[Freeswitch-users] rad_auth failing under load

Joseph Waite joelists at tm.net.uk
Tue Aug 15 13:28:44 UTC 2017 

Yes it is downloading 1.1.6 which has an issue. This is resolved in Master, but does the change to 1.1.7 need updating in the 1.6 branch? I can look into making a pull request of needs be. 

TBH I have never done a pull request before but I’m sure I can figure it out!

> On 12 Aug 2017, at 10:58, Sergey Safarov <s.safarov at gmail.com> wrote:
> 
> My bad in v1.6 branch downloaded 1.1.6 
> https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/debian/util.sh?at=refs%2Fheads%2Fv1.6#106 <https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/debian/util.sh?at=refs%2Fheads%2Fv1.6#106>
> 
> 
> сб, 12 авг. 2017 г. в 12:39, Sergey Safarov <s.safarov at gmail.com <mailto:s.safarov at gmail.com>>:
> Yes, think need also for branch v1.6 too
> 
> https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/src/mod/xml_int/mod_xml_radius/Makefile.am?at=refs%2Fheads%2Fv1.6#4 <https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/src/mod/xml_int/mod_xml_radius/Makefile.am?at=refs%2Fheads%2Fv1.6#4>
> https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/src/mod/applications/mod_rad_auth/Makefile.am?at=v1.6#4 <https://freeswitch.org/stash/projects/FS/repos/freeswitch/browse/src/mod/applications/mod_rad_auth/Makefile.am?at=v1.6#4>
> 
> 
> 
> пт, 11 авг. 2017 г. в 15:16, Joseph Waite <joelists at tm.net.uk <mailto:joelists at tm.net.uk>>:
> The  changes are already there in Master branch which already uses 1.1.7
> 
> Stable branch is still on 1.1.6 so needs to be manually changed.
> 
> Is it worth raising a pull request for Stable? Is that even an option?
> 
> Regards
> 
>> On 11 Aug 2017, at 07:16, Sergey Safarov <s.safarov at gmail.com <mailto:s.safarov at gmail.com>> wrote:
>> 
>> Please create pull request
>> 
>> 
>> вт, 8 авг. 2017 г., 22:47 Joseph Waite <joelists at tm.net.uk <mailto:joelists at tm.net.uk>>:
>> Hi
>> 
>> Yes that was the issue. It works great now!
>> 
>> Regards
>> 
>>> On 8 Aug 2017, at 20:38, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net <mailto:jpgodoy at redvoiss.net>> wrote:
>>> 
>>> That's the problem...I modified the files "Makefile" in the module's folder to use the version 1.1.7 of freeradius-client.
>>> 
>>> Regards.
>>> 
>>> 2017-08-08 15:30 GMT-04:00 Joseph Waite <joelists at tm.net.uk <mailto:joelists at tm.net.uk>>:
>>> Hi
>>> 
>>> I am using both, I need to do authentication from within the dial plan for IP authenticated users, so I use mod_rad_auth for this and mod_xml_radius for user auth and accounting.
>>> 
>>> I think I have found the issue, Freeswitch actually downloads free radius client and in the stable branch the makefiles for both modules specifies 1.1.6 so changed to 1.1.7 and recompiling everything.
>>> 
>>> Will update if this solves the issues.
>>> 
>>> Regards
>>> 
>>>> On 8 Aug 2017, at 20:21, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net <mailto:jpgodoy at redvoiss.net>> wrote:
>>>> 
>>>> Actually, I'm not using radauth module. I use mod_xml_radius instead, it's newer and you have accounting support too. The implementation it's similar compared to radauth module.
>>>> 
>>>> Regards,
>>>> Juan Pablo Godoy.
>>>> 
>>>> 2017-08-08 14:40 GMT-04:00 Joseph Waite <joelists at tm.net.uk <mailto:joelists at tm.net.uk>>:
>>>> Hi
>>>> 
>>>> I have done a fresh install and used freeradius-client 1.1.7 but still have this issue, Did you have to make any config changes to free radius client?
>>>> 
>>>> Regards
>>>> 
>>>>> On 8 Aug 2017, at 16:38, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net <mailto:jpgodoy at redvoiss.net>> wrote:
>>>>> 
>>>>> Hello,
>>>>> 
>>>>> I had the same problem. Compile the radius module with freeradius-client 1.1.7
>>>>> 
>>>>> Regards,
>>>>> Juan Pablo Godoy.
>>>>> 
>>>>> 2017-08-07 18:55 GMT-04:00 Joseph Waite <joelists at tm.net.uk <mailto:joelists at tm.net.uk>>:
>>>>> Hi Guys
>>>>> 
>>>>> I am having a strange issue, when I have more than about 450 concurrent calls, rad_auth seems to fail to authorise calls.
>>>>> 
>>>>> I see the Radius request received and replied with RAD-ACCEPT from the Radius server but I get the following error
>>>>> 
>>>>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:504  RADIUS Authentication failure (RC=1)
>>>>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:702 An error occured during radius authorization.
>>>>> 
>>>>> I have had a look as ulimit and seems to be fine.
>>>>> 
>>>>> core file size          (blocks, -c) 0
>>>>> data seg size           (kbytes, -d) unlimited
>>>>> scheduling priority             (-e) 0
>>>>> file size               (blocks, -f) unlimited
>>>>> pending signals                 (-i) 128716
>>>>> max locked memory       (kbytes, -l) 64
>>>>> max memory size         (kbytes, -m) unlimited
>>>>> open files                      (-n) 65536
>>>>> pipe size            (512 bytes, -p) 8
>>>>> POSIX message queues     (bytes, -q) 819200
>>>>> real-time priority              (-r) 0
>>>>> stack size              (kbytes, -s) 8192
>>>>> cpu time               (seconds, -t) unlimited
>>>>> max user processes              (-u) 128716
>>>>> virtual memory          (kbytes, -v) unlimited
>>>>> file locks                      (-x) unlimited
>>>>> 
>>>>> Anyone have any ideas?
>>>>> 
>>>>> Regards
>>>>> 
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>>> 
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>>> 
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>> 
>>>>> _________________________________________________________________________
>>>>> Professional FreeSWITCH Consulting Services:
>>>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>>> 
>>>>> Official FreeSWITCH Sites
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>>> 
>>>>> FreeSWITCH-users mailing list
>>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> 
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>> 
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>> 
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> 
>>>> _________________________________________________________________________
>>>> Professional FreeSWITCH Consulting Services:
>>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>>> 
>>>> Official FreeSWITCH Sites
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>>> http://www.cluecon.com <http://www.cluecon.com/>
>>>> 
>>>> FreeSWITCH-users mailing list
>>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>> 
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>> 
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>> http://www.cluecon.com <http://www.cluecon.com/>
>>> 
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>> 
>>> _________________________________________________________________________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>>> 
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>>> http://www.cluecon.com <http://www.cluecon.com/>
>>> 
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
>> 
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org <http://www.freeswitch.org/>
>> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
>> http://www.cluecon.com <http://www.cluecon.com/>
>> 
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
>> http://www.freeswitch.org <http://www.freeswitch.org/>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/>
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org <http://www.freeswitch.org/>
> http://confluence.freeswitch.org <http://confluence.freeswitch.org/>
> http://www.cluecon.com <http://www.cluecon.com/>
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users>
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users>
> http://www.freeswitch.org <http://www.freeswitch.org/>_________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
> 
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
> 
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170815/91f46b56/attachment-0001.html>

More information about the FreeSWITCH-users mailing list