Help troubleshooting No EAP session matching...

[Matthew Newton]

On Thu, Sep 15, 2016 at 10:16:19AM -0400, Alan DeKok wrote:
> On Sep 15, 2016, at 9:57 AM, Dave Aldwinckle <daldwinc at uwaterloo.ca> wrote:
> > During peak times, we have about 8K wireless logins per minute, for extended periods. We have 6 wireless controllers, from which the Access-Requests are sent. Due to the high load, I am unable to run the server with -X, because it gets crushed while running single threaded. I can use radmin, but I'm not sure what to set the debug condition to.
> > 
> > I don't see any errors about child processes being hung, or winbind/ntlm_auth taking too long.
> 
>   Yeah, ntlm_auth typically maxes out at 100 to 200 authentications per second.  That's likely the problem.

In my experience, around 30-40... but does depend on hardware.

Could try using libwbclient with recent FreeRADIUS - see
winbind_username/winbind_domain in mods-available/mschap. It might
help; it should be a bit quicker than calling out to ntlm_auth.

Recent versions of Samba should be better as well IIRC.

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at leicester.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>