Re: monitoring freeradius
Mark Jones wrote: I am not looking to see if radius is failing or not running but as to how many of the options under the thread pool are being used at any given point in time. What does that mean? How many threads are being used? That information isn't currently available. It shouldn't be too hard to add, though. if I run the server with -X then it only runs one thread so that does not tell me what is going on. Also if the cleanup delay is too long so I am hitting the max_requests Why would you set cleanup delay to be longer than 5 seconds? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius
I can't see why I would set it to longer then 5 seconds but some of the comments in the radius.conf file suggest there may be cases when you want it less then that. Which led me to wondering how you could check if you needed to. - Original Message - From: Alan DeKok al...@deployingradius.com To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Wednesday, February 24, 2010 4:45 AM Subject: Re: monitoring freeradius Mark Jones wrote: I am not looking to see if radius is failing or not running but as to how many of the options under the thread pool are being used at any given point in time. What does that mean? How many threads are being used? That information isn't currently available. It shouldn't be too hard to add, though. if I run the server with -X then it only runs one thread so that does not tell me what is going on. Also if the cleanup delay is too long so I am hitting the max_requests Why would you set cleanup delay to be longer than 5 seconds? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius
Le mardi 23 février 2010 à 13:39 -0500, Mark Jones a écrit : How does one go about monitoring freeradius in that to see if it is reaching process limits or max clients etc.. I have made a cacti template, it won't do any sentry upon max-client or process-limit as you asked for. But it may help track access accept/reject... and accounting request. If your interested in it it can be found here http://forums.cacti.net/viewtopic.php?t=29880highlight=freeradius but needs to be tweaked. (It uses radius status request instead of snmp) I know it's not what you asked for , but i thought it could help (And I'd be glad that someone can test it :p) regards If I run it in debug mode it laces limits on it hat are not in normal mode.I know it Is snmp the only way? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius
On Tue, 23 Feb 2010, Mark Jones wrote: How does one go about monitoring freeradius in that to see if it is reaching process limits or max clients etc.. If I run it in debug mode it laces limits on it hat are not in normal mode. Proactive network monitoring with Nagios and check_radius or check_radauth. ~BAS - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius
Mark Jones wrote: How does one go about monitoring freeradius in that to see if it is reaching process limits or max clients etc.. If I run it in debug mode it laces limits on it hat are not in normal mode. Err... what does that mean? For general OS CPU / memory monitoring: see monit. For other RADIUS monitoring... the latest release of Monit includes FreeRADIUS plugins. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius
Sorry was in a hurry and did not notice my spelling mistakes. I am not looking to see if radius is failing or not running but as to how many of the options under the thread pool are being used at any given point in time. if I run the server with -X then it only runs one thread so that does not tell me what is going on. Also if the cleanup delay is too long so I am hitting the max_requests - Original Message - From: Alan DeKok al...@deployingradius.com To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, February 23, 2010 4:17 PM Subject: Re: monitoring freeradius Mark Jones wrote: How does one go about monitoring freeradius in that to see if it is reaching process limits or max clients etc.. If I run it in debug mode it laces limits on it hat are not in normal mode. Err... what does that mean? For general OS CPU / memory monitoring: see monit. For other RADIUS monitoring... the latest release of Monit includes FreeRADIUS plugins. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius with nagios
Mike wrote: All, When trying to use the radauth tool from nagios to monitor freeradius, I get the following in the freeradius log: Error: WARNING: Malformed RADIUS packet from host ... too long (length 18432 maximum 4096) radtest seems to be ok. has anyone else experienced this or knows what is wrong? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html G'day Mike, Fire up wireshark or tcpdump and have a look what's actually in the packets. -- James Wakefield, Unix Administrator, Information Technology Services Division Deakin University, Geelong, Victoria 3217 Australia. Phone: 03 5227 8690 International: +61 3 5227 8690 Fax: 03 5227 8866 International: +61 3 5227 8866 E-mail: [EMAIL PROTECTED] Website: http://www.deakin.edu.au - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius with nagios
