[Freeswitch-users] rad_auth failing under load

Sat Aug 12 09:58:10 UTC 2017

My bad in v1.6 branch downloaded 1.1.6
https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/debian/util.sh?at=refs%2Fheads%2Fv1.6#106


сб, 12 авг. 2017 г. в 12:39, Sergey Safarov <s.safarov at gmail.com>:

> Yes, think need also for branch v1.6 too
>
>
> https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/src/mod/xml_int/mod_xml_radius/Makefile.am?at=refs%2Fheads%2Fv1.6#4
>
> https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/src/mod/applications/mod_rad_auth/Makefile.am?at=v1.6#4
>
>
>
> пт, 11 авг. 2017 г. в 15:16, Joseph Waite <joelists at tm.net.uk>:
>
>> The  changes are already there in Master branch which already uses 1.1.7
>>
>> Stable branch is still on 1.1.6 so needs to be manually changed.
>>
>> Is it worth raising a pull request for Stable? Is that even an option?
>>
>> Regards
>>
>> On 11 Aug 2017, at 07:16, Sergey Safarov <s.safarov at gmail.com> wrote:
>>
>> Please create pull request
>>
>> вт, 8 авг. 2017 г., 22:47 Joseph Waite <joelists at tm.net.uk>:
>>
>>> Hi
>>>
>>> Yes that was the issue. It works great now!
>>>
>>> Regards
>>>
>>> On 8 Aug 2017, at 20:38, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net>
>>> wrote:
>>>
>>> That's the problem...I modified the files "Makefile" in the module's
>>> folder to use the version 1.1.7 of freeradius-client.
>>>
>>> Regards.
>>>
>>> 2017-08-08 15:30 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:
>>>
>>>> Hi
>>>>
>>>> I am using both, I need to do authentication from within the dial plan
>>>> for IP authenticated users, so I use mod_rad_auth for this and
>>>> mod_xml_radius for user auth and accounting.
>>>>
>>>> I think I have found the issue, Freeswitch actually downloads free
>>>> radius client and in the stable branch the makefiles for both modules
>>>> specifies 1.1.6 so changed to 1.1.7 and recompiling everything.
>>>>
>>>> Will update if this solves the issues.
>>>>
>>>> Regards
>>>>
>>>> On 8 Aug 2017, at 20:21, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net>
>>>> wrote:
>>>>
>>>> Actually, I'm not using radauth module. I use mod_xml_radius instead,
>>>> it's newer and you have accounting support too. The implementation it's
>>>> similar compared to radauth module.
>>>>
>>>> Regards,
>>>> Juan Pablo Godoy.
>>>>
>>>> 2017-08-08 14:40 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:
>>>>
>>>>> Hi
>>>>>
>>>>> I have done a fresh install and used freeradius-client 1.1.7 but still
>>>>> have this issue, Did you have to make any config changes to free radius
>>>>> client?
>>>>>
>>>>> Regards
>>>>>
>>>>> On 8 Aug 2017, at 16:38, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net>
>>>>> wrote:
>>>>>
>>>>> Hello,
>>>>>
>>>>> I had the same problem. Compile the radius module with
>>>>> freeradius-client 1.1.7
>>>>>
>>>>> Regards,
>>>>> Juan Pablo Godoy.
>>>>>
>>>>> 2017-08-07 18:55 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:
>>>>>
>>>>>> Hi Guys
>>>>>>
>>>>>> I am having a strange issue, when I have more than about 450
>>>>>> concurrent calls, rad_auth seems to fail to authorise calls.
>>>>>>
>>>>>> I see the Radius request received and replied with RAD-ACCEPT from
>>>>>> the Radius server but I get the following error
>>>>>>
>>>>>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:504  RADIUS
>>>>>> Authentication failure (RC=1)
>>>>>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:702 An error occured
>>>>>> during radius authorization.
>>>>>>
>>>>>> I have had a look as ulimit and seems to be fine.
>>>>>>
>>>>>> core file size          (blocks, -c) 0
>>>>>> data seg size           (kbytes, -d) unlimited
>>>>>> scheduling priority             (-e) 0
>>>>>> file size               (blocks, -f) unlimited
>>>>>> pending signals                 (-i) 128716
>>>>>> max locked memory       (kbytes, -l) 64
>>>>>> max memory size         (kbytes, -m) unlimited
>>>>>> open files                      (-n) 65536
>>>>>> pipe size            (512 bytes, -p) 8
>>>>>> POSIX message queues     (bytes, -q) 819200
>>>>>> real-time priority              (-r) 0
>>>>>> stack size              (kbytes, -s) 8192
>>>>>> cpu time               (seconds, -t) unlimited
>>>>>> max user processes              (-u) 128716
>>>>>> virtual memory          (kbytes, -v) unlimited
>>>>>> file locks                      (-x) unlimited
>>>>>>
>>>>>> Anyone have any ideas?
>>>>>>
>>>>>> Regards
>>>>>>
>>>>>>
>>>>>> _________________________________________________________________________
>>>>>> Professional FreeSWITCH Consulting Services:
>>>>>> consulting at freeswitch.org
>>>>>> http://www.freeswitchsolutions.com
>>>>>>
>>>>>> Official FreeSWITCH Sites
>>>>>> http://www.freeswitch.org
>>>>>> http://confluence.freeswitch.org
>>>>>> http://www.cluecon.com
>>>>>>
>>>>>> FreeSWITCH-users mailing list
>>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>>> UNSUBSCRIBE:
>>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>>> http://www.freeswitch.org
>>>>>>
>>>>>
>>>>>
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:
>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org
>>>>> http://www.freeswitchsolutions.com
>>>>>
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org
>>>>> http://confluence.freeswitch.org
>>>>> http://www.cluecon.com
>>>>>
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>>> UNSUBSCRIBE:
>>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>>> http://www.freeswitch.org
>>>>>
>>>>
>>>>
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>>
>>>>
>>>>
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org
>>>> http://www.freeswitchsolutions.com
>>>>
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org
>>>> http://confluence.freeswitch.org
>>>> http://www.cluecon.com
>>>>
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>>> UNSUBSCRIBE:
>>>> http://lists.freeswitch.org/mailman/options/freeswitch-users
>>>> http://www.freeswitch.org
>>>>
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>>
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170812/03563b76/attachment-0001.html>