EAP session matching the State variable.

Sebastian Heil s3b0 at gmx.de
Mon Feb 11 10:13:03 CET 2008


> Sebastian Heil wrote:
> > Hmm, i have the same error in 2.0.1. 
> > i did kind of a eap-tls-stress-test with a perl script based on the
> rad_eap_test script. there are a lot of "login oks" in my log-file, but about
> 5-10% are "login incorrect" with the same error-message as above. 
> > 
> > i did three stress-tests... here the result:
> > 
> > Login OK      Login incorrect
> > 5290	      281
> 
>   If the State variable is mostly zero, then it's a problem... even if
> authentication succeeds.
> 
>   Alan DeKok.
> 

Hi,
i don't know, if it's my stupid configuration or the freeradius, that produces following:

i have two virtual machines (both suse linux 10). on one machine, the freeradius-server is running, on the other machine, i have my little perl-script, that uses rad_eap_test.

perl-script:
---------------------
#!/usr/bin/perl

$i = 0;

while ($i<=50000) {
$i++;
&radtest;
}

sub radtest {
$radiustest = `rad_eap_test -H ******* -P 1812 -S testing123 -u sl90001 -m IEEE8021X -e TLS -j /etc/raddb/certs/sl90001_chain.pem -k /etc/raddb/certs/host_sl90001_chain.pem -a /tmp/rootcerts.pem`;
print $radiustest;
}
------------------

if i run the script only one-time, the state-variable looks something like this:

State = 0x066227990f682a3467daaa2d38adf01c


If i run the script 3 or 4 times at the same time on my virtual-server, the freeradius-server gets some problems... after some time, the server produces such state-variables:
example:
State = 0x0000000000010d000000000000000000

Then, the server switches back to "normal" state-variables...
example:
State = 0x0000000003040db7c026e2b769757300

and then back to:
State = 0x0000000004050d000000000000000000

if the complete debug is helpful, alan, i can send it to you...

is there anything, i can try to test?

Sebastian


-- 
GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS.
Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail



More information about the Freeradius-Users mailing list