Re: Error: "Discarding duplicate request..."
On 16/09/10 15:27, Mike Diggins wrote: I am running NTLM_AUTH for mschap authentication with an MS AD at the back end. I suppose that could be the culprit. If so, is upgrading FreeRadius likely to resolve that (not knowing exactly what the problem is). Anything I could configure at the FreeRadius end to make that work a bit better? It would be a bit surprising for ntlm_auth to take that long, unless your AD controllers are very heavily loaded or are very distant. It takes ~30 milliseconds to auth a user/challenge pair in our installation. You could try restarting winbind - maybe it's gone crazy or eaten a load of RAM or something. If it is ntlm_auth, upgrading FreeRadius probably won't help (unless you take advantage of the SSL session resumption available in later versions to avoid doing some of the auths on re-auth) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: "Discarding duplicate request..."
I am running NTLM_AUTH for mschap authentication with an MS AD at the back end. I suppose that could be the culprit. If so, is upgrading FreeRadius likely to resolve that (not knowing exactly what the problem is). Anything I could configure at the FreeRadius end to make that work a bit better? -Mike On Wed, 15 Sep 2010, Alan Buxey wrote: 2.1.3 is very old now , 2.1.9 is current and has many fixes over that - check its changelog .. this error message suggests that you've got a slow backend somewhere - be that ldap, sql or even a bit of perl - Reply message - From: "Mike Diggins" Date: Wed, Sep 15, 2010 16:22 Subject: Error: "Discarding duplicate request..." To: "FreeRadius users mailing list" Our students have returned this week, and I've noticed a couple new messages logged to my FreeRadius 2.1.3 server. When it happens, my controllers fail over to the secondary Radius server. This has happened a few times. My Radius servers are only lightly loaded, and only configured to do authentication. No databases. Any idea what might be causing this? Sep 15 10:06:44 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 218 due to unfinished request 35236 Sep 15 10:07:01 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 219 due to unfinished request 35237 Sep 15 10:07:24 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 220 due to unfinished request 35239 Sep 15 10:07:41 prad02 radiusd[10632]: WARNING: Unresponsive child for request 35239, in module component Sep 15 10:07:52 prad02 radiusd[10632]: WARNING: Unresponsive child for request 35240, in module component Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-7 port 32769 - ID: 173 due to unfinished request 35240 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 220 due to unfinished request 35239 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-7 port 32769 - ID: 173 due to unfinished request 35240 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 220 due to unfinished request 35239 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 221 due to unfinished request 35244 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 221 due to unfinished request 35244 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client FHSWLC-1 port 32768 - ID: 205 due to unfinished request 35245 -Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: "Discarding duplicate request..."
2.1.3 is very old now , 2.1.9 is current and has many fixes over that - check its changelog .. this error message suggests that you've got a slow backend somewhere - be that ldap, sql or even a bit of perl - Reply message - From: "Mike Diggins" Date: Wed, Sep 15, 2010 16:22 Subject: Error: "Discarding duplicate request..." To: "FreeRadius users mailing list" Our students have returned this week, and I've noticed a couple new messages logged to my FreeRadius 2.1.3 server. When it happens, my controllers fail over to the secondary Radius server. This has happened a few times. My Radius servers are only lightly loaded, and only configured to do authentication. No databases. Any idea what might be causing this? Sep 15 10:06:44 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 218 due to unfinished request 35236 Sep 15 10:07:01 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 219 due to unfinished request 35237 Sep 15 10:07:24 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 220 due to unfinished request 35239 Sep 15 10:07:41 prad02 radiusd[10632]: WARNING: Unresponsive child for request 35239, in module component Sep 15 10:07:52 prad02 radiusd[10632]: WARNING: Unresponsive child for request 35240, in module component Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-7 port 32769 - ID: 173 due to unfinished request 35240 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 220 due to unfinished request 35239 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-7 port 32769 - ID: 173 due to unfinished request 35240 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 220 due to unfinished request 35239 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 221 due to unfinished request 35244 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 221 due to unfinished request 35244 Sep 15 10:07:53 prad02 radiusd[10632]: Discarding duplicate request from client FHSWLC-1 port 32768 - ID: 205 due to unfinished request 35245 -Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: "Discarding duplicate request..."
