Re: conflicts/duplicates need
I believe I found my answer... The SQL server is "dual homed" and had 2 default routes, one per interface. I have removed one of the default routes and haven't seen the problem. Thanks Duane Cox - Original Message - From: "Duane Cox" <[EMAIL PROTECTED]> To: "Laker Netman" <[EMAIL PROTECTED]>; "FreeRadius users mailing list" Sent: Wednesday, April 05, 2006 2:03 PM Subject: Re: conflicts/duplicates need > No the outage is not consistant and there is not db backup or replication > going on. > The only thing that is consistant, is that both radius servers, each > identical hardware/software/configs, experience the outage at the same time. > > Thanks > Duane > > > > - Original Message - > From: "Laker Netman" <[EMAIL PROTECTED]> > To: "Duane Cox" <[EMAIL PROTECTED]>; "FreeRadius users mailing list" > > Sent: Wednesday, April 05, 2006 12:34 PM > Subject: Re: conflicts/duplicates need > > > > > > > > --- Duane Cox <[EMAIL PROTECTED]> wrote: > > > > > Well I believe Alan is correct, that it must be > > > related to the database > > > because I have 2 radius servers both sharing the > > > same database, and they > > > both experience this outage at the exact same time. > > > It lasts for about 45 > > > seconds every several hours. > > > > > > I'm using unixODBC and MSSQL database, the database > > > server is running on a > > > dual proc system and 2 gigs of ram. > > > > > > During some of these outages (early morning) no one > > > is using the database, > > > only freeradius. > > > > > > I think I am going to have to check the performance > > > monitors on the MSSQL > > > server to see if there are any spikes or hangs > > > during this time. > > > (I don't think my problem is freeradius, freeradius > > > is just suffering from > > > the condition) > > > > > > > > > > But I've noticed that I get a period every few > > > hours when freeradius > > > > doesn't authenticate. I'm not sure what the > > > problem is, but here is the > > > > log as captured in /var/log/radiusd > > > > > > > > Any idea what could be causing this? > > > > > > Hi Duane > > > > > > Good to see you using FreeRADIUS :-) > > > > > > Probably you have a cron script of some kind running > > > a report or vacuum on > > > your database and it is not responding to RADIUS. > > > Are you using the database > > > for something else as well? > > > > > > -- > > > > > > Peter Nixon > > > http://www.peternixon.net/ > > > PGP Key: http://www.peternixon.net/public.asc > > > > > > - > > > > Is the "outage" consistent? Is the a DB replication or > > backup scheduled at the time the outage occurs? > > > > Laker > > > > > > __ > > Do You Yahoo!? > > Tired of spam? Yahoo! Mail has the best spam protection around > > http://mail.yahoo.com > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
sql hangs, was (conflicts/duplicates need)
Here is the debug of a packet, there is nothing special about this packet.
This packet hits the radius server every 30 seconds to test availability,
for monitoring purposes.
What hangs is the release of the rlm_sql ... (using sql_unixodbc)
Ready to process requests.
rad_recv: Access-Request packet from host x.x.x.x:32769, id=253, length=51
User-Name = "intermapper"
User-Password = "illicom"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
modcall[authorize]: module "mschap" returns noop for request 0
rlm_realm: No '@' in User-Name = "intermapper", skipping NULL due to
config.
modcall[authorize]: module "domain" returns noop for request 0
rlm_realm: No '\' in User-Name = "intermapper", skipping NULL due to
config.
modcall[authorize]: module "ntdomain" returns noop for request 0
radius_xlat: 'intermapper'
rlm_sql (sql): sql_set_user escaped user --> 'intermapper'
radius_xlat: 'select id, username, attribute, value, op from radcheck where
username = 'intermapper' order by id'
rlm_sql (sql): Reserving sql socket id: 9
radius_xlat: ''
radius_xlat: 'select id, username, attribute, value, op from radreply where
username = 'intermapper' order by id'
radius_xlat: 'select radgroupreply.id, radgroupreply.groupname,
radgroupreply.attribute, radgroupreply.value, radgroupreply.op from
radgroupreply, usergroup where usergroup.username = 'intermapper' and
usergroup.groupname = radgroupreply.groupname order by radgroupreply.id'
rlm_sql (sql): Released sql socket id: 9
modcall[authorize]: module "sql" returns ok for request 0
modcall[authorize]: module "files" returns notfound for request 0
modcall: leaving group authorize (returns ok) for request 0
auth: type Local
auth: user supplied User-Password matches local User-Password
Login OK: [intermapper] (from client intermapper port 0)
Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 0
rlm_sql (sql): Processing sql_postauth
radius_xlat: 'intermapper'
rlm_sql (sql): sql_set_user escaped user --> 'intermapper'
radius_xlat: 'insert into radauth (UserName, Password, RadReply,
NASIPAddress, NASIdentifier, NASPort, NASPortType, CalledStationId,
CallingStationId) values ('intermapper', 'illicom', 'Access-Accept',
'x.x.x.x', '', '', '', '', '')'
rlm_sql (sql) in sql_postauth: query is insert into radauth (UserName,
Password, RadReply, NASIPAddress, NASIdentifier, NASPort, NASPortType,
CalledStationId, CallingStationId) values ('intermapper', 'illicom',
'Access-Accept', 'x.x.x.x', '', '', '', '', '')
rlm_sql (sql): Reserving sql socket id: 8
30 - 45 (sometimes 60) second pause
then finally...
rlm_sql (sql): Released sql socket id: 8
and then radiusd processes packets that apparently it had buffered...
