[Freeswitch-users] rad_auth failing under load

Sat Aug 12 09:39:16 UTC 2017

Yes, think need also for branch v1.6 too

https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/src/mod/xml_int/mod_xml_radius/Makefile.am?at=refs%2Fheads%2Fv1.6#4
https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/src/mod/applications/mod_rad_auth/Makefile.am?at=v1.6#4


пт, 11 авг. 2017 г. в 15:16, Joseph Waite <joelists at tm.net.uk>:

> The  changes are already there in Master branch which already uses 1.1.7
>
> Stable branch is still on 1.1.6 so needs to be manually changed.
>
> Is it worth raising a pull request for Stable? Is that even an option?
>
> Regards
>
> On 11 Aug 2017, at 07:16, Sergey Safarov <s.safarov at gmail.com> wrote:
>
> Please create pull request
>
> вт, 8 авг. 2017 г., 22:47 Joseph Waite <joelists at tm.net.uk>:
>
>> Hi
>>
>> Yes that was the issue. It works great now!
>>
>> Regards
>>
>> On 8 Aug 2017, at 20:38, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net>
>> wrote:
>>
>> That's the problem...I modified the files "Makefile" in the module's
>> folder to use the version 1.1.7 of freeradius-client.
>>
>> Regards.
>>
>> 2017-08-08 15:30 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:
>>
>>> Hi
>>>
>>> I am using both, I need to do authentication from within the dial plan
>>> for IP authenticated users, so I use mod_rad_auth for this and
>>> mod_xml_radius for user auth and accounting.
>>>
>>> I think I have found the issue, Freeswitch actually downloads free
>>> radius client and in the stable branch the makefiles for both modules
>>> specifies 1.1.6 so changed to 1.1.7 and recompiling everything.
>>>
>>> Will update if this solves the issues.
>>>
>>> Regards
>>>
>>> On 8 Aug 2017, at 20:21, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net>
>>> wrote:
>>>
>>> Actually, I'm not using radauth module. I use mod_xml_radius instead,
>>> it's newer and you have accounting support too. The implementation it's
>>> similar compared to radauth module.
>>>
>>> Regards,
>>> Juan Pablo Godoy.
>>>
>>> 2017-08-08 14:40 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:
>>>
>>>> Hi
>>>>
>>>> I have done a fresh install and used freeradius-client 1.1.7 but still
>>>> have this issue, Did you have to make any config changes to free radius
>>>> client?
>>>>
>>>> Regards
>>>>
>>>> On 8 Aug 2017, at 16:38, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net>
>>>> wrote:
>>>>
>>>> Hello,
>>>>
>>>> I had the same problem. Compile the radius module with
>>>> freeradius-client 1.1.7
>>>>
>>>> Regards,
>>>> Juan Pablo Godoy.
>>>>
>>>> 2017-08-07 18:55 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:
>>>>
>>>>> Hi Guys
>>>>>
>>>>> I am having a strange issue, when I have more than about 450
>>>>> concurrent calls, rad_auth seems to fail to authorise calls.
>>>>>
>>>>> I see the Radius request received and replied with RAD-ACCEPT from the
>>>>> Radius server but I get the following error
>>>>>
>>>>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:504  RADIUS
>>>>> Authentication failure (RC=1)
>>>>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:702 An error occured
>>>>> during radius authorization.
>>>>>
>>>>> I have had a look as ulimit and seems to be fine.
>>>>>
>>>>> core file size          (blocks, -c) 0
>>>>> data seg size           (kbytes, -d) unlimited
>>>>> scheduling priority             (-e) 0
>>>>> file size               (blocks, -f) unlimited
>>>>> pending signals                 (-i) 128716
>>>>> max locked memory       (kbytes, -l) 64
>>>>> max memory size         (kbytes, -m) unlimited
>>>>> open files                      (-n) 65536
>>>>> pipe size            (512 bytes, -p) 8
>>>>> POSIX message queues     (bytes, -q) 819200
>>>>> real-time priority              (-r) 0
>>>>> stack size              (kbytes, -s) 8192
>>>>> cpu time               (seconds, -t) unlimited
>>>>> max user processes              (-u) 128716
>>>>> virtual memory          (kbytes, -v) unlimited
>>>>> file locks                      (-x) unlimited
>>>>>
>>>>> Anyone have any ideas?
>>>>>
>>>>> Regards
>>>>>
>>>>>
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:
>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>
>>>>
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>>
>>>>
>>>>
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170812/d1243812/attachment-0001.html>