<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">Hi, <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">We’ve run across an odd problem. One of our members has staff who visit a variety of other eduroam organisations in the area, and yet there are some where it is categorically impossible for them
to log in. When I browsed our logs, we would see an Access-Accept for their login, followed 9 or so seconds later by an Access-Reject. When we did a tcpdump, we found that the Access-Reject simply was a ‘Request denied’. Is there a way to see why this occurs?
We’ve run our server in debug mode for a very short period, and then trimmed the debug log to the approximate period for the messages, and will be happy to provide those bits, but I’m wondering whether Radiator, when it is overloaded, simply ignores the packets
that keep coming or rejects them with a ‘Request denied’? If it’s the latter, can that message be customized to see that this is indeed the case? I’ve added a RejectHasReason to all the realm handlers on the server to at least see when there is a problem that
way. <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">Before you ask, we’re already running with an almost maximum queue, on a 32 core processor and 64 threads (two per core) in order to provide enough threads that can do ‘stuff’. I can only assume
this is the right way of dealing with overloading, i.e. provide more threads?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">Any help is very much appreciated.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt">With kind regards<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;color:black;background:white;mso-fareast-language:EN-GB">Stefan Paetow</span><span lang="EN-US" style="font-size:11.0pt;color:black;mso-fareast-language:EN-GB"><br>
<span style="background:white">Federated Roaming Technical Specialist<o:p></o:p></span></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US" style="font-size:11.0pt;color:black;mso-fareast-language:EN-GB"><br>
<span style="background:white">t: +44 (0)1235 822 125<br>
e-mail/teams: stefan.paetow@jisc.ac.uk</span><br>
<span style="background:white">gpg: 0x3FCE5142<o:p></o:p></span></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US" style="font-size:11.0pt;color:black;background:white;mso-fareast-language:EN-GB">On Mondays and Wednesdays, I am not available between 12:00 noon and 15:00.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-GB">In line with government advice, at Jisc we’re now working from home and our offices are currently closed. Read our
<a href="https://www.jisc.ac.uk/about/corporate/coronavirus-statement"><span style="color:#0563C1">statement on coronavirus</span></a>.</span><span lang="EN-US" style="font-size:11.0pt;color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;color:black;mso-fareast-language:EN-GB"><br>
<span style="background:white">jisc.ac.uk</span><br>
<br>
<span style="background:white">Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol,
BS2 0JA. T 0203 697 5800.<o:p></o:p></span></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
</body>
</html>