Date: Thu, 2 Apr 1998 17:48:01 -0500 (EST) From: Paul Sandys <myj@nyct.net> To: Steve Ames <steve@ns1.cioe.com> Cc: freebsd-isp@FreeBSD.ORG Subject: Re: cistron radius Message-ID: <Pine.BSF.3.96.980402173030.470A-100000@bsd3.nyct.net> In-Reply-To: <199804021648.LAA27181@ns1.cioe.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 2 Apr 1998, Steve Ames wrote: > Date: Thu, 2 Apr 1998 11:48:47 -0500 (EST) > From: Steve Ames <steve@ns1.cioe.com> > To: freebsd-isp@FreeBSD.ORG > Subject: cistron radius > > > Got and installed Ciscron Radius 1.5.4.2. Have a couple of questions > if anyone out there also uses it... > > 1) the /var/log/radutmp file started out working great for the first > couple of logins and then shot up to 40M and stuff stopped > working. The 2nd radius process (for accounting?) started eating > 92% of the CPU and just wouldn't go away. I let it run for maybe > 15 minutes. Ideas? I had the same problem. From what I've seen, the acct.c is the problem. It uses lseek when it deletes users from radutmp file. Here's a snip of the code: if (lseek(fd, -sizeof(u), SEEK_CUR) < 0) { log(L_ERR, "Accounting: negative lseek!\n"); lseek(fd, 0, SEEK_SET); } On FreeBSD -sizeof(u) generates 32-bit result, but FreeBSD lseek expects 64-bit offset. Thats why your file grows to (4096MB - 100 bytes). I changed all -sizeof(u) arguments to -100, and everything seems to be running fine now for 3 weeks. > > 2) I want to use cistron in conjuction with a 3COM Total Control > system. Anyone got a checklogin script that can do this? > Yes, I have one, which uses pmwho command. It has two problems: 1. The multilink ISDN connections are not detected properly, since USR shows < MPlink: I* > as a username which is hard to match properly. 2. Multiple pmwhos take so long to execute, that radiusd starts to timeout. I fixed that by bumping up timeout in radiusd.h: < #define MAX_REQUEST_TIME 30 > #define MAX_REQUEST_TIME 120 > All help appreciated (and needed :) > > -Steve > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > P. <-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-> < myj@nyct.net Paul Sandys | New York Connect http://www.nyct.net > < network operations manager | Total Solution provider > <-------------------------------------------------------------------------> < " BRINGING NEW YORK THE INTERNET SERVICES IT DESERVES " > <-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980402173030.470A-100000>