(RADIATOR) radiator hangs when mysql server disappears

[Hugh Irvine]

Hello Janos -

If you want Radiator to automatically try the second database you  
should put both sets of DBSource/DBUsername/DBAuth in the same AuthBy  
SQL clause. You might also want to adjust the Timeout and  
FailureBackoffTime parameters.

See section 6.29 in the Radiator 3.13 reference manual.

regards

Hugh


On 29 Jul 2005, at 22:17, sj at thorium.datanet.hu wrote:

>
>
> Hello!
>
> I have Radiator-3.13 on Linux. I run the primary mysql daemon
> on an other box and the backup mysql daemon is on the same host.
> (=so I have 2 <AuthBy SQL> clause)
>
> I tried to simulate a network/sql failure with 'ifconfig down' on
> the sql host and waited thet radiator would switch to the backup
> sql server. But it did not instead it hanged it did not even write
> the logfile.
>
> How can I resolve this problem? I'd like to achieve that a  
> configuration where
> radiator would switch to the next sql
> server in no more then 15 seconds.
>
> Unfortunately I have not find a suitable solution in the archive.
>
>
> Below the config and a trace 4 log:
>
> LogDir /opt/Radiator
> DictionaryFile  /usr/local/etc/dictionary
> BindAddress x.x.x.x
>
> SocketQueueLength 1000000
>
> AuthPort 1812
> AcctPort 1813
>
> UsernameCharset a-zA-Z0-9\.-_@
>
> <Log FILE>
>         Filename %L/%Y%m%d.log
>         Trace 4
> </Log>
>
> <StatsLog FILE>
>         Filename %L/stat-%Y%m.log
>         Interval 3600
>         Format %0:%1:%2:%22-%14-%23:%6-%3-%5-%18:%7-%8-%19
> </StatsLog>
>
>
> AuthBy SQL>
>         Identifier Fixadslteszt
>
>         FailureBackoffTime 180
>         Timeout 8
>
>         AuthSelect SELECT encryptedpassword, checkattr, replyattr  
> FROM users WHERE enabled=1 AND username=%0
>
>         AuthColumnDef 0, Encrypted-Password, check
>         AuthColumnDef 1, GENERIC, check
>         AuthColumnDef 2, GENERIC, reply
>
>         DefaultSimultaneousUse 1
> </AuthBy>
>
> <AuthBy SQL>
>         Identifier Fixadslfallback
>
>         FailureBackoffTime 180
>         Timeout 8
>
>         AuthSelect SELECT encryptedpassword, checkattr, replyattr  
> FROM users WHERE enabled=1 AND username=%0
>
>         AuthColumnDef 0, Encrypted-Password, check
>         AuthColumnDef 1, GENERIC, check
>         AuthColumnDef 2, GENERIC, reply
>
>         DefaultSimultaneousUse 1
> </AuthBy>
>
> <AuthBy SQL>
>         Identifier Myacct1
>
>         AccountingTable accounting_%Y%m
>
>         AcctColumnDef USERNAME,User-Name
>         AcctColumnDef TIME_STAMP,Timestamp,integer
>         AcctColumnDef ACCTSTATUSTYPE,Acct-Status-Type
>         AcctColumnDef ACCTDELAYTIME,Acct-Delay-Time,integer
>         AcctColumnDef ACCTINPUTOCTETS,Acct-Input-Octets,integer
>         AcctColumnDef ACCTOUTPUTOCTETS,Acct-Output-Octets,integer
>         AcctColumnDef ACCTINPUTGIGAWORDS,Acct-Input-Gigawords,integer
>         AcctColumnDef ACCTOUTPUTGIGAWORDS,Acct-Output- 
> Gigawords,integer
>         AcctColumnDef ACCTSESSIONID,Acct-Session-Id
>         AcctColumnDef ACCTSESSIONTIME,Acct-Session-Time,integer
>         AcctColumnDef ACCTTERMINATECAUSE,Acct-Terminate-Cause
>         AcctColumnDef NASIDENTIFIER,NAS-Identifier
>         AcctColumnDef NASIDENTIFIER,NAS-IP-Address
>         AcctColumnDef NASPORT,NAS-Port,integer
>         AcctColumnDef FRAMEDIPADDRESS,Framed-IP-Address
>
>         HandleAcctStatusTypes Stop
>         AcctFailedLogFileName %L/missed-accounting-%Y%m.log
>
>         FailureBackoffTime 180
>         Timeout 8
> </AuthBy>
>
> <AuthBy TEST>
>         Identifier Myacct1-startonly
> </AuthBy>
>
> # Accounting Start
>
> <Handler Request-Type = Accounting-Request, Acct-Status-Type = Start>
>         AuthBy Myacct1-startonly
> </Handler>
>
>
> # Accounting Stop
>
> <Handler Request-Type = Accounting-Request, Acct-Status-Type = Stop>
>         AuthBy Myacct1
> </Handler>
>
>
> # Authentication
>
> <Handler>
>         AuthByPolicy ContinueUntilAccept
>         AuthBy Fixadslteszt
>         AuthBy Fixadslfallback
>
> </Handler>
>
>
>
>
> Thu Jul 28 17:15:38 2005: DEBUG: Packet dump:
> *** Received from x.x.x.x port 54377 ....
> Code:       Access-Request
> Identifier: 208
> Authentic:  <178>X<224>p<205>[<135>AF<180><16><219>aEK<25>
> Attributes:
>         User-Name = "u1"
>         Service-Type = Authenticate-Only
>         NAS-IP-Address = x.x.x.x
>         User-Password = <23>`<228><221>) 
> <23><183><229><173><236><18>0<17><194>F<247>
>
> Thu Jul 28 17:15:38 2005: DEBUG: Handling request with Handler ''
> Thu Jul 28 17:15:38 2005: DEBUG:  Deleting session for u1, x.x.x.x,
> Thu Jul 28 17:15:38 2005: DEBUG: Handling with Radius::AuthSQL
> Thu Jul 28 17:15:38 2005: DEBUG: Handling with Radius::AuthSQL:  
> Fixadslteszt
> Thu Jul 28 17:15:38 2005: DEBUG: Query is: 'SELECT  
> encryptedpassword, checkattr, replyattr FROM users WHERE enabled=1  
> AND username='u1'':
>
>
> Thank you in advance,
>
> Janos SUTO
> GTS-Datanet
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>


NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.