Which version do you running? Which db engine do you use?
OpenLDAP 2.1.17 Postgres 7.3.2 freeradius-20030430 w/patches from the list.
I'm in process of configuring FR snapshot of 2003-04-24 (keeping it up-to-date, so let's say it's a current snapshot), so able to experiment as extremely as I can.
I use files+LDAP (OpenLDAP 2.0.25) in autz, LDAP in auth, 2 sqlcounters in post-auth (blame me, developers!), and detail+sql (PostgreSQL 7.3.2, on the same machine) in acct and sql in session. I also have check items like Attribute := `%{sql:...}` for some users.
I don't read any attributes out of SQL. The sql server doesn't really even do full accounting, it just logs the in/outbytes, nas, address, timestamp and such. I use this data for calculating quotas. All of attributes come from openldap.
Let's dig a little: 1. radius running OK, handling access- & acct- requests right. 2. I kill -9 main postgres process, so no new conns can be done, then I also kill -9 one of five postgres processes serving radiusd. Most of Access-Requests are still handled fine. For others one of the following occurs: a) sqlcounters treat database error as if accumulated resource (daily/monthly session time) was unconsumed; b) group session returns fail, so radius has nothing to do but consider user isn't online; c) `%{sql:...}` expands to empty string. Accept or Reject only depends on valid user credentials. As for accounting, unhandled requests successfully failed over to detail. 3. I kill the rest postgres processes. Now all of Access-Requests are processed the way described in (2). 4. Once I restart postgres, those go away immediately, radius continues normal operation.
So I can't see any BIG problem in my case.
I need to do more testing, I've had radius just die in production which is not good. I never had a lick of trouble with it until I started doing sql accounting. It had been running against ldap for a year before made the switch.
For now I have to many other things going on to really start working on the testing, hopefully I'll be able to test next week as I am going to try and toss the latest CVS into prod on Thursday.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