On Wed, 17 Jan 2007, Mike wrote: |-All, |-When trying to use the radauth tool from nagios to monitor |-freeradius, I get the following in the freeradius log: |- |-Error: WARNING: Malformed RADIUS packet from host ... too long (length |-18432 maximum 4096) |- |-radtest seems to be ok. has anyone else experienced this or knows |-what is wrong? I know what some monitoring tool I used a while ago (whats up Gold I think) I had to add the Ip of the whatsup server as a NAS to the allowed list with the shared secret to monitor an old livingston radius server. I have not tried with my Freeradius box yet, but I think I might just to see. The FR is not in production as of yet so I'm not worried about it. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius with nagios
Mike wrote: All, When trying to use the radauth tool from nagios to monitor freeradius, I get the following in the freeradius log: Error: WARNING: Malformed RADIUS packet from host ... too long (length 18432 maximum 4096) radtest seems to be ok. has anyone else experienced this or knows what is wrong? I haven't seen it. I note that 18432 is hex 0x7200. I suspect that the NAGIOS people missed a 'htons()' somewhere, and the field should be 0x0072. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: monitoring freeradius with snmp
Title: RE: monitoring freeradius with snmp Ok - thanks I have noticed the following from the output from configure checking for asn1.h,snmp.h,snmp_impl.h... no how can I get configure to look at the directory with these header files in. I'm running Solaris 2.8 Thanks Regards Andy -Original Message- From: [EMAIL PROTECTED] on behalf of Alan DeKok Sent: Tue 9/5/2006 4:28 AM To: FreeRadius users mailing list Subject: Re: monitoring freeradius with snmp Andy Ford [EMAIL PROTECTED] wrote: Thanks for you suggestions. After running configure --with-snmp I noticed (following your notes below) that the '#define WITH_SNMP 1' was missing from autoconf.h. Because configure didn't find the SNMP libraries it needs. So I added the line manually in autoconf.h as ... Which won't work. I downloaded the latest version i.e. freeradius-1.1.2 I also have NET-SNMP version: 5.2.rc3 installed. The server *should* be able to work with net-snmp, especially if you have built net-snmp with ucd-snmp compatibility. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html This e-mail is private and may be confidential and is for the intended recipient only. If misdirected, please notify us by telephone and confirm that it has been deleted from your system and any copies destroyed. If you are not the intended recipient you are strictly prohibited from using, printing, copying, distributing or disseminating this e-mail or any information contained in it. We use reasonable endeavours to virus scan all e-mails leaving the Company but no warranty is given that this e-mail and any attachments are virus free. You should undertake your own virus checking. The right to monitor e-mail communications through our network is reserved by us. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius with snmp
Hi, Ok - thanks I have noticed the following from the output from configure checking for asn1.h,snmp.h,snmp_impl.h... no how can I get configure to look at the directory with these header files in. ./configure --help note the CPPFLAGS option. why are your proper SNMP includes not in the compiler include PATH ? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: monitoring freeradius with snmp
Hi Allan
Thanks for you suggestions.
After running configure --with-snmp I noticed (following your notes
below) that the '#define WITH_SNMP 1' was missing from autoconf.h.
So I added the line manually in autoconf.h as ...
/* Include SNMP subagent */
/* #undef WITH_SNMP */
#define WITH_SNMP 1
... and got a stream of error from 'make'.
Here is a small snippet of the errors.
-- make errors
make[4]: Entering directory `/tmp/freeradius-1.1.2/src/main'
/tmp/freeradius-1.1.2/libtool --mode=compile gcc -g -O2 -D_REENTRANT
-D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I../include
-DHO STINFO=\\ -DRADIUSD_VERSION=\1.1.2\ -c radius_snmp.c rm -f
.libs/radius_snmp.lo gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS
-Wall -D_GNU_SOURCE -DNDEBUG -I../include -DHOSTINFO=\\
-DRADIUSD_VERSION=\1.1.2\ -c radi
us_snmp.c-fPIC -DPIC -o .libs/radius_snmp.lo
In file included from radius_snmp.c:39:
../include/smux.h:60: error: parse error before oid
../include/smux.h:64: error: parse error before oid
../include/smux.h:94: error: parse error before oid
../include/smux.h:94: warning: no semicolon at end of struct or union
../include/smux.h:101: error: parse error before oid
../include/smux.h:101: warning: no semicolon at end of struct or union
../include/smux.h:115: error: parse error before '}' token
../include/smux.h:136: error: parse error before '[' token
--
Obviously I've completely buggered something up.
A little advice would be great.
I downloaded the latest version i.e. freeradius-1.1.2 I also have
NET-SNMP version: 5.2.rc3 installed.
I can see from the list you are a very busy person, so thanks for your
time.
I've attached the complete output from make, along with autoconf.h.
