From owner-freebsd-isp Thu Apr 2 14:48:28 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id OAA22666 for freebsd-isp-outgoing; Thu, 2 Apr 1998 14:48:28 -0800 (PST) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from bsd3.nyct.net (bsd3.nyct.net [204.141.86.7]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA22608 for ; Thu, 2 Apr 1998 14:48:10 -0800 (PST) (envelope-from myj@bsd3.nyct.net) Received: (from myj@localhost) by bsd3.nyct.net (8.8.8/8.8.5) id RAA00647; Thu, 2 Apr 1998 17:48:01 -0500 (EST) Date: Thu, 2 Apr 1998 17:48:01 -0500 (EST) From: Paul Sandys To: Steve Ames cc: freebsd-isp@FreeBSD.ORG Subject: Re: cistron radius In-Reply-To: <199804021648.LAA27181@ns1.cioe.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 2 Apr 1998, Steve Ames wrote: > Date: Thu, 2 Apr 1998 11:48:47 -0500 (EST) > From: Steve Ames > To: freebsd-isp@FreeBSD.ORG > Subject: cistron radius > > > Got and installed Ciscron Radius 1.5.4.2. Have a couple of questions > if anyone out there also uses it... > > 1) the /var/log/radutmp file started out working great for the first > couple of logins and then shot up to 40M and stuff stopped > working. The 2nd radius process (for accounting?) started eating > 92% of the CPU and just wouldn't go away. I let it run for maybe > 15 minutes. Ideas? I had the same problem. From what I've seen, the acct.c is the problem. It uses lseek when it deletes users from radutmp file. Here's a snip of the code: if (lseek(fd, -sizeof(u), SEEK_CUR) < 0) { log(L_ERR, "Accounting: negative lseek!\n"); lseek(fd, 0, SEEK_SET); } On FreeBSD -sizeof(u) generates 32-bit result, but FreeBSD lseek expects 64-bit offset. Thats why your file grows to (4096MB - 100 bytes). I changed all -sizeof(u) arguments to -100, and everything seems to be running fine now for 3 weeks. > > 2) I want to use cistron in conjuction with a 3COM Total Control > system. Anyone got a checklogin script that can do this? > Yes, I have one, which uses pmwho command. It has two problems: 1. The multilink ISDN connections are not detected properly, since USR shows < MPlink: I* > as a username which is hard to match properly. 2. Multiple pmwhos take so long to execute, that radiusd starts to timeout. I fixed that by bumping up timeout in radiusd.h: < #define MAX_REQUEST_TIME 30 > #define MAX_REQUEST_TIME 120 > All help appreciated (and needed :) > > -Steve > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-isp" in the body of the message > P. <-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-> < myj@nyct.net Paul Sandys | New York Connect http://www.nyct.net > < network operations manager | Total Solution provider > <-------------------------------------------------------------------------> < " BRINGING NEW YORK THE INTERNET SERVICES IT DESERVES " > <-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message