(RADIATOR) Radiator freezing intermitantly
bfisk at lazerlink.com
Thu Jun 26 08:27:31 CDT 2003
We are running into the same problem on a machine where we are using the
primary ip address of the system for radiator. A user will dial in and our
equipment will run the radius request, at which I can see radius
authenticating the user in authlog, but the dialup equip isn't getting it
cause it tries 5 times to auth (the set value) and tells users their
username and password is invalid. We are using 3com (now utstarcom)
hiperarc running TCS 4.2 and the newest version of radiator. Attached is
my conf file. I have radius stable on a system now, but when I tried to
move it to this new system it worked. The problem is intermitent.
# radius.cfg -JJGracia - Jan2003
# Use a low trace level in production systems. Increase
# it to 4 or 5 for debugging, or use the -trace flag to radiusd
# Format %0:%1:%2:%23
# NasType TotalControl
# RewriteUsername tr/A-Za-z0-9_@//cd
# AcctLogFileName %L/detail
# WtmpFileName %L/wtmp
AuthSelect select PASSWORD,CHECKATTR,REPLYATTR from SUBSCRIBERS
AcctColumnDef SPEEDOFCONNECT, Speed-Of-Connection
# AcctFailedLogFileName %D/missedaccounting
----- Original Message -----
From: "Hugh Irvine" <hugh at open.com.au>
To: "Brian Fisk" <bfisk at lazerlink.com>
Cc: <radiator at open.com.au>
Sent: Friday, June 20, 2003 7:41 PM
Subject: Re: (RADIATOR) Radiator freezing intermitantly
> Hello Brian -
> On machines with multiple interfaces, this is usually due to the radius
> response being sent back to the client from a different IP address to
> that from which the request was received (ie the response was sent via
> a different interface).
> Using a sniffer to check the packet flow is usually very helpful
> (snoop, tcpdump, ethereal, ...).
> On Friday, Jun 20, 2003, at 23:12 Australia/Melbourne, Brian Fisk wrote:
> > We had more troubles yesterday and the problem that is happening is
> > when we
> > have radiator setup to bind on a secondary ip of the machine. When I
> > took
> > out the bind address statement, which should make radiator listen on
> > all
> > ip's, it still wouldn't work. I had to set our dialup equipment to
> > use the
> > base ip of the machine and then it started working. When a user tried
> > to
> > dial up, they would authenticate, as I could see in my authlog, but the
> > dialup equipment kept authenticating them for around 3-4 times before
> > it
> > hung up on them. The dialup equipment (total control) was giving me
> > error
> > messages that according to the total control website, said that the
> > secret
> > key was a mismatch. I think it's an ip issue with the machine but we
> > will
> > find out more from testing on monday.
> > Brian Fisk
> > ----- Original Message -----
> > From: "Hugh Irvine" <hugh at open.com.au>
> > To: "Brian Fisk" <bfisk at lazerlink.com>
> > Cc: <radiator at open.com.au>
> > Sent: Thursday, June 19, 2003 8:03 PM
> > Subject: Re: (RADIATOR) Radiator freezing intermitantly
> >> Hello Brian -
> >> I will need to see a copy of the configuration file (no secrets)
> >> together with a trace 4 debug from Radiator showing what is happening.
> >> There is also a FAQ item regarding Redhat 8 here:
> >> http://www.open.com.au/radiator/faq.html#127
> >> regards
> >> Hugh
> >> On Friday, Jun 20, 2003, at 02:20 Australia/Melbourne, Brian Fisk
> >> wrote:
> >>> I have been running radiator on the same server for the last 3 years
> >>> and it
> >>> worked perfect. I am now setting up radiator 3.6 on another server
> >>> using
> >>> the old config file which was version 2.18.1
> >>> I am noticing that radiator will just freeze up for a period of 5
> >>> minutes or
> >>> so. Is there any incompatabilities between the versions for the
> >>> config
> >>> file, or can someone suggest a way of logging to diagnose the
> >>> problem?
> >>> I am running Redhat 8.0 Linux server1 2.4.18-24.8.0smp #1 SMP Fri Jan
> >>> 31
> >>> 06:03:47 EST 2003 i686 i686 i386 GNU/Linux)
> >>> ===
> >>> Archive at http://www.open.com.au/archives/radiator/
> >>> Announcements on radiator-announce at open.com.au
> >>> To unsubscribe, email 'majordomo at open.com.au' with
> >>> 'unsubscribe radiator' in the body of the message.
> >> NB: have you included a copy of your configuration file (no secrets),
> >> together with a trace 4 debug showing what is happening?
> >> --
> >> Radiator: the most portable, flexible and configurable RADIUS server
> >> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> >> -
> >> Nets: internetwork inventory and management - graphical, extensible,
> >> flexible with hardware, software, platform and database independence.
> NB: have you included a copy of your configuration file (no secrets),
> together with a trace 4 debug showing what is happening?
> Radiator: the most portable, flexible and configurable RADIUS server
> anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
> Nets: internetwork inventory and management - graphical, extensible,
> flexible with hardware, software, platform and database independence.
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator