Hi,
[sorry if this has already been discussed, I looked a bit backwards on
the mailing-list but didn't find anything]
I'm using FR 0.9.3 on Debian, and I noticed problems when I added a
Simultaneous-Use := 1 to radgroupcheck (yes, I'm using the SQL backend,
although I don't think this had anything to do the problem). As soon as
people tried to connect, the log was filled with this kind of messages :
Tue Mar 2 11:35:55 2004 : Error: Discarding new request from client nas1:1026 - ID:
98 due to live request 31
Tue Mar 2 11:35:58 2004 : Error: Discarding new request from client nas1:1026 - ID:
98 due to live request 31
Tue Mar 2 11:36:01 2004 : Error: Discarding new request from client nas1:1026 - ID:
98 due to live request 31
Tue Mar 2 11:36:02 2004 : Error: Check-TS: timeout waiting for checkrad
Upon trying to call checkrad manually, I would get this :
[EMAIL PROTECTED] checkrad livingston 194.79.150.5 34 xxx 21000465
snmpget: Timeout
snmpget: Timeout
The problem seems to be caused by an erroneous (?) call to snmpget in
the snmpget_prog() function in checkrad. Here's a trivial patch that
solved the problem for me :
--8<----------------
--- checkrad.orig 2004-03-02 12:02:52.000000000 +0100
+++ checkrad 2004-03-02 12:04:54.000000000 +0100
@@ -180,8 +180,8 @@
my ($ret);
local $_;
- print LOG "snmpget: $snmpget -r $snmp_retries -t $snmp_timeout $host
$community $oid\n";
- $_ = `$snmpget -r $snmp_retries -t $snmp_timeout $host $community $oid`;
+ print LOG "snmpget: $snmpget -r $snmp_retries -t $snmp_timeout -v 1 -c
$community $host $oid\n";
+ $_ = `$snmpget -r $snmp_retries -t $snmp_timeout -v 1 -c $community $host
$oid`;
if (/^.*(\s|\")([0-9A-Za-z]{8})(\s|\"|$).*$/) {
# Session ID format.
$ret = $2;
---------------->8--
Note that I just know this is valid for my version of snmpget (version
5.0.7). I don't know about other versions...
As an aside, I noticed checkrad still uses /etc/freeradius/naspasswd.
Wouldn't it be cleaner to have it parse /etc/freeradius/clients.conf and
remove the legacy file ?
Regards,
--
[ Jacques Caruso <[EMAIL PROTECTED]> Développeur PHP ]
[ Monaco Internet http://monaco-internet.mc/ ]
[ Tél : (+377) 93 10 00 43 Clé PGP : 0x41F5C63D ]
[ -*- Quand le doigt montre la lune, l'imbécile regarde le doigt -*- ]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
