Hello Deepak -
On Fri, 21 Jul 2000, Deepak Shrestha wrote:
> Hi Hugh,
> I have configured the Radiator Radius successfully in AIX4.3.1 but it is
> taking a lot of resources ( 80-90% of CPU by perl-radiator ). This causes
> Radiator to stop responding to "Start" accounting packets though it
> responds to the "Stop" accounting packets. I need to "kill -HUP
> radiusd.pid" to have it accept the logins again. And everything resumes to
> normal once again until it stops accepting logins again. Though when it is
> in operation it runs well.
> I have gone through the Performance & Tuning Section of the manual as
> well.
>
> Here are my radius.cfg and users file:
>
> #radius.cfg
>
> Foreground
> #LogStdout
> #Trace 3
> PidFile %L/radiusd.pid
> AuthPort 1645
> AcctPort 1646
> LogDir /var/adm/radacct/Radiator
> DbDir /usr/local/etc/raddb
> #LogFile %L/logfile-%d
> LogFile
>
> DictionaryFile %D/dictionary
> #DictionaryFile %D/dictionary.cisco
> #DictionaryFile %D/dictionary.ascend
> #DictionaryFile %D/dictionary.ascend2
> #DictionaryFile %D/dictionary.usr.merit
>
> #unknownMIB .iso.org.dod.internet.private.enterprises.307
> #unknownOffs 29
> #unknownHole 2
> SnmpgetProg /usr/local/bin/snmpget
>
>
> <Client 202.52.251.2>
> Secret pass
> NasType unknown
> </Client>
> .
> ..
> ..
>
> <Client 202.52.255.8>
> Secret pass
> NasType unknown
> <Client 202.52.238.22>
> Secret pass
> NasType unknown
> </Client>
>
>
> <Realm>
> <AuthBy FILE>
> Filename %D/users
> </AuthBy>
>
> <AuthBy SYSTEM>
> Identifier System
> </AuthBy>
>
> AcctLogFileName %L/detail
> # PasswordLogFileName %L/password.log
>
> </Realm>
>
> <Realm mos.com.np>
> RewriteUsername s/^([^@]+).*/$1/
> <AuthBy FILE>
> Filename %D/users
> </AuthBy>
>
> <AuthBy SYSTEM>
> Identifier System
> </AuthBy>
>
> AcctLogFileName %L/detail
> # PasswordLogFileName %L/password.log
>
> </Realm>
>
> <Realm DEFAULT>
> <AuthBy RADIUS>
> Host 202.52.255.47
> Secret mypass
> AuthPort 1745
> AcctPort 1746
> Retries 3
> RetryTimeout 5
> </AuthBy>
> </Realm>
>
> #<SessionDatabase DBM>
> # Filename %L/online
> #</SessionDatabase>
Thanks for sending all the information. I can't see anything wrong with
Radiator or the way it is running. I suspect you may have a problem with Perl.
What version of Perl are you using and where did it come from? You are probably
better off downloading the latest version and building it directly on the
machine you are going to run it on.
BTW - you can tidy up your configuration file like this:
#radius.cfg
Foreground
#LogStdout
#Trace 3
PidFile %L/radiusd.pid
AuthPort 1645
AcctPort 1646
LogDir /var/adm/radacct/Radiator
DbDir /usr/local/etc/raddb
#LogFile %L/logfile-%d
LogFile
DictionaryFile %D/dictionary
#DictionaryFile %D/dictionary.cisco
#DictionaryFile %D/dictionary.ascend
#DictionaryFile %D/dictionary.ascend2
#DictionaryFile %D/dictionary.usr.merit
#unknownMIB .iso.org.dod.internet.private.enterprises.307
#unknownOffs 29
#unknownHole 2
SnmpgetProg /usr/local/bin/snmpget
<Client 202.52.251.2>
Secret pass
NasType unknown
</Client>
..
..
..
<Client 202.52.255.8>
Secret pass
NasType unknown
</Client>
<Client 202.52.238.22>
Secret pass
NasType unknown
</Client>
# configure AuthBy clauses with Identifiers
<AuthBy FILE>
Identifier Check_FILE
Filename %D/users
</AuthBy>
<AuthBy SYSTEM>
Identifier System
</AuthBy>
<AuthBy RADIUS>
Identifier Check_RADIUS
Host 202.52.255.47
Secret mypass
AuthPort 1745
AcctPort 1746
Retries 3
RetryTimeout 5
</AuthBy>
# configure Realms
<Realm>
AuthBy Check_FILE
AcctLogFileName %L/detail
# PasswordLogFileName %L/password.log
</Realm>
<Realm mos.com.np>
RewriteUsername s/^([^@]+).*/$1/
AuthBy Check_FILE
AcctLogFileName %L/detail
# PasswordLogFileName %L/password.log
</Realm>
<Realm DEFAULT>
AuthBy Check_RADIUS
</Realm>
#<SessionDatabase DBM>
# Filename %L/online
#</SessionDatabase>
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
