Performance Problems ntlm_auth <-> Active Directory under heavy load

Matthew Newton mcn4 at
Thu Mar 26 15:24:23 CET 2015

On Thu, Mar 26, 2015 at 10:00:45AM -0400, Arran Cudbard-Bell wrote:
> > On 26 Mar 2015, at 09:45, Alan DeKok <aland at> wrote:
> > 
> > On Mar 26, 2015, at 8:23 AM, Louis Munro <lmunro at> wrote:
> >> Let me just express my interest in seeing this for FR2.
> > 
> >  It’s hard.  v3 has a connection pool API.  v2 doesn’t.
> >  Adding the connection pool to the MSCHAP module was ~100 LoC.
> >  It would be > 1000 LoC for v2.
> I am absolutely against back-porting this feature to version 2.
> It's an incentive for people to upgrade to v3.0.x. Which is
> especially useful for Universities where and upgrade might be
> hard to justify otherwise.

Agreed, v3 only it is. I will be using it myself as a reason to
push for an upgrade (which is essentially down to me having to
rewrite the config... sigh).

If it weren't for the connection pool it would be trivial. But as
Alan said, that is not trivial to do, and I'm not taking any time
on working on old versions. This has taken four months already. :)

If anyone really wants it in v2, then older patches that work are
out there somewhere. But no support from here if you choose to go
that route, I'm afraid.



Matthew Newton, Ph.D. <mcn4 at>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at>

More information about the Freeradius-Users mailing list