linelog problem

Maja Wolniewicz mgw at umk.pl
Thu Mar 3 14:28:45 CET 2016


We are running freeradius 3.0.11 on CentOS 6.7.
Recently we experienced a few radius process  hangs - it didn't handle 
any request and in the log
appeared only a lot of:

Thu Mar  3 08:48:24 2016 : Error: (187540) Ignoring duplicate packet 
from client CM port 1814 - ID: 118 due to unfinished request in 
component post-auth module eduroam_log
Thu Mar  3 08:48:33 2016 : Error: (187814) Ignoring duplicate packet 
from client CM port 1814 - ID: 152 due to unfinished request in 
component <core> module <queue>

Our investigation showed that these problems start after requests 
containing a "strange" username
Wed Mar  2 08:01:52 2016 : Auth: (127068) Login incorrect: [юз] (from 
client AP-UMK port 20526 cli 88-A7-3C-DB-35-02)
Thu Mar  3 08:48:14 2016 : Auth: (187534) Login incorrect: [በᑱ] (from 
client AP-SPEC port 36865 cli 24-0A-64-1F-C1-D3)
Thu Mar  3 09:38:19 2016 : Auth: (53871) Login incorrect: [юз] (from 
client AP-UMK port 20613 cli 88-A7-3C-DB-35-02)

It turned out that it is caused by linelog module. After we removed 
%{User-Name} from this line

Access-Reject = "%S 
eduroam-auth#ORG=%{request:Realm}#USER=%{User-Name}#CSI=%{%{Calling-Station-Id}:-Unknown 
Caller Id}#NAS=%{%{request:NAS-IP-Address}:-No NAS 
IP}#CUI=%{%{reply:Chargeable-User-Identity}:-Unknown}#MSG=%{%{reply:Reply-Message}:-No 
Failure Reason}#RESULT=FAIL#"

the problem disappeared and strange usernames are handled smoothly.

It looks like a linelog bug.

Maja

-- 
Maja Gorecka-Wolniewicz          mgw at umk.pl
Uczelniane Centrum               Information & Communication
Informatyczne                    Technology Centre
Uniwersytet Mikolaja Kopernika   Nicolaus Copernicus University
Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland
tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5087 bytes
Desc: Kryptograficzna sygnatura S/MIME
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160303/64c2eefb/attachment.bin>


More information about the Freeradius-Users mailing list