Regards
Andy
-Original Message-
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
us.org] On Behalf Of Alan DeKok
Sent: 04 August 2006 18:16
To: FreeRadius users mailing list
Subject: Re: monitoring freeradius with snmp
Andy Ford [EMAIL PROTECTED] wrote:
1. compiled freeradius with the '--with-snmp' option
Did the configure process find the SNMP information it needed?
Does src/include/autoconf.h have a line like:
#define WITH_SNMP 1
?
2. modified the radiusd.conf file with
snmp = yes
$INCLUDE ${confdir}/snmp.conf
When the server starts, does it say anything about connecting to
SMUX peer?
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
This e-mail is private and may be confidential and is for the intended
recipient only. If misdirected, please notify us by telephone and confirm that
it has been deleted from your system and any copies destroyed. If you are not
the intended recipient you are strictly prohibited from using, printing,
copying, distributing or disseminating this e-mail or any information contained
in it. We use reasonable endeavours to virus scan all e-mails leaving the
Company but no warranty is given that this e-mail and any attachments are virus
free. You should undertake your own virus checking. The right to monitor
e-mail communications through our network is reserved by us.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius with snmp
-snip- Obviously I've completely buggered something up. A little advice would be great. I downloaded the latest version i.e. freeradius-1.1.2 I also have NET-SNMP version: 5.2.rc3 installed. This may not make any difference to your problem, but my openSUSE boxes are currently running net-snmp 5.3.0.1 (Why run an old Release Candidate?) and the latest release of FreeRADIUS is 1.1.3 Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc pgpxb9j21Oa10.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius with snmp
Andy Ford [EMAIL PROTECTED] wrote: Thanks for you suggestions. After running configure --with-snmp I noticed (following your notes below) that the '#define WITH_SNMP 1' was missing from autoconf.h. Because configure didn't find the SNMP libraries it needs. So I added the line manually in autoconf.h as ... Which won't work. I downloaded the latest version i.e. freeradius-1.1.2 I also have NET-SNMP version: 5.2.rc3 installed. The server *should* be able to work with net-snmp, especially if you have built net-snmp with ucd-snmp compatibility. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius with snmp
Andy Ford [EMAIL PROTECTED] wrote:
1. compiled freeradius with the '--with-snmp' option
Did the configure process find the SNMP information it needed?
Does src/include/autoconf.h have a line like:
#define WITH_SNMP 1
?
2. modified the radiusd.conf file with
snmp = yes
$INCLUDE ${confdir}/snmp.conf
When the server starts, does it say anything about connecting to
SMUX peer?
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: monitoring freeradius with snmp
On Friday 04 August 2006 09:59, Andy Ford wrote: 4. started the radiusd and snmpd daemons. Sounds good so far. When you run in debug mode, does the SMUX registration work properly? You should see something similar to this: SMUX connect try 1 SMUX open oid: 1.3.6.1.4.1.3317.1.3.1 SMUX open progname: radiusd SMUX open password: somesecretpass SMUX register oid: 1.3.6.1.2.1.67.1.1.1.1 SMUX register priority: -1 SMUX register operation: 1 SMUX register oid: 1.3.6.1.2.1.67.2.1.1.1 SMUX register priority: -1 SMUX register operation: 1 When I walk enterprises.3317 I get nothing. The mibs directory has loadable files so that you can use pretty names (radiusAuthServIdent) instead of OIDs in your queries. If you're just looking for confirmation that FR+SNMP is working, you can run: $ snmpwalk -v1 -c public localhost mib-2.67.1.1.1.1.1.0 RADIUS-AUTH-SERVER-MIB::radiusAuthServIdent.0 = STRING: FreeRADIUS Version 1.1.2, for host , built on Jul 6 2006 at 12:59:53 Kevin Bonner pgpzU6PQm5KJc.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Monitoring FreeRadius with WhatsUp! Professional
Am Mittwoch, 28. September 2005 13:57 schrieb Matthew Anderson: Are there any freeradius users out there that are using WhatsUp! to monitor there freeradius server? I am trying to set it up but I am unsure what to use for the send/expect statements. Any help would be greatly appreciated. I already configured WhatsUp! to use port 1812 and was told by the WhatsUp! People to contact the vendor for freeradius to get the correct Send/expect strings. This stupid check results in an NACK/AUTH-REJECT answer but it works for me to knowing that my freeradius is alive: Servicename: RADIUS-1812 Protocl: UDP Port:1812 Send=%001D%000,0123456789012345%001%006TEST%002%018abcdefghijklmnop Expect=.D%000 Just sniff the packets a little bit more in detail (tcpdump/ethereal) to build an better send/expect mapping. --Gerald - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
