Re: [Bug-gnu-radius] Dropping packet maximum number of childs

[Sergey Poznyakoff]

Bert Colemont <address@hidden> ha escrit:

>    You mean this or so?
>    INSERT INTO connections VALUES(1,'username','2009-01-05
>    18:00:11','10.10.10.10',3908692444,'E8F9E9DC-49624A2F',0,0,0,0,0,0,'198
>    .198.198.198','','*BAS-SOMEWHERE*19/0*243*72','0');

No, Bert, that's accounting, not authentication. It is not relevant in
your case, at least for now. Your problems are related to
authentication. What happens is that authentication sub-processes take
too long to reply to requests. This can happen due to the following two
reasons:

1. Request time-to-live is too short[1].

This cannot be the reason, because your raddb/config does not override
time-to-live, so its default value of 60 seconds remains in effect, and,
I suppose, this time is more than enough for any real-life application.

2. Authentication scheme takes too long to complete.

This is the most probable reason for your problem. I don't know how
exactly you authenticate your users (you didn't supply your
raddb/users, nor huntgroups, nor hints), so I can only make guesses. If
you are using *only* SQL authentication, it can be the reason of the slowdown.
To verify if this is so, you have to: 1. measure average time of connecting
to the SQL database, 2. measure average time of completing SQL
authentication. Then, you'll obtain average time of authentication
bu adding these two values.

To measure (2), either look in your SQL logs for a series of
authentication queries, or execute these queries manually from a mysql
console. I don't know how you configured SQL authentication (because you
didn't supply your raddb/sqlserver either), so I can't tell exactly what
queries you should be looking for/executing. You will find a detailed
description of SQL authentication and authorization process in [2] and
[3], which in conjunction with your actual raddb/sqlserver will help you
determine the exact sequence of queries.

Regards,
Sergey

[1]. http://www.gnu.org/software/radius/manual/html_node/auth.html
[2]. http://www.gnu.org/software/radius/manual/html_node/Authentication-Server-
Parameters.html
[3]. http://www.gnu.org/software/radius/manual/html_node/Authorization-Paramete
rs.html