Hello.
Latest version of the FR doesn't work under Debian GNU/Linux when NPTL
used. I have the next configuration:
NAS, FR, MySql to store all attributes. RADGROUPREPLY table contain:
Exec-Program-Wait := /etc/freeradius/webadmin/webadmin-auth
This script used for authenificate users instead using RADCHECK
attributes.
Example log when we run: #LD_ASSUME_KERNEL=2.4.1 /usr/sbin/freeradius
-fxx (LD_ASSUME_KERNEL=2.4.1 used to disable NPTL in glibc library
calls). Run FR in single thread mode (-s) also solve all problems.
...........skipped...........
radius_xlat: '/etc/freeradius/webadmin/webadmin-auth'
Exec-Program: /etc/freeradius/webadmin/webadmin-auth
Exec-Program output:
Exec-Program: returned: 1
Delaying request 10 for 1 seconds
Finished request 10
Going to the next request
Thread 1 waiting to be assigned a request
rad_recv: Access-Request packet from host 80.237.68.1:1645, id=232,
length=76
Sending Access-Reject of id 232 to 80.237.68.1:1645
Reply-Message := "\r\nAccess denied (external check failed)."
--- Walking the entire request list ---
Waking up in 1 seconds...
But when we run freeradius with NPTL enabled we have instability
(sometimes requests are OK, but more frequently they failed).
...........skipped...........
radius_xlat: '/etc/freeradius/webadmin/webadmin-auth'
Exec-Program: /etc/freeradius/webadmin/webadmin-auth
Re-wait 2
Exec-Program output:
rad_recv: Access-Request packet from host 80.237.68.1:1645, id=238,
length=76
Discarding duplicate request from client c2650:1645 - ID: 238 due to
unfinished request 3
--- Walking the entire request list ---
radius_xlat: '/etc/freeradius/webadmin/webadmin-auth'
Threads: total/active/spare threads = 5/1/4
--- Walking the entire request list ---
Waking up in 5 seconds...
rad_recv: Access-Request packet from host 80.237.68.1:1645, id=238,
length=76
Discarding duplicate request from client c2650:1645 - ID: 238 due to
unfinished request 3
Waking up in 5 seconds...
--- Walking the entire request list ---
Waking up in 5 seconds...
rad_recv: Access-Request packet from host 80.237.68.1:1645, id=238,
length=76
Discarding duplicate request from client c2650:1645 - ID: 238 due to
unfinished request 3
Waking up in 5 seconds...
--- Walking the entire request list ---
Waking up in 5 seconds...
--- Walking the entire request list ---
Waking up in 5 seconds...
--- Walking the entire request list ---
Waking up in 5 seconds...
--- Walking the entire request list ---
WARNING: Unresponsive child (id 1119775664) for request 3
Server rejecting request 3.
Waking up in 5 seconds...
System configuration: Debian GNU/Linux unstable, FR (cvs snapshot from
20.05.2004), glibc 2.3.2.ds1, linux kernel 2.6.6.
---
Sergei Golod. SIG11-RIPE. Computers Technologies Ltd. Tobolsk, Russia.
http://www.tob.ru Tobolsk : +7 345 1151200, Mobile : +7 902 8503999
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
