R: Postgress SQL connections

[Massimiliano Tarquini]

We are using the same freeradius as a proxy and it works fine running onto a
different machine.
The proxy auth the outer EAP-TTLS then asks to the radius to auth the inner.

It is connected at the same postgres server as the radius, but it works
fine. After a few time of inactivity (no auth requests incoming) the proxy
try to auth the inner with the radius, the radius accept the auth request,
try to query the database. At this point the radius starts logging 

> Sat Dec 13 16:20:01 2008 : Error: WARNING: Unresponsive child for request
> 11657, in module sql component authorize

All the connections to the database are up, no lock onto the databse tables
are detected, but the database server works fine with the proxy.

>The connections *exist*, but the server is telling you that they are
>not working.
>If the databse is working fine, then the problem is the DB client API.

May be, but why do the proxy works fine?


> We tried to schedule a -HUP signal every 5 minutes, but it has non effect.

  >The DB client API will likely re-try on interrupt signals.

What do you mean?

There is a firewall between the radius and the database (not between the
proxy and the database). May the firewall cause the problem?

Thanks for all
Max


4IT S.r.l.
Massimiliano Tarquini | Amministratore unico

---------------------------------------------------------

Via Udine 30-36, 00161 Roma 

Phone +39 06 97601680

Mobile +39 392 9660669

Fax +39 06 97601683

m.tarquini at 4it.it
www.4it.it
“Il presente messaggio e gli eventuali allegati sono di natura
confidenziale.  Qualora vi fosse pervenuto per
errore, vi preghiamo di cancellarlo immediatamente dal vostro sistema e di
avvisare il mittente. Grazie.”
“This electronic mail transmission and any accompanying attachments contain
confidential information. If you
have received this communication in error, please immediately delete the
E-mail and either notify the sender. 
Thank you.”
 
 


-----Messaggio originale-----
Da: freeradius-users-bounces+m.tarquini=4it.it at lists.freeradius.org
[mailto:freeradius-users-bounces+m.tarquini=4it.it at lists.freeradius.org] Per
conto di Alan DeKok
Inviato: domenica 14 dicembre 2008 18.58
A: FreeRadius users mailing list
Oggetto: Re: Postgress SQL connections

Massimiliano Tarquini wrote:
> We have a full installation on freeradius 2.1.1 using postgreSql 8.1
running
> onto 2 different machines.
> The auth work fine 8we have tested it for two days with a killer script
that
> tests in continuously) but if the proxy

  What proxy?  You haven't explained how you have the network set up.

> stops sending auth requests for a
> few minutes (sometimes 15, sometimes 40), at the first request freeradius
> start malefunctioning.
> Following the log content
> 
>
----------------------------------------------------------------------------
> --------------------------------
> Sat Dec 13 16:19:38 2008 : Error: Discarding duplicate request from client
...
> Sat Dec 13 16:20:01 2008 : Error: WARNING: Unresponsive child for request
> 11657, in module sql component authorize

  That usually means that the database has blocked the server.  The
server is calling the DB client API to get data, and the API isn't
returning.

> Sat Dec 13 16:20:43 2008 : Info: rlm_sql (sql): There are no DB handles to
> use! skipped 0, tried to connect 0

  This happens when all of the DB connections are blocked.

> Which is really strange is that the connections to the database are up and
> the database works fine.

  The connections *exist*, but the server is telling you that they are
not working.

  If the databse is working fine, then the problem is the DB client API.

> After some retry the radius crash.

  See doc/bugs for instructions on what to do when this happens.

> We tried to schedule a -HUP signal every 5 minutes, but it has non effect.

  The DB client API will likely re-try on interrupt signals.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

Nessun virus nel messaggio in arrivo.
Controllato da AVG - http://www.avg.com 
Versione: 8.0.176 / Database dei virus: 270.9.17/1846 -  Data di rilascio:
12/12/2008 18.59