Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 2 Apr 1998 17:48:01 -0500 (EST)
From:      Paul Sandys <myj@nyct.net>
To:        Steve Ames <steve@ns1.cioe.com>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: cistron radius
Message-ID:  <Pine.BSF.3.96.980402173030.470A-100000@bsd3.nyct.net>
In-Reply-To: <199804021648.LAA27181@ns1.cioe.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 2 Apr 1998, Steve Ames wrote:

> Date: Thu, 2 Apr 1998 11:48:47 -0500 (EST)
> From: Steve Ames <steve@ns1.cioe.com>
> To: freebsd-isp@FreeBSD.ORG
> Subject: cistron radius
> 
> 
> Got and installed Ciscron Radius 1.5.4.2. Have a couple of questions
> if anyone out there also uses it...
> 
> 1) the /var/log/radutmp file started out working great for the first
>    couple of logins and then shot up to 40M and stuff stopped 
>    working. The 2nd radius process (for accounting?) started eating
>    92% of the CPU and just wouldn't go away. I let it run for maybe
>    15 minutes. Ideas?

I had the same problem. From what I've seen, the acct.c is the problem. It
uses lseek when it deletes users from radutmp file. Here's a snip of the
code:

if (lseek(fd, -sizeof(u), SEEK_CUR) < 0) {
	log(L_ERR, "Accounting: negative lseek!\n");
	lseek(fd, 0, SEEK_SET);
	}

On FreeBSD -sizeof(u) generates 32-bit result, but FreeBSD lseek expects
64-bit offset. Thats why your file grows to (4096MB - 100 bytes). I
changed all -sizeof(u) arguments to -100, and everything seems to be
running fine now for 3 weeks.


> 
> 2) I want to use cistron in conjuction with a 3COM Total Control
>    system. Anyone got a checklogin script that can do this?
> 

Yes, I have one, which uses pmwho command. It has two problems:

1. The multilink ISDN connections are not detected properly, since USR
shows < MPlink: I* > as a username which is hard to match properly.

2. Multiple pmwhos take so long to execute, that radiusd starts to
timeout. I fixed that by bumping up timeout in radiusd.h:

< #define MAX_REQUEST_TIME        30
> #define MAX_REQUEST_TIME        120


> All help appreciated (and needed :)
> 
> 						-Steve
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 

P.

<-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_->
< myj@nyct.net   Paul Sandys   |   New York Connect   http://www.nyct.net >
< network operations manager   |   Total Solution provider                >
<------------------------------------------------------------------------->
<         " BRINGING NEW YORK THE INTERNET SERVICES IT DESERVES "         >
<-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_->


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980402173030.470A-100000>