[Freeswitch-users] rad_auth failing under load

Joseph Waite joelists at tm.net.uk
Tue Aug 8 19:30:41 UTC 2017


Hi

I am using both, I need to do authentication from within the dial plan for IP authenticated users, so I use mod_rad_auth for this and mod_xml_radius for user auth and accounting.

I think I have found the issue, Freeswitch actually downloads free radius client and in the stable branch the makefiles for both modules specifies 1.1.6 so changed to 1.1.7 and recompiling everything.

Will update if this solves the issues.

Regards
> On 8 Aug 2017, at 20:21, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net> wrote:
> 
> Actually, I'm not using radauth module. I use mod_xml_radius instead, it's newer and you have accounting support too. The implementation it's similar compared to radauth module.
> 
> Regards,
> Juan Pablo Godoy.
> 
> 2017-08-08 14:40 GMT-04:00 Joseph Waite <joelists at tm.net.uk <mailto:joelists at tm.net.uk>>:
> Hi
> 
> I have done a fresh install and used freeradius-client 1.1.7 but still have this issue, Did you have to make any config changes to free radius client?
> 
> Regards
> 
>> On 8 Aug 2017, at 16:38, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net <mailto:jpgodoy at redvoiss.net>> wrote:
>> 
>> Hello,
>> 
>> I had the same problem. Compile the radius module with freeradius-client 1.1.7
>> 
>> Regards,
>> Juan Pablo Godoy.
>> 
>> 2017-08-07 18:55 GMT-04:00 Joseph Waite <joelists at tm.net.uk <mailto:joelists at tm.net.uk>>:
>> Hi Guys
>> 
>> I am having a strange issue, when I have more than about 450 concurrent calls, rad_auth seems to fail to authorise calls.
>> 
>> I see the Radius request received and replied with RAD-ACCEPT from the Radius server but I get the following error
>> 
>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:504  RADIUS Authentication failure (RC=1)
>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:702 An error occured during radius authorization.
>> 
>> I have had a look as ulimit and seems to be fine.
>> 
>> core file size          (blocks, -c) 0
>> data seg size           (kbytes, -d) unlimited
>> scheduling priority             (-e) 0
>> file size               (blocks, -f) unlimited
>> pending signals                 (-i) 128716
>> max locked memory       (kbytes, -l) 64
>> max memory size         (kbytes, -m) unlimited
>> open files                      (-n) 65536
>> pipe size            (512 bytes, -p) 8
>> POSIX message queues     (bytes, -q) 819200
>> real-time priority              (-r) 0
>> stack size              (kbytes, -s) 8192
>> cpu time               (seconds, -t) unlimited
>> max user processes              (-u) 128716
>> virtual memory          (kbytes, -v) unlimited
>> file locks                      (-x) unlimited
>> 
>> Anyone have any ideas?
>> 
>> Regards
>> 
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> 
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>
> 
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org <http://www.freeswitch.org/>
> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
> http://www.cluecon.com <http://www.cluecon.com/>
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
> http://www.freeswitch.org <http://www.freeswitch.org/>
> 
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170808/02c4b224/attachment-0001.html>


More information about the FreeSWITCH-users mailing list