Radius dies frequently

"Dan Beldiman" <[email protected]>
Newsgroups gmane.comp.gnu.radius.general
Message-ID <[email protected]>
Hi,

Since last week I have the problem that my radius server is frequently
stopping to work.
I am using GNU Radius version 1.2 on Linux with MySQL, and it has been
working fine for a long time.

On Tuesday last week, gnu radius died for the first time.
The radius server was not completely unresponsive, it did reply all request
with DENY messages (which prevented a failover)

The log files showed the following:


Jan 18 06:49:28 Main.info: Reloading configuration now
Jan 18 06:49:28 Main.info: Terminating the subprocesses
Jan 18 06:49:28 Main.notice: child 23102 exited with status 0
Jan 18 06:49:28 Main.notice: child 23098 exited with status 0
Jan 18 06:49:28 Main.notice: child 23094 exited with status 0
(this line for about 12 child processes)



The log file showed some strange messages for the time before the outage:

Jan 18 06:29:47 Auth.notice: Killing unresponsive ACCT child 20528
Jan 18 06:29:47 Auth.notice: Killing unresponsive ACCT child 21260
Jan 18 06:29:47 Main.notice: child 21260 terminated on signal 9
Jan 18 06:29:47 Main.notice: child 20528 terminated on signal 9
Jan 18 06:29:47 Auth.notice: (Access-Request local 138 "NE-Radius-Test"):
Login OK [NE-Radius-Test]
Jan 18 06:29:49 Auth.notice: (Access-Request local 70 "notExist"): No such
user [notExist]
Jan 18 06:29:59 Auth.notice: Killing unresponsive ACCT child 22794
Jan 18 06:29:59 Auth.notice: Killing unresponsive ACCT child 22800
Jan 18 06:29:59 Auth.notice: Killing unresponsive ACCT child 22802
Jan 18 06:29:59 Main.notice: child 22802 terminated on signal 9
Jan 18 06:29:59 Main.notice: child 22800 terminated on signal 9
Jan 18 06:29:59 Main.notice: child 22794 terminated on signal 9
Jan 18 06:30:00 Auth.notice: (Access-Request VPN1 59 "Test" CLID=xxx
CSID=x): Login OK [TEST]
Jan 18 06:30:01 Acct.notice: Killing unresponsive ACCT child 22804
Jan 18 06:30:01 Main.notice: child 22804 terminated on signal 9
Jan 18 06:30:04 Acct.info: login: entry for NAS 172.xxx port 26508 duplicate
Jan 18 06:30:07 Acct.info: login: entry for NAS 172.xxx port 26508 duplicate
Jan 18 06:30:14 Acct.info: login: entry for NAS 172.xxx port 26508 duplicate
Jan 18 06:30:17 Acct.notice: Killing unresponsive ACCT child 22832
Jan 18 06:30:17 Main.notice: child 22832 terminated on signal 9
Jan 18 06:30:17 Acct.info: login: entry for NAS 172.xxx port 26508 duplicate
Jan 18 06:30:28 Acct.notice: Killing unresponsive ACCT child 22835
Jan 18 06:30:28 Acct.notice: Killing unresponsive ACCT child 22837
Jan 18 06:30:28 Acct.notice: Killing unresponsive ACCT child 22839
Jan 18 06:30:28 Main.notice: child 22839 terminated on signal 9
Jan 18 06:30:28 Main.notice: child 22837 terminated on signal 9
Jan 18 06:30:28 Main.notice: child 22835 terminated on signal 9
Jan 18 06:30:50 Auth.notice: Killing unresponsive ACCT child 22841
Jan 18 06:30:50 Auth.notice: Killing unresponsive ACCT child 22843
Jan 18 06:30:50 Main.notice: child 22841 terminated on signal 9
Jan 18 06:30:50 Main.notice: child 22843 terminated on signal 9
Jan 18 06:30:51 Auth.notice: (Access-Request VPN1 62 "Test" CLID=xxx
CSID=x): Login OK [TEST]

about 15 minutes later it dies.
Checking the past log files, I noted that every morning around 6:30, and
only at this time,  the radius server was killing unresponsive ACCT child
processes.
I do not know if this is related to radius not responding anymore, but I had
the radius server fail two more times at around 6:45 AM, and once at a
different time.

The last messages in the log file are always something like this:
Jan 25 00:04:48 Acct.info: Child exiting on timeout.
Jan 25 00:04:49 Acct.info: Child exiting on timeout.
Jan 25 00:04:49 Acct.info: Child exiting on timeout.
Jan 25 00:08:53 Acct.error: Child received malformed header (len = 0, error
= Success)
Jan 25 00:08:53 Acct.error: Child received malformed header (len = 0, error
= Success)


I found in the mailing lists similar problems, but for older versions of the
radius server.
Does anyone have a clue what the problem might be?

Thanks

Dan
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.