From owner-freebsd-net Mon Mar 3 11: 6:38 2003 Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 09A2237B401 for ; Mon, 3 Mar 2003 11:06:37 -0800 (PST) Received: from jawa.at (inforum.at [213.229.17.146]) by mx1.FreeBSD.org (Postfix) with ESMTP id AF49B43FCB for ; Mon, 3 Mar 2003 11:06:35 -0800 (PST) (envelope-from mbretter@jawa.at) Received: from jawa.at (worf.jawa.at [192.168.201.12]) by jawa.at (8.12.6/8.12.6) with ESMTP id h23J6R07007413; Mon, 3 Mar 2003 20:06:27 +0100 (CET) (envelope-from mbretter@jawa.at) Message-ID: <3E63A75D.6090904@jawa.at> Date: Mon, 03 Mar 2003 20:05:01 +0100 From: Michael Bretterklieber User-Agent: Mozilla/5.0 (X11; U; Linux i386; de-AT; rv:1.1) Gecko/20020826 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Vincent Jardin Cc: net@FreeBSD.ORG, Archie Cobbs Subject: Re: [mpd] radius and dynamic bundles References: <200303022347.10283.vjardin@wanadoo.fr> <3E63245D.6040800@jawa.at> <200303031827.54786.vjardin@wanadoo.fr> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-milter (http://amavis.org/) X-Spam-Status: No, hits=-1.8 required=5.0 tests=QUOTED_EMAIL_TEXT,REFERENCES,SPAM_PHRASE_00_01,USER_AGENT, USER_AGENT_MOZILLA_UA,X_ACCEPT_LANG version=2.43 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, Vincent Jardin wrote: > On Monday 03 March 2003 09:46, Michael Bretterklieber wrote: > >>Hi, >> >>Vincent Jardin schrieb: >> >>>1/ When Radius is used with mpd and the answer delay of the Radius server >>>is high, how can some PAP or CHAP timeout be avoided ? >> >>you mean, that the client times out during authentication saying that >>the server didn't responded? > > > Yes, that the main problem that happens sometimes. > > >>A known issue is that mpd is blocked during RADIUS requests, the >>solution will be to change from rad_send_request(); to >>rad_init_send_request() and rad_continue_send_request(); to avoid >>blocking of mpd. >> >>I have this on my todo-list, but atm it has low prio. > > > It does not look to be simple because the whole PAP and CHAP authentication > are processed by PapInput() and ChapInput() that call RadiusPAPAuthenticate() > and RadiusCHAPAuthenticate(). It is a synchronous call. In order to use > rad_init_send_request() and rad_continue_send_request(), PapInput() and > ChapInput() need to be splitted, doesn't they ? hmm, IMO, yes we must detect somewhere that a RADIUS request is already in progress and skip some code, and if the request is finished we have only to send the response back to the peer. I plan delivering patches to Archie in this week for enhanced RADIUS support (incl. accounting) for the next Version of mpd, however I will have a look at this problem and see how tricky is this to implement. bye, -- ------------------------------- ------------------------------------- Michael Bretterklieber - Michael.Bretterklieber@jawa.at JAWA Management Software GmbH - http://www.jawa.at Liebenauer Hauptstr. 200 -------------- privat --------------- A-8041 GRAZ GSM: ++43-(0)676-93 96 698 Tel: ++43-(0)316-403274-12 E-mail: michael@bretterklieber.com Fax: ++43-(0)316-403274-10 http://www.bretterklieber.com ------------------------------- ------------------------------------- "...the number of UNIX installations has grown to 10, with more expected..." - Dennis Ritchie and Ken Thompson, June 1972 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message