During this 30-60 second pause of freeradius, I tested queries to the
database with isql and everything returned fine.
I also was able to use our billing/accounting client to pull data from the
database and it was fine.
There is no resource intensive application pulling data from the database
when this is happening and all other db clients and communication goes
uninterrupted.
Any ideas?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: conflicts/duplicates need
No the outage is not consistant and there is not db backup or replication going on. The only thing that is consistant, is that both radius servers, each identical hardware/software/configs, experience the outage at the same time. Thanks Duane - Original Message - From: "Laker Netman" <[EMAIL PROTECTED]> To: "Duane Cox" <[EMAIL PROTECTED]>; "FreeRadius users mailing list" Sent: Wednesday, April 05, 2006 12:34 PM Subject: Re: conflicts/duplicates need > > > --- Duane Cox <[EMAIL PROTECTED]> wrote: > > > Well I believe Alan is correct, that it must be > > related to the database > > because I have 2 radius servers both sharing the > > same database, and they > > both experience this outage at the exact same time. > > It lasts for about 45 > > seconds every several hours. > > > > I'm using unixODBC and MSSQL database, the database > > server is running on a > > dual proc system and 2 gigs of ram. > > > > During some of these outages (early morning) no one > > is using the database, > > only freeradius. > > > > I think I am going to have to check the performance > > monitors on the MSSQL > > server to see if there are any spikes or hangs > > during this time. > > (I don't think my problem is freeradius, freeradius > > is just suffering from > > the condition) > > > > > > > But I've noticed that I get a period every few > > hours when freeradius > > > doesn't authenticate. I'm not sure what the > > problem is, but here is the > > > log as captured in /var/log/radiusd > > > > > > Any idea what could be causing this? > > > > Hi Duane > > > > Good to see you using FreeRADIUS :-) > > > > Probably you have a cron script of some kind running > > a report or vacuum on > > your database and it is not responding to RADIUS. > > Are you using the database > > for something else as well? > > > > -- > > > > Peter Nixon > > http://www.peternixon.net/ > > PGP Key: http://www.peternixon.net/public.asc > > > > - > > Is the "outage" consistent? Is the a DB replication or > backup scheduled at the time the outage occurs? > > Laker > > > __ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: conflicts/duplicates need
--- Duane Cox <[EMAIL PROTECTED]> wrote: > Well I believe Alan is correct, that it must be > related to the database > because I have 2 radius servers both sharing the > same database, and they > both experience this outage at the exact same time. > It lasts for about 45 > seconds every several hours. > > I'm using unixODBC and MSSQL database, the database > server is running on a > dual proc system and 2 gigs of ram. > > During some of these outages (early morning) no one > is using the database, > only freeradius. > > I think I am going to have to check the performance > monitors on the MSSQL > server to see if there are any spikes or hangs > during this time. > (I don't think my problem is freeradius, freeradius > is just suffering from > the condition) > > > > But I've noticed that I get a period every few > hours when freeradius > > doesn't authenticate. I'm not sure what the > problem is, but here is the > > log as captured in /var/log/radiusd > > > > Any idea what could be causing this? > > Hi Duane > > Good to see you using FreeRADIUS :-) > > Probably you have a cron script of some kind running > a report or vacuum on > your database and it is not responding to RADIUS. > Are you using the database > for something else as well? > > -- > > Peter Nixon > http://www.peternixon.net/ > PGP Key: http://www.peternixon.net/public.asc > > - Is the "outage" consistent? Is the a DB replication or backup scheduled at the time the outage occurs? Laker __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: conflicts/duplicates need
Well I believe Alan is correct, that it must be related to the database because I have 2 radius servers both sharing the same database, and they both experience this outage at the exact same time. It lasts for about 45 seconds every several hours. I'm using unixODBC and MSSQL database, the database server is running on a dual proc system and 2 gigs of ram. During some of these outages (early morning) no one is using the database, only freeradius. I think I am going to have to check the performance monitors on the MSSQL server to see if there are any spikes or hangs during this time. (I don't think my problem is freeradius, freeradius is just suffering from the condition) > But I've noticed that I get a period every few hours when freeradius > doesn't authenticate. I'm not sure what the problem is, but here is the > log as captured in /var/log/radiusd > > Any idea what could be causing this? Hi Duane Good to see you using FreeRADIUS :-) Probably you have a cron script of some kind running a report or vacuum on your database and it is not responding to RADIUS. Are you using the database for something else as well? -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: conflicts/duplicates need
