Hello folks,

We're running FreeRADIUS 0.8 on a Solaris 2.8 box, and we're planning to
replace all our radius servers (old Livingston 1.16 and Lucent 2.1) with
FreeRADIUS. Right now we've written some modules to replace the
dedicated accounting servers, to start with. 

Anyway, our problem is that - put under live traffic - the server (called
Wedge) outputs an error every other minute or so. It receives about 20-25
requests per second, and this is what the log says:

Tue Dec 10 15:30:55 2002 : Info: Listening on IP address *, ports 2000/udp
and 2001/udp.
Tue Dec 10 15:30:55 2002 : Info: Ready to process requests.
Tue Dec 10 15:31:37 2002 : Error: Discarding new request from client
dooku:1814 - ID: 10 due to live request 814
Tue Dec 10 15:32:51 2002 : Error: Discarding new request from client
dooku:1814 - ID: 139 due to live request 1991
Tue Dec 10 15:32:53 2002 : Error: Discarding new request from client
dooku:1814 - ID: 202 due to live request 1942
Tue Dec 10 15:34:20 2002 : Error: Discarding new request from client
dooku:1814 - ID: 71 due to live request 3993
Tue Dec 10 15:35:27 2002 : Error: Discarding new request from client
dooku:1814 - ID: 13 due to live request 6046

The server called "dooku" is a proxy receiving acct/auth packets
(that one is also a FreeRADIUS 0.8) from ANOTHER server called XXXXX
(radius server unknown), and on "dooku" the output is:

Tue Dec 10 15:59:12 2002: Error: Dropping conflicting packet from client
XXXXX - ID: 35 due to unfinished request 1893794
Tue Dec 10 15:59:12 2002: Error: Dropping conflicting packet from client
XXXXX - ID: 37 due to unfinished request 1893796
Tue Dec 10 15:59:12 2002: Error: Dropping conflicting packet from client
XXXXX - ID: 38 due to unfinished request
... lots of lines

And then it says:

Tue Dec 10 15:59:15 2002: Proxy: marking accounting server localhost:2001
for realm xxxx.yyyy.zz dead
Tue Dec 10 15:59:15 2002: Proxy: marking accounting server palpatine:2001
for realm aaa.bb.cc dead

it marks all "accounting" servers as dead, but localhost and palpatine are
authentication servers, the accounting packets goes to our server Wedge.

I have disabled all accounting modules, to limit the troubleshooting
somewhat. What does "Discarding new request from client xxxx .. due to
live request 123" exactly mean? it hasn't sent an response to request 123
yet?

Anyone have a clue? 

/ Thomas

--
"Hard work often pays off after time, 
 But laziness always pays off now."


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to