[Freeswitch-users] rad_auth failing under load

Tue Aug 8 19:38:38 UTC 2017

That's the problem...I modified the files "Makefile" in the module's folder
to use the version 1.1.7 of freeradius-client.

Regards.

2017-08-08 15:30 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:

> Hi
>
> I am using both, I need to do authentication from within the dial plan for
> IP authenticated users, so I use mod_rad_auth for this and mod_xml_radius
> for user auth and accounting.
>
> I think I have found the issue, Freeswitch actually downloads free radius
> client and in the stable branch the makefiles for both modules specifies
> 1.1.6 so changed to 1.1.7 and recompiling everything.
>
> Will update if this solves the issues.
>
> Regards
>
> On 8 Aug 2017, at 20:21, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net>
> wrote:
>
> Actually, I'm not using radauth module. I use mod_xml_radius instead, it's
> newer and you have accounting support too. The implementation it's similar
> compared to radauth module.
>
> Regards,
> Juan Pablo Godoy.
>
> 2017-08-08 14:40 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:
>
>> Hi
>>
>> I have done a fresh install and used freeradius-client 1.1.7 but still
>> have this issue, Did you have to make any config changes to free radius
>> client?
>>
>> Regards
>>
>> On 8 Aug 2017, at 16:38, Juan Pablo Godoy Macari <jpgodoy at redvoiss.net>
>> wrote:
>>
>> Hello,
>>
>> I had the same problem. Compile the radius module with freeradius-client
>> 1.1.7
>>
>> Regards,
>> Juan Pablo Godoy.
>>
>> 2017-08-07 18:55 GMT-04:00 Joseph Waite <joelists at tm.net.uk>:
>>
>>> Hi Guys
>>>
>>> I am having a strange issue, when I have more than about 450 concurrent
>>> calls, rad_auth seems to fail to authorise calls.
>>>
>>> I see the Radius request received and replied with RAD-ACCEPT from the
>>> Radius server but I get the following error
>>>
>>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:504  RADIUS
>>> Authentication failure (RC=1)
>>> 2017-08-07 18:29:53.202133 [ERR] mod_rad_auth.c:702 An error occured
>>> during radius authorization.
>>>
>>> I have had a look as ulimit and seems to be fine.
>>>
>>> core file size          (blocks, -c) 0
>>> data seg size           (kbytes, -d) unlimited
>>> scheduling priority             (-e) 0
>>> file size               (blocks, -f) unlimited
>>> pending signals                 (-i) 128716
>>> max locked memory       (kbytes, -l) 64
>>> max memory size         (kbytes, -m) unlimited
>>> open files                      (-n) 65536
>>> pipe size            (512 bytes, -p) 8
>>> POSIX message queues     (bytes, -q) 819200
>>> real-time priority              (-r) 0
>>> stack size              (kbytes, -s) 8192
>>> cpu time               (seconds, -t) unlimited
>>> max user processes              (-u) 128716
>>> virtual memory          (kbytes, -v) unlimited
>>> file locks                      (-x) unlimited
>>>
>>> Anyone have any ideas?
>>>
>>> Regards
>>>
>>> ____________________________________________________________
>>> _____________
>>> Professional FreeSWITCH Consulting Services:
>>> consulting at freeswitch.org
>>> http://www.freeswitchsolutions.com
>>>
>>> Official FreeSWITCH Sites
>>> http://www.freeswitch.org
>>> http://confluence.freeswitch.org
>>> http://www.cluecon.com
>>>
>>> FreeSWITCH-users mailing list
>>> FreeSWITCH-users at lists.freeswitch.org
>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>>> http://www.freeswitch.org
>>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
>
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://confluence.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20170808/5644ac00/attachment.html>