This must be right, or on the right track because I have 2 radius servers with identical configuration and both share the same database. Both servers experience this outage at the same time... Thanks Duane Cox - Original Message - From: "Alan DeKok" <[EMAIL PROTECTED]> To: "Duane Cox" <[EMAIL PROTECTED]>; "FreeRadius users mailing list" Sent: Monday, April 03, 2006 3:33 PM Subject: Re: conflicts/duplicates need > "Duane Cox" <[EMAIL PROTECTED]> wrote: > > But I've noticed that I get a period every few hours when freeradius doesn't > > authenticate. I'm not sure what the problem is, but here is the log as > > captured in /var/log/radiusd > > > > Any idea what could be causing this? > > Usually it's because your database is slow or not responding. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: conflicts/duplicates need
On Mon 03 Apr 2006 23:08, Duane Cox wrote: > List: > > I've been using free radius for about a month and learning as I go. > > But I've noticed that I get a period every few hours when freeradius > doesn't authenticate. I'm not sure what the problem is, but here is the > log as captured in /var/log/radiusd > > Any idea what could be causing this? Hi Duane Good to see you using FreeRADIUS :-) Probably you have a cron script of some kind running a report or vacuum on your database and it is not responding to RADIUS. Are you using the database for something else as well? -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc pgpdNGQ7LtdGs.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: conflicts/duplicates need
"Duane Cox" <[EMAIL PROTECTED]> wrote: > But I've noticed that I get a period every few hours when freeradius doesn't > authenticate. I'm not sure what the problem is, but here is the log as > captured in /var/log/radiusd > > Any idea what could be causing this? Usually it's because your database is slow or not responding. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
conflicts/duplicates need
List: I've been using free radius for about a month and learning as I go. But I've noticed that I get a period every few hours when freeradius doesn't authenticate. I'm not sure what the problem is, but here is the log as captured in /var/log/radiusd Any idea what could be causing this? Thanks Duane Cox Mon Apr 3 15:02:36 2006 : Auth: Login OK: [intermapper] (from client intermapper port 0) Mon Apr 3 15:03:06 2006 : Auth: Login OK: [intermapper] (from client intermapper port 0) Mon Apr 3 15:03:09 2006 : Error: Dropping conflicting packet from client intermapper:32769 - ID: 81 due to unfinished request 1345 Mon Apr 3 15:03:12 2006 : Error: Dropping conflicting packet from client intermapper:32769 - ID: 81 due to unfinished request 1345 Mon Apr 3 15:03:34 2006 : Error: Dropping conflicting packet from client omnilec2:1647 - ID: 62 due to unfinished request 1346 Mon Apr 3 15:03:38 2006 : Error: WARNING: Unresponsive child (id 32771) for request 1345 Mon Apr 3 15:03:39 2006 : Error: Dropping conflicting packet from client intermapper:32769 - ID: 83 due to unfinished request 1347 Mon Apr 3 15:03:40 2006 : Error: Dropping conflicting packet from client omnilec2:1647 - ID: 62 due to unfinished request 1346 Mon Apr 3 15:03:42 2006 : Error: Dropping conflicting packet from client intermapper:32769 - ID: 83 due to unfinished request 1347 Mon Apr 3 15:03:44 2006 : Error: Discarding duplicate request from client omnilec2:1647 - ID: 177 due to unfinished request 1348 Mon Apr 3 15:03:45 2006 : Error: Dropping conflicting packet from client omnilec2:1647 - ID: 62 due to unfinished request 1346 Mon Apr 3 15:03:49 2006 : Error: Discarding duplicate request from client omnilec2:1647 - ID: 177 due to unfinished request 1348 Mon Apr 3 15:03:50 2006 : Error: Dropping conflicting packet from client omnilec2:1647 - ID: 62 due to unfinished request 1346 Mon Apr 3 15:03:53 2006 : Error: Discarding duplicate request from client omnilec2:1647 - ID: 177 due to unfinished request 1348 Mon Apr 3 15:03:54 2006 : Error: Discarding duplicate request from client omnilec1:1647 - ID: 120 due to unfinished request 1349 Mon Apr 3 15:03:59 2006 : Error: Discarding duplicate request from client omnilec1:1647 - ID: 120 due to unfinished request 1349 Mon Apr 3 15:03:59 2006 : Error: Discarding duplicate request from client omnilec2:1647 - ID: 177 due to unfinished request 1348 Mon Apr 3 15:04:03 2006 : Error: Discarding duplicate request from client omnilec1:1647 - ID: 120 due to unfinished request 1349 Mon Apr 3 15:04:03 2006 : Error: WARNING: Unresponsive child (id 49156) for request 1346 Mon Apr 3 15:04:06 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Mon Apr 3 15:04:09 2006 : Error: Discarding duplicate request from client omnilec1:1647 - ID: 120 due to unfinished request 1349 Mon Apr 3 15:04:09 2006 : Error: WARNING: Unresponsive child (id 16386) for request 1347 Mon Apr 3 15:04:09 2006 : Error: WARNING: Unresponsive child (id 65541) for request 1348 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
