Re: sql returns fail for some stop requests

2012-07-24 Thread Arran Cudbard-Bell
On 24 Jul 2012, at 18:18, Arran Cudbard-Bell wrote: > > On 24 Jul 2012, at 14:24, Alan DeKok wrote: > >> Amir Tal wrote: >>> After additional debugging the fault seems to be with a rouge backup >>> process running on DB host, causing it to be slow to un-responsive for >>> 10-20 minutes. >> >>

Re: sql returns fail for some stop requests

2012-07-24 Thread Arran Cudbard-Bell
On 24 Jul 2012, at 14:24, Alan DeKok wrote: > Amir Tal wrote: >> After additional debugging the fault seems to be with a rouge backup >> process running on DB host, causing it to be slow to un-responsive for >> 10-20 minutes. > > Stop that. The database used by the RADIUS server should ONLY be

RE: Certificate validation checkbox - windows 7 wired

2012-07-24 Thread Morris, Andi
Cheers both, this is only happening for wired clients, so it's definitely not that they're wandering out of AP range. Very odd why it would only happen for wired clients though. Interesting to read that it's not necessarily a problem with the certificate, I'll double and triple check all my ms

Re: Certificate validation checkbox - windows 7 wired

2012-07-24 Thread Phil Mayers
On 24/07/12 16:47, Morris, Andi wrote: Hi all, I'm getting an odd problem where even when my clients are configured not to validate the server certificate (test environment at the mo) on their wired connections they are failing to authenticate on one freeradius server but getting access-accept o

Re: Certificate validation checkbox - windows 7 wired

2012-07-24 Thread Matthew Newton
On Tue, Jul 24, 2012 at 03:47:03PM +, Morris, Andi wrote: > I'm getting an odd problem where even when my clients are > configured not to validate the server certificate (test > environment at the mo) on their wired connections they are > failing to authenticate on one freeradius server but get

Certificate validation checkbox - windows 7 wired

2012-07-24 Thread Morris, Andi
Hi all, I'm getting an odd problem where even when my clients are configured not to validate the server certificate (test environment at the mo) on their wired connections they are failing to authenticate on one freeradius server but getting access-accept on another. Debug output shows the f

Re: FreeRADIUS performance information (tuning, benchmark)

2012-07-24 Thread Phil Mayers
On 24/07/12 14:10, alan buxey wrote: Hi, you could look at PGSQL optimization - ensure that the table has the right indexes and the table is in cache etc. Try this: convert your SQL users into a "users" text file, like so: usernameCleartext-Password := "password" ...and disable SQL,

Re: FreeRADIUS performance information (tuning, benchmark)

2012-07-24 Thread Phil Mayers
On 24/07/12 13:57, Arran Cudbard-Bell wrote: 1000 auths/sec is quite a lot. It implies you need to perform 1000 SQL queries/sec (at LEAST). I'm not sure this is accurate given the number of failed requests, i'd investigate that then re-run the tests. Ah, I didn't spot the "failed" count. - L

Re: sql returns fail for some stop requests

2012-07-24 Thread Alan DeKok
Amir Tal wrote: > After additional debugging the fault seems to be with a rouge backup > process running on DB host, causing it to be slow to un-responsive for > 10-20 minutes. Stop that. The database used by the RADIUS server should ONLY be used by the RADIUS server. > This is easy to fix, bu

Re: FreeRADIUS performance information (tuning, benchmark)

2012-07-24 Thread alan buxey
Hi, >I would need a sever able to manage a much greater amount of users ( > >5, up to 100). But for now I'm interested how to get the server >working well with ~(5<->10) users. for what its worth, we deal with around 8000 users concurrently on an 802.1X connection (so

Re: FreeRADIUS performance information (tuning, benchmark)

2012-07-24 Thread alan buxey
Hi, you could look at PGSQL optimization - ensure that the table has the right indexes and the table is in cache etc. > Try this: convert your SQL users into a "users" text file, like so: > > username Cleartext-Password := "password" > > ...and disable SQL, then re-run the test. I think i

Re: FreeRADIUS performance information (tuning, benchmark)

2012-07-24 Thread Alexander Gattin
On Tue, Jul 24, 2012 at 01:49:27PM +0100, Phil Mayers wrote: > On 24/07/12 13:26, Andrei Petru Mura wrote: >> radperf -s -f ../users.csv -p 800 -a pap 10.3.1.1 auth radiussomething ... >> < 0.1s : 3758 >> < s: 5897 >> < 10s : 344 ... >> I would need a sever able to manage a much >>

Re: FreeRADIUS performance information (tuning, benchmark)

2012-07-24 Thread Arran Cudbard-Bell
On 24 Jul 2012, at 13:49, Phil Mayers wrote: > On 24/07/12 13:26, Andrei Petru Mura wrote: >> I'm running FreeRADIUS on a PC with a dual CPU of 2 GHz and 2 GB of RAM. >> It is working with PostgreSQL database. >> When I perform tests with radperf, running : >> >> radperf -s -f ../users.csv -p 80

RE: sql returns fail for some stop requests

2012-07-24 Thread Amir Tal
After additional debugging the fault seems to be with a rouge backup process running on DB host, causing it to be slow to un-responsive for 10-20 minutes. (all unclosed sessions are within this time frame) This is easy to fix, but I'm looking for a way to make a fail-safe solution. There can alwa

Re: FreeRADIUS performance information (tuning, benchmark)

2012-07-24 Thread Phil Mayers
On 24/07/12 13:26, Andrei Petru Mura wrote: I'm running FreeRADIUS on a PC with a dual CPU of 2 GHz and 2 GB of RAM. It is working with PostgreSQL database. When I perform tests with radperf, running : radperf -s -f ../users.csv -p 800 -a pap 10.3.1.1 auth radiussomething where users.csv file c

Re: sql returns fail for some stop requests

2012-07-24 Thread Arran Cudbard-Bell
On 23 Jul 2012, at 14:06, Amir Tal wrote: > Dialup.conf : > > [root@RADIUS4 radius]# cat /etc/raddb/sql/mysql/dialup.conf Looks ok… Could you build with the 2.1x head and post the debug output? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: [ANN][FEATURE]: Reference based accounting queries

2012-07-24 Thread Arran Cudbard-Bell
On 24 Jul 2012, at 10:34, Arran Cudbard-Bell wrote: > The accounting section of rlm_sql has been modified to use reference based > accounting queries. > > Accounting and post-auth now have their own subsections, and contain a config > pair called reference. The value of this is expanded to giv

[ANN][FEATURE]: Reference based accounting queries

2012-07-24 Thread Arran Cudbard-Bell
The accounting section of rlm_sql has been modified to use reference based accounting queries. Accounting and post-auth now have their own subsections, and contain a config pair called reference. The value of this is expanded to give a config path, and the config pair this resolves to is used a