On 15/09/10 16:20, Mike Diggins wrote: Our students have returned this week, and I've noticed a couple new messages logged to my FreeRadius 2.1.3 server. When it happens, my controllers fail over to the secondary Radius server. This has happened a few times. My Radius servers are only lightly loaded, and only configured to do authentication. No databases. Any idea what might be causing this? Sep 15 10:06:44 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 218 due to unfinished request 35236 Sep 15 10:07:01 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 219 due to unfinished request 35237 Sep 15 10:07:24 prad02 radiusd[10632]: Discarding duplicate request from client wlc-8 port 32769 - ID: 220 due to unfinished request 35239 Sep 15 10:07:41 prad02 radiusd[10632]: WARNING: Unresponsive child for request 35239, in module component Sep 15 10:07:52 prad02 radiusd[10632]: WARNING: Unresponsive child for request 35240, in module component Well, something is running too slowly here. If you don't have ldap or sql configured, and aren't using "exec" to run any scripts, then the only other candidates I can think of are the "ntlm_auth" helper (if you're running mschap) or the various utmp modules, which are slow. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Error: Discarding duplicate request from client
Alan DeKok wrote: > The server is slow, usually because of a database that's slow. I will examine the performance of the server. > What have you configured the server to do when a session expires? I have configured nothing specifically that I remember, but the server also keeps track of accounting records. I'm expiring sessions every 24-hours so that my customers can view usage data in a 24-hour intervals (haven't figured another way to do this). Kind regards, Eugene -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] org] On Behalf Of Alan DeKok Sent: 05 February 2007 09:20 To: FreeRadius users mailing list Subject: Re: Error: Discarding duplicate request from client [EMAIL PROTECTED] wrote: > What does this mean? > > "Error: Discarding duplicate request from client" The server is slow, usually because of a database that's slow. This happens when the server doesn't respond to the client within 5 seconds. Since most requests should be handled in MUCH less than a second, it shows a serious problem. > I get this every time a session expires (Session-Timeout = 84600) > every 24-hours. What have you configured the server to do when a session expires? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Discarding duplicate request from client
[EMAIL PROTECTED] wrote: > What does this mean? > > "Error: Discarding duplicate request from client" The server is slow, usually because of a database that's slow. This happens when the server doesn't respond to the client within 5 seconds. Since most requests should be handled in MUCH less than a second, it shows a serious problem. > I get this every time a session expires (Session-Timeout = 84600) every > 24-hours. What have you configured the server to do when a session expires? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Discarding duplicate request
Aleksandar Stojilkovic wrote: Aleksandar Stojilkovic wrote: Hello, My log is full of this kind of errors: Wed Jul 26 02:55:54 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 27 due to unfinished request 11$ Don't post to the list in HTML. Awful HTML at that... This is normally caused by a slowly-responding database (e.g. SQL, LDAP) or upstream proxy server. Make "the thing" respond quicker. Without more details as to your configuration, we can only guess, but maybe indices on key SQL tables and/or optimising the queries? - Thanks. I suspected so I increased the timeout between requests on my NASes from 200ms to 600ms. Everything worked fine for 3 days and then again the same... That won't solve the problem, and I'm not surprised it came back. You need to speed the backend up, not have the radius server wait longer. Which computer configuration is recommended for my needs: Freeradius with Mysql for about 1000 users that connects to network using wireless connections? Any reasonably modern computer e.g. ~1.6GHz >512Mb ram, reasonably fast disks to support the database, should be able to handle that load. It's likely a slowdown on the MySQL side. Some possibilities: 1. Are all your queries on tables which are indexed properly? 2. Are you periodically emptying or archiving old data from the accounting table? Because if not, the time to insert accounting entries will just go up and up as the table grows. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Error: Discarding duplicate request
> > Aleksandar Stojilkovic wrote: > > Hello, > > > > > > > > My log is full of this kind of errors: > > > > > > > > Wed Jul 26 02:55:54 2006 : Error: Discarding duplicate request from > > client APMajur:2048 - ID: 27 due to unfinished request 11$ > > Don't post to the list in HTML. Awful HTML at that... > > This is normally caused by a slowly-responding database (e.g. > SQL, LDAP) or upstream proxy server. Make "the thing" respond > quicker. Without more details as to your configuration, we > can only guess, but maybe indices on key SQL tables and/or > optimising the queries? > - Thanks. I suspected so I increased the timeout between requests on my NASes from 200ms to 600ms. Everything worked fine for 3 days and then again the same... Which computer configuration is recommended for my needs: Freeradius with Mysql for about 1000 users that connects to network using wireless connections? Regards, Aleksandar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Discarding duplicate request
Aleksandar Stojilkovic wrote: Hello, My log is full of this kind of errors: Wed Jul 26 02:55:54 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 27 due to unfinished request 11$ Don't post to the list in HTML. Awful HTML at that... This is normally caused by a slowly-responding database (e.g. SQL, LDAP) or upstream proxy server. Make "the thing" respond quicker. Without more details as to your configuration, we can only guess, but maybe indices on key SQL tables and/or optimising the queries? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Discarding duplicate request
Le Thu, Jul 27, 2006 at 09:30:06PM +0200, Aleksandar Stojilkovic ecrivait: > Ok, I'm new one to this... > > And O Yellow dots are matter of personal taste... And ow, do > everyone a favor - keep your opinion for yourself... I am trying to get some > help here And if you really want some help you'd better do what Mike asked. Regards, Fox. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Discarding duplicate request
Aleksandar Stojilkovic wrote: > Ok, I'm new one to this... > > And O Yellow dots are matter of personal taste... And ow, do > everyone a favor - keep your opinion for yourself... I am trying to get some > help here Follow the rules and you are more likely to get help: http://www.freeradius.org/list/users.html -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Error: Discarding duplicate request
Ok, I'm new one to this... And O Yellow dots are matter of personal taste... And ow, do everyone a favor - keep your opinion for yourself... I am trying to get some help here > -Original Message- > From: > [EMAIL PROTECTED] > org > [mailto:[EMAIL PROTECTED] > eradius.org] On Behalf Of Mike Jakubik > Sent: 27. jul 2006 21:11 > To: FreeRadius users mailing list > Subject: Re: Error: Discarding duplicate request > > Aleksandar Stojilkovic wrote: > > > > Hello, > > > > > > > > My log is full of this kind of errors: > > > > Owww, my eyes! Please don't post to mailing lists using HTML, > and do everyone a favor, get rid off that yellow dot > background from your email template. > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > __ NOD32 1.1454 (20060321) Information __ > > This message was checked by NOD32 antivirus system. > http://www.eset.com > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Error: Discarding duplicate request
Aleksandar Stojilkovic wrote: Hello, My log is full of this kind of errors: Owww, my eyes! Please don't post to mailing lists using HTML, and do everyone a favor, get rid off that yellow dot background from your email template. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
