Generating timing stats for ntlm_auth

[Matthew Newton]

On Tue, Oct 15, 2013 at 04:18:45PM +0100, Martin Ubank wrote:
> Thanks for your reply Alan.
> However, I've not been able to find the exec timeout setting.
> In which configuration file or module will I find it?

Looks like it's hardcoded to 10s in the source (although it
is probably easy to make it configurable). Unless I'm missing
something, which wouldn't be the first time.

Matthew



> -----Original Message-----
> From: freeradius-users-bounces+martin.ubank=uwe.ac.uk at lists.freeradius.org [mailto:freeradius-users-bounces+martin.ubank=uwe.ac.uk at lists.freeradius.org] On Behalf Of Alan DeKok
> Sent: 15 October 2013 12:54
> To: FreeRadius users mailing list
> Subject: Re: Generating timing stats for ntlm_auth
> 
> Martin Ubank wrote:
> > As reported to Alan (at eduroam-uk-support), we are also seeing load problems at peak times with similar/identical error messages as those reported in this thread.
> > We are running FreeRadius 2.2.0 on two CentOS 6 VMs, with Kerberos 1.8.2-3.el6 & Samba and Winbind 3.5.6-86.el6.
> 
>   Hmm... it could be an ntlm_auth issue.  Maybe moving to pipes as Phil
> suggested would help.
> 
>  In any case, it's not new in 2.2.1.  So I think it's time to release 2.2.2.
> 
> > Is there anything we can do here at UWE to help identify the general problem?
> 
>   Set the exec timeout to 1s.  It should take less than a second to run
> ntlm_auth.  If it takes more than a second, something is wrong.  And
> you're probably better off dropping the connection than waiting 30s for
> a timeout.
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>