is that the two messages are unrelated.
> The detail module isn't the unix module.  Accounting is not
> authentication...
>
>  If the messages appear close together a lot, that is suspicious.  But
> I would think it's because of some *other* issue that's affecting both
> authentication & accounting, like the CPU load spiking on the machine.
>
>  Alan DeKok.
> --
>  http://deployingradius.com       - The web site of the book
>  http://deployingradius.com/blog/ - The blog
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
>
>
>
> -- 
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.432 / Virus Database: 268.17.8/648 - Release Date: 1/23/2007 
> 11:04 AM
>
>