linelog problem
Maja Wolniewicz
mgw at umk.pl
Thu Mar 3 14:28:45 CET 2016
We are running freeradius 3.0.11 on CentOS 6.7.
Recently we experienced a few radius process hangs - it didn't handle
any request and in the log
appeared only a lot of:
Thu Mar 3 08:48:24 2016 : Error: (187540) Ignoring duplicate packet
from client CM port 1814 - ID: 118 due to unfinished request in
component post-auth module eduroam_log
Thu Mar 3 08:48:33 2016 : Error: (187814) Ignoring duplicate packet
from client CM port 1814 - ID: 152 due to unfinished request in
component <core> module <queue>
Our investigation showed that these problems start after requests
containing a "strange" username
Wed Mar 2 08:01:52 2016 : Auth: (127068) Login incorrect: [юз] (from
client AP-UMK port 20526 cli 88-A7-3C-DB-35-02)
Thu Mar 3 08:48:14 2016 : Auth: (187534) Login incorrect: [በᑱ] (from
client AP-SPEC port 36865 cli 24-0A-64-1F-C1-D3)
Thu Mar 3 09:38:19 2016 : Auth: (53871) Login incorrect: [юз] (from
client AP-UMK port 20613 cli 88-A7-3C-DB-35-02)
It turned out that it is caused by linelog module. After we removed
%{User-Name} from this line
Access-Reject = "%S
eduroam-auth#ORG=%{request:Realm}#USER=%{User-Name}#CSI=%{%{Calling-Station-Id}:-Unknown
Caller Id}#NAS=%{%{request:NAS-IP-Address}:-No NAS
IP}#CUI=%{%{reply:Chargeable-User-Identity}:-Unknown}#MSG=%{%{reply:Reply-Message}:-No
Failure Reason}#RESULT=FAIL#"
the problem disappeared and strange usernames are handled smoothly.
It looks like a linelog bug.
Maja
--
Maja Gorecka-Wolniewicz mgw at umk.pl
Uczelniane Centrum Information & Communication
Informatyczne Technology Centre
Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University
Coll. Maximum, pl. Rapackiego 1, 87-100 Torun, Poland
tel.: +48 56-611-27-40 fax: +48 56-622-18-50 tel. kom.: +48-693032574
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5087 bytes
Desc: Kryptograficzna sygnatura S/MIME
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160303/64c2eefb/attachment.bin>
More information about the Freeradius-Users
